last executing test programs: 2.931777806s ago: executing program 0 (id=1014): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) 2.72128814s ago: executing program 0 (id=1018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000095, 0x0, 0x800}]}) 2.502513641s ago: executing program 0 (id=1023): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 2.460806442s ago: executing program 2 (id=1025): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockname$l2tp(r0, 0x0, &(0x7f0000000100)) 2.367342534s ago: executing program 2 (id=1027): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, 'kmem_cache_free\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c) 2.254012068s ago: executing program 2 (id=1029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf9, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xed, 0x5, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.420588692s ago: executing program 4 (id=1047): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0xfffffffd, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80, 0x3d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]]}, 0x38}}, 0x20004000) 1.337383915s ago: executing program 4 (id=1049): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90) 1.306029255s ago: executing program 3 (id=1050): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.096824103s ago: executing program 4 (id=1052): r0 = fsopen(&(0x7f0000000a00)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 992.018213ms ago: executing program 3 (id=1054): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) close(r0) r1 = fanotify_init(0xf00, 0x1001) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) 970.76452ms ago: executing program 4 (id=1055): r0 = io_uring_setup(0x41c3, &(0x7f00000001c0)={0x0, 0x47, 0x40, 0x0, 0x32b}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 896.482751ms ago: executing program 3 (id=1057): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 843.669469ms ago: executing program 3 (id=1059): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r1, 0x621b7fa40716df4d, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x4000000) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) 733.445888ms ago: executing program 3 (id=1061): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="01fcf7c39b9ec7", 0x7}, {&(0x7f0000000480)="cbee0158c99bc13765fd2cc594212d76910d5acdcdf6b4ac36", 0x19}, {&(0x7f0000000540)="25bdeab0f75d1fcda3bf28ea675f9c05075a6ced1929f5f5414bd3dc4ddf068257", 0x21}], 0x3}}], 0x1, 0x0) 693.154095ms ago: executing program 4 (id=1063): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setitimer(0x2, 0x0, 0x0) 615.66845ms ago: executing program 3 (id=1064): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000000)={r0, 0x1, 0x5}) 549.002972ms ago: executing program 1 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) close(r0) 534.808864ms ago: executing program 0 (id=1067): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r2, 0x203, 0x70bd26, 0x25dfdc01, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xc5}]}, 0x1c}}, 0x20000854) 402.851249ms ago: executing program 0 (id=1068): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 402.682905ms ago: executing program 2 (id=1069): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) 386.146932ms ago: executing program 1 (id=1070): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a20"], 0xb8) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 276.742505ms ago: executing program 4 (id=1071): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x6}, 0x1c) pselect6(0x40, &(0x7f0000001fc0)={0x8, 0x6000, 0x9557, 0x68, 0x3908, 0xfffffffffffffff7, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 234.751476ms ago: executing program 1 (id=1072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 121.963696ms ago: executing program 1 (id=1073): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4) close(r0) 99.333974ms ago: executing program 2 (id=1074): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r2, 0x1, 0x5, "f420208eb4"}, 0xd) 35.595025ms ago: executing program 1 (id=1075): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001f00), &(0x7f0000002080), 0x8, 0x800, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 10.840128ms ago: executing program 2 (id=1076): capset(0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x0, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) 7.172755ms ago: executing program 0 (id=1077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf37d}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000005d25a80", 0x14}], 0x1}, 0x0) 0s ago: executing program 1 (id=1078): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) kernel console output (not intermixed with test programs): etooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.256439][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.258950][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.264050][ T5821] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.272129][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.278300][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.285758][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.298380][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 53.298392][ T30] audit: type=1400 audit(1742546603.506:107): avc: denied { read } for pid=5820 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.309761][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.329962][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.340383][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.347589][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.352918][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.362332][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.363069][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.369517][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.377242][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.384184][ T30] audit: type=1400 audit(1742546603.506:108): avc: denied { open } for pid=5820 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.391019][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.421253][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.430938][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.430971][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.446538][ T5134] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.453843][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.462939][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.470200][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.489300][ T30] audit: type=1400 audit(1742546603.506:109): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.667463][ T30] audit: type=1400 audit(1742546603.876:110): avc: denied { module_request } for pid=5817 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.756823][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 53.804822][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 53.813872][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 53.898413][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.906061][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.915083][ T5817] bridge_slave_0: entered allmulticast mode [ 53.921974][ T5817] bridge_slave_0: entered promiscuous mode [ 53.933877][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 53.954820][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 53.966663][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.973822][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.981442][ T5817] bridge_slave_1: entered allmulticast mode [ 53.987785][ T5817] bridge_slave_1: entered promiscuous mode [ 54.035490][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.042635][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.050287][ T5826] bridge_slave_0: entered allmulticast mode [ 54.056674][ T5826] bridge_slave_0: entered promiscuous mode [ 54.072095][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.079219][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.086646][ T5831] bridge_slave_0: entered allmulticast mode [ 54.093123][ T5831] bridge_slave_0: entered promiscuous mode [ 54.115988][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.123237][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.130539][ T5826] bridge_slave_1: entered allmulticast mode [ 54.136842][ T5826] bridge_slave_1: entered promiscuous mode [ 54.145897][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.158875][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.165988][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.173255][ T5831] bridge_slave_1: entered allmulticast mode [ 54.180080][ T5831] bridge_slave_1: entered promiscuous mode [ 54.198096][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.233248][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.248220][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.270177][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.279263][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.286804][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.294020][ T5827] bridge_slave_0: entered allmulticast mode [ 54.300842][ T5827] bridge_slave_0: entered promiscuous mode [ 54.308246][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.325045][ T5817] team0: Port device team_slave_0 added [ 54.346935][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.354153][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.361868][ T5827] bridge_slave_1: entered allmulticast mode [ 54.368241][ T5827] bridge_slave_1: entered promiscuous mode [ 54.380059][ T5817] team0: Port device team_slave_1 added [ 54.387498][ T5826] team0: Port device team_slave_0 added [ 54.393785][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.401103][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.408183][ T5820] bridge_slave_0: entered allmulticast mode [ 54.414732][ T5820] bridge_slave_0: entered promiscuous mode [ 54.423520][ T5831] team0: Port device team_slave_0 added [ 54.439932][ T5826] team0: Port device team_slave_1 added [ 54.445777][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.453204][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.460584][ T5820] bridge_slave_1: entered allmulticast mode [ 54.466921][ T5820] bridge_slave_1: entered promiscuous mode [ 54.474195][ T5831] team0: Port device team_slave_1 added [ 54.514034][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.521063][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.547294][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.562517][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.573156][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.580252][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.606341][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.617635][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.624735][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.650672][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.663190][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.670164][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.696374][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.713431][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.720489][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.746615][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.758515][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.768135][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.775138][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.801851][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.821951][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.832423][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.868259][ T5827] team0: Port device team_slave_0 added [ 54.887285][ T5820] team0: Port device team_slave_0 added [ 54.895086][ T5827] team0: Port device team_slave_1 added [ 54.903446][ T5826] hsr_slave_0: entered promiscuous mode [ 54.911603][ T5826] hsr_slave_1: entered promiscuous mode [ 54.923475][ T5820] team0: Port device team_slave_1 added [ 54.956413][ T5831] hsr_slave_0: entered promiscuous mode [ 54.962495][ T5831] hsr_slave_1: entered promiscuous mode [ 54.968663][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.976855][ T5831] Cannot create hsr debugfs directory [ 54.993514][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.000521][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.026590][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.038209][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.046081][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.072551][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.096141][ T5817] hsr_slave_0: entered promiscuous mode [ 55.102224][ T5817] hsr_slave_1: entered promiscuous mode [ 55.107944][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.115880][ T5817] Cannot create hsr debugfs directory [ 55.126600][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.133650][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.159606][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.171592][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.178528][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.204489][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.271693][ T5820] hsr_slave_0: entered promiscuous mode [ 55.277596][ T5820] hsr_slave_1: entered promiscuous mode [ 55.283808][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.291380][ T5820] Cannot create hsr debugfs directory [ 55.300234][ T5825] Bluetooth: hci1: command tx timeout [ 55.333188][ T5827] hsr_slave_0: entered promiscuous mode [ 55.339121][ T5827] hsr_slave_1: entered promiscuous mode [ 55.346710][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.354387][ T5827] Cannot create hsr debugfs directory [ 55.380179][ T5825] Bluetooth: hci2: command tx timeout [ 55.459518][ T5825] Bluetooth: hci0: command tx timeout [ 55.519698][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.530288][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.539974][ T5832] Bluetooth: hci4: command tx timeout [ 55.545781][ T5825] Bluetooth: hci3: command tx timeout [ 