last executing test programs: 13.720325059s ago: executing program 2 (id=1770): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000440)="f6f4e9a100542400000000e152e72d14615b2400", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.60168288s ago: executing program 2 (id=1773): r0 = syz_io_uring_setup(0x1111, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x41, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 13.224852039s ago: executing program 2 (id=1780): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000a80)={0x40, 0x3, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x9a, &(0x7f00000009c0)=""/154}) 13.049619077s ago: executing program 2 (id=1782): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 12.9487273s ago: executing program 2 (id=1784): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000009a80)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000003fffff) 12.656518077s ago: executing program 2 (id=1791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x1, 0x5000, 0x1000, &(0x7f0000fed000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0) 12.593808836s ago: executing program 32 (id=1791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x1, 0x5000, 0x1000, &(0x7f0000fed000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0) 2.734980387s ago: executing program 1 (id=1960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100000a0a03000000000000000000020000000900010073797a300000000008000640ffffff000800054000000028090002"], 0x154}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 2.640777776s ago: executing program 1 (id=1962): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2.639984412s ago: executing program 4 (id=1963): unshare(0x64000600) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ada}, 0x1c) 2.552814417s ago: executing program 1 (id=1966): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x21, r0, 0x0) writev(r0, &(0x7f00000018c0)=[{&(0x7f0000000280)="5a05", 0x2}], 0x1) 2.443731979s ago: executing program 1 (id=1968): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'raw\x00', 0x7003, [0x0, 0x7, 0x1, 0x6, 0x9]}, &(0x7f0000000100)=0x54) 2.347238779s ago: executing program 4 (id=1971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) 2.199468856s ago: executing program 4 (id=1973): syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x40009c0e, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2df0, 0x0, 0x0, 0x0, 0x0) 2.154316767s ago: executing program 4 (id=1974): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000000)={0x0, 0x15, 0x3, "4159ae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.010338594s ago: executing program 1 (id=1975): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xa, "9cb9"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.359232343s ago: executing program 0 (id=1987): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, r1, 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0x1542}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1}) 1.293553082s ago: executing program 0 (id=1989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x944, 0x0) 1.240800032s ago: executing program 0 (id=1990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x8a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004"], 0x0) 1.147277572s ago: executing program 0 (id=1993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b"]) 1.024722967s ago: executing program 0 (id=1996): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xf8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r1, r0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 915.63125ms ago: executing program 0 (id=1999): r0 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0x5, 0x5, "1ec659b5cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 854.935624ms ago: executing program 3 (id=2001): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) 746.899642ms ago: executing program 5 (id=2003): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) lsm_get_self_attr(0x67, &(0x7f0000001680)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000240)=0x1020, 0x1) 724.349148ms ago: executing program 3 (id=2004): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 710.85167ms ago: executing program 5 (id=2005): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup(0xffffffffffffffff) 602.92371ms ago: executing program 3 (id=2006): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 548.022599ms ago: executing program 3 (id=2007): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010201, 0x0) 501.096379ms ago: executing program 3 (id=2008): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r0, 0x1, 0x70bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}]}]}]}, 0x34}}, 0x0) 451.586306ms ago: executing program 3 (id=2009): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstatfs(0xffffffffffffffff, 0x0) 319.103409ms ago: executing program 5 (id=2010): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0xff}) 172.993261ms ago: executing program 5 (id=2011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x24001000) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 171.130349ms ago: executing program 1 (id=2012): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 161.108101ms ago: executing program 4 (id=2013): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 95.355926ms ago: executing program 5 (id=2014): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)={0x6, {{0x2, 0x4e25, @multicast2}}, 0x1}, 0x90) 31.073925ms ago: executing program 4 (id=2015): capset(0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x0, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) 0s ago: executing program 5 (id=2016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000ed00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) kernel console output (not intermixed with test programs): iled, block=256, location=256 [ 100.789202][ T7491] syz.2.722: attempt to access beyond end of device [ 100.789202][ T7491] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 100.789660][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.821368][ T7491] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 100.843905][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 100.843919][ T30] audit: type=1400 audit(1742158083.259:383): avc: denied { ioctl } for pid=7507 comm="syz.4.730" path="socket:[15821]" dev="sockfs" ino=15821 ioctlcmd=0x8b20 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.878479][ T7491] syz.2.722: attempt to access beyond end of device [ 100.878479][ T7491] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 100.950388][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.972204][ T7491] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 101.030902][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.039169][ T7491] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 101.048640][ T7491] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 101.080825][ T7519] team0: Device gtp0 is of different type [ 101.109872][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 101.115916][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.447977][ T30] audit: type=1400 audit(1742158083.859:384): avc: denied { read } for pid=7541 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 101.478559][ T5871] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 101.523249][ T7549] netlink: 'syz.4.751': attribute type 1 has an invalid length. [ 101.531835][ T7549] netlink: 224 bytes leftover after parsing attributes in process `syz.4.751'. [ 101.639548][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 101.647314][ T5871] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.664496][ T5871] usb 3-1: config 0 has no interface number 0 [ 101.687086][ T5871] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.706181][ T5871] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.716474][ T5871] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 101.725655][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.735796][ T5871] usb 3-1: config 0 descriptor?? [ 101.839360][ T30] audit: type=1400 audit(1742158084.259:385): avc: denied { write } for pid=7563 comm="syz.1.757" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 101.873596][ T30] audit: type=1400 audit(1742158084.259:386): avc: denied { open } for pid=7563 comm="syz.1.757" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 101.903557][ T30] audit: type=1400 audit(1742158084.289:387): avc: denied { ioctl } for pid=7563 comm="syz.1.757" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 102.000743][ T30] audit: type=1400 audit(1742158084.419:388): avc: denied { connect } for pid=7550 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.033579][ T30] audit: type=1400 audit(1742158084.449:389): avc: denied { ioctl } for pid=7550 comm="syz.3.750" path="socket:[15899]" dev="sockfs" ino=15899 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.176991][ T7580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.236639][ T7584] team0: entered allmulticast mode [ 102.250258][ T7584] team_slave_0: entered allmulticast mode [ 102.256011][ T7584] team_slave_1: entered allmulticast mode [ 102.359950][ T5871] uclogic 0003:28BD:0094.000E: pen parameters not found [ 102.374618][ T5871] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring [ 102.420321][ T974] kernel write not supported for file /vcsa (pid: 974 comm: kworker/1:2) [ 102.598570][ T5871] usb 3-1: USB disconnect, device number 11 [ 102.665529][ T7598] syz.3.773 (7598) used greatest stack depth: 20288 bytes left [ 102.707952][ T30] audit: type=1400 audit(1742158085.119:390): avc: denied { mount } for pid=7604 comm="syz.4.776" name="/" dev="hugetlbfs" ino=16701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 103.079769][ T5875] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 103.241064][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 103.252047][ T5875] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 103.264924][ T5875] usb 5-1: config 8 has no interface number 0 [ 103.278875][ T5875] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 103.301370][ T5875] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.316001][ T5875] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 103.328717][ T5875] usb 5-1: config 8 interface 39 has no altsetting 0 [ 103.342112][ T5875] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 103.357241][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.386272][ T5875] usb 5-1: Product: syz [ 103.401290][ T5875] usb 5-1: Manufacturer: syz [ 103.422968][ T5875] usb 5-1: SerialNumber: syz [ 103.896306][ T7665] netlink: 'syz.2.803': attribute type 9 has an invalid length. [ 103.904307][ T7665] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.803'. [ 104.015656][ T30] audit: type=1400 audit(1742158086.429:391): avc: denied { bind } for pid=7668 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 104.035163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.056785][ T5875] ipheth 5-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 104.084349][ T30] audit: type=1400 audit(1742158086.429:392): avc: denied { node_bind } for pid=7668 comm="syz.2.806" saddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 104.108586][ T5875] ipheth 5-1:8.39: Apple iPhone USB Ethernet device attached [ 104.134887][ T5875] usb 5-1: USB disconnect, device number 10 [ 104.202233][ T5875] ipheth 5-1:8.39: Apple iPhone USB Ethernet now disconnected [ 104.212108][ T971] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 104.373617][ T971] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 104.388769][ T971] usb 2-1: config 7 has no interface number 0 [ 104.399023][ T971] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 104.419664][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.443169][ T971] usb 2-1: Product: syz [ 104.447355][ T971] usb 2-1: Manufacturer: syz [ 104.464753][ T971] usb 2-1: SerialNumber: syz [ 104.832385][ T7706] netlink: 'syz.0.822': attribute type 2 has an invalid length. [ 104.967249][ T10] kernel write not supported for file /input/mouse0 (pid: 10 comm: kworker/0:1) [ 105.088007][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 105.229263][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'. [ 105.267060][ T3454] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.269255][ T971] as10x_usb: device has been detected [ 105.287819][ T971] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 105.331738][ T971] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 105.458335][ T971] as10x_usb: error during firmware upload part1 [ 105.479449][ T971] Registered device Elgato EyeTV DTT Deluxe [ 105.492090][ T971] usb 2-1: USB disconnect, device number 8 [ 105.536754][ T971] Unregistered device Elgato EyeTV DTT Deluxe [ 105.539413][ T971] as10x_usb: device has been disconnected [ 105.769165][ T5875] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.851913][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 105.851928][ T30] audit: type=1400 audit(1742158088.269:399): avc: denied { write } for pid=7752 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.919397][ T30] audit: type=1400 audit(1742158088.309:400): avc: denied { bind } for pid=7752 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.949042][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 105.959481][ T5875] usb 4-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 105.969369][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.979054][ T30] audit: type=1400 audit(1742158088.389:401): avc: denied { write } for pid=7757 comm="syz.2.845" path="socket:[16940]" dev="sockfs" ino=16940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.008997][ T5875] usb 4-1: Product: syz [ 106.013183][ T5875] usb 4-1: Manufacturer: syz [ 106.017795][ T5875] usb 4-1: SerialNumber: syz [ 106.030516][ T5875] usb 4-1: config 0 descriptor?? [ 106.046668][ T5875] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 106.329059][ T971] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 106.477977][ T30] audit: type=1400 audit(1742158088.889:402): avc: denied { append } for pid=7774 comm="syz.0.853" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.493055][ T971] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.512847][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 106.528697][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.546289][ T971] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 106.560922][ T971] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 106.570386][ T971] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 106.578415][ T971] usb 3-1: Manufacturer: syz [ 106.579004][ T974] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 106.594117][ T971] usb 3-1: config 0 descriptor?? [ 106.661424][ T5875] gspca_sunplus: reg_w_riv err -71 [ 106.666670][ T5875] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 106.680094][ T5875] usb 4-1: USB disconnect, device number 9 [ 106.740231][ T974] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.751412][ T974] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.761483][ T974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.768090][ T974] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 106.777209][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.787793][ T974] usb 5-1: config 0 descriptor?? [ 106.849315][ T971] rc_core: IR keymap rc-hauppauge not found [ 106.855272][ T971] Registered IR keymap rc-empty [ 106.861669][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.879041][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.899494][ T971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 106.911222][ T5871] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 106.919924][ T971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 106.933492][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.959047][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.979062][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.999127][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.039088][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.059813][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.069173][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 107.079687][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.088628][ T7784] netlink: 96 bytes leftover after parsing attributes in process `syz.1.855'. [ 107.089244][ T5871] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 107.107773][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.115100][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.123243][ T5871] usb 1-1: Product: syz [ 107.127421][ T5871] usb 1-1: Manufacturer: syz [ 107.132188][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.140576][ T5871] usb 1-1: SerialNumber: syz [ 107.148132][ T5871] usb 1-1: config 0 descriptor?? [ 107.155897][ T5871] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 107.162198][ T971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.190294][ T971] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 107.199047][ T971] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 107.223832][ T974] playstation 0003:054C:0BA0.000F: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 107.353768][ T971] usb 3-1: USB disconnect, device number 12 [ 107.414281][ T974] playstation 0003:054C:0BA0.000F: Failed to retrieve feature with reportID 18: -71 [ 107.425743][ T974] playstation 0003:054C:0BA0.000F: Failed to retrieve DualShock4 pairing info: -71 [ 107.435361][ T974] playstation 0003:054C:0BA0.000F: Failed to get MAC address from DualShock4 [ 107.444905][ T974] playstation 0003:054C:0BA0.000F: Failed to create dualshock4. [ 107.455355][ T974] playstation 0003:054C:0BA0.000F: probe with driver playstation failed with error -71 [ 107.467118][ T974] usb 5-1: USB disconnect, device number 11 [ 107.570270][ T5875] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 107.632386][ T30] audit: type=1400 audit(1742158090.049:403): avc: denied { connect } for pid=7805 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.653858][ T30] audit: type=1400 audit(1742158090.069:404): avc: denied { bind } for pid=7805 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.729211][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 107.735733][ T5875] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.747083][ T5875] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.769472][ T5875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.776299][ T5875] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 107.789836][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.803138][ T5875] usb 2-1: config 0 descriptor?? [ 107.979536][ T5871] gspca_stk1135: reg_w 0x5 err -71 [ 107.989683][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 107.996044][ T5871] gspca_stk1135: Sensor write failed [ 108.027531][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 108.044517][ T5871] gspca_stk1135: Sensor write failed [ 108.054628][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 108.064706][ T5871] gspca_stk1135: Sensor read failed [ 108.074831][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 108.082149][ T5871] gspca_stk1135: Sensor read failed [ 108.087450][ T5871] gspca_stk1135: Detected sensor type unknown (0x0) [ 108.104802][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 108.115298][ T5871] gspca_stk1135: Sensor read failed [ 108.132184][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 108.148515][ T5871] gspca_stk1135: Sensor read failed [ 108.161333][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 108.177867][ T5871] gspca_stk1135: Sensor write failed [ 108.183791][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 108.194545][ T5871] gspca_stk1135: Sensor write failed [ 108.203672][ T5871] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 108.226852][ T5871] usb 1-1: USB disconnect, device number 9 [ 108.231674][ T5875] chicony 0003:04F2:1421.0010: bogus close delimiter [ 108.263407][ T5875] chicony 0003:04F2:1421.0010: item 0 2 2 10 parsing failed [ 108.277712][ T5875] chicony 0003:04F2:1421.0010: Chicony hid parse failed: -22 [ 108.301821][ T5875] chicony 0003:04F2:1421.0010: probe with driver chicony failed with error -22 [ 108.383970][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.444966][ T5875] usb 2-1: USB disconnect, device number 9 [ 108.490743][ T7830] input: syz0 as /devices/virtual/input/input20 [ 108.624996][ T7836] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 109.049488][ T7848] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 109.080592][ T7852] netlink: 'syz.4.886': attribute type 10 has an invalid length. [ 109.089011][ T7848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.117686][ T7852] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 109.284895][ T7859] --map-set only usable from mangle table [ 109.399135][ T30] audit: type=1400 audit(1742158091.809:405): avc: denied { setopt } for pid=7865 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.658050][ T7881] bpf: Bad value for 'uid' [ 109.784852][ T30] audit: type=1400 audit(1742158092.199:406): avc: denied { ioctl } for pid=7887 comm="syz.3.902" path="socket:[17663]" dev="sockfs" ino=17663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.839031][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 109.948202][ T30] audit: type=1400 audit(1742158092.359:407): avc: denied { accept } for pid=7893 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.014353][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.049908][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.077152][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.101969][ T10] usb 2-1: config 0 descriptor?? [ 110.551758][ T10] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 110.579462][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0011/input/input21 [ 110.619048][ T7912] input: syz0 as /devices/virtual/input/input22 [ 110.657836][ T7915] xt_hashlimit: max too large, truncated to 1048576 [ 110.673816][ T10] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 110.693102][ T7822] Set syz1 is full, maxelem 65536 reached [ 110.982082][ T30] audit: type=1400 audit(1742158093.399:408): avc: denied { append } for pid=7932 comm="syz.4.924" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 110.987502][ T5875] usb 2-1: USB disconnect, device number 10 [ 111.490290][ T7959] netlink: 108 bytes leftover after parsing attributes in process `syz.2.936'. [ 111.869290][ T971] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 112.049236][ T971] usb 5-1: Using ep0 maxpacket: 32 [ 112.067458][ T971] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.092760][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.119136][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.144789][ T971] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.155630][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.165936][ T971] usb 5-1: config 0 descriptor?? [ 112.172258][ T7965] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.180527][ T971] hub 5-1:0.0: USB hub found [ 112.219015][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 112.323492][ T8013] netlink: 'syz.3.961': attribute type 3 has an invalid length. [ 112.334008][ T8013] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.961'. [ 112.370254][ T26] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 112.387703][ T971] hub 5-1:0.0: 10 ports detected [ 112.389778][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.393451][ T971] hub 5-1:0.0: insufficient power available to use all downstream ports [ 112.420839][ T26] usb 1-1: config 0 descriptor?? [ 112.437564][ T26] cp210x 1-1:0.0: cp210x converter detected [ 112.448501][ T8019] netlink: 'syz.1.966': attribute type 11 has an invalid length. [ 112.793608][ T971] usb 5-1: USB disconnect, device number 12 [ 112.846103][ T26] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 112.860220][ T26] usb 1-1: cp210x converter now attached to ttyUSB0 [ 112.874456][ T8034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.973'. [ 112.889081][ T5875] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 113.058999][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 113.070321][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.091914][ T26] usb 1-1: USB disconnect, device number 10 [ 113.100211][ T5875] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 113.111756][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 113.129474][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.149022][ T5875] usb 3-1: Product: syz [ 113.159807][ T5875] usb 3-1: Manufacturer: syz [ 113.164600][ T5875] usb 3-1: SerialNumber: syz [ 113.164789][ T26] cp210x 1-1:0.0: device disconnected [ 113.176386][ T5875] usb 3-1: config 0 descriptor?? [ 113.187088][ T5875] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 113.201219][ T5875] usb 3-1: selecting invalid altsetting 1 [ 113.280096][ T8049] netlink: 44 bytes leftover after parsing attributes in process `syz.1.977'. [ 113.290443][ T30] audit: type=1400 audit(1742158095.709:409): avc: denied { ioctl } for pid=8050 comm="syz.3.978" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 113.529284][ T30] audit: type=1400 audit(1742158095.956:410): avc: denied { read write } for pid=8064 comm="syz.3.985" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 113.552573][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.565418][ T30] audit: type=1400 audit(1742158095.956:411): avc: denied { open } for pid=8064 comm="syz.3.985" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 113.588601][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.610192][ T26] usb 3-1: USB disconnect, device number 13 [ 113.667514][ T5875] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 113.824540][ T5875] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 113.841110][ T5875] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 113.870196][ T5875] usb 5-1: config 8 has no interface number 0 [ 113.876315][ T5875] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 113.900070][ T5875] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 113.929953][ T5875] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 113.947591][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.967181][ T30] audit: type=1326 audit(1742158096.378:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 113.990543][ T5875] usb 5-1: Product: syz [ 113.994712][ T5875] usb 5-1: Manufacturer: syz [ 114.010282][ T5875] usb 5-1: SerialNumber: syz [ 114.036676][ T30] audit: type=1326 audit(1742158096.378:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 114.066774][ T30] audit: type=1326 audit(1742158096.378:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 114.090121][ T30] audit: type=1326 audit(1742158096.378:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 114.228718][ T30] audit: type=1326 