last executing test programs: 2.427897509s ago: executing program 1 (id=982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000308000140800000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2.393858347s ago: executing program 2 (id=984): bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x3, @private=0xa010102}}, 0x1e) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a", 0x35}], 0x1}, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe45) 2.303425307s ago: executing program 1 (id=986): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.303257967s ago: executing program 2 (id=987): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100feff000037153e370248018080351700d1bd", 0x33fe0}], 0x1}, 0x0) 2.243578165s ago: executing program 2 (id=988): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 903.295423ms ago: executing program 4 (id=1015): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 828.079573ms ago: executing program 3 (id=1016): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 790.176891ms ago: executing program 4 (id=1017): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900)="a9cff3", 0x3}, {&(0x7f0000001980)="5fb3450effde69bf04e3e44a973930e0b6f397ee7a964d6dbf627acb2d9426f6a9b00bee1bf4eb68838680", 0x2b}, {&(0x7f00000019c0)="48c2c8557113f61ff1aafba9c7e66173164c8ca0c15cbff5683fb4ddb6394595afbcbaaa377a4a5f830744e047edf851d62a66716dd1b4267d5ed18eb9f5c4f88793e82590b71922e22ef06265309b871cba49e7299e2c090c02bd10630588bdc3466f4f5bb8578a26c37021bbb564f50e373543dbd71abbcbe8e6e7bb3b26a9dd2f5ed56323a0055e2e30ed595dea33087b6392a8cabc9e5a07b064e79c7528a81ab8d7ee7aa5ff27ab7c51", 0xac}, {&(0x7f0000001a80)='Tq', 0x2}, {&(0x7f0000001b00)="696c6a7b5ea3afd7819ee415dbdde5557921387803db572c10968b2e1fcb5d68baa44bba", 0x24}, {&(0x7f0000001c00)="5ca5b1dabcc26ad25d615b05179a9fd11e6653791ad22b90c11d51d82c5339db07573325f2a50b1f39be84a4ded40063e6538f23fbbb6e35546898cd11f3aed21d065dae1ca8fe6f98feeab1efe708ae36e99ef9540324c582f7f497944e4d88c571328536fa3082092fe0866359247a8cc4fa868e328224411de12869db981383d403e97e958db40152d168b100a3220ec4a243377a0dc1be323e588ac346ed86498d1878e5c8dcc063812c", 0x7fffef00}, {&(0x7f0000001d00)="40a39684f731a649fe952deb2eff7fae7af9f2e92ddb69833700fafb1c2de6f1b92ec4a5299ce1da382c", 0x2a}], 0x7}}], 0x1, 0x0) 784.174941ms ago: executing program 3 (id=1018): syz_io_uring_setup(0x416c, &(0x7f00000001c0)={0x0, 0x5aa1, 0x10100, 0x0, 0x3f}, &(0x7f0000000100), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(0x0, 0x8b, 0x0, &(0x7f0000000100), 0x0, 0x0) 692.935176ms ago: executing program 3 (id=1019): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) 690.310308ms ago: executing program 0 (id=1033): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) 591.126347ms ago: executing program 1 (id=1020): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x104, "06000000000020000acd00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000280)={"e50d1af80100007ea25e0100ff00f6907ff16b7e00", r0}) 591.000683ms ago: executing program 3 (id=1022): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'batadv_slave_0\x00', {0x3}}) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000180)={0x0, 'batadv_slave_0\x00'}) 566.635455ms ago: executing program 4 (id=1023): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x10025, 0x0, 0x0}) 553.457936ms ago: executing program 0 (id=1025): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) sendmsg$netlink(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003500)=ANY=[@ANYBLOB="18000000140001002dbd700000f800000a"], 0x18}], 0x1, 0x0, 0x0, 0x8841}, 0x0) 504.33083ms ago: executing program 1 (id=1027): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2a460, 0x8018}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0xc0d4) 434.370985ms ago: executing program 0 (id=1028): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 418.761782ms ago: executing program 4 (id=1029): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000f000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x10000000) 354.927587ms ago: executing program 0 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xc800) 340.222104ms ago: executing program 2 (id=1032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'geneve1\x00', 0x400}) 286.953551ms ago: executing program 4 (id=1034): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) 243.47475ms ago: executing program 3 (id=1035): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xd8) keyctl$revoke(0x3, r0) 239.205749ms ago: executing program 1 (id=1045): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) 209.701272ms ago: executing program 0 (id=1036): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) 208.815102ms ago: executing program 4 (id=1037): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x80}}}}}}, 0x0) 180.278991ms ago: executing program 2 (id=1038): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 157.306596ms ago: executing program 3 (id=1039): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 132.242368ms ago: executing program 1 (id=1040): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 80.768128ms ago: executing program 0 (id=1041): r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x2010}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 0s ago: executing program 2 (id=1042): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 49.444324][ T29] audit: type=1400 audit(1739921126.571:88): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.447625][ T5804] cgroup: Unknown subsys name 'net' [ 49.472288][ T29] audit: type=1400 audit(1739921126.571:89): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.495915][ T29] audit: type=1400 audit(1739921126.621:90): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.661020][ T5804] cgroup: Unknown subsys name 'cpuset' [ 49.667882][ T5804] cgroup: Unknown subsys name 'rlimit' [ 49.772163][ T29] audit: type=1400 audit(1739921126.901:91): avc: denied { setattr } for pid=5804 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.795647][ T29] audit: type=1400 audit(1739921126.901:92): avc: denied { create } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.817201][ T29] audit: type=1400 audit(1739921126.901:93): avc: denied { write } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.838059][ T29] audit: type=1400 audit(1739921126.901:94): avc: denied { read } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.858504][ T29] audit: type=1400 audit(1739921126.931:95): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.883366][ T29] audit: type=1400 audit(1739921126.931:96): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 49.906674][ T29] audit: type=1400 audit(1739921126.931:97): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.910214][ T5806] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 50.729562][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.684959][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.700181][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.707861][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.715449][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.722929][ T5818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.740324][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.849389][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.857150][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.865309][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.886272][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.894665][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.902303][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.910129][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.918059][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.925517][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.932753][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.940694][ T5143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.948625][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.973010][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.981307][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.988780][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.996775][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.001085][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 54.011505][ T5818] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.019637][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.051616][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.062162][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.069580][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.077585][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.086674][ T5818] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.094127][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.164295][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.171464][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.178673][ T5814] bridge_slave_0: entered allmulticast mode [ 54.185686][ T5814] bridge_slave_0: entered promiscuous mode [ 54.194899][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.202229][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.209421][ T5814] bridge_slave_1: entered allmulticast mode [ 54.215928][ T5814] bridge_slave_1: entered promiscuous mode [ 54.239616][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.257516][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.294848][ T5814] team0: Port device team_slave_0 added [ 54.303010][ T5814] team0: Port device team_slave_1 added [ 54.354629][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.361654][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.387870][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.401893][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.408827][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.435132][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.482184][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 54.556936][ T5814] hsr_slave_0: entered promiscuous mode [ 54.564034][ T5814] hsr_slave_1: entered promiscuous mode [ 54.610691][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 54.625137][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.633823][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.641009][ T5822] bridge_slave_0: entered allmulticast mode [ 54.647893][ T5822] bridge_slave_0: entered promiscuous mode [ 54.655423][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 54.674981][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.682651][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.690234][ T5822] bridge_slave_1: entered allmulticast mode [ 54.696586][ T5822] bridge_slave_1: entered promiscuous mode [ 54.730011][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.751590][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 54.764594][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.816862][ T5822] team0: Port device team_slave_0 added [ 54.827261][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.834769][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.841932][ T5820] bridge_slave_0: entered allmulticast mode [ 54.848302][ T5820] bridge_slave_0: entered promiscuous mode [ 54.862652][ T5822] team0: Port device team_slave_1 added [ 54.881705][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.888758][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.895931][ T5820] bridge_slave_1: entered allmulticast mode [ 54.903473][ T5820] bridge_slave_1: entered promiscuous mode [ 54.922084][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.929191][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.936289][ T5831] bridge_slave_0: entered allmulticast mode [ 54.942891][ T5831] bridge_slave_0: entered promiscuous mode [ 54.967397][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.974679][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.981958][ T5831] bridge_slave_1: entered allmulticast mode [ 54.988299][ T5831] bridge_slave_1: entered promiscuous mode [ 55.005076][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.012289][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.038480][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.050612][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.057569][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.083481][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.105516][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.112923][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.120166][ T5828] bridge_slave_0: entered allmulticast mode [ 55.126510][ T5828] bridge_slave_0: entered promiscuous mode [ 55.134191][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.141365][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.148490][ T5828] bridge_slave_1: entered allmulticast mode [ 55.155296][ T5828] bridge_slave_1: entered promiscuous mode [ 