55.551836][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.564195][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.588260][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.599951][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.609301][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.625601][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.661005][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.671602][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.695002][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.708372][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.763811][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.772703][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.785582][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.805571][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.822619][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.832340][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.845416][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.854967][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.865585][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.926061][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.935564][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.966993][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.974299][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.998957][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.006072][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.016001][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.043989][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.051152][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.066457][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.077288][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.084402][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.122253][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.147176][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.176877][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.189558][ T30] audit: type=1400 audit(1742546606.396:111): avc: denied { sys_module } for pid=5826 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.220722][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.238321][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.245436][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.258222][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.265374][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.289214][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.296342][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.329346][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.365798][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.394520][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.401658][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.457009][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.482254][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.489368][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.507146][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.514240][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.536679][ T5826] veth0_vlan: entered promiscuous mode [ 56.559016][ T5826] veth1_vlan: entered promiscuous mode [ 56.570792][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.582544][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.619055][ T5817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.631976][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.698633][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.708796][ T5831] veth0_vlan: entered promiscuous mode [ 56.722647][ T5826] veth0_macvtap: entered promiscuous mode [ 56.766902][ T5831] veth1_vlan: entered promiscuous mode [ 56.785444][ T5826] veth1_macvtap: entered promiscuous mode [ 56.797709][ T5820] veth0_vlan: entered promiscuous mode [ 56.819372][ T5827] veth0_vlan: entered promiscuous mode [ 56.828754][ T5827] veth1_vlan: entered promiscuous mode [ 56.838989][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.857942][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.867373][ T5820] veth1_vlan: entered promiscuous mode [ 56.887273][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.917467][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.932243][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.945093][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.954275][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.972229][ T5820] veth0_macvtap: entered promiscuous mode [ 56.984651][ T5827] veth0_macvtap: entered promiscuous mode [ 57.005630][ T5831] veth0_macvtap: entered promiscuous mode [ 57.016056][ T5827] veth1_macvtap: entered promiscuous mode [ 57.026577][ T5820] veth1_macvtap: entered promiscuous mode [ 57.043752][ T5831] veth1_macvtap: entered promiscuous mode [ 57.078414][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.096280][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.108434][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.117517][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.128426][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.138504][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.149124][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.160185][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.177457][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.192961][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.204000][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.215564][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.226464][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.236712][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.247367][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.257474][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.267928][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.278505][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.286658][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.297695][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.308516][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.319210][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.330212][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.351912][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.362615][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.372638][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.383529][ T5825] Bluetooth: hci1: command tx timeout [ 57.383736][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.399039][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.409698][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.421204][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.435071][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.444674][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.453755][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.462440][ T5825] Bluetooth: hci2: command tx timeout [ 57.468436][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.481600][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.493184][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.504884][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.513913][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.522763][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.531936][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.541639][ T5825] Bluetooth: hci0: command tx timeout [ 57.548636][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.558957][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.568572][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.578113][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.606172][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.614577][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.619959][ T5832] Bluetooth: hci4: command tx timeout [ 57.625606][ T5825] Bluetooth: hci3: command tx timeout [ 57.656832][ T30] audit: type=1400 audit(1742546607.866:112): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.Pvww7z/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.682379][ T30] audit: type=1400 audit(1742546607.866:113): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.728071][ T30] audit: type=1400 audit(1742546607.866:114): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.Pvww7z/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.755260][ T30] audit: type=1400 audit(1742546607.876:115): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.784840][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.797938][ T5817] veth0_vlan: entered promiscuous mode [ 57.801409][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.805464][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.822700][ T30] audit: type=1400 audit(1742546607.876:116): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.Pvww7z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.892232][ T5817] veth1_vlan: entered promiscuous mode [ 57.936217][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.954663][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.967034][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.980197][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.008472][ T5817] veth0_macvtap: entered promiscuous mode [ 58.056215][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.079085][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.096603][ T5817] veth1_macvtap: entered promiscuous mode [ 58.139881][ T4558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.147957][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.154749][ T4558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.166768][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.193581][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.224321][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.238984][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.265331][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.279028][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.303102][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.314520][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 58.314533][ T30] audit: type=1400 audit(1742546608.526:142): avc: denied { create } for pid=5915 comm="syz.2.9" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.323124][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.359326][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.372433][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.410529][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.433589][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.482100][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.502779][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.518122][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.531204][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.541729][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.552482][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.570698][ T30] audit: type=1400 audit(1742546608.776:143): avc: denied { read write } for pid=5919 comm="syz.0.10" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.573545][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.597870][ T30] audit: type=1400 audit(1742546608.776:144): avc: denied { open } for pid=5919 comm="syz.0.10" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.652185][ T30] audit: type=1400 audit(1742546608.776:145): avc: denied { ioctl } for pid=5919 comm="syz.0.10" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.682338][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.709502][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.718218][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.727493][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.793202][ T30] audit: type=1400 audit(1742546608.996:146): avc: denied { read append } for pid=5923 comm="syz.2.11" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 58.832805][ T5900] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.868065][ T30] audit: type=1400 audit(1742546608.996:147): avc: denied { open } for pid=5923 comm="syz.2.11" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 58.974581][ T30] audit: type=1400 audit(1742546609.006:148): avc: denied { map } for pid=5923 comm="syz.2.11" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 59.010473][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 59.026316][ T5900] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 59.032848][ T30] audit: type=1400 audit(1742546609.006:149): avc: denied { write execute } for pid=5923 comm="syz.2.11" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 59.061594][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.070254][ T30] audit: type=1400 audit(1742546609.006:150): avc: denied { create } for pid=5925 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.072451][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.097489][ T30] audit: type=1400 audit(1742546609.006:151): avc: denied { connect } for pid=5925 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.134563][ T5900] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 59.157886][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 59.176581][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.185597][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.192318][ T5900] usb 1-1: Product: syz [ 59.197717][ T5900] usb 1-1: Manufacturer: syz [ 59.217285][ T5900] usb 1-1: SerialNumber: syz [ 59.264835][ T865] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.286575][ T5900] usb 1-1: config 0 descriptor?? [ 59.303308][ T5920] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.429544][ T865] usb 2-1: Using ep0 maxpacket: 16 [ 59.442840][ T865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.460244][ T5825] Bluetooth: hci1: command tx timeout [ 59.462389][ T865] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 59.495158][ T865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.536981][ T5918] usb 1-1: USB disconnect, device number 2 [ 59.543100][ T5825] Bluetooth: hci2: command tx timeout [ 59.544629][ T865] usb 2-1: config 0 descriptor?? [ 59.619725][ T5825] Bluetooth: hci0: command tx timeout [ 59.701313][ T5825] Bluetooth: hci3: command tx timeout [ 59.701699][ T5832] Bluetooth: hci4: command tx timeout [ 59.929732][ T5901] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.012078][ T865] uclogic 0003:5543:0003.0001: unknown main item tag 0x0 [ 60.019264][ T865] uclogic 0003:5543:0003.0001: unknown main item tag 0x0 [ 60.037751][ T865] uclogic 0003:5543:0003.0001: unknown main item tag 0x0 [ 60.052276][ T865] uclogic 0003:5543:0003.0001: unknown main item tag 0x0 [ 60.060975][ T865] uclogic 0003:5543:0003.0001: unknown main item tag 0x0 [ 60.080340][ T865] uclogic 0003:5543:0003.0001: No inputs registered, leaving [ 60.129604][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 60.136116][ T865] uclogic 0003:5543:0003.0001: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.1-1/input0 [ 60.146168][ T5901] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 60.179845][ T5901] usb 5-1: config 0 has no interface number 0 [ 60.202401][ T5901] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 60.216453][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.244938][ T5901] usb 5-1: Product: syz [ 60.249132][ T5901] usb 5-1: Manufacturer: syz [ 60.250176][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'. [ 60.265531][ T5901] usb 5-1: SerialNumber: syz [ 60.290743][ T5901] usb 5-1: config 0 descriptor?? [ 60.294653][ T865] usb 2-1: USB disconnect, device number 2 [ 60.308658][ T5901] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 60.517376][ T5901] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 60.548625][ T5901] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 60.679070][ T5195] udevd[5195]: worker [5834] terminated by signal 33 (Unknown signal 33) [ 60.699476][ T5873] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.707037][ T5195] udevd[5195]: worker [5834] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.51/ttyUSB0/tty/ttyUSB0' [ 60.906292][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 60.923064][ T5873] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 60.937132][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.946547][ T5873] usb 3-1: Product: syz [ 60.950832][ T5873] usb 3-1: Manufacturer: syz [ 60.955558][ T5873] usb 3-1: SerialNumber: syz [ 60.963208][ T5873] usb 3-1: config 0 descriptor?? [ 60.970306][ T5873] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 60.992686][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 61.009476][ T5870] usb 5-1: USB disconnect, device number 2 [ 61.035832][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 61.071897][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 61.091483][ T5870] quatech2 5-1:0.51: device disconnected [ 61.221128][ T5901] usb 3-1: USB disconnect, device number 2 [ 61.320322][ T5989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.33'. [ 61.349666][ T5990] mkiss: ax0: crc mode is auto. [ 61.421003][ T5992] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.539833][ T5832] Bluetooth: hci1: command tx timeout [ 61.540982][ T5994] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 61.629628][ T5832] Bluetooth: hci2: command tx timeout [ 61.699578][ T5832] Bluetooth: hci0: command tx timeout [ 61.780116][ T5832] Bluetooth: hci4: command tx timeout [ 61.780400][ T5825] Bluetooth: hci3: command tx timeout [ 61.820739][ T6000] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 61.861972][ T6000] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 61.966897][ T6003] team0: Port device team_slave_1 removed [ 62.837560][ T6028] cgroup: Bad value for 'name' [ 62.923928][ T6030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.180284][ T6044] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 63.192144][ T5873] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 63.369506][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 63.376611][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 63.376624][ T30] audit: type=1400 audit(1742546613.586:201): avc: denied { connect } for pid=6054 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.413163][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.449558][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.459347][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.478735][ T30] audit: type=1400 audit(1742546613.586:202): avc: denied { name_connect } for pid=6054 comm="syz.0.63" dest=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 63.502086][ T5873] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 63.512542][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.520845][ T30] audit: type=1400 audit(1742546613.686:203): avc: denied { execute } for pid=6057 comm="syz.1.64" path="/16/cpu.stat" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.561677][ T5873] usb 3-1: config 0 descriptor?? [ 63.581802][ T30] audit: type=1400 audit(1742546613.686:204): avc: denied { create } for pid=6057 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.615407][ T30] audit: type=1400 audit(1742546613.686:205): avc: denied { setopt } for pid=6057 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.734780][ T30] audit: type=1400 audit(1742546613.946:206): avc: denied { getopt } for pid=6065 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.754032][ C1] vkms_vblank_simulate: vblank timer overrun [ 63.890601][ T30] audit: type=1400 audit(1742546614.106:207): avc: denied { read } for pid=6076 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.939938][ T30] audit: type=1400 audit(1742546614.126:208): avc: denied { ioctl } for pid=6078 comm="syz.3.74" path="socket:[9297]" dev="sockfs" ino=9297 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.019545][ T5873] hid (null): invalid report_count -558753709 [ 64.039075][ T5873] hid (null): unknown global tag 0xe [ 64.181948][ T6089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 64.184587][ T30] audit: type=1400 audit(1742546614.386:209): avc: denied { connect } for pid=6088 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.268847][ T30] audit: type=1400 audit(1742546614.476:210): avc: denied { read } for pid=5180 comm="acpid" name="event4" dev="devtmpfs" ino=2755 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.291301][ C1] vkms_vblank_simulate: vblank timer overrun [ 64.313570][ T865] usb 3-1: USB disconnect, device number 3 [ 64.608823][ T6112] warning: `syz.1.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.969749][ T5870] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.070888][ T6136] serio: Serial port ttyS3 [ 65.090036][ T5901] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 65.170578][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 65.187986][ T5870] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 65.198338][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.213556][ T5870] usb 1-1: config 0 descriptor?? [ 65.271023][ T5901] usb 2-1: config 0 has an invalid interface number: 33 but max is 0 [ 65.279153][ T5901] usb 2-1: config 0 has no interface number 0 [ 65.321906][ T5901] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=f6.9e [ 65.340445][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.358903][ T5901] usb 2-1: Product: syz [ 65.368905][ T5901] usb 2-1: Manufacturer: syz [ 65.380393][ T5901] usb 2-1: SerialNumber: syz [ 65.388198][ T5901] usb 2-1: config 0 descriptor?? [ 65.427332][ T5870] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 65.635558][ T5901] usb 2-1: USB disconnect, device number 3 [ 66.034726][ T5870] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 66.069530][ T5870] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 66.109610][ T5870] asix 1-1:0.0: probe with driver asix failed with error -71 [ 66.140596][ T5870] usb 1-1: USB disconnect, device number 3 [ 66.369904][ T6167] input: syz0 as /devices/virtual/input/input6 [ 66.547788][ T6172] Zero length message leads to an empty skb [ 67.119509][ T865] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 67.289697][ T865] usb 2-1: Using ep0 maxpacket: 8 [ 67.310351][ T865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.339658][ T865] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.348847][ T865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.371328][ T865] usb 2-1: config 0 descriptor?? [ 67.622590][ T865] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 67.719613][ T5900] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.857727][ T5873] usb 2-1: USB disconnect, device number 4 [ 67.880110][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 67.901996][ T5900] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 67.922331][ T5900] usb 5-1: config 0 has no interface number 1 [ 67.946868][ T5900] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 67.964925][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.991505][ T5900] usb 5-1: Product: syz [ 68.005220][ T5900] usb 5-1: Manufacturer: syz [ 68.020515][ T5900] usb 5-1: SerialNumber: syz [ 68.076464][ T5900] usb 5-1: config 0 descriptor?? [ 68.088189][ T6231] ======================================================= [ 68.088189][ T6231] WARNING: The mand mount option has been deprecated and [ 68.088189][ T6231] and is ignored by this kernel. Remove the mand [ 68.088189][ T6231] option from the mount to silence this warning. [ 68.088189][ T6231] ======================================================= [ 68.154622][ T5900] snd-usb-audio 5-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 68.204459][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.358080][ T5900] usb 5-1: USB disconnect, device number 3 [ 68.421892][ T6239] openvswitch: netlink: IP tunnel TTL not specified. [ 68.565222][ T6247] process 'syz.1.148' launched './file1' with NULL argv: empty string added [ 68.575568][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 68.575581][ T30] audit: type=1400 audit(1742546618.786:236): avc: denied { execute_no_trans } for pid=6246 comm="syz.1.148" path="/32/file1" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.792516][ T30] audit: type=1400 audit(1742546619.006:237): avc: denied { unlink } for pid=6257 comm="syz.1.153" name="#1" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.793093][ T6258] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 68.833161][ T30] audit: type=1400 audit(1742546619.046:238): avc: denied { mount } for pid=6257 comm="syz.1.153" name="/" dev="overlay" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.854974][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.001557][ T30] audit: type=1400 audit(1742546619.206:239): avc: denied { create } for pid=6263 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.069452][ T30] audit: type=1400 audit(1742546619.246:240): avc: denied { connect } for pid=6263 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.145782][ T30] audit: type=1400 audit(1742546619.246:241): avc: denied { listen } for pid=6263 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.190506][ T30] audit: type=1400 audit(1742546619.246:242): avc: denied { accept } for pid=6263 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.308621][ T30] audit: type=1400 audit(1742546619.506:243): avc: denied { create } for pid=6275 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 69.343874][ T6276] delete_channel: no stack [ 69.370786][ T6275] delete_channel: no stack [ 69.375654][ T30] audit: type=1400 audit(1742546619.586:244): avc: denied { write } for pid=6275 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 69.480132][ T30] audit: type=1400 audit(1742546619.606:245): avc: denied { accept } for pid=6281 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.557859][ T6288] netlink: 10 bytes leftover after parsing attributes in process `syz.3.167'. [ 69.895661][ T4558] tipc: Subscription rejected, illegal request [ 69.939765][ T5901] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.093278][ T6320] veth1_macvtap: left promiscuous mode [ 70.119740][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 70.130883][ T5901] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 70.177552][ T5901] usb 4-1: config 0 has no interface number 0 [ 70.191699][ T5901] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 70.208597][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.228240][ T5901] usb 4-1: Product: syz [ 70.237462][ T5901] usb 4-1: Manufacturer: syz [ 70.245981][ T6327] random: crng reseeded on system resumption [ 70.260058][ T5901] usb 4-1: SerialNumber: syz [ 70.280281][ T5901] usb 4-1: config 0 descriptor?? [ 70.297216][ T5901] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 70.523425][ T5901] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 70.547478][ T5901] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 70.926967][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 70.964442][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 70.974844][ T9] usb 4-1: USB disconnect, device number 2 [ 70.992275][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 71.022163][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 71.047811][ T9] quatech2 4-1:0.51: device disconnected [ 71.109925][ T5901] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 71.148516][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.155049][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.280334][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 71.295824][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 40 [ 71.318230][ T5901] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 71.344103][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 71.365814][ T5901] usb 3-1: Product: syz [ 71.380065][ T5901] usb 3-1: Manufacturer: syz [ 71.392342][ T5901] usb 3-1: SerialNumber: syz [ 71.409916][ T5901] usb 3-1: config 0 descriptor?? [ 71.417707][ T6354] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.563298][ T9] kernel write not supported for file /vcsa (pid: 9 comm: kworker/0:0) [ 71.593179][ T5901] kernel write not supported for file /68/attr/exec (pid: 5901 comm: kworker/0:6) [ 71.665118][ T5901] usb 3-1: USB disconnect, device number 4 [ 71.935664][ T6388] netlink: 76 bytes leftover after parsing attributes in process `syz.1.216'. [ 72.103285][ T6393] capability: warning: `syz.0.217' uses deprecated v2 capabilities in a way that may be insecure [ 72.639607][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'. [ 72.648695][ T6416] netlink: 92 bytes leftover after parsing attributes in process `syz.0.227'. [ 72.689693][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'. [ 72.708394][ T6416] netlink: 92 bytes leftover after parsing attributes in process `syz.0.227'. [ 73.085460][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 73.634773][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 73.634786][ T30] audit: type=1400 audit(1742546623.846:270): avc: denied { create } for pid=6458 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 73.725310][ T30] audit: type=1400 audit(1742546623.856:271): avc: denied { read } for pid=6458 comm="syz.4.242" path="socket:[9876]" dev="sockfs" ino=9876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 73.806209][ T30] audit: type=1400 audit(1742546623.916:272): avc: denied { mount } for pid=6461 comm="syz.3.244" name="/" dev="configfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.867702][ T30] audit: type=1400 audit(1742546623.926:273): avc: denied { search } for pid=6461 comm="syz.3.244" name="/" dev="configfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.919556][ T30] audit: type=1400 audit(1742546624.016:274): avc: denied { create } for pid=6466 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.980682][ T30] audit: type=1400 audit(1742546624.016:275): avc: denied { connect } for pid=6466 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.007604][ T30] audit: type=1400 