audit(1742158096.388:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 114.265209][ T5875] usb 5-1: USB disconnect, device number 13 [ 114.288090][ T30] audit: type=1326 audit(1742158096.388:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 114.849102][ T8128] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1015'. [ 114.864722][ T8128] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1015'. [ 114.874109][ T8128] netlink: 'syz.4.1015': attribute type 5 has an invalid length. [ 114.882280][ T8128] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1015'. [ 115.083338][ T974] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 115.238471][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 115.244911][ T974] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 115.254892][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 19501, setting to 1024 [ 115.266148][ T974] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 115.280161][ T974] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 115.289768][ T971] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 115.290124][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.305583][ T974] usb 3-1: Product: syz [ 115.315429][ T974] usb 3-1: Manufacturer: syz [ 115.365009][ T974] usb 3-1: SerialNumber: syz [ 115.384962][ T974] usb 3-1: config 0 descriptor?? [ 115.406645][ T8127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.414025][ T8127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.464840][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 115.488996][ T971] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 115.504424][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.516346][ T971] usb 5-1: config 0 descriptor?? [ 115.721620][ T971] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 115.734755][ T974] rc_core: IR keymap rc-hauppauge not found [ 115.740708][ T974] Registered IR keymap rc-empty [ 115.755836][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 115.784398][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 115.803134][ T974] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 115.828007][ T974] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 115.852181][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 115.870884][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 115.892261][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 115.909986][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 115.938987][ T26] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 115.958036][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 115.978271][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 115.997694][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 116.016890][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 116.036330][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 116.055760][ T974] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 116.080003][ T974] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 116.094627][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 116.099834][ T974] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 116.116833][ T26] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.133619][ T974] usb 3-1: USB disconnect, device number 14 [ 116.149564][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.172395][ T26] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 116.201870][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.224991][ T26] usb 4-1: config 0 descriptor?? [ 116.328092][ T971] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 116.350727][ T971] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 116.396862][ T971] asix 5-1:0.0: probe with driver asix failed with error -71 [ 116.420834][ T971] usb 5-1: USB disconnect, device number 14 [ 116.451988][ T8178] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 116.516681][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 116.516697][ T30] audit: type=1400 audit(1742158099.022:479): avc: denied { setopt } for pid=8183 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.637963][ T26] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 117.032895][ T26] usb 4-1: USB disconnect, device number 10 [ 117.346386][ T30] audit: type=1400 audit(1742158099.874:480): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.569119][ T30] audit: type=1400 audit(1742158100.089:481): avc: denied { read } for pid=8223 comm="syz.0.1059" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 117.591639][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.608818][ T8224] sit0: entered promiscuous mode [ 117.644283][ T30] audit: type=1400 audit(1742158100.089:482): avc: denied { open } for pid=8223 comm="syz.0.1059" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 117.649084][ T8224] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 117.725768][ T8224] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1059'. [ 118.013983][ T30] audit: type=1326 audit(1742158100.550:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.4.1068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d7438d169 code=0x0 [ 118.204890][ T8257] netlink: 5080 bytes leftover after parsing attributes in process `syz.2.1074'. [ 118.220163][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1074'. [ 118.268247][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 118.296257][ T8261] netlink: 'syz.0.1077': attribute type 30 has an invalid length. [ 118.313137][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 118.786230][ T30] audit: type=1400 audit(1742158101.338:484): avc: denied { create } for pid=8290 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.861317][ T30] audit: type=1400 audit(1742158101.348:485): avc: denied { getopt } for pid=8290 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.954077][ T8300] sctp: [Deprecated]: syz.4.1093 (pid 8300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.954077][ T8300] Use struct sctp_sack_info instead [ 119.464271][ T30] audit: type=1400 audit(1742158102.043:486): avc: denied { lock } for pid=8322 comm="syz.0.1103" path="socket:[19123]" dev="sockfs" ino=19123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 119.515499][ T30] audit: type=1400 audit(1742158102.095:487): avc: denied { create } for pid=8324 comm="syz.4.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.560002][ T30] audit: type=1400 audit(1742158102.115:488): avc: denied { connect } for pid=8324 comm="syz.4.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.674233][ T8334] input: syz0 as /devices/virtual/input/input24 [ 119.744267][ T8337] netlink: 'syz.2.1109': attribute type 10 has an invalid length. [ 119.778011][ T8337] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.786530][ T8337] bond0: (slave team0): Enslaving as an active interface with an up link [ 120.117989][ T971] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 120.235358][ T8369] syz.3.1124 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.275214][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 120.297610][ T971] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 120.323597][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.347634][ T971] usb 2-1: Product: syz [ 120.351820][ T971] usb 2-1: Manufacturer: syz [ 120.363388][ T971] usb 2-1: SerialNumber: syz [ 120.374822][ T971] usb 2-1: config 0 descriptor?? [ 120.396160][ T971] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 120.596806][ T971] gspca_sn9c2028: read1 error -32 [ 120.602529][ T971] gspca_sn9c2028: read1 error -32 [ 120.809963][ T5874] usb 2-1: USB disconnect, device number 11 [ 120.914726][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 120.927538][ T8412] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 121.631543][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 121.631559][ T30] audit: type=1400 audit(1742158104.247:508): avc: denied { mount } for pid=8458 comm="syz.3.1167" name="/" dev="ramfs" ino=20200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 121.669697][ T30] audit: type=1400 audit(1742158104.278:509): avc: denied { map } for pid=8460 comm="syz.1.1168" path="socket:[19314]" dev="sockfs" ino=19314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 121.726194][ T26] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 121.734597][ T8465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.765528][ T30] audit: type=1400 audit(1742158104.380:510): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 121.810748][ T30] audit: type=1400 audit(1742158104.421:511): avc: denied { read } for pid=8466 comm="syz.1.1172" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.942151][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 121.948562][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.962022][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1455, setting to 1024 [ 121.974025][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.987099][ T26] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 