55.162827][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.196317][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.215224][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.226633][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.266055][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.277770][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.294338][ T5820] team0: Port device team_slave_0 added [ 55.305379][ T5822] hsr_slave_0: entered promiscuous mode [ 55.311782][ T5822] hsr_slave_1: entered promiscuous mode [ 55.317552][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.325368][ T5822] Cannot create hsr debugfs directory [ 55.340172][ T5831] team0: Port device team_slave_0 added [ 55.353985][ T5820] team0: Port device team_slave_1 added [ 55.371632][ T5831] team0: Port device team_slave_1 added [ 55.401771][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.413022][ T5828] team0: Port device team_slave_0 added [ 55.419576][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.426538][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.452770][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.472151][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.479143][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.505368][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.517282][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.528012][ T5828] team0: Port device team_slave_1 added [ 55.534073][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.541171][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.567117][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.586116][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.593097][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.619282][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.630278][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.650283][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.667631][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.674663][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.700800][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.727958][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.735140][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.761298][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.796773][ T5820] hsr_slave_0: entered promiscuous mode [ 55.802790][ T5820] hsr_slave_1: entered promiscuous mode [ 55.808532][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.816164][ T5820] Cannot create hsr debugfs directory [ 55.822853][ T5143] Bluetooth: hci0: command tx timeout [ 55.840435][ T5831] hsr_slave_0: entered promiscuous mode [ 55.846283][ T5831] hsr_slave_1: entered promiscuous mode [ 55.852820][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.860541][ T5831] Cannot create hsr debugfs directory [ 55.901124][ T5828] hsr_slave_0: entered promiscuous mode [ 55.907209][ T5828] hsr_slave_1: entered promiscuous mode [ 55.913477][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.921598][ T5828] Cannot create hsr debugfs directory [ 55.989383][ T5143] Bluetooth: hci1: command tx timeout [ 55.993646][ T5818] Bluetooth: hci2: command tx timeout [ 56.026147][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.035144][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.045594][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.059588][ T5818] Bluetooth: hci3: command tx timeout [ 56.067656][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.139279][ T5818] Bluetooth: hci4: command tx timeout [ 56.145449][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.153803][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.170004][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.194134][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.245609][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.254162][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.268398][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.278042][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.288240][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.296652][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.332485][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.342779][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.371289][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.380489][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.391413][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.401298][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.408490][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.417155][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.424204][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.435056][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.442116][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.455662][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.477315][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.484394][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.556281][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.577366][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.609777][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.619807][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 56.619821][ T29] audit: type=1400 audit(1739921133.751:111): avc: denied { sys_module } for pid=5822 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.651393][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.660811][ T3966] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.667858][ T3966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.686526][ T3966] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.693608][ T3966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.705456][ T3966] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.712547][ T3966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.737590][ T3966] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.744686][ T3966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.775117][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.812501][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.867575][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.891278][ T5822] veth0_vlan: entered promiscuous mode [ 56.913984][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.921076][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.944715][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.977395][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.984510][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.024253][ T5822] veth1_vlan: entered promiscuous mode [ 57.038136][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.053342][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.098320][ T5822] veth0_macvtap: entered promiscuous mode [ 57.130312][ T5822] veth1_macvtap: entered promiscuous mode [ 57.151929][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.166513][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.182912][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.201276][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.210919][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.229285][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.239235][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.318662][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.368942][ T5828] veth0_vlan: entered promiscuous mode [ 57.382807][ T5828] veth1_vlan: entered promiscuous mode [ 57.383069][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.401004][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.426274][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.434365][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.455583][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.468112][ T5828] veth0_macvtap: entered promiscuous mode [ 57.474861][ T5814] veth0_vlan: entered promiscuous mode [ 57.485742][ T29] audit: type=1400 audit(1739921134.611:112): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.We2qEX/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.491590][ T5814] veth1_vlan: entered promiscuous mode [ 57.525588][ T29] audit: type=1400 audit(1739921134.611:113): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.536811][ T5828] veth1_macvtap: entered promiscuous mode [ 57.553896][ T29] audit: type=1400 audit(1739921134.611:114): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.We2qEX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.582701][ T5820] veth0_vlan: entered promiscuous mode [ 57.588692][ T29] audit: type=1400 audit(1739921134.611:115): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.608102][ T5831] veth0_vlan: entered promiscuous mode [ 57.624689][ T29] audit: type=1400 audit(1739921134.641:116): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.We2qEX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.666313][ T29] audit: type=1400 audit(1739921134.651:117): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.We2qEX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 57.673814][ T5814] veth0_macvtap: entered promiscuous mode [ 57.700539][ T29] audit: type=1400 audit(1739921134.651:118): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.702424][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.721446][ T29] audit: type=1400 audit(1739921134.681:119): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 57.763594][ T5820] veth1_vlan: entered promiscuous mode [ 57.773711][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.784626][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.787169][ T29] audit: type=1400 audit(1739921134.681:120): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="gadgetfs" ino=6776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 57.802304][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.829841][ T5831] veth1_vlan: entered promiscuous mode [ 57.843481][ T5814] veth1_macvtap: entered promiscuous mode [ 57.873072][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.887528][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.900314][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.902903][ T5818] Bluetooth: hci0: command tx timeout [ 57.925197][ T5820] veth0_macvtap: entered promiscuous mode [ 57.954266][ T5820] veth1_macvtap: entered promiscuous mode [ 57.968592][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.987670][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.996417][ T5898] hugetlbfs: syz.3.6 (5898): Using mlock ulimits for SHM_HUGETLB is obsolete [ 57.999953][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.017231][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.028212][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.059297][ T5818] Bluetooth: hci2: command tx timeout [ 58.064723][ T5818] Bluetooth: hci1: command tx timeout [ 58.072423][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.083192][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.087881][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 58.101827][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.110543][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.131229][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.142488][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.149914][ T5818] Bluetooth: hci3: command tx timeout [ 58.153056][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.168231][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.180266][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.203283][ T5814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.212350][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.221322][ T5818] Bluetooth: hci4: command tx timeout [ 58.227110][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.235951][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.252543][ T5831] veth0_macvtap: entered promiscuous mode [ 58.267665][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.278875][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.288936][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.300434][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.310296][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.320844][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.338983][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.367903][ T5831] veth1_macvtap: entered promiscuous mode [ 