audit(1742546624.066:276): avc: denied { bind } for pid=6469 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.153449][ T30] audit: type=1400 audit(1742546624.076:277): avc: denied { listen } for pid=6469 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.197815][ T6482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 74.221016][ T30] audit: type=1400 audit(1742546624.186:278): avc: denied { create } for pid=6436 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.064356][ T30] audit: type=1400 audit(1742546625.276:279): avc: denied { create } for pid=6522 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.351275][ T6512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.374303][ T6512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.385380][ T6512] bond0 (unregistering): Released all slaves [ 75.529665][ T5900] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.569570][ T5873] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 75.689587][ T865] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 75.711368][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 75.718215][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 75.739125][ T5900] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 75.749034][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.757879][ T5900] usb 4-1: Product: syz [ 75.763808][ T5900] usb 4-1: Manufacturer: syz [ 75.768694][ T5900] usb 4-1: SerialNumber: syz [ 75.773567][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 75.785781][ T5873] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 75.796397][ T5900] usb 4-1: config 0 descriptor?? [ 75.802065][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.813469][ T5900] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 75.824503][ T5900] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 75.832253][ T5873] usb 2-1: config 0 descriptor?? [ 75.837794][ T6535] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 75.841803][ T865] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.856223][ T865] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.878340][ T865] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.893052][ T865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.902633][ T865] usb 3-1: SerialNumber: syz [ 76.146620][ T865] usb 3-1: 0:2 : does not exist [ 76.165106][ T865] usb 3-1: USB disconnect, device number 5 [ 76.262825][ T1201] cfg80211: failed to load regulatory.db [ 76.297481][ T5873] a4tech 0003:09DA:0006.0003: hidraw0: USB HID v20.00 Device [HID 09da:0006] on usb-dummy_hcd.1-1/input0 [ 76.353580][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.432740][ T5900] em28xx 4-1:0.0: chip ID is em28178 [ 76.510786][ T26] usb 2-1: USB disconnect, device number 5 [ 76.696216][ T5900] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 76.705118][ T5900] em28xx 4-1:0.0: board has no eeprom [ 76.779485][ T5900] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 76.787430][ T5900] em28xx 4-1:0.0: dvb set to bulk mode. [ 76.799321][ T26] em28xx 4-1:0.0: Binding DVB extension [ 76.813010][ T5900] usb 4-1: USB disconnect, device number 3 [ 76.827992][ T5900] em28xx 4-1:0.0: Disconnecting em28xx [ 76.876230][ T26] em28xx 4-1:0.0: Registering input extension [ 76.920227][ T26] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 76.928295][ T26] Registered IR keymap rc-empty [ 76.937563][ T26] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 76.949359][ T26] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 76.973516][ T26] em28xx 4-1:0.0: Input extension successfully initialized [ 76.987321][ T5900] em28xx 4-1:0.0: Closing input extension [ 77.028737][ T5900] em28xx 4-1:0.0: Freeing device [ 77.348041][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 77.530854][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 78.164935][ T5873] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 78.204192][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.321'. [ 78.339586][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 78.351011][ T5873] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 78.362506][ T5873] usb 2-1: config 0 has no interface number 0 [ 78.368614][ T5873] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 78.384699][ T5873] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 78.395607][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.407238][ T5873] usb 2-1: Product: syz [ 78.422780][ T5873] usb 2-1: Manufacturer: syz [ 78.427443][ T5873] usb 2-1: SerialNumber: syz [ 78.448653][ T5873] usb 2-1: config 0 descriptor?? [ 78.540362][ T6654] syz.0.326: attempt to access beyond end of device [ 78.540362][ T6654] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 78.558742][ T6654] syz.0.326: attempt to access beyond end of device [ 78.558742][ T6654] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 78.584293][ T6654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 78.596759][ T6656] Bluetooth: MGMT ver 1.23 [ 78.597081][ T6654] syz.0.326: attempt to access beyond end of device [ 78.597081][ T6654] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 78.616012][ T6654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 78.632752][ T6654] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 78.655894][ T6654] UDF-fs: Scanning with blocksize 512 failed [ 78.666229][ T6654] syz.0.326: attempt to access beyond end of device [ 78.666229][ T6654] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 78.684364][ T6654] syz.0.326: attempt to access beyond end of device [ 78.684364][ T6654] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 78.699593][ T6654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 78.718144][ T6654] syz.0.326: attempt to access beyond end of device [ 78.718144][ T6654] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 78.732168][ T6654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 78.742795][ T6654] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 78.750973][ T6654] UDF-fs: Scanning with blocksize 1024 failed [ 78.770404][ T6654] syz.0.326: attempt to access beyond end of device [ 78.770404][ T6654] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 78.779749][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.783708][ T6654] syz.0.326: attempt to access beyond end of device [ 78.783708][ T6654] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 78.812723][ T6654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 78.849795][ T6654] syz.0.326: attempt to access beyond end of device [ 78.849795][ T6654] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 78.882580][ T6654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 78.929186][ T6654] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 78.946819][ T26] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 78.968804][ T26] usb 5-1: config 0 has no interface number 0 [ 78.975101][ T6654] UDF-fs: Scanning with blocksize 2048 failed [ 78.991600][ T26] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 79.005681][ T6654] syz.0.326: attempt to access beyond end of device [ 79.005681][ T6654] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 79.039039][ T26] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 79.059784][ T6654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 79.070780][ T5873] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 79.113850][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.122529][ T5873] usb 2-1: USB disconnect, device number 6 [ 79.138755][ T6654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 79.192252][ T26] usb 5-1: config 0 descriptor?? [ 79.216001][ T6654] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 79.236931][ T26] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input9 [ 79.264179][ T6654] UDF-fs: Scanning with blocksize 4096 failed [ 79.285926][ T6654] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 79.488145][ C1] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 79.498058][ T26] usb 5-1: USB disconnect, device number 4 [ 79.501902][ T6670] @: renamed from vlan0 (while UP) [ 79.506131][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 79.506146][ T30] audit: type=1400 audit(1742546629.696:304): avc: denied { write } for pid=6669 comm="syz.2.333" name="vlan0" dev="proc" ino=4026533783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.571141][ T30] audit: type=1400 audit(1742546629.716:305): avc: denied { create } for pid=6669 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.617135][ T30] audit: type=1400 audit(1742546629.716:306): avc: denied { ioctl } for pid=6669 comm="syz.2.333" path="socket:[11459]" dev="sockfs" ino=11459 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.855588][ T30] audit: type=1400 audit(1742546630.066:307): avc: denied { name_bind } for pid=6677 comm="syz.2.338" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.892459][ T6676] Falling back ldisc for ttyS3. [ 80.047100][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 80.069674][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.071235][ T6689] netlink: 45 bytes leftover after parsing attributes in process `syz.0.342'. [ 80.144699][ T30] audit: type=1400 audit(1742546630.346:308): avc: denied { append } for pid=6691 comm="syz.4.344" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.217649][ T30] audit: type=1400 audit(1742546630.386:309): avc: denied { write } for pid=6691 comm="syz.4.344" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.261450][ T26] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 80.269016][ T6698] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.347'. [ 80.272782][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.300310][ T6698] openvswitch: netlink: Flow key attribute not present in set flow. [ 80.302182][ T26] usb 4-1: Product: syz [ 80.323852][ T26] usb 4-1: Manufacturer: syz [ 80.333955][ T26] usb 4-1: SerialNumber: syz [ 80.350041][ T26] usb 4-1: config 0 descriptor?? [ 80.479194][ T30] audit: type=1400 audit(1742546630.686:310): avc: denied { map } for pid=6700 comm="syz.2.348" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 80.520537][ T6703] SELinux: failed to load policy [ 80.522853][ T30] audit: type=1400 audit(1742546630.736:311): avc: denied { load_policy } for pid=6702 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 80.714285][ T5873] kernel read not supported for file /dsp1 (pid: 5873 comm: kworker/1:5) [ 81.168779][ T26] usb 4-1: Firmware version (0.0) predates our first public release. [ 81.179475][ T26] usb 4-1: Please update to version 0.2 or newer [ 81.338425][ T30] audit: type=1400 audit(1742546631.546:312): avc: denied { read } for pid=6741 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.392844][ T30] audit: type=1400 audit(1742546631.576:313): avc: denied { open } for pid=6741 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.519673][ T26] usb 4-1: USB disconnect, device number 4 [ 82.099676][ T6774] SELinux: failed to load policy [ 82.360109][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 82.369567][ T6747] mmap: syz.2.367 (6747) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.550756][ T26] usb 2-1: too many configurations: 89, using maximum allowed: 8 [ 82.593494][ T26] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 82.616877][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.645180][ T26] usb 2-1: Product: syz [ 82.657545][ T26] usb 2-1: Manufacturer: syz [ 82.683388][ T26] usb 2-1: SerialNumber: syz [ 82.721423][ T26] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 82.756440][ T5873] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 83.253292][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.304575][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.535828][ T6852] --map-set only usable from mangle table [ 83.564281][ T1201] usb 2-1: USB disconnect, device number 7 [ 83.735932][ T6862] GUP no longer grows the stack in syz.4.400 (6862): 200000009000-20000000a000 (200000005000) [ 83.790669][ T6862] CPU: 0 UID: 0 PID: 6862 Comm: syz.4.400 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 83.790696][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.790708][ T6862] Call Trace: [ 83.790713][ T6862] [ 83.790720][ T6862] dump_stack_lvl+0x16c/0x1f0 [ 83.790750][ T6862] gup_vma_lookup+0x1d2/0x220 [ 83.790781][ T6862] __get_user_pages+0x236/0x36f0 [ 83.790800][ T6862] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 83.790830][ T6862] ? __gup_longterm_locked+0x124/0x1870 [ 83.790848][ T6862] ? __gup_longterm_locked+0x124/0x1870 [ 83.790870][ T6862] ? __pfx___get_user_pages+0x10/0x10 [ 83.790891][ T6862] ? down_read_killable+0xcc/0x380 [ 83.790918][ T6862] ? __pfx_down_read_killable+0x10/0x10 [ 83.790946][ T6862] ? mark_lock+0xb5/0xc60 [ 83.790969][ T6862] ? find_held_lock+0x2d/0x110 [ 83.790990][ T6862] __gup_longterm_locked+0x212/0x1870 [ 83.791008][ T6862] ? __pfx_lock_release+0x10/0x10 [ 83.791032][ T6862] ? trace_lock_acquire+0x14e/0x1f0 [ 83.791056][ T6862] ? __pfx___gup_longterm_locked+0x10/0x10 [ 83.791072][ T6862] ? gup_fast_fallback+0x84c/0x2690 [ 83.791089][ T6862] ? __pfx_lock_release+0x10/0x10 [ 83.791117][ T6862] ? mark_held_locks+0x9f/0xe0 [ 83.791147][ T6862] gup_fast_fallback+0x1802/0x2690 [ 83.791182][ T6862] ? __pfx_gup_fast_fallback+0x10/0x10 [ 83.791200][ T6862] ? __pfx___lock_acquire+0x10/0x10 [ 83.791228][ T6862] ? hlock_class+0x4e/0x130 [ 83.791251][ T6862] get_user_pages_fast+0xa8/0x100 [ 83.791268][ T6862] ? __pfx_get_user_pages_fast+0x10/0x10 [ 83.791286][ T6862] ? iov_iter_advance+0x1e3/0x6c0 [ 83.791309][ T6862] __iov_iter_get_pages_alloc+0x837/0x1f70 [ 83.791332][ T6862] ? trace_contention_end+0xee/0x140 [ 83.791359][ T6862] ? __mutex_lock+0x1cc/0xb10 [ 83.791384][ T6862] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 83.791403][ T6862] ? pipe_lock+0x64/0x80 [ 83.791422][ T6862] ? __pfx___mutex_lock+0x10/0x10 [ 83.791444][ T6862] ? iovec_from_user.part.0+0x7e/0x130 [ 83.791469][ T6862] iov_iter_get_pages2+0xa4/0x100 [ 83.791487][ T6862] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 83.791504][ T6862] ? wait_for_space+0x224/0x2d0 [ 83.791530][ T6862] ? add_to_pipe+0x1c0/0x3c0 [ 83.791557][ T6862] __do_sys_vmsplice+0xa13/0xef0 [ 83.791591][ T6862] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 83.791626][ T6862] ? __pfx_futex_wait+0x10/0x10 [ 83.791656][ T6862] ? lock_acquire.part.0+0x11b/0x380 [ 83.791680][ T6862] ? find_held_lock+0x2d/0x110 [ 83.791722][ T6862] ? rcu_is_watching+0x12/0xc0 [ 83.791745][ T6862] ? do_syscall_64+0xcd/0x250 [ 83.791766][ T6862] do_syscall_64+0xcd/0x250 [ 83.791789][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.791814][ T6862] RIP: 0033:0x7f10c2f8d169 [ 83.791830][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.791847][ T6862] RSP: 002b:00007f10c3e46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 