121.996288][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.023017][ T26] usb 3-1: config 0 descriptor?? [ 122.029468][ T8449] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.072984][ T30] audit: type=1400 audit(1742158104.706:512): avc: denied { read } for pid=8485 comm="syz.1.1180" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 122.098034][ T30] audit: type=1400 audit(1742158104.706:513): avc: denied { open } for pid=8485 comm="syz.1.1180" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 122.130654][ T30] audit: type=1400 audit(1742158104.706:514): avc: denied { ioctl } for pid=8485 comm="syz.1.1180" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 122.177783][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'. [ 122.186903][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 122.440286][ T26] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 122.450488][ T26] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 122.465557][ T26] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 122.480698][ T26] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 122.495480][ T26] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 122.509641][ T26] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 122.522907][ T26] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 122.539827][ T26] prodikeys 0003:041E:2801.0013: hidraw0: USB HID v1.ff Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 122.731077][ T971] usb 3-1: USB disconnect, device number 15 [ 122.819262][ T30] audit: type=1400 audit(1742158105.459:515): avc: denied { shutdown } for pid=8514 comm="syz.0.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.918406][ T30] audit: type=1400 audit(1742158105.561:516): avc: denied { setopt } for pid=8516 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.972108][ T30] audit: type=1400 audit(1742158105.612:517): avc: denied { read } for pid=8521 comm="syz.3.1196" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 123.003772][ T8517] xt_CT: No such helper "snmp" [ 123.077325][ T8529] loop6: detected capacity change from 0 to 524287999 [ 123.087051][ C1] blk_print_req_error: 7 callbacks suppressed [ 123.087067][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.102337][ C1] buffer_io_error: 7 callbacks suppressed [ 123.102351][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.118585][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.127783][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.140678][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.149865][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.157876][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.167044][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.175029][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.184230][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.238278][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.247447][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.297509][ T8534] loop6: detected capacity change from 524287999 to 524288000 [ 123.364037][ T8529] loop6: unable to read partition table [ 123.369999][ T8529] loop_reread_partitions: partition scan of loop6 (Í¢†¨ÙÇ´WÝC@'OÈQžšÒ¥‹) failed (rc=-5) [ 123.593407][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 124.869120][ T8611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1235'. [ 124.892551][ T8611] netem: unknown loss type 13 [ 124.897580][ T8611] netem: change failed [ 125.180810][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 125.227191][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1245'. [ 125.316118][ T26] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 125.484760][ T26] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 125.508517][ T26] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 125.530393][ T26] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 125.544206][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.557283][ T26] usb 2-1: Product: syz [ 125.561747][ T26] usb 2-1: Manufacturer: syz [ 125.571827][ T26] usb 2-1: SerialNumber: syz [ 125.581021][ T26] usb 2-1: config 0 descriptor?? [ 125.589696][ T8627] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.600031][ T8627] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.694498][ T8660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.766925][ T8663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'. [ 125.777129][ T8663] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1257'. [ 125.794261][ T8663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'. [ 125.804528][ T8663] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1257'. [ 125.823354][ T8627] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.831147][ T8627] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.163464][ T974] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 126.250725][ T26] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 126.342740][ T974] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 126.357639][ T974] usb 5-1: config 0 has no interface number 0 [ 126.368964][ T974] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 126.400128][ T974] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 44, changing to 9 [ 126.448763][ T26] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 126.458460][ T974] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 126.470010][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.495224][ T26] usb 2-1: USB disconnect, device number 12 [ 126.505145][ T974] usb 5-1: Product: syz [ 126.510610][ T974] usb 5-1: Manufacturer: syz [ 126.515267][ T974] usb 5-1: SerialNumber: syz [ 126.521424][ T974] usb 5-1: config 0 descriptor?? [ 126.533699][ T8670] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 126.561228][ T974] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 126.575400][ T974] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 126.626892][ T8700] sg_write: data in/out 1837/10 bytes for SCSI command 0xc7-- guessing data in; [ 126.626892][ T8700] program syz.3.1275 not setting count and/or reply_len properly [ 126.798052][ T8705] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 126.840986][ T8705] CIFS mount error: No usable UNC path provided in device string! [ 126.840986][ T8705] [ 126.863390][ T974] usb 5-1: USB disconnect, device number 15 [ 126.867406][ T8705] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 126.872503][ T974] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 126.900731][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1279'. [ 126.903667][ T974] cyberjack 5-1:0.69: device disconnected [ 127.157959][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 127.157974][ T30] audit: type=1400 audit(1742158109.865:528): avc: denied { ioctl } for pid=8720 comm="syz.3.1285" path="socket:[21141]" dev="sockfs" ino=21141 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.417133][ T8736] netlink: 'syz.3.1291': attribute type 1 has an invalid length. [ 127.436676][ T8736] netlink: 'syz.3.1291': attribute type 4 has an invalid length. [ 127.444473][ T8736] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1291'. [ 127.467364][ T8736] NCSI netlink: No device for ifindex 458760 [ 127.476695][ T974] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 127.528531][ T30] audit: type=1400 audit(1742158110.240:529): avc: denied { getopt } for pid=8740 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.615434][ T8748] netlink: 'syz.1.1295': attribute type 21 has an invalid length. [ 127.640778][ T8748] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1295'. [ 127.643853][ T30] audit: type=1400 audit(1742158110.352:530): avc: denied { remount } for pid=8743 comm="syz.3.1296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 127.654582][ T8748] netlink: 'syz.1.1295': attribute type 5 has an invalid length. [ 127.693546][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 127.713959][ T8748] netlink: 'syz.1.1295': attribute type 6 has an invalid length. [ 127.714087][ T974] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 127.742665][ T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.763836][ T974] usb 3-1: config 0 has no interface number 0 [ 127.777707][ T974] usb 3-1: config 0 interface 244 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.795658][ T974] usb 3-1: config 0 interface 244 has no altsetting 0 [ 127.804761][ T974] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 127.841350][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.849494][ T974] usb 3-1: Product: syz [ 127.862872][ T974] usb 3-1: Manufacturer: syz [ 127.869238][ T974] usb 3-1: SerialNumber: syz [ 127.880781][ T974] usb 3-1: config 0 descriptor?? [ 127.889423][ T974] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort found [ 128.097530][ T974] snd_usb_toneport 3-1:0.244: cannot get proper max packet size [ 128.107263][ T974] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort now disconnected [ 128.118576][ T974] snd_usb_toneport 3-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 128.135996][ T8767] bio_check_eod: 2 callbacks suppressed [ 128.136010][ T8767] syz.1.1306: attempt to access beyond end of device [ 128.136010][ T8767] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 128.157499][ T8767] syz.1.1306: attempt to access beyond end of device [ 128.157499][ T8767] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 128.180036][ T8767] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 128.190626][ T8767] syz.1.1306: attempt to access beyond end of device [ 128.190626][ T8767] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 128.237094][ T8767] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 128.271185][ T30] audit: type=1400 audit(1742158110.979:531): avc: denied { map } for pid=8773 comm="syz.0.1310" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 128.294300][ T8767] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 128.314546][ T974] usb 3-1: USB disconnect, device number 16 [ 128.327983][ T8767] UDF-fs: Scanning with blocksize 512 failed [ 128.334451][ T8767] syz.1.1306: attempt to access beyond end of device [ 128.334451][ T8767] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 128.348336][ T30] audit: type=1400 audit(1742158110.979:532): avc: denied { execute } for pid=8773 comm="syz.0.1310" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 128.373478][ T8767] syz.1.1306: attempt to access beyond end of device [ 128.373478][ T8767] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 128.387495][ T8767] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 128.407585][ T8767] syz.1.1306: attempt to access beyond end of device [ 128.407585][ T8767] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 128.443706][ T8767] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 128.462155][ T8767] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 128.475085][ T8767] UDF-fs: Scanning with blocksize 1024 failed [ 128.492554][ T8767] syz.1.1306: attempt to access beyond end of device [ 128.492554][ T8767] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 128.522090][ T8767] syz.1.1306: attempt to access beyond end of device [ 128.522090][ T8767] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 128.540977][ T8767] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 128.551226][ T8767] syz.1.1306: attempt to access beyond end of device [ 128.551226][ T8767] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 128.568748][ T8767] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 128.599223][ T8767] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 128.613089][ T8767] UDF-fs: Scanning with blocksize 2048 failed [ 128.620438][ T8767] syz.1.1306: attempt to access beyond end of device [ 128.620438][ T8767] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 128.634808][ T8767] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 128.644846][ T8767] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 128.655277][ T8767] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 128.671166][ T5874] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 128.673892][ T8767] UDF-fs: Scanning with blocksize 4096 failed [ 128.690174][ T8767] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 128.815836][ T30] audit: type=1400 audit(1742158111.546:533): avc: denied { create } for pid=8798 comm="syz.0.1321" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.849208][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 128.863653][ T5874] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 128.872001][ T5874] usb 4-1: config 0 has no interface number 0 [ 128.878155][ T5874] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.889638][ T30] audit: type=1400 audit(1742158111.607:534): avc: denied { read } for pid=8798 comm="syz.0.1321" name="file0" dev="tmpfs" ino=1401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.913035][ T5874] usb 4-1: config 0 interface 85 has no altsetting 0 [ 128.919932][ T30] audit: type=1400 audit(1742158111.607:535): avc: denied { open } for pid=8798 comm="syz.0.1321" path="/273/file0" dev="tmpfs" ino=1401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.953523][ T5874] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 128.964392][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.979410][ T5874] usb 4-1: Product: syz [ 128.983634][ T5874] usb 4-1: Manufacturer: syz [ 128.990386][ T5874] usb 4-1: SerialNumber: syz [ 128.999129][ T5874] usb 4-1: config 0 descriptor?? [ 129.419255][ T30] audit: type=1400 audit(1742158112.153:536): avc: denied { append } for pid=8833 comm="syz.1.1338" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.419306][ T8834] random: crng reseeded on system resumption [ 129.590960][ T26] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 129.614499][ T5874] appletouch 4-1:0.85: Geyser mode initialized. [ 129.622341][ T5874] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input25 [ 129.738757][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 129.760691][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.769457][ T26] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 129.780834][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.792834][ T26] usb 1-1: config 0 descriptor?? [ 129.826786][ T971] usb 4-1: USB disconnect, device number 11 [ 129.836495][ T971] appletouch 4-1:0.85: input: appletouch disconnected [ 130.078134][ T30] audit: type=1400 audit(1742158112.820:537): avc: denied { mount } for pid=8854 comm="syz.2.1348" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 130.208495][ T26] hid (null): global environment stack underflow [ 130.271176][ T8863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.402565][ T971] usb 1-1: USB disconnect, device number 11 [ 130.688815][ T26] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 130.701603][ T8879] mkiss: ax0: crc mode is auto. [ 130.816285][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.832334][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.842370][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.853045][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.870178][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 130.879515][ T26] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.891825][ T26] usb 4-1: config 0 has no interface number 0 [ 130.901997][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.917684][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.928020][ T26] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.935821][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.946741][ T26] usb 4-1: config 0 has no interface number 0 [ 130.961333][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.973653][ T26] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.981471][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.986812][ T26] usb 4-1: config 0 has no interface number 0 [ 130.992783][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.019921][ T26] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 131.032003][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.048579][ T26] usb 4-1: Product: syz [ 131.053178][ T26] usb 4-1: Manufacturer: syz [ 131.059389][ T26] usb 4-1: SerialNumber: syz [ 131.067481][ T26] usb 4-1: config 0 descriptor?? [ 131.084790][ T26] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 131.279035][ T26] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 131.300483][ T26] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 131.321915][ T974] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 131.501420][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 131.508149][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.519258][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.531292][ T974] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.594918][ T974] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 131.613392][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.630779][ T974] usb 1-1: config 0 descriptor?? [ 131.685985][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.693973][ T26] usb 4-1: USB disconnect, device number 12 [ 131.704005][ T26] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 131.718008][ T8935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.731365][ T26] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 131.767768][ T26] quatech2 4-1:0.51: device disconnected [ 132.044467][ T974] koneplus 0003:1E7D:2E22.0015: unknown main item tag 0x0 [ 132.054257][ T974] koneplus 0003:1E7D:2E22.0015: unknown main item tag 0x0 [ 132.067566][ T974] koneplus 0003:1E7D:2E22.