last executing test programs: 2m12.299949183s ago: executing program 4 (id=1212): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/46, 0x2e) getdents(r0, 0xfffffffffffffffd, 0x58) 2m12.158017114s ago: executing program 4 (id=1214): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x10000004, 0x10100}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x8, 0xffd, 0x80002c31, 0xfffffff7, 0x1}, 0x14) 2m11.893161913s ago: executing program 4 (id=1217): r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bf, 0x0, 0x21, 0x0, 0x0) 2m11.765752464s ago: executing program 4 (id=1219): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m11.700851268s ago: executing program 4 (id=1220): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x30, &(0x7f0000000500)={&(0x7f0000000cc0)={0x2c, r0, 0x1, 0x0, 0x2, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}}, 0x0) 2m11.299403938s ago: executing program 4 (id=1224): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x2) 2m11.197026496s ago: executing program 32 (id=1224): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x2) 2.645199284s ago: executing program 2 (id=3891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}]}, 0x1c}], 0x1}, 0x0) 2.551089508s ago: executing program 2 (id=3892): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chown(0x0, 0x0, 0x0) 2.311597753s ago: executing program 3 (id=3898): openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.203699552s ago: executing program 3 (id=3900): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') unshare(0x64000600) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0xfffffffffffffeac, 0x35a) 2.012652413s ago: executing program 2 (id=3905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3003000005002000000018000500200000000000050020000000000009001f"], 0x44}}, 0x0) 1.827570274s ago: executing program 2 (id=3909): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1.692529394s ago: executing program 2 (id=3912): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) personality(0x400000d) pselect6(0x40, &(0x7f0000000140)={0x9, 0x100000001, 0xf, 0xb, 0x9, 0x81, 0x60a82359}, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) 1.683358181s ago: executing program 3 (id=3913): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000580)={0x4, 0x3}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1.551783964s ago: executing program 0 (id=3917): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000003c0)=""/9, 0x9}], 0x1}, 0x2000}], 0x1, 0x0, 0x0) 1.551256443s ago: executing program 3 (id=3918): r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x1c, {0x9, 0x1}, 0x6}, 0x1) 1.430704936s ago: executing program 3 (id=3920): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xe20, @broadcast}, 0x3) 1.276501614s ago: executing program 0 (id=3923): r0 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340), &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000002380)={0xcc00, 0x0, &(0x7f0000001300)=[0xffffffffffffffff]}, 0x1) 1.237160653s ago: executing program 3 (id=3924): syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100008010bd40820529009dbb0000000109022400011b00001009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1d, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x4, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xb, 0x8}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x5, 0x6, 0xe3, 0x10, 0xf9}, 0x31, &(0x7f0000000100)={0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "9bf510ac68f9fffd985475bac728cdcf"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x82c}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0) 1.164797736s ago: executing program 0 (id=3927): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r0, 0x1) 930.577208ms ago: executing program 5 (id=3931): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x50, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1f}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffd614, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x3}}]}, 0x50}}, 0x0) 863.311686ms ago: executing program 5 (id=3933): io_setup(0x4, &(0x7f0000000080)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = eventfd(0xa2) io_submit(r0, 0x1, &(0x7f0000002500)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x0, 0x0, 0x8001, 0x0, 0x1, r2}]) 816.327762ms ago: executing program 1 (id=3934): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="7f", 0x1}], 0x1}}], 0x2, 0x20040044) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 749.291818ms ago: executing program 1 (id=3935): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x22048050}, 0x0) 732.186152ms ago: executing program 5 (id=3936): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc010000000000000000000000fba20000000000000000000000000000000001"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 722.112075ms ago: executing program 2 (id=3937): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 698.941192ms ago: executing program 1 (id=3938): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 524.773174ms ago: executing program 1 (id=3939): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x100000c2, 0x1903d}}], 0x48, 0x44010}, 0x0) 450.196633ms ago: executing program 5 (id=3940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0xff, 0x2f, 0x0, @private=0xe0000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) 391.026865ms ago: executing program 1 (id=3941): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f00000001c0), 0x4000000000000395, r1}) 325.661694ms ago: executing program 5 (id=3942): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000005c0)={0x0, 0x2, "5a77bd310500000000000000ab2a27fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f178881e50f68530c2b21a100efa66cba37ff3111d6847e0c7f899e169a596e5fc008daefba68f6222103472bc55704cdb70800996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e49fe61ec110b8dc137bb192c9d06ea6ed00483fe5c5ca06be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39903e9727df801457df7b0500aefe3635b2ee97c143f28def4b73905ca10900d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x141341) 264.904573ms ago: executing program 1 (id=3943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 264.444179ms ago: executing program 0 (id=3944): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x0) 168.371399ms ago: executing program 5 (id=3945): r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x2010}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 160.997383ms ago: executing program 0 (id=3946): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = syz_io_uring_setup(0x2ff5, &(0x7f0000000080)={0x0, 0x188f, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=3947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a80180001800900040006"], 0x38}, 0x1, 0x0, 0x0, 0x2048080}, 0x40000) kernel console output (not intermixed with test programs): attribute type 21 has an invalid length. [ 162.838772][T10197] __nla_validate_parse: 1 callbacks suppressed [ 162.838787][T10197] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1779'. [ 162.857825][T10197] netlink: 'syz.5.1779': attribute type 21 has an invalid length. [ 162.867061][T10197] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1779'. [ 163.832788][T10253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1800'. [ 163.899680][T10253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1800'. [ 164.214389][ T29] audit: type=1400 audit(1737177652.462:619): avc: denied { ioctl } for pid=10263 comm="syz.3.1805" path="socket:[27044]" dev="sockfs" ino=27044 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.569948][ T54] Bluetooth: hci5: sending frame failed (-49) [ 164.577975][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 164.583950][T10280] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 164.764009][ T29] audit: type=1400 audit(1737177653.012:620): avc: denied { read } for pid=10294 comm="syz.5.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.159485][ T29] audit: type=1400 audit(1737177653.412:621): avc: denied { create } for pid=10309 comm="syz.3.1824" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 165.630302][T10331] xt_HMARK: proto mask must be zero with L3 mode [ 166.229703][ T5869] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 166.404514][ T5869] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 166.447766][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.461581][ T5869] usb 2-1: config 0 descriptor?? [ 166.760781][T10376] vlan3: entered promiscuous mode [ 166.767726][T10376] vlan3: entered allmulticast mode [ 167.088516][ T5869] usb 2-1: Cannot set autoneg [ 167.094211][ T5869] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 167.124265][ T5869] usb 2-1: USB disconnect, device number 20 [ 167.127173][T10386] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1858'. [ 167.727923][ T29] audit: type=1326 audit(1737177655.982:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.2.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2020385d29 code=0x7ffc0000 [ 167.820319][ T29] audit: type=1326 audit(1737177655.982:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.2.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2020385d29 code=0x7ffc0000 [ 167.886202][ T29] audit: type=1326 audit(1737177656.022:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.2.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2020385d29 code=0x7ffc0000 [ 167.918097][ T29] audit: type=1326 audit(1737177656.022:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.2.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2020385d29 code=0x7ffc0000 [ 167.969693][ T29] audit: type=1326 audit(1737177656.022:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.2.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f202037cce7 code=0x7ffc0000 [ 168.015810][ T29] audit: type=1326 audit(1737177656.022:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.2.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2020321f29 code=0x7ffc0000 [ 168.064536][ T29] audit: type=1326 audit(1737177656.022:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.2.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2020385d29 code=0x7ffc0000 [ 168.089136][ T29] audit: type=1326 audit(1737177656.022:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.2.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f202037cce7 code=0x7ffc0000 [ 168.118510][ T29] audit: type=1326 audit(1737177656.022:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.2.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2020321f29 code=0x7ffc0000 [ 168.148176][ T29] audit: type=1326 audit(1737177656.022:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.2.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2020385d29 code=0x7ffc0000 [ 168.641985][T10443] trusted_key: encrypted_key: keyword 'updite' not recognized [ 168.943047][T10451] netlink: 'syz.0.1885': attribute type 39 has an invalid length. [ 169.719037][T10474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1896'. [ 170.389768][ T5817] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 170.507352][T10521] netlink: 'syz.5.1918': attribute type 29 has an invalid length. [ 170.531308][T10521] netlink: 'syz.5.1918': attribute type 29 has an invalid length. [ 170.571058][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 170.583069][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 170.594396][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 170.611556][ T5817] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 170.621428][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.629435][ T5817] usb 4-1: Product: syz [ 170.635946][ T5817] usb 4-1: Manufacturer: syz [ 170.641415][ T5817] usb 4-1: SerialNumber: syz [ 170.647742][ T5817] usb 4-1: config 0 descriptor?? [ 170.655553][ T5817] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 170.769672][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 170.886348][ T5817] usb 4-1: USB disconnect, device number 13 [ 170.921532][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.939705][ T9] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=fd.42 [ 170.950354][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.958363][ T9] usb 1-1: Product: syz [ 170.964162][ T9] usb 1-1: Manufacturer: syz [ 170.968769][ T9] usb 1-1: SerialNumber: syz [ 170.975138][ T9] usb 1-1: config 0 descriptor?? [ 171.195917][ T9] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version fd.42 found at bus 001 address 022 [ 171.374883][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 171.384954][T10549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1932'. [ 171.409749][ T46] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 171.424854][ T9] usb 1-1: USB disconnect, device number 22 [ 171.578205][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.588722][ T46] usb 6-1: config 0 has no interfaces? [ 171.603186][ T46] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 171.617882][ T46] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 171.630526][ T46] usb 6-1: Product: syz [ 171.634706][ T46] usb 6-1: Manufacturer: syz [ 171.649697][ T46] usb 6-1: SerialNumber: syz [ 171.656272][ T46] usb 6-1: config 0 descriptor?? [ 171.680011][T10559] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1937'. [ 171.819323][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1941'. [ 172.011488][ T5817] usb 6-1: USB disconnect, device number 7 [ 172.444934][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'. [ 172.467292][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1956'. [ 172.473247][T10605] netlink: 'syz.0.1957': attribute type 10 has an invalid length. [ 172.495457][T10605] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 172.507422][T10605] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 172.533162][T10604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.604428][T10611] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 172.628454][T10611] macsec1: entered promiscuous mode [ 172.635651][T10611] macsec1: entered allmulticast mode [ 172.645795][T10611] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 173.303780][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 173.303796][ T29] audit: type=1326 audit(1737177661.562:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 173.333281][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.371253][ T29] audit: type=1326 audit(1737177661.562:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 173.395740][ T29] audit: type=1326 audit(1737177661.562:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 173.421244][ T29] audit: type=1326 audit(1737177661.562:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 173.446260][ T29] audit: type=1326 audit(1737177661.562:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 173.471075][ T29] audit: type=1326 audit(1737177661.562:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 173.627821][T10659] overlayfs: conflicting options: userxattr,metacopy=on [ 173.833768][T10665] netlink: 'syz.0.1985': attribute type 1 has an invalid length. [ 173.841687][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1985'. [ 174.030703][ T29] audit: type=1400 audit(1737177662.292:692): avc: denied { write } for pid=10675 comm="syz.3.1990" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 175.191468][T10739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10739 comm=syz.5.2018 [ 175.227511][ T29] audit: type=1400 audit(1737177663.482:693): avc: denied { read } for pid=10738 comm="syz.5.