83.791864][ T6862] RAX: ffffffffffffffda RBX: 00007f10c31a5fa0 RCX: 00007f10c2f8d169 [ 83.791875][ T6862] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 83.791891][ T6862] RBP: 00007f10c300e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 83.791901][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.791910][ T6862] R13: 0000000000000000 R14: 00007f10c31a5fa0 R15: 00007fff7716e548 [ 83.791934][ T6862] [ 84.130330][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.144523][ T5873] usb 2-1: Service connection timeout for: 256 [ 84.150742][ T5873] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 84.160914][ T5873] ath9k_htc: Failed to initialize the device [ 84.203231][ T1201] usb 2-1: ath9k_htc: USB layer deinitialized [ 84.961437][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.4.410'. [ 85.400954][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 85.400972][ T30] audit: type=1400 audit(1742546635.616:332): avc: denied { read } for pid=6913 comm="syz.1.415" name="/" dev="configfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.428788][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.585584][ T30] audit: type=1400 audit(1742546635.616:333): avc: denied { open } for pid=6913 comm="syz.1.415" path="/84/file0" dev="configfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.694268][ T30] audit: type=1400 audit(1742546635.686:334): avc: denied { append } for pid=6920 comm="syz.2.417" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.716867][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.804881][ T30] audit: type=1400 audit(1742546635.746:335): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 85.879511][ T30] audit: type=1400 audit(1742546635.886:336): avc: denied { read } for pid=6925 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.899238][ T30] audit: type=1400 audit(1742546635.996:337): avc: denied { name_bind } for pid=6929 comm="syz.4.421" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 85.925395][ T30] audit: type=1400 audit(1742546635.996:338): avc: denied { node_bind } for pid=6929 comm="syz.4.421" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 85.945932][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.952847][ T30] audit: type=1400 audit(1742546636.046:339): avc: denied { append } for pid=6932 comm="syz.2.422" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.991594][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 86.230524][ T6952] bridge_slave_0: invalid flags given to default FDB implementation [ 86.465262][ T30] audit: type=1400 audit(1742546636.676:340): avc: denied { listen } for pid=6967 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.518624][ T30] audit: type=1400 audit(1742546636.676:341): avc: denied { getopt } for pid=6967 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.582320][ T6972] netlink: 'syz.1.433': attribute type 1 has an invalid length. [ 86.599844][ T6972] netlink: 'syz.1.433': attribute type 4 has an invalid length. [ 86.617883][ T6972] netlink: 188 bytes leftover after parsing attributes in process `syz.1.433'. [ 86.649488][ T6972] NCSI netlink: No device for ifindex 458760 [ 86.690349][ T5901] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.698499][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.850474][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 86.873369][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 86.897125][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.910048][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.924266][ T5901] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 86.937963][ T9] usb 4-1: Product: syz [ 86.952809][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.967779][ T9] usb 4-1: Manufacturer: syz [ 86.982049][ T9] usb 4-1: SerialNumber: syz [ 87.025887][ T5901] usb 1-1: config 0 descriptor?? [ 87.038124][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 87.067177][ T5901] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 87.112370][ T1201] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 87.299587][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 87.371556][ T5180] bcm5974 1-1:0.0: could not read from device [ 87.425497][ T6965] bcm5974 1-1:0.0: could not read from device [ 87.455223][ T5873] usb 4-1: USB disconnect, device number 5 [ 87.468036][ T5180] bcm5974 1-1:0.0: could not read from device [ 87.501746][ T5180] bcm5974 1-1:0.0: could not read from device [ 87.535670][ T5180] bcm5974 1-1:0.0: could not read from device [ 87.552139][ T5901] usb 1-1: USB disconnect, device number 4 [ 88.197530][ T1201] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 88.228651][ T1201] ath9k_htc: Failed to initialize the device [ 88.276720][ T5873] usb 4-1: ath9k_htc: USB layer deinitialized [ 88.545326][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 88.617025][ T7053] bond1 (unregistering): Released all slaves [ 88.759888][ T1201] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 88.820018][ T5900] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.919822][ T1201] usb 4-1: Using ep0 maxpacket: 32 [ 88.927081][ T1201] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.936398][ T1201] usb 4-1: config 0 has no interface number 0 [ 88.943694][ T1201] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.949549][ T5873] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 88.952632][ T1201] usb 4-1: config 0 has no interface number 0 [ 88.967060][ T1201] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.975986][ T1201] usb 4-1: config 0 has no interface number 0 [ 88.979630][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 88.990191][ T5900] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 88.993815][ T1201] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 88.999226][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.010653][ T5900] usb 1-1: config 0 descriptor?? [ 89.021799][ T1201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.033334][ T5900] gspca_main: sunplus-2.14.0 probing 041e:400b [ 89.033991][ T1201] usb 4-1: Product: syz [ 89.045362][ T1201] usb 4-1: Manufacturer: syz [ 89.054019][ T1201] usb 4-1: SerialNumber: syz [ 89.074660][ T1201] usb 4-1: config 0 descriptor?? [ 89.084778][ T1201] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 89.121383][ T5873] usb 2-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 89.141620][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.155744][ T5873] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.166446][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.176077][ T5873] usb 2-1: SerialNumber: syz [ 89.379523][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 89.412564][ T1201] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 89.424405][ T1201] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 89.453176][ T5873] usb 2-1: 0:2 : does not exist [ 89.513345][ T5873] usb 2-1: USB disconnect, device number 8 [ 89.721686][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.843841][ T5900] gspca_sunplus: reg_w_riv err -71 [ 89.849088][ T5900] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 89.879182][ T5900] usb 1-1: USB disconnect, device number 5 [ 89.904628][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 89.905159][ T5873] usb 4-1: USB disconnect, device number 6 [ 89.930668][ T5873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 89.958495][ T5873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 89.974555][ T5873] quatech2 4-1:0.51: device disconnected [ 90.131931][ T7087] netlink: 'syz.2.472': attribute type 3 has an invalid length. [ 90.143818][ T7088] netlink: 'syz.1.471': attribute type 30 has an invalid length. [ 90.151696][ T7087] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.472'. [ 90.410611][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 90.410626][ T30] audit: type=1400 audit(1742546640.616:358): avc: denied { mount } for pid=7096 comm="syz.1.476" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 90.441163][ T7097] devpts: called with bogus options [ 90.485647][ T30] audit: type=1400 audit(1742546640.656:359): avc: denied { remount } for pid=7096 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 90.546184][ T30] audit: type=1400 audit(1742546640.696:360): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 90.792875][ T7112] netlink: 'syz.1.483': attribute type 12 has an invalid length. [ 90.829497][ T7112] netlink: 'syz.1.483': attribute type 29 has an invalid length. [ 90.838958][ T7112] netlink: 148 bytes leftover after parsing attributes in process `syz.1.483'. [ 90.859895][ T7112] netlink: 59 bytes leftover after parsing attributes in process `syz.1.483'. [ 90.879623][ T5873] kernel write not supported for file /input/event2 (pid: 5873 comm: kworker/1:5) [ 90.884426][ T7114] vlan2: entered allmulticast mode [ 90.905050][ T7114] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 90.913519][ T5873] kernel write not supported for file /snd/pcmC1D1p (pid: 5873 comm: kworker/1:5) [ 90.926588][ T7114] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 91.037922][ T7122] input: syz0 as /devices/virtual/input/input11 [ 91.053400][ T7122] input: failed to attach handler leds to device input11, error: -6 [ 91.408681][ T7136] can0: slcan on ttyS3. [ 91.503505][ T30] audit: type=1800 audit(1742546641.716:361): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.495" name="file1" dev="tmpfs" ino=576 res=0 errno=0 [ 91.540963][ T7143] can0 (unregistered): slcan off ttyS3. [ 91.595530][ T30] audit: type=1400 audit(1742546641.806:362): avc: denied { getopt } for pid=7150 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.677481][ T30] audit: type=1400 audit(1742546641.886:363): avc: denied { ioctl } for pid=7156 comm="syz.4.500" path="socket:[12785]" dev="sockfs" ino=12785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 91.719712][ T5873] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 91.859184][ T30] audit: type=1400 audit(1742546642.066:364): avc: denied { mount } for pid=7165 comm="syz.2.504" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 91.901734][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 91.912754][ T30] audit: type=1400 audit(1742546642.076:365): avc: denied { unmount } for pid=7165 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 91.924747][ T5873] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 185, changing to 7 [ 91.989748][ T5873] usb 2-1: config 1 interface 1 has no altsetting 0 [ 92.014781][ T30] audit: type=1400 audit(1742546642.076:366): avc: denied { mounton } for pid=7165 comm="syz.2.504" path="/112/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 92.021501][ T5873] usb 2-1: string descriptor 0 read error: -22 [ 92.079551][ T5873] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.107338][ T30] audit: type=1400 audit(1742546642.116:367): avc: denied { block_suspend } for pid=7171 comm="syz.3.506" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.135079][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.168071][ T5873] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 92.182771][ T5873] usb 2-1: 2:1 : sample bitwidth 128 in over sample bytes 4 [ 92.195407][ T7185] Invalid ELF header magic: != ELF [ 92.219073][ T5873] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 92.412454][ T5873] usb 2-1: USB disconnect, device number 9 [ 92.640454][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.669146][ T5873] kernel read not supported for file /dsp1 (pid: 5873 comm: kworker/1:5) [ 93.554651][ T5873] kernel write not supported for file /input/event2 (pid: 5873 comm: kworker/1:5) [ 93.586686][ T7268] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 93.586686][ T7268] The task syz.1.539 (7268) triggered the difference, watch for misbehavior. [ 93.987013][ T7283] input: syz0 as /devices/virtual/input/input12 [ 94.323535][ T7305] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.558'. [ 94.369495][ T1201] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.532369][ T1201] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.551800][ T1201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.583310][ T1201] usb 1-1: Product: syz [ 94.592439][ T1201] usb 1-1: Manufacturer: syz [ 94.611716][ T1201] usb 1-1: SerialNumber: syz [ 94.623249][ T1201] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.643827][ T5901] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.690580][ T5873] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 94.709347][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 94.901096][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.914527][ T5873] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 94.914554][ T5873] usb 3-1: config 6 has no interface number 0 [ 94.914580][ T5873] usb 3-1: config 6 interface 200 has no altsetting 0 [ 94.916254][ T5873] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 94.916279][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.916298][ T5873] usb 3-1: Product: syz [ 94.916311][ T5873] usb 3-1: Manufacturer: syz [ 94.916325][ T5873] usb 3-1: SerialNumber: syz [ 94.989689][ T7332] sctp: [Deprecated]: syz.1.570 (pid 7332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.989689][ T7332] Use struct sctp_sack_info instead [ 95.137319][ T7336] netlink: 48 bytes leftover after parsing attributes in process `syz.4.572'. [ 95.320672][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 95.664372][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'. [ 95.693578][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 95.693592][ T30] audit: type=1400 audit(1742546645.906:382): avc: denied { read } for pid=7358 comm="syz.3.582" path="socket:[13798]" dev="sockfs" ino=13798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.725589][ T5901] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 95.726975][ T5873] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 95.738025][ T5901] ath9k_htc: Failed to initialize the device [ 95.765285][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.772820][ T5901] usb 1-1: ath9k_htc: USB layer deinitialized [ 95.778297][ T5873] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 95.787285][ T10] usb 1-1: USB disconnect, device number 6 [ 95.807261][ T5873] usb 3-1: media controller created [ 95.888459][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.932348][ T5873] dvb-usb: bulk message failed: -71 (6/0) [ 95.941631][ T5873] dvb-usb: bulk message failed: -71 (6/0) [ 95.953505][ T5873] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 95.971907][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 95.990332][ T5873] dvb-usb: schedule remote query interval to 150 msecs. [ 96.007548][ T5873] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 96.026308][ T5873] usb 