last executing test programs: 21m50.876258101s ago: executing program 1 (id=3844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xe}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x820}, 0x0) 21m50.821668067s ago: executing program 1 (id=3846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 21m50.720091762s ago: executing program 1 (id=3850): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe4) close(r0) 21m50.690766046s ago: executing program 1 (id=3852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000000000085000000a600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 21m50.6165078s ago: executing program 1 (id=3855): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) 21m50.588229665s ago: executing program 1 (id=3856): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0xec, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) 21m35.512096895s ago: executing program 32 (id=3856): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0xec, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) 20m53.152332778s ago: executing program 5 (id=4839): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xfffffffffdfffffc) 20m53.030424109s ago: executing program 5 (id=4841): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 20m52.70989685s ago: executing program 5 (id=4846): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455cb, 0x4) 20m52.52705014s ago: executing program 5 (id=4852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a00000000046c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a320000000014000000110001"], 0x11c}}, 0x0) close(r0) 20m52.433368123s ago: executing program 5 (id=4858): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./sys/kernel/tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) 20m52.33067381s ago: executing program 5 (id=4862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) 20m37.184599389s ago: executing program 33 (id=4862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) 18m7.260846394s ago: executing program 0 (id=6151): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x1, 0x0) lseek(r0, 0x8, 0x3) 18m2.064448789s ago: executing program 0 (id=6157): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17m57.770679163s ago: executing program 0 (id=6161): r0 = open(&(0x7f0000009880)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000009d00)="e95b68b5487c38cc01186db9ef58d0cf", 0x10) 17m53.706709519s ago: executing program 0 (id=6164): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000cc0)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0) 17m50.405578241s ago: executing program 0 (id=6169): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000580)='./proc\x00', 0x0, 0xf6ff, 0x0) 17m44.145264239s ago: executing program 0 (id=6173): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 17m26.628830107s ago: executing program 34 (id=6173): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 16m17.856478911s ago: executing program 3 (id=6211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 16m8.363697808s ago: executing program 3 (id=6215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x15, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}]}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000001180)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 16m3.319010034s ago: executing program 4 (id=6218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 15m58.64968885s ago: executing program 3 (id=6219): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0xf) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000840)) 15m53.39123863s ago: executing program 4 (id=6222): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) pselect6(0x40, &(0x7f0000002140)={0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x2, 0x800000}, 0x0, &(0x7f0000002180)={0x8, 0x3, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, 0x0, 0x0) write$FUSE_LK(r0, &(0x7f00000021c0)={0x28, 0x0, r1, {{0x8, 0x40, 0x2}}}, 0x28) 15m47.299625195s ago: executing program 3 (id=6223): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept$inet6(0xffffffffffffffff, 0x0, 0x0) 15m43.767900442s ago: executing program 4 (id=6226): r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x1, 0x100081) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000900)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x300) 15m38.430217927s ago: executing program 3 (id=6227): syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x201) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 15m31.868297742s ago: executing program 4 (id=6230): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xcb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x7e) 15m29.12882046s ago: executing program 3 (id=6231): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000640)={'vlan0\x00', @remote}) lseek(r0, 0x4, 0x0) 15m23.980196633s ago: executing program 4 (id=6234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x37b7c54e}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 15m14.756016183s ago: executing program 4 (id=6237): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000640)=[{r0, 0x2103}], 0x1, 0x0, 0x0, 0x0) 15m11.30924937s ago: executing program 35 (id=6231): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000640)={'vlan0\x00', @remote}) lseek(r0, 0x4, 0x0) 14m57.072920519s ago: executing program 36 (id=6237): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000640)=[{r0, 0x2103}], 0x1, 0x0, 0x0, 0x0) 14m34.076708667s ago: executing program 2 (id=6246): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmodat(0xffffffffffffffff, 0x0, 0x15c) 14m22.509830284s ago: executing program 2 (id=6248): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000006c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000700)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000780)={{@hyper, 0x2}, 0x1, 0x3, 0x69c9, 0x4, 0xf3d, 0x385a2d2f, 0x4, 0x100000000}) 14m11.496821207s ago: executing program 2 (id=6250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0xcc0, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m1.258025206s ago: executing program 2 (id=6252): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/kvm_amd/parameters/avic\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) 13m49.722657688s ago: executing program 2 (id=6254): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002c00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x2, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x1, 0xff14) 13m38.882135782s ago: executing program 2 (id=6256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x25dfdbfc, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010500000000000000000a00000000000000080001000100000008000500", @ANYRES32=0x1], 0x38}}, 0x0) 13m21.443757428s ago: executing program 37 (id=6256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x25dfdbfc, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010500000000000000000a00000000000000080001000100000008000500", @ANYRES32=0x1], 0x38}}, 0x0) 1m18.361852135s ago: executing program 6 (id=6327): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_tgsigqueueinfo(0x0, 0x0, 0x2f, 0x0) 1m7.927730486s ago: executing program 6 (id=6328): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) 55.655843668s ago: executing program 6 (id=6329): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dbg\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dbg/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+ 1 0 0', 0x7) 43.11507402s ago: executing program 6 (id=6330): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x8, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback, 0x40}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)='\x00', 0x1}], 0x1}}], 0x1, 0x34000091) 31.775312715s ago: executing program 6 (id=6331): r0 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x800, 0x0, 0x2}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000280), 0x8) 19.116360992s ago: executing program 6 (id=6332): syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) 0s ago: executing program 38 (id=6332): syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) kernel console output (not intermixed with test programs): sconnect, device number 85 [ 355.667758][T18225] fido_id[18225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 355.846831][T18239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.090873][T18258] team0: Device is already in use. [ 356.262556][T18269] syz_tun: entered allmulticast mode [ 356.263182][T18269] syz_tun: left allmulticast mode [ 356.475250][ T5700] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 356.633430][ T5700] usb 3-1: Using ep0 maxpacket: 16 [ 356.633919][ T5700] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 356.635395][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.635422][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.635441][ T5700] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 356.635487][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.640823][ T5700] usb 3-1: config 0 descriptor?? [ 356.644766][T18298] binder: 18297:18298 ioctl c00c620f 200000000700 returned -22 [ 356.689982][T18301] netlink: 'syz.3.5484': attribute type 12 has an invalid length. [ 356.690001][T18301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5484'. [ 356.772544][T18306] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5483'. [ 356.772568][T18306] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5483'. [ 356.790148][T18309] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5486'. [ 357.092753][ T5700] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.009E/input/input130 [ 357.126214][T18334] IPVS: stopping master sync thread 13276 ... [ 357.148894][ T5700] microsoft 0003:045E:07DA.009E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 357.314139][ T10] usb 3-1: USB disconnect, device number 90 [ 357.403639][ T5700] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 357.480884][T18353] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5503'. [ 357.554109][ T5700] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 357.557797][ T5700] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 357.557823][ T5700] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 357.557841][ T5700] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 357.557861][ T5700] usb 4-1: config 220 has no interface number 2 [ 357.557917][ T5700] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 357.557943][ T5700] usb 4-1: config 220 interface 0 has no altsetting 0 [ 357.557961][ T5700] usb 4-1: config 220 interface 76 has no altsetting 0 [ 357.557979][ T5700] usb 4-1: config 220 interface 1 has no altsetting 0 [ 357.559848][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.559871][ T5700] usb 4-1: Product: syz [ 357.559894][ T5700] usb 4-1: Manufacturer: syz [ 357.559909][ T5700] usb 4-1: SerialNumber: syz [ 357.561098][T18361] jffs2: notice: (18361) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 357.737290][T18373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5512'. [ 357.803937][ T5700] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 357.803970][ T5700] uvcvideo 4-1:220.0: No valid video chain found. [ 357.804016][ T5700] usb 4-1: selecting invalid altsetting 0 [ 357.848530][ T5700] usb 4-1: selecting invalid altsetting 0 [ 357.848559][ T5700] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 357.850615][ T5700] usb 4-1: USB disconnect, device number 89 [ 357.974130][T18383] lo speed is unknown, defaulting to 1000 [ 358.271076][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 358.271094][ T30] audit: type=1400 audit(1792493469.998:1734): avc: denied { bind } for pid=18400 comm="syz.2.5524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 358.878935][ T30] audit: type=1400 audit(1792493470.608:1735): avc: denied { setopt } for pid=18425 comm="syz.3.5538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 359.104623][T18436] tun0: tun_chr_ioctl cmd 1074025675 [ 359.104690][T18436] tun0: persist disabled [ 359.188534][ T30] audit: type=1400 audit(1792493470.918:1736): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 359.873754][ T5814] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 360.023624][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 360.030102][ T5814] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 360.030657][ T5814] usb 1-1: config 0 has no interfaces? [ 360.030684][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.032744][ T5814] usb 1-1: config 0 descriptor?? [ 360.236658][ T5814] usb 1-1: USB disconnect, device number 86 [ 360.265491][ T30] audit: type=1400 audit(1792493471.998:1737): avc: denied { read } for pid=18463 comm="syz.2.5555" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 360.265735][ T30] audit: type=1400 audit(1792493471.998:1738): avc: denied { open } for pid=18463 comm="syz.2.5555" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 360.268984][ T30] audit: type=1400 audit(1792493471.998:1739): avc: denied { ioctl } for pid=18463 comm="syz.2.5555" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 360.268989][T18464] autofs4:pid:18464:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(10.3), cmd(0xc018937a) [ 360.269013][T18464] autofs4:pid:18464:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937a) [ 360.347611][ T30] audit: type=1400 audit(1792493472.068:1740): avc: denied { create } for pid=18465 comm="syz.2.5556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 360.347657][ T30] audit: type=1400 audit(1792493472.068:1741): avc: denied { connect } for pid=18465 comm="syz.2.5556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 360.468404][ T30] audit: type=1400 audit(1792493472.198:1742): avc: denied { ioctl } for pid=18469 comm="syz.2.5558" path="socket:[56175]" dev="sockfs" ino=56175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 360.509449][T18472] lo: entered allmulticast mode [ 360.512200][T18472] bond0: entered allmulticast mode [ 360.512645][T18472] dummy0: entered allmulticast mode [ 360.512820][T18472] eql: entered allmulticast mode [ 360.513012][T18472] ifb0: entered allmulticast mode [ 360.513205][T18472] ifb1: entered allmulticast mode [ 360.520985][T18472] virtio_net virtio1 eth0: entered allmulticast mode [ 360.521423][T18472] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 360.522571][T18472] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 360.522761][T18472] hwsim0: entered allmulticast mode [ 360.522900][T18472] ieee802154 phy0 wpan0: entered allmulticast mode [ 360.523023][T18472] ieee802154 phy1 wpan1: entered allmulticast mode [ 360.523140][T18472] teql0: entered allmulticast mode [ 360.523193][T18472] tunl0: entered allmulticast mode [ 360.523297][T18472] gre0: entered allmulticast mode [ 360.531998][T18472] gretap0: entered allmulticast mode [ 360.532058][T18472] erspan0: entered allmulticast mode [ 360.532118][T18472] ip_vti0: entered allmulticast mode [ 360.532172][T18472] ip6_vti0: entered allmulticast mode [ 360.532226][T18472] sit0: entered allmulticast mode [ 360.532288][T18472] ip6tnl0: entered allmulticast mode [ 360.532346][T18472] ip6gre0: entered allmulticast mode [ 360.532411][T18472] lapb0: entered allmulticast mode [ 360.537020][T18472] lapb1: entered allmulticast mode [ 360.537080][T18472] lapb2: entered allmulticast mode [ 360.537409][T18472] lapb3: entered allmulticast mode [ 360.537687][T18472] lapb4: entered allmulticast mode [ 360.537743][T18472] lapb5: entered allmulticast mode [ 360.538065][T18472] lowpan0: entered allmulticast mode [ 360.538185][T18472] rxe_eth0: entered allmulticast mode [ 360.540008][T18472] wireguard0: entered allmulticast mode [ 360.540228][T18472] ieee802154 phy1 wpan3: entered allmulticast mode [ 360.540286][T18472] geneve0: entered allmulticast mode [ 360.540451][T18472] lapb6: entered allmulticast mode [ 360.541019][T18472] bridge0: entered allmulticast mode [ 360.541097][T18472] veth0_vlan: entered allmulticast mode [ 360.542936][T18472] lapb7: entered allmulticast mode [ 360.544625][T18472] netdevsim netdevsim1 eth1: entered allmulticast mode [ 360.545045][T18472] netdevsim netdevsim1 eth2: entered allmulticast mode [ 360.545403][T18472] netdevsim netdevsim1 eth3: entered allmulticast mode [ 360.545812][T18472] netdevsim netdevsim1 eth4: entered allmulticast mode [ 360.546177][T18472] netdevsim netdevsim5 eth5: entered allmulticast mode [ 360.547759][T18472] netdevsim netdevsim5 eth6: entered allmulticast mode [ 360.548402][T18472] netdevsim netdevsim5 eth7: entered allmulticast mode [ 360.549053][T18472] netdevsim netdevsim5 eth8: entered allmulticast mode [ 360.707788][ T30] audit: type=1400 audit(1792493472.438:1743): avc: denied { connect } for pid=18473 comm="syz.6.5560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 361.093492][ T10] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 361.254529][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 361.256429][ T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 361.259082][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.259104][ T10] usb 1-1: Product: syz [ 361.259118][ T10] usb 1-1: Manufacturer: syz [ 361.259131][ T10] usb 1-1: SerialNumber: syz [ 361.261162][ T10] usb 1-1: config 0 descriptor?? [ 361.734972][ T10] airspy 1-1:0.0: Board ID: 00 [ 361.734993][ T10] airspy 1-1:0.0: Firmware version: [ 361.947524][ T10] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 361.953228][ T10] airspy 1-1:0.0: Registered as swradio24 [ 361.953248][ T10] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 361.978594][ T10] usb 1-1: USB disconnect, device number 87 [ 364.363583][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 364.363600][ T30] audit: type=1400 audit(1792493476.088:1753): avc: denied { name_bind } for pid=18513 comm="syz.3.5577" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 364.368691][ T30] audit: type=1400 audit(1792493476.098:1754): avc: denied { node_bind } for pid=18513 comm="syz.3.5577" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 364.732839][T18535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5590'. [ 364.732861][T18535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.732875][T18535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.766397][T18535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.766418][T18535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.068404][T18558] GUP no longer grows the stack in syz.6.5600 (18558): 200000004000-200000005000 (200000001000) [ 365.068437][T18558] CPU: 0 UID: 0 PID: 18558 Comm: syz.6.5600 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.068464][T18558] Tainted: [L]=SOFTLOCKUP [ 365.068472][T18558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 365.068484][T18558] Call Trace: [ 365.068491][T18558] [ 365.068500][T18558] dump_stack_lvl+0x100/0x190 [ 365.068534][T18558] gup_vma_lookup.cold+0x83/0x96 [ 365.068565][T18558] __get_user_pages+0x252/0x2c30 [ 365.068602][T18558] ? __pfx___get_user_pages+0x10/0x10 [ 365.068628][T18558] ? __pfx_down_read_killable+0x10/0x10 [ 365.068650][T18558] ? __lock_acquire+0x5c0/0x1f40 [ 365.068680][T18558] __gup_longterm_locked+0x87d/0x16f0 [ 365.068715][T18558] ? __pfx___gup_longterm_locked+0x10/0x10 [ 365.068742][T18558] ? lock_acquire+0x1d1/0x380 [ 365.068763][T18558] ? gup_fast_fallback+0x946/0x2790 [ 365.068797][T18558] gup_fast_fallback+0x16dc/0x2790 [ 365.068842][T18558] ? __pfx_gup_fast_fallback+0x10/0x10 [ 365.068870][T18558] ? __lock_acquire+0x5c0/0x1f40 [ 365.068892][T18558] ? rcu_is_watching+0x13/0xc0 [ 365.068921][T18558] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 365.068949][T18558] get_user_pages_fast+0xa7/0xf0 [ 365.068975][T18558] ? __pfx_get_user_pages_fast+0x10/0x10 [ 365.069000][T18558] ? lock_acquire+0x1d1/0x380 [ 365.069021][T18558] ? pipe_lock+0x69/0x80 [ 365.069052][T18558] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 365.069086][T18558] ? __mutex_lock+0x26c/0x1c20 [ 365.069103][T18558] ? pipe_lock+0x69/0x80 [ 365.069130][T18558] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 365.069159][T18558] ? __pfx___mutex_lock+0x10/0x10 [ 365.069176][T18558] ? __fget_files+0x34/0x3d0 [ 365.069203][T18558] ? import_ubuf+0x1b6/0x220 [ 365.069236][T18558] iov_iter_get_pages2+0xa3/0x100 [ 365.069263][T18558] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 365.069290][T18558] ? wait_for_space+0x342/0x410 [ 365.069325][T18558] __do_sys_vmsplice+0x7dd/0x13c0 [ 365.069351][T18558] ? find_held_lock+0x2b/0x80 [ 365.069389][T18558] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 365.069417][T18558] ? __pfx_futex_wait+0x10/0x10 [ 365.069490][T18558] ? do_syscall_64+0x123/0x790 [ 365.069521][T18558] do_syscall_64+0x123/0x790 [ 365.069554][T18558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.069574][T18558] RIP: 0033:0x7f05cf59e559 [ 365.069591][T18558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.069609][T18558] RSP: 002b:00007f05cd7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 365.069629][T18558] RAX: ffffffffffffffda RBX: 00007f05cf825fa0 RCX: 00007f05cf59e559 [ 365.069642][T18558] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 365.069655][T18558] RBP: 00007f05cf635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 365.069668][T18558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.069680][T18558] R13: 00007f05cf826038 R14: 00007f05cf825fa0 R15: 00007ffdac34eba8 [ 365.069708][T18558] [ 365.114947][T18560] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 365.123450][ T5814] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 365.273967][ T5814] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 365.274925][ T5814] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 365.274944][ T5814] usb 3-1: config 0 has no interface number 0 [ 365.274973][ T5814] usb 3-1: config 0 interface 41 has no altsetting 0 [ 365.277180][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.277199][ T5814] usb 3-1: Product: syz [ 365.277211][ T5814] usb 3-1: Manufacturer: syz [ 365.277224][ T5814] usb 3-1: SerialNumber: syz [ 365.281511][ T5814] usb 3-1: config 0 descriptor?? [ 365.504064][ T24] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 365.653418][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 365.653924][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 365.656522][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.656544][ T24] usb 1-1: Product: syz [ 365.656556][ T24] usb 1-1: Manufacturer: syz [ 365.656565][ T24] usb 1-1: SerialNumber: syz [ 365.658274][ T24] usb 1-1: config 0 descriptor?? [ 365.874034][ T24] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 365.957859][T18588] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5613'. [ 366.111285][ T5814] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 366.111754][ T5814] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 366.120461][ T5814] usb 3-1: USB disconnect, device number 91 [ 366.281167][ T24] usb write operation failed. (-71) [ 366.286347][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 366.286669][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 366.286697][ T24] usb 1-1: media controller created [ 366.291125][ T24] usb read operation failed. (-71) [ 366.291425][ T24] usb write operation failed. (-71) [ 366.306151][ T24] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 366.312249][ T24] usb 1-1: USB disconnect, device number 88 [ 366.737324][T18596] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5617'. [ 366.916764][ T30] audit: type=1400 audit(1792493478.648:1755): avc: denied { write } for pid=18601 comm="syz.6.5620" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 366.924885][T18603] loop9: detected capacity change from 0 to 7 [ 366.939917][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.940041][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 366.952237][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.952292][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 366.952400][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.952449][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 366.952523][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.952567][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 366.952650][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.952693][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 366.952783][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.952827][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 366.952924][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.952967][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 366.952993][T18603] ldm_validate_partition_table(): Disk read failed. [ 366.953077][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.953120][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 366.953217][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.953260][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 366.965711][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.965784][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 366.965982][T18603] Dev loop9: unable to read RDB block 0 [ 366.966470][T18603] loop9: unable to read partition table [ 366.966606][T18603] loop9: partition table beyond EOD, truncated [ 366.969994][T18603] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 367.159032][T18608] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 367.282807][T18617] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 367.516580][ T30] audit: type=1400 audit(1792493479.248:1756): avc: denied { mounton } for pid=18632 comm="syz.2.5636" path="/1158/file0" dev="tmpfs" ino=5867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 367.554280][T18635] loop9: detected capacity change from 0 to 7 [ 367.555788][T18635] Dev loop9: unable to read RDB block 7 [ 367.555867][T18635] loop9: unable to read partition table [ 367.556019][T18635] loop9: partition table beyond EOD, truncated [ 367.556036][T18635] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 367.703402][ T5700] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 367.769654][ T30] audit: type=1400 audit(1792493479.498:1757): avc: denied { mount } for pid=18638 comm="syz.6.5637" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 367.775113][ T30] audit: type=1400 audit(1792493479.508:1758): avc: denied { mounton } for pid=18638 comm="syz.6.5637" path="/94/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 367.775694][T18641] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 367.853901][ T5700] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 367.854976][ T5700] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 367.855000][ T5700] usb 4-1: config 0 has no interface number 0 [ 367.855033][ T5700] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.857537][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.857560][ T5700] usb 4-1: Product: syz [ 367.857573][ T5700] usb 4-1: Manufacturer: syz [ 367.857588][ T5700] usb 4-1: SerialNumber: syz [ 367.861459][ T5700] usb 4-1: config 0 descriptor?? [ 367.914767][ T30] audit: type=1400 audit(1792493479.648:1759): avc: denied { unmount } for pid=17360 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 367.950545][ T5700] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 368.609135][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5650'. [ 368.860433][ T30] audit: type=1400 audit(1792493480.588:1760): avc: denied { read } for pid=18680 comm="syz.4.5657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 368.970915][T18687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5660'. [ 369.023791][T18691] block nbd0: not configured, cannot reconfigure [ 369.062598][ T30] audit: type=1400 audit(1792493480.788:1761): avc: denied { write } for pid=18692 comm="syz.2.5663" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 369.364549][ T5814] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 369.374621][T18709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5671'. [ 369.524166][ T5814] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 369.525144][ T5814] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 369.525169][ T5814] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 369.525189][ T5814] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.526973][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.526995][ T5814] usb 3-1: Product: syz [ 369.527009][ T5814] usb 3-1: Manufacturer: syz [ 369.527023][ T5814] usb 3-1: SerialNumber: syz [ 369.533981][ T5814] hub 3-1:1.0: bad descriptor, ignoring hub [ 369.534000][ T5814] hub 3-1:1.0: probe with driver hub failed with error -5 [ 369.605401][ T30] audit: type=1400 audit(1792493481.328:1762): avc: denied { unlink } for pid=18721 comm="syz.4.5678" name="#5" dev="tmpfs" ino=5544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 369.743962][ T5814] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 369.871721][T18732] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 369.884095][T18732] bond2 (unregistering): Released all slaves [ 369.922292][ T30] audit: type=1400 audit(1792493481.648:1763): avc: denied { create } for pid=18736 comm="syz.4.5683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 369.922897][ T30] audit: type=1400 audit(1792493481.648:1764): avc: denied { write } for pid=18736 comm="syz.4.5683" path="socket:[58114]" dev="sockfs" ino=58114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 370.102171][ T30] audit: type=1400 audit(1792493481.828:1765): avc: denied { connect } for pid=18742 comm="syz.0.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 370.175120][ T30] audit: type=1400 audit(1792493481.908:1766): avc: denied { write } for pid=18742 comm="syz.0.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 370.253245][ T30] audit: type=1400 audit(1792493481.978:1767): avc: denied { shutdown } for pid=18747 comm="syz.0.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 370.405439][ T30] audit: type=1400 audit(1792493482.138:1768): avc: denied { ioctl } for pid=18753 comm="syz.0.5691" path="socket:[58529]" dev="sockfs" ino=58529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 370.450088][ T30] audit: type=1400 audit(1792493482.178:1769): avc: denied { setopt } for pid=18755 comm="syz.0.5692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 370.500358][ T29] usb 4-1: USB disconnect, device number 90 [ 370.505364][ T29] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 370.587460][ T5814] usb 3-1: USB disconnect, device number 92 [ 370.590859][T18762] input: syz0 as /devices/virtual/input/input132 [ 370.596970][ T5814] usblp1: removed [ 370.693254][ T30] audit: type=1400 audit(1792493482.418:1770): avc: denied { execute } for pid=18765 comm="syz.3.5697" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 370.780516][ T30] audit: type=1400 audit(1792493482.508:1771): avc: denied { mount } for pid=18769 comm="syz.3.5699" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 371.014046][ T29] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 371.166882][ T29] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 371.166922][ T29] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 371.167777][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.167818][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.167844][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.168662][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.168698][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.168723][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.169592][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.169628][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.169653][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.170473][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.170509][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.170534][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.172794][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.172835][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.172858][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.177083][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.177118][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.177139][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.179548][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.179582][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.179603][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.180372][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.180406][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.180427][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.182065][ T29] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 371.182084][ T29] usb 1-1: Product: syz [ 371.182097][ T29] usb 1-1: Manufacturer: syz [ 371.182109][ T29] usb 1-1: SerialNumber: syz [ 371.191980][ T29] usb 1-1: config 0 descriptor?? [ 371.206191][ T29] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 371.288637][T18794] random: crng reseeded on system resumption [ 371.393018][T18794] hwrng_fill thread creation failed [ 371.549922][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 371.550172][ T10] usb 1-1: USB disconnect, device number 89 [ 371.552333][ T10] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 371.923424][ T5700] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 372.073964][ T5700] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 372.075021][ T5700] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.075044][ T5700] usb 4-1: config 0 has no interface number 0 [ 372.077071][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.077094][ T5700] usb 4-1: Product: syz [ 372.077108][ T5700] usb 4-1: Manufacturer: syz [ 372.077123][ T5700] usb 4-1: SerialNumber: syz [ 372.079380][ T5700] usb 4-1: config 0 descriptor?? [ 372.340455][T18827] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.363569][ T5700] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 372.368204][ T5700] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 372.368427][ T5700] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 372.368468][ T5700] usb 4-1: media controller created [ 372.422411][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.664640][T18839] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5730'. [ 372.988248][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.988298][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.546317][T18815] usb 4-1: dvb_usb_ec168: I2C read not implemented [ 373.554671][ T5700] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 373.622776][ T5700] usb 4-1: USB disconnect, device number 91 [ 374.243843][T18889] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 374.372691][T18889] bond1 (unregistering): Released all slaves [ 374.777637][T18919] usbip-vudc usbip-vudc.0: gadget not bound [ 374.980852][T18934] netlink: 280 bytes leftover after parsing attributes in process `syz.4.5774'. [ 374.980877][T18934] netlink: 280 bytes leftover after parsing attributes in process `syz.4.5774'. [ 