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 175.324381][T10744] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 175.343929][ T29] audit: type=1400 audit(1737177663.602:694): avc: denied { mount } for pid=10746 comm="syz.5.2022" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 175.365917][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.397679][ T29] audit: type=1400 audit(1737177663.642:695): avc: denied { read } for pid=10746 comm="syz.5.2022" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 175.703090][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2033'. [ 176.624016][T10826] netem: change failed [ 177.311479][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 177.581631][T10874] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2080'. [ 177.840705][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 177.989617][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 178.010329][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 178.023574][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 178.038243][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 178.053753][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.064683][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 178.082388][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.115961][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 178.135302][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.150196][ T9] usb 4-1: config 0 descriptor?? [ 178.165113][T10907] Invalid source name [ 178.194617][T10911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2097'. [ 178.294548][ T46] kernel write not supported for file /snd/seq (pid: 46 comm: kworker/1:1) [ 178.386023][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 178.602814][ T5869] usb 4-1: USB disconnect, device number 14 [ 178.632173][ T5869] usblp0: removed [ 178.833431][T10942] libceph: resolve '0.0' (ret=-3): failed [ 179.220918][ T5835] Bluetooth: hci2: failed to read key size for handle 201 [ 179.229464][ T5835] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 179.387457][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 179.387473][ T29] audit: type=1400 audit(1737177667.642:713): avc: denied { watch_mount } for pid=10977 comm="syz.2.2128" path="/451" dev="tmpfs" ino=2303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 179.539640][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 179.689655][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 179.708044][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.723612][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.746603][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.774264][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 179.797447][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.826860][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.841536][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.862886][ T9] usb 2-1: Manufacturer: syz [ 179.873815][ T9] usb 2-1: config 0 descriptor?? [ 179.979282][ T29] audit: type=1400 audit(1737177668.232:714): avc: denied { shutdown } for pid=11000 comm="syz.3.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.189886][ T9] rc_core: IR keymap rc-hauppauge not found [ 180.196750][ T9] Registered IR keymap rc-empty [ 180.207195][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.239870][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.269986][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 180.296731][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input25 [ 180.318410][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.343873][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.361478][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.380166][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.399816][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.439668][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.459646][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.489842][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.510036][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.552196][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.559917][ T5835] Bluetooth: hci1: command tx timeout [ 180.569676][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.609674][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.630522][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 180.643455][ T5133] Bluetooth: hci4: command 0x0405 tx timeout [ 180.649645][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 180.665422][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 180.683949][ T9] usb 2-1: USB disconnect, device number 21 [ 180.873051][ T29] audit: type=1400 audit(1737177669.132:715): avc: denied { sqpoll } for pid=11031 comm="syz.3.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 181.262157][ T5830] Bluetooth: hci3: link tx timeout [ 181.269054][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.535423][ T29] audit: type=1326 audit(1737177669.792:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a25b7cce7 code=0x7ffc0000 [ 181.624691][ T29] audit: type=1326 audit(1737177669.832:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a25b21f29 code=0x7ffc0000 [ 181.703513][ T29] audit: type=1326 audit(1737177669.832:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a25b7cce7 code=0x7ffc0000 [ 181.743775][ T29] audit: type=1326 audit(1737177669.832:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a25b21f29 code=0x7ffc0000 [ 181.782208][ T29] audit: type=1326 audit(1737177669.832:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a25b85d29 code=0x7ffc0000 [ 181.782614][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'. [ 181.805801][ T29] audit: type=1326 audit(1737177669.842:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7a25b85d29 code=0x7ffc0000 [ 181.839827][ T29] audit: type=1326 audit(1737177669.842:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a25b85d29 code=0x7ffc0000 [ 181.949793][ T936] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 182.135269][ T936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.147845][ T936] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 182.162051][ T936] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 182.174448][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.195950][ T936] usb 1-1: config 0 descriptor?? [ 182.426152][ T936] Bluetooth: Can't get state to change to load ram patch err [ 182.448696][ T936] Bluetooth: Loading patch file failed [ 182.464353][ T936] ath3k 1-1:0.0: probe with driver ath3k failed with error -32 [ 182.495327][ T936] usb 1-1: USB disconnect, device number 23 [ 182.499991][T11116] netlink: 'syz.2.2173': attribute type 8 has an invalid length. [ 182.639858][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 182.929525][T11131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.950373][T11131] batadv_slave_0: entered promiscuous mode [ 182.956411][T11131] batadv_slave_0: entered allmulticast mode [ 182.970074][T11101] syz.3.2167 (11101): drop_caches: 2 [ 183.092145][T11139] syz_tun: entered allmulticast mode [ 183.102340][T11139] dvmrp8: entered allmulticast mode [ 183.109391][T11138] syz_tun: left allmulticast mode [ 183.115804][T11138] dvmrp8: left allmulticast mode [ 183.281149][ T5830] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 183.290169][ T5830] Bluetooth: hci2: Injecting HCI hardware error event [ 183.299044][ T5830] Bluetooth: hci2: hardware error 0x00 [ 183.362598][ T5833] Bluetooth: hci3: command 0x0405 tx timeout [ 183.463914][T11162] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 183.555934][T11165] tipc: Started in network mode [ 183.575382][T11165] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 183.597370][T11165] tipc: Enabled bearer , priority 10 [ 183.918445][T11191] autofs4:pid:11191:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1803188595.1701604449), cmd(0xc018937e) [ 183.934231][T11191] autofs4:pid:11191:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 184.502514][T11215] 9pnet_fd: Insufficient options for proto=fd [ 184.720555][ T46] tipc: Node number set to 10005162 [ 184.725515][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 184.725530][ T29] audit: type=1400 audit(1737177672.982:739): avc: denied { create } for pid=11223 comm="syz.3.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 184.782767][ T29] audit: type=1400 audit(1737177673.042:740): avc: denied { setopt } for pid=11223 comm="syz.3.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 185.366404][ T5830] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 185.494509][T11267] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2243'. [ 185.523289][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2244'. [ 185.601133][T11042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.992448][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'. [ 186.303655][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 186.351493][ T29] audit: type=1400 audit(1737177674.562:741): avc: denied { mount } for pid=11328 comm="syz.1.2271" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 186.374196][ T29] audit: type=1400 audit(1737177674.572:742): avc: denied { read } for pid=11328 comm="syz.1.2271" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 186.398419][ T29] audit: type=1400 audit(1737177674.572:743): avc: denied { open } for pid=11328 comm="syz.1.2271" path="/402/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 186.422208][ T29] audit: type=1400 audit(1737177674.592:744): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 186.429662][ T936] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 186.469796][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 186.477280][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.490796][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.508883][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 186.518229][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.533398][ T9] usb 1-1: config 0 descriptor?? [ 186.599688][ T936] usb 4-1: Using ep0 maxpacket: 8 [ 186.606590][ T936] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 186.622003][ T936] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 186.631301][ T936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.639651][ T936] usb 4-1: Product: syz [ 186.643862][ T936] usb 4-1: Manufacturer: syz [ 186.648477][ T936] usb 4-1: SerialNumber: syz [ 186.655148][ T936] usb 4-1: config 0 descriptor?? [ 186.662811][ T936] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 186.948971][ T9] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 186.979725][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 187.129682][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 187.141182][ T8] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 187.157317][ T9] ft260 0003:0403:6030.001B: failed to retrieve chip version [ 187.165130][ T8] usb 2-1: config 0 has no interface number 0 [ 187.171466][ T9] ft260 0003:0403:6030.001B: probe with driver ft260 failed with error -71 [ 187.189173][ T8] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 187.202623][ T9] usb 1-1: USB disconnect, device number 24 [ 187.208732][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.227782][ T8] usb 2-1: Product: syz [ 187.233184][ T8] usb 2-1: Manufacturer: syz [ 187.237838][ T8] usb 2-1: SerialNumber: syz [ 187.244315][ T8] usb 2-1: config 0 descriptor?? [ 187.255325][ T8] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 187.268692][ T936] gspca_zc3xx: reg_w_i err -71 [ 187.472451][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 187.497092][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 187.656978][T11353] netlink: 'syz.2.2281': attribute type 10 has an invalid length. [ 187.668944][T11353] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 187.699858][T11353] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 187.715877][T11353] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 187.748623][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.837388][T11360] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2284'. [ 187.859672][ T936] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 187.866021][ T936] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 187.877128][ T936] usb 4-1: USB disconnect, device number 15 [ 187.896771][ T29] audit: type=1400 audit(1737177676.152:745): avc: denied { create } for pid=11361 comm="syz.5.2285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 187.925719][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 187.934784][ T8] usb 2-1: USB disconnect, device number 22 [ 187.944391][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 187.957939][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 187.977025][ T8] quatech2 2-1:0.51: device disconnected [ 188.030403][ T46] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 188.093703][T11372] batadv0: entered allmulticast mode [ 188.169473][T11042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.179190][ T936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.189500][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.211429][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 188.227770][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 188.236106][ T46] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 188.250918][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.269706][ T46] usb 1-1: Product: syz [ 188.277049][ T46] usb 1-1: Manufacturer: syz [ 188.284470][ T46] usb 1-1: SerialNumber: syz [ 188.293905][ T46] usb 1-1: config 0 descriptor?? [ 188.482762][T11390] Cannot find add_set index 0 as target [ 188.627988][T11402] syz.2.2304 uses obsolete (PF_INET,SOCK_PACKET) [ 188.651349][T11398] bond_slave_0: entered promiscuous mode [ 188.657455][T11398] bond_slave_1: entered promiscuous mode [ 188.667980][T11398] macvlan2: entered promiscuous mode [ 188.669284][T11404] netlink: 'syz.3.2305': attribute type 10 has an invalid length. [ 188.673539][T11398] bond0: entered promiscuous mode [ 188.674058][T11398] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.732560][T11404] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 188.798029][T11403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.825784][ T46] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 188.826152][ T936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.884484][T11414] netlink: 'syz.2.2310': attribute type 11 has an invalid length. [ 189.135978][ T29] audit: type=1400 audit(1737177677.392:746): avc: denied { create } for pid=11428 comm="syz.5.