3-1: USB disconnect, device number 6 [ 96.117201][ T5873] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 96.189774][ T5901] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 96.300962][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.585'. [ 96.350425][ T5901] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 96.377063][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.404030][ T5901] usb 2-1: Product: syz [ 96.420159][ T5901] usb 2-1: Manufacturer: syz [ 96.435150][ T5901] usb 2-1: SerialNumber: syz [ 96.451011][ T7371] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 96.472659][ T5901] usb 2-1: config 0 descriptor?? [ 96.545645][ T30] audit: type=1400 audit(1742546646.756:383): avc: denied { create } for pid=7375 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.618382][ T30] audit: type=1400 audit(1742546646.796:384): avc: denied { write } for pid=7375 comm="syz.3.588" path="socket:[13838]" dev="sockfs" ino=13838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.699738][ T5901] peak_usb 2-1:0.0: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 96.902213][ T5901] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 96.943073][ T30] audit: type=1400 audit(1742546647.136:385): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 96.963484][ T5901] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 96.981592][ T5901] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 97.060594][ T5901] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 97.156069][ T5901] usb 2-1: USB disconnect, device number 10 [ 97.780014][ T7429] netlink: 'syz.4.614': attribute type 10 has an invalid length. [ 97.814510][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.915517][ T30] audit: type=1400 audit(1742546648.126:386): avc: denied { setopt } for pid=7436 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.054518][ T7443] netlink: 'syz.4.620': attribute type 1 has an invalid length. [ 98.244192][ T30] audit: type=1400 audit(1742546648.456:387): avc: denied { write } for pid=7447 comm="syz.3.623" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.274967][ T7453] erofs (device nbd0): cannot find valid erofs superblock [ 98.334595][ T7455] dccp_invalid_packet: P.Data Offset(4) too small [ 98.429347][ T7459] rtc_cmos 00:00: Alarms can be up to one day in the future [ 98.451751][ T7458] rtc_cmos 00:00: Alarms can be up to one day in the future [ 98.525927][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 98.736830][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 98.752757][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 98.767510][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 98.789932][ T7475] Invalid logical block size (2047) [ 98.809974][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 98.851114][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 98.889545][ T5901] rtc rtc0: __rtc_set_alarm: err=-22 [ 99.033338][ T7465] team0 (unregistering): Port device team_slave_0 removed [ 99.117078][ T7465] team0 (unregistering): Port device team_slave_1 removed [ 99.447123][ T7491] netlink: 32 bytes leftover after parsing attributes in process `syz.0.643'. [ 99.545515][ T30] audit: type=1400 audit(1742546649.756:388): avc: denied { read write } for pid=7492 comm="syz.4.644" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 99.610344][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 99.624683][ T30] audit: type=1400 audit(1742546649.756:389): avc: denied { open } for pid=7492 comm="syz.4.644" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 99.789071][ T5900] kernel write not supported for file [eventfd] (pid: 5900 comm: kworker/1:6) [ 99.943186][ T30] audit: type=1400 audit(1742546650.156:390): avc: denied { write } for pid=7503 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 100.026777][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.033680][ T30] audit: type=1400 audit(1742546650.176:391): avc: denied { write } for pid=7507 comm="syz.0.650" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 100.279430][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.325880][ T7522] netlink: 'syz.4.658': attribute type 7 has an invalid length. [ 100.369017][ T7522] netlink: 140 bytes leftover after parsing attributes in process `syz.4.658'. [ 100.626775][ T7537] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 100.647279][ T7537] netlink: 184 bytes leftover after parsing attributes in process `syz.2.665'. [ 100.666584][ T7537] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 100.805863][ T7543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.668'. [ 101.061396][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.171864][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 101.171878][ T30] audit: type=1400 audit(1742546651.386:395): avc: denied { name_connect } for pid=7561 comm="syz.0.679" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 101.258995][ T7563] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 101.501325][ T7541] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 101.572520][ T30] audit: type=1400 audit(1742546651.786:396): avc: denied { write } for pid=7583 comm="syz.2.687" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 101.743220][ T30] audit: type=1400 audit(1742546651.956:397): avc: denied { unmount } for pid=7588 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.001624][ T30] audit: type=1400 audit(1742546652.206:398): avc: denied { map } for pid=7602 comm="syz.3.696" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 102.070535][ T30] audit: type=1400 audit(1742546652.216:399): avc: denied { setopt } for pid=7602 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.100642][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.462241][ T30] audit: type=1326 audit(1742546652.676:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.4.706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10c2f8d169 code=0x0 [ 102.513503][ T30] audit: type=1326 audit(1742546652.726:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3738d169 code=0x7ffc0000 [ 102.515490][ T7629] syz.2.708 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.608242][ T30] audit: type=1326 audit(1742546652.726:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3738d169 code=0x7ffc0000 [ 102.640120][ T30] audit: type=1326 audit(1742546652.726:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f2f3738d169 code=0x7ffc0000 [ 102.712694][ T7637] delete_channel: no stack [ 102.730349][ T30] audit: type=1326 audit(1742546652.786:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3738d169 code=0x7ffc0000 [ 102.760061][ T5825] Bluetooth: hci1: command 0x080f tx timeout [ 103.139905][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.301215][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.467104][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 104.179640][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.209509][ T5900] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.363807][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 104.370918][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.387409][ T5900] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 104.402278][ T5900] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 104.454222][ T5900] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.474047][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.498523][ T5900] usb 5-1: Product: syz [ 104.513583][ T5900] usb 5-1: Manufacturer: syz [ 104.518250][ T5900] usb 5-1: SerialNumber: syz [ 104.771043][ T5900] cdc_ncm 5-1:1.0: bind() failure [ 104.778728][ T5900] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 104.804192][ T5900] cdc_ncm 5-1:1.1: bind() failure [ 104.833467][ T5900] usb 5-1: USB disconnect, device number 5 [ 105.040080][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.173061][ T7738] input: syz0 as /devices/virtual/input/input14 [ 105.201791][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.255114][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 105.297477][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.336995][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.373501][ T9] usb 3-1: Product: syz [ 105.389839][ T9] usb 3-1: Manufacturer: syz [ 105.394468][ T9] usb 3-1: SerialNumber: syz [ 105.649298][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.689804][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.722396][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 105.757904][ T9] usb 3-1: USB disconnect, device number 7 [ 106.190878][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 106.374548][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 106.395376][ T9] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 106.400473][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 106.414859][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.435659][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 106.480474][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.499871][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.510572][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.546508][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.805512][ T9] usb 3-1: usb_control_msg returned -71 [ 106.828297][ T9] usbtmc 3-1:16.0: can't read capabilities [ 106.851806][ T9] usbtmc 3-1:16.0: Failed to submit iin_urb [ 106.868456][ T9] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -90 [ 106.896024][ T9] usb 3-1: USB disconnect, device number 8 [ 107.355601][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.796'. [ 107.575535][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 108.012792][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 108.012808][ T30] audit: type=1400 audit(1742546658.226:415): avc: denied { write } for pid=7847 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.369540][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.522248][ T7866] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.815'. [ 108.574874][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.598651][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.644085][ T9] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 108.672003][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.709994][ T9] usb 3-1: config 0 descriptor?? [ 108.747961][ T30] audit: type=1400 audit(1742546658.956:416): avc: denied { connect } for pid=7871 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 108.828480][ T7876] input: syz0 as /devices/virtual/input/input15 [ 108.999624][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 109.095669][ T7885] Attempt to restore checkpoint with obsolete wellknown handles [ 109.178894][ T9] hid-led 0003:1D34:0004.0005: unknown main item tag 0x0 [ 109.237486][ T30] audit: type=1400 audit(1742546659.446:417): avc: denied { ioctl } for pid=7893 comm="syz.1.830" path="socket:[16634]" dev="sockfs" ino=16634 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.364635][ T9] hid-led 0003:1D34:0004.0005: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input0 [ 109.431274][ T9] hid-led 0003:1D34:0004.0005: Dream Cheeky Webmail Notifier initialized [ 109.442634][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 109.475285][ T7902] netlink: 'syz.0.834': attribute type 21 has an invalid length. [ 109.538496][ T7907] bio_check_eod: 2 callbacks suppressed [ 109.538512][ T7907] syz.3.836: attempt to access beyond end of device [ 109.538512][ T7907] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 109.562712][ T7907] SQUASHFS error: Failed to read block 0x0: -5 [ 109.568946][ T7907] unable to read squashfs_super_block [ 109.634404][ T30] audit: type=1400 audit(1742546659.836:418): avc: denied { read } for pid=7910 comm="syz.0.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.666461][ T5901] usb 3-1: USB disconnect, device number 9 [ 109.859592][ T5900] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.986702][ T30] audit: type=1400 audit(1742546660.196:419): avc: denied { setopt } for pid=7926 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.033885][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 110.060067][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.089254][ T30] audit: type=1400 audit(1742546660.286:420): avc: denied { map } for pid=7928 comm="syz.0.847" path="socket:[16090]" dev="sockfs" ino=16090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 110.096401][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.172383][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.210211][ T5900] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 110.230400][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.267331][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 110.268637][ T30] audit: type=1326 audit(1742546660.476:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.0.851" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f844c78d169 code=0x0 [ 110.287456][ T5900] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 110.314869][ T7941] team0: entered allmulticast mode [ 110.334430][ T7941] team_slave_0: entered allmulticast mode [ 110.348063][ T5900] usb 5-1: Manufacturer: syz [ 110.365539][ T5900] usb 5-1: config 0 descriptor?? [ 110.375216][ T7941] team_slave_1: entered allmulticast mode [ 110.384211][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.855'. [ 110.520226][ T7948] netlink: 'syz.2.856': attribute type 14 has an invalid length. [ 110.660096][ T5900] rc_core: IR keymap rc-hauppauge not found [ 110.671927][ T5900] Registered IR keymap rc-empty [ 110.677726][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.701097][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.720168][ T5900] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 110.738244][ T5900] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 110.753300][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.779640][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.819904][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.850220][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.869597][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.899594][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.929718][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.959882][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.990650][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.030014][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.058026][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 111.105768][ T5900] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 111.134230][ T5900] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 111.160454][ T5900] usb 5-1: USB disconnect, device number 6 [ 111.860166][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.050115][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 