last executing test programs: 2m23.712804321s ago: executing program 1 (id=3358): ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$kcm(0x2d, 0x2, 0x0) getsockopt$bt_hci(r0, 0x11d, 0x1, 0x0, &(0x7f0000000000)) 2m23.629932797s ago: executing program 1 (id=3360): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)=' 2', 0x2) 2m23.528520939s ago: executing program 1 (id=3363): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_emit_ethernet(0x3b6, &(0x7f0000002480)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaa"], 0x0) 2m23.06259708s ago: executing program 1 (id=3375): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m22.967649072s ago: executing program 1 (id=3380): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="9c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8805) 2m22.167207326s ago: executing program 1 (id=3392): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)="321f", 0x2) 2m21.875042673s ago: executing program 32 (id=3392): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)="321f", 0x2) 2m4.055190388s ago: executing program 2 (id=3692): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m3.974089924s ago: executing program 2 (id=3693): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000002c0)={0x82, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000440)={0x28, 0x5, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) 2m3.90347907s ago: executing program 2 (id=3695): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m3.810232226s ago: executing program 2 (id=3699): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-55', 0x3) 2m3.805137808s ago: executing program 2 (id=3700): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m3.558071277s ago: executing program 2 (id=3705): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 1m48.504740836s ago: executing program 33 (id=3705): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 4.390948488s ago: executing program 6 (id=5581): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000003a80), 0x80040, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 4.167952421s ago: executing program 6 (id=5585): setns(0xc9, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = openat(r0, &(0x7f0000001040)='net/atm/devices\x00', 0x0, 0x0) read(r1, &(0x7f0000001080)=""/4096, 0x1000) 3.994491734s ago: executing program 6 (id=5587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.074923325s ago: executing program 6 (id=5598): r0 = mq_open(&(0x7f00000000c0)='!sinux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\xa1L\xb1\xef\x00\x00\x00\x00C\xb2\x8e9\xb8\xec\xf6&\x8f\xb8d\xe9\xf3\xf4Y+\xafp<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1e\x00\xe2U\xce\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3\xbfOS;\x85\xe0\x0fV\xf4\x8e1:\xd1^~\x13\x86\x17', 0x6e93ebbbcc0884f2, 0x6d, 0x0) close(0x3) socket$inet6(0xa, 0x5, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) 3.060143742s ago: executing program 5 (id=5599): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) clock_nanosleep(0x8, 0x100000000000000, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 2.867774654s ago: executing program 6 (id=5602): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 2.612528545s ago: executing program 5 (id=5606): r0 = creat(&(0x7f0000000440)='./file0\x00', 0x40) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4603100706000000000000000002003e00ff0100000e02000000000000f4e6546ea79e72cf8b00000000000000060000005042380001"], 0x78) close(r0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) 2.409012773s ago: executing program 5 (id=5608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.276894671s ago: executing program 5 (id=5611): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x10b002) landlock_create_ruleset(&(0x7f0000000000)={0x58a5, 0x2, 0x3, 0x290e, 0x0, 0x2}, 0x30, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 2.175545485s ago: executing program 5 (id=5614): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000480)=0x10001, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.99971283s ago: executing program 5 (id=5616): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7eff, 0xf, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe3, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1.861186386s ago: executing program 0 (id=5618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x14) 1.860703871s ago: executing program 6 (id=5619): r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f000001fa00)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b24060500019a288fdc02fab188"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000ac0)={0x20, 0xa, 0x2, "549c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f00000008c0)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="2015970000001755a204d0486bf971a39686e5a466d283501e3ca6c10c774dd9661ac6ea7dc5d3935cfafaaa70c369b6e30900595b6d4f6954f0a976ddb852fd9e9e3679ec2cae68ea2e88b64b0ee48f3006df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5fca}, 0x0, 0x0, 0x0}) 1.744809482s ago: executing program 0 (id=5620): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000180)) 1.28495307s ago: executing program 0 (id=5624): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010030bd7000ffdbdf250100000008000100", @ANYRES32=r0], 0x58}, 0x1, 0x0, 0x0, 0x404c084}, 0x24040894) 1.164665675s ago: executing program 0 (id=5627): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)="3736299517a57e7ac7a92986fc1d6a7f4a202b377be58767421dd831120843268f27316ae7c2d324ba106dc1592acbf4242b8265e98215cfe5d465051b01c248c822c7af", 0x44) 1.065848351s ago: executing program 0 (id=5629): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 932.773096ms ago: executing program 0 (id=5632): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 748.831619ms ago: executing program 3 (id=5636): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000703000/0x2000)=nil, 0x400000, 0x1, 0x2}) 721.888009ms ago: executing program 4 (id=5637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 646.511562ms ago: executing program 3 (id=5638): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001b40)=[{&(0x7f0000000080)='\tn', 0x2}], 0x1, 0x20d, 0x86) 510.389526ms ago: executing program 4 (id=5639): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x0) 475.092632ms ago: executing program 3 (id=5640): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x7, @empty, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000000000000000", 0x58}], 0x1) 444.98555ms ago: executing program 4 (id=5641): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) 327.914668ms ago: executing program 4 (id=5642): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x7, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 326.986539ms ago: executing program 3 (id=5643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="fc", 0x1, 0x1000) 131.279997ms ago: executing program 4 (id=5644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/syz_tun/forwarding\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) 110.040355ms ago: executing program 3 (id=5645): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 1.080069ms ago: executing program 3 (id=5646): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @remote}}}}, 0x0) 0s ago: executing program 4 (id=5647): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) kernel console output (not intermixed with test programs): 273.136007][T14528] das16m1 [ 273.136014][T14528] comedi: valid board names for dac02 driver are: [ 273.136021][T14528] dac02 [ 273.136028][T14528] comedi: valid board names for rti802 driver are: [ 273.136035][T14528] rti802 [ 273.136040][T14528] comedi: valid board names for rti800 driver are: [ 273.142905][T14528] rti800 [ 273.142915][T14528] rti815 [ 273.142922][T14528] comedi: valid board names for pcm3724 driver are: [ 273.142941][T14528] pcm3724 [ 273.142948][T14528] comedi: valid board names for pcl818 driver are: [ 273.142957][T14528] pcl818l [ 273.142963][T14528] pcl818h [ 273.142970][T14528] pcl818hd [ 273.142976][T14528] pcl818hg [ 273.142983][T14528] pcl818 [ 273.142989][T14528] pcl718 [ 273.142996][T14528] pcm3718 [ 273.143002][T14528] comedi: valid board names for pcl816 driver are: [ 273.143010][T14528] pcl816 [ 273.143017][T14528] pcl814b [ 273.143023][T14528] comedi: valid board names for pcl812 driver are: [ 273.143031][T14528] pcl812 [ 273.143037][T14528] pcl812pg [ 273.143043][T14528] acl8112pg [ 273.143048][T14528] acl8112dg [ 273.143054][T14528] acl8112hg [ 273.143060][T14528] a821pgl [ 273.143066][T14528] a821pglnda [ 273.143072][T14528] a821pgh [ 273.143078][T14528] a822pgl [ 273.143084][T14528] a822pgh [ 273.143089][T14528] a823pgl [ 273.143094][T14528] a823pgh [ 273.143099][T14528] pcl813 [ 273.143104][T14528] pcl813b [ 273.143110][T14528] acl8113 [ 273.143115][T14528] iso813 [ 273.143120][T14528] acl8216 [ 273.143126][T14528] a826pg [ 273.143132][T14528] comedi: valid board names for pcl730 driver are: [ 273.143140][T14528] pcl730 [ 273.143145][T14528] iso730 [ 273.143151][T14528] acl7130 [ 273.143157][T14528] pcm3730 [ 273.143163][T14528] pcl725 [ 273.143170][T14528] p8r8dio [ 273.144794][T14528] acl7225b [ 273.144804][T14528] p16r16dio [ 273.144811][T14528] pcl733 [ 273.144818][T14528] pcl734 [ 273.144824][T14528] opmm-1616-xt [ 273.144832][T14528] pearl-mm-p [ 273.144838][T14528] ir104-pbf [ 273.144845][T14528] comedi: valid board names for pcl726 driver are: [ 273.144854][T14528] pcl726 [ 273.144860][T14528] pcl727 [ 273.144865][T14528] pcl728 [ 273.144871][T14528] acl6126 [ 273.144877][T14528] acl6128 [ 273.144883][T14528] comedi: valid board names for pcl724 driver are: [ 273.144891][T14528] pcl724 [ 273.144897][T14528] pcl722 [ 273.144903][T14528] pcl731 [ 273.144909][T14528] acl7122 [ 273.144914][T14528] acl7124 [ 273.144920][T14528] pet48dio [ 273.144926][T14528] pcmio48 [ 273.144932][T14528] onyx-mm-dio [ 273.144938][T14528] comedi: valid board names for pcl711 driver are: [ 273.144946][T14528] pcl711 [ 273.144952][T14528] pcl711b [ 273.144957][T14528] acl8112hg [ 273.144964][T14528] acl8112dg [ 273.144970][T14528] comedi: valid board names for amplc_pc263 driver are: [ 273.144977][T14528] pc263 [ 273.144983][T14528] comedi: valid board names for amplc_pc236 driver are: [ 273.144991][T14528] pc36at [ 273.144998][T14528] comedi: valid board names for amplc_dio200 driver are: [ 273.145005][T14528] pc212e [ 273.145011][T14528] pc214e [ 273.145017][T14528] pc215e [ 273.145023][T14528] pc218e [ 273.145028][T14528] pc272e [ 273.145034][T14528] comedi: valid board names for comedi_parport driver are: [ 273.145042][T14528] comedi_parport [ 273.145048][T14528] comedi: valid board names for comedi_test driver are: [ 273.145056][T14528] comedi_test [ 273.145062][T14528] comedi: valid board names for comedi_bond driver are: [ 273.145070][T14528] comedi_bond [ 273.395551][ T31] audit: type=1400 audit(273.359:1122): avc: denied { ioctl } for pid=14529 comm="syz.4.3857" path="socket:[42491]" dev="sockfs" ino=42491 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 273.649798][T14536] batman_adv: batadv0: Adding interface: vlan2 [ 273.649814][T14536] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.649840][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3b) already exists on: macsec0 [ 273.649855][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.649863][T14536] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 274.251861][T14550] netlink: Failed to add ¦â—k\ helper -22 [ 274.251910][T14550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.581748][T14562] netlink: 'syz.0.3870': attribute type 2 has an invalid length. [ 274.581767][T14562] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3870'. [ 274.800280][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3874'. [ 274.800586][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3874'. [ 275.107943][ T50] IPVS: starting estimator thread 0... [ 275.196650][T14587] IPVS: using max 41 ests per chain, 98400 per kthread [ 275.767317][ T31] audit: type=1400 audit(275.739:1123): avc: denied { map } for pid=14604 comm="syz.3.3890" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 275.911282][T14610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3892'. [ 275.912404][T14610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3892'. [ 275.974883][T14613] netlink: 'syz.4.3893': attribute type 23 has an invalid length. [ 276.445387][T14631] ALSA: mixer_oss: invalid OSS volume '' [ 276.445401][T14631] ALSA: mixer_oss: invalid OSS volume '' [ 276.445410][T14631] ALSA: mixer_oss: invalid OSS volume '' [ 276.446515][T14631] ALSA: mixer_oss: invalid OSS volume '' [ 276.543186][ T31] audit: type=1400 audit(276.509:1124): avc: denied { ioctl } for pid=14634 comm="syz.5.3903" path="socket:[42771]" dev="sockfs" ino=42771 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 276.929149][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3911'. [ 276.960504][T14652] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.961403][T14652] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.012528][ T31] audit: type=1400 audit(276.979:1125): avc: denied { append } for pid=14657 comm="syz.4.3914" name="uprobe_events" dev="tracefs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 277.177867][T14663] netlink: NAT attribute has 8 unknown bytes [ 277.177897][T14663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.336509][ T31] audit: type=1400 audit(277.309:1126): avc: denied { read append } for pid=14668 comm="syz.0.3919" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 277.339922][ T31] audit: type=1400 audit(277.309:1127): avc: denied { getopt } for pid=14667 comm="syz.4.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 277.342447][ T31] audit: type=1400 audit(277.309:1128): avc: denied { open } for pid=14668 comm="syz.0.3919" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 277.484954][T14670] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.485065][T14670] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 277.579070][T14670] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.579258][T14670] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 277.611820][T14670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.611909][T14670] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 277.640531][T14670] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 277.641063][T14670] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 277.682823][T14670] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 277.684181][T14670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.684277][T14670] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 277.731154][T14670] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 278.108593][T14692] ip_tables: iptables: counters copy to user failed while replacing table [ 278.788855][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.793766][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.812460][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.815693][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.830956][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.996932][ T5841] syz_tun (unregistering): left allmulticast mode [ 279.112608][T14720] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3939'. [ 279.160873][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3940'. [ 279.160892][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3940'. [ 279.160903][T14723] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 279.160935][T14723] iwpm_mapping_info_cb: Unable to parse nlmsg [ 279.355752][ T31] audit: type=1400 audit(279.319:1129): avc: denied { watch } for pid=14735 comm="syz.5.3945" path="/97" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 279.476728][ T5612] Bluetooth: hci0: command 0x0401 tx timeout [ 279.500784][T14743] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3947'. [ 279.636751][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 279.645215][T14751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.716760][ T5611] Bluetooth: hci4: command 0x2016 tx timeout [ 279.716760][ T5716] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 279.716838][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.845366][T14759] bonding: bond0 is being deleted... [ 279.894281][ T5716] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 279.895388][ T5716] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.895417][ T5716] usb 1-1: config 0 has no interface number 0 [ 279.898805][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.898829][ T5716] usb 1-1: Product: syz [ 279.898855][ T5716] usb 1-1: Manufacturer: syz [ 279.898872][ T5716] usb 1-1: SerialNumber: syz [ 279.907770][ T5716] usb 1-1: config 0 descriptor?? [ 279.939288][T14759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.962023][T14759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.978440][T14759] bond0 (unregistering): Released all slaves [ 280.022410][T14706] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.022532][T14706] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.022640][T14706] bridge_slave_0: entered allmulticast mode [ 280.025309][T14706] bridge_slave_0: entered promiscuous mode [ 280.048110][T14706] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.048256][T14706] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.048393][T14706] bridge_slave_1: entered allmulticast mode [ 280.053058][T14706] bridge_slave_1: entered promiscuous mode [ 280.108037][T14706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.110741][T14706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.116265][ T5716] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 280.128905][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 280.129932][ T5716] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 280.130239][ T5716] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 280.130297][ T5716] usb 1-1: media controller created [ 280.150818][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.205392][T14706] team0: Port device team_slave_0 added [ 280.213960][T14706] team0: Port device team_slave_1 added [ 280.246483][T14706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.246501][T14706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.246523][T14706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.248109][T14706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.248121][T14706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.248143][T14706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.299369][ T10] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 280.302846][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.302870][ T10] usb 4-1: Product: syz [ 280.302884][ T10] usb 4-1: Manufacturer: syz [ 280.302917][ T10] usb 4-1: SerialNumber: syz [ 280.335702][ T31] audit: type=1400 audit(280.279:1130): avc: denied { append } for pid=14740 comm="syz.0.3948" name="i2c-1" dev="devtmpfs" ino=3857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.395078][T14706] hsr_slave_0: entered promiscuous mode [ 280.396473][T14706] hsr_slave_1: entered promiscuous mode [ 280.398772][T14706] debugfs: 'hsr0' already exists in 'hsr' [ 280.398792][T14706] Cannot create hsr debugfs directory [ 280.561894][ T10] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 280.562497][ T10] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 280.580445][T14776] MTRR 1 not used [ 280.696643][T14706] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 280.703485][T14706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.704379][T14706] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 280.731973][T14706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.732950][T14706] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 280.753473][T14706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.754455][T14706] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 280.762995][ T10] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 280.766901][ T10] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 280.767144][ T10] kalmia 4-1:1.0: probe with driver kalmia failed with error -71 [ 280.785306][ T10] usb 4-1: USB disconnect, device number 41 [ 280.815876][T14706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.916451][ T5612] Bluetooth: hci5: command tx timeout [ 280.963149][T14706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.996718][T14706] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.016036][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.016152][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.027109][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.027208][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.099287][T14706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.249150][ T5716] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 281.340026][ T5716] usb 1-1: USB disconnect, device number 44 [ 281.395971][T14799] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 281.556340][ T5612] Bluetooth: hci0: command 0x0401 tx timeout [ 281.716500][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 281.796641][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 281.796677][ T5612] Bluetooth: hci4: command 0x2016 tx timeout [ 281.903801][T14820] netlink: Unknown NAT attribute (type=11105, max=9) [ 281.903835][T14820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.995356][T14706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.484210][ T31] audit: type=1400 audit(282.449:1131): avc: denied { mounton } for pid=14851 comm="syz.3.3987" path="/959/file0" dev="tmpfs" ino=4891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 282.538067][ T31] audit: type=1400 audit(282.509:1132): avc: denied { remount } for pid=14851 comm="syz.3.3987" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 282.563168][T14706] veth0_vlan: entered promiscuous mode [ 282.587505][T14706] veth1_vlan: entered promiscuous mode [ 282.675498][T14706] veth0_macvtap: entered promiscuous mode [ 282.693193][T14706] veth1_macvtap: entered promiscuous mode [ 282.719414][T14706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.738822][T14706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.828589][ T1184] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.886235][ T1184] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.897930][ T1184] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.904734][ T1184] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.997408][ T5611] Bluetooth: hci5: command tx timeout [ 283.017979][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.017998][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.085031][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.085052][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.219128][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3998'. [ 283.470866][T14892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4003'. [ 283.470889][T14892] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4003'. [ 283.473939][T14892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4003'. [ 283.473958][T14892] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4003'. [ 283.477920][T14889] WARNING! power/level is deprecated; use power/control instead [ 283.712760][ T31] audit: type=1400 audit(283.679:1133): avc: denied { setopt } for pid=14903 comm="syz.5.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 283.714446][ T31] audit: type=1400 audit(283.679:1134): avc: denied { bind } for pid=14903 comm="syz.5.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 283.876316][ T5611] Bluetooth: hci4: command 0x2016 tx timeout [ 283.876352][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 284.574804][T14939] smpboot: CPU 1 is now offline [ 284.880260][T14947] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4026'. [ 284.880274][T14947] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4026'. [ 284.880281][T14947] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 285.007817][ T5612] Bluetooth: hci5: command tx timeout [ 285.249223][T14960] binder: 14958:14960 ioctl c0306201 200000000640 returned -22 [ 285.513193][T14970] sch_fq: defrate 0 ignored. [ 285.744417][T14980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.885246][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4047'. [ 285.908294][T14988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4048'. [ 285.913219][T14988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4048'. [ 286.394489][T15016] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 286.971774][T15042] bonding: bond0 is being created... [ 287.076849][ T5612] Bluetooth: hci5: command tx timeout [ 287.340196][ T31] audit: type=1400 audit(287.309:1135): avc: denied { watch_reads } for pid=15051 comm="syz.4.4078" path="/690" dev="tmpfs" ino=3512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 287.645803][ T1153] IPVS: starting estimator thread 0... [ 287.670208][T15068] IPVS: ip_vs_add_dest(): tunnel port is zero [ 287.727508][T15073] IPVS: using max 64 ests per chain, 153600 per kthread [ 287.915052][T15081] netlink: 'syz.5.4090': attribute type 1 has an invalid length. [ 287.915066][T15081] netlink: 'syz.5.4090': attribute type 2 has an invalid length. [ 288.405175][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4100'. [ 288.405191][T15104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4100'. [ 288.440303][ T31] audit: type=1400 audit(288.399:1136): avc: denied { map } for pid=15103 comm="syz.3.4102" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 288.440529][ T31] audit: type=1400 audit(288.409:1137): avc: denied { execute } for pid=15103 comm="syz.3.4102" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 288.645067][T15115] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4106'. [ 289.086354][ T5717] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 289.242894][ T5717] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 289.242925][ T5717] usb 6-1: too many configurations: 21, using maximum allowed: 8 [ 289.245214][ T5717] usb 6-1: config index 0 descriptor too short (expected 45, got 28) [ 289.245230][ T5717] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 289.245253][ T5717] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.246002][ T5717] usb 6-1: config index 1 descriptor too short (expected 45, got 28) [ 289.246017][ T5717] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 289.247100][ T5717] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.305642][ T5717] usb 6-1: config index 2 descriptor too short (expected 45, got 28) [ 289.305661][ T5717] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 289.305689][ T5717] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.363444][ T5717] usb 6-1: config index 3 descriptor too short (expected 45, got 28) [ 289.363463][ T5717] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 289.363487][ T5717] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.364427][ T5717] usb 6-1: config index 4 descriptor too short (expected 45, got 28) [ 289.364441][ T5717] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 289.364464][ T5717] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.365189][ T5717] usb 6-1: config index 5 descriptor too short (expected 45, got 28) [ 289.365203][ T5717] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 289.365224][ T5717] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.365942][ T5717] usb 6-1: config index 6 descriptor too short (expected 45, got 28) [ 289.365956][ T5717] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 289.365977][ T5717] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.396725][ T5717] usb 6-1: config index 7 descriptor too short (expected 45, got 28) [ 289.396743][ T5717] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 289.396767][ T5717] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.531682][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.531699][ T5717] usb 6-1: Product: syz [ 289.531708][ T5717] usb 6-1: Manufacturer: syz [ 289.531716][ T5717] usb 6-1: SerialNumber: syz [ 289.572249][ T5717] rtl8150 6-1:1.0: couldn't find required endpoints [ 289.572367][ T5717] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 289.820806][ T5744] usb 6-1: USB disconnect, device number 4 [ 290.086706][ T5717] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 290.154991][T15178] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4136'. [ 290.237429][ T5717] usb 1-1: Using ep0 maxpacket: 16 [ 290.238003][ T5717] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 290.238761][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.239526][ T5717] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 290.239540][ T5717] usb 1-1: Manufacturer: syz [ 290.261837][ T5717] usb 1-1: config 0 descriptor?? [ 290.315054][ T31] audit: type=1400 audit(290.279:1138): avc: denied { setopt } for pid=15185 comm="syz.4.4140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 290.315383][ T31] audit: type=1400 audit(290.279:1139): avc: denied { getopt } for pid=15185 comm="syz.4.4140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 290.436595][ T5722] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 290.586436][ T5722] usb 4-1: Using ep0 maxpacket: 32 [ 290.592962][ T5722] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 290.593822][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.619442][ T5722] usb 4-1: config 0 descriptor?? [ 290.729270][ T5717] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.004C/input/input48 [ 290.791725][ T5717] creative-sb0540 0003:041E:3100.004C: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 290.844323][ T5722] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 290.861091][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.865314][ T5722] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 290.865342][ T5722] usb 4-1: media controller created [ 290.918573][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.062192][ T5722] az6027: usb out operation failed. (-71) [ 291.063271][ T5722] az6027: usb out operation failed. (-71) [ 291.063281][ T5722] stb0899_attach: Driver disabled by Kconfig [ 291.063286][ T5722] az6027: no front-end attached [ 291.063286][ T5722] [ 291.063557][ T5722] az6027: usb out operation failed. (-71) [ 291.063565][ T5722] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 291.087494][ T5722] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input49 [ 291.140676][ T5722] dvb-usb: schedule remote query interval to 400 msecs. [ 291.140704][ T5722] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 291.172138][ T5722] usb 4-1: USB disconnect, device number 42 [ 291.224789][ T126] usb 1-1: USB disconnect, device number 45 [ 291.327105][ T5722] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 291.554011][ T31] audit: type=1400 audit(291.519:1140): avc: denied { map } for pid=15213 comm="syz.5.4152" path="socket:[45104]" dev="sockfs" ino=45104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 291.720196][T15223] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4156'. [ 292.078202][ T5722] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 292.228055][ T5722] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 292.228082][ T5722] usb 6-1: too many configurations: 15, using maximum allowed: 8 [ 292.255453][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.255469][ T5722] usb 6-1: Product: syz [ 292.255477][ T5722] usb 6-1: Manufacturer: syz [ 292.255486][ T5722] usb 6-1: SerialNumber: syz [ 292.409278][T15244] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4165'. [ 292.510507][T15246] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 293.013815][T15269] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 293.122403][ T5722] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 293.122437][ T5722] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 293.122760][ T5722] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 293.173387][ T5722] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 293.200029][ T5722] usb 6-1: USB disconnect, device number 5 [ 293.426134][ T100] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.610828][ T31] audit: type=1400 audit(293.579:1141): avc: denied { bind } for pid=15289 comm="syz.0.