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.232050][ T46] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 189.262066][ T46] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 189.279704][ T29] audit: type=1400 audit(1737177677.532:747): avc: denied { setopt } for pid=11434 comm="syz.1.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.310016][ T46] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 189.328196][ T46] usb 1-1: USB disconnect, device number 25 [ 189.421574][T11441] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2323'. [ 189.737151][T11457] cifs: Unknown parameter 'mode' [ 189.969627][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 190.023432][T11474] bridge0: entered allmulticast mode [ 190.049414][T11476] batadv_slave_0: entered promiscuous mode [ 190.065441][T11476] batadv_slave_0: left promiscuous mode [ 190.107369][T11480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2340'. [ 190.133710][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 190.222107][ T8] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 190.239800][ T8] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 190.248441][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 190.257703][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.267656][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.277605][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.290830][ T8] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 190.300070][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.316084][ T8] usb 6-1: config 0 descriptor?? [ 190.341304][T11488] netlink: 'syz.1.2342': attribute type 39 has an invalid length. [ 190.359696][ T29] audit: type=1400 audit(1737177678.622:748): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 190.552048][ T8] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 190.601247][ T29] audit: type=1400 audit(1737177678.862:749): avc: denied { append } for pid=11495 comm="syz.0.2346" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 190.636697][ T29] audit: type=1400 audit(1737177678.892:750): avc: denied { map } for pid=11495 comm="syz.0.2346" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 190.669465][ T29] audit: type=1400 audit(1737177678.892:751): avc: denied { execute } for pid=11495 comm="syz.0.2346" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 190.766055][ T46] usb 6-1: USB disconnect, device number 8 [ 190.773803][ T29] audit: type=1400 audit(1737177679.032:752): avc: denied { create } for pid=11503 comm="syz.2.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.795799][ T46] usblp0: removed [ 190.822573][ T29] audit: type=1400 audit(1737177679.082:753): avc: denied { write } for pid=11503 comm="syz.2.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.844560][ T29] audit: type=1400 audit(1737177679.082:754): avc: denied { nlmsg_write } for pid=11503 comm="syz.2.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.107983][T11528] netlink: 'syz.1.2363': attribute type 46 has an invalid length. [ 191.135141][T11528] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2363'. [ 191.378379][T11037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.577246][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.586460][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.596172][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.605358][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 191.613210][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.622346][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 191.630242][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.639366][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 191.647251][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.656406][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 191.664288][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.673445][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 191.681332][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.690493][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 191.698352][ C0] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.707507][ C0] Buffer I/O error on dev loop6, logical block 7, async page read [ 191.725343][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.734552][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.742437][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.751592][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 191.773716][T11559] ldm_validate_partition_table(): Disk read failed. [ 191.783619][T11559] Dev loop6: unable to read RDB block 0 [ 191.797829][T11559] loop6: unable to read partition table [ 191.815540][T11559] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 191.849914][ T46] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 192.390047][ T29] audit: type=1326 audit(1737177680.632:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a25b85d29 code=0x0 [ 192.645532][T11607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.654384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.746286][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 192.757240][T11614] netlink: 'syz.2.2395': attribute type 10 has an invalid length. [ 192.766626][T11613] netlink: 'syz.1.2394': attribute type 10 has an invalid length. [ 192.784184][T11614] veth0_vlan: left promiscuous mode [ 192.798789][T11614] veth0_vlan: entered promiscuous mode [ 192.814448][T11614] team0: Device veth0_vlan failed to register rx_handler [ 192.838083][T11613] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 192.848728][T11613] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 192.868881][T11610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.947902][ T29] audit: type=1400 audit(1737177681.202:756): avc: denied { write } for pid=11619 comm="syz.2.2398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 193.071027][T11628] o2cb: This node has not been configured. [ 193.076883][T11628] o2cb: Cluster check failed. Fix errors before retrying. [ 193.092836][T11628] (syz.3.2402,11628,1):user_dlm_register:674 ERROR: status = -22 [ 193.104238][T11628] (syz.3.2402,11628,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 193.601699][T11045] bond0: (slave wlan1): link status definitely up [ 193.608433][T11045] bond0: active interface up! [ 193.632751][T11653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2414'. [ 193.801535][ T29] audit: type=1400 audit(1737177682.062:757): avc: denied { ioctl } for pid=11667 comm="syz.0.2421" path="socket:[31856]" dev="sockfs" ino=31856 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 193.937247][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.943781][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.952223][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.961060][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.009958][ T936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.360075][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 194.515701][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.527976][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 194.540993][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.559362][T11690] netlink: 'syz.1.2429': attribute type 1 has an invalid length. [ 194.568590][ T8] usb 4-1: config 0 descriptor?? [ 194.800139][ T8] usb 4-1: string descriptor 0 read error: -22 [ 195.216681][ T8] wacom 0003:056A:00D7.001C: Unknown device_type for 'HID 056a:00d7'. Assuming pen. [ 195.227787][ T8] wacom 0003:056A:00D7.001C: hidraw0: USB HID v0.00 Device [HID 056a:00d7] on usb-dummy_hcd.3-1/input0 [ 195.246930][T11731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2448'. [ 195.264101][ T8] input: Wacom BambooPT 2FG Small Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D7.001C/input/input26 [ 195.445408][ T8] usb 4-1: USB disconnect, device number 16 [ 196.759940][T11807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.794029][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2488'. [ 197.030834][ T25] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 197.125904][T11042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.201440][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 197.211081][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 197.228731][ T25] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 197.237502][ T25] usb 4-1: config 12 has no interface number 0 [ 197.251371][ T25] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 197.275676][T11849] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2505'. [ 197.296294][ T25] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 197.315291][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.340703][ T25] usb 4-1: Product: syz [ 197.344902][ T25] usb 4-1: Manufacturer: syz [ 197.349507][ T25] usb 4-1: SerialNumber: syz [ 197.442437][T11037] bond0: (slave wlan1): interface is now down [ 197.448868][T11037] bond0: now running without any active interface! [ 197.549060][T11866] vlan2: entered promiscuous mode [ 197.554991][T11866] syz_tun: entered promiscuous mode [ 197.562100][T11866] vlan2: entered allmulticast mode [ 197.567390][T11866] syz_tun: entered allmulticast mode [ 197.574259][T11866] team0: Device vlan2 is up. Set it down before adding it as a team port [ 197.585450][T11866] syz_tun: left allmulticast mode [ 197.590559][T11866] syz_tun: left promiscuous mode [ 197.616207][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.647479][ T25] usb 4-1: USB disconnect, device number 17 [ 197.837658][T11883] 9pnet_fd: Insufficient options for proto=fd [ 197.879682][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 198.049650][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 198.056013][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.067227][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.078214][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.087920][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 198.097671][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.112561][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 198.121829][ T8] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 198.129939][ T8] usb 1-1: Manufacturer: syz [ 198.136269][ T8] usb 1-1: config 0 descriptor?? [ 198.399389][ T8] rc_core: IR keymap rc-hauppauge not found [ 198.429693][ T8] Registered IR keymap rc-empty [ 198.441080][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.459786][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.479997][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 198.493719][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 198.529104][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.555679][T11870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.586181][T11870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.592076][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 198.592091][ T29] audit: type=1326 audit(1737177686.842:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.3.2539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca69d85d29 code=0x0 [ 198.594161][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.653365][ T29] audit: type=1400 audit(1737177686.912:761): avc: denied { checkpoint_restore } for pid=11928 comm="syz.3.2539" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 198.692691][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.720373][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.749776][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.769734][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.789849][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.809737][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.829701][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.869861][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 198.890351][ T8] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 198.898973][ T8] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 198.909511][ T936] kernel write not supported for file /amidi2 (pid: 936 comm: kworker/0:2) [ 198.923694][ T8] usb 1-1: USB disconnect, device number 26 [ 199.824714][ T5830] Bluetooth: hci0: unexpected event for opcode 0x204e [ 199.948089][ T29] audit: type=1326 audit(1737177688.162:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 199.971495][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.027686][ T29] audit: type=1326 audit(1737177688.162:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 200.107923][ T29] audit: type=1326 audit(1737177688.172:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 200.183523][ T29] audit: type=1326 audit(1737177688.172:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 200.206900][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.307830][T12020] vlan2: entered promiscuous mode [ 200.335676][ T29] audit: type=1326 audit(1737177688.172:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 200.340318][T12020] syz_tun: entered promiscuous mode [ 200.387319][T12020] vlan2: entered allmulticast mode [ 200.407023][T12020] syz_tun: entered allmulticast mode [ 200.409127][ T29] audit: type=1326 audit(1737177688.172:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 200.424690][T12020] team0: Device vlan2 is up. Set it down before adding it as a team port [ 200.435707][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.455601][ T29] audit: type=1326 audit(1737177688.172:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 200.489160][ T29] audit: type=1326 audit(1737177688.172:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 200.520098][T12020] syz_tun: left allmulticast mode [ 200.530979][T12020] syz_tun: left promiscuous mode [ 201.610413][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.033861][T12113] overlayfs: missing 'workdir' [ 202.162433][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.500502][ T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 202.504458][T12136] infiniband syz1: set active [ 202.528125][T12136] infiniband syz1: added bond_slave_1 [ 202.621878][T12136] RDS/IB: syz1: added [ 202.634695][T12136] smc: adding ib device syz1 with port count 1 [ 202.649781][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 202.652699][T12136] smc: ib device syz1 port 1 has pnetid [ 202.667941][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.680505][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.690375][ T25] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 202.699910][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.711003][ T25] usb 2-1: config 0 descriptor?? [ 202.899977][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 203.065509][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.091887][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.114415][ T8] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 203.125429][T12171] netlink: 'syz.2.2644': attribute type 1 has an invalid length. [ 203.125702][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.139336][ T25] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 203.165175][ T8] usb 1-1: config 0 descriptor?? [ 203.169616][ T25] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 203.189584][ T25] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 203.196648][ T25] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 203.218011][ T25] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 203.239382][ T25] corsair 0003:1B1C:1B02.001D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 203.340550][ T25] corsair 0003:1B1C:1B02.001D: Read invalid backlight brightness: 9d. [ 203.410791][T12178] delete_channel: no stack [ 203.547054][ T46] usb 2-1: USB disconnect, device number 23 [ 203.606584][ T8] corsair-cpro 0003:1B1C:0C10.001E: item fetching failed at offset 10/13 [ 203.615476][ T8] corsair-cpro 0003:1B1C:0C10.001E: probe with driver corsair-cpro failed with error -22 [ 203.722738][T12192] 9pnet_fd: Insufficient options for proto=fd [ 203.890551][ T46] usb 1-1: USB disconnect, device number 27 [ 204.755004][T12239] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 204.769474][T12239] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 204.838379][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 204.838395][ T29] audit: type=1400 audit(1737177693.092:774): avc: denied { listen } for pid=12242 comm="syz.0.