375.016164][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 375.016179][ T30] audit: type=1400 audit(1792493486.748:1789): avc: denied { accept } for pid=18936 comm="syz.0.5775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 375.426335][ T30] audit: type=1400 audit(1792493487.158:1790): avc: denied { bind } for pid=18960 comm="syz.0.5783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 375.426602][ T30] audit: type=1400 audit(1792493487.158:1791): avc: denied { name_bind } for pid=18960 comm="syz.0.5783" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 375.426843][ T30] audit: type=1400 audit(1792493487.158:1792): avc: denied { node_bind } for pid=18960 comm="syz.0.5783" saddr=fe80::b src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 375.713409][ T5694] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 375.871021][ T5694] usb 1-1: unable to get BOS descriptor or descriptor too short [ 375.871063][ T5694] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 375.891751][ T5694] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 375.891784][ T5694] usb 1-1: can't read configurations, error -71 [ 375.943046][ T30] audit: type=1400 audit(1792493487.668:1793): avc: denied { map } for pid=18964 comm="syz.6.5785" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 376.113806][ T30] audit: type=1400 audit(1792493487.848:1794): avc: denied { bind } for pid=18972 comm="syz.2.5788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 376.114020][ T30] audit: type=1400 audit(1792493487.848:1795): avc: denied { name_bind } for pid=18972 comm="syz.2.5788" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 376.114282][ T30] audit: type=1400 audit(1792493487.848:1796): avc: denied { node_bind } for pid=18972 comm="syz.2.5788" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 376.378215][T18988] ptp ptp0: new virtual clock ptp1 [ 376.396081][T18988] ptp ptp0: new virtual clock ptp2 [ 376.397981][T18988] ptp ptp0: new virtual clock ptp3 [ 376.402298][T18988] ptp ptp0: new virtual clock ptp4 [ 376.421442][T18988] ptp ptp0: new virtual clock ptp5 [ 376.421461][T18988] ptp ptp0: guarantee physical clock free running [ 376.511624][T19000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5796'. [ 377.074737][ T30] audit: type=1400 audit(1792493488.808:1797): avc: denied { read } for pid=19023 comm="syz.2.5799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 377.175589][ T30] audit: type=1400 audit(1792493488.908:1798): avc: denied { map } for pid=19028 comm="syz.4.5800" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 377.175739][T19030] binder: binder_mmap: 19028 200000ffe000-200001000000 bad vm_flags failed -1 [ 377.646937][T19047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5802'. [ 377.788656][T19057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5805'. [ 377.820084][T19057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.362978][T19087] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 378.733853][T18952] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 378.883474][T18952] usb 1-1: Using ep0 maxpacket: 8 [ 378.884879][T18952] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 378.885812][T18952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.894089][T18952] pvrusb2: Hardware description: Terratec Grabster AV400 [ 378.894101][T18952] pvrusb2: ********** [ 378.894110][T18952] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 378.894120][T18952] pvrusb2: Important functionality might not be entirely working. [ 378.894126][T18952] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 378.894134][T18952] pvrusb2: ********** [ 379.081249][ T5596] block nbd0: Receive control failed (result -32) [ 379.081272][ T4918] block nbd0: Receive control failed (result -32) [ 379.101089][ T2352] pvrusb2: Invalid write control endpoint [ 379.203167][T19114] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5832'. [ 379.212982][ T2352] pvrusb2: Invalid write control endpoint [ 379.212994][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 379.213001][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 379.213008][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 379.213016][ T2352] pvrusb2: Device being rendered inoperable [ 379.213044][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 379.213140][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 379.234351][ T2352] pvrusb2: Attached sub-driver cx25840 [ 379.234363][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 379.234371][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 379.316690][T18952] usb 1-1: USB disconnect, device number 92 [ 379.509351][ T4918] Bluetooth: hci0: Zero size dump init pkt [ 379.871753][T19155] netlink: 'syz.6.5852': attribute type 1 has an invalid length. [ 379.895325][T19155] gretap0: entered promiscuous mode [ 379.903678][T19155] netlink: 'syz.6.5852': attribute type 1 has an invalid length. [ 379.934235][T19158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5853'. [ 380.082220][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 380.082237][ T30] audit: type=1400 audit(1792493491.808:1808): avc: denied { load_policy } for pid=19168 comm="syz.6.5858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 380.082317][T19169] SELinux: ebitmap start bit (4294967295) is not a multiple of the map unit size (64) [ 380.082341][T19169] SELinux: failed to load policy [ 380.209478][T19175] sctp: [Deprecated]: syz.6.5861 (pid 19175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.209478][T19175] Use struct sctp_sack_info instead [ 380.473585][ T5694] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 380.496488][T19201] team0: No ports can be present during mode change [ 380.623390][ T5694] usb 4-1: Using ep0 maxpacket: 16 [ 380.626638][ T5694] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 380.627466][ T5694] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 380.627483][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 380.629018][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.629031][ T5694] usb 4-1: Product: syz [ 380.629039][ T5694] usb 4-1: Manufacturer: syz [ 380.629047][ T5694] usb 4-1: SerialNumber: syz [ 380.630273][ T5694] usb 4-1: config 0 descriptor?? [ 380.672204][ T5694] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 380.672222][ T5694] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 380.843525][T18945] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 380.993622][T18945] usb 3-1: Using ep0 maxpacket: 8 [ 380.996399][T18945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 380.996438][T18945] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 380.998721][T18945] usb 3-1: config 3 has an invalid interface number: 171 but max is 0 [ 380.998765][T18945] usb 3-1: config 3 has no interface number 0 [ 381.003204][T18945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.003228][T18945] usb 3-1: Product: syz [ 381.003243][T18945] usb 3-1: Manufacturer: syz [ 381.003257][T18945] usb 3-1: SerialNumber: syz [ 381.230839][T19219] blkio.reset_stats is deprecated [ 381.241383][ T5694] em28xx 4-1:0.0: chip ID is em2874 [ 381.278652][T18945] (null): radio-mr800 - initialization failed [ 381.278809][T18945] radio-mr800 3-1:3.171: probe with driver radio-mr800 failed with error -22 [ 381.279049][T18945] usbhid 3-1:3.171: couldn't find an input interrupt endpoint [ 381.291715][T18945] usb 3-1: USB disconnect, device number 93 [ 381.382257][T19227] fuse: Bad value for 'fd' [ 381.431431][T19231] jffs2: notice: (19231) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 381.437409][ T30] audit: type=1400 audit(1792493493.168:1809): avc: denied { write } for pid=19230 comm="syz.0.5887" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.437763][ T30] audit: type=1400 audit(1792493493.168:1810): avc: denied { add_name } for pid=19230 comm="syz.0.5887" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.437998][ T30] audit: type=1400 audit(1792493493.168:1811): avc: denied { create } for pid=19230 comm="syz.0.5887" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 381.458881][ T5694] usb 4-1: USB disconnect, device number 92 [ 381.459951][ T5694] em28xx 4-1:0.0: Disconnecting em28xx [ 381.500138][ T5694] em28xx: Freeing device [ 381.681110][T19242] misc userio: Can't change port extra on an already running userio instance [ 384.645960][ T30] audit: type=1400 audit(1792493496.378:1812): avc: denied { read } for pid=19244 comm="syz.2.5894" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.696752][T19249] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 384.724015][ T5694] team_slave_0: entered promiscuous mode [ 384.724047][ T5694] team_slave_1: entered promiscuous mode [ 384.724480][ T5694] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 384.772183][ T30] audit: type=1400 audit(1792493496.498:1813): avc: denied { getopt } for pid=19254 comm="syz.4.5897" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.982556][T19269] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 385.051480][ T30] audit: type=1400 audit(1792493496.778:1814): avc: denied { bind } for pid=19270 comm="syz.4.5909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.103054][ T30] audit: type=1400 audit(1792493496.828:1815): avc: denied { read } for pid=19272 comm="syz.0.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.528907][T19297] netlink: 'syz.2.5918': attribute type 5 has an invalid length. [ 385.690320][ T30] audit: type=1400 audit(1792493497.418:1816): avc: denied { mounton } for pid=19301 comm="syz.2.5920" path="/proc/2541/net/netfilter" dev="proc" ino=4026533277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 385.778540][T19306] sctp: [Deprecated]: syz.2.5922 (pid 19306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.778540][T19306] Use struct sctp_sack_info instead [ 385.906285][T19312] bonding: bond0 is being deleted... [ 385.939533][T19312] bond0 (unregistering): Released all slaves [ 386.100781][T19316] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 386.450703][T19333] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 386.699094][ T30] audit: type=1400 audit(1792493498.428:1817): avc: denied { mount } for pid=19342 comm="syz.4.5939" name="/" dev="pstore" ino=2950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 387.009973][T19347] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5941'. [ 387.338284][T19362] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 387.352839][T19362] CIFS: VFS: Error connecting to socket. Aborting operation. [ 387.352861][T19362] CIFS: VFS: cifs_mount failed w/return code = -111 [ 387.567732][ T30] audit: type=1400 audit(1792493499.288:1818): avc: denied { watch watch_reads } for pid=19373 comm="syz.3.5953" path="/1219" dev="tmpfs" ino=6190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 387.628803][ T30] audit: type=1400 audit(1792493499.358:1819): avc: denied { mount } for pid=19377 comm="syz.3.5955" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 387.631472][ T30] audit: type=1400 audit(1792493499.358:1820): avc: denied { unmount } for pid=19377 comm="syz.3.5955" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 387.871351][ T30] audit: type=1400 audit(1792493499.598:1821): avc: denied { getopt } for pid=19395 comm="syz.2.5964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 387.910395][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5965'. [ 388.125700][ T30] audit: type=1400 audit(1792493499.858:1822): avc: denied { create } for pid=19401 comm="syz.6.5968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 388.133820][ T30] audit: type=1400 audit(1792493499.868:1823): avc: denied { ioctl } for pid=19401 comm="syz.6.5968" path="socket:[61282]" dev="sockfs" ino=61282 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 388.178393][ T30] audit: type=1400 audit(1792493499.908:1824): avc: denied { bind } for pid=19401 comm="syz.6.5968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 388.213380][ T5694] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 388.374373][ T5694] usb 4-1: unable to get BOS descriptor or descriptor too short [ 388.374418][ T5694] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=e5.b4 [ 388.378454][ T5694] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 388.378486][ T5694] usb 4-1: can't read configurations, error -71 [ 389.026296][T19406] netlink: 4580 bytes leftover after parsing attributes in process `syz.6.5970'. [ 389.026319][T19406] netlink: 4580 bytes leftover after parsing attributes in process `syz.6.5970'. [ 390.533222][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 390.533240][ T30] audit: type=1400 audit(1792493502.258:1826): avc: denied { cmd } for pid=19414 comm="iou-wrk-19415" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 390.867839][ T30] audit: type=1400 audit(1792493502.598:1827): avc: denied { ioctl } for pid=19419 comm="syz.2.5967" path="socket:[61291]" dev="sockfs" ino=61291 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 390.955676][ T30] audit: type=1400 audit(1792493502.688:1828): avc: denied { execute } for pid=19421 comm="syz.2.5976" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=61298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 391.185880][T19434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.515236][T19452] jffs2: notice: (19452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 391.554874][ T30] audit: type=1400 audit(1792493503.278:1829): avc: denied { write } for pid=19451 comm="syz.2.5991" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.554931][ T30] audit: type=1400 audit(1792493503.278:1830): avc: denied { create } for pid=19451 comm="syz.2.5991" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 392.012190][T19471] netlink: 'syz.3.5999': attribute type 1 has an invalid length. [ 392.012210][T19471] netlink: 'syz.3.5999': attribute type 2 has an invalid length. [ 392.014079][T19471] netlink: 'syz.3.5999': attribute type 1 has an invalid length. [ 392.014093][T19471] netlink: 'syz.3.5999': attribute type 2 has an invalid length. [ 392.142943][ T30] audit: type=1400 audit(1792493503.868:1831): avc: denied { ioctl } for pid=19466 comm="syz.2.5997" path="net:[4026533275]" dev="nsfs" ino=4026533275 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 392.553834][T19489] jffs2: notice: (19489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 392.717066][T19500] bonding: bond0 is being deleted... [ 392.738358][ T30] audit: type=1400 audit(1792493504.468:1832): avc: denied { bind } for pid=19502 comm="syz.2.6014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 392.820124][T19500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.841421][T19500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.845139][T19500] bond0 (unregistering): Released all slaves [ 394.543489][T18952] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 394.693417][T18952] usb 4-1: Using ep0 maxpacket: 16 [ 394.694147][T18952] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 394.695147][T18952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 394.695323][T18952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.697578][T18952] usb 4-1: config 0 descriptor?? [ 394.698255][T19545] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 395.143474][ T4918] Bluetooth: hci3: command tx timeout [ 395.146181][T18952] hid (null): report_id 0 is invalid [ 395.149332][T18952] hid_parser_main: 87 callbacks suppressed [ 395.149349][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: unknown main item tag 0x0 [ 395.149373][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: unknown main item tag 0x0 [ 395.149394][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: unknown main item tag 0x0 [ 395.149414][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: unknown main item tag 0x0 [ 395.149433][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: unknown main item tag 0x0 [ 395.149453][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: unknown main item tag 0x0 [ 395.149472][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: unknown main item tag 0x0 [ 395.149491][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: unknown main item tag 0x0 [ 395.149512][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: unknown main item tag 0x0 [ 395.149532][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: unknown main item tag 0x0 [ 395.151489][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: unexpected long global item [ 395.152165][T18952] aquacomputer_d5next 0003:0C70:F00D.009F: probe with driver aquacomputer_d5next failed with error -22 [ 395.366053][T18952] usb 4-1: USB disconnect, device number 95 [ 397.089174][ T30] audit: type=1400 audit(1792493508.818:1833): avc: denied { watch } for pid=19557 comm="syz.3.6037" path="/1239/file0" dev="tmpfs" ino=6300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 397.089531][ T30] audit: type=1400 audit(1792493508.818:1834): avc: denied { watch_reads } for pid=19557 comm="syz.3.6037" path="/1239/file0" dev="tmpfs" ino=6300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 397.093895][T19556] loop5: detected capacity change from 0 to 7 [ 397.246061][T19565] sd 0:0:1:0: PR command failed: 1026 [ 397.246106][T19565] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 397.246145][T19565] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 397.314397][T19556] Dev loop5: unable to read RDB block 7 [ 397.314432][T19556] loop5: unable to read partition table [ 397.314585][T19556] loop5: partition table beyond EOD, truncated [ 