58.410812][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.423326][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.434287][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.445283][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.455484][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.466221][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.478145][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.512585][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.522185][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.532176][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.541827][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.687829][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.702176][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.732924][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.753290][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.763550][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.775387][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.786074][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.796968][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.807882][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.877962][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.893296][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.904080][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.904097][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.904109][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.904119][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.904128][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.904139][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.905275][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.927621][ T3966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.957391][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.962782][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.973028][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.983574][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.999969][ T3966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.003749][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.054816][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.131298][ T3966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.142019][ T3966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.157313][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.166422][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.206551][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.242837][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.277798][ T5919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15'. [ 59.346710][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.368630][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.443441][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.454632][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.470783][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.478170][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.639452][ T5931] Invalid logical block size (-1) [ 59.898708][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.913536][ T5946] mkiss: ax0: crc mode is auto. [ 60.139362][ T5818] Bluetooth: hci2: command tx timeout [ 60.140118][ T5143] Bluetooth: hci1: command tx timeout [ 60.219962][ T5143] Bluetooth: hci3: command tx timeout [ 60.243091][ T5963] mkiss: ax0: crc mode is auto. [ 60.311264][ T5143] Bluetooth: hci4: command tx timeout [ 60.614898][ T5940] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.623087][ T5940] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.634851][ T5940] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.642335][ T5940] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.648501][ T5940] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.655851][ T5940] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.663061][ T5940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.669346][ T5940] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.676255][ T5940] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.683915][ T5940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.690147][ T5940] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.696614][ T5940] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.705619][ T5940] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 60.711797][ T5940] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 60.718372][ T5940] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 60.969376][ T5816] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.977294][ T5863] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.059801][ T5865] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.139530][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 61.155121][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 61.155529][ T5863] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.165189][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 61.174825][ T5863] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 61.183730][ T5996] netlink: 'syz.4.47': attribute type 12 has an invalid length. [ 61.202258][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.206089][ T5996] netlink: 'syz.4.47': attribute type 11 has an invalid length. [ 61.220795][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.220830][ T5816] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 61.220850][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.255187][ T5816] usb 3-1: config 0 descriptor?? [ 61.260953][ T5863] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 61.284071][ T5865] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 61.289106][ T5863] usb 1-1: config 0 interface 0 has no altsetting 0 [ 61.295069][ T5865] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 61.302017][ T5863] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 61.336726][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.347100][ T5865] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 61.374594][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.380016][ T5863] usb 1-1: config 0 descriptor?? [ 61.422200][ T5951] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 61.432501][ T5865] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 61.700905][ T5816] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 61.720678][ T5816] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 61.757297][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 61.757309][ T29] audit: type=1400 audit(1739921138.881:170): avc: denied { sqpoll } for pid=6013 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.793810][ T5865] usb 2-1: USB disconnect, device number 2 [ 61.820476][ T5863] corsair-cpro 0003:1B1C:0C10.0002: hidraw1: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 61.900226][ T5143] Bluetooth: hci0: command 0x0419 tx timeout [ 61.944526][ T5864] usb 3-1: USB disconnect, device number 2 [ 62.158162][ T5863] corsair-cpro 0003:1B1C:0C10.0002: probe with driver corsair-cpro failed with error -71 [ 62.209321][ T5863] usb 1-1: USB disconnect, device number 2 [ 62.253742][ T29] audit: type=1400 audit(1739921139.381:171): avc: denied { name_bind } for pid=6046 comm="syz.3.57" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 62.405093][ T29] audit: type=1400 audit(1739921139.531:172): avc: denied { create } for pid=6061 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 62.490111][ T29] audit: type=1400 audit(1739921139.581:173): avc: denied { accept } for pid=6061 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 62.563382][ T29] audit: type=1400 audit(1739921139.581:174): avc: denied { ioctl } for pid=6061 comm="syz.1.59" path="socket:[8150]" dev="sockfs" ino=8150 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 62.700572][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.706683][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.713320][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.726975][ T29] audit: type=1400 audit(1739921139.821:175): avc: denied { read } for pid=6071 comm="syz.2.63" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 62.780136][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 62.798601][ T29] audit: type=1400 audit(1739921139.851:176): avc: denied { open } for pid=6071 comm="syz.2.63" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 62.829392][ T5864] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 62.839592][ T29] audit: type=1400 audit(1739921139.881:177): avc: denied { ioctl } for pid=6071 comm="syz.2.63" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 62.875489][ T29] audit: type=1326 audit(1739921139.901:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d12783da7 code=0x7ffc0000 [ 62.915557][ T29] audit: type=1326 audit(1739921139.901:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d12728fb9 code=0x7ffc0000 [ 63.368668][ T6097] netlink: 188 bytes leftover after parsing attributes in process `syz.1.74'. [ 63.394728][ T6097] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 63.460665][ T6101] Illegal XDP return value 4294967282 on prog (id 9) dev N/A, expect packet loss! [ 63.519143][ T5865] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.670360][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.684648][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.744056][ T5865] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 63.771298][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.808060][ T5865] usb 4-1: config 0 descriptor?? [ 63.979356][ T5143] Bluetooth: hci0: command 0x0419 tx timeout [ 64.205582][ T6135] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 64.225583][ T6134] IPVS: stopping backup sync thread 6135 ... [ 64.240030][ T5865] petalynx 0003:18B1:0037.0003: unbalanced collection at end of report description [ 64.249978][ T5865] petalynx 0003:18B1:0037.0003: parse failed [ 64.256090][ T5865] petalynx 0003:18B1:0037.0003: probe with driver petalynx failed with error -22 [ 64.465118][ T5816] usb 4-1: USB disconnect, device number 2 [ 64.779190][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.779983][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.785320][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.861755][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 64.910917][ T6021] Bluetooth: hci5: Frame reassembly failed (-84) [ 64.928428][ T6153] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 65.510518][ T6195] Zero length message leads to an empty skb [ 66.059840][ T5143] Bluetooth: hci0: command 0x0419 tx timeout [ 66.698028][ T6246] warning: `syz.3.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.768408][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 66.768423][ T29] audit: type=1400 audit(1739921143.891:366): avc: denied { read write } for pid=6249 comm="syz.1.141" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.799568][ T29] audit: type=1400 audit(1739921143.891:367): avc: denied { open } for pid=6249 comm="syz.1.141" path="/dev/sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.827883][ T29] audit: type=1400 audit(1739921143.891:368): avc: denied { ioctl } for pid=6249 comm="syz.1.141" path="/dev/sg0" dev="devtmpfs" ino=732 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.859423][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.865765][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.866598][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.876592][ T6252] netlink: 'syz.3.143': attribute type 13 has an invalid length. [ 66.891969][ T6252] gretap0: refused to change device tx_queue_len [ 66.898636][ T6252] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 66.941989][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 66.948904][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 66.955236][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 67.019646][ T5864] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.057008][ T6259] netlink: 'syz.1.145': attribute type 10 has an invalid length. [ 67.066171][ T6223] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 67.090412][ T29] audit: type=1400 audit(1739921144.221:369): avc: denied { listen } for pid=6262 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.127095][ T6266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 67.136989][ T6259] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 67.141916][ T29] audit: type=1400 audit(1739921144.261:370): avc: denied { read } for pid=6262 comm="syz.2.147" path="socket:[9719]" dev="sockfs" ino=9719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.212469][ T5864] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.229581][ T5864] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.259971][ T5864] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.269415][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.277520][ T5864] usb 1-1: Product: syz [ 67.322488][ T6275] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 67.322488][ T6275] The task syz.4.150 (6275) triggered the difference, watch for misbehavior. [ 67.332495][ T5864] usb 1-1: Manufacturer: syz [ 67.340103][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.379121][ T29] audit: type=1400 audit(1739921144.481:371): avc: denied { connect } for pid=6276 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.406771][ T5864] usb 1-1: SerialNumber: syz [ 67.420965][ T29] audit: type=1400 audit(1739921144.481:372): avc: denied { listen } for pid=6276 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.492967][ T6283] process 'syz.2.155' launched './file1' with NULL argv: empty string added [ 67.493914][ T29] audit: type=1400 audit(1739921144.621:373): avc: denied { execute } for pid=6282 comm="syz.2.155" name="file1" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.563467][ T29] audit: type=1400 audit(1739921144.631:374): avc: denied { execute_no_trans } for pid=6282 comm="syz.2.155" path="/24/file1" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.603225][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'. [ 67.617829][ T29] audit: type=1326 audit(1739921144.751:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.3.