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 132.126803][ T971] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 132.127484][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.282440][ T971] usb 5-1: Using ep0 maxpacket: 16 [ 132.291029][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.319552][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.332077][ T5874] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 132.346496][ T971] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.364282][ T971] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.373929][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.383901][ T971] usb 5-1: config 0 descriptor?? [ 132.509642][ T5874] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.517846][ T5874] usb 3-1: config 0 has no interface number 0 [ 132.524886][ T974] usb 1-1: USB disconnect, device number 12 [ 132.530911][ T5874] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.549105][ T5874] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.579795][ T5874] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 132.588852][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.605980][ T5874] usb 3-1: config 0 descriptor?? [ 132.783442][ T8961] SELinux: failed to load policy [ 132.798790][ T971] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 132.808466][ T971] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 132.827507][ T971] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 132.834743][ T971] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 132.855031][ T971] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 132.867627][ T971] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 132.877746][ T971] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 132.884969][ T971] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 132.896034][ T971] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 132.905813][ T971] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 132.913377][ T971] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 132.931950][ T971] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 132.951490][ T971] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0016/input/input26 [ 132.988403][ T971] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 133.014989][ T971] usb 5-1: USB disconnect, device number 16 [ 133.023281][ T5874] prodikeys 0003:041E:2801.0017: unknown main item tag 0x0 [ 133.048065][ T5874] prodikeys 0003:041E:2801.0017: unknown main item tag 0x0 [ 133.055547][ T5874] prodikeys 0003:041E:2801.0017: unknown main item tag 0x0 [ 133.063488][ T5874] prodikeys 0003:041E:2801.0017: unknown main item tag 0x0 [ 133.078619][ T5874] prodikeys 0003:041E:2801.0017: unknown main item tag 0x0 [ 133.093265][ T5874] prodikeys 0003:041E:2801.0017: unknown main item tag 0x0 [ 133.102294][ T5874] prodikeys 0003:041E:2801.0017: unknown main item tag 0x0 [ 133.212841][ T5874] prodikeys 0003:041E:2801.0017: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 133.243412][ T5874] hid_prodikeys: hid-prodikeys: failed to find output report [ 133.243412][ T5874] [ 133.275758][ T5874] usb 3-1: USB disconnect, device number 17 [ 133.419874][ T5871] kernel write not supported for file /snd/seq (pid: 5871 comm: kworker/0:4) [ 133.486243][ T8985] __nla_validate_parse: 5 callbacks suppressed [ 133.486260][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1406'. [ 133.503463][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 133.513425][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 133.523205][ T8987] netlink: 'syz.0.1407': attribute type 20 has an invalid length. [ 133.587217][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 133.587232][ T30] audit: type=1400 audit(1742158116.365:542): avc: denied { append } for pid=8990 comm="syz.0.1409" name="sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 133.843752][ T9009] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1416'. [ 134.219071][ T9027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1427'. [ 134.236753][ T9031] ALSA: mixer_oss: invalid OSS volume '' [ 134.706255][ T30] audit: type=1400 audit(1742158117.494:543): avc: denied { read } for pid=9050 comm="syz.4.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 134.780778][ T30] audit: type=1400 audit(1742158117.534:544): avc: denied { setopt } for pid=9050 comm="syz.4.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 134.879598][ T30] audit: type=1400 audit(1742158117.665:545): avc: denied { accept } for pid=9059 comm="syz.2.1442" path="socket:[22236]" dev="sockfs" ino=22236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.098974][ T30] audit: type=1400 audit(1742158117.887:546): avc: denied { execute } for pid=9071 comm="syz.2.1447" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 135.450013][ T9087] input: syz0 as /devices/virtual/input/input27 [ 135.915650][ T30] audit: type=1400 audit(1742158118.713:547): avc: denied { audit_read } for pid=9101 comm="syz.2.1462" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.936691][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.980384][ T9104] bond_slave_0: entered promiscuous mode [ 135.986335][ T9104] bond_slave_1: entered promiscuous mode [ 135.992045][ T9104] syz_tun: entered promiscuous mode [ 136.028843][ T9104] macvlan2: entered promiscuous mode [ 136.038789][ T9104] bond0: entered promiscuous mode [ 136.058499][ T9104] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.090802][ T9106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 136.097535][ T9106] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 136.181036][ T9106] vhci_hcd vhci_hcd.0: Device attached [ 136.189949][ T9115] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 136.196475][ T9115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.212806][ T9109] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 136.219330][ T9109] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.234108][ T9109] vhci_hcd vhci_hcd.0: Device attached [ 136.240789][ T9115] vhci_hcd vhci_hcd.0: Device attached [ 136.255311][ T30] audit: type=1400 audit(1742158119.056:548): avc: denied { append } for pid=9119 comm="syz.4.1467" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.280902][ T9120] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 136.303688][ T9106] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(5) [ 136.310222][ T9106] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 136.324446][ T9106] vhci_hcd vhci_hcd.0: Device attached [ 136.339147][ T971] vhci_hcd: vhci_device speed not set [ 136.365513][ T9116] vhci_hcd: connection closed [ 136.366975][ T9122] vhci_hcd: connection closed [ 136.368700][ T9107] vhci_hcd: connection closed [ 136.377060][ T9114] vhci_hcd: connection closed [ 136.387419][ T12] vhci_hcd: stop threads [ 136.399368][ T971] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 136.411120][ T9108] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 136.418274][ T5871] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 136.432889][ T12] vhci_hcd: release socket [ 136.439248][ T12] vhci_hcd: disconnect device [ 136.446701][ T12] vhci_hcd: stop threads [ 136.457936][ T12] vhci_hcd: release socket [ 136.466459][ T12] vhci_hcd: disconnect device [ 136.481605][ T12] vhci_hcd: stop threads [ 136.496074][ T12] vhci_hcd: release socket [ 136.502395][ T30] audit: type=1400 audit(1742158119.298:549): avc: denied { listen } for pid=9133 comm="syz.0.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 136.505244][ T12] vhci_hcd: disconnect device [ 136.548640][ T12] vhci_hcd: stop threads [ 136.553438][ T12] vhci_hcd: release socket [ 136.564374][ T12] vhci_hcd: disconnect device [ 136.569716][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.581000][ T5871] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.591218][ T30] audit: type=1400 audit(1742158119.398:550): avc: denied { watch_mount } for pid=9137 comm="syz.0.1475" path="/295" dev="tmpfs" ino=1508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 136.620877][ T5871] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.630101][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.638500][ T5871] usb 4-1: SerialNumber: syz [ 136.750958][ T30] audit: type=1400 audit(1742158119.549:551): avc: denied { getopt } for pid=9143 comm="syz.1.