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 294.297196][ T126] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 294.306260][ T5722] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 294.446972][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 294.447460][ T126] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 294.452361][ T126] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 294.452378][ T126] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 294.452389][ T126] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 294.452401][ T126] usb 4-1: config 250 has no interface number 0 [ 294.452430][ T126] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 294.452445][ T126] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 294.452465][ T126] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 294.452477][ T126] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 294.452491][ T126] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 294.452506][ T126] usb 4-1: config 250 interface 228 has no altsetting 0 [ 294.453737][ T126] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 294.453750][ T126] usb 4-1: Product: syz [ 294.453758][ T126] usb 4-1: SerialNumber: syz [ 294.471127][ T5722] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 294.473377][ T126] hub 4-1:250.228: bad descriptor, ignoring hub [ 294.473391][ T126] hub 4-1:250.228: probe with driver hub failed with error -5 [ 294.602396][ T5722] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.602416][ T5722] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.602431][ T5722] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.602452][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.677928][ T5722] usb 6-1: config 0 descriptor?? [ 294.695927][ T126] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 43 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 294.818004][T15322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.909598][ T31] audit: type=1400 audit(294.869:1142): avc: denied { read write } for pid=15307 comm="syz.3.4195" name="lp0" dev="devtmpfs" ino=3890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 294.909635][ T31] audit: type=1400 audit(294.869:1143): avc: denied { open } for pid=15307 comm="syz.3.4195" path="/dev/usb/lp0" dev="devtmpfs" ino=3890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 295.132280][ T5722] playstation 0003:054C:09CC.004D: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.5-1/input0 [ 295.317120][ T126] usb 4-1: USB disconnect, device number 43 [ 295.334746][ T126] usblp0: removed [ 295.349496][ T5722] playstation 0003:054C:09CC.004D: Invalid byte count transferred, expected 16 got 8 [ 295.349517][ T5722] playstation 0003:054C:09CC.004D: Failed to retrieve DualShock4 pairing info: -22 [ 295.349563][ T5722] playstation 0003:054C:09CC.004D: Failed to get MAC address from DualShock4 [ 295.349573][ T5722] playstation 0003:054C:09CC.004D: Failed to create dualshock4. [ 295.398270][ T5722] playstation 0003:054C:09CC.004D: probe with driver playstation failed with error -22 [ 295.591292][ T126] usb 6-1: USB disconnect, device number 6 [ 295.764277][ T31] audit: type=1400 audit(295.729:1144): avc: denied { setopt } for pid=15347 comm="syz.0.4212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 295.881583][ T31] audit: type=1400 audit(295.849:1145): avc: denied { append } for pid=15351 comm="syz.0.4213" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 295.944866][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4214'. [ 295.944894][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4214'. [ 296.048132][T15357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.183749][T15363] sg_write: data in/out 1701604413/217 bytes for SCSI command 0x0-- guessing data in; [ 296.183749][T15363] program syz.3.4218 not setting count and/or reply_len properly [ 296.448579][T15375] overlayfs: invalid origin (0000) [ 296.531931][T15380] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4226'. [ 296.531949][T15380] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4226'. [ 296.531957][T15380] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 296.531966][T15380] iwpm_hello_cb: Unable to parse nlmsg [ 296.843857][ T31] audit: type=1326 audit(296.809:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15393 comm="syz.4.4233" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349c39e199 code=0x7ffc0000 [ 296.845664][ T31] audit: type=1326 audit(296.809:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15393 comm="syz.4.4233" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349c39e199 code=0x7ffc0000 [ 296.915846][ T31] audit: type=1326 audit(296.879:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15393 comm="syz.4.4233" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349c39e199 code=0x7ffc0000 [ 296.915991][ T31] audit: type=1326 audit(296.879:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15393 comm="syz.4.4233" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349c39e199 code=0x7ffc0000 [ 296.975408][ T31] audit: type=1326 audit(296.939:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15393 comm="syz.4.4233" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f349c39e199 code=0x7ffc0000 [ 297.337985][T15408] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 297.597031][ T126] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 297.716488][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.748385][ T126] usb 6-1: Using ep0 maxpacket: 16 [ 297.748996][ T126] usb 6-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 297.752208][ T126] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.752226][ T126] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.752244][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.754743][ T126] usb 6-1: config 0 descriptor?? [ 298.020013][T15433] bonding: bond0 is being deleted... [ 298.228667][T15433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.262134][ T126] input: HID 320f:5041 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:320F:5041.004E/input/input50 [ 298.349347][ T126] evision 0003:320F:5041.004E: input,hiddev0,hidraw0: USB HID v0.04 Device [HID 320f:5041] on usb-dummy_hcd.5-1/input0 [ 298.473822][ T126] usb 6-1: USB disconnect, device number 7 [ 298.508562][T15433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.582768][T15433] bond0 (unregistering): Released all slaves [ 298.674455][T15450] fido_id[15450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 299.180814][T15477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 299.328356][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 299.328369][ T31] audit: type=1400 audit(299.299:1165): avc: denied { map } for pid=15481 comm="syz.6.4271" path="socket:[46348]" dev="sockfs" ino=46348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 299.679391][T15497] vivid-000: disconnect [ 299.734360][T15492] vivid-000: reconnect [ 300.106363][T15514] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 300.289393][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 300.325368][ T5611] Bluetooth: hci5: unexpected cc 0x204b length: 34 > 3 [ 300.626811][ T5722] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 300.786571][ T5722] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.787381][ T5722] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.787395][ T5722] usb 1-1: config 0 has no interface number 0 [ 300.787416][ T5722] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 300.787431][ T5722] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 300.787452][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.790631][ T5722] usb 1-1: config 0 descriptor?? [ 300.791624][T15532] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 300.805541][ T5722] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 300.816518][ T126] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 300.972652][ T126] usb 4-1: not running at top speed; connect to a high speed hub [ 300.972673][ T126] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 300.996325][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.996342][ T126] usb 4-1: Product: syz [ 300.996351][ T126] usb 4-1: Manufacturer: syz [ 300.996359][ T126] usb 4-1: SerialNumber: syz [ 301.029450][ T126] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 301.049513][ T126] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 301.074412][ T126] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 301.092689][ T126] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 301.109025][ T126] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 301.115013][ T5744] usb 1-1: USB disconnect, device number 46 [ 301.152471][T15545] SELinux: failed to load policy [ 301.310003][T15541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.310313][T15541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.368261][ C0] usb 4-1: malformed indat packet [ 301.368454][ C0] usb 4-1: malformed indat packet [ 301.368660][ C0] usb 4-1: malformed indat packet [ 301.368845][ C0] usb 4-1: malformed indat packet [ 301.369032][ C0] usb 4-1: malformed indat packet [ 301.369223][ C0] usb 4-1: malformed indat packet [ 301.481862][T15551] 6í [ 301.553569][T15556] block2mtd: error: cannot open device /dev [ 301.572420][ T126] usb 4-1: USB disconnect, device number 44 [ 301.601952][ T126] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 301.620137][ T126] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 301.650207][ T126] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 301.670119][ T126] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 301.688230][ T126] keyspan 4-1:1.0: device disconnected [ 301.850746][T15565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4309'. [ 302.166428][ T5722] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 302.316435][ T5722] usb 6-1: Using ep0 maxpacket: 32 [ 302.316910][ T5722] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 302.318884][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.318902][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.318914][ T5722] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 302.318936][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.320404][ T5722] usb 6-1: config 0 descriptor?? [ 302.363425][ T5612] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 302.759765][ T5722] hid (null): unknown global tag 0xc [ 302.759786][ T5722] hid (null): unknown global tag 0xc [ 302.759795][ T5722] hid (null): report_id 0 is invalid [ 302.760168][ T5722] hid (null): report_id 0 is invalid [ 302.760180][ T5722] hid (null): unknown global tag 0x50 [ 302.805394][ T5722] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.004F/input/input52 [ 302.806482][ T5717] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 302.948792][ T5722] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.004F/input/input53 [ 302.973026][ T5717] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 302.973838][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.973863][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.009054][ T5717] usb 1-1: config 0 descriptor?? [ 303.073719][ T5722] kye 0003:0458:5011.004F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 303.135272][ T5722] usb 6-1: USB disconnect, device number 8 [ 303.254781][ T5717] usbhid 1-1:0.0: can't add hid device: -71 [ 303.254842][ T5717] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 303.281482][ T5717] usb 1-1: USB disconnect, device number 47 [ 303.345834][T15605] fido_id[15605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 303.376020][ T31] audit: type=1400 audit(303.339:1166): avc: denied { write } for pid=15606 comm="syz.4.4328" path="socket:[47043]" dev="sockfs" ino=47043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 303.592783][ T31] audit: type=1400 audit(303.559:1167): avc: denied { mount } for pid=15612 comm="syz.4.4331" name="/" dev="ramfs" ino=47071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 303.647590][ T31] audit: type=1400 audit(303.619:1168): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 303.711281][T15617] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4333'. [ 303.736832][ T5717] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 303.888539][ T5717] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 303.894689][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.894718][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.930701][ T5717] usb 1-1: config 0 descriptor?? [ 303.955789][ T5717] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input54 [ 304.217786][ T5722] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 304.344495][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.344673][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.344839][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.345003][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.345169][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.345333][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.345501][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.345673][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.345841][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.346011][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.346225][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.346391][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.346558][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.346742][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.346910][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.347078][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.347242][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.354458][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.354628][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.354794][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.354971][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.355139][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.365558][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.368838][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.369013][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.369179][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.369343][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.369522][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.369684][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.369845][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.370006][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.370169][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.370330][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.370499][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.370663][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.370915][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.370947][ T5612] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 304.370984][ T5612] Bluetooth: hci5: Injecting HCI hardware error event [ 304.371395][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.372411][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.372643][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.372672][ T5611] Bluetooth: hci5: hardware error 0x00 [ 304.372846][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.373860][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.374361][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.374525][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.375251][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.375341][ T5722] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 304.375421][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.375585][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.375785][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.375950][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.376116][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.376288][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.376453][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.376619][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.376737][ T4964] usb 1-1: control msg error: -71 [ 304.376789][ C0] usb 1-1: pegasus_irq - urb shutting down with status: -2 [ 304.378642][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.378659][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.378679][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.478808][ T5722] usb 4-1: config 0 descriptor?? [ 304.791823][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.793031][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.800506][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.800683][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.807911][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.809515][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.817089][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.817259][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.817423][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.817587][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.817749][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.817916][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.818092][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.825306][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.825482][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.832768][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.832937][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.833103][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.833269][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.833436][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.833603][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.833768][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.833932][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.834095][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.834260][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.834429][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.834599][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.834768][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.842107][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.842275][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.842436][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.842628][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.842790][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.848308][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.848477][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.848647][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.855913][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.856128][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.856295][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.856458][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.856622][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.867646][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.867812][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.867981][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.868152][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.868316][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.878579][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.879820][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.879989][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.880154][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.880318][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.880481][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.880645][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.880818][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.880990][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.881158][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.881325][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.881491][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.881659][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.881842][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.882009][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.882200][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.882368][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.882531][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.882702][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.882867][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.883035][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.891252][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.891417][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.891582][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.891758][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.891926][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.892094][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.892260][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.892426][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.892594][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.892759][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.892924][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.893088][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.893253][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.893419][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.893589][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.893763][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.893937][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.894109][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.894277][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.894444][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.894632][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.894994][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.900064][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.900232][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.900400][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.907922][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.908096][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.908264][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.908429][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.908595][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.908759][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.908923][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.909085][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.909249][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.909413][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.909585][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.916939][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.924191][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.924358][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.924523][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.924699][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.924866][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.925033][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.925199][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.925363][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.925526][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.925693][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.925853][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.926113][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.926280][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.926445][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.933669][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.933837][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.934001][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.934166][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.934332][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.934496][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.934662][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.934827][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.934994][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.935164][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.942732][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.942900][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.943067][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.943233][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 304.943326][ T4964] usb 1-1: control msg error: -71 [ 304.943396][ C0] usb 1-1: pegasus_irq - urb shutting down with status: -2 [ 305.039306][ T5717] usb 1-1: USB disconnect, device number 48 [ 305.891591][ T5722] savu 0003:1E7D:2D5A.0050: unknown main item tag 0x0 [ 305.891613][ T5722] savu 0003:1E7D:2D5A.0050: unknown main item tag 0x0 [ 305.891628][ T5722] savu 0003:1E7D:2D5A.0050: unknown main item tag 0x0 [ 305.891642][ T5722] savu 0003:1E7D:2D5A.0050: unknown main item tag 0x0 [ 305.891656][ T5722] savu 0003:1E7D:2D5A.0050: unknown main item tag 0x0 [ 305.891670][ T5722] savu 0003:1E7D:2D5A.0050: unknown main item tag 0x0 [ 305.891684][ T5722] savu 0003:1E7D:2D5A.0050: unknown main item tag 0x0 [ 305.891698][ T5722] savu 0003:1E7D:2D5A.0050: unknown main item tag 0x0 [ 305.891711][ T5722] savu 0003:1E7D:2D5A.0050: unknown main item tag 0x0 [ 305.891725][ T5722] savu 0003:1E7D:2D5A.0050: unknown main item tag 0x0 [ 306.163413][ T5722] savu 0003:1E7D:2D5A.0050: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 306.263410][ T31] audit: type=1800 audit(306.229:1169): pid=15650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4349" name="bus" dev="tmpfs" ino=1011 res=0 errno=0 [ 306.487429][ T5722] usb 4-1: USB disconnect, device number 45 [ 306.883992][T15671] loop7: detected capacity change from 0 to 7 [ 306.998910][T15671] Dev loop7: unable to read RDB block 7 [ 306.998938][T15671] loop7: unable to read partition table [ 306.999048][T15671] loop7: partition table beyond EOD, truncated [ 306.999065][T15671] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 307.048566][ C0] blk_print_req_error: 11 callbacks suppressed [ 307.048579][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 307.048625][ C0] buffer_io_error: 10 callbacks suppressed [ 307.048635][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 307.255659][ T31] audit: type=1400 audit(307.219:1170): avc: denied { bind } for pid=15681 comm="syz.3.4362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.414400][ T31] audit: type=1400 audit(307.379:1171): avc: denied { bind } for pid=15685 comm="syz.0.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 307.689032][T15699] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4370'. [ 308.126868][ T5722] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 308.198287][ T5611] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 308.277431][ T5722] usb 6-1: Using ep0 maxpacket: 16 [ 308.278217][ T5722] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 308.278985][ T5722] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 308.279003][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.281223][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.281237][ T5722] usb 6-1: Product: syz [ 308.281245][ T5722] usb 6-1: Manufacturer: syz [ 308.281254][ T5722] usb 6-1: SerialNumber: syz [ 308.285482][ T5722] usb 6-1: config 0 descriptor?? [ 308.361938][ T5722] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 308.361961][ T5722] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 308.796862][ T31] audit: type=1400 audit(308.769:1172): avc: denied { setopt } for pid=15741 comm="syz.3.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 308.935521][ T5722] em28xx 6-1:0.0: chip ID is em2874 [ 309.098391][ T31] audit: type=1400 audit(309.049:1173): avc: denied { mount } for pid=15750 comm="syz.0.4395" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 309.144993][ T5722] usb 6-1: USB disconnect, device number 9 [ 309.145783][ T5722] em28xx 6-1:0.0: Disconnecting em28xx [ 309.281073][ T5722] em28xx: Freeing device [ 309.773277][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4413'. [ 310.086890][T15802] input: syz1 as /devices/virtual/input/input55 [ 310.519612][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.519669][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.697603][T15827] size and base must be multiples of 4 kiB [ 310.697621][T15827] CPU: 0 UID: 0 PID: 15827 Comm: syz.5.4428 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.697639][T15827] Tainted: [L]=SOFTLOCKUP [ 310.697643][T15827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 310.697652][T15827] Call Trace: [ 310.697657][T15827] [ 310.697661][T15827] dump_stack_lvl+0x100/0x190 [ 310.697685][T15827] mtrr_del.cold+0x72/0x85 [ 310.697699][T15827] mtrr_ioctl+0xbc8/0xcf0 [ 310.697713][T15827] ? __pfx_mtrr_ioctl+0x10/0x10 [ 310.697724][T15827] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 310.697744][T15827] ? __fget_files+0x34/0x3d0 [ 310.697768][T15827] ? __pfx_mtrr_ioctl+0x10/0x10 [ 310.697780][T15827] proc_reg_unlocked_ioctl+0x229/0x320 [ 310.697792][T15827] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 310.697805][T15827] __x64_sys_ioctl+0x18e/0x210 [ 310.697820][T15827] do_syscall_64+0x123/0x790 [ 310.697836][T15827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.697848][T15827] RIP: 0033:0x7f29aef9e199 [ 310.697858][T15827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.697869][T15827] RSP: 002b:00007f29aff00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.697884][T15827] RAX: ffffffffffffffda RBX: 00007f29af225fa0 RCX: 00007f29aef9e199 [ 310.697891][T15827] RDX: 0000200000000040 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 310.697898][T15827] RBP: 00007f29af035888 R08: 0000000000000000 R09: 0000000000000000 [ 310.697912][T15827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.697919][T15827] R13: 00007f29af226038 R14: 00007f29af225fa0 R15: 00007ffc69ec93a8 [ 310.697936][T15827] [ 311.226684][ T31] audit: type=1400 audit(311.189:1174): avc: denied { write } for pid=15835 comm="syz.4.4433" name="subsystems" dev="configfs" ino=3476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 311.304913][ T5611] block nbd1: Receive control failed (result -32) [ 311.321785][ T5611] block nbd1: Receive control failed (result -32) [ 311.456902][ T31] audit: type=1400 audit(311.429:1175): avc: denied { write } for pid=15835 comm="syz.4.4433" name="subsystems" dev="configfs" ino=3476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 311.772093][T15852] netlink: 'syz.6.4440': attribute type 27 has an invalid length. [ 311.772113][T15852] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4440'. [ 311.808443][T15852] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.888990][T15860] serial 00:02: in use; can't configure [ 312.337798][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4455'. [ 312.337824][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4455'. [ 312.538755][ T31] audit: type=1400 audit(312.509:1176): avc: denied { watch } for pid=15894 comm="syz.4.4459" path="pipe:[48371]" dev="pipefs" ino=48371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 312.631435][T15901] netlink: 'syz.3.4462': attribute type 4 has an invalid length. [ 312.631450][T15901] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4462'. [ 312.930228][T15921] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4470'. [ 312.935282][T15920] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4471'. [ 313.404440][ T31] audit: type=1400 audit(313.369:1177): avc: denied { watch watch_reads } for pid=15945 comm="syz.3.4484" path="/syzcgroup/net/syz3/devices.allow" dev="cgroup" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 313.534008][T15952] i2c i2c-0: delete_device: Can't find device in list [ 313.673776][T15958] ip6erspan0: entered allmulticast mode [ 313.695282][T15960] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 313.835356][ T31] audit: type=1400 