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc307b8cde9 code=0x0 [ 67.849305][ T5915] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.004637][ T5915] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 68.015979][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 68.029941][ T5915] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 68.039105][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.051255][ T5915] usb 3-1: config 0 descriptor?? [ 68.267017][ T5864] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 68.279994][ T6309] netlink: 280 bytes leftover after parsing attributes in process `syz.4.167'. [ 68.283471][ T5864] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 68.316461][ T5864] cdc_ncm 1-1:1.0: bind() failure [ 68.325180][ T5864] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 68.332495][ T5864] cdc_ncm 1-1:1.1: bind() failure [ 68.341625][ T5864] usb 1-1: USB disconnect, device number 3 [ 68.479263][ T5863] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 68.500338][ T5915] kye 0003:0458:0138.0004: item fetching failed at offset 0/1 [ 68.512535][ T5915] kye 0003:0458:0138.0004: parse failed [ 68.535873][ T5915] kye 0003:0458:0138.0004: probe with driver kye failed with error -22 [ 68.630643][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.640917][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.642039][ T6322] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 68.650695][ T5863] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 68.669950][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.678918][ T5863] usb 2-1: config 0 descriptor?? [ 68.726448][ T5915] usb 3-1: USB disconnect, device number 3 [ 68.847934][ T6324] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.174'. [ 69.022656][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 69.107739][ T5863] thrustmaster 0003:044F:B65A.0005: hidraw0: USB HID v0.09 Device [HID 044f:b65a] on usb-dummy_hcd.1-1/input0 [ 69.120956][ T5863] thrustmaster 0003:044F:B65A.0005: no inputs found [ 69.293898][ T6328] netlink: 68 bytes leftover after parsing attributes in process `syz.2.176'. [ 69.330431][ T5863] usb 2-1: USB disconnect, device number 4 [ 69.548125][ T6334] overlay: filesystem on ./file0 is read-only [ 70.081784][ T6360] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 70.289309][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.200'. [ 70.334038][ T6383] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.429754][ T6385] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 70.456810][ T6385] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 70.467979][ T6391] veth1_to_team: entered promiscuous mode [ 70.490563][ T6391] veth1_to_team: left promiscuous mode [ 70.496381][ T6393] netlink: 'syz.4.209': attribute type 12 has an invalid length. [ 70.507884][ T6393] netlink: 'syz.4.209': attribute type 29 has an invalid length. [ 70.516822][ T6393] netlink: 'syz.4.209': attribute type 2 has an invalid length. [ 70.529173][ T6393] netlink: 'syz.4.209': attribute type 2 has an invalid length. [ 70.537198][ T6393] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 70.545121][ T6393] netlink: 'syz.4.209': attribute type 37 has an invalid length. [ 70.553094][ T6393] netlink: 'syz.4.209': attribute type 2 has an invalid length. [ 70.562036][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.790039][ T6408] netlink: 44 bytes leftover after parsing attributes in process `syz.0.215'. [ 70.820045][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.218'. [ 71.009150][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.029839][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.036399][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.159337][ T5915] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 71.190804][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.210969][ T5864] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 71.234511][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.256074][ T5864] usb 4-1: config 0 descriptor?? [ 71.341550][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 71.362775][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 71.394170][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 71.410889][ T5915] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 71.427923][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.436193][ T5915] usb 5-1: Product: syz [ 71.445124][ T5915] usb 5-1: Manufacturer: syz [ 71.449913][ T5915] usb 5-1: SerialNumber: syz [ 71.457085][ T5915] usb 5-1: config 0 descriptor?? [ 71.472848][ T6419] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 71.489407][ T6419] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 71.516126][ T5915] usb 5-1: ucan: probing device on interface #0 [ 71.685768][ T5864] logitech 0003:046D:C20E.0006: rdesc size test failed for formula gp [ 71.697867][ T5864] logitech 0003:046D:C20E.0006: hidraw0: USB HID v0.09 Device [HID 046d:c20e] on usb-dummy_hcd.3-1/input0 [ 71.880671][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 71.880705][ T29] audit: type=1400 audit(1739921149.001:396): avc: denied { create } for pid=6438 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.898457][ T5863] usb 4-1: USB disconnect, device number 3 [ 71.939132][ T29] audit: type=1400 audit(1739921149.051:397): avc: denied { setopt } for pid=6438 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.985245][ T29] audit: type=1400 audit(1739921149.051:398): avc: denied { bind } for pid=6438 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.007820][ T29] audit: type=1400 audit(1739921149.051:399): avc: denied { name_bind } for pid=6438 comm="syz.0.229" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 72.028976][ T29] audit: type=1400 audit(1739921149.051:400): avc: denied { node_bind } for pid=6438 comm="syz.0.229" saddr=fe88::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 72.137222][ T5915] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 72.169977][ T29] audit: type=1400 audit(1739921149.281:401): avc: denied { create } for pid=6444 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.201697][ T5915] usb 5-1: USB disconnect, device number 2 [ 72.210532][ T29] audit: type=1400 audit(1739921149.281:402): avc: denied { read append } for pid=6444 comm="syz.2.232" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.234245][ T29] audit: type=1400 audit(1739921149.281:403): avc: denied { open } for pid=6444 comm="syz.2.232" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.276484][ T29] audit: type=1400 audit(1739921149.291:404): avc: denied { ioctl } for pid=6444 comm="syz.2.232" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.377446][ T6453] bad cache= option: no%e [ 72.377446][ T6453] [ 72.459361][ T6453] CIFS: VFS: bad cache= option: no%e [ 72.669552][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 72.743733][ T29] audit: type=1400 audit(1739921149.321:405): avc: denied { write } for pid=6444 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.046583][ T6474] Invalid source name [ 73.170219][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.322193][ T6500] gretap0: entered promiscuous mode [ 73.329431][ T6499] gretap0: left promiscuous mode [ 73.769206][ T5864] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 73.779384][ T5863] kernel write not supported for file bpf-map (pid: 5863 comm: kworker/0:5) [ 73.934359][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 73.945682][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 73.957772][ T5864] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 73.977714][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.996036][ T5864] usb 1-1: Product: syz [ 74.006147][ T5864] usb 1-1: Manufacturer: syz [ 74.016274][ T5864] usb 1-1: SerialNumber: syz [ 74.027816][ T5864] usb 1-1: config 0 descriptor?? [ 74.109125][ T5863] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 74.198981][ T6551] delete_channel: no stack [ 74.274206][ T5863] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.277289][ T5864] usb 1-1: USB disconnect, device number 4 [ 74.298477][ T5863] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 74.311737][ T5862] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.335730][ T5863] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.347928][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.356220][ T6557] xt_hashlimit: size too large, truncated to 1048576 [ 74.368051][ T5863] usb 3-1: Product: syz [ 74.372326][ T5863] usb 3-1: Manufacturer: syz [ 74.376923][ T5863] usb 3-1: SerialNumber: syz [ 74.385866][ T6532] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.479193][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 74.487925][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.499228][ T5862] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 74.508312][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.537532][ T5862] usb 5-1: config 0 descriptor?? [ 74.606483][ T5863] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 74.625178][ T5863] usb 3-1: USB disconnect, device number 4 [ 74.914957][ T6577] IPVS: lc: FWM 4 0x00000004 - no destination available [ 74.923040][ T5915] IPVS: starting estimator thread 0... [ 74.972420][ T5862] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0007/input/input6 [ 75.033510][ T6578] IPVS: using max 29 ests per chain, 69600 per kthread [ 75.057550][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 75.070192][ T5863] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 75.085623][ T5862] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 75.100060][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.294'. [ 75.209208][ T5915] usb 5-1: USB disconnect, device number 3 [ 75.240331][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 75.250602][ T5863] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 75.265616][ T5863] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 75.296753][ T5863] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.316693][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.336747][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 75.358895][ T5863] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 75.373344][ T5863] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26222, setting to 1024 [ 75.388835][ T5863] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.398066][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.417567][ T6532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.516458][ T6598] netlink: 'syz.3.299': attribute type 2 has an invalid length. [ 75.525536][ T6598] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.299'. [ 75.634438][ T5863] usb 3-1: usb_control_msg returned -71 [ 75.640957][ T5863] usbtmc 3-1:16.0: can't read capabilities [ 75.673983][ T5863] usb 3-1: USB disconnect, device number 5 [ 75.825721][ T6618] netlink: 44 bytes leftover after parsing attributes in process `syz.1.310'. [ 76.144580][ T9] cfg80211: failed to load regulatory.db [ 76.329143][ T5863] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.403740][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 76.489114][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 76.500596][ T5863] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 76.508853][ T5863] usb 5-1: config 0 has no interface number 1 [ 76.530788][ T5863] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 76.551892][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.569242][ T5863] usb 5-1: Product: syz [ 76.573500][ T5863] usb 5-1: Manufacturer: syz [ 76.578113][ T5863] usb 5-1: SerialNumber: syz [ 76.620006][ T5863] usb 5-1: config 0 descriptor?? [ 76.642038][ T5863] snd-usb-audio 5-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 76.878236][ T5863] usb 5-1: USB disconnect, device number 4 [ 77.182027][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 77.182042][ T29] audit: type=1400 audit(1739921154.311:457): avc: denied { bind } for pid=6696 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.183087][ T6695] capability: warning: `syz.1.346' uses deprecated v2 capabilities in a way that may be insecure [ 77.190108][ T6697] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 77.218253][ T29] audit: type=1400 audit(1739921154.321:458): avc: denied { read } for pid=6696 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.245165][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.369586][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 77.416471][ T29] audit: type=1400 