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.881501][ T29] audit: type=1400 audit(1737177693.142:775): avc: denied { setopt } for pid=12242 comm="syz.0.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 205.128912][T12257] virtio-fs: tag <(null)> not found [ 205.625828][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2695'. [ 205.680902][ T46] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 205.807583][ T29] audit: type=1400 audit(1737177694.062:776): avc: denied { connect } for pid=12295 comm="syz.1.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.857559][ T46] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 205.870001][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.904889][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 205.927865][ T46] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 205.966176][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.977667][ T46] usb 4-1: config 0 descriptor?? [ 206.016638][T12306] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2707'. [ 206.125015][ T29] audit: type=1400 audit(1737177694.382:777): avc: denied { ioctl } for pid=12309 comm="syz.1.2709" path="socket:[34200]" dev="sockfs" ino=34200 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.162462][T12310] veth1_to_team: entered promiscuous mode [ 206.180502][T12310] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 206.415393][ T46] isku 0003:1E7D:319C.001F: hidraw0: USB HID v80.04 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 206.546718][ T29] audit: type=1326 audit(1737177694.802:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e7585d29 code=0x7ffc0000 [ 206.577915][ T29] audit: type=1326 audit(1737177694.802:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e7585d29 code=0x7ffc0000 [ 206.614149][ T46] isku 0003:1E7D:319C.001F: couldn't init struct isku_device [ 206.628505][ T46] isku 0003:1E7D:319C.001F: couldn't install keyboard [ 206.641023][ T29] audit: type=1326 audit(1737177694.802:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94e7585d29 code=0x7ffc0000 [ 206.652140][ T46] isku 0003:1E7D:319C.001F: probe with driver isku failed with error -71 [ 206.667069][ T29] audit: type=1326 audit(1737177694.802:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e7585d29 code=0x7ffc0000 [ 206.699479][ T46] usb 4-1: USB disconnect, device number 18 [ 206.701318][ T29] audit: type=1326 audit(1737177694.802:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e7585d29 code=0x7ffc0000 [ 206.747358][ T29] audit: type=1326 audit(1737177694.802:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f94e7585d29 code=0x7ffc0000 [ 206.822550][T12356] sp0: Synchronizing with TNC [ 207.366946][T11037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.810410][ T46] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 207.929747][T12412] netlink: 'syz.1.2756': attribute type 2 has an invalid length. [ 207.978812][ T46] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 207.988769][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.007360][ T46] usb 4-1: Product: syz [ 208.017016][ T46] usb 4-1: Manufacturer: syz [ 208.028150][ T46] usb 4-1: SerialNumber: syz [ 208.035694][ T46] usb 4-1: config 0 descriptor?? [ 208.067851][T12419] vivid-001: disconnect [ 208.255837][ T46] int51x1 4-1:0.0: probe with driver int51x1 failed with error -22 [ 208.485544][ T5870] usb 4-1: USB disconnect, device number 19 [ 208.587368][T12452] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2773'. [ 208.640494][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.843450][T12418] vivid-001: reconnect [ 209.515044][T12504] overlayfs: failed to clone lowerpath [ 209.940742][T12521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.960589][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2808'. [ 209.969727][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 209.969741][ T29] audit: type=1326 audit(1737177698.212:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12524 comm="syz.5.2809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x0 [ 210.295849][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2815'. [ 210.365518][ T29] audit: type=1400 audit(1737177698.622:793): avc: denied { create } for pid=12545 comm="syz.1.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 210.386136][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.394668][ T29] audit: type=1400 audit(1737177698.652:794): avc: denied { bind } for pid=12545 comm="syz.1.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 210.443727][T12548] mkiss: ax0: crc mode is auto. [ 210.823532][T12573] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2830'. [ 211.097192][T12583] netlink: 'syz.2.2835': attribute type 1 has an invalid length. [ 211.193200][T12592] random: crng reseeded on system resumption [ 211.430331][T12602] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2842'. [ 212.025393][T12621] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 212.050300][T12621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.379723][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 212.427979][T12645] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2862'. [ 212.539921][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 212.559042][ T8] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.577751][ T8] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 212.609340][ T8] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 212.632823][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.653037][ T8] usb 2-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 212.671857][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.695900][ T8] usb 2-1: config 0 descriptor?? [ 212.740391][ T5870] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 212.890842][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 212.908708][ T5870] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 212.918081][ T5870] usb 1-1: config 0 has no interface number 0 [ 212.942155][ T5870] usb 1-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 212.955267][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.984700][ T5870] usb 1-1: Product: syz [ 212.988907][ T5870] usb 1-1: Manufacturer: syz [ 213.009751][ T5870] usb 1-1: SerialNumber: syz [ 213.015901][ T5870] usb 1-1: config 0 descriptor?? [ 213.033388][ T5870] io_ti 1-1:0.215: required endpoints missing [ 213.085038][ T29] audit: type=1400 audit(1737177701.342:795): avc: denied { getopt } for pid=12670 comm="syz.3.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 213.110682][ T8] nzxt-smart2 0003:1E71:2010.0020: unknown main item tag 0x0 [ 213.118108][ T8] nzxt-smart2 0003:1E71:2010.0020: unknown main item tag 0x0 [ 213.128120][T11045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.146020][ T8] nzxt-smart2 0003:1E71:2010.0020: unknown main item tag 0x0 [ 213.159489][ T8] nzxt-smart2 0003:1E71:2010.0020: unknown main item tag 0x0 [ 213.163957][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.167093][ T8] nzxt-smart2 0003:1E71:2010.0020: unknown main item tag 0x0 [ 213.178828][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.189998][T12673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12673 comm=syz.2.2873 [ 213.192157][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.213905][ T8] nzxt-smart2 0003:1E71:2010.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2010] on usb-dummy_hcd.1-1/input0 [ 213.222227][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.239378][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.272389][ T9] usb 1-1: USB disconnect, device number 28 [ 213.313006][T12674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.332697][ T8] usb 2-1: USB disconnect, device number 24 [ 213.950337][T12703] overlay: filesystem on ./file0 is read-only [ 214.389172][ T29] audit: type=1400 audit(1737177702.642:796): avc: denied { execute_no_trans } for pid=12735 comm="syz.2.2903" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=36164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 214.480156][ T936] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 214.500307][ T29] audit: type=1400 audit(1737177702.742:797): avc: denied { mount } for pid=12735 comm="syz.2.2903" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 214.649694][ T936] usb 6-1: Using ep0 maxpacket: 16 [ 214.656088][ T936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.678155][ T936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.698230][ T29] audit: type=1400 audit(1737177702.952:798): avc: denied { remove_name } for pid=12749 comm="syz.1.2909" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.703379][ T936] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.741267][ T936] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 214.750745][ T936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.760978][ T936] usb 6-1: config 0 descriptor?? [ 214.779719][ T29] audit: type=1400 audit(1737177702.952:799): avc: denied { unlink } for pid=12749 comm="syz.1.2909" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 214.828988][T12756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2912'. [ 214.833748][ T29] audit: type=1326 audit(1737177703.092:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12757 comm="syz.0.2914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a25b85d29 code=0x0 [ 215.140489][ T5870] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 215.185762][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.201116][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.224798][ T936] koneplus 0003:1E7D:2E22.0021: unknown main item tag 0x0 [ 215.236662][ T936] koneplus 0003:1E7D:2E22.0021: unknown main item tag 0x0 [ 215.254383][ T936] koneplus 0003:1E7D:2E22.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 215.301742][ T5870] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.324421][ T5870] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.353352][ T5870] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.354378][T12780] netlink: 'syz.2.2923': attribute type 10 has an invalid length. [ 215.373609][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.394518][T12780] syz_tun: entered promiscuous mode [ 215.394928][T12762] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 215.404814][T12780] syz_tun: entered allmulticast mode [ 215.412793][T12780] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 215.425761][ T5870] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.428814][ T936] koneplus 0003:1E7D:2E22.0021: couldn't init struct koneplus_device [ 215.442016][ T936] koneplus 0003:1E7D:2E22.0021: couldn't install mouse [ 215.454835][ T936] koneplus 0003:1E7D:2E22.0021: probe with driver koneplus failed with error -71 [ 215.479166][ T936] usb 6-1: USB disconnect, device number 10 [ 215.545077][T12782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2924'. [ 215.690802][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.771519][ T25] usb 4-1: USB disconnect, device number 20 [ 215.831274][T12794] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 215.860066][T12794] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 215.942836][T12801] vlan3: entered promiscuous mode [ 215.947890][T12801] macsec0: entered promiscuous mode [ 216.006463][T12801] macsec0: left promiscuous mode [ 216.198317][T12818] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2941'. [ 216.219785][T12815] geneve1: entered allmulticast mode [ 216.807938][T12858] netlink: 'syz.5.2958': attribute type 10 has an invalid length. [ 216.859971][T12858] bridge0: port 3(syz_tun) entered disabled state [ 216.916234][T12858] syz_tun: left allmulticast mode [ 216.934177][T12858] bridge0: port 3(syz_tun) entered disabled state [ 217.008684][T12858] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 217.056600][ T29] audit: type=1326 audit(1737177705.312:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.3.2966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca69d85d29 code=0x0 [ 217.948394][ T29] audit: type=1400 audit(1737177706.202:802): avc: denied { create } for pid=12929 comm="syz.2.2991" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 218.168021][T11042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.301784][T12955] gtp0: entered promiscuous mode [ 218.308457][T12955] gtp0: entered allmulticast mode [ 218.319990][ T936] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 218.470310][ T936] usb 2-1: Using ep0 maxpacket: 8 [ 218.487651][ T936] usb 2-1: config 0 has no interfaces? [ 218.495837][ T936] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 218.515951][T12969] /dev/loop3: Can't open blockdev [ 218.519774][ T936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.529365][ T936] usb 2-1: Product: syz [ 218.536400][ T936] usb 2-1: Manufacturer: syz [ 218.542184][ T936] usb 2-1: SerialNumber: syz [ 218.548303][ T936] usb 2-1: config 0 descriptor?? [ 218.636029][T12976] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 218.660078][ T29] audit: type=1400 audit(1737177706.912:803): avc: denied { relabelto } for pid=12975 comm="syz.0.3012" name="pids.max" dev="cgroup2" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 218.724787][ T29] audit: type=1400 audit(1737177706.952:804): avc: denied { associate } for pid=12975 comm="syz.0.3012" name="pids.max" dev="cgroup2" ino=91 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_log_t:s0" [ 218.787273][ T936] usb 2-1: USB disconnect, device number 25 [ 218.902897][T12995] block nbd5: not configured, cannot reconfigure [ 219.056571][T13005] xfs: Unknown parameter 'grpquotatring [ 219.056571][T13005] statistic [ 219.056571][T13005] state [ 219.056571][T13005] realm [ 219.056571][T13005] rateest [ 219.056571][T13005] quota [ 219.056571][T13005] pkttype [ 219.056571][T13005] physdev [ 219.056571][T13005] cgroup [ 219.056571][T13005] cgroup [ 219.056571][T13005] cgroup [ 219.056571][T13005] owner [ 219.056571][T13005] nfacct [ 219.056571][T13005] nfacct [ 219.056571][T13005] mac [ 219.056571][T13005] limit [ 219.056571][T13005] ipvs [ 219.056571][T13005] helper [ 219.056571][T13005] devgroup [ 219.056571][T13005] cpu [ 219.056571][T13005] conntrack [ 219.056571][T13005] conntrack [ 219.056571][T13005] conntrack [ 219.056571][T13005] connlabel [ 219.056571][T13005] connbytes [ 219.056571][T13005] comment [ 219.056571][T13005] bpf [ 219.056571][T13005] bpf [ 219.056571][T13005] connmark [ 219.056571][T13005] mark [ 219.056571][T13005] rpfilter [ 219.056571][T13005] ah [ 219.056571][T13005] tcpmss [ 219.056571][T13005] socket [ 219.056571][T13005] socket [ 219.056571][T13005] socket [ 219.056571][T13005] socket [ 219.056571][T13005] sctp [ 219.056571][T13005] recent [ 219.056571][T13005] recent [ 219.056571][T13005] policy [ 219.056571][T13005] osf [ 219.056571][T13005] multiport [ 219.056571][T13005] length [ 219.056571][T13005] l2tp [ 219.056571][T13005] iprange [ 219.056571][T13005] ipcomp [ 219.056571][T13005] ttl [ 219.056571][T13005] hashlimit [ 219.056571][T13005] hashlimit [ 219.056571][T13005] hashlimit [ 219.056571][T13005] esp [ 219.056571][T13005] ecn [ 219.056571][T13005] tos [ 219.056571][T13005] dscp [ 219.056571][T13005] dccp [ 219.056571][T13005] connlimit [ 219.056571][T13005] cluster [ 219.056571][T13005] addrtype [ 219.056571][T13005] addrtype [ 219.056571][T13005] set [ 219.056571][T13005] set [ 219.056571][T13005] set [ 219.056571][T13005] set [ 219.056571][T13005] set [ 219.056571][T13005] icmp [ 219.056571][T13005] udplite [ 219.660166][ T936] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 219.762129][T13042] openvswitch: netlink: Actions may not be safe on all matching packets [ 219.813362][ T936] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 219.845640][ T936] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.879647][ T936] usb 6-1: config 0 has no interface number 0 [ 219.885785][ T936] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 219.909656][ T936] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.927688][ T936] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 219.947039][ T936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.955269][ T936] usb 6-1: Product: syz [ 219.959495][ T936] usb 6-1: Manufacturer: syz [ 219.964214][ T936] usb 6-1: SerialNumber: syz [ 219.974156][ T936] usb 6-1: config 0 descriptor?? [ 220.547102][T13085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13085 comm=syz.0.3063 [ 220.579810][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 220.623928][ T936] usb 6-1: USB disconnect, device number 11 [ 220.694720][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 220.729911][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 220.736781][ T8] usb 2-1: config 0 has no interfaces? [ 220.748057][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 220.758149][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.767729][ T8] usb 2-1: Product: syz [ 220.772062][ T8] usb 2-1: Manufacturer: syz [ 220.778898][ T8] usb 2-1: SerialNumber: syz [ 220.788453][ T8] usb 2-1: config 0 descriptor?? [ 220.796727][T13098] overlayfs: missing 'lowerdir' [ 220.906133][ T29] audit: type=1400 audit(1737177709.162:805): avc: denied { setopt } for pid=13104 comm="syz.0.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 220.965702][T13108] vxcan3: entered allmulticast mode [ 221.018581][ T8] usb 2-1: USB disconnect, device number 26 [ 221.245811][T13122] binder: BC_ATTEMPT_ACQUIRE not supported [ 221.252502][T13122] binder: 13121:13122 ioctl c0306201 200001c0 returned -22 [ 221.309968][T13124] tmpfs: Invalid uid '0x00000000ffffffff' [ 222.683651][T13203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13203 comm=syz.2.3113 [ 222.724612][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.856215][T13212] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 223.065549][T13224] overlay: ./file0 is not a directory [ 223.288430][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.673253][ T29] audit: type=1400 audit(1737177711.932:806): avc: denied { write } for pid=13263 comm="syz.1.3143" path="socket:[39015]" dev="sockfs" ino=39015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 223.719702][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 223.880893][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.894146][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 223.922006][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.944007][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 223.964790][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 223.977627][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.998325][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.009492][ T8] usb 4-1: Product: syz [ 224.020263][ T8] usb 4-1: Manufacturer: syz [ 224.040303][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 224.058185][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 224.087499][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 224.107324][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 224.267743][ T8] usb 4-1: USB disconnect, device number 21 [ 224.814413][T13293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3155'. [ 224.960494][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 225.340546][T13313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3165'. [ 225.639841][ T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 225.807306][ T8] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.832083][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.877764][ T8] usb 6-1: config 0 descriptor?? [ 225.884416][T13333] netlink: 18 bytes leftover after parsing attributes in process `syz.1.3173'. [ 225.900903][ T8] cp210x 6-1:0.0: cp210x converter detected [ 226.286368][T13348] netlink: 'syz.3.3179': attribute type 1 has an invalid length. [ 226.311816][T13348] netlink: 'syz.3.3179': attribute type 2 has an invalid length. [ 226.409351][T13353] overlayfs: failed to resolve './file0': -2 [ 226.436219][T13352] Process accounting resumed [ 226.510716][ T8] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 226.518566][ T8] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 226.534235][ T8] usb 6-1: cp210x converter now attached to ttyUSB0 [ 226.556408][ T8] usb 6-1: USB disconnect, device number 12 [ 226.582267][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 226.596070][ T8] cp210x 6-1:0.0: device disconnected [ 226.739796][ T29] audit: type=1400 audit(1737177714.972:807): avc: denied { connect } for pid=13358 comm="syz.0.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 226.831905][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 226.998510][ T29] audit: type=1400 audit(1737177715.252:808): avc: denied { ioctl } for pid=13374 comm="syz.3.3192" path="socket:[39285]" dev="sockfs" ino=39285 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 227.002468][ T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 227.039869][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.068867][ T9] usb 2-1: Product: syz [ 227.078412][ T9] usb 2-1: Manufacturer: syz [ 227.084070][ T9] usb 2-1: SerialNumber: syz [ 227.094308][ T9] usb 2-1: config 0 descriptor?? [ 227.104715][ T9] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 027 [ 227.198254][ T29] audit: type=1400 audit(1737177715.452:809): avc: denied { attach_queue } for pid=13381 comm="syz.5.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 227.198534][T13386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.235744][T13386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.244421][T13386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.253818][T13386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.262395][T13386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.271012][T13386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.279269][T13386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.307654][T13388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.316293][T13386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.332690][T13386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.521039][ T9] (null): failure reading functionality [ 227.542598][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 227.549004][T13398] netlink: 'syz.3.3202': attribute type 5 has an invalid length. [ 227.556910][ T29] audit: type=1400 audit(1737177715.802:810): avc: denied { ioctl } for pid=13399 comm="syz.0.3204" path="socket:[38476]" dev="sockfs" ino=38476 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.829388][ T9] usb 2-1: USB disconnect, device number 27 [ 227.904920][T13416] syz.0.3212[13416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.905056][T13416] syz.0.3212[13416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.928382][T13416] syz.0.3212[13416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.687096][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 228.908182][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.943811][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.962667][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.971843][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.982047][ T29] audit: type=1400 audit(1737177717.212:811): avc: denied { bind } for pid=13470 comm="syz.5.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 229.004907][T13439] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 229.063699][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 229.097509][T13479] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 229.122249][T11045] net_ratelimit: 361 callbacks suppressed [ 229.122266][T11045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.139826][T13479] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 229.512199][T13504] binder: 13502:13504 ioctl c0306201 200001c0 returned -22 [ 229.603024][ T5871] usb 1-1: USB disconnect, device number 29 [ 229.647299][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3252'. [ 229.759982][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.776163][T13517] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 229.834878][T13519] binder: 13518:13519 ioctl 4018620d 0 returned -22 [ 230.060568][ T29] audit: type=1326 audit(1737177718.322:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.1.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e7585d29 code=0x7fc00000 [ 230.118896][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'. [ 230.638116][T13562] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.763089][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'. [ 230.764191][ T5830] Bluetooth: hci3: unexpected event for opcode 0x080f [ 230.776475][T13578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3282'. [ 230.803384][T13577] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 230.845500][T13577] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 231.170704][ T29] audit: type=1400 audit(1737177719.422:813): avc: denied { write } for pid=13597 comm="syz.1.3292" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.180715][T13598] binder: BC_ACQUIRE_RESULT not supported [ 231.228428][T13598] binder: 13597:13598 ioctl c0306201 200003c0 returned -22 [ 231.633993][T13620] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.3302'. [ 231.643718][T13620] openvswitch: netlink: Flow key attribute not present in set flow. [ 232.085019][T13642] siw: device registration error -23 [ 232.620457][T13670] vxcan1: entered allmulticast mode [ 232.670761][T13670] vxcan1: left allmulticast mode [ 233.309736][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 233.445044][ T29] audit: type=1400 audit(1737177721.702:814): avc: denied { map } for pid=13723 comm="syz.0.3350" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 233.491233][ T25] usb 4-1: config 0 has an invalid interface number: 171 but max is 0 [ 233.508571][ T25] usb 4-1: config 0 has no interface number 0 [ 233.530582][ T25] usb 4-1: config 0 interface 171 has no altsetting 0 [ 233.552723][ T25] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 233.569796][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.590459][ T25] usb 4-1: Product: syz [ 233.594658][ T25] usb 4-1: Manufacturer: syz [ 233.610684][ T25] usb 4-1: SerialNumber: syz [ 233.621950][ T25] usb 4-1: config 0 descriptor?? [ 233.630815][ T25] usb-storage 4-1:0.171: USB Mass Storage device detected [ 233.923143][T13745] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3357'. [ 234.809762][ T5830] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 234.818690][ T5830] Bluetooth: hci3: Injecting HCI hardware error event [ 234.828478][ T5825] Bluetooth: hci3: hardware error 0x00 [ 234.850612][ T25] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 234.881155][T11045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.999703][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 235.010943][ T25] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.019471][ T25] usb 1-1: config 0 has no interface number 0 [ 235.031334][ T25] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.045135][ T25] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.058289][ T25] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 235.087812][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.104042][ T25] usb 1-1: config 0 descriptor?? [ 235.237656][T13835] netlink: 'syz.2.3391': attribute type 2 has an invalid length. [ 235.251171][T13835] netlink: 'syz.2.3391': attribute type 4 has an invalid length. [ 235.718233][ T25] uclogic 0003:28BD:0094.0022: pen parameters not found [ 235.725360][ T25] uclogic 0003:28BD:0094.0022: interface is invalid, ignoring [ 235.911045][T13877] No control pipe specified [ 235.945189][ T25] usb 1-1: USB disconnect, device number 30 [ 236.094777][ T5870] usb 4-1: USB disconnect, device number 22 [ 236.248228][T13902] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3404'. [ 236.306929][T13902] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 236.354081][T13901] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3406'. [ 236.800339][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.886520][ T5825] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 