audit(313.799:1178): avc: denied { mount } for pid=15963 comm="syz.5.4492" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 313.886993][T15966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4493'. [ 313.909700][ T31] audit: type=1400 audit(313.879:1179): avc: denied { unmount } for pid=13373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 314.272928][T15987] overlayfs: upper fs does not support file handles, falling back to index=off. [ 314.272945][T15987] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 314.509641][ T126] wiimote 0005:057E:0306.0051: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 314.510696][ T126] wiimote 0005:057E:0306.0051: New device registered [ 314.537264][ T5717] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 314.692480][ T5717] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 314.693314][ T5717] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.693333][ T5717] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.693347][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.693365][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.694931][ T5717] usb 4-1: config 0 descriptor?? [ 314.742578][ T5722] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 314.806649][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.806693][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.806713][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.806731][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.917731][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 314.918710][ T5722] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 314.919129][ T5722] usb 1-1: config 0 has no interfaces? [ 314.920928][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.920943][ T5722] usb 1-1: Product: syz [ 314.920951][ T5722] usb 1-1: Manufacturer: syz [ 314.920960][ T5722] usb 1-1: SerialNumber: syz [ 314.978638][ T5722] usb 1-1: config 0 descriptor?? [ 315.192398][ T31] audit: type=1326 audit(315.159:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.4.4516" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349c39e199 code=0x7ffc0000 [ 315.192455][ T31] audit: type=1326 audit(315.159:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.4.4516" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349c39e199 code=0x7ffc0000 [ 315.226449][ T31] audit: type=1326 audit(315.199:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.4.4516" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f349c39e199 code=0x7ffc0000 [ 315.226480][ T31] audit: type=1326 audit(315.199:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.4.4516" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349c39e199 code=0x7ffc0000 [ 315.226504][ T31] audit: type=1326 audit(315.199:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16017 comm="syz.4.4516" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349c39e199 code=0x7ffc0000 [ 315.342041][T16003] wiimote 0005:057E:0306.0051: Unhandled report 32 size 2 [ 315.356926][ T5717] thrustmaster 0003:044F:B65A.0052: unbalanced collection at end of report description [ 315.357303][ T5717] thrustmaster 0003:044F:B65A.0052: probe with driver thrustmaster failed with error -22 [ 315.360153][T16002] wiimote 0005:057E:0306.0051: Device removed [ 315.405230][ T5717] usb 1-1: USB disconnect, device number 49 [ 315.570471][ T5722] usb 4-1: USB disconnect, device number 46 [ 315.640890][ T126] wiimote 0005:057E:0306.0051: detected device: Nintendo Wii Remote (Gen 1) [ 315.767595][T16028] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4521'. [ 315.891055][ T126] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0051/input/input57 [ 316.022203][ T126] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0051/input/input58 [ 316.050962][ T126] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0051/input/input56 [ 316.140423][T16038] input: syz0 as /devices/virtual/input/input59 [ 316.747911][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 316.747924][ T31] audit: type=1400 audit(316.719:1206): avc: denied { read write } for pid=16062 comm="syz.4.4537" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 316.748151][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4538'. [ 317.389055][T16089] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 317.786632][ T5797] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 317.938813][ T5797] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 317.939571][ T5797] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 317.939586][ T5797] usb 4-1: config 0 has no interface number 0 [ 317.939607][ T5797] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 317.939622][ T5797] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 317.941092][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 317.941105][ T5797] usb 4-1: Manufacturer: syz [ 317.941114][ T5797] usb 4-1: SerialNumber: syz [ 317.946790][ T5797] usb 4-1: config 0 descriptor?? [ 318.060891][ T31] audit: type=1400 audit(319.024:1207): avc: denied { bind } for pid=16119 comm="syz.5.4563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 318.062119][ T31] audit: type=1400 audit(319.024:1208): avc: denied { listen } for pid=16119 comm="syz.5.4563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 318.212274][T16123] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 318.616724][ T5797] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 318.640652][ T5797] usb 4-1: USB disconnect, device number 47 [ 319.625154][ T31] audit: type=1400 audit(320.584:1209): avc: denied { read write } for pid=16175 comm="syz.4.4590" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 319.625190][ T31] audit: type=1400 audit(320.584:1210): avc: denied { open } for pid=16175 comm="syz.4.4590" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 319.789657][T16182] bond0: invalid ARP target specified [ 320.016909][T16192] fuse-io-uring is disabled by module parameter [ 320.016967][ T31] audit: type=1400 audit(320.984:1211): avc: denied { cmd } for pid=16191 comm="syz.6.4598" path="/dev/cuse" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=io_uring permissive=1 [ 320.074755][T16190] rt1711h 0-0004: probe with driver rt1711h failed with error -5 [ 320.122009][T16190] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04 [ 320.534195][T16206] ªªªªªª: renamed from vlan0 (while UP) [ 320.546612][ T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.006804][ T5715] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 321.080028][T16228] loop9: detected capacity change from 0 to 7 [ 321.098149][T16228] Dev loop9: unable to read RDB block 7 [ 321.098176][T16228] loop9: unable to read partition table [ 321.098284][T16228] loop9: partition table beyond EOD, truncated [ 321.098303][T16228] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 321.156772][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 321.158748][ T5715] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 321.164484][ T5715] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 321.164501][ T5715] usb 4-1: config 0 has no interface number 0 [ 321.183408][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.183424][ T5715] usb 4-1: Product: syz [ 321.183432][ T5715] usb 4-1: Manufacturer: syz [ 321.183440][ T5715] usb 4-1: SerialNumber: syz [ 321.194414][ T5715] usb 4-1: config 0 descriptor?? [ 321.238762][ T5715] hub 4-1:0.132: bad descriptor, ignoring hub [ 321.238780][ T5715] hub 4-1:0.132: probe with driver hub failed with error -5 [ 321.253344][ T5715] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input61 [ 321.397563][T16232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.646550][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4620'. [ 322.736338][T16281] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 322.736965][ T126] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 323.049214][ T31] audit: type=1807 audit(324.014:1212): action=appraise func=MO res=0 [ 323.049340][ T31] audit: type=1802 audit(324.014:1213): pid=16297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.3.4647" res=0 errno=0 [ 323.049619][T16295] ima: policy update failed [ 323.049687][ T31] audit: type=1802 audit(324.014:1214): pid=16295 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.4647" res=0 errno=0 [ 323.283460][ T31] audit: type=1400 audit(324.244:1215): avc: denied { read } for pid=16304 comm="syz.3.4651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 323.442192][ T5611] Bluetooth: hci4: unexpected event for opcode 0x202d [ 323.615316][T16312] loop6: detected capacity change from 0 to 8 [ 323.641494][T16312] loop6: detected capacity change from 8 to 0 [ 323.915628][ T31] audit: type=1400 audit(324.874:1216): avc: denied { write } for pid=16325 comm="syz.4.4661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 324.169193][T16340] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 324.302954][T16340] CIFS: VFS: Error connecting to socket. Aborting operation. [ 324.303143][T16340] CIFS: VFS: cifs_mount failed w/return code = -111 [ 324.629910][ T5715] usb 4-1: USB disconnect, device number 48 [ 324.718662][ T5611] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 325.112143][ T5611] block nbd2: Receive control failed (result -32) [ 325.467150][T16390] netlink: 'syz.6.4691': attribute type 2 has an invalid length. [ 325.467166][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4691'. [ 326.526553][T16449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4719'. [ 327.083975][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4735'. [ 327.197911][ T31] audit: type=1400 audit(328.164:1217): avc: denied { bind } for pid=16487 comm="syz.6.4737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 327.199264][ T31] audit: type=1400 audit(328.164:1218): avc: denied { name_bind } for pid=16487 comm="syz.6.4737" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 327.199293][ T31] audit: type=1400 audit(328.164:1219): avc: denied { node_bind } for pid=16487 comm="syz.6.4737" saddr=172.20.20.42 src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 327.776975][ T5722] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 327.927764][ T5722] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 327.928535][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 327.928554][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 327.928576][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.930110][ T5722] usb 4-1: config 0 descriptor?? [ 327.930947][T16496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 328.350328][ T5722] hid_parser_main: 24 callbacks suppressed [ 328.350345][ T5722] cypress 0003:04B4:BCA1.0053: unknown main item tag 0x0 [ 328.350363][ T5722] cypress 0003:04B4:BCA1.0053: unknown main item tag 0x0 [ 328.350377][ T5722] cypress 0003:04B4:BCA1.0053: unknown main item tag 0x0 [ 328.350392][ T5722] cypress 0003:04B4:BCA1.0053: unknown main item tag 0x0 [ 328.350407][ T5722] cypress 0003:04B4:BCA1.0053: unknown main item tag 0x0 [ 328.350422][ T5722] cypress 0003:04B4:BCA1.0053: unknown main item tag 0x0 [ 328.350436][ T5722] cypress 0003:04B4:BCA1.0053: unknown main item tag 0x0 [ 328.350450][ T5722] cypress 0003:04B4:BCA1.0053: unknown main item tag 0x0 [ 328.350464][ T5722] cypress 0003:04B4:BCA1.0053: unknown main item tag 0x0 [ 328.350478][ T5722] cypress 0003:04B4:BCA1.0053: unknown main item tag 0x0 [ 328.448863][ T5722] cypress 0003:04B4:BCA1.0053: hidraw0: USB HID v7f.fd Device [HID 04b4:bca1] on usb-dummy_hcd.3-1/input0 [ 328.555846][ T5611] block nbd3: Receive control failed (result -32) [ 328.565301][ T5612] block nbd3: Receive control failed (result -32) [ 328.585525][ T5722] usb 4-1: USB disconnect, device number 49 [ 328.645819][T16531] fido_id[16531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 328.869706][T16545] zero sized request [ 328.955583][T16553] netlink: 'syz.6.4765': attribute type 7 has an invalid length. [ 328.955597][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4765'. [ 328.955615][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4765'. [ 329.315873][T16566] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4770'. [ 329.792103][ T31] audit: type=1400 audit(330.754:1220): avc: denied { write } for pid=16586 comm="syz.6.4781" name="cgroup.subtree_control" dev="cgroup2" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.823868][ T31] audit: type=1400 audit(330.794:1221): avc: denied { open } for pid=16586 comm="syz.6.4781" path="" dev="cgroup2" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.874196][ T31] audit: type=1400 audit(330.834:1222): avc: denied { ioctl } for pid=16586 comm="syz.6.4781" path="" dev="cgroup2" ino=403 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 330.126462][T16603] sda1: Can't mount, would change RO state [ 330.216279][ T5722] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 330.374498][ T5722] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 330.375119][ T5722] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 330.375140][ T5722] usb 1-1: can't read configurations, error -71 [ 331.046934][T16625] misc userio: Can't change port type on an already running userio instance [ 331.211883][ T31] audit: type=1400 audit(332.184:1223): avc: denied { write } for pid=16630 comm="syz.4.4803" name="usb_gadget" dev="configfs" ino=3696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 331.535525][T16635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.535638][T16635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.535716][T16635] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 331.535790][T16635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 331.835473][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4809'. [ 332.094173][ T31] audit: type=1400 audit(333.054:1224): avc: denied { read } for pid=16652 comm="syz.3.4812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 332.128746][T16653] tmpfs: Too few inodes for current use [ 332.992521][T16682] sd 0:0:1:0: PR command failed: 1026 [ 332.992558][T16682] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 332.992581][T16682] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 333.199098][ T5722] kernel read not supported for file /dsp1 (pid: 5722 comm: kworker/0:6) [ 333.476788][ T5612] Bluetooth: hci0: command 0x0401 tx timeout [ 333.492302][T16696] nbd: nbd5 already in use [ 333.556853][ T5611] Bluetooth: hci4: command 0x2016 tx timeout [ 333.556881][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 333.556914][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 333.683460][ T31] audit: type=1400 audit(334.644:1225): avc: denied { append } for pid=16699 comm="syz.3.4834" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 334.693360][T16746] ip_tables: iptables: counters copy to user failed while replacing table [ 336.228998][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4881'. [ 336.529340][T16818] loop3: detected capacity change from 0 to 7 [ 336.572237][T16818] Dev loop3: unable to read RDB block 7 [ 336.572274][T16818] loop3: AHDI p1 p2 [ 336.572286][T16818] loop3: partition table partially beyond EOD, truncated [ 336.572428][T16818] loop3: p1 start 1702000233 is beyond EOD, truncated [ 336.917940][ T5717] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 337.002455][T16842] netlink: 'syz.4.4901': attribute type 1 has an invalid length. [ 337.071240][ T5717] usb 4-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 337.075129][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.075150][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.077275][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 337.077292][ T5717] usb 4-1: Product: syz [ 337.077301][ T5717] usb 4-1: Manufacturer: syz [ 337.135596][ T5717] navman 4-1:1.0: navman converter detected [ 337.153761][ T5717] usb 4-1: navman converter now attached to ttyUSB0 [ 337.375094][T16825] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90 [ 337.394870][ T5717] usb 4-1: USB disconnect, device number 50 [ 337.414065][ T5717] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 337.414379][ T5717] navman 4-1:1.0: device disconnected [ 338.397218][ T31] audit: type=1400 audit(339.354:1226): avc: denied { bind } for pid=16872 comm="syz.4.