audit(1739921154.541:459): avc: denied { setopt } for pid=6706 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.453752][ T6704] bond1 (unregistering): Released all slaves [ 77.639069][ T29] audit: type=1400 audit(1739921154.761:460): avc: denied { write } for pid=6717 comm="syz.0.355" name="mdstat" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 77.644282][ T6723] netlink: 'syz.4.358': attribute type 25 has an invalid length. [ 77.661944][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.675903][ T6720] IPVS: persistence engine module ip_vs_pe_ not found [ 77.676041][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.358'. [ 77.697527][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 77.781333][ T6728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 77.791777][ T29] audit: type=1400 audit(1739921154.921:461): avc: denied { watch watch_reads } for pid=6730 comm="syz.1.360" path="/90" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.947775][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 78.039644][ T29] audit: type=1400 audit(1739921155.161:462): avc: denied { unlink } for pid=6744 comm="syz.4.367" name="#1" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.077888][ T29] audit: type=1400 audit(1739921155.201:463): avc: denied { ioctl } for pid=6747 comm="syz.2.369" path="socket:[11067]" dev="sockfs" ino=11067 ioctlcmd=0x8b06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.279464][ T29] audit: type=1400 audit(1739921155.391:464): avc: denied { create } for pid=6757 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 78.326078][ T29] audit: type=1400 audit(1739921155.391:465): avc: denied { write } for pid=6757 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 78.345320][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.362777][ T6032] bond0: (slave bond_slave_0): interface is now down [ 78.389136][ T6032] bond0: (slave bond_slave_1): interface is now down [ 78.409073][ T6032] bond0: (slave syz_tun): interface is now down [ 78.421429][ T6032] bond0: now running without any active interface! [ 78.617837][ T29] audit: type=1400 audit(1739921155.741:466): avc: denied { bind } for pid=6777 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.118279][ T6810] netlink: 128 bytes leftover after parsing attributes in process `syz.0.399'. [ 79.125459][ T6808] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 79.327488][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.353238][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.372613][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.400185][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.419203][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.430395][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.440699][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.455253][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.467482][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.480389][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.649767][ T6843] overlayfs: failed to resolve '/yJDǼoF(LvRkcBI EZODRre6$JdD_U`ji{;l8Uj -gwΰj'Hٽٯ$%': -2 [ 79.975604][ T6863] capability: warning: `syz.1.425' uses 32-bit capabilities (legacy support in use) [ 80.680294][ T6900] IPVS: length: 163 != 24 [ 80.939098][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 81.101006][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.113100][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.123290][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 81.139682][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.156638][ T9] usb 2-1: config 0 descriptor?? [ 81.283407][ T6937] __nla_validate_parse: 1 callbacks suppressed [ 81.283417][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 81.566562][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 81.578491][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 81.591696][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 81.598508][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 81.607029][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 81.621915][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 81.628726][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 81.646376][ T9] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 81.765809][ T9] arvo 0003:1E7D:30D4.0008: couldn't init struct arvo_device [ 81.785822][ T9] arvo 0003:1E7D:30D4.0008: couldn't install keyboard [ 81.793738][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'. [ 81.805554][ T9] arvo 0003:1E7D:30D4.0008: probe with driver arvo failed with error -71 [ 81.822891][ T9] usb 2-1: USB disconnect, device number 5 [ 82.344416][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 82.344438][ T29] audit: type=1400 audit(1739921159.471:500): avc: denied { write } for pid=7003 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.756438][ T29] audit: type=1400 audit(1739921159.881:501): avc: denied { create } for pid=7030 comm="syz.4.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.925256][ T7041] netlink: 'syz.4.507': attribute type 8 has an invalid length. [ 82.998278][ T29] audit: type=1400 audit(1739921160.121:502): avc: denied { ioctl } for pid=7042 comm="syz.3.508" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 83.063805][ T7049] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.510'. [ 83.073149][ T7049] openvswitch: netlink: Flow key attribute not present in set flow. [ 83.161602][ T7005] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 83.171308][ T7005] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 83.296668][ T29] audit: type=1400 audit(1739921160.421:503): avc: denied { read } for pid=7060 comm="syz.4.516" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.314439][ T7061] input: syz1 as /devices/virtual/input/input7 [ 83.328934][ T29] audit: type=1400 audit(1739921160.421:504): avc: denied { open } for pid=7060 comm="syz.4.516" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.355778][ T29] audit: type=1400 audit(1739921160.421:505): avc: denied { ioctl } for pid=7060 comm="syz.4.516" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.360662][ T5915] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 83.442607][ T29] audit: type=1326 audit(1739921160.571:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1278cde9 code=0x7ffc0000 [ 83.500086][ T6054] wlan1: Trigger new scan to find an IBSS to join [ 83.520050][ T29] audit: type=1326 audit(1739921160.571:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1278cde9 code=0x7ffc0000 [ 83.572088][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.589089][ T29] audit: type=1326 audit(1739921160.571:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f6d1278cde9 code=0x7ffc0000 [ 83.623583][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.633472][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.648750][ T5915] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 83.653266][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 83.667676][ T29] audit: type=1326 audit(1739921160.571:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1278cde9 code=0x7ffc0000 [ 83.676499][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.735266][ T5915] usb 3-1: config 0 descriptor?? [ 84.157611][ T5915] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 84.165259][ T5915] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 84.187914][ T5915] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 84.206758][ T5915] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 84.222854][ T5915] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 84.238464][ T5915] magicmouse 0003:05AC:0265.0009: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 84.258461][ T5915] magicmouse 0003:05AC:0265.0009: magicmouse input not registered [ 84.268683][ T5915] magicmouse 0003:05AC:0265.0009: probe with driver magicmouse failed with error -12 [ 84.379975][ T5915] usb 3-1: USB disconnect, device number 6 [ 84.474154][ T7119] Bluetooth: MGMT ver 1.23 [ 85.038169][ T7157] input: syz0 as /devices/virtual/input/input8 [ 85.109834][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.142853][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.150037][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.139564][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 86.298393][ T7181] syz.3.573 (7181): drop_caches: 2 [ 86.314206][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.340513][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.373422][ T9] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 86.399257][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 86.420943][ T9] usb 3-1: Manufacturer: syz [ 86.444700][ T9] usb 3-1: config 0 descriptor?? [ 86.541839][ T6032] wlan1: Trigger new scan to find an IBSS to join [ 86.554764][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.596'. [ 86.579359][ T7231] netlink: 72 bytes leftover after parsing attributes in process `syz.4.596'. [ 86.589507][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.596'. [ 86.598408][ T7231] netlink: 72 bytes leftover after parsing attributes in process `syz.4.596'. [ 86.882775][ T7244] mkiss: ax0: crc mode is auto. [ 86.892778][ T9] cougar 0003:060B:700A.000A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 87.098667][ T9] usb 3-1: USB disconnect, device number 7 [ 87.400619][ T7273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.616'. [ 87.597512][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 87.597526][ T29] audit: type=1400 audit(1739921420.722:538): avc: denied { setopt } for pid=7286 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.623540][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.645776][ T7285] netlink: 136 bytes leftover after parsing attributes in process `syz.1.621'. [ 87.659894][ T7285] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 88.200735][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 88.213657][ T29] audit: type=1400 audit(1739921421.322:539): avc: denied { nlmsg_read } for pid=7322 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.263518][ T29] audit: type=1400 audit(1739921421.382:540): avc: denied { getopt } for pid=7328 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.372441][ T7337] ======================================================= [ 88.372441][ T7337] WARNING: The mand mount option has been deprecated and [ 88.372441][ T7337] and is ignored by this kernel. Remove the mand [ 88.372441][ T7337] option from the mount to silence this warning. [ 88.372441][ T7337] ======================================================= [ 88.374689][ T7336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.645'. [ 88.407336][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.458711][ T7343] overlayfs: overlapping lowerdir path [ 88.464337][ T7336] bond1: entered promiscuous mode [ 88.474769][ T7336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.512879][ T29] audit: type=1400 audit(1739921421.642:541): avc: denied { remount } for pid=7334 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.544132][ T29] audit: type=1400 audit(1739921421.672:542): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.715635][ T7336] bond1 (unregistering): Released all slaves [ 89.056842][ T7372] vcan0: tx address claim with dest, not broadcast [ 89.130293][ T7374] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 89.178251][ T7377] netlink: 136 bytes leftover after parsing attributes in process `syz.2.665'. [ 89.197055][ T7377] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 89.243917][ T7382] bridge0: entered promiscuous mode [ 89.254562][ T7382] macvlan2: entered promiscuous mode [ 89.263424][ T7382] macvlan2: entered allmulticast mode [ 89.273362][ T7382] bridge0: entered allmulticast mode [ 89.499686][ T6032] wlan1: Trigger new scan to find an IBSS to join [ 89.518504][ T29] audit: type=1400 audit(1739921422.642:543): avc: denied { ioctl } for pid=7399 comm="syz.4.673" path="mnt:[4026532794]" dev="nsfs" ino=4026532794 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.649044][ T29] audit: type=1400 audit(1739921422.772:544): avc: denied { getopt } for pid=7405 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.794360][ T29] audit: type=1326 audit(1739921422.922:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c838cde9 code=0x7ffc0000 [ 89.857174][ T29] audit: type=1326 audit(1739921422.922:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c838cde9 code=0x7ffc0000 [ 89.939471][ T29] audit: type=1326 audit(1739921422.922:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f14c838cde9 code=0x7ffc0000 [ 90.096696][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 90.474496][ T6054] wlan1: Creating new IBSS network, BSSID ea:da:02:d7:51:dd [ 90.481331][ T7462] delete_channel: no stack [ 90.793769][ T7489] netlink: 'syz.1.714': attribute type 46 has an invalid length. [ 91.029276][ T5864] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.099461][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 