236.951496][T13938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.032365][T13938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.127086][T13938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.175541][T13938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.269681][T13938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.300789][T13954] pimreg: entered allmulticast mode [ 237.306186][T13945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.359795][T13958] pimreg: left allmulticast mode [ 237.440917][T13935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.877501][ T29] audit: type=1400 audit(1737177726.122:815): avc: denied { getopt } for pid=13978 comm="syz.5.3429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 238.336522][T14002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3439'. [ 238.404551][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3443'. [ 238.769109][ T3472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.789943][T14022] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3451'. [ 238.833093][ T3472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.914115][ T29] audit: type=1400 audit(1737177727.172:816): avc: denied { write } for pid=14032 comm="syz.0.3455" name="raw" dev="proc" ino=4026532980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 239.023367][ T3472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.155282][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.170932][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.190117][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.206700][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.217866][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 239.233594][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.244626][ T3472] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.267484][ T29] audit: type=1400 audit(1737177727.522:817): avc: denied { map } for pid=14051 comm="syz.3.3464" path="/dev/usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 239.386551][ T29] audit: type=1400 audit(1737177727.552:818): avc: denied { execute } for pid=14051 comm="syz.3.3464" path="/dev/usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 239.551031][ T3472] bridge_slave_0: left allmulticast mode [ 239.569787][ T3472] bridge_slave_0: left promiscuous mode [ 239.577712][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.922894][T11045] net_ratelimit: 3 callbacks suppressed [ 239.922910][T11045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.972121][ T3472] bond0 (unregistering): left promiscuous mode [ 239.978288][ T3472] bond_slave_0: left promiscuous mode [ 239.983895][ T3472] bond_slave_1: left promiscuous mode [ 239.989307][ T3472] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 240.006158][ T3472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.016762][ T3472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.028557][ T3472] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 240.049283][ T3472] bond0 (unregistering): Released all slaves [ 240.058771][ T3472] bond1 (unregistering): Released all slaves [ 240.067640][ T3472] bond2 (unregistering): Released all slaves [ 240.308940][T14045] chnl_net:caif_netlink_parms(): no params data found [ 240.329862][ T3472] IPVS: stopping backup sync thread 8948 ... [ 240.610648][T14045] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.627740][T14045] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.636103][T14045] bridge_slave_0: entered allmulticast mode [ 240.651008][T14045] bridge_slave_0: entered promiscuous mode [ 240.718442][T14045] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.725793][T14045] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.733310][T14045] bridge_slave_1: entered allmulticast mode [ 240.740200][T14045] bridge_slave_1: entered promiscuous mode [ 240.887100][T14045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.924307][T14045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.940613][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 241.038936][T14045] team0: Port device team_slave_0 added [ 241.060615][ T3472] hsr_slave_0: left promiscuous mode [ 241.066664][ T3472] hsr_slave_1: left promiscuous mode [ 241.080532][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.089494][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.097008][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.105504][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 241.110635][ T5870] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 241.124658][ T25] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 241.134824][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.153082][ T3472] veth1_macvtap: left promiscuous mode [ 241.159899][ T25] usb 6-1: Product: syz [ 241.164074][ T25] usb 6-1: Manufacturer: syz [ 241.168671][ T25] usb 6-1: SerialNumber: syz [ 241.174571][ T3472] veth0_macvtap: left promiscuous mode [ 241.180323][ T3472] veth1_vlan: left promiscuous mode [ 241.185835][ T3472] veth0_vlan: left promiscuous mode [ 241.193059][ T25] usb 6-1: config 0 descriptor?? [ 241.202130][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 241.260222][ T5871] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 241.274883][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.285151][ T5830] Bluetooth: hci1: command tx timeout [ 241.298055][ T5870] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 241.310453][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.330994][ T5870] usb 4-1: Product: syz [ 241.350152][ T5870] usb 4-1: Manufacturer: syz [ 241.360705][ T5870] usb 4-1: SerialNumber: syz [ 241.378897][ T5870] usb 4-1: config 0 descriptor?? [ 241.443778][ T5871] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 241.461957][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.483938][ T5871] usb 1-1: config 0 descriptor?? [ 241.495235][ T5871] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 241.599307][ T936] usb 4-1: USB disconnect, device number 23 [ 241.717003][ T3472] team0 (unregistering): Port device team_slave_1 removed [ 241.756176][ T3472] team0 (unregistering): Port device team_slave_0 removed [ 241.820845][ T25] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 242.005665][T14045] team0: Port device team_slave_1 added [ 242.051023][ T25] usb 6-1: USB disconnect, device number 13 [ 242.071463][T14045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.078430][T14045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.106788][T14045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.122176][T14045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.129382][T14045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.155636][T14045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.261133][T14045] hsr_slave_0: entered promiscuous mode [ 242.279884][T14045] hsr_slave_1: entered promiscuous mode [ 242.299853][T14045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.307478][T14045] Cannot create hsr debugfs directory [ 242.323586][ T5871] gspca_sunplus: reg_w_riv err -71 [ 242.329192][ T5871] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 242.339501][ T5871] usb 1-1: USB disconnect, device number 31 [ 242.574983][T14150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3508'. [ 242.589647][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'. [ 242.752629][T14045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.767751][T14045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.793110][T14045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.806939][T14159] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 242.831048][T14045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.950907][T14045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.993572][T14045] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.010513][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.017609][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.060620][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.067724][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.088585][ T29] audit: type=1400 audit(1737177731.342:819): avc: denied { read write } for pid=14171 comm="syz.0.3517" name="cgroup.subtree_control" dev="cgroup2" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.174047][ T29] audit: type=1400 audit(1737177731.342:820): avc: denied { open } for pid=14171 comm="syz.0.3517" path="" dev="cgroup2" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.247585][ T29] audit: type=1400 audit(1737177731.462:821): avc: denied { sendto } for pid=5870 comm="kworker/1:4" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 243.359733][ T5830] Bluetooth: hci1: command tx timeout [ 243.431513][T14045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.523442][T14045] veth0_vlan: entered promiscuous mode [ 243.538765][T14045] veth1_vlan: entered promiscuous mode [ 243.596106][T14045] veth0_macvtap: entered promiscuous mode [ 243.610438][T14045] veth1_macvtap: entered promiscuous mode [ 243.712069][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.723440][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.733321][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.743978][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.754657][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.765149][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.775046][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.786362][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.797305][T14045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.807147][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.818476][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.828368][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.838823][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.849615][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.860266][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.870988][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.881490][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.889702][ T29] audit: type=1400 audit(1737177732.142:822): avc: denied { read } for pid=14203 comm="syz.5.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.892016][T14045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.921431][T14045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.930633][T14045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.939338][T14045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.948097][T14045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.959956][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.261292][T11037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.289427][T11037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.401065][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.420106][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.438984][ T29] audit: type=1400 audit(1737177732.692:823): avc: denied { connect } for pid=14232 comm="syz.3.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 244.443125][T14231] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3542'. [ 244.466791][ T29] audit: type=1400 audit(1737177732.722:824): avc: denied { mounton } for pid=14045 comm="syz-executor" path="/root/syzkaller.a66TDf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 244.508195][T14231] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 244.553160][ T29] audit: type=1400 audit(1737177732.812:825): avc: denied { mount } for pid=14045 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 244.600159][ T29] audit: type=1400 audit(1737177732.812:826): avc: denied { mounton } for pid=14045 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 244.722363][ T29] audit: type=1400 audit(1737177732.962:827): avc: denied { listen } for pid=14236 comm="syz.2.3544" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 244.744365][ T29] audit: type=1400 audit(1737177732.962:828): avc: denied { shutdown } for pid=14236 comm="syz.2.3544" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 244.847925][T14252] netem: incorrect ge model size [ 244.863977][T14252] netem: change failed [ 245.116857][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 245.130564][T11037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.228874][ T46] hid-generic 0005:0B57:0008.0023: item fetching failed at offset 0/4 [ 245.248244][ T46] hid-generic 0005:0B57:0008.0023: probe with driver hid-generic failed with error -22 [ 245.265646][T14266] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 245.326045][T14266] team0: Port device batadv1 added [ 245.330284][ T5870] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 245.440043][ T5830] Bluetooth: hci1: command tx timeout [ 245.517021][ T5870] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 245.551147][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.561736][ T5870] usb 2-1: config 0 descriptor?? [ 245.591335][ T5870] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 245.710549][T14294] 9pnet_fd: Insufficient options for proto=fd [ 246.141279][T14325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.170355][ T46] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 246.179728][ T5870] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 246.197029][ T5870] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 246.349698][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 246.362918][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.376618][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.413013][ T5870] usb 2-1: USB disconnect, device number 28 [ 246.421454][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.449793][ T46] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 246.459469][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.490466][ T46] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.500697][ T46] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.519732][ T46] usb 6-1: Manufacturer: syz [ 246.525805][ T46] usb 6-1: config 0 descriptor?? [ 247.240536][ T46] rc_core: IR keymap rc-hauppauge not found [ 247.246604][ T46] Registered IR keymap rc-empty [ 247.251675][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.283476][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.333354][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 247.396838][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input33 [ 247.418207][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.476448][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.509995][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.519671][ T5830] Bluetooth: hci1: command tx timeout [ 247.578387][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.630392][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.665421][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.690759][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.709631][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.711538][T14379] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3608'. [ 