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 338.581438][T16887] netlink: 'syz.6.4922': attribute type 2 has an invalid length. [ 339.975774][T16940] IPv6: Can't replace route, no match found [ 339.975886][T16940] IPv6: Can't replace route, no match found [ 340.764281][T16961] ftl_cs: FTL header not found. [ 341.339988][T16975] sd 0:0:1:0: PR command failed: 1026 [ 341.340016][T16975] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 341.340048][T16975] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 341.401721][T16961] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 341.960732][ T31] audit: type=1400 audit(342.914:1227): avc: denied { append } for pid=16996 comm="syz.6.4970" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 342.281569][T17013] block2mtd: Using custom MTD label '& [ 342.281569][T17013] ' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 342.282057][T17013] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 342.528370][ T31] audit: type=1400 audit(343.494:1228): avc: denied { name_bind } for pid=17022 comm="syz.5.4981" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 343.411070][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4992'. [ 343.411094][T17047] netlink: 'syz.3.4992': attribute type 30 has an invalid length. [ 343.411103][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4992'. [ 343.513231][ T31] audit: type=1400 audit(344.474:1229): avc: denied { mounton } for pid=17048 comm="syz.6.4993" path="/195/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.607721][T17049] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 343.607740][T17049] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 343.757929][T17062] pimreg: entered allmulticast mode [ 343.787905][T17062] netlink: 'syz.3.4998': attribute type 3 has an invalid length. [ 343.787922][T17062] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4998'. [ 344.032385][T17076] ip_tables: iptables: counters copy to user failed while replacing table [ 344.506605][ T5717] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 344.526879][T17100] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 344.656977][ T5717] usb 1-1: Using ep0 maxpacket: 16 [ 344.657400][ T5717] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 344.658156][ T5717] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.658169][ T5717] usb 1-1: config 0 has no interfaces? [ 344.658186][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.660323][ T5717] usb 1-1: config 0 descriptor?? [ 344.813899][ T31] audit: type=1400 audit(345.774:1230): avc: denied { getopt } for pid=17111 comm="syz.3.5024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.881737][ T5717] usb 1-1: USB disconnect, device number 52 [ 345.187945][T17126] veth1_macvtap: left promiscuous mode [ 345.187965][T17126] macsec0: entered allmulticast mode [ 345.223583][T17126] veth1_macvtap: entered promiscuous mode [ 345.223599][T17126] veth1_macvtap: entered allmulticast mode [ 345.223709][T17126] macsec0: left allmulticast mode [ 345.223717][T17126] veth1_macvtap: left allmulticast mode [ 345.292769][T17128] netlink: 'syz.5.5031': attribute type 2 has an invalid length. [ 345.363947][T17128] ´: entered promiscuous mode [ 345.388720][T17133] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5033'. [ 345.576450][T17143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5038'. [ 345.576473][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5038'. [ 345.576481][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5038'. [ 346.494852][T17161] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input63 [ 347.000529][T17176] overlayfs: upper fs does not support file handles, falling back to index=off. [ 347.000539][T17176] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 347.144293][T17185] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.290503][T17196] SELinux: ebitmap: empty map [ 347.290539][T17196] SELinux: failed to load policy [ 347.355421][T17195] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 347.953231][ T31] audit: type=1400 audit(348.914:1231): avc: denied { map } for pid=17215 comm="syz.0.5071" path="socket:[55366]" dev="sockfs" ino=55366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 347.953273][ T31] audit: type=1400 audit(348.914:1232): avc: denied { read } for pid=17215 comm="syz.0.5071" path="socket:[55366]" dev="sockfs" ino=55366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.049991][T17220] xt_hashlimit: size too large, truncated to 1048576 [ 348.115798][T17224] xt_hashlimit: size too large, truncated to 1048576 [ 348.333036][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5077'. [ 348.566212][ T50] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.566273][ T50] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.566293][ T50] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.566311][ T50] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.983324][T17260] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 349.812562][T17299] sd 0:0:1:0: PR command failed: 1026 [ 349.812591][T17299] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 349.812614][T17299] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 350.402385][T17313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5116'. [ 350.640096][T17322] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5120'. [ 350.743418][ T126] kernel read not supported for file /dsp (pid: 126 comm: kworker/0:2) [ 350.877128][T17332] netlink: 165 bytes leftover after parsing attributes in process `syz.5.5125'. [ 351.174196][T17345] ima: policy update failed [ 351.174299][ T31] audit: type=1802 audit(352.134:1233): pid=17345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.5132" res=0 errno=0 [ 351.301732][T17354] xt_limit: Overflow, try lower: 0/0 [ 351.788785][T17372] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 351.896467][T17378] macvlan0: entered promiscuous mode [ 351.896657][T17378] netlink: 'syz.0.5147': attribute type 1 has an invalid length. [ 351.896666][T17378] netlink: 'syz.0.5147': attribute type 2 has an invalid length. [ 352.103147][T17383] hub 5-0:1.0: USB hub found [ 352.104332][T17383] hub 5-0:1.0: 1 port detected [ 352.174054][T17387] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 352.495725][T17397] openvswitch: netlink: VLAN attribute unexpected. [ 352.635651][T17400] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 352.635669][T17400] CPU: 0 UID: 0 PID: 17400 Comm: syz.4.5157 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.635687][T17400] Tainted: [L]=SOFTLOCKUP [ 352.635692][T17400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 352.635700][T17400] Call Trace: [ 352.635704][T17400] [ 352.635710][T17400] dump_stack_lvl+0x100/0x190 [ 352.635734][T17400] sysfs_warn_dup.cold+0x1c/0x28 [ 352.635753][T17400] sysfs_create_dir_ns+0x24b/0x2b0 [ 352.635771][T17400] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 352.635794][T17400] ? find_held_lock+0x2b/0x80 [ 352.635813][T17400] ? kobject_add_internal+0x25f/0x930 [ 352.635830][T17400] ? kobject_add_internal+0x25f/0x930 [ 352.635847][T17400] ? class_dir_child_ns_type+0xd/0x60 [ 352.635866][T17400] kobject_add_internal+0x2c8/0x930 [ 352.635885][T17400] kobject_add+0x16a/0x1e0 [ 352.635900][T17400] ? __pfx_kobject_add+0x10/0x10 [ 352.635917][T17400] ? get_device_parent+0x1b3/0x4c0 [ 352.635933][T17400] ? kobject_put+0xb9/0x640 [ 352.635952][T17400] device_add+0x294/0x1970 [ 352.635970][T17400] ? lockdep_init_map_type+0x5c/0x250 [ 352.635984][T17400] ? __pfx_device_add+0x10/0x10 [ 352.636003][T17400] ? lockdep_init_map_type+0x5c/0x250 [ 352.636017][T17400] ? __init_waitqueue_head+0xca/0x150 [ 352.636036][T17400] tty_register_device_attr+0x388/0x810 [ 352.636052][T17400] ? lockdep_init_map_type+0x5c/0x250 [ 352.636066][T17400] ? __pfx_tty_register_device_attr+0x10/0x10 [ 352.636086][T17400] ? tty_port_init+0x156/0x1c0 [ 352.636104][T17400] gsm_activate_mux+0x155/0x2a0 [ 352.636120][T17400] gsmld_ioctl+0xbbc/0x15c0 [ 352.636135][T17400] ? kasan_quarantine_put+0x104/0x240 [ 352.636149][T17400] ? __pfx_gsmld_ioctl+0x10/0x10 [ 352.636172][T17400] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 352.636187][T17400] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 352.636202][T17400] ? __pfx_gsmld_ioctl+0x10/0x10 [ 352.636212][T17400] tty_ioctl+0x12f0/0x1800 [ 352.636228][T17400] ? __pfx_tty_ioctl+0x10/0x10 [ 352.636242][T17400] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 352.636259][T17400] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 352.636277][T17400] ? __fget_files+0x34/0x3d0 [ 352.636301][T17400] ? selinux_file_ioctl+0x13b/0x290 [ 352.636315][T17400] ? selinux_file_ioctl+0xb6/0x290 [ 352.636332][T17400] ? __pfx_tty_ioctl+0x10/0x10 [ 352.636349][T17400] __x64_sys_ioctl+0x18e/0x210 [ 352.636363][T17400] do_syscall_64+0x123/0x790 [ 352.636378][T17400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.636390][T17400] RIP: 0033:0x7f349c39e199 [ 352.636401][T17400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.636413][T17400] RSP: 002b:00007f349d2fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.636424][T17400] RAX: ffffffffffffffda RBX: 00007f349c626090 RCX: 00007f349c39e199 [ 352.636433][T17400] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 352.636440][T17400] RBP: 00007f349c435888 R08: 0000000000000000 R09: 0000000000000000 [ 352.636447][T17400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.636454][T17400] R13: 00007f349c626128 R14: 00007f349c626090 R15: 00007ffc29cf27c8 [ 352.636471][T17400] [ 352.957820][T17400] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 353.091676][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5158'. [ 353.997669][T17426] rnbd_client L127: Can't parse path i: -93 [ 354.342155][T17440] pim6reg: entered allmulticast mode [ 354.370141][T17440] pim6reg: left allmulticast mode [ 354.419933][ T31] audit: type=1400 audit(355.384:1234): avc: denied { read } for pid=17442 comm="syz.5.5177" path="socket:[56390]" dev="sockfs" ino=56390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 354.470114][T17447] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5177'. [ 354.539172][T17448] netlink: 'syz.4.5179': attribute type 3 has an invalid length. [ 354.539188][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5179'. [ 354.839392][ T31] audit: type=1400 audit(355.804:1235): avc: denied { read } for pid=17460 comm="syz.6.5185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 355.424224][T17478] input: syz0 as /devices/virtual/input/input64 [ 356.286128][ T126] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 356.436413][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 356.437043][ T126] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 356.440775][ T126] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 356.440801][ T126] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.440817][ T126] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 356.440832][ T126] usb 4-1: config 0 interface 0 has no altsetting 0 [ 356.440849][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.442413][ T126] usb 4-1: config 0 descriptor?? [ 356.638383][T17510] ima: policy update failed [ 356.638487][ T31] audit: type=1802 audit(357.604:1236): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.6.5205" res=0 errno=0 [ 356.678829][T17515] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5207'. [ 356.678846][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5207'. [ 356.836604][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 356.929053][ T126] bigben 0003:146B:0902.0054: unexpected rdesc, please submit for review [ 356.929359][ T126] hid_parser_main: 206 callbacks suppressed [ 356.929370][ T126] bigben 0003:146B:0902.0054: unknown main item tag 0x0 [ 356.929391][ T126] bigben 0003:146B:0902.0054: unknown main item tag 0x0 [ 356.929406][ T126] bigben 0003:146B:0902.0054: unknown main item tag 0x0 [ 356.929422][ T126] bigben 0003:146B:0902.0054: unknown main item tag 0x0 [ 356.929437][ T126] bigben 0003:146B:0902.0054: unknown main item tag 0x0 [ 356.929451][ T126] bigben 0003:146B:0902.0054: unknown main item tag 0x0 [ 356.929474][ T126] bigben 0003:146B:0902.0054: unknown main item tag 0x0 [ 356.929490][ T126] bigben 0003:146B:0902.0054: unknown main item tag 0x0 [ 356.929505][ T126] bigben 0003:146B:0902.0054: unknown main item tag 0x0 [ 356.929520][ T126] bigben 0003:146B:0902.0054: unknown main item tag 0x0 [ 357.002201][ T126] bigben 0003:146B:0902.0054: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 357.179553][ T126] usb 4-1: USB disconnect, device number 51 [ 357.252212][T17524] fido_id[17524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 357.484157][T17536] fsa4480 0-0042: error -ENODEV: FSA4480 not found [ 357.484441][T17536] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42 [ 357.772704][ T31] audit: type=1400 audit(358.734:1237): avc: denied { map } for pid=17553 comm="syz.0.5225" path="/dev/usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 357.834636][T17558] tipc: Started in network mode [ 357.834650][T17558] tipc: Node identity , cluster identity 4711 [ 357.834659][T17558] tipc: Failed to obtain node identity [ 357.834676][T17558] tipc: Enabling of bearer rejected, failed to enable media [ 357.877401][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 357.980559][T17562] netlink: 'syz.5.5229': attribute type 10 has an invalid length. [ 358.029129][ T31] audit: type=1400 audit(358.994:1238): avc: denied { read } for pid=17563 comm="syz.6.5230" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 358.029164][ T31] audit: type=1400 audit(358.994:1239): avc: denied { open } for pid=17563 comm="syz.6.5230" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 358.062647][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5231'. [ 358.062669][T17566] netlink: 'syz.0.5231': attribute type 30 has an invalid length. [ 358.062678][T17566] netlink: 'syz.0.5231': attribute type 29 has an invalid length. [ 358.062685][T17566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5231'. [ 358.310862][T17576] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5235'. [ 358.401655][ T31] audit: type=1326 audit(359.364:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.4.5237" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f349c39e199 code=0x0 [ 358.474968][ T31] audit: type=1400 audit(359.434:1241): avc: denied { mounton } for pid=17579 comm="syz.4.5237" path="/proc/1912/task/1913/fd" dev="proc" ino=56917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 358.513059][ T31] audit: type=1400 audit(359.474:1242): avc: denied { listen } for pid=17584 comm="syz.0.5238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 358.673793][ T31] audit: type=1400 audit(359.634:1243): avc: denied { read } for pid=17589 comm="syz.5.5242" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 358.674779][ T31] audit: type=1400 audit(359.634:1244): avc: denied { open } for pid=17589 comm="syz.5.5242" path="/392/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 359.155358][T17598] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 359.169592][T17598] batman_adv: batadv0: Adding interface: gretap1 [ 359.169603][T17598] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.169633][T17598] batman_adv: batadv0: Interface activated: gretap1 [ 359.638477][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 360.395315][ T31] audit: type=1400 audit(361.354:1245): avc: denied { shutdown } for pid=17638 comm="iou-wrk-17640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 360.539130][T17646] ./dev/sda1: Can't open blockdev [ 360.601669][ T126] kernel read not supported for file /media1 (pid: 126 comm: kworker/0:2) [ 361.720981][ T31] audit: type=1400 audit(362.684:1246): avc: denied { override_creds } for pid=17698 comm="syz.3.5290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 361.861189][T17706] loop9: detected capacity change from 0 to 7 [ 