91.210905][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.226364][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.247908][ T5864] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 91.257713][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.270149][ T5864] usb 4-1: config 0 descriptor?? [ 91.281434][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.300177][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.310228][ T5915] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.319635][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.337087][ T5915] usb 3-1: config 0 descriptor?? [ 91.579342][ T7545] netlink: 'syz.1.741': attribute type 40 has an invalid length. [ 91.624308][ T7547] random: crng reseeded on system resumption [ 91.693223][ T5864] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 91.704117][ T5864] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 91.711239][ T5864] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 91.719563][ T5864] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 91.728428][ T5864] lg-g15 0003:046D:C222.000B: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 91.749132][ T5865] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.894494][ T5816] usb 4-1: USB disconnect, device number 4 [ 91.912099][ T5865] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 91.921515][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.929739][ T5865] usb 5-1: Product: syz [ 91.933998][ T5865] usb 5-1: Manufacturer: syz [ 91.938688][ T5865] usb 5-1: SerialNumber: syz [ 91.953256][ T5865] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 91.968672][ T5915] usb 3-1: string descriptor 0 read error: -71 [ 91.988158][ T5864] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 91.998186][ T5915] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 92.013455][ T5915] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 92.021821][ T5915] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 92.030077][ T5915] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 92.037701][ T5915] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 92.052907][ T5915] usb 3-1: USB disconnect, device number 8 [ 92.444305][ T7572] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 92.509051][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.668108][ T7581] __nla_validate_parse: 6 callbacks suppressed [ 92.668125][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.757'. [ 92.742560][ T7591] @: renamed from vlan0 (while UP) [ 92.747841][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 92.747853][ T29] audit: type=1400 audit(1739921425.872:574): avc: denied { ioctl } for pid=7590 comm="syz.1.760" path="socket:[14980]" dev="sockfs" ino=14980 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.779168][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.840792][ T5915] usb 5-1: USB disconnect, device number 5 [ 92.949285][ T5862] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.119395][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 93.132355][ T5862] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 93.149103][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.157101][ T5862] usb 1-1: Product: syz [ 93.166903][ T5862] usb 1-1: Manufacturer: syz [ 93.172097][ T5862] usb 1-1: SerialNumber: syz [ 93.178618][ T5862] usb 1-1: config 0 descriptor?? [ 93.186992][ T5862] gspca_main: sq930x-2.14.0 probing 2770:930c [ 93.299224][ T5816] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 93.429047][ T5864] usb 5-1: Service connection timeout for: 257 [ 93.435253][ T5864] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 93.450019][ T5864] ath9k_htc: Failed to initialize the device [ 93.456884][ T5915] usb 5-1: ath9k_htc: USB layer deinitialized [ 93.469132][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 93.495306][ T5816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.509543][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.521811][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.531724][ T5816] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.541490][ T5816] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.560375][ T5816] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.579122][ T5816] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.598808][ T5816] usb 3-1: Manufacturer: syz [ 93.606424][ T5816] usb 3-1: config 0 descriptor?? [ 93.765350][ T29] audit: type=1400 audit(1739921426.892:575): avc: denied { read } for pid=7633 comm="syz.4.781" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 93.796872][ T29] audit: type=1400 audit(1739921426.892:576): avc: denied { open } for pid=7633 comm="syz.4.781" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 93.909108][ T5816] rc_core: IR keymap rc-hauppauge not found [ 93.915714][ T5816] Registered IR keymap rc-empty [ 93.925530][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 93.951091][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 93.980473][ T5816] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 94.043811][ T5862] gspca_sq930x: ucbus_write failed -71 [ 94.049729][ T5862] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 94.060180][ T5816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 94.095363][ T5862] usb 1-1: USB disconnect, device number 5 [ 94.129661][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.149857][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.169169][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.189760][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.209566][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.230407][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.267931][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.301971][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.329115][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.344271][ T7650] pimreg1: tun_chr_ioctl cmd 2147767507 [ 94.362978][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.372026][ T29] audit: type=1400 audit(1739921427.502:577): avc: denied { block_suspend } for pid=7651 comm="syz.3.788" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.391346][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.430028][ T5816] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 94.439715][ T5816] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 94.460679][ T5816] usb 3-1: USB disconnect, device number 9 [ 94.520439][ T7661] netlink: 120 bytes leftover after parsing attributes in process `syz.4.791'. [ 94.530381][ T7661] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 94.538072][ T7661] netlink: 68 bytes leftover after parsing attributes in process `syz.4.791'. [ 94.719092][ T5863] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.869074][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 94.875394][ T5863] usb 4-1: config 2 interface 0 has no altsetting 0 [ 94.883901][ T5863] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 94.893583][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.901652][ T5863] usb 4-1: Product: syz [ 94.905933][ T5863] usb 4-1: Manufacturer: syz [ 94.910786][ T5863] usb 4-1: SerialNumber: syz [ 94.949205][ T5816] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.956874][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 94.979696][ T5862] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.131955][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.143258][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.161043][ T5816] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 95.172015][ T5863] usb 4-1: USB disconnect, device number 5 [ 95.178841][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.188772][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.197863][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.211504][ T5862] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 95.222390][ T5816] usb 2-1: config 0 descriptor?? [ 95.227709][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.240865][ T5862] usb 1-1: config 0 descriptor?? [ 95.411480][ T29] audit: type=1400 audit(1739921428.542:578): avc: denied { ioctl } for pid=7692 comm="syz.2.807" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 95.446796][ T5915] usb 2-1: USB disconnect, device number 6 [ 95.542982][ T29] audit: type=1400 audit(1739921428.672:579): avc: denied { accept } for pid=7697 comm="syz.4.809" lport=56265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.660697][ T5862] acrux 0003:1A34:0802.000D: item fetching failed at offset 1/5 [ 95.670258][ T5862] acrux 0003:1A34:0802.000D: parse failed [ 95.676124][ T5862] acrux 0003:1A34:0802.000D: probe with driver acrux failed with error -22 [ 95.721500][ T29] audit: type=1400 audit(1739921428.852:580): avc: denied { bind } for pid=7702 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.865965][ T5865] usb 1-1: USB disconnect, device number 6 [ 96.035046][ T29] audit: type=1400 audit(1739921429.162:581): avc: denied { getopt } for pid=7717 comm="syz.1.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 96.116590][ T7722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.819'. [ 96.331307][ T5865] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.510369][ T5865] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 96.523513][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.541598][ T5865] usb 2-1: config 0 descriptor?? [ 96.548063][ T5865] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 96.619242][ T5862] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 96.755243][ T5865] gspca_sunplus: reg_w_riv err -71 [ 96.760621][ T5865] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 96.769696][ T5865] usb 2-1: USB disconnect, device number 7 [ 96.777183][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 96.795484][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 96.807103][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 96.818256][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.833570][ T5862] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 96.842859][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.850858][ T5862] usb 3-1: Product: syz [ 96.855056][ T5862] usb 3-1: Manufacturer: syz [ 96.859693][ T5862] usb 3-1: SerialNumber: syz [ 96.865241][ T5862] usb 3-1: config 0 descriptor?? [ 96.870661][ T7740] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 96.880950][ T5862] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 96.898187][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 97.090019][ T5915] usb 3-1: USB disconnect, device number 10 [ 97.299157][ T5865] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 97.411698][ T7757] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 97.421607][ T7756] IPVS: stopping backup sync thread 7757 ... [ 97.470348][ T5865] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 97.483471][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.500270][ T5865] usb 2-1: config 0 descriptor?? [ 97.511210][ T5865] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 97.820382][ T29] audit: type=1400 audit(1739921430.942:582): avc: denied { mount } for pid=7772 comm="syz.4.843" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.855886][ T29] audit: type=1400 audit(1739921430.952:583): avc: denied { mounton } for pid=7772 comm="syz.4.843" path="/180/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 97.897394][ T29] audit: type=1400 audit(1739921431.012:584): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.912101][ T5865] gspca_sunplus: reg_w_riv err -71 [ 97.932792][ T5865] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 97.953007][ T5865] usb 2-1: USB disconnect, device number 8 [ 98.583030][ T29] audit: type=1400 audit(1739921431.712:585): avc: denied { watch watch_reads } for pid=7803 comm="syz.4.855" path="pipe:[15348]" dev="pipefs" ino=15348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 98.639183][ T5863] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 98.814519][ T5863] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 98.823819][ T5863] usb 4-1: config 0 has no interface number 0 [ 98.845106][ T5863] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 98.857932][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.866776][ T7828] pim6reg: entered allmulticast mode [ 98.877075][ T5863] usb 4-1: Product: syz [ 98.891376][ T5863] usb 4-1: Manufacturer: syz [ 98.896013][ T5863] usb 4-1: SerialNumber: syz [ 98.911800][ T5863] usb 4-1: config 0 descriptor?? [ 98.973806][ T7835] fuse: Bad value for 'fd' [ 99.197860][ T7838] vivid-003: ================= START STATUS ================= [ 99.205929][ T7838] vivid-003: Radio HW Seek Mode: Bounded [ 99.213678][ T7838] vivid-003: Radio Programmable HW Seek: false [ 99.220950][ T7838] vivid-003: RDS Rx I/O Mode: Block I/O [ 99.226518][ T7838] vivid-003: Generate RBDS Instead of RDS: false [ 99.234119][ T7838] vivid-003: RDS Reception: true [ 99.239129][ T7838] vivid-003: RDS Program Type: 0 inactive [ 99.246300][ T7838] vivid-003: RDS PS Name: inactive [ 99.252836][ T7838] vivid-003: RDS Radio Text: inactive [ 99.258347][ T7838] vivid-003: RDS Traffic Announcement: false inactive [ 99.265216][ T7838] vivid-003: RDS Traffic Program: false inactive [ 99.271657][ T7838] vivid-003: RDS Music: false inactive [ 99.277149][ T7838] vivid-003: ================== END STATUS ================== [ 99.312793][ T7797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.319411][ T7797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.325422][ T7797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.346394][ T7797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.532664][ T5863] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 99.546215][ T5863] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 99.555802][ T7855] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 99.565363][ T7854] IPVS: stopping backup sync thread 7855 ... [ 99.575952][ T5863] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 99.595187][ T5863] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 99.620017][ T5863] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 99.629192][ T5864] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 99.649977][ T5863] usb 4-1: USB disconnect, device number 6 [ 99.669800][ T5863] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 99.684310][ T5863] keyspan 4-1:0.133: device disconnected [ 99.790777][ T5864] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 99.800515][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.810849][ T5864] usb 2-1: config 0 descriptor?? [ 99.817457][ T5864] cp210x 2-1:0.0: cp210x converter detected [ 100.106611][ T29] audit: type=1400 audit(1739921433.232:586): avc: denied { execute } for pid=7880 comm="syz.3.887" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 100.138625][ T29] audit: type=1400 audit(1739921433.262:587): avc: denied { read } for pid=7882 comm="syz.0.888" path="socket:[16252]" dev="sockfs" ino=16252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.189185][ T5865] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 100.257323][ T7889] netlink: 'syz.3.890': attribute type 10 has an invalid length. [ 100.287338][ T7889] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 100.371758][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.384650][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.408826][ T5865] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 100.421746][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.432293][ T5864] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 100.444202][ T5865] usb 3-1: config 0 descriptor?? [ 100.451413][ T5864] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 100.462272][ T5864] usb 2-1: cp210x converter now attached to ttyUSB0 [ 100.475762][ T5864] usb 2-1: USB disconnect, device number 9 [ 100.484838][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 100.497660][ T5864] cp210x 2-1:0.0: device disconnected [ 100.579583][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 100.629300][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.727794][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.897'. [ 100.778213][ T29] audit: type=1400 audit(1739921433.902:588): avc: denied { lock } for pid=7906 comm="syz.0.898" path="socket:[16299]" dev="sockfs" ino=16299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 100.840072][ T29] audit: type=1400 audit(1739921433.962:589): avc: denied { name_bind } for pid=7909 comm="syz.4.900" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 100.876842][ T5865] holtek 0003:1241:5015.000E: unbalanced collection at end of report description [ 100.886668][ T5865] holtek 0003:1241:5015.000E: parse failed [ 100.893359][ T5865] holtek 0003:1241:5015.000E: probe with driver holtek failed with error -22 [ 101.093963][ T5865] usb 3-1: USB disconnect, device number 11 [ 101.339112][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.350081][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.419164][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 101.496275][ T7937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.910'. [ 101.729480][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.924'. [ 101.755171][ T7946] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.013477][ T7954] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 102.305509][ T29] audit: type=1326 audit(1739921435.422:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.1.925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0480b8cde9 code=0x0 [ 102.346856][ T7971] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 102.574754][ T5864] kernel write not supported for file bpf-map (pid: 5864 comm: kworker/1:3) [ 102.579209][ T5863] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 102.740441][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.750753][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.763830][ T5863] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 102.783972][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.799821][ T5863] usb 3-1: config 0 descriptor?? [ 103.114019][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.946'. [ 103.135711][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.946'. [ 103.210614][ T7999] netlink: 'syz.1.948': attribute type 2 has an invalid length. [ 103.218374][ T7999] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.948'. [ 103.248864][ T5863] thrustmaster 0003:044F:B65A.000F: hidraw0: USB HID v0.09 Device [HID 044f:b65a] on usb-dummy_hcd.2-1/input0 [ 103.269122][ T5863] thrustmaster 0003:044F:B65A.000F: no inputs found [ 103.411011][ T5863] IPVS: starting estimator thread 0... [ 103.416633][ T8013] IPVS: lc: FWM 4 0x00000004 - no destination available [ 103.483133][ T5863] usb 3-1: USB disconnect, device number 12 [ 103.499347][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.519605][ T8014] IPVS: using max 27 ests per chain, 64800 per kthread [ 103.620372][ T5864] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 103.789271][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 103.810327][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.827871][ T5864] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 103.837751][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.851705][ T5864] usb 2-1: Product: syz [ 103.855882][ T5864] usb 2-1: Manufacturer: syz [ 103.861863][ T5864] usb 2-1: SerialNumber: syz [ 103.867928][ T5864] usb 2-1: config 0 descriptor?? [ 103.949100][ T5863] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.006364][ T8037] xt_hashlimit: size too large, truncated to 1048576 [ 104.099179][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 104.115336][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.120011][ T5864] usb 2-1: USB disconnect, device number 10 [ 104.139869][ T5863] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 104.159081][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.168575][ T5863] usb 4-1: config 0 descriptor?? [ 104.278758][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 104.469138][ T5865] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.609319][ T5863] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.0010/input/input12 [ 104.631306][ T5865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.631573][ T5863] sony 0003:054C:03D5.0010: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 104.647453][ T5865] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 104.677646][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 104.696386][ T5865] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.720416][ T8061] bond1 (unregistering): Released all slaves [ 104.726551][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.741880][ T5865] usb 5-1: Product: syz [ 104.746122][ T5865] usb 5-1: Manufacturer: syz [ 104.753046][ T6054] bond0: (slave bond_slave_0): interface is now down [ 104.762046][ T5865] usb 5-1: SerialNumber: syz [ 104.766692][ T6054] bond0: (slave bond_slave_1): interface is now down [ 104.777627][ T8046] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 104.797993][ T6054] bond0: now running without any active interface! [ 104.885818][ T5863] usb 4-1: USB disconnect, device number 7 [ 105.024993][ T5865] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 105.048122][ T5865] usb 5-1: USB disconnect, device number 6 [ 105.285607][ T8096] netlink: 128 bytes leftover after parsing attributes in process `syz.2.984'. [ 105.386319][ T8105] netlink: 'syz.2.987': attribute type 1 has an invalid length. [ 105.529644][ T5865] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.609084][ T5862] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 105.669257][ T5863] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 105.709123][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 105.718725][ T5865] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 105.727889][ T5865] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 105.729355][ T5865] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.748528][ T5865] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.758958][ T5865] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 105.770194][ T5865] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 105.773686][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.796063][ T5865] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26222, setting to 1024 [ 105.807457][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.807494][ T5862] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 105.807512][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.819124][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 105.840698][ T5862] usb 2-1: config 0 descriptor?? [ 105.847760][ T5865] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.857625][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.867364][ T5863] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.867801][ T8046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 105.878952][ T5863] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 105.889613][ T8131] __nla_validate_parse: 1 callbacks suppressed [ 105.889626][ T8131] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.999'. [ 105.901009][ T5863] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 105.904287][ T8131] openvswitch: netlink: Flow key attribute not present in set flow. [ 105.933804][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.958863][ T5863] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 105.968779][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.983800][ T5863] usb 3-1: config 0 descriptor?? [ 106.101463][ T5865] usb 5-1: usb_control_msg returned -71 [ 106.107147][ T5865] usbtmc 5-1:16.0: can't read capabilities [ 106.117426][ T5865] usb 5-1: USB disconnect, device number 7 [ 106.267076][ T5862] elan 0003:04F3:0755.0011: failed to start in urb: -90 [ 106.295965][ T5862] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 106.420666][ T5863] corsair-cpro 0003:1B1C:0C10.0012: hidraw1: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 106.502908][ T5865] usb 2-1: USB disconnect, device number 11 [ 106.598424][ T29] audit: type=1326 audit(1739921439.722:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c838cde9 code=0x7ffc0000 [ 106.627741][ T5863] corsair-cpro 0003:1B1C:0C10.0012: probe with driver corsair-cpro failed with error -71 [ 106.629811][ T29] audit: type=1326 audit(1739921439.722:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c838cde9 code=0x7ffc0000 [ 106.657542][ T5863] usb 3-1: USB disconnect, device number 13 [ 106.660845][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.667468][ T29] audit: type=1326 audit(1739921439.732:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f14c838cde9 code=0x7ffc0000 [ 106.696033][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.703132][ T29] audit: type=1326 audit(1739921439.732:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c838cde9 code=0x7ffc0000 [ 106.726399][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.739446][ T29] audit: type=1326 audit(1739921439.732:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c838cde9 code=0x7ffc0000 [ 106.762717][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.102291][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.123552][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.142153][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.149525][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 107.153347][ T8189] blktrace: Concurrent blktraces are not allowed on sg0 [ 107.171101][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.189084][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.212909][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.233633][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.257711][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.268346][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.280155][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.586651][ T8216] netlink: 'syz.1.1040': attribute