397.314612][T19556] loop_reread_partitions: partition scan of loop5 (كWý* 4FLQk݊5) failed (rc=-5) [ 397.748103][ T30] audit: type=1400 audit(1792493509.478:1835): avc: denied { read } for pid=19587 comm="syz.3.6051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 397.758214][T19590] : renamed from vlan0 (while UP) [ 398.418955][ T30] audit: type=1400 audit(1792493510.148:1836): avc: denied { read write } for pid=19619 comm="syz.3.6064" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 398.419286][ T30] audit: type=1400 audit(1792493510.148:1837): avc: denied { open } for pid=19619 comm="syz.3.6064" path="/1248/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 398.420522][ T30] audit: type=1400 audit(1792493510.148:1838): avc: denied { ioctl } for pid=19619 comm="syz.3.6064" path="/1248/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 398.420597][T19620] zero sized request [ 398.475953][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6065'. [ 398.484514][ T24] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 398.633413][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 398.633862][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.634653][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.634682][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 398.634703][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 398.634723][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 398.635496][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 398.635515][ T24] usb 1-1: SerialNumber: syz [ 398.639723][T19606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 398.639810][T19606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 398.641554][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 398.641574][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 398.848851][T19606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 398.848989][T19606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 399.246393][T19636] bonding: bond0 is being deleted... [ 399.418635][T19636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.437946][T19636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.455566][T19636] bond0 (unregistering): Released all slaves [ 399.499669][ T24] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 399.539640][ T24] usb 1-1: USB disconnect, device number 93 [ 399.547778][ T24] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 403.704941][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.364367][T19656] jffs2: notice: (19656) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 420.767035][ T30] audit: type=1400 audit(1792493532.488:1839): avc: denied { ioctl } for pid=19690 comm="syz.2.6091" path="socket:[62931]" dev="sockfs" ino=62931 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 433.909789][ T30] audit: type=1400 audit(1792493545.628:1840): avc: denied { read } for pid=19732 comm="syz.0.6104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 434.477644][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.478170][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.840749][T19758] batadv_slave_1: entered promiscuous mode [ 442.970889][T19757] batadv_slave_1: left promiscuous mode [ 443.640471][T19760] syz_tun: entered promiscuous mode [ 443.709062][T19759] syz_tun: left promiscuous mode [ 449.756653][ T30] audit: type=1400 audit(1792493561.468:1841): avc: denied { write } for pid=19776 comm="syz.4.6119" name="dbroot" dev="configfs" ino=64379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 449.829919][ T30] audit: type=1400 audit(1792493561.498:1842): avc: denied { open } for pid=19776 comm="syz.4.6119" path="/1166/my_configfs/target/dbroot" dev="configfs" ino=64379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 454.828724][T19791] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 455.805621][ T5708] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 456.138344][ T5708] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 456.210414][ T5708] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.210847][ T5708] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.411294][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.411356][ T5708] usb 4-1: Product: syz [ 456.411376][ T5708] usb 4-1: Manufacturer: syz [ 456.411395][ T5708] usb 4-1: SerialNumber: syz [ 459.032769][ T24] usb 4-1: USB disconnect, device number 96 [ 463.060246][T19809] gtp0: entered promiscuous mode [ 463.060294][T19809] gtp0: entered allmulticast mode [ 467.597052][ T5708] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 467.813875][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 467.874108][ T5708] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 467.961195][ T5708] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.961229][ T5708] usb 3-1: config 0 has no interfaces? [ 468.104395][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.104432][ T5708] usb 3-1: Product: syz [ 468.104456][ T5708] usb 3-1: Manufacturer: syz [ 468.104607][ T5708] usb 3-1: SerialNumber: syz [ 468.380294][ T5708] usb 3-1: config 0 descriptor?? [ 469.979098][T18952] usb 3-1: USB disconnect, device number 94 [ 477.384933][ T5679] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 477.634674][ T5679] usb 4-1: Using ep0 maxpacket: 16 [ 477.757800][ T5679] usb 4-1: unable to get BOS descriptor or descriptor too short [ 477.758214][ T5679] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 477.829411][ T5679] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 478.016543][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.016577][ T5679] usb 4-1: Product: syz [ 478.016597][ T5679] usb 4-1: Manufacturer: syz [ 478.016618][ T5679] usb 4-1: SerialNumber: syz [ 478.024994][ T30] audit: type=1400 audit(1792493589.748:1843): avc: denied { watch } for pid=19852 comm="syz.4.6144" path="pipe:[63225]" dev="pipefs" ino=63225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 479.493093][ T5679] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 479.529044][ T5679] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 481.356231][ T30] audit: type=1400 audit(1792493593.078:1844): avc: denied { name_connect } for pid=19862 comm="syz.2.6147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 484.858139][ T5679] usb 4-1: USB disconnect, device number 97 [ 485.890879][ T30] audit: type=1400 audit(1792493597.578:1845): avc: denied { setopt } for pid=19872 comm="syz.3.6149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 487.266690][T19854] udevd[19854]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.212719][T19886] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6153'. [ 495.930323][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.930800][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.251978][ T30] audit: type=1400 audit(1792493607.978:1846): avc: denied { setopt } for pid=19902 comm="syz.0.6161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 501.549123][ T30] audit: type=1400 audit(1792493613.268:1847): avc: denied { bind } for pid=19916 comm="syz.6.6165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 502.484715][ T24] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 502.696134][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 502.746043][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 502.746081][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 502.746108][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 502.746138][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 502.908207][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.908239][ T24] usb 3-1: Product: syz [ 502.908260][ T24] usb 3-1: Manufacturer: syz [ 502.908281][ T24] usb 3-1: SerialNumber: syz [ 503.050248][ T24] usb 3-1: config 0 descriptor?? [ 504.221980][ T24] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 504.437449][ T30] audit: type=1400 audit(1792493616.158:1848): avc: denied { remount } for pid=19925 comm="syz.0.6169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 504.484663][ T24] usb 3-1: USB disconnect, device number 95 [ 518.433448][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 532.352132][ T30] audit: type=1400 audit(1792493644.078:1849): avc: denied { write } for pid=19974 comm="syz.2.6183" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 540.239168][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 540.252742][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 540.264180][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 540.281887][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 540.292357][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 540.955906][ T30] audit: type=1400 audit(1792493652.658:1850): avc: denied { ioctl } for pid=19984 comm="syz.2.6187" path="socket:[63488]" dev="sockfs" ino=63488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 542.514378][ T5596] Bluetooth: hci5: command tx timeout [ 544.584448][ T5596] Bluetooth: hci5: command tx timeout [ 546.666748][ T5596] Bluetooth: hci5: command tx timeout [ 548.744108][ T5596] Bluetooth: hci5: command tx timeout [ 557.433570][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.434050][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.205152][ T5708] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 559.554515][ T5708] usb 4-1: Using ep0 maxpacket: 8 [ 559.640385][ T5708] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 559.795167][ T5708] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 559.795199][ T5708] usb 4-1: config 0 has no interface number 0 [ 559.795559][ T5708] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 559.795596][ T5708] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 559.795632][ T5708] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 559.795667][ T5708] usb 4-1: config 0 interface 200 has no altsetting 0 [ 560.134930][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.134959][ T5708] usb 4-1: Product: syz [ 560.134976][ T5708] usb 4-1: Manufacturer: syz [ 560.134993][ T5708] usb 4-1: SerialNumber: syz [ 560.666441][ T5708] usb 4-1: config 0 descriptor?? [ 562.426913][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 564.188595][ T5708] usb 4-1: can't set config #0, error -71 [ 564.470465][ T5708] usb 4-1: USB disconnect, device number 98 [ 579.243032][T20055] netlink: 'syz.3.6202': attribute type 2 has an invalid length. [ 582.155839][T20055] : entered promiscuous mode [ 582.223484][T19985] lo speed is unknown, defaulting to 1000 [ 596.251174][ T8650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.734832][ T8650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.446549][ T8650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.851047][T20085] RDS: rds_bind could not find a transport for ::1200:0, load rds_tcp or rds_rdma? [ 603.725040][ T4918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 603.745132][ T4918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 603.763040][ T4918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 603.838251][ T4918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 603.863021][ T4918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.399767][ T8650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.275706][ T5596] Bluetooth: hci0: command tx timeout [ 608.350844][ T5596] Bluetooth: hci0: command tx timeout [ 610.429297][ T5596] Bluetooth: hci0: command tx timeout [ 612.015067][ T1001] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.508906][ T5596] Bluetooth: hci0: command tx timeout [ 614.235766][ T1001] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.588684][ T1149] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.798645][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.799120][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.568277][ T1396] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.598442][T20135] loop1: detected capacity change from 0 to 7 [ 633.899026][T20137] Invalid logical block size (768) [ 636.811053][T20135] Dev loop1: unable to read RDB block 7 [ 636.811149][T20135] loop1: unable to read partition table [ 636.878256][T20135] loop1: partition table beyond EOD, truncated [ 636.878354][T20135] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 649.970800][ T8650] bond0 (unregistering): Released all slaves [ 650.856903][ T8650] bond1 (unregistering): Released all slaves [ 655.523533][T20153] : renamed from vlan0 (while UP) [ 657.416959][ T8650] ovs0: left promiscuous mode [ 661.520163][ T8650] tipc: Disabling bearer [ 661.792689][ T8650] tipc: Left network mode [ 664.444386][ T8650] IPVS: stopping backup sync thread 10073 ... [ 666.474804][T19988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 666.499430][T19988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 666.519845][T19988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 666.616647][T19988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 666.685576][T19988] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 666.903675][ T4918] Bluetooth: hci5: command 0x0406 tx timeout [ 669.391391][ T5596] Bluetooth: hci6: command tx timeout [ 669.944509][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 671.483384][ T5596] Bluetooth: hci6: command tx timeout [ 673.559394][ T5596] Bluetooth: hci6: command tx timeout [ 675.635051][ T5596] Bluetooth: hci6: command tx timeout [ 678.828346][ T4918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 678.856427][ T4918] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 678.886256][ T4918] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 678.952335][ T4918] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 678.991660][ T4918] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 680.212028][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.212493][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.338758][ T9] kworker/0:0 (9) used greatest stack depth: 18120 bytes left [ 681.563568][ T5596] Bluetooth: hci7: command tx timeout [ 683.626436][ T5596] Bluetooth: hci7: command tx timeout [ 685.735781][ T5596] Bluetooth: hci7: command tx timeout [ 687.787311][ T5596] Bluetooth: hci7: command tx timeout [ 695.920928][ T4918] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 695.932589][ T4918] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 695.952995][ T4918] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 695.981030][ T4918] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 696.056081][ T4918] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 698.504699][ T5596] Bluetooth: hci8: command tx timeout [ 700.590082][ T5596] Bluetooth: hci8: command tx timeout [ 702.664293][ T5596] Bluetooth: hci8: command tx timeout [ 704.743737][ T5596] Bluetooth: hci8: command tx timeout [ 705.719831][ T30] audit: type=1400 audit(1792493817.348:1851): avc: denied { getopt } for pid=20230 comm="syz.6.6247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 714.821979][T20175] lo speed is unknown, defaulting to 1000 [ 715.543512][T20249] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 716.553006][T20248] netlink: 'syz.6.6249': attribute type 4 has an invalid length. [ 720.455600][ T30] audit: type=1400 audit(1792493832.178:1852): avc: denied { write } for pid=20192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.217529][ T4918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 732.259663][ T4918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 732.278086][ T4918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.318118][ T4918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.355409][ T4918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 733.036801][ T30] audit: type=1400 audit(1792493844.718:1853): avc: denied { write } for pid=20263 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.506009][ T4918] Bluetooth: hci0: command tx timeout [ 736.589585][ T4918] Bluetooth: hci0: command tx timeout [ 737.294302][ T8650] hsr_slave_0: left promiscuous mode [ 737.473483][ T8650] hsr_slave_1: left promiscuous mode [ 738.577206][ T8650] veth1_macvtap: left promiscuous mode [ 738.629447][ T8650] veth1_vlan: left allmulticast mode [ 738.629618][ T8650] veth1_vlan: left promiscuous mode [ 738.630397][ T8650] veth0_vlan: left promiscuous mode [ 738.674045][ T4918] Bluetooth: hci0: command tx timeout [ 740.744294][ T4918] Bluetooth: hci0: command tx timeout [ 741.682354][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.682832][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.728396][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 742.760479][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 742.802623][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 742.881470][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 742.947934][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 745.147846][ T4918] Bluetooth: hci1: command tx timeout [ 747.227590][ T4918] Bluetooth: hci1: command tx timeout [ 749.323402][ T4918] Bluetooth: hci1: command tx timeout [ 751.388212][ T4918] Bluetooth: hci1: command tx timeout [ 757.379207][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 757.411625][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 757.428635][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 757.490537][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 757.521691][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 759.784188][ T4918] Bluetooth: hci2: command tx timeout [ 761.864365][ T4918] Bluetooth: hci2: command tx timeout [ 763.947096][ T4918] Bluetooth: hci2: command tx timeout [ 766.034101][ T4918] Bluetooth: hci2: command tx timeout [ 772.030489][ T30] audit: type=1400 audit(1792493883.648:1854): avc: denied { setattr } for pid=20308 comm="syz.6.6258" name="uprobe_events" dev="tracefs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 785.069314][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 785.104033][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 785.116126][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 785.184438][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 785.206384][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 787.304830][ T4918] Bluetooth: hci5: command tx timeout [ 789.394527][ T4918] Bluetooth: hci5: command tx timeout [ 789.784043][ T4918] Bluetooth: hci6: command 0x0406 tx timeout [ 791.271805][ T4918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 791.289072][ T4918] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 791.293281][ T4918] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 791.332515][ T4918] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 791.393750][ T4918] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 791.463479][ T4918] Bluetooth: hci5: command tx timeout [ 793.550797][ T4918] Bluetooth: hci7: command tx timeout [ 793.555156][ T4918] Bluetooth: hci5: command tx timeout [ 795.626394][ T5596] Bluetooth: hci7: command tx timeout [ 797.000596][ T30] audit: type=1400 audit(1792493908.718:1855): avc: denied { write } for pid=20334 comm="syz.6.6262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 797.705462][ T5596] Bluetooth: hci7: command tx timeout [ 799.783543][ T4918] Bluetooth: hci7: command tx timeout [ 799.878816][ T4918] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 799.926899][ T4918] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 799.943855][ T4918] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 799.993602][ T4918] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 800.023078][ T4918] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 802.441140][ T5596] Bluetooth: hci8: command tx timeout [ 803.100671][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.101149][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.503709][ T5596] Bluetooth: hci8: command tx timeout [ 804.632115][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 806.598537][ T5596] Bluetooth: hci8: command tx timeout [ 808.674111][ T5596] Bluetooth: hci8: command tx timeout [ 818.255653][ T8650] IPVS: stop unused estimator thread 0... [ 820.557638][ T4918] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 820.595090][ T4918] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 820.622352][ T4918] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 820.775307][ T4918] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 820.835428][ T4918] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 823.304782][ T5596] Bluetooth: hci9: command tx timeout [ 825.395532][ T5596] Bluetooth: hci9: command tx timeout [ 827.463840][ T5596] Bluetooth: hci9: command tx timeout [ 829.543766][ T5596] Bluetooth: hci9: command tx timeout [ 849.959243][T20337] lo speed is unknown, defaulting to 1000 [ 855.982109][T19988] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 856.004905][T19988] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 856.024031][T19988] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 856.092371][T19988] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 856.162468][T19988] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 856.347341][ T4918] Bluetooth: hci0: command 0x0406 tx timeout [ 858.506053][ T5596] Bluetooth: hci10: command tx timeout [ 860.588504][ T5596] Bluetooth: hci10: command tx timeout [ 861.828307][T19988] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 861.866302][T19988] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 861.889081][T19988] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 862.007559][T19988] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 862.033101][T19988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 862.673936][T19988] Bluetooth: hci10: command tx timeout [ 864.363474][T19988] Bluetooth: hci1: command tx timeout [ 864.602671][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.603369][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.746733][T19988] Bluetooth: hci10: command tx timeout [ 866.424450][T19988] Bluetooth: hci1: command tx timeout [ 868.338414][ T8650] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.504540][T19988] Bluetooth: hci1: command tx timeout [ 869.725223][ T30] audit: type=1400 audit(1792493981.458:1856): avc: denied { write } for pid=20365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.525000][ T4918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 870.586529][ T4918] Bluetooth: hci1: command tx timeout [ 870.589578][ T4918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 870.673615][ T4918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 870.745346][ T4918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 870.805800][ T4918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 872.772567][ T8650] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.016841][ T4918] Bluetooth: hci0: command tx timeout [ 875.064638][ T4918] Bluetooth: hci0: command tx timeout [ 876.941969][ T8650] team0: Port device netdevsim1 removed [ 877.167055][ T4918] Bluetooth: hci0: command tx timeout [ 877.729197][ T8650] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.227948][ T4918] Bluetooth: hci0: command tx timeout [ 881.878343][ T8650] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.916914][ T30] audit: type=1400 audit(1792493995.628:1857): avc: denied { write } for pid=20438 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.276237][T19988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 884.307939][T19988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 884.337898][T19988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 884.384621][T19988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 884.407895][T19988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 886.586375][ T4918] Bluetooth: hci2: command tx timeout [ 888.665036][ T4918] Bluetooth: hci2: command tx timeout [ 890.762469][ T4918] Bluetooth: hci2: command tx timeout [ 890.904378][T19940] netdevsim netdevsim4 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.825021][ T4918] Bluetooth: hci2: command tx timeout [ 893.407186][T19933] netdevsim netdevsim4 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.704405][ T12] netdevsim netdevsim4 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.034801][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 897.797538][T14208] netdevsim netdevsim4 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.601502][ T8650] bridge_slave_1: left allmulticast mode [ 898.601568][ T8650] bridge_slave_1: left promiscuous mode [ 898.645129][ T8650] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.567360][ T8650] bridge_slave_0: left allmulticast mode [ 899.595970][ T8650] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.260071][T20472] 9p: Bad value for 'rfdno' [ 916.173996][T19988] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 916.184863][T19988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 916.239639][T19988] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 916.384458][T19988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 916.402911][T19988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 918.508070][ T4918] Bluetooth: hci4: command tx timeout [ 920.586186][ T4918] Bluetooth: hci4: command tx timeout [ 921.557422][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 921.610075][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 921.631333][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 921.707540][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 921.748226][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 922.665065][T19988] Bluetooth: hci4: command tx timeout [ 922.915977][T19988] Bluetooth: hci8: command 0x0406 tx timeout [ 924.026194][ T4918] Bluetooth: hci5: command tx timeout [ 924.744951][ T4918] Bluetooth: hci4: command tx timeout [ 925.961046][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 925.961512][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.103913][ T4918] Bluetooth: hci5: command tx timeout [ 927.135174][ T8650] bond1 (unregistering): Released all slaves [ 928.184565][ T4918] Bluetooth: hci5: command tx timeout [ 928.658040][T19988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 928.678827][T19988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 928.693696][T19988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 928.717879][T19988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 928.740215][T19988] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 929.760057][ T8650] bond2 (unregistering): Released all slaves [ 930.269127][ T4918] Bluetooth: hci5: command tx timeout [ 930.905524][ T4918] Bluetooth: hci6: command tx timeout [ 933.011033][ T4918] Bluetooth: hci6: command tx timeout [ 935.076047][ T4918] Bluetooth: hci6: command tx timeout [ 935.785644][ T8650] tipc: Disabling bearer [ 935.793992][ T8650] tipc: Left network mode [ 937.162470][ T4918] Bluetooth: hci6: command tx timeout [ 937.610748][ T8650] IPVS: stopping backup sync thread 11541 ... [ 941.197670][ T30] audit: type=1400 audit(1792494052.898:1858): avc: denied { read } for pid=20510 comm="syz.6.6275" name="usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 941.308605][ T30] audit: type=1400 audit(1792494053.038:1859): avc: denied { open } for pid=20510 comm="syz.6.6275" path="/dev/usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 944.502890][T19988] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 944.534937][T19988] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 944.558037][T19988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 944.597278][T19988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 944.607508][T19988] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 946.746426][ T4918] Bluetooth: hci7: command tx timeout [ 948.824756][ T4918] Bluetooth: hci7: command tx timeout [ 950.905255][ T4918] Bluetooth: hci7: command tx timeout [ 952.984181][ T4918] Bluetooth: hci7: command tx timeout [ 974.907465][T20495] lo speed is unknown, defaulting to 1000 [ 981.300517][T19988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 981.331044][T19988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 981.369280][T19988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 981.451209][T19988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 981.466626][T19988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 983.546452][ T4918] Bluetooth: hci0: command tx timeout [ 985.623942][ T4918] Bluetooth: hci0: command tx timeout [ 987.414208][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.415710][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.703536][ T4918] Bluetooth: hci0: command tx timeout [ 988.376753][T19988] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 988.397755][T19988] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 988.426729][T19988] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 988.494624][T19988] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 988.551406][T19988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 989.786121][ T4918] Bluetooth: hci0: command tx timeout [ 990.745063][ T4918] Bluetooth: hci1: command tx timeout [ 992.823547][ T4918] Bluetooth: hci1: command tx timeout [ 994.235721][T19988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 994.289295][T19988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 994.343982][T19988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 994.440579][T19988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 994.518746][T19988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 994.906741][ T4918] Bluetooth: hci1: command tx timeout [ 996.664206][ T4918] Bluetooth: hci2: command tx timeout [ 997.003608][ T4918] Bluetooth: hci1: command tx timeout [ 998.743717][ T4918] Bluetooth: hci2: command tx timeout [ 999.108547][ T30] audit: type=1400 audit(1792494110.818:1860): avc: denied { write } for pid=20531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1000.840055][ T4918] Bluetooth: hci2: command tx timeout [ 1002.918988][ T4918] Bluetooth: hci2: command tx timeout [ 1009.681035][T19988] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1009.716330][T19988] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1009.725659][T19988] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1009.777892][T19988] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1009.825845][T19988] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1011.902843][ T30] audit: type=1400 audit(1792494123.608:1861): avc: denied { write } for pid=20599 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1012.184516][ T4918] Bluetooth: hci9: command tx timeout [ 1014.265102][ T4918] Bluetooth: hci9: command tx timeout [ 1016.343850][T19988] Bluetooth: hci9: command tx timeout [ 1016.549527][ T8650] hsr_slave_0: left promiscuous mode [ 1016.736284][ T8650] hsr_slave_1: left promiscuous mode [ 1016.819398][ T8650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.819482][ T8650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.065134][ T8650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.065209][ T8650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.539905][ T8650] veth1_macvtap: left promiscuous mode [ 1017.540038][ T8650] veth0_macvtap: left promiscuous mode [ 1017.555198][ T8650] veth1_vlan: left promiscuous mode [ 1017.555869][ T8650] veth0_vlan: left promiscuous mode [ 1018.424670][T19988] Bluetooth: hci9: command tx timeout [ 1027.034873][ T30] audit: type=1400 audit(1792494138.738:1862): avc: denied { map } for pid=20619 comm="syz.6.6283" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1035.470482][ T4918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1035.546031][ T4918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1035.564934][ T4918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1035.599637][ T4918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1035.629921][ T4918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1037.961630][ T4918] Bluetooth: hci4: command tx timeout [ 1040.025450][ T4918] Bluetooth: hci4: command tx timeout [ 1042.105665][ T4918] Bluetooth: hci4: command tx timeout [ 1044.187832][ T4918] Bluetooth: hci4: command tx timeout [ 1045.778895][T19988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1045.804824][T19988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1045.809367][T19988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1045.828328][T19988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1045.842864][T19988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1048.106441][T19988] Bluetooth: hci5: command tx timeout [ 1048.859964][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1048.860456][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1050.208230][T19988] Bluetooth: hci5: command tx timeout [ 1052.264095][ T4918] Bluetooth: hci5: command tx timeout [ 1052.278118][ T4918] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1052.286647][ T4918] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1052.319504][ T4918] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1052.372221][ T4918] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1052.398937][ T4918] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1054.343805][ T4918] Bluetooth: hci5: command tx timeout [ 1054.744247][ T4918] Bluetooth: hci8: command tx timeout [ 1055.973729][ T8650] team0 (unregistering): Port device team_slave_1 removed [ 1056.028536][ T4918] Bluetooth: hci6: command 0x0406 tx timeout [ 1056.824757][T19988] Bluetooth: hci8: command tx timeout [ 1058.308049][ T8650] team0 (unregistering): Port device team_slave_0 removed [ 1058.904084][T19988] Bluetooth: hci8: command tx timeout [ 1060.996986][T19988] Bluetooth: hci8: command tx timeout [ 1065.909609][ T4918] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1065.934056][ T4918] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1065.954271][ T4918] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1065.981700][ T4918] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1065.995888][ T4918] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1068.106022][T19988] Bluetooth: hci10: command tx timeout [ 1070.193679][ T4918] Bluetooth: hci10: command tx timeout [ 1071.397986][ T4918] Bluetooth: hci7: command 0x0406 tx timeout [ 1072.267224][T19988] Bluetooth: hci10: command tx timeout [ 1073.295937][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1074.198677][T20514] lo speed is unknown, defaulting to 1000 [ 1074.357977][T19988] Bluetooth: hci10: command tx timeout [ 1079.550059][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1094.405371][ T8650] IPVS: stop unused estimator thread 0... [ 1107.039250][T20706] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1107.094786][T20706] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1107.130891][T20706] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1107.195468][T20706] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1107.229911][T20706] Bluetooth: hci0: command 0x0406 tx timeout [ 1107.247335][T20706] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1109.623702][T19988] Bluetooth: hci11: command tx timeout [ 