247.730598][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.751117][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.794830][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.820388][ T46] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 247.830666][ T46] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 247.853274][ T46] usb 6-1: USB disconnect, device number 14 [ 247.880330][ T936] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 247.894596][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 248.044079][ T936] usb 1-1: Using ep0 maxpacket: 8 [ 248.066201][ T936] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 248.075047][ T936] usb 1-1: config 179 has no interface number 0 [ 248.095816][ T936] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 248.127572][ T936] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 248.149491][ T936] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 248.167796][ T936] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 248.187415][ T936] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 248.222032][ T936] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 248.232684][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.244858][T14377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 248.456524][T14426] netlink: 187320 bytes leftover after parsing attributes in process `syz.5.3630'. [ 248.473343][T14426] netlink: zone id is out of range [ 248.506029][T14426] netlink: zone id is out of range [ 248.561915][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3632'. [ 248.592654][ T936] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input34 [ 248.872224][ T5870] usb 1-1: USB disconnect, device number 32 [ 248.872222][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 248.872352][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 248.895042][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.895080][ T5870] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 249.049797][ T936] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 249.222099][ T936] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 249.236118][ T936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.249912][ T936] usb 4-1: Product: syz [ 249.254094][ T936] usb 4-1: Manufacturer: syz [ 249.259266][ T936] usb 4-1: SerialNumber: syz [ 249.276875][ T936] usb 4-1: config 0 descriptor?? [ 249.543823][ T936] usb 4-1: USB disconnect, device number 24 [ 249.896235][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 249.896251][ T29] audit: type=1400 audit(1737177738.152:844): avc: denied { write } for pid=14487 comm="syz.0.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 250.241539][T11045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.358353][ T29] audit: type=1326 audit(1737177738.612:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 250.427410][ T29] audit: type=1326 audit(1737177738.612:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 250.478842][ T29] audit: type=1326 audit(1737177738.652:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 250.534521][ T29] audit: type=1326 audit(1737177738.652:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 250.619688][ T29] audit: type=1326 audit(1737177738.652:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 250.643080][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.729748][ T29] audit: type=1326 audit(1737177738.672:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 250.817980][ T29] audit: type=1326 audit(1737177738.672:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 250.841385][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.888719][T14523] team0: Device gtp1 is of different type [ 250.899736][ T29] audit: type=1326 audit(1737177738.672:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 250.963088][ T29] audit: type=1326 audit(1737177738.672:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fca69d85d29 code=0x7ffc0000 [ 251.446239][T14555] sp0: Synchronizing with TNC [ 251.520513][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.608195][T14568] sctp: [Deprecated]: syz.2.3693 (pid 14568) Use of int in max_burst socket option. [ 251.608195][T14568] Use struct sctp_assoc_value instead [ 251.693513][T14574] netlink: 'syz.0.3696': attribute type 16 has an invalid length. [ 251.723965][T14574] netlink: 'syz.0.3696': attribute type 3 has an invalid length. [ 251.750958][T14574] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.3696'. [ 251.754068][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 251.855017][T14581] veth1_macvtap: left promiscuous mode [ 251.904858][T14591] input: syz1 as /devices/virtual/input/input35 [ 251.986324][T14597] netlink: 'syz.5.3706': attribute type 1 has an invalid length. [ 252.027572][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3705'. [ 252.274691][T14615] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3714'. [ 252.339781][ T936] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 252.489816][ T936] usb 6-1: Using ep0 maxpacket: 8 [ 252.507311][ T936] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 252.518924][ T936] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 252.539757][ T936] usb 6-1: config 6 has no interface number 0 [ 252.545912][ T936] usb 6-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.583152][ T936] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 252.592660][ T936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.607825][ T936] usb 6-1: Product: syz [ 252.619643][ T936] usb 6-1: Manufacturer: syz [ 252.624413][ T936] usb 6-1: SerialNumber: syz [ 252.632123][ T936] hso 6-1:6.2: Failed to find INT IN ep [ 252.821911][T14631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.887093][T14631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.894154][ T46] usb 6-1: USB disconnect, device number 15 [ 252.958764][T14631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.990617][T14631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.016509][T14631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.046893][T14630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.347561][T14648] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 253.489628][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 253.501317][T14655] netlink: 'syz.3.3730': attribute type 25 has an invalid length. [ 253.525846][T14655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3730'. [ 253.639647][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 253.657258][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 253.680041][ T9] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 253.708561][ T9] usb 2-1: config 8 has no interface number 0 [ 253.725154][ T9] usb 2-1: config 8 interface 255 has no altsetting 0 [ 253.764403][ T9] usb 2-1: string descriptor 0 read error: -22 [ 253.773859][ T9] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 253.795511][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3736'. [ 253.797006][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.239097][ T9] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 254.287543][ T9] usb 2-1: USB disconnect, device number 29 [ 254.455301][T14692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3747'. [ 254.582947][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3746'. [ 254.988710][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3758'. [ 255.039640][T14716] netlink: 'syz.2.3757': attribute type 10 has an invalid length. [ 255.393800][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.409452][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.727996][T14748] sp0: Synchronizing with TNC [ 255.728051][T14745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.830945][T14745] batadv_slave_0: entered promiscuous mode [ 256.001443][T11037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.230558][ T46] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 256.270887][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 256.270903][ T29] audit: type=1400 audit(1737177744.525:861): avc: denied { rename } for pid=14775 comm="syz.0.3785" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 256.299660][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.373382][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3789'. [ 256.392145][ T46] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 256.435626][ T46] usb 2-1: New USB device found, idVendor=08ca, idProduct=0103, bcdDevice=d6.42 [ 256.445119][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.454117][ T46] usb 2-1: Product: syz [ 256.460535][ T46] usb 2-1: Manufacturer: syz [ 256.470706][ T46] usb 2-1: SerialNumber: syz [ 256.486871][ T46] gspca_main: spca500-2.14.0 probing 08ca:0103 [ 256.709619][ T46] usb 2-1: USB disconnect, device number 30 [ 256.860788][T14808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.214288][ T29] audit: type=1400 audit(1737177745.475:862): avc: denied { remount } for pid=14822 comm="syz.5.3806" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 257.501367][T14837] tipc: Started in network mode [ 257.519887][T14837] tipc: Node identity ac14140f, cluster identity 4711 [ 257.540194][T14837] tipc: New replicast peer: 255.255.255.255 [ 257.548329][T14837] tipc: Enabled bearer , priority 10 [ 257.796253][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3822'. [ 257.839737][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3822'. [ 258.356979][T14896] bpf: Bad value for 'uid' [ 258.565637][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.669918][ T5870] tipc: Node number set to 2886997007 [ 259.549950][ T936] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 259.560315][ T5870] IPVS: starting estimator thread 0... [ 259.590373][T14948] syz.2.3856 (14948) used greatest stack depth: 20544 bytes left [ 259.661972][T14949] IPVS: using max 28 ests per chain, 67200 per kthread [ 259.709937][ T936] usb 2-1: Using ep0 maxpacket: 16 [ 259.726269][ T936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 259.759484][ T936] usb 2-1: New USB device found, idVendor=046d, idProduct=ffff, bcdDevice= 0.00 [ 259.768851][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.804789][ T936] usb 2-1: config 0 descriptor?? [ 259.815339][ T936] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 259.888166][ T29] audit: type=1400 audit(1737177748.145:863): avc: denied { connect } for pid=14969 comm="syz.2.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 260.018240][ T936] usb 2-1: USB disconnect, device number 31 [ 260.059613][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 260.209690][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 260.216608][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.228451][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.244861][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.252542][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 260.261949][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.272766][ T9] usb 4-1: config 0 descriptor?? [ 260.617831][T14995] wlan0 speed is unknown, defaulting to 1000 [ 260.626692][T14995] wlan0 speed is unknown, defaulting to 1000 [ 260.647293][T14995] wlan0 speed is unknown, defaulting to 1000 [ 260.672327][T14995] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 260.689163][T14995] wlan0 speed is unknown, defaulting to 1000 [ 260.698637][ T9] hid-steam 0003:28DE:1205.0024: unknown main item tag 0x0 [ 260.708895][T14995] wlan0 speed is unknown, defaulting to 1000 [ 260.715331][ T9] hid-steam 0003:28DE:1205.0024: unknown main item tag 0x0 [ 260.722737][T15001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3880'. [ 260.732856][ T9] hid-steam 0003:28DE:1205.0024: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 260.733356][T14995] wlan0 speed is unknown, defaulting to 1000 [ 260.758918][T14995] wlan0 speed is unknown, defaulting to 1000 [ 260.766451][T14995] wlan0 speed is unknown, defaulting to 1000 [ 260.780607][T14995] wlan0 speed is unknown, defaulting to 1000 [ 260.820129][ T9] hid-steam 0003:28DE:1205.0024: Steam Controller 'XXXXXXXXXX' connected [ 260.831007][ T9] input: Steam Deck as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.0024/input/input36 [ 260.863095][ T9] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.0024/input/input37 [ 260.894665][ T9] hid-steam 0003:28DE:1205.0025: unknown main item tag 0x0 [ 260.902549][ T936] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 260.911502][ T9] hid-steam 0003:28DE:1205.0025: unknown main item tag 0x0 [ 260.928773][ T9] hid-steam 0003:28DE:1205.0025: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 260.944780][ T9] usb 4-1: USB disconnect, device number 25 [ 261.011157][ T9] hid-steam 0003:28DE:1205.0024: Steam Controller 'XXXXXXXXXX' disconnected [ 261.089602][ T936] usb 1-1: Using ep0 maxpacket: 8 [ 261.097350][ T936] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 261.109046][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.126323][T11045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.134628][ T936] usb 1-1: Product: syz [ 261.138807][ T936] usb 1-1: Manufacturer: syz [ 261.159618][ T936] usb 1-1: SerialNumber: syz [ 261.165768][ T936] usb 1-1: config 0 descriptor?? [ 262.016121][ T936] usb 1-1: USB disconnect, device number 33 [ 262.024704][T15042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3896'. [ 262.258753][T15055] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.369400][T15065] netlink: 'syz.1.3906': attribute type 4 has an invalid length. [ 262.449039][T15060] wlan0 speed is unknown, defaulting to 1000 [ 262.946279][ T29] audit: type=1326 audit(1737177751.205:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 262.997573][ T29] audit: type=1326 audit(1737177751.205:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 263.069678][ T29] audit: type=1326 audit(1737177751.235:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 263.094854][ T29] audit: type=1326 audit(1737177751.235:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 263.145619][ T29] audit: type=1326 audit(1737177751.235:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 263.168162][T15113] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 263.176632][ T29] audit: type=1326 audit(1737177751.235:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 263.218212][ T29] audit: type=1326 audit(1737177751.235:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 263.247911][ T29] audit: type=1326 audit(1737177751.235:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 263.274321][ T29] audit: type=1326 audit(1737177751.235:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 263.298410][ T29] audit: type=1326 audit(1737177751.235:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09bed85d29 code=0x7ffc0000 [ 