type 19 has an invalid length. [ 212.648957][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 212.655946][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8216/1:b..l [ 212.664248][ C0] rcu: (detected by 0, t=10502 jiffies, g=15301, q=262 ncpus=2) [ 212.671954][ C0] task:syz.1.1040 state:R running task stack:23712 pid:8216 tgid:8214 ppid:5828 task_flags:0x40054c flags:0x00004000 [ 212.685881][ C0] Call Trace: [ 212.689152][ C0] [ 212.692081][ C0] __schedule+0xf43/0x5890 [ 212.696497][ C0] ? hlock_class+0x4e/0x130 [ 212.700997][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 212.706193][ C0] ? __pfx_mark_lock+0x10/0x10 [ 212.710958][ C0] ? __pfx___schedule+0x10/0x10 [ 212.715800][ C0] ? find_held_lock+0x2d/0x110 [ 212.720565][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 212.725936][ C0] preempt_schedule_common+0x44/0xc0 [ 212.731215][ C0] preempt_schedule_thunk+0x1a/0x30 [ 212.736413][ C0] _raw_spin_unlock+0x3e/0x50 [ 212.741082][ C0] unmap_page_range+0xec7/0x43a0 [ 212.746038][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 212.751408][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 212.756345][ C0] ? uprobe_munmap+0x20/0x5c0 [ 212.761024][ C0] unmap_single_vma+0x194/0x2b0 [ 212.765877][ C0] unmap_vmas+0x22f/0x490 [ 212.770207][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 212.775062][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 212.780008][ C0] exit_mmap+0x1c1/0xba0 [ 212.784252][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 212.789023][ C0] ? __pfx_mark_lock+0x10/0x10 [ 212.793799][ C0] __mmput+0x12a/0x410 [ 212.797870][ C0] mmput+0x62/0x70 [ 212.801590][ C0] do_exit+0x9ba/0x2d70 [ 212.805743][ C0] ? get_signal+0x8f7/0x26c0 [ 212.810335][ C0] ? __pfx_do_exit+0x10/0x10 [ 212.814919][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 212.820457][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 212.825840][ C0] do_group_exit+0xd3/0x2a0 [ 212.830359][ C0] get_signal+0x24ed/0x26c0 [ 212.834900][ C0] ? __pfx_get_signal+0x10/0x10 [ 212.839766][ C0] ? __pfx_do_futex+0x10/0x10 [ 212.844446][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 212.849995][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 212.856160][ C0] ? rcu_is_watching+0x12/0xc0 [ 212.860922][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 212.866558][ C0] do_syscall_64+0xda/0x250 [ 212.871057][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.876946][ C0] RIP: 0033:0x7f0480b8cde9 [ 212.881350][ C0] RSP: 002b:00007f0481a1c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.889758][ C0] RAX: 0000000000000001 RBX: 00007f0480da5fa8 RCX: 00007f0480b8cde9 [ 212.897721][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0480da5fac [ 212.905684][ C0] RBP: 00007f0480da5fa0 R08: 00007f0481a1d000 R09: 0000000000000000 [ 212.913649][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f0480da5fac [ 212.922130][ C0] R13: 0000000000000000 R14: 00007ffdced9f1b0 R15: 00007ffdced9f298 [ 212.930103][ C0] [ 212.933116][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g15301 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 212.945425][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=6345 [ 212.953223][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g15301 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 212.964578][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 212.974531][ C0] rcu: RCU grace-period kthread stack dump: [ 212.980403][ C0] task:rcu_preempt state:I stack:27552 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 212.992317][ C0] Call Trace: [ 212.995585][ C0] [ 212.998512][ C0] __schedule+0xf43/0x5890 [ 213.002919][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 213.008126][ C0] ? __pfx___schedule+0x10/0x10 [ 213.012968][ C0] ? schedule+0x298/0x350 [ 213.017392][ C0] ? __pfx_lock_release+0x10/0x10 [ 213.022438][ C0] ? lock_acquire+0x2f/0xb0 [ 213.026953][ C0] ? schedule+0x1fd/0x350 [ 213.031286][ C0] schedule+0xe7/0x350 [ 213.035350][ C0] schedule_timeout+0x124/0x280 [ 213.040199][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 213.045571][ C0] ? __pfx_process_timeout+0x10/0x10 [ 213.050854][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 213.056652][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 213.062113][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 213.066875][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 213.072158][ C0] ? rcu_gp_init+0xc82/0x1630 [ 213.076832][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 213.082027][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 213.087832][ C0] rcu_gp_kthread+0x271/0x380 [ 213.092508][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 213.097704][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.102895][ C0] ? __kthread_parkme+0x148/0x220 [ 213.107911][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 213.113111][ C0] kthread+0x3af/0x750 [ 213.117175][ C0] ? __pfx_kthread+0x10/0x10 [ 213.121764][ C0] ? __pfx_kthread+0x10/0x10 [ 213.126350][ C0] ret_from_fork+0x45/0x80 [ 213.130760][ C0] ? __pfx_kthread+0x10/0x10 [ 213.135344][ C0] ret_from_fork_asm+0x1a/0x30 [ 213.140115][ C0] [ 213.143125][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 213.149435][ C0] Sending NMI from CPU 0 to CPUs 1: [ 213.154629][ C1] NMI backtrace for cpu 1 [ 213.154638][ C1] CPU: 1 UID: 0 PID: 8215 Comm: syz.3.1039 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 213.154653][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 213.154660][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 213.154680][ C1] Code: 7e 60 e8 a3 ff ff ff 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 54 fa 49 7e 65 8b 05 55 fa 49 7e a9 00 01 [ 213.154692][ C1] RSP: 0018:ffffc90000a18df8 EFLAGS: 00000046 [ 213.154702][ C1] RAX: 0000000000000000 RBX: ffff8880b872c780 RCX: 0000000000000000 [ 213.154710][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 213.154718][ C1] RBP: ffff88805d043340 R08: 0000000000000000 R09: fffff520001431a4 [ 213.154726][ C1] R10: ffffffff9ab2b51b R11: 0000000000000002 R12: ffff88805d043340 [ 213.154734][ C1] R13: 0000000000000000 R14: ffff8880b872c680 R15: ffffffff896a68c0 [ 213.154742][ C1] FS: 00007fc308aa06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 213.154755][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.154763][ C1] CR2: 000000110c3edf24 CR3: 000000002899c000 CR4: 00000000003526f0 [ 213.154771][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.154779][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.154786][ C1] Call Trace: [ 213.154791][ C1] [ 213.154796][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 213.154815][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 213.154831][ C1] ? nmi_handle+0x1ac/0x5d0 [ 213.154848][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 213.154867][ C1] ? default_do_nmi+0x6a/0x160 [ 213.154884][ C1] ? exc_nmi+0x170/0x1e0 [ 213.154900][ C1] ? end_repeat_nmi+0xf/0x53 [ 213.154916][ C1] ? __pfx_advance_sched+0x10/0x10 [ 213.154937][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 213.154956][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 213.154974][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 213.154992][ C1] [ 213.154996][ C1] [ 213.155000][ C1] enqueue_hrtimer+0x2f/0x3c0 [ 213.155021][ C1] __hrtimer_run_queues+0x903/0xae0 [ 213.155035][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 213.155047][ C1] ? read_tsc+0x9/0x20 [ 213.155062][ C1] hrtimer_interrupt+0x392/0x8e0 [ 213.155079][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 213.155098][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 213.155111][ C1] [ 213.155115][ C1] [ 213.155120][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.155137][ C1] RIP: 0010:__orc_find+0xae/0xf0 [ 213.155154][ C1] Code: 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b 5d 41 5c <41> 5d 41 5e 41 5f c3 cc cc cc cc 48 83 c4 08 31 c0 5b 5d 41 5c 41 [ 213.155165][ C1] RSP: 0018:ffffc90004ce6fb0 EFLAGS: 00000282 [ 213.155175][ C1] RAX: ffffffff91039c20 RBX: 0000000000000001 RCX: dffffc0000000000 [ 213.155183][ C1] RDX: 0000000000000015 RSI: 0000000000000000 RDI: ffffffff907c50e0 [ 213.155191][ C1] RBP: ffffc90004ce7088 R08: ffffffff91039c26 R09: ffffffff9103929a [ 213.155199][ C1] R10: ffffc90004ce7040 R11: 0000000000011a26 R12: ffffc90004ce7090 [ 213.155207][ C1] R13: ffffffff821a2685 R14: ffffffff907c50e0 R15: 0000000000000007 [ 213.155215][ C1] ? folio_alloc_mpol_noprof+0x35/0x2f0 [ 213.155236][ C1] ? folio_alloc_mpol_noprof+0x35/0x2f0 [ 213.155251][ C1] unwind_next_frame+0x2be/0x20c0 [ 213.155268][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 213.155284][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 213.155299][ C1] arch_stack_walk+0x95/0x100 [ 213.155314][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 213.155334][ C1] stack_trace_save+0x95/0xd0 [ 213.155348][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 213.155362][ C1] ? hlock_class+0x4e/0x130 [ 213.155375][ C1] ? mark_lock+0xb5/0xc60 [ 213.155390][ C1] save_stack+0x162/0x1f0 [ 213.155408][ C1] ? __pfx_save_stack+0x10/0x10 [ 213.155424][ C1] ? post_alloc_hook+0x181/0x1b0 [ 213.155443][ C1] ? get_page_from_freelist+0xfce/0x2f80 [ 213.155455][ C1] ? __alloc_frozen_pages_noprof+0x221/0x2470 [ 213.155468][ C1] ? alloc_pages_mpol+0x1fc/0x540 [ 213.155480][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 213.155500][ C1] __set_page_owner+0x8b/0x560 [ 213.155512][ C1] ? mark_held_locks+0x9f/0xe0 [ 213.155528][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 213.155539][ C1] ? bad_range+0x23d/0x490 [ 213.155554][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.155566][ C1] ? get_page_from_freelist+0xfae/0x2f80 [ 213.155580][ C1] post_alloc_hook+0x181/0x1b0 [ 213.155599][ C1] get_page_from_freelist+0xfce/0x2f80 [ 213.155615][ C1] ? __pfx___might_resched+0x10/0x10 [ 213.155634][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 213.155646][ C1] ? should_fail_alloc_page+0xee/0x130 [ 213.155660][ C1] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 213.155679][ C1] __alloc_frozen_pages_noprof+0x221/0x2470 [ 213.155693][ C1] ? hlock_class+0x4e/0x130 [ 213.155705][ C1] ? mark_lock+0xb5/0xc60 [ 213.155721][ C1] ? __pfx_mark_lock+0x10/0x10 [ 213.155737][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 213.155751][ C1] ? hlock_class+0x4e/0x130 [ 213.155763][ C1] ? mark_lock+0xb5/0xc60 [ 213.155777][ C1] ? hlock_class+0x4e/0x130 [ 213.155792][ C1] ? hlock_class+0x4e/0x130 [ 213.155804][ C1] ? __lock_acquire+0xcc5/0x3c40 [ 213.155820][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 213.155837][ C1] ? policy_nodemask+0xea/0x4e0 [ 213.155851][ C1] alloc_pages_mpol+0x1fc/0x540 [ 213.155865][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 213.155878][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 213.155895][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 213.155911][ C1] vma_alloc_folio_noprof+0xee/0x1b0 [ 213.155926][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 213.155945][ C1] ? find_held_lock+0x2d/0x110 [ 213.155959][ C1] do_pte_missing+0x202f/0x3e10 [ 213.155975][ C1] __handle_mm_fault+0x1166/0x2c60 [ 213.155990][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 213.156002][ C1] ? follow_page_pte+0x3ac/0x1490 [ 213.156020][ C1] ? __pfx_lock_release+0x10/0x10 [ 213.156043][ C1] handle_mm_fault+0x3fa/0xaa0 [ 213.156056][ C1] __get_user_pages+0x773/0x36f0 [ 213.156070][ C1] ? __pfx_mt_find+0x10/0x10 [ 213.156084][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 213.156100][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 213.156118][ C1] ? __mm_populate+0x21d/0x380 [ 213.156132][ C1] populate_vma_page_range+0x27f/0x3a0 [ 213.156145][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 213.156158][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 213.156175][ C1] ? vm_mmap_pgoff+0x29b/0x3a0 [ 213.156195][ C1] __mm_populate+0x1d6/0x380 [ 213.156207][ C1] ? __pfx___mm_populate+0x10/0x10 [ 213.156219][ C1] ? up_write+0x1b2/0x520 [ 213.156237][ C1] vm_mmap_pgoff+0x2d3/0x3a0 [ 213.156256][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 213.156274][ C1] ? do_user_addr_fault+0xe50/0x13f0 [ 213.156293][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 213.156310][ C1] __x64_sys_mmap+0x125/0x190 [ 213.156332][ C1] do_syscall_64+0xcd/0x250 [ 213.156347][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.156363][ C1] RIP: 0033:0x7fc307b8cde9 [ 213.156374][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.156385][ C1] RSP: 002b:00007fc308aa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 213.156396][ C1] RAX: ffffffffffffffda RBX: 00007fc307da5fa0 RCX: 00007fc307b8cde9 [ 213.156404][ C1] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000400000000000 [ 213.156412][ C1] RBP: 00007fc307c0e2a0 R08: ffffffffffffffff R09: 0000000000001000 [ 213.156420][ C1] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 213.156427][ C1] R13: 0000000000000001 R14: 00007fc307da5fa0 R15: 00007ffd71005a78 [ 213.156441][ C1]