112.060942][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.080665][ T10] usb 1-1: config 5 has an invalid interface number: 1 but max is 0 [ 112.088667][ T10] usb 1-1: config 5 has no interface number 0 [ 112.102217][ T10] usb 1-1: New USB device found, idVendor=056c, idProduct=8100, bcdDevice= f.20 [ 112.118324][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.126371][ T10] usb 1-1: Product: syz [ 112.130877][ T10] usb 1-1: Manufacturer: syz [ 112.135476][ T10] usb 1-1: SerialNumber: syz [ 112.354641][ T10] cdc_subset 1-1:5.1: probe with driver cdc_subset failed with error -22 [ 112.381103][ T10] usb 1-1: USB disconnect, device number 7 [ 112.453293][ T30] audit: type=1400 audit(1742546662.666:422): avc: denied { bind } for pid=8025 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.579566][ T5832] Bluetooth: hci5: command 0x1003 tx timeout [ 112.579581][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.683784][ T30] audit: type=1400 audit(1742546662.886:423): avc: denied { read } for pid=8029 comm="syz.1.894" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 112.757948][ T8030] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.766205][ T8030] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.783924][ T8030] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.797405][ T8030] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.805329][ T8030] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.817249][ T8030] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.827753][ T8030] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.835577][ T8030] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.844620][ T8030] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.852978][ T8030] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.858945][ T8030] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.865694][ T8030] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.873911][ T8030] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.880502][ T8030] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.887149][ T8030] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 113.140343][ T5873] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.144228][ T8053] Driver unsupported XDP return value 0 on prog (id 113) dev N/A, expect packet loss! [ 113.290762][ T5873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.290793][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.328477][ T30] audit: type=1326 audit(1742546663.526:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.4.908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10c2f8d169 code=0x0 [ 113.340160][ T5873] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 113.380164][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.398382][ T5873] usb 4-1: Product: syz [ 113.402690][ T5873] usb 4-1: Manufacturer: syz [ 113.402708][ T5873] usb 4-1: SerialNumber: syz [ 113.407129][ T5873] usb 4-1: config 0 descriptor?? [ 113.423648][ T5873] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 113.425919][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.426362][ T5873] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 113.426392][ T5873] usb 4-1: media controller created [ 113.438769][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.495549][ T5873] DVB: Unable to find symbol tda10046_attach() [ 113.495565][ T5873] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 113.495578][ T5873] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 113.767002][ T30] audit: type=1400 audit(1742546663.976:425): avc: denied { create } for pid=8073 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.794643][ T8078] netlink: 'syz.1.915': attribute type 5 has an invalid length. [ 113.820724][ T30] audit: type=1400 audit(1742546664.016:426): avc: denied { getopt } for pid=8073 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.915325][ T30] audit: type=1400 audit(1742546664.126:427): avc: denied { create } for pid=8080 comm="syz.1.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.965654][ T30] audit: type=1400 audit(1742546664.156:428): avc: denied { write } for pid=8080 comm="syz.1.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 114.058914][ T5869] kernel write not supported for file /video8 (pid: 5869 comm: kworker/1:3) [ 114.101998][ T8089] netlink: 596 bytes leftover after parsing attributes in process `syz.1.920'. [ 114.251870][ T5873] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 114.318118][ T5982] udevd[5982]: failed to send result of seq 12799 to main daemon: Connection refused [ 114.329735][ T5873] usb 4-1: USB disconnect, device number 7 [ 114.431604][ T8102] block device autoloading is deprecated and will be removed. [ 114.474241][ T8106] Failed to get privilege flags for destination (handle=0x2:0x7) [ 114.593703][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.602583][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.697692][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 114.820111][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 114.827847][ T5832] Bluetooth: hci1: command 0x080f tx timeout [ 114.827861][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.899648][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 114.899791][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.905690][ T5134] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.983946][ T8130] netlink: 56 bytes leftover after parsing attributes in process `syz.0.940'. [ 115.004791][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.019771][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.050722][ T10] usb 2-1: config 0 descriptor?? [ 115.057825][ T10] cp210x 2-1:0.0: cp210x converter detected [ 115.147226][ T8141] input: syz0 as /devices/virtual/input/input17 [ 115.273314][ T30] audit: type=1400 audit(1742546665.486:429): avc: denied { setopt } for pid=8143 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 115.273825][ T8143] delete_channel: no stack [ 115.439592][ T30] audit: type=1400 audit(1742546665.646:430): avc: denied { connect } for pid=8148 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.471806][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 115.484739][ T30] audit: type=1400 audit(1742546665.646:431): avc: denied { bind } for pid=8148 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.526021][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 115.535511][ T30] audit: type=1400 audit(1742546665.646:432): avc: denied { write } for pid=8148 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.617087][ T30] audit: type=1400 audit(1742546665.826:433): avc: denied { read } for pid=8154 comm="syz.0.949" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.691025][ T5873] usb 2-1: USB disconnect, device number 11 [ 115.699051][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.727814][ T5873] cp210x 2-1:0.0: device disconnected [ 115.847343][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.956'. [ 115.875575][ T8167] bond1: entered promiscuous mode [ 115.887504][ T8167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.053053][ T8167] bond1 (unregistering): Released all slaves [ 116.639554][ T5873] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 116.689574][ T5900] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.800953][ T5873] usb 2-1: config index 0 descriptor too short (expected 8228, got 36) [ 116.815076][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.826270][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.849461][ T5873] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.01 [ 116.867671][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 116.878866][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.891784][ T5873] usb 2-1: config 0 descriptor?? [ 116.897695][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.908787][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.914856][ T5134] Bluetooth: hci1: command 0x080f tx timeout [ 116.923252][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.933264][ T5900] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 116.942425][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.952329][ T5900] usb 1-1: config 0 descriptor?? [ 116.980698][ T5134] Bluetooth: hci4: command 0x0405 tx timeout [ 116.980705][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.980816][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.331579][ T5873] hid-rmi 0003:1532:011D.0006: item fetching failed at offset 0/4 [ 117.342897][ T5873] hid-rmi 0003:1532:011D.0006: parse failed [ 117.348906][ T5873] hid-rmi 0003:1532:011D.0006: probe with driver hid-rmi failed with error -22 [ 117.365876][ T5900] hid-multitouch 0003:1FD2:6007.0007: item fetching failed at offset 3/5 [ 117.376014][ T5900] hid-multitouch 0003:1FD2:6007.0007: probe with driver hid-multitouch failed with error -22 [ 117.530313][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.533835][ T5900] usb 2-1: USB disconnect, device number 12 [ 117.588984][ T1201] usb 1-1: USB disconnect, device number 8 [ 117.720121][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 117.728351][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.741061][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.756396][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.769349][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 117.783022][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.797668][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.806912][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.815622][ T10] usb 4-1: Manufacturer: syz [ 117.824465][ T10] usb 4-1: config 0 descriptor?? [ 118.091278][ T10] rc_core: IR keymap rc-hauppauge not found [ 118.097339][ T10] Registered IR keymap rc-empty [ 118.107463][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.139490][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.167884][ T8260] input: syz1 as /devices/virtual/input/input19 [ 118.180483][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 118.202053][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 118.233557][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.300196][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.323582][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.335499][ T8267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1003'. [ 118.360067][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.382497][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.409470][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.449972][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.479476][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.506076][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.530203][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.550434][ T10] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 118.560567][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 118.572499][ T10] usb 4-1: USB disconnect, device number 8 [ 118.814962][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 118.814975][ T30] audit: type=1400 audit(1742546669.026:440): avc: denied { bind } for pid=8298 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.817493][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1017'. [ 118.981050][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.981059][ T5832] Bluetooth: hci1: command 0x080f tx timeout [ 119.064666][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.064689][ T5134] Bluetooth: hci4: command 0x0405 tx timeout [ 119.084776][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.242018][ T30] audit: type=1400 audit(1742546669.456:441): avc: denied { create } for pid=8318 comm="syz.3.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.275153][ T30] audit: type=1400 audit(1742546669.476:442): avc: denied { getopt } for pid=8318 comm="syz.3.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.409775][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.576567][ T8337] netlink: 'syz.4.1034': attribute type 39 has an invalid length. [ 119.577604][ T30] audit: type=1400 audit(1742546669.786:443): avc: denied { map } for pid=8332 comm="syz.1.1033" path="socket:[18603]" dev="sockfs" ino=18603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.587866][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.608384][ T5873] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 119.620804][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.643794][ T30] audit: type=1400 audit(1742546669.786:444): avc: denied { read accept } for pid=8332 comm="syz.1.1033" path="socket:[18603]" dev="sockfs" ino=18603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.653389][ T10] usb 1-1: Product: syz [ 119.667686][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.680699][ T10] usb 1-1: Manufacturer: syz [ 119.694330][ T10] usb 1-1: SerialNumber: syz [ 119.699032][ T8334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1035'. [ 119.716412][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.735723][ T1201] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 119.750658][ T30] audit: type=1400 audit(1742546669.966:445): avc: denied { watch_mount } for pid=8340 comm="syz.3.1037" path="/190" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.820723][ T5873] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.846013][ T5873] usb 3-1: config 0 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.893780][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.908598][ T5873] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 119.918356][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.932350][ T5873] usb 3-1: config 0 descriptor?? [ 119.938561][ T8325] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 120.359520][ T5873] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 120.377026][ T5873] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 120.386640][ T5873] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 120.401055][ T5873] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 120.407861][ T5873] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 120.430675][ T5873] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.f9 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 120.451500][ T30] audit: type=1400 audit(1742546670.656:446): avc: denied { ioctl } for pid=8369 comm="syz.1.1051" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 120.519672][ T5901] usb 1-1: USB disconnect, device number 9 [ 120.569076][ T5873] usb 3-1: USB disconnect, device number 10 [ 120.633661][ T30] audit: type=1400 audit(1742546670.846:447): avc: denied { watch } for pid=8375 comm="syz.3.1054" path="anon_inode:[fanotify]" dev="anon_inodefs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 