1110.312163][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.312663][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1111.705409][ T4918] Bluetooth: hci11: command tx timeout [ 1112.351310][ T4918] Bluetooth: hci1: command 0x0406 tx timeout [ 1113.803748][T19988] Bluetooth: hci11: command tx timeout [ 1115.863346][T19988] Bluetooth: hci11: command tx timeout [ 1116.841176][T20706] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1116.872774][T20706] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1116.878807][T20706] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1116.963175][T20706] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1117.044218][T20706] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1117.470553][T20706] Bluetooth: hci2: command 0x0406 tx timeout [ 1119.146658][ T4918] Bluetooth: hci12: command tx timeout [ 1121.238223][ T4918] Bluetooth: hci12: command tx timeout [ 1123.304585][ T4918] Bluetooth: hci12: command tx timeout [ 1125.393850][T20706] Bluetooth: hci12: command tx timeout [ 1125.477610][T20706] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1125.500060][T20706] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1125.552543][T20706] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1125.632275][T20706] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1125.685114][T20706] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1127.863448][T20706] Bluetooth: hci13: command tx timeout [ 1129.943623][T20706] Bluetooth: hci13: command tx timeout [ 1131.476828][T20657] lo speed is unknown, defaulting to 1000 [ 1132.024933][T20706] Bluetooth: hci13: command tx timeout [ 1134.103715][T20706] Bluetooth: hci13: command tx timeout [ 1137.574613][ T4918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1137.602139][ T4918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1137.643538][ T4918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1137.679548][ T4918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1137.687246][ T4918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1139.957536][ T4918] Bluetooth: hci0: command tx timeout [ 1142.025188][ T4918] Bluetooth: hci0: command tx timeout [ 1142.663795][ T30] audit: type=1400 audit(1792494254.378:1863): avc: denied { write } for pid=20695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.121839][ T4918] Bluetooth: hci0: command tx timeout [ 1146.184608][ T4918] Bluetooth: hci0: command tx timeout [ 1154.594142][ T30] audit: type=1400 audit(1792494266.318:1864): avc: denied { write } for pid=20769 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.242894][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1167.117997][T20706] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1167.149345][T20706] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1167.169924][T20706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1167.247499][T20706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1167.323621][T20706] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1169.784373][ T4918] Bluetooth: hci1: command tx timeout [ 1169.920254][T20795] netlink: 'syz.6.6297': attribute type 10 has an invalid length. [ 1171.287667][T20795] team0: Device wg2 is of different type [ 1171.728993][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.729470][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.874102][ T4918] Bluetooth: hci1: command tx timeout [ 1173.943911][ T4918] Bluetooth: hci1: command tx timeout [ 1176.034864][ T4918] Bluetooth: hci1: command tx timeout [ 1177.370532][T20706] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1177.400541][T20706] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1177.418215][T20706] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1177.446221][T20706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1177.464696][T20706] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1179.704376][ T4918] Bluetooth: hci2: command tx timeout [ 1181.784488][ T4918] Bluetooth: hci2: command tx timeout [ 1181.833540][ T30] audit: type=1400 audit(1792494293.528:1865): avc: denied { ioctl } for pid=20807 comm="syz.6.6298" path="socket:[68857]" dev="sockfs" ino=68857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1183.865189][ T4918] Bluetooth: hci2: command tx timeout [ 1185.812516][T19988] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1185.834949][T19988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1185.852701][T19988] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1185.902996][T19988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1185.918369][T19988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1185.948976][ T4918] Bluetooth: hci2: command tx timeout [ 1188.104511][T19988] Bluetooth: hci4: command tx timeout [ 1189.157538][T19988] Bluetooth: hci10: command 0x0406 tx timeout [ 1190.184291][T20706] Bluetooth: hci4: command tx timeout [ 1192.265313][T20706] Bluetooth: hci4: command tx timeout [ 1194.343715][T20706] Bluetooth: hci4: command tx timeout [ 1201.063984][T19988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1201.106370][T19988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1201.135324][T19988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1201.219595][T19988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1201.287325][T19988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1203.465418][T20706] Bluetooth: hci5: command tx timeout [ 1205.544675][T20706] Bluetooth: hci5: command tx timeout [ 1207.625826][T20706] Bluetooth: hci5: command tx timeout [ 1209.723196][T20706] Bluetooth: hci5: command tx timeout [ 1215.657325][ T30] audit: type=1400 audit(1792494327.338:1866): avc: denied { write } for pid=20793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.700003][ T30] audit: type=1400 audit(1792494339.408:1867): avc: denied { write } for pid=20866 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.792251][ T30] audit: type=1400 audit(1792494339.448:1868): avc: denied { ioctl } for pid=20867 comm="syz.6.6302" path="socket:[68989]" dev="sockfs" ino=68989 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1231.306812][T20782] lo speed is unknown, defaulting to 1000 [ 1231.801425][T19988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1231.825111][T19988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1231.844167][T19988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1231.870532][T19988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1231.894921][T19988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1233.192247][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.192722][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1234.104110][T20706] Bluetooth: hci0: command tx timeout [ 1236.184855][T20706] Bluetooth: hci0: command tx timeout [ 1238.264744][T20706] Bluetooth: hci0: command tx timeout [ 1240.214928][T20706] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1240.267561][T20706] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1240.276370][T20706] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1240.310274][T20706] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1240.325141][T20706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1240.345765][T20706] Bluetooth: hci0: command tx timeout [ 1242.427387][T19988] Bluetooth: hci6: command tx timeout [ 1244.505402][T19988] Bluetooth: hci6: command tx timeout [ 1246.584894][T19988] Bluetooth: hci6: command tx timeout [ 1248.147766][T20706] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1248.184382][T20706] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1248.212076][T20706] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1248.263172][T20706] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1248.364147][T20706] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1248.667289][T19988] Bluetooth: hci6: command tx timeout [ 1250.514177][T19988] Bluetooth: hci8: command tx timeout [ 1252.585993][T19988] Bluetooth: hci8: command tx timeout [ 1254.663638][T19988] Bluetooth: hci8: command tx timeout [ 1256.755337][T19988] Bluetooth: hci8: command tx timeout [ 1263.664445][T20706] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1263.701169][T20706] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1263.744499][T20706] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1263.834938][T20706] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1263.877376][ T4918] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1266.104487][ T4918] Bluetooth: hci9: command tx timeout [ 1268.189056][ T4918] Bluetooth: hci9: command tx timeout [ 1270.271009][ T4918] Bluetooth: hci9: command tx timeout [ 1272.343916][ T4918] Bluetooth: hci9: command tx timeout [ 1280.821246][ T30] audit: type=1400 audit(1792494392.538:1869): avc: denied { write } for pid=20882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1283.581783][T20874] lo speed is unknown, defaulting to 1000 [ 1291.554317][ T4918] Bluetooth: hci1: command 0x0406 tx timeout [ 1292.791172][ T30] audit: type=1400 audit(1792494404.458:1870): avc: denied { write } for pid=20951 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1294.634527][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.635686][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1296.577700][ T4918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1296.618226][ T4918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1296.646293][ T4918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1296.710029][ T4918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1296.759410][ T4918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1298.843899][T19988] Bluetooth: hci2: command tx timeout [ 1300.906955][T19988] Bluetooth: hci2: command tx timeout [ 1303.003207][T19988] Bluetooth: hci2: command tx timeout [ 1304.049877][ T4918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1304.082809][ T4918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1304.141027][ T4918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1304.186359][ T4918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1304.269675][ T4918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1305.068732][ T4918] Bluetooth: hci2: command tx timeout [ 1306.433610][ T4918] Bluetooth: hci4: command tx timeout [ 1308.506263][ T4918] Bluetooth: hci4: command tx timeout [ 1310.585277][ T4918] Bluetooth: hci4: command tx timeout [ 1311.520472][T19988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1311.582059][T19988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1311.621734][T19988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1311.667361][T19988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1311.718475][T19988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1312.664207][ T4918] Bluetooth: hci4: command tx timeout [ 1314.036018][ T4918] Bluetooth: hci5: command tx timeout [ 1316.104684][ T4918] Bluetooth: hci5: command tx timeout [ 1318.184511][ T4918] Bluetooth: hci5: command tx timeout [ 1320.273342][ T4918] Bluetooth: hci5: command tx timeout [ 1327.299621][T19988] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1327.317951][T19988] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1327.326137][T19988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1327.379071][T19988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1327.449959][T19988] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1329.623697][ T4918] Bluetooth: hci7: command tx timeout [ 1331.704376][ T4918] Bluetooth: hci7: command tx timeout [ 1333.784116][ T4918] Bluetooth: hci7: command tx timeout [ 1335.863607][ T4918] Bluetooth: hci7: command tx timeout [ 1343.087393][ T30] audit: type=1400 audit(1792494454.788:1871): avc: denied { write } for pid=20965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1351.094409][T20959] lo speed is unknown, defaulting to 1000 [ 1354.922638][ T30] audit: type=1400 audit(1792494466.648:1872): avc: denied { write } for pid=21036 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1356.067318][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.067800][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1358.117441][ T4918] Bluetooth: hci0: command 0x0406 tx timeout [ 1360.426573][ T4918] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1360.446752][ T4918] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1360.480349][ T4918] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1360.549464][ T4918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1360.607845][ T4918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1362.823561][ T4918] Bluetooth: hci6: command tx timeout [ 1364.904024][ T4918] Bluetooth: hci6: command tx timeout [ 1366.983615][ T4918] Bluetooth: hci6: command tx timeout [ 1369.077902][ T4918] Bluetooth: hci6: command tx timeout [ 1370.167427][T19988] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1370.200332][T19988] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1370.224516][T19988] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1370.253314][T19988] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1370.310071][T19988] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1372.753634][ T4918] Bluetooth: hci9: command tx timeout [ 1373.463724][ T4918] Bluetooth: hci8: command 0x0406 tx timeout [ 1374.826896][T19988] Bluetooth: hci9: command tx timeout [ 1375.824758][ T4918] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1375.860842][ T4918] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1375.889990][ T4918] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1375.941163][ T4918] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1375.991498][ T4918] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1376.916892][T19988] Bluetooth: hci9: command tx timeout [ 1378.678912][T19988] Bluetooth: hci10: command tx timeout [ 1378.984840][T19988] Bluetooth: hci9: command tx timeout [ 1380.750723][T19988] Bluetooth: hci10: command tx timeout [ 1382.827672][T19988] Bluetooth: hci10: command tx timeout [ 1384.924957][T19988] Bluetooth: hci10: command tx timeout [ 1390.954085][ T4918] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1390.971366][ T4918] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1390.975654][ T4918] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1390.993469][ T4918] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1391.009702][ T4918] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1393.236764][ T4918] Bluetooth: hci11: command tx timeout [ 1395.303847][ T4918] Bluetooth: hci11: command tx timeout [ 1397.385413][ T4918] Bluetooth: hci11: command tx timeout [ 1399.469622][ T4918] Bluetooth: hci11: command tx timeout [ 1401.670629][T21104] ip6gretap1: entered allmulticast mode [ 1414.860450][T20899] lo speed is unknown, defaulting to 1000 [ 1417.521476][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.521953][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1419.544360][T19988] Bluetooth: hci2: command 0x0406 tx timeout [ 1425.598719][T19988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1425.632258][T19988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1425.643445][T19988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1425.695514][T19988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1425.748378][T19988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1425.857314][ T30] audit: type=1400 audit(1792494537.538:1873): avc: denied { write } for pid=21078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1428.125121][T19988] Bluetooth: hci5: command tx timeout [ 1429.784052][T19988] Bluetooth: hci4: command 0x0406 tx timeout [ 1430.184385][ T4918] Bluetooth: hci5: command tx timeout [ 1432.263771][ T4918] Bluetooth: hci5: command tx timeout [ 1434.343480][ T4918] Bluetooth: hci5: command tx timeout [ 1435.491460][T19988] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1435.527075][T19988] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1435.536388][T19988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1435.582428][T19988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1435.648615][T19988] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1435.795876][T21147] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 1437.953512][T19988] Bluetooth: hci7: command tx timeout [ 1438.941640][ T30] audit: type=1400 audit(1792494550.628:1874): avc: denied { write } for pid=21144 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1440.034963][T19988] Bluetooth: hci7: command tx timeout [ 1442.104235][T19988] Bluetooth: hci7: command tx timeout [ 1443.082853][ T4918] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1443.099001][ T4918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1443.112638][ T4918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1443.174317][ T4918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1443.210140][ T4918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1444.183794][T19988] Bluetooth: hci7: command tx timeout [ 1445.394460][T19988] Bluetooth: hci1: command tx timeout [ 1447.472451][T19988] Bluetooth: hci1: command tx timeout [ 1449.544615][T19988] Bluetooth: hci1: command tx timeout [ 1451.631566][T19988] Bluetooth: hci1: command tx timeout [ 1457.201433][ T4918] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1457.245975][ T4918] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1457.257727][ T4918] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1457.324390][ T4918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1457.373467][ T4918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1459.467612][T19988] Bluetooth: hci6: command tx timeout [ 1461.549462][T19988] Bluetooth: hci6: command tx timeout [ 1463.624219][T19988] Bluetooth: hci6: command tx timeout [ 1465.703648][T19988] Bluetooth: hci6: command tx timeout [ 1466.779959][T20969] lo speed is unknown, defaulting to 1000 [ 1478.928402][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1478.928881][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.285933][ T4918] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1487.334148][ T4918] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1487.358534][ T4918] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1487.420722][ T4918] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1487.458795][ T4918] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1489.554643][ T4918] Bluetooth: hci9: command tx timeout [ 1490.519047][ T30] audit: type=1400 audit(1792494602.208:1875): avc: denied { write } for pid=21168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1491.623958][ T4918] Bluetooth: hci9: command tx timeout [ 1493.708204][ T4918] Bluetooth: hci9: command tx timeout [ 1495.784911][ T4918] Bluetooth: hci9: command tx timeout [ 1497.501575][T19988] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1497.537166][T19988] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1497.561559][T19988] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1497.645127][T19988] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1497.700989][T19988] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1500.035247][T19988] Bluetooth: hci10: command tx timeout [ 1502.104914][T19988] Bluetooth: hci10: command tx timeout [ 1502.455981][ T30] audit: type=1400 audit(1792494614.168:1876): avc: denied { write } for pid=21240 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1504.184252][T19988] Bluetooth: hci10: command tx timeout [ 1505.134271][ T4918] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1505.157444][ T4918] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1505.168390][ T4918] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1505.191270][ T4918] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1505.235135][ T4918] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1506.266387][ T4918] Bluetooth: hci10: command tx timeout [ 1507.383530][ T4918] Bluetooth: hci11: command tx timeout [ 1509.465680][ T4918] Bluetooth: hci11: command tx timeout [ 1509.510206][ T30] audit: type=1400 audit(1792494621.198:1877): avc: denied { read } for pid=21252 comm="syz.6.