263.322109][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 263.368933][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3931'. [ 263.406451][ T5825] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 263.499787][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 263.516439][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 263.560068][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 263.589108][T15132] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.590537][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.596453][T15132] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.614180][T15105] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 263.624416][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.893330][T15105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.918891][T15133] wlan0 speed is unknown, defaulting to 1000 [ 263.923411][T15105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.114125][T15148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.128607][T15148] bond0: (slave bond1): Enslaving as an active interface with an up link [ 264.662290][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3950'. [ 264.678389][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3950'. [ 296.320209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.179480][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 369.186447][ C0] rcu: 1-...!: (1 GPs behind) idle=cbbc/1/0x4000000000000000 softirq=50939/50949 fqs=64 [ 369.197381][ C0] rcu: (detected by 0, t=10502 jiffies, g=44741, q=1221 ncpus=2) [ 369.205183][ C0] Sending NMI from CPU 0 to CPUs 1: [ 369.205208][ C1] NMI backtrace for cpu 1 [ 369.205218][ C1] CPU: 1 UID: 0 PID: 15105 Comm: syz.3.3924 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 369.205233][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 369.205241][ C1] RIP: 0010:lock_acquire+0x7b/0xb0 [ 369.205262][ C1] Code: 59 38 d0 7c 04 84 d2 75 47 8b 05 b4 a4 e8 0e 85 c0 74 2a 48 89 5c 24 40 48 8b 3c 24 48 83 c4 08 4d 89 f9 5b 45 89 f0 44 89 e9 <44> 89 e2 89 ee 5d 41 5c 41 5d 41 5e 41 5f e9 e2 fb ff ff 48 83 c4 [ 369.205275][ C1] RSP: 0018:ffffc90000a18d38 EFLAGS: 00000096 [ 369.205287][ C1] RAX: 0000000000000001 RBX: ffff88805bafc2e8 RCX: 0000000000000000 [ 369.205296][ C1] RDX: 0000000000000000 RSI: ffffffff8bd1ef60 RDI: ffff88805bafc300 [ 369.205304][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 369.205313][ C1] R10: ffffffff905f4fd7 R11: 0000000000000002 R12: 0000000000000000 [ 369.205321][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 369.205329][ C1] FS: 00007fca6ab936c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 369.205344][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.205353][ C1] CR2: 0000001b30e1dff8 CR3: 000000007aa12000 CR4: 00000000003526f0 [ 369.205363][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 369.205371][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 369.205379][ C1] Call Trace: [ 369.205384][ C1] [ 369.205390][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 369.205407][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 369.205425][ C1] ? nmi_handle+0x1ac/0x5d0 [ 369.205440][ C1] ? lock_acquire+0x7b/0xb0 [ 369.205454][ C1] ? default_do_nmi+0x6a/0x160 [ 369.205469][ C1] ? exc_nmi+0x170/0x1e0 [ 369.205482][ C1] ? end_repeat_nmi+0xf/0x53 [ 369.205504][ C1] ? lock_acquire+0x7b/0xb0 [ 369.205518][ C1] ? lock_acquire+0x7b/0xb0 [ 369.205532][ C1] ? lock_acquire+0x7b/0xb0 [ 369.205546][ C1] [ 369.205550][ C1] [ 369.205555][ C1] ? __pfx_advance_sched+0x10/0x10 [ 369.205569][ C1] _raw_spin_lock+0x2e/0x40 [ 369.205583][ C1] ? advance_sched+0xd8/0xc60 [ 369.205595][ C1] advance_sched+0xd8/0xc60 [ 369.205610][ C1] ? timerqueue_del+0x83/0x150 [ 369.205623][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 369.205640][ C1] ? __pfx_advance_sched+0x10/0x10 [ 369.205652][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 369.205673][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 369.205690][ C1] ? read_tsc+0x9/0x20 [ 369.205709][ C1] hrtimer_interrupt+0x392/0x8e0 [ 369.205731][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 369.205747][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 369.205762][ C1] [ 369.205766][ C1] [ 369.205771][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.205789][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 369.205806][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 22 4a f6 48 89 df e8 ce a1 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 86 3b f6 65 8b 05 86 30 d7 74 85 c0 74 16 5b [ 369.205817][ C1] RSP: 0018:ffffc9000e3df0c8 EFLAGS: 00000246 [ 369.205827][ C1] RAX: 0000000000000006 RBX: ffffffff9aa3cee8 RCX: 1ffffffff2dd5a61 [ 369.205836][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1efe0 [ 369.205844][ C1] RBP: 0000000000000282 R08: 0000000000000001 R09: fffffbfff2dca7b4 [ 369.205852][ C1] R10: ffffffff96e53da7 R11: 0000000000000572 R12: ffff888031cbc000 [ 369.205861][ C1] R13: 0000000000000015 R14: 0000000000000011 R15: ffff888031cbc000 [ 369.205875][ C1] debug_check_no_obj_freed+0x327/0x600 [ 369.205893][ C1] ? __memcg_slab_free_hook+0xcc/0x5a0 [ 369.205913][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 369.205929][ C1] ? __memcg_slab_free_hook+0xd6/0x5a0 [ 369.205948][ C1] kfree+0x2b3/0x4b0 [ 369.205961][ C1] ? rcu_is_watching+0x12/0xc0 [ 369.205978][ C1] ? kvfree+0x47/0x50 [ 369.205993][ C1] kvfree+0x47/0x50 [ 369.206005][ C1] ? __pfx_netdev_release+0x10/0x10 [ 369.206019][ C1] device_release+0xa1/0x240 [ 369.206032][ C1] kobject_put+0x1e4/0x5a0 [ 369.206051][ C1] netdev_run_todo+0x7bc/0x12d0 [ 369.206066][ C1] ? __pfx_netdev_run_todo+0x10/0x10 [ 369.206081][ C1] ? br_dev_delete+0x116/0x1a0 [ 369.206099][ C1] ? mutex_is_locked+0x17/0x60 [ 369.206114][ C1] ? rtnl_is_locked+0x15/0x20 [ 369.206128][ C1] ? free_netdev+0x531/0x6c0 [ 369.206147][ C1] rtnl_newlink+0xcee/0x1d60 [ 369.206167][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 369.206188][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 369.206201][ C1] ? cred_has_capability.isra.0+0x192/0x2f0 [ 369.206219][ C1] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 369.206237][ C1] ? find_held_lock+0x2d/0x110 [ 369.206255][ C1] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 369.206273][ C1] ? __pfx_lock_release+0x10/0x10 [ 369.206286][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 369.206307][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 369.206325][ C1] rtnetlink_rcv_msg+0x95b/0xea0 [ 369.206345][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 369.206368][ C1] netlink_rcv_skb+0x16b/0x440 [ 369.206387][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 369.206421][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.206445][ C1] ? netlink_deliver_tap+0x1ae/0xd30 [ 369.206464][ C1] netlink_unicast+0x53c/0x7f0 [ 369.206483][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 369.206503][ C1] netlink_sendmsg+0x8b8/0xd70 [ 369.206522][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.206543][ C1] ____sys_sendmsg+0xaaf/0xc90 [ 369.206560][ C1] ? copy_msghdr_from_user+0x10b/0x160 [ 369.206573][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.206593][ C1] ___sys_sendmsg+0x135/0x1e0 [ 369.206607][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.206623][ C1] ? __pfx_lock_release+0x10/0x10 [ 369.206637][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 369.206658][ C1] ? __fget_files+0x206/0x3a0 [ 369.206675][ C1] __sys_sendmsg+0x16e/0x220 [ 369.206689][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.206701][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 369.206721][ C1] do_syscall_64+0xcd/0x250 [ 369.206739][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.206756][ C1] RIP: 0033:0x7fca69d85d29 [ 369.206767][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.206779][ C1] RSP: 002b:00007fca6ab93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.206792][ C1] RAX: ffffffffffffffda RBX: 00007fca69f75fa0 RCX: 00007fca69d85d29 [ 369.206800][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 369.206808][ C1] RBP: 00007fca69e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 369.206817][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.206825][ C1] R13: 0000000000000000 R14: 00007fca69f75fa0 R15: 00007ffe367d0928 [ 369.206839][ C1] [ 369.207202][ C0] rcu: rcu_preempt kthread starved for 10373 jiffies! g44741 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 369.889977][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 369.899941][ C0] rcu: RCU grace-period kthread stack dump: [ 369.905823][ C0] task:rcu_preempt state:R running task stack:27216 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 369.917582][ C0] Call Trace: [ 369.920855][ C0] [ 369.923787][ C0] __schedule+0xe58/0x5ad0 [ 369.928210][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 369.933421][ C0] ? __pfx___schedule+0x10/0x10 [ 369.938269][ C0] ? schedule+0x298/0x350 [ 369.942617][ C0] ? __pfx_lock_release+0x10/0x10 [ 369.947660][ C0] ? lock_acquire+0x2f/0xb0 [ 369.952170][ C0] ? schedule+0x1fd/0x350 [ 369.956512][ C0] schedule+0xe7/0x350 [ 369.960586][ C0] schedule_timeout+0x124/0x280 [ 369.965442][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 369.970820][ C0] ? __pfx_process_timeout+0x10/0x10 [ 369.976121][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 369.981935][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 369.987398][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 369.992169][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 369.997453][ C0] ? rcu_gp_init+0xc82/0x1630 [ 370.002132][ C0] ? lock_acquire+0x2f/0xb0 [ 370.006633][ C0] ? finish_swait+0xc5/0x280 [ 370.011222][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 370.017032][ C0] rcu_gp_kthread+0x271/0x380 [ 370.021709][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 370.026905][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 370.032104][ C0] ? __kthread_parkme+0x148/0x220 [ 370.037132][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 370.042327][ C0] kthread+0x2c1/0x3a0 [ 370.046407][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.051608][ C0] ? __pfx_kthread+0x10/0x10 [ 370.056200][ C0] ret_from_fork+0x45/0x80 [ 370.060613][ C0] ? __pfx_kthread+0x10/0x10 [ 370.065204][ C0] ret_from_fork_asm+0x1a/0x30 [ 370.069981][ C0] [ 370.072996][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 370.079307][ C0] CPU: 0 UID: 0 PID: 15181 Comm: syz.5.3953 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 370.090057][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 370.100104][ C0] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 370.106783][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 0b 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 370.126385][ C0] RSP: 0018:ffffc9000f60fb18 EFLAGS: 00000246 [ 370.132464][ C0] RAX: 0000000000080000 RBX: ffff8880b8744a40 RCX: ffffc9000de9c000 [ 370.140434][ C0] RDX: 0000000000080000 RSI: ffffffff818e18f6 RDI: 0000000000000005 [ 370.148398][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 370.156366][ C0] R10: 0000000000000001 R11: 0000000000000004 R12: ffffed10170e8949 [ 370.164331][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 370.172558][ C0] FS: 00007f09bfb7b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 370.181484][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 370.188063][ C0] CR2: 00007f09bfb7af98 CR3: 0000000058256000 CR4: 00000000003526f0 [ 370.196030][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 370.203996][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 370.212142][ C0] Call Trace: [ 370.215414][ C0] [ 370.218256][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 370.224586][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 370.229787][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 370.235257][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 370.240893][ C0] ? tmigr_requires_handle_remote+0x141/0x480 [ 370.246962][ C0] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 370.253377][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 370.258684][ C0] ? hrtimer_run_queues+0x97/0x500 [ 370.263800][ C0] ? update_process_times+0x178/0x2d0 [ 370.269179][ C0] ? __pfx_update_process_times+0x10/0x10 [ 370.274899][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 370.280362][ C0] ? update_wall_time+0x1c/0x40 [ 370.285215][ C0] ? tick_nohz_handler+0x376/0x530 [ 370.290331][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 370.295789][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 370.301173][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 370.306891][ C0] ? read_tsc+0x9/0x20 [ 370.310968][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 370.316090][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 370.322247][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 370.328051][ C0] [ 370.330975][ C0] [ 370.333902][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.340067][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 370.346136][ C0] ? smp_call_function_many_cond+0x458/0x1300 [ 370.352216][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 370.358284][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 370.363316][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 370.368344][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 370.373458][ C0] text_poke_bp_batch+0x22b/0x760 [ 370.378489][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 370.384039][ C0] ? __jump_label_patch+0x1db/0x400 [ 370.389242][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 370.395492][ C0] text_poke_finish+0x30/0x40 [ 370.400168][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 370.406151][ C0] jump_label_update+0x1d7/0x400 [ 370.411096][ C0] static_key_slow_inc_cpuslocked+0x82/0x120 [ 370.417070][ C0] static_key_slow_inc+0x1a/0x30 [ 370.422003][ C0] io_uring_setup+0x2054/0x3230 [ 370.426862][ C0] ? find_held_lock+0x2d/0x110 [ 370.431629][ C0] ? __pfx_io_uring_setup+0x10/0x10 [ 370.437006][ C0] ? do_user_addr_fault+0xe50/0x13f0 [ 370.442299][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 370.447584][ C0] __x64_sys_io_uring_setup+0x98/0x140 [ 370.453038][ C0] do_syscall_64+0xcd/0x250 [ 370.457545][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.463443][ C0] RIP: 0033:0x7f09bed85d29 [ 370.467853][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.487459][ C0] RSP: 002b:00007f09bfb7b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 370.495869][ C0] RAX: ffffffffffffffda RBX: 00007f09bef76080 RCX: 00007f09bed85d29 [ 370.503832][ C0] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 000000000000758a [ 370.511796][ C0] RBP: 00007f09bee01b08 R08: 0000000000000000 R09: 0000000000000000 [ 370.519761][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.527724][ C0] R13: 0000000000000001 R14: 00007f09bef76080 R15: 00007ffce94847f8 [ 370.535699][ C0]