361.900964][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.901014][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.904248][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.904305][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.904403][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.904439][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.904525][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.904558][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.904644][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.904677][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.904767][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.904800][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.904869][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.904901][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.904923][T17706] ldm_validate_partition_table(): Disk read failed. [ 361.905268][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.905320][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.905405][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.905439][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.905511][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.905544][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.039509][T17706] Dev loop9: unable to read RDB block 0 [ 362.124703][T17706] loop9: unable to read partition table [ 362.124820][T17706] loop9: partition table beyond EOD, truncated [ 362.124840][T17706] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 363.536544][ T5722] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 363.575299][ T5717] kernel write not supported for file /sequencer2 (pid: 5717 comm: kworker/0:5) [ 363.686237][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 363.686735][ T5722] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 363.687531][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.747299][ T5722] pvrusb2: Hardware description: Terratec Grabster AV400 [ 363.747313][ T5722] pvrusb2: ********** [ 363.747318][ T5722] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 363.747324][ T5722] pvrusb2: Important functionality might not be entirely working. [ 363.747329][ T5722] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 363.747335][ T5722] pvrusb2: ********** [ 363.914395][ T2351] pvrusb2: Invalid write control endpoint [ 364.048122][ T2351] pvrusb2: Invalid write control endpoint [ 364.048136][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 364.048142][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 364.048147][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 364.048153][ T2351] pvrusb2: Device being rendered inoperable [ 364.104168][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 364.104204][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 364.126693][T17733] pvrusb2: Attempted to execute control transfer when device not ok [ 364.129214][ T5722] usb 5-1: USB disconnect, device number 25 [ 364.190221][ T2351] pvrusb2: Attached sub-driver cx25840 [ 364.190234][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 364.190240][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 364.753778][ T31] audit: type=1400 audit(365.724:1247): avc: denied { setopt } for pid=17752 comm="syz.0.5311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 364.754339][ T31] audit: type=1400 audit(365.724:1248): avc: denied { bind } for pid=17752 comm="syz.0.5311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 365.069930][T17768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5318'. [ 365.131191][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5318'. [ 365.164914][ T31] audit: type=1400 audit(366.134:1249): avc: denied { attach_queue } for pid=17769 comm="syz.3.5319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 365.469369][ T31] audit: type=1400 audit(366.434:1250): avc: denied { execute } for pid=17783 comm="syz.5.5325" path="/409/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 365.670107][T17797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.891059][T17854] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5357'. [ 366.891077][T17854] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5357'. [ 367.259528][T17867] openvswitch: netlink: Flow key attribute not present in set flow. [ 367.264863][T17867] openvswitch: netlink: Flow key attribute not present in set flow. [ 367.484862][T17880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5370'. [ 367.484895][T17880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5370'. [ 368.163764][T17886] kAFS: Invalid Command on /proc/fs/afs/cells file [ 368.244634][ T31] audit: type=1400 audit(369.204:1251): avc: denied { write } for pid=17887 comm="syz.6.5373" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 369.088355][ T31] audit: type=1400 audit(370.054:1252): avc: denied { read } for pid=17923 comm="syz.0.5391" name="features" dev="configfs" ino=58542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 369.088391][ T31] audit: type=1400 audit(370.054:1253): avc: denied { open } for pid=17923 comm="syz.0.5391" path="/1165/config/nullb/features" dev="configfs" ino=58542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 369.323790][T17931] openvswitch: netlink: IPv4 tunnel dst address is zero [ 369.323811][T17931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.675437][ T31] audit: type=1400 audit(370.634:1254): avc: denied { getopt } for pid=17939 comm="syz.6.5397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.701648][T17940] 9p: Unknown uid 00000000004294967295 [ 369.966535][ T5717] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 370.118074][ T5717] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 370.118869][ T5717] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 370.118897][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.119906][ T5717] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 370.119920][ T5717] usb 4-1: Manufacturer: syz [ 370.121402][ T5717] usb 4-1: config 0 descriptor?? [ 370.297090][ T5717] rc_core: IR keymap rc-hauppauge not found [ 370.297102][ T5717] Registered IR keymap rc-empty [ 370.298004][ T5717] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 370.301280][ T5717] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input65 [ 370.576740][ C0] igorplugusb 4-1:0.0: receive overflow invalid: 54 [ 370.785882][ T126] usb 4-1: USB disconnect, device number 52 [ 371.074417][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 371.105967][T17989] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 371.784035][ T126] kernel write not supported for file /input/mice (pid: 126 comm: kworker/0:2) [ 372.195388][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5440'. [ 372.195405][T18033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5440'. [ 372.423430][T18046] input: syz0 as /devices/virtual/input/input66 [ 372.434788][ T31] audit: type=1400 audit(373.394:1255): avc: denied { read } for pid=18044 comm="syz.4.5445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 372.482963][T18047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.663829][T18058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5452'. [ 372.663922][T18058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5452'. [ 373.077529][ T5612] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 373.170888][ T31] audit: type=1400 audit(374.134:1256): avc: denied { ioctl } for pid=18074 comm="syz.5.5459" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 373.243241][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.243292][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.433109][T18089] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5465'. [ 374.119993][ T31] audit: type=1326 audit(375.084:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.4.5482" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f349c39e199 code=0x0 [ 374.271406][ T31] audit: type=1807 audit(375.234:1258): action=appraise func=MODULE_CHECK res=1 [ 374.272502][T18128] ima: policy update completed [ 374.272582][ T31] audit: type=1802 audit(375.234:1259): pid=18128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.6.5484" res=1 errno=0 [ 374.411081][T18132] 9pnet_fd: p9_fd_create_tcp (18132): problem binding to privport [ 374.916982][ T126] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 375.067821][ T126] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 375.069523][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.106458][ T126] usb 6-1: config 0 descriptor?? [ 375.110295][ T126] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 375.314486][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5505'. [ 375.784073][ T126] gp8psk: usb in 146 operation failed. [ 375.784087][ T126] gp8psk: failed to get FW version [ 375.785121][ T126] gp8psk: usb in 149 operation failed. [ 375.785131][ T126] gp8psk: failed to get FPGA version [ 375.807086][ T126] gp8psk: usb out operation failed. [ 375.807098][ T126] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 375.807126][ T126] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 375.846456][ T126] usb 6-1: USB disconnect, device number 10 [ 375.941408][ T31] audit: type=1400 audit(376.904:1260): avc: denied { write } for pid=18166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.124050][ T31] audit: type=1400 audit(377.084:1261): avc: denied { write } for pid=18204 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.929144][ T126] kernel write not supported for file /943/attr/prev (pid: 126 comm: kworker/0:2) [ 377.059972][ T31] audit: type=1400 audit(378.024:1262): avc: denied { write } for pid=18211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.244260][ T31] audit: type=1400 audit(378.214:1263): avc: denied { write } for pid=18249 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.575928][T18276] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5541'. [ 378.575952][T18276] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5541'. [ 378.575963][T18276] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5541'. [ 379.076278][T18238] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 379.076809][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 379.874371][T18238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 379.874891][T18238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.066760][T18287] usbcore.quirks: string doesn't fit in 127 chars. [ 380.143134][T18286] pimreg: tun_chr_ioctl cmd 1074025672 [ 380.143152][T18286] pimreg: ignored: set checksum enabled [ 381.156498][ T52] Bluetooth: hci4: command 0x2016 tx timeout [ 381.337388][ T31] audit: type=1400 audit(382.294:1264): avc: denied { getopt } for pid=18335 comm="syz.5.5565" laddr=224.0.0.1 faddr=127.0.0.1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 381.643381][T18351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.822334][ T31] audit: type=1400 audit(382.784:1265): avc: denied { write } for pid=18315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.877426][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 382.141806][ T31] audit: type=1400 audit(383.104:1266): avc: denied { write } for pid=18364 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.708897][ T31] audit: type=1400 audit(383.674:1267): avc: denied { ioctl } for pid=18388 comm="syz.6.5581" path="net:[4026532784]" dev="nsfs" ino=4026532784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 383.265242][ T31] audit: type=1400 audit(384.224:1268): avc: denied { write } for pid=18375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.529311][ T31] audit: type=1400 audit(384.494:1269): avc: denied { write } for pid=18421 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.004001][T18431] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 384.004027][T18431] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 384.452576][ T31] audit: type=1400 audit(385.414:1270): avc: denied { mount } for pid=18445 comm="syz.4.5605" name="/" dev="hugetlbfs" ino=60658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 385.266605][ T126] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 385.310909][T18486] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x200000608 pfn:0x48004 [ 385.310939][T18486] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 385.310957][T18486] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 385.310974][T18486] raw: 0000000200000608 0000000000000000 00000001ffffffff 0000000000000000 [ 385.310981][T18486] page dumped because: unmovable page [ 385.310989][T18486] page_owner tracks the page as allocated [ 385.310994][T18486] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 13361, tgid 13361 (syz-executor), ts 245144874197 [ 385.311013][T18486] post_alloc_hook+0xfd/0x120 [ 385.311030][T18486] get_page_from_freelist+0x110d/0x35d0 [ 385.311042][T18486] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 385.311056][T18486] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 385.311069][T18486] __kasan_populate_vmalloc+0xf0/0x210 [ 385.311083][T18486] alloc_vmap_area+0x95d/0x2bb0 [ 385.311097][T18486] __get_vm_area_node+0x1ed/0x350 [ 385.311111][T18486] __vmalloc_node_range_noprof+0x268/0x1420 [ 385.311127][T18486] vmalloc_user_noprof+0x9e/0xe0 [ 385.311143][T18486] kcov_ioctl+0x4d/0x760 [ 385.311155][T18486] __x64_sys_ioctl+0x18e/0x210 [ 385.311168][T18486] do_syscall_64+0x123/0x790 [ 385.311181][T18486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.311192][T18486] page last free pid 10 tgid 10 ts 242396965355 stack trace: [ 385.311200][T18486] __free_frozen_pages+0x79f/0x10f0 [ 385.311218][T18486] __folio_put+0x3b4/0x5f0 [ 385.311235][T18486] gup_put_folio+0x1cb/0x270 [ 385.311270][T18486] unpin_user_pages_dirty_lock+0x1de/0x350 [ 385.311286][T18486] xdp_umem_release+0x11a/0x2b0 [ 385.311304][T18486] process_one_work+0xac7/0x1b10 [ 385.311323][T18486] worker_thread+0x5ef/0xe50 [ 385.311333][T18486] kthread+0x373/0x450 [ 385.311350][T18486] ret_from_fork+0x730/0xd60 [ 385.311362][T18486] ret_from_fork_asm+0x1a/0x30 [ 385.449788][ T126] usb 6-1: Using ep0 maxpacket: 8 [ 385.529627][ T126] usb 6-1: unable to get BOS descriptor or descriptor too short [ 385.529659][ T126] usb 6-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 385.531609][ T126] usb 6-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 385.531624][ T126] usb 6-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 385.537844][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.537860][ T126] usb 6-1: Product: syz [ 385.537869][ T126] usb 6-1: Manufacturer: syz [ 385.537877][ T126] usb 6-1: SerialNumber: syz [ 385.736228][T18494] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5624'. [ 385.983509][T18503] overlay: filesystem on ./bus not supported as upperdir [ 386.083120][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5633'. [ 386.466502][ T126] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 386.674263][ T126] usb 6-1: unable to get BOS descriptor or descriptor too short [ 386.675900][ T126] usb 6-1: device firmware changed [ 386.708215][ T126] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 386.708273][ T126] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 386.714995][ T126] usb 6-1: USB disconnect, device number 11 [ 386.742321][ T5722] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 386.742501][ T5722] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 386.744612][ T31] audit: type=1400 audit(387.714:1271): avc: denied { firmware_load } for pid=5722 comm="kworker/0:6" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 395.928881][ C0] sched: DL replenish lagged too much [ 414.200141][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.777685][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.790198][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 492.035996][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 492.042959][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18538/1:b..l [ 492.050928][ C0] rcu: (detected by 0, t=10502 jiffies, g=104113, q=745 ncpus=1) [ 492.058727][ C0] task:syz.4.5647 state:R running task stack:26488 pid:18538 tgid:18538 ppid:5607 task_flags:0x400040 flags:0x00080002 [ 492.072199][ C0] Call Trace: [ 492.075466][ C0] [ 492.078380][ C0] __schedule+0x1259/0x6920 [ 492.082886][ C0] ? lock_acquire+0x1d1/0x380 [ 492.087559][ C0] ? __pfx___schedule+0x10/0x10 [ 492.092420][ C0] ? rcu_is_watching+0x13/0xc0 [ 492.097609][ C0] preempt_schedule_irq+0x4e/0x90 [ 492.102614][ C0] irqentry_exit+0x205/0xa10 [ 492.107186][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 492.113140][ C0] RIP: 0010:unwind_next_frame+0x4d6/0x2090 [ 492.118927][ C0] Code: e8 6f f3 ff ff 48 89 c1 48 85 c0 0f 84 dc 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 <4c> 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 51 15 00 00 0f b6 41 05 [ 492.138512][ C0] RSP: 0018:ffffc90005536cd8 EFLAGS: 00000a07 [ 492.144552][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff91e8c472 [ 492.152498][ C0] RDX: 1ffffffff23d188e RSI: 0000000000000000 RDI: ffffffff915e9fd0 [ 492.160438][ C0] RBP: ffffc90005536d90 R08: ffffffff91e8c4ae R09: 0000000000000007 [ 492.168710][ C0] R10: 0000000000000200 R11: 000000000000c82b R12: ffffc90005536d98 [ 492.176674][ C0] R13: ffffc90005536d48 R14: ffffc90005536d7d R15: ffffffff91e8c477 [ 492.184641][ C0] ? unwind_next_frame+0x2ec/0x2090 [ 492.189834][ C0] ? __do_sys_clone3+0x214/0x290 [ 492.194765][ C0] ? unwind_next_frame+0x3be/0x2090 [ 492.199943][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 492.206082][ C0] arch_stack_walk+0x94/0xf0 [ 492.210666][ C0] ? __do_sys_clone3+0x214/0x290 [ 492.215577][ C0] stack_trace_save+0x8e/0xc0 [ 492.220227][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 492.225574][ C0] ? lock_acquire+0x1d1/0x380 [ 492.230227][ C0] save_stack+0x162/0x1e0 [ 492.234530][ C0] ? __pfx_save_stack+0x10/0x10 [ 492.239358][ C0] ? post_alloc_hook+0xfd/0x120 [ 492.244181][ C0] ? get_page_from_freelist+0x110d/0x35d0 [ 492.249877][ C0] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 492.255933][ C0] ? alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 492.261641][ C0] ? __kasan_populate_vmalloc+0xf0/0x210 [ 492.267263][ C0] ? alloc_vmap_area+0x95d/0x2bb0 [ 492.272264][ C0] ? __get_vm_area_node+0x1ed/0x350 [ 492.277437][ C0] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 492.283480][ C0] ? __vmalloc_node_noprof+0xad/0xf0 [ 492.288747][ C0] ? copy_process+0x803/0x8380 [ 492.293505][ C0] ? kernel_clone+0x176/0x9d0 [ 492.298430][ C0] ? __do_sys_clone3+0x214/0x290 [ 492.303356][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 492.308373][ C0] __set_page_owner+0x8c/0x540 [ 492.313135][ C0] ? prep_compound_page+0x4b0/0x570 [ 492.318314][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 492.323686][ C0] ? bad_range+0x257/0x3f0 [ 492.328100][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 492.333306][ C0] ? get_page_from_freelist+0x10e6/0x35d0 [ 492.339019][ C0] post_alloc_hook+0xfd/0x120 [ 492.343678][ C0] get_page_from_freelist+0x110d/0x35d0 [ 492.349231][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 492.355187][ C0] ? prepare_alloc_pages+0x1f0/0x5b0 [ 492.360719][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 492.366625][ C0] ? prepare_alloc_pages+0x131/0x5b0 [ 492.371888][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 492.377065][ C0] ? rcu_is_watching+0x13/0xc0 [ 492.381805][ C0] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 492.387849][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 492.394608][ C0] ? stack_trace_save+0x8e/0xc0 [ 492.399441][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 492.404785][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 492.410924][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 492.417224][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 492.422402][ C0] ? kasan_save_track+0x14/0x30 [ 492.427229][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 492.432228][ C0] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 492.438272][ C0] ? alloc_vmap_area+0x640/0x2bb0 [ 492.443268][ C0] ? __get_vm_area_node+0x1ed/0x350 [ 492.448437][ C0] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 492.454489][ C0] ? __vmalloc_node_noprof+0xad/0xf0 [ 492.459753][ C0] ? copy_process+0x803/0x8380 [ 492.464594][ C0] ? kernel_clone+0x176/0x9d0 [ 492.469255][ C0] ? __do_sys_clone3+0x214/0x290 [ 492.474168][ C0] ? do_syscall_64+0x123/0x790 [ 492.478915][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.484977][ C0] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 492.490600][ C0] ? policy_nodemask+0xed/0x4f0 [ 492.495438][ C0] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 492.501418][ C0] __kasan_populate_vmalloc+0xf0/0x210 [ 492.506872][ C0] alloc_vmap_area+0x95d/0x2bb0 [ 492.511721][ C0] ? kasan_save_track+0x14/0x30 [ 492.516550][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 492.521305][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 492.526568][ C0] ? __get_vm_area_node+0x124/0x350 [ 492.531847][ C0] __get_vm_area_node+0x1ed/0x350 [ 492.536853][ C0] __vmalloc_node_range_noprof+0x268/0x1420 [ 492.543169][ C0] ? kernel_clone+0x176/0x9d0 [ 492.548005][ C0] ? lock_acquire+0x1d1/0x380 [ 492.552785][ C0] ? kernel_clone+0x176/0x9d0 [ 492.557574][ C0] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 492.563784][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 492.570126][ C0] ? rcu_is_watching+0x13/0xc0 [ 492.574899][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 492.580357][ C0] ? kernel_clone+0x176/0x9d0 [ 492.585015][ C0] __vmalloc_node_noprof+0xad/0xf0 [ 492.590112][ C0] ? kernel_clone+0x176/0x9d0 [ 492.594774][ C0] copy_process+0x803/0x8380 [ 492.599351][ C0] ? __page_table_check_ptes_set+0x1d5/0x530 [ 492.605331][ C0] ? find_held_lock+0x2b/0x80 [ 492.610017][ C0] ? lock_acquire+0x1d1/0x380 [ 492.614688][ C0] ? __pfx_copy_process+0x10/0x10 [ 492.619703][ C0] ? _copy_from_user+0x59/0xd0 [ 492.624466][ C0] kernel_clone+0x176/0x9d0 [ 492.628966][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 492.634320][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 492.639848][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 492.644763][ C0] __do_sys_clone3+0x214/0x290 [ 492.649525][ C0] ? __pfx___do_sys_clone3+0x10/0x10 [ 492.654789][ C0] ? __might_fault+0xc5/0x140 [ 492.659453][ C0] ? _copy_to_user+0xaf/0xd0 [ 492.664068][ C0] do_syscall_64+0x123/0x790 [ 492.668649][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.674528][ C0] RIP: 0033:0x7f349c39ef89 [ 492.678923][ C0] RSP: 002b:00007ffc29cf2688 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 492.687314][ C0] RAX: ffffffffffffffda RBX: 00007f349c35a520 RCX: 00007f349c39ef89 [ 492.695265][ C0] RDX: 00007f349c35a520 RSI: 0000000000000058 RDI: 00007ffc29cf26e0 [ 492.703213][ C0] RBP: 00007f349d31b6c0 R08: 00007f349d31b6c0 R09: 00007ffc29cf27c7 [ 492.711156][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 492.719111][ C0] R13: 000000000000000b R14: 00007ffc29cf26e0 R15: 00007ffc29cf27c8 [ 492.727068][ C0] [ 492.730077][ C0] rcu: rcu_preempt kthread starved for 800 jiffies! g104113 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 492.740978][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 492.750916][ C0] rcu: RCU grace-period kthread stack dump: [ 492.756774][ C0] task:rcu_preempt state:R running task stack:28984 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 492.770235][ C0] Call Trace: [ 492.773502][ C0] [ 492.776418][ C0] __schedule+0x1259/0x6920 [ 492.780898][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 492.785826][ C0] ? lock_acquire+0x1d1/0x380 [ 492.790486][ C0] ? __pfx___schedule+0x10/0x10 [ 492.795315][ C0] ? find_held_lock+0x2b/0x80 [ 492.799990][ C0] ? schedule+0x225/0x2c0 [ 492.804321][ C0] schedule+0xdd/0x2c0 [ 492.808375][ C0] schedule_timeout+0x127/0x280 [ 492.813226][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 492.818582][ C0] ? __pfx_process_timeout+0x10/0x10 [ 492.823858][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 492.829638][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 492.835074][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 492.839826][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 492.845086][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 492.850001][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 492.855186][ C0] ? rcu_is_watching+0x13/0xc0 [ 492.859943][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 492.865725][ C0] rcu_gp_kthread+0x17a/0x220 [ 492.870988][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 492.876165][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 492.881946][ C0] ? __kthread_parkme+0x18f/0x230 [ 492.886976][ C0] ? kthread+0x13a/0x450 [ 492.891195][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 492.896475][ C0] kthread+0x373/0x450 [ 492.900538][ C0] ? __pfx_kthread+0x10/0x10 [ 492.905113][ C0] ret_from_fork+0x730/0xd60 [ 492.909686][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 492.914789][ C0] ? __switch_to+0x800/0x10f0 [ 492.919448][ C0] ? __pfx_kthread+0x10/0x10 [ 492.924016][ C0] ret_from_fork_asm+0x1a/0x30 [ 492.928767][ C0] [ 492.931846][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 492.938144][ C0] CPU: 0 UID: 0 PID: 3232 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 492.949411][ C0] Tainted: [L]=SOFTLOCKUP [ 492.953704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 492.963753][ C0] Workqueue: bat_events batadv_tt_purge [ 492.969278][ C0] RIP: 0010:stack_access_ok+0x9b/0x1d0 [ 492.974721][ C0] Code: 03 80 3c 02 00 0f 85 0b 01 00 00 48 8b 43 10 49 39 ed 77 1a 48 39 e8 76 15 4a 8d 54 25 00 48 39 d0 0f 93 c0 49 39 d5 0f 92 c2 <20> d0 75 38 48 8d 7b 28 48 8d 4b 20 48 b8 00 00 00 00 00 fc ff df [ 492.994297][ C0] RSP: 0018:ffffc90000007040 EFLAGS: 00000297 [ 493.000333][ C0] RAX: ffffc90000008001 RBX: ffffc900000070e0 RCX: ffffffff91f6b642 [ 493.008289][ C0] RDX: ffffc90000007401 RSI: ffffc900000074b0 RDI: ffffc900000070f0 [ 493.016250][ C0] RBP: ffffc900000074b0 R08: 0000000000000001 R09: 0000000000000007 [ 493.024209][ C0] R10: 0000000000000200 R11: 0000000000017416 R12: 0000000000000008 [ 493.032180][ C0] R13: ffffc90000000000 R14: ffffc900000074e0 R15: ffffc90000007114 [ 493.040135][ C0] FS: 0000000000000000(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 493.049053][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.055707][ C0] CR2: 00007f0e1083cc53 CR3: 000000003492a000 CR4: 00000000003526f0 [ 493.063671][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 493.071628][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 493.079573][ C0] Call Trace: [ 493.082853][ C0] [ 493.085673][ C0] unwind_next_frame+0x1551/0x2090 [ 493.090765][ C0] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 493.096809][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 493.102945][ C0] arch_stack_walk+0x94/0xf0 [ 493.107513][ C0] ? __alloc_skb+0x140/0x710 [ 493.112082][ C0] stack_trace_save+0x8e/0xc0 [ 493.116822][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 493.122258][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 493.128388][ C0] kasan_save_stack+0x30/0x50 [ 493.133061][ C0] ? kasan_save_stack+0x30/0x50 [ 493.137890][ C0] ? kasan_save_track+0x14/0x30 [ 493.142716][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 493.147729][ C0] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 493.153791][ C0] kasan_save_track+0x14/0x30 [ 493.158443][ C0] __kasan_slab_alloc+0x89/0x90 [ 493.163270][ C0] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 493.169139][ C0] ? __alloc_skb+0x140/0x710 [ 493.173733][ C0] __alloc_skb+0x140/0x710 [ 493.178130][ C0] ? __alloc_skb+0x5b7/0x710 [ 493.182716][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 493.187630][ C0] ? kfree_skbmem+0x19a/0x210 [ 493.192279][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 493.198152][ C0] synproxy_send_client_synack+0x19e/0x970 [ 493.203969][ C0] ? find_held_lock+0x2b/0x80 [ 493.208625][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 493.214928][ C0] ? net_generic+0xea/0x2a0 [ 493.219430][ C0] nft_synproxy_do_eval+0xa6a/0xd30 [ 493.224609][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 493.230307][ C0] ? ktime_get+0x1a4/0x320 [ 493.234719][ C0] ? lapic_next_event+0x10/0x20 [ 493.239546][ C0] ? clockevents_program_event+0x1ef/0x820 [ 493.245333][ C0] ? __pfx_nft_objref_eval+0x10/0x10 [ 493.250599][ C0] nft_do_chain+0x2e5/0x19d0 [ 493.255166][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 493.260196][ C0] ? ipt_do_table+0xd4f/0x1b00 [ 493.264932][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 493.270196][ C0] ? ipt_do_table+0xd7f/0x1b00 [ 493.274956][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 493.279962][ C0] nft_do_chain_ipv4+0x1d0/0x250 [ 493.284921][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 493.290455][ C0] ? iptable_mangle_hook+0x71/0x4b0 [ 493.295636][ C0] ? nf_hook.constprop.0+0x98/0x750 [ 493.300822][ C0] nf_hook_slow+0xbf/0x220 [ 493.305217][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 493.310321][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 493.316295][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 493.321918][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 493.327009][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 493.333055][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 493.338413][ C0] ip_local_deliver+0x163/0x1f0 [ 493.343257][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 493.348782][ C0] ip_rcv+0x33a/0x3c0 [ 493.352860][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 493.357790][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 493.363672][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 493.370093][ C0] ? lock_acquire+0x1d1/0x380 [ 493.374768][ C0] ? process_backlog+0x437/0x1600 [ 493.379959][ C0] ? process_backlog+0x437/0x1600 [ 493.384966][ C0] __netif_receive_skb+0x1f/0x120 [ 493.389971][ C0] process_backlog+0x487/0x1600 [ 493.394821][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 493.400168][ C0] net_rx_action+0xa40/0xf20 [ 493.404733][ C0] ? find_held_lock+0x2b/0x80 [ 493.409388][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 493.414477][ C0] ? taprio_dequeue+0x166/0x5f0 [ 493.419299][ C0] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 493.424673][ C0] ? net_tx_action+0x6c7/0xf50 [ 493.429417][ C0] handle_softirqs+0x1e6/0x9d0 [ 493.434163][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 493.439418][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 493.445023][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 493.450652][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 493.456103][ C0] do_softirq+0xaf/0xf0 [ 493.460250][ C0] [ 493.463514][ C0] [ 493.466423][ C0] __local_bh_enable_ip+0xff/0x120 [ 493.471520][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 493.476813][ C0] ? look_up_lock_class+0x64/0x120 [ 493.481905][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 493.487702][ C0] batadv_tt_purge+0x8b/0xbd0 [ 493.492359][ C0] ? reacquire_held_locks+0xdd/0x1f0 [ 493.497638][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 493.502913][ C0] ? lock_acquire+0x1d1/0x380 [ 493.507583][ C0] ? process_one_work+0xa2c/0x1b10 [ 493.512682][ C0] ? process_one_work+0x906/0x1b10 [ 493.517783][ C0] ? process_one_work+0x906/0x1b10 [ 493.522902][ C0] process_one_work+0xac7/0x1b10 [ 493.527833][ C0] ? __pfx_process_one_work+0x10/0x10 [ 493.533186][ C0] ? lock_acquire+0x1d1/0x380 [ 493.537858][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 493.543123][ C0] rescuer_thread+0x918/0x14e0 [ 493.547874][ C0] ? rescuer_thread+0x256/0x14e0 [ 493.552785][ C0] ? rescuer_thread+0x118/0x14e0 [ 493.557698][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 493.562872][ C0] ? __kthread_parkme+0x18f/0x230 [ 493.567960][ C0] ? kthread+0x13a/0x450 [ 493.572198][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 493.577386][ C0] kthread+0x373/0x450 [ 493.581452][ C0] ? __pfx_kthread+0x10/0x10 [ 493.586021][ C0] ret_from_fork+0x730/0xd60 [ 493.590599][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 493.595684][ C0] ? __switch_to+0x800/0x10f0 [ 493.600342][ C0] ? __pfx_kthread+0x10/0x10 [ 493.604909][ C0] ret_from_fork_asm+0x1a/0x30 [ 493.609840][ C0]