120.747316][ T30] audit: type=1400 audit(1742546670.956:448): avc: denied { mount } for pid=8383 comm="syz.1.1058" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 120.810103][ T30] audit: type=1400 audit(1742546670.996:449): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.140123][ T1201] usb 1-1: Service connection timeout for: 256 [ 121.155756][ T1201] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 121.184672][ T1201] ath9k_htc: Failed to initialize the device [ 121.211778][ T5901] usb 1-1: ath9k_htc: USB layer deinitialized [ 121.259323][ T8411] new mount options do not match the existing superblock, will be ignored [ 121.280755][ T8410] ALSA: mixer_oss: invalid OSS volume '' [ 121.310955][ T8411] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 226.649353][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 226.656355][ C0] rcu: 1-...!: (1 GPs behind) idle=56d4/1/0x4000000000000000 softirq=23977/23978 fqs=0 [ 226.667045][ C0] rcu: (detected by 0, t=10506 jiffies, g=17809, q=319 ncpus=2) [ 226.674765][ C0] Sending NMI from CPU 0 to CPUs 1: [ 226.674791][ C1] NMI backtrace for cpu 1 [ 226.674801][ C1] CPU: 1 UID: 0 PID: 8424 Comm: syz.2.1076 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 226.674817][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.674824][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 226.674849][ C1] Code: 7e 60 e8 a3 ff ff ff 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 a4 e6 49 7e 65 8b 05 a5 e6 49 7e a9 00 01 [ 226.674861][ C1] RSP: 0018:ffffc90000a28df8 EFLAGS: 00000002 [ 226.674871][ C1] RAX: 0000000080010003 RBX: ffff8880b872c780 RCX: ffffffff81a71b8e [ 226.674880][ C1] RDX: ffff8880361f0000 RSI: 0000000000000000 RDI: 0000000000000001 [ 226.674888][ C1] RBP: ffff888079a65340 R08: 0000000000000001 R09: 0000000000000000 [ 226.674896][ C1] R10: 0000000000000001 R11: 0000000000000004 R12: 0000000000000001 [ 226.674903][ C1] R13: 0000000000000000 R14: ffff8880b872c680 R15: ffffffff896ae790 [ 226.674912][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 226.674925][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.674933][ C1] CR2: 0000001b2f81cff8 CR3: 0000000035030000 CR4: 00000000003526f0 [ 226.674941][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.674948][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.674956][ C1] Call Trace: [ 226.674961][ C1] [ 226.674966][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 226.674983][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 226.675000][ C1] ? nmi_handle+0x1ac/0x5d0 [ 226.675022][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 226.675040][ C1] ? default_do_nmi+0x6a/0x160 [ 226.675053][ C1] ? exc_nmi+0x170/0x1e0 [ 226.675065][ C1] ? end_repeat_nmi+0xf/0x53 [ 226.675081][ C1] ? __pfx_advance_sched+0x10/0x10 [ 226.675096][ C1] ? enqueue_hrtimer+0x8e/0x3c0 [ 226.675109][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 226.675126][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 226.675145][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 226.675167][ C1] [ 226.675170][ C1] [ 226.675174][ C1] enqueue_hrtimer+0x2dd/0x3c0 [ 226.675186][ C1] __hrtimer_run_queues+0x903/0xae0 [ 226.675201][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 226.675213][ C1] ? read_tsc+0x9/0x20 [ 226.675229][ C1] hrtimer_interrupt+0x392/0x8e0 [ 226.675249][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 226.675269][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 226.675284][ C1] [ 226.675288][ C1] [ 226.675292][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.675308][ C1] RIP: 0010:unwind_next_frame+0x4d0/0x20c0 [ 226.675327][ C1] Code: e8 55 f1 ff ff 48 85 c0 48 89 c1 0f 84 13 fe ff ff 4c 8d 79 05 48 b8 00 00 00 00 00 fc ff df 4c 89 fa 48 c1 ea 03 0f b6 04 02 <4c> 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 d8 13 00 00 0f b6 41 05 [ 226.675338][ C1] RSP: 0018:ffffc900046ff000 EFLAGS: 00000a06 [ 226.675350][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff910274fc [ 226.675358][ C1] RDX: 1ffffffff2204ea0 RSI: 0000000000000000 RDI: ffffffff907b92fc [ 226.675366][ C1] RBP: ffffc900046ff0b8 R08: ffffffff91027502 R09: ffffffff9102dc6e [ 226.675374][ C1] R10: ffffc900046ff070 R11: 00000000000107fa R12: ffffc900046ff0c0 [ 226.675382][ C1] R13: ffffc900046ff070 R14: ffffc900046ff0a5 R15: ffffffff91027501 [ 226.675395][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x2f0/0x560 [ 226.675411][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 226.675426][ C1] arch_stack_walk+0x95/0x100 [ 226.675439][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x2f0/0x560 [ 226.675455][ C1] stack_trace_save+0x95/0xd0 [ 226.675468][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 226.675483][ C1] ? hlock_class+0x4e/0x130 [ 226.675496][ C1] ? mark_lock+0xb5/0xc60 [ 226.675511][ C1] save_stack+0x162/0x1f0 [ 226.675530][ C1] ? __pfx_save_stack+0x10/0x10 [ 226.675547][ C1] ? post_alloc_hook+0x181/0x1b0 [ 226.675564][ C1] ? get_page_from_freelist+0xfce/0x2f80 [ 226.675576][ C1] ? __alloc_frozen_pages_noprof+0x221/0x2470 [ 226.675589][ C1] ? alloc_pages_mpol+0x1fc/0x540 [ 226.675602][ C1] ? alloc_pages_noprof+0x131/0x390 [ 226.675614][ C1] ? get_free_pages_noprof+0xc/0x40 [ 226.675629][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x2f0/0x560 [ 226.675646][ C1] __set_page_owner+0x8b/0x560 [ 226.675658][ C1] ? mark_held_locks+0x9f/0xe0 [ 226.675673][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 226.675684][ C1] ? bad_range+0x23d/0x490 [ 226.675699][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.675714][ C1] ? get_page_from_freelist+0xfae/0x2f80 [ 226.675728][ C1] post_alloc_hook+0x181/0x1b0 [ 226.675746][ C1] get_page_from_freelist+0xfce/0x2f80 [ 226.675762][ C1] ? __pfx_mark_lock+0x10/0x10 [ 226.675778][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 226.675790][ C1] ? should_fail_alloc_page+0xee/0x130 [ 226.675804][ C1] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 226.675820][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 226.675839][ C1] __alloc_frozen_pages_noprof+0x221/0x2470 [ 226.675856][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 226.675873][ C1] ? find_held_lock+0x2d/0x110 [ 226.675886][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 226.675904][ C1] ? policy_nodemask+0xea/0x4e0 [ 226.675918][ C1] alloc_pages_mpol+0x1fc/0x540 [ 226.675932][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 226.675945][ C1] ? page_ext_put+0x48/0xd0 [ 226.675956][ C1] ? const_folio_flags+0x5b/0x100 [ 226.675972][ C1] ? folio_mark_accessed+0xc2/0xc00 [ 226.675991][ C1] alloc_pages_noprof+0x131/0x390 [ 226.676004][ C1] get_free_pages_noprof+0xc/0x40 [ 226.676022][ C1] __tlb_remove_folio_pages_size.constprop.0+0x2f0/0x560 [ 226.676036][ C1] ? folio_remove_rmap_ptes+0x130/0x3c0 [ 226.676049][ C1] unmap_page_range+0x1548/0x4390 [ 226.676072][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 226.676090][ C1] ? __pfx_lock_release+0x10/0x10 [ 226.676105][ C1] ? uprobe_munmap+0x20/0x5c0 [ 226.676116][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 226.676130][ C1] unmap_single_vma+0x194/0x2b0 [ 226.676147][ C1] unmap_vmas+0x22f/0x490 [ 226.676165][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 226.676181][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 226.676202][ C1] exit_mmap+0x1c1/0xba0 [ 226.676220][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 226.676239][ C1] ? __pfx_mark_lock+0x10/0x10 [ 226.676261][ C1] __mmput+0x12a/0x410 [ 226.676278][ C1] mmput+0x62/0x70 [ 226.676294][ C1] do_exit+0x9ba/0x2db0 [ 226.676308][ C1] ? __pfx_do_exit+0x10/0x10 [ 226.676321][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 226.676339][ C1] do_group_exit+0xd3/0x2a0 [ 226.676352][ C1] __x64_sys_exit_group+0x3e/0x50 [ 226.676365][ C1] x64_sys_call+0x151f/0x1720 [ 226.676377][ C1] do_syscall_64+0xcd/0x250 [ 226.676394][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.676410][ C1] RIP: 0033:0x7f2f3738d169 [ 226.676419][ C1] Code: Unable to access opcode bytes at 0x7f2f3738d13f. [ 226.676424][ C1] RSP: 002b:00007ffdea0f49e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 226.676435][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2f3738d169 [ 226.676442][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.676450][ C1] RBP: 00007ffdea0f4a4c R08: 00000004ea0f4adf R09: 00000000000927c0 [ 226.676457][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000e0 [ 226.676465][ C1] R13: 00000000000927c0 R14: 000000000001daad R15: 00007ffdea0f4aa0 [ 226.676477][ C1] [ 226.676785][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g17809 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 227.423960][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 227.433921][ C0] rcu: RCU grace-period kthread stack dump: [ 227.439795][ C0] task:rcu_preempt state:R running task stack:27552 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 227.453276][ C0] Call Trace: [ 227.456546][ C0] [ 227.459475][ C0] __schedule+0xf43/0x5890 [ 227.463894][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 227.469101][ C0] ? __pfx___schedule+0x10/0x10 [ 227.473946][ C0] ? schedule+0x298/0x350 [ 227.478269][ C0] ? __pfx_lock_release+0x10/0x10 [ 227.483296][ C0] ? lock_acquire+0x2f/0xb0 [ 227.487794][ C0] ? schedule+0x1fd/0x350 [ 227.492120][ C0] schedule+0xe7/0x350 [ 227.496183][ C0] schedule_timeout+0x124/0x280 [ 227.501027][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 227.506394][ C0] ? __pfx_process_timeout+0x10/0x10 [ 227.511680][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 227.517481][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 227.522940][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 227.527705][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 227.532986][ C0] ? rcu_gp_init+0xc82/0x1630 [ 227.537665][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 227.542865][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 227.548672][ C0] rcu_gp_kthread+0x271/0x380 [ 227.553348][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 227.558547][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 227.563743][ C0] ? __kthread_parkme+0x148/0x220 [ 227.568772][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 227.573970][ C0] kthread+0x3af/0x750 [ 227.578036][ C0] ? __pfx_kthread+0x10/0x10 [ 227.582626][ C0] ? __pfx_kthread+0x10/0x10 [ 227.587215][ C0] ret_from_fork+0x45/0x80 [ 227.591630][ C0] ? __pfx_kthread+0x10/0x10 [ 227.596216][ C0] ret_from_fork_asm+0x1a/0x30 [ 227.600984][ C0] [ 227.603991][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 227.610302][ C0] CPU: 0 UID: 0 PID: 5820 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 227.621149][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.631195][ C0] RIP: 0010:write_comp_data+0x8b/0x90 [ 227.636567][ C0] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 227.656167][ C0] RSP: 0018:ffffc900033278f0 EFLAGS: 00000293 [ 227.662226][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a80 RCX: ffffffff81ade40a [ 227.670187][ C0] RDX: ffff88802699a440 RSI: 0000000000000000 RDI: 0000000000000005 [ 227.678147][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 227.686106][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170e8951 [ 227.694067][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88 [ 227.702028][ C0] FS: 000055557a3bc500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 227.710952][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.717526][ C0] CR2: 0000555575b6e808 CR3: 0000000067270000 CR4: 00000000003526f0 [ 227.725489][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.733450][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 227.741411][ C0] Call Trace: [ 227.744684][ C0] [ 227.747518][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 227.753840][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 227.759033][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 227.764491][ C0] ? timekeeping_advance+0x72e/0xa90 [ 227.769772][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 227.775397][ C0] ? __asan_memcpy+0x3c/0x60 [ 227.779985][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 227.785269][ C0] ? rcu_is_watching+0x12/0xc0 [ 227.790027][ C0] ? update_process_times+0x178/0x2d0 [ 227.795397][ C0] ? __pfx_update_process_times+0x10/0x10 [ 227.801118][ C0] ? update_wall_time+0x1c/0x40 [ 227.805967][ C0] ? tick_nohz_handler+0x376/0x530 [ 227.811076][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 227.816526][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 227.821896][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 227.827604][ C0] ? read_tsc+0x9/0x20 [ 227.831677][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 227.836791][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 227.842945][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 227.848747][ C0] [ 227.851676][ C0] [ 227.854602][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.860762][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 227.866824][ C0] ? write_comp_data+0x8b/0x90 [ 227.871588][ C0] smp_call_function_many_cond+0x4ea/0x12c0 [ 227.877483][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 227.882682][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 227.887787][ C0] flush_tlb_mm_range+0x271/0x4a0 [ 227.892806][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 227.898346][ C0] ? up_write+0x1b2/0x520 [ 227.902683][ C0] copy_process+0x70fb/0x8c50 [ 227.907351][ C0] ? wp_page_reuse+0x287/0x900 [ 227.912129][ C0] ? __pfx_copy_process+0x10/0x10 [ 227.917146][ C0] ? __pfx_mark_lock+0x10/0x10 [ 227.921928][ C0] kernel_clone+0xfd/0x960 [ 227.926337][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 227.931533][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 227.936554][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 227.941924][ C0] ? do_user_addr_fault+0xdc7/0x13f0 [ 227.947212][ C0] __do_sys_clone+0xcf/0x120 [ 227.951794][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 227.956997][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 227.962284][ C0] do_syscall_64+0xcd/0x250 [ 227.966788][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.972682][ C0] RIP: 0033:0x7f7b9c1839d3 [ 227.977089][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 227.996692][ C0] RSP: 002b:00007ffeb87e47c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 228.005099][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7b9c1839d3 [ 228.013086][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 228.021070][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 228.029052][ C0] R10: 000055557a3bc7d0 R11: 0000000000000246 R12: 0000000000000000 [ 228.037026][ C0] R13: 00000000000927c0 R14: 000000000001dacb R15: 00007ffeb87e4960 [ 228.045024][ C0]