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1509.723461][ T30] audit: type=1400 audit(1792494621.418:1878): avc: denied { setopt } for pid=21252 comm="syz.6.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1511.544239][ T4918] Bluetooth: hci11: command tx timeout [ 1513.623192][ T4918] Bluetooth: hci11: command tx timeout [ 1516.691464][T21146] lo speed is unknown, defaulting to 1000 [ 1521.965657][T19988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1521.984164][T19988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1522.008755][T19988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1522.042692][T19988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1522.061568][T19988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1524.280196][T19988] Bluetooth: hci5: command tx timeout [ 1526.347339][T19988] Bluetooth: hci5: command tx timeout [ 1528.457130][T19988] Bluetooth: hci5: command tx timeout [ 1530.503409][T19988] Bluetooth: hci5: command tx timeout [ 1540.372271][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.372742][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.850064][ T4918] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1551.879170][ T4918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1551.900577][ T4918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1551.928704][ T4918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1551.940071][ T4918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1553.927593][ T30] audit: type=1400 audit(1792494665.648:1879): avc: denied { write } for pid=21261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1554.743479][T19988] Bluetooth: hci1: command tx timeout [ 1556.823754][T19988] Bluetooth: hci1: command tx timeout [ 1558.903750][T19988] Bluetooth: hci1: command tx timeout [ 1559.961494][ T4918] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1560.047474][ T4918] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1560.085648][ T4918] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1560.127072][ T4918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1560.146472][ T4918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1560.984660][T19988] Bluetooth: hci1: command tx timeout [ 1562.763878][T19988] Bluetooth: hci6: command tx timeout [ 1562.905201][T19988] Bluetooth: hci7: command 0x0406 tx timeout [ 1564.823878][ T4918] Bluetooth: hci6: command tx timeout [ 1565.828814][ T30] audit: type=1400 audit(1792494677.538:1880): avc: denied { write } for pid=21324 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1566.904335][ T4918] Bluetooth: hci6: command tx timeout [ 1568.983988][ T4918] Bluetooth: hci6: command tx timeout [ 1569.917714][T19988] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1569.945930][T19988] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1569.960449][T19988] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1570.084785][T19988] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1570.105891][T19988] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1572.514029][ T4918] Bluetooth: hci12: command tx timeout [ 1574.583604][ T4918] Bluetooth: hci12: command tx timeout [ 1576.664372][ T4918] Bluetooth: hci12: command tx timeout [ 1578.755219][ T4918] Bluetooth: hci12: command tx timeout [ 1588.895751][T19988] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1588.947920][T19988] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1588.982529][T19988] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1589.050390][T19988] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1589.087441][T19988] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1591.304384][ T4918] Bluetooth: hci13: command tx timeout [ 1592.261890][T19988] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1592.300383][T19988] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1592.336943][T19988] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1592.414307][T19988] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1592.450468][T19988] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1593.384047][T19988] Bluetooth: hci13: command tx timeout [ 1594.764753][T19988] Bluetooth: hci14: command tx timeout [ 1595.465974][T19988] Bluetooth: hci13: command tx timeout [ 1596.833528][T19988] Bluetooth: hci14: command tx timeout [ 1597.544110][T19988] Bluetooth: hci13: command tx timeout [ 1598.933509][T19988] Bluetooth: hci14: command tx timeout [ 1600.985558][T19988] Bluetooth: hci14: command tx timeout [ 1601.848440][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1601.850735][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.256418][T21217] lo speed is unknown, defaulting to 1000 [ 1614.121924][T19988] Bluetooth: hci9: command 0x0406 tx timeout [ 1619.500564][T19988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1619.529337][T19988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1619.556672][T19988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1619.604744][T19988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1619.679643][T19988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1621.945938][ T4918] Bluetooth: hci5: command tx timeout [ 1624.033242][ T4918] Bluetooth: hci5: command tx timeout [ 1626.105293][ T4918] Bluetooth: hci5: command tx timeout [ 1628.188459][ T4918] Bluetooth: hci5: command tx timeout [ 1631.229027][T19988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1631.262640][T19988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1631.303086][T19988] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1631.417498][T19988] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1631.501149][T19988] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1633.873832][ T4918] Bluetooth: hci3: command tx timeout [ 1635.955412][ T4918] Bluetooth: hci3: command tx timeout [ 1636.171860][T19988] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1636.235284][T19988] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1636.264967][T19988] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1636.300956][T19988] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1636.315869][T19988] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1636.865263][ T30] audit: type=1400 audit(1792494748.588:1881): avc: denied { write } for pid=21363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1638.023611][ T4918] Bluetooth: hci3: command tx timeout [ 1638.513601][ T4918] Bluetooth: hci10: command tx timeout [ 1640.103115][ T4918] Bluetooth: hci3: command tx timeout [ 1640.593397][ T4918] Bluetooth: hci10: command tx timeout [ 1642.666335][ T4918] Bluetooth: hci10: command tx timeout [ 1644.768521][ T4918] Bluetooth: hci10: command tx timeout [ 1645.538018][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.538062][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.250773][ T30] audit: type=1400 audit(1792494760.848:1882): avc: denied { write } for pid=21419 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1650.711538][T19988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1650.768206][T19988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1650.797367][T19988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1650.891998][T19988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1650.966463][T19988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1651.656102][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1651.656145][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.228948][ T4918] Bluetooth: hci0: command tx timeout [ 1654.439096][T19988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1654.470719][T19988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1654.493650][T19988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1654.525530][T19988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1654.616575][T19988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1655.305275][T19988] Bluetooth: hci0: command tx timeout [ 1656.313945][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1656.313993][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.904277][T19988] Bluetooth: hci2: command tx timeout [ 1657.384143][T19988] Bluetooth: hci0: command tx timeout [ 1658.984732][T19988] Bluetooth: hci2: command tx timeout [ 1659.488631][T19988] Bluetooth: hci0: command tx timeout [ 1661.083054][T19988] Bluetooth: hci2: command tx timeout [ 1661.567621][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1661.567668][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.144377][T19988] Bluetooth: hci2: command tx timeout [ 1663.258794][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1663.259266][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1663.318459][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1670.834689][T19937] netdevsim netdevsim6 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.647415][T19959] netdevsim netdevsim6 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.543358][T19988] Bluetooth: hci1: command 0x0406 tx timeout [ 1676.338571][T19937] netdevsim netdevsim6 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.683140][T20008] netdevsim netdevsim6 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.766875][ T12] bridge_slave_1: left allmulticast mode [ 1679.766915][ T12] bridge_slave_1: left promiscuous mode [ 1679.809454][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.744539][ T12] bridge_slave_0: left allmulticast mode [ 1680.744604][ T12] bridge_slave_0: left promiscuous mode [ 1680.746914][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.550772][T19988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1686.593495][T19988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1686.627582][T19988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1686.728358][T19988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1686.754920][T19988] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1688.903338][T19988] Bluetooth: hci6: command tx timeout [ 1690.985290][T19988] Bluetooth: hci6: command tx timeout [ 1693.073956][T19988] Bluetooth: hci6: command tx timeout [ 1695.154499][T19988] Bluetooth: hci6: command tx timeout [ 1696.686780][ T4918] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1696.725672][ T4918] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1696.753633][ T4918] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1696.807251][ T4918] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1696.830905][ T4918] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1699.063778][T19988] Bluetooth: hci11: command tx timeout [ 1701.144051][T19988] Bluetooth: hci11: command tx timeout [ 1702.292647][ T4918] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1702.348933][ T4918] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1702.397100][ T4918] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1702.488266][ T4918] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1702.527371][ T4918] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1703.237410][ T4918] Bluetooth: hci11: command tx timeout [ 1704.745590][ T4918] Bluetooth: hci12: command tx timeout [ 1705.313811][ T4918] Bluetooth: hci11: command tx timeout [ 1706.834010][ T4918] Bluetooth: hci12: command tx timeout [ 1708.914464][ T4918] Bluetooth: hci12: command tx timeout [ 1710.989648][ T4918] Bluetooth: hci12: command tx timeout [ 1712.830932][T21310] lo speed is unknown, defaulting to 1000 [ 1714.456565][ T32] INFO: task syz-executor:20969 blocked for more than 143 seconds. [ 1714.456599][ T32] Tainted: G L syzkaller #0 [ 1714.456617][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1714.456632][ T32] task:syz-executor state:D stack:24168 pid:20969 tgid:20969 ppid:1 task_flags:0x400140 flags:0x00080003 [ 1714.456713][ T32] Call Trace: [ 1714.456728][ T32] [ 1714.456875][ T32] __schedule+0x1259/0x6980 [ 1714.457365][ T32] ? lock_acquire+0x1d1/0x380 [ 1714.457521][ T32] ? __pfx___schedule+0x10/0x10 [ 1714.457558][ T32] ? find_held_lock+0x2b/0x80 [ 1714.457636][ T32] ? schedule+0x225/0x2c0 [ 1714.457889][ T32] schedule+0xdd/0x2c0 [ 1714.529243][ T32] schedule_preempt_disabled+0x13/0x30 [ 1714.529309][ T32] rwsem_down_write_slowpath+0x4c6/0x12f0 [ 1714.529558][ T32] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1714.529850][ T32] ? lock_acquire+0x1d1/0x380 [ 1714.529980][ T32] ? __pfx___might_resched+0x10/0x10 [ 1714.530221][ T32] down_write+0x1c0/0x1f0 [ 1714.530307][ T32] ? __pfx_down_write+0x10/0x10 [ 1714.530500][ T32] rdma_dev_exit_net+0x174/0x6b0 [ 1714.530701][ T32] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1714.653267][ T30] audit: type=1400 audit(1792494826.338:1883): avc: denied { write } for pid=5584 comm="syz-executor" path="pipe:[4549]" dev="pipefs" ino=4549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1714.683663][ T32] ? __pfx___might_resched+0x10/0x10 [ 1714.683756][ T32] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 1714.683798][ T32] ? mutex_is_locked+0x17/0x60 [ 1714.683849][ T32] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1714.683940][ T32] ops_undo_list+0x2ee/0xab0 [ 1714.684208][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 1714.684302][ T32] ? ops_init+0x2fa/0x5f0 [ 1714.684484][ T32] setup_net+0x1fa/0x3a0 [ 1714.684627][ T32] ? __pfx_setup_net+0x10/0x10 [ 1714.684880][ T32] copy_net_ns+0x345/0x7a0 [ 1714.685052][ T32] create_new_namespaces+0x3ea/0xac0 [ 1714.726882][ T32] unshare_nsproxy_namespaces+0xf2/0x220 [ 1714.727010][ T32] ksys_unshare+0x44f/0x980 [ 1714.727101][ T32] ? __pfx_ksys_unshare+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1714.727282][ T32] ? __pfx_do_faccessat+0x10/0x10 [ 1714.727542][ T32] __x64_sys_unshare+0x31/0x40 [ 1714.727629][ T32] do_syscall_64+0x123/0x790 [ 1714.727752][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.727792][ T32] RIP: 0033:0x7fb788d9f827 [ 1714.727855][ T32] RSP: 002b:00007ffcbf183608 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1714.727889][ T32] RAX: ffffffffffffffda RBX: 00007fb789025f40 RCX: 00007fb788d9f827 [ 1714.727908][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1714.727927][ T32] RBP: 00007fb7890267b8 R08: 0000000000000000 R09: 0000000000000000 [ 1714.727946][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1714.727965][ T32] R13: 0000000000000003 R14: 00007ffcbf183848 R15: 0000000000000000 [ 1714.792615][ T32] [ 1714.792683][ T32] [ 1714.792683][ T32] Showing all locks held in the system: [ 1714.792700][ T32] locks held by pool_workqueue_/3: 1, on CPU#0: [ 1714.792718][ T32] #0: ffffffff8fdf8568 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1714.792817][ T32] locks held by kworker/u8:0/12: 5, on CPU#1: [ 1714.792836][ T32] #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1714.793196][ T32] #1: ffffc90000117d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1714.793283][ T32] #2: ffffffff91cbf348 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1714.793387][ T32] #3: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x4d/0x360 [ 1714.793510][ T32] #4: ffffffff8fdf8568 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1714.793640][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 1714.793664][ T32] #0: ffff88807d835140 ((wq_completion)krds_cp_wq#8/4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1714.793741][ T32] #1: ffffc90000127d08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1714.793819][ T32] #2: ffff88804a5aaa80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 1714.793921][ T32] locks held by pr/ttyS0/31: 2, last CPU#1: [ 1714.793940][ T32] #0: ffffffff8fdd8978 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1714.794373][ T32] #1: ffffffff9cc84578 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1714.860915][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1714.860932][ T32] #0: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1714.861032][ T32] locks held by kworker/u8:4/59: 4, last CPU#0: [ 1714.861050][ T32] #0: ffff8880554e9140 ((wq_completion)krds_cp_wq#8/3){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1714.861145][ T32] #1: ffffc9000201fd08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1714.861251][ T32] #2: ffff88804a5aad80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 1714.861381][ T32] #3: ffff888043f33960 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x881/0x1b40 [ 1714.861500][ T32] locks held by kworker/u8:5/144: 3, last CPU#0: [ 1714.861515][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1714.861585][ T32] #1: ffffc90002cf7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1714.861670][ T32] #2: ffff888077b80258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1714.861788][ T32] locks held by kworker/u8:6/1001: 3, last CPU#0: [ 1714.861809][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1714.861924][ T32] #1: ffffc90004ff7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1714.862058][ T32] #2: ffff888055c5a258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1714.862148][ T32] locks held by kworker/u8:8/1396: 5, last CPU#0: [ 1714.862165][ T32] #0: ffff88807d834940 ((wq_completion)krds_cp_wq#8/5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1714.862246][ T32] #1: ffffc9000604fd08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1714.948234][ T32] #2: ffff88804a5aa780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 1714.948345][ T32] #3: ffff888035b862a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x881/0x1b40 [ 1714.948452][ T32] #4: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: __inet6_bind+0x9a4/0x1b40 [ 1714.948584][ T32] locks held by syslogd/4948: 1, last CPU#0: [ 1714.948607][ T32] #0: ffff88807dde7478 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x298/0xd40 [ 1714.948734][ T32] locks held by udevd/4966: 4, last CPU#0: [ 1714.948748][ T32] #0: ffffffff8ff3df50 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x7a01/0x84c0 [ 1714.948820][ T32] #1: ffff88807ca10f80 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 1714.948910][ T32] #2: ffff88807e6fc080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 1714.949029][ T32] #3: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1714.949154][ T32] locks held by getty/5359: 2, on CPU#0: [ 1714.949179][ T32] #0: ffff8880276480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1714.949338][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 1714.949437][ T32] locks held by syz-executor/5584: 2, last CPU#0: [ 1714.949455][ T32] #0: ffff88802de3d900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1714.949551][ T32] #1: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1714.949666][ T32] locks held by kworker/u8:9/8426: 3, last CPU#0: [ 1714.992074][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1714.992158][ T32] #1: ffffc90002dd7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1714.992244][ T32] #2: ffff888038d29258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1714.992348][ T32] locks held by kworker/u8:10/8650: 3, last CPU#0: [ 1714.992368][ T32] #0: ffff8880554ee940 ((wq_completion)krds_cp_wq#8/1){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1714.992481][ T32] #1: ffffc9000e617d08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1714.992618][ T32] #2: ffff88804a5ab380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 1714.992716][ T32] locks held by kworker/u8:11/14208: 3, last CPU#0: [ 1714.992732][ T32] #0: ffff8880554e8940 ((wq_completion)krds_cp_wq#8/0){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1714.992809][ T32] #1: ffffc9000598fd08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1714.992999][ T32] #2: ffff88804a5ab680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 1714.993089][ T32] locks held by kworker/u8:14/19935: 4, last CPU#0: [ 1714.993107][ T32] #0: ffff8880554ed940 ((wq_completion)krds_cp_wq#8/2){+.+ ** replaying previous printk message ** [ 1714.993107][ T32] #0: ffff8880554ed940 ((wq_completion)krds_cp_wq#8/2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1714.993200][ T32] #1: ffffc90004cb7d08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1714.993307][ T32] #2: ffff88804a5ab080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 1714.993435][ T32] #3: ffff888043f34720 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x881/0x1b40 [ 1715.047880][ T32] locks held by kworker/u8:15/19937: 2, on CPU#0: [ 1715.047908][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1715.048028][ T32] #1: ffffc90004c77d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1715.048100][ T32] locks held by kworker/u8:16/19939: 4, last CPU#0: [ 1715.048117][ T32] #0: ffff88807d834140 ((wq_completion)krds_cp_wq#8/6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1715.048203][ T32] #1: ffffc90004c37d08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1715.048303][ T32] #2: ffff88804a5aa480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 1715.048426][ T32] #3: ffff888043f362a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x881/0x1b40 [ 1715.048555][ T32] locks held by kworker/u8:18/19959: 4, last CPU#0: [ 1715.048579][ T32] #0: ffff88807d833940 ((wq_completion)krds_cp_wq#8/7){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1715.048653][ T32] #1: ffffc900050a7d08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1715.048731][ T32] #2: ffff88804a5aa180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 1715.048829][ T32] #3: ffff88807abdd4e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x881/0x1b40 [ 1715.048935][ T32] locks held by kworker/u8:19/20008: 2, on CPU#0: [ 1715.048956][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1715.049080][ T32] #1: ffffc90004727d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1715.049195][ T32] locks held by kworker/u8:20/20117: 2, on CPU#0: [ 1715.049210][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1715.049281][ T32] #1: ffffc90003be7d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1715.089204][ T32] locks held by kworker/u8:21/20234: 3, last CPU#0: [ 1715.089224][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1715.089324][ T32] #1: ffffc9000387fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1715.089439][ T32] #2: ffff88807c316258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1715.089587][ T32] locks held by kworker/u8:22/20250: 2, last CPU#0: [ 1715.089611][ T32] #0: ffff888035b5c940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1715.089681][ T32] #1: ffffc9000367fd08 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1715.089759][ T32] locks held by kworker/0:0/20291: 3, last CPU#0: [ 1715.089778][ T32] #0: ffff88801d05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1715.089872][ T32] #1: ffffc90000a47d08 (drain_vmap_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1715.089983][ T32] #2: ffffffff8ffc2be0 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 1715.090142][ T32] locks held by syz-executor/20899: 3, last CPU#0: [ 1715.090156][ T32] #0: ffff88801e2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 1715.090231][ T32] #1: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 1715.090316][ T32] #2: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x23/0x2a0 [ 1715.090411][ T32] locks held by syz-executor/20969: 2, on CPU#0: [ 1715.090431][ T32] #0: ffffffff91cbf348 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1715.090546][ T32] #1: ffffffff918e61a8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1715.153096][ T32] locks held by kworker/0:1/21086: 2, last CPU#0: [ 1715.153118][ T32] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1715.153234][ T32] #1: ffffc90003567d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1715.153360][ T32] locks held by syz-executor/21146: 2, on CPU#0: [ 1715.153383][ T32] #0: ffffffff91cbf348 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1715.153458][ T32] #1: ffffffff918e61a8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1715.153539][ T32] locks held by kworker/1:2/21216: 3, last CPU#1: [ 1715.153557][ T32] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1715.153651][ T32] #1: ffffc90003197d08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1715.153760][ T32] #2: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x21a/0x1a10 [ 1715.153886][ T32] locks held by syz-executor/21217: 2, on CPU#1: [ 1715.153909][ T32] #0: ffffffff91cbf348 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1715.154021][ T32] #1: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1715.154099][ T32] locks held by syz-executor/21310: 5, on CPU#0: [ 1715.154115][ T32] #0: ffffffff91cbf348 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1715.154205][ T32] #1: ffffffff918e6428 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1715.154306][ T32] #2: ffffffff918e61a8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1715.154421][ T32] #3: ffff888053ac1020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 1715.199355][ T32] #4: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 1715.199476][ T32] locks held by syz-executor/21423: 2, last CPU#0: [ 1715.199498][ T32] #0: ffff88807dbfc080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1715.199625][ T32] #1: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1715.199744][ T32] locks held by syz-executor/21428: 2, last CPU#0: [ 1715.199760][ T32] #0: ffff88807e7ed900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1715.199835][ T32] #1: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1715.199924][ T32] locks held by syz-executor/21482: 2, last CPU#0: [ 1715.199943][ T32] #0: ffff88807e6fb440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1715.200051][ T32] #1: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1715.200169][ T32] locks held by syz-executor/21496: 2, last CPU#0: [ 1715.200191][ T32] #0: ffff88804c612910 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b8/0x490 [ 1715.200339][ T32] #1: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1715.200423][ T32] locks held by dhcpcd-run-hook/21497: 3, last CPU#0: [ 1715.200439][ T32] #0: ffff888021fedce0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xa3/0x1940 [ 1715.200523][ T32] #1: ffffffff9090d038 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0x11f/0x1d0 [ 1715.200621][ T32] #2: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1715.200791][ T32] locks held by modprobe/21498: 2, last CPU#0: [ 1715.251704][ T32] #0: ffff8880482ff180 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6f0 [ 1715.251807][ T32] #1: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1715.251911][ T32] locks held by modprobe/21500: 2, last CPU#0: [ 1715.251931][ T32] #0: ffff888021fee420 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xa3/0x1940 [ 1715.252051][ T32] #1: ffff888021fee4b0 (&sig->exec_update_lock){++++}-{4:4}, at: begin_new_exec+0xc85/0x37c0 [ 1715.252201][ T32] [ 1715.252218][ T32] ============================================= [ 1715.252218][ T32] [ 1715.252239][ T32] NMI backtrace for cpu 0 [ 1715.252255][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1715.252279][ T32] Tainted: [L]=SOFTLOCKUP [ 1715.252288][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1715.252301][ T32] Call Trace: [ 1715.252319][ T32] [ 1715.252339][ T32] dump_stack_lvl+0x100/0x190 [ 1715.252453][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1715.252587][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1715.252684][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1715.252786][ T32] sys_info+0x141/0x190 [ 1715.252853][ T32] watchdog+0xcb6/0x1030 [ 1715.253127][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1715.253183][ T32] ? __pfx_watchdog+0x10/0x10 [ 1715.253259][ T32] ? __kthread_parkme+0x18f/0x230 [ 1715.253440][ T32] ? kthread+0x13a/0x450 [ 1715.253493][ T32] ? __pfx_watchdog+0x10/0x10 [ 1715.253546][ T32] kthread+0x373/0x450 [ 1715.253622][ T32] ? __pfx_kthread+0x10/0x10 [ 1715.253704][ T32] ret_from_fork+0x730/0xd60 [ 1715.253807][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.253954][ T32] ? __switch_to+0x800/0x10f0 [ 1715.254063][ T32] ? __pfx_kthread+0x10/0x10 [ 1715.254146][ T32] ret_from_fork_asm+0x1a/0x30 [ 1715.254548][ T32] [ 1715.254968][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1715.255007][ C1] NMI backtrace for cpu 1 [ 1715.255027][ C1] CPU: 1 UID: 0 PID: 31 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1715.255054][ C1] Tainted: [L]=SOFTLOCKUP [ 1715.255068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1715.255084][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 1715.255132][ C1] Code: 30 59 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 d8 77 cd fc eb a2 e8 61 78 [ 1715.255154][ C1] RSP: 0018:ffffc90000a77950 EFLAGS: 00000002 [ 1715.255185][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1715.255204][ C1] RDX: 00000000000003fd RSI: ffffffff85b33340 RDI: ffffffff9cc845a0 [ 1715.255223][ C1] RBP: ffffffff9cc84560 R08: 0000000000000001 R09: 000000000000001f [ 1715.255241][ C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 1715.255260][ C1] R13: 0000000000000020 R14: fffffbfff3990909 R15: dffffc0000000000 [ 1715.255280][ C1] FS: 0000000000000000(0000) GS:ffff888122a40000(0000) knlGS:0000000000000000 [ 1715.255305][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1715.255327][ C1] CR2: 000056524c4103b0 CR3: 0000000034ea5000 CR4: 00000000003526f0 [ 1715.255338][ C1] Call Trace: [ 1715.255350][ C1] [ 1715.255382][ C1] wait_for_lsr+0x13a/0x210 [ 1715.255576][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1715.255701][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 1715.255731][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 1715.255889][ C1] serial8250_console_write+0x1108/0x14f0 [ 1715.256063][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1715.256100][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1715.256188][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1715.256439][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 1715.256598][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1715.256674][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1715.256737][ C1] ? do_raw_spin_lock+0xf0/0x260 [ 1715.256944][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 1715.257023][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1715.257152][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 1715.257205][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1715.257463][ C1] nbcon_kthread_func+0x5ef/0x800 [ 1715.257609][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1715.257826][ C1] ? __kthread_parkme+0x18f/0x230 [ 1715.257948][ C1] ? kthread+0x13a/0x450 [ 1715.257988][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1715.258026][ C1] kthread+0x373/0x450 [ 1715.258095][ C1] ? __pfx_kthread+0x10/0x10 [ 1715.258210][ C1] ret_from_fork+0x730/0xd60 [ 1715.258279][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.258382][ C1] ? __switch_to+0x800/0x10f0 [ 1715.258478][ C1] ? __pfx_kthread+0x10/0x10 [ 1715.258590][ C1] ret_from_fork_asm+0x1a/0x30 [ 1715.258936][ C1] [ 1715.502424][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1716.695499][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1716.706176][ T32] Tainted: [L]=SOFTLOCKUP [ 1716.710516][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1716.720563][ T32] Call Trace: [ 1716.723849][ T32] [ 1716.726788][ T32] dump_stack_lvl+0x100/0x190 [ 1716.731581][ T32] vpanic+0x553/0x970 [ 1716.735639][ T32] ? __pfx_vpanic+0x10/0x10 [ 1716.740435][ T32] panic+0xd1/0xe0 [ 1716.744218][ T32] ? __pfx_panic+0x10/0x10 [ 1716.748873][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1716.755060][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1716.761226][ T32] ? watchdog.cold+0x1ec/0x234 [ 1716.766146][ T32] watchdog.cold+0x1fd/0x234 [ 1716.770981][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1716.776835][ T32] ? __pfx_watchdog+0x10/0x10 [ 1716.781631][ T32] ? __kthread_parkme+0x18f/0x230 [ 1716.786872][ T32] ? kthread+0x13a/0x450 [ 1716.791121][ T32] ? __pfx_watchdog+0x10/0x10 [ 1716.795806][ T32] kthread+0x373/0x450 [ 1716.799909][ T32] ? __pfx_kthread+0x10/0x10 [ 1716.804616][ T32] ret_from_fork+0x730/0xd60 [ 1716.809342][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1716.814560][ T32] ? __switch_to+0x800/0x10f0 [ 1716.819289][ T32] ? __pfx_kthread+0x10/0x10 [ 1716.824000][ T32] ret_from_fork_asm+0x1a/0x30 [ 1716.829235][ T32] [ 1716.832464][ T32] Kernel Offset: disabled [ 1716.836806][ T32] Rebooting in 86400 seconds..