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.848876][ T5871] usb 4-1: 0:2 : does not exist [ 136.863467][ T5871] usb 4-1: USB disconnect, device number 13 [ 136.904913][ T5874] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 137.055049][ T5874] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.082074][ T5874] usb 1-1: config 0 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.113272][ T5874] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.113881][ T9159] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 137.140848][ T5874] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 137.166993][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.193378][ T5874] usb 1-1: config 0 descriptor?? [ 137.200108][ T9142] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 137.248710][ T9165] kernel read not supported for file /eth0 (pid: 9165 comm: syz.4.1488) [ 137.430446][ T9173] input: syz1 as /devices/virtual/input/input28 [ 137.642296][ T5874] isku 0003:1E7D:319C.0018: unknown main item tag 0x0 [ 137.656441][ T5874] isku 0003:1E7D:319C.0018: unknown main item tag 0x0 [ 137.673727][ T5874] isku 0003:1E7D:319C.0018: unknown main item tag 0x0 [ 137.691278][ T5874] isku 0003:1E7D:319C.0018: unknown main item tag 0x0 [ 137.710263][ T5874] isku 0003:1E7D:319C.0018: unknown main item tag 0x0 [ 137.735296][ T5874] isku 0003:1E7D:319C.0018: hidraw0: USB HID v0.f9 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 137.848027][ T5871] usb 1-1: USB disconnect, device number 13 [ 138.702903][ T974] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 138.882419][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 138.882434][ T30] audit: type=1400 audit(1742158121.704:553): avc: denied { map } for pid=9199 comm="syz.0.1505" path="socket:[23067]" dev="sockfs" ino=23067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.891767][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 138.914924][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 138.924287][ T30] audit: type=1400 audit(1742158121.704:554): avc: denied { read } for pid=9199 comm="syz.0.1505" path="socket:[23067]" dev="sockfs" ino=23067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.958765][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.970893][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.000799][ T974] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 139.024486][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.051375][ T974] usb 2-1: config 0 descriptor?? [ 139.070660][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 139.103495][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.115925][ T9] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 139.135465][ T9] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 139.166227][ T9] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 139.206369][ T9] usb 5-1: config 128 has no interface number 0 [ 139.235036][ T9] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 139.269961][ T9] usb 5-1: config 128 interface 127 has no altsetting 0 [ 139.288752][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 139.308647][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.317363][ T9] usb 5-1: Product: syz [ 139.322376][ T9] usb 5-1: Manufacturer: syz [ 139.326982][ T9] usb 5-1: SerialNumber: syz [ 139.389478][ T9196] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 139.482848][ T974] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 139.490463][ T974] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 139.508114][ T974] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 139.515640][ T974] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 139.535714][ T974] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 139.545640][ T974] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 139.561754][ T974] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 139.587714][ T974] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 139.607895][ T974] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 139.626860][ T974] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 139.628870][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.658286][ T974] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 139.677504][ T9] usb 5-1: USB disconnect, device number 17 [ 139.756734][ T974] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf4 found [ 139.795585][ T974] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf3 found [ 139.817923][ T974] usb 2-1: USB disconnect, device number 13 [ 140.157885][ T9238] bond0: entered promiscuous mode [ 140.162949][ T9238] bond_slave_0: entered promiscuous mode [ 140.177471][ T9238] bond_slave_1: entered promiscuous mode [ 140.195855][ T9238] batadv0: entered promiscuous mode [ 140.203081][ T9238] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 140.361680][ T30] audit: type=1400 audit(1742158123.182:555): avc: denied { view } for pid=9247 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 140.420209][ T9252] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1521'. [ 140.436484][ T9255] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 140.451006][ T9255] macsec1: entered promiscuous mode [ 140.456622][ T9255] macsec1: entered allmulticast mode [ 140.461919][ T9255] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 140.521253][ T9260] bridge0: port 3(syz_tun) entered blocking state [ 140.530685][ T9260] bridge0: port 3(syz_tun) entered disabled state [ 140.540328][ T9260] syz_tun: entered allmulticast mode [ 140.551268][ T9260] syz_tun: entered promiscuous mode [ 140.601902][ T974] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 140.609529][ T5875] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 140.710035][ T30] audit: type=1400 audit(1742158123.534:556): avc: denied { mount } for pid=9270 comm="syz.2.1531" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.781006][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 140.786577][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 140.795495][ T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.810702][ T5875] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 140.829235][ T5875] usb 5-1: config 0 has no interface number 0 [ 140.835387][ T974] usb 4-1: config 0 has no interfaces? [ 140.850591][ T5875] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 140.870169][ T974] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 140.895433][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.904897][ T5875] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 140.920076][ T974] usb 4-1: Product: syz [ 140.924257][ T974] usb 4-1: Manufacturer: syz [ 140.928960][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.939920][ T974] usb 4-1: SerialNumber: syz [ 140.949115][ T5875] usb 5-1: Product: syz [ 140.957017][ T5875] usb 5-1: Manufacturer: syz [ 140.963336][ T974] r8152-cfgselector 4-1: Unknown version 0x0000 [ 140.971845][ T5875] usb 5-1: SerialNumber: syz [ 140.977953][ T974] r8152-cfgselector 4-1: config 0 descriptor?? [ 140.985010][ T5875] usb 5-1: config 0 descriptor?? [ 141.024078][ T9284] team0: entered promiscuous mode [ 141.030382][ T9284] team_slave_0: entered promiscuous mode [ 141.036314][ T9284] team_slave_1: entered promiscuous mode [ 141.042340][ T9284] geneve0: entered promiscuous mode [ 141.049185][ T9283] team0: left promiscuous mode [ 141.054581][ T9283] team_slave_0: left promiscuous mode [ 141.061401][ T9283] team_slave_1: left promiscuous mode [ 141.067857][ T9283] geneve0: left promiscuous mode [ 141.193170][ T5875] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0 [ 141.207378][ T5875] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 141.221369][ T974] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 141.391277][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'. [ 141.407821][ T5875] usb 5-1: USB disconnect, device number 18 [ 141.434268][ T9301] bond1 (unregistering): Released all slaves [ 141.487120][ T971] vhci_hcd: vhci_device speed not set [ 142.142195][ T30] audit: type=1400 audit(1742158124.972:557): avc: denied { append } for pid=9332 comm="syz.2.1559" name="event3" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.180310][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1560'. [ 142.587742][ T9360] netlink: 'syz.0.1568': attribute type 3 has an invalid length. [ 142.756343][ T30] audit: type=1326 audit(1742158125.595:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 142.823492][ T30] audit: type=1326 audit(1742158125.595:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 142.873665][ T30] audit: type=1326 audit(1742158125.635:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 142.897402][ T30] audit: type=1326 audit(1742158125.635:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 142.938631][ T30] audit: type=1326 audit(1742158125.635:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 143.030162][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 143.178913][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 143.185281][ T10] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 143.193750][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.205410][ T10] usb 1-1: config 0 has no interface number 0 [ 143.213742][ T10] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.226887][ T10] usb 1-1: config 0 interface 52 has no altsetting 0 [ 143.265310][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 143.285226][ T10] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 143.295907][ T10] usb 1-1: Manufacturer: syz [ 143.302537][ T10] usb 1-1: config 0 descriptor?? [ 143.525627][ T10] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input31 [ 143.712481][ T9434] netlink: 'syz.1.1602': attribute type 19 has an invalid length. [ 143.780772][ T9] usb 1-1: USB disconnect, device number 14 [ 143.786780][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 143.895881][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 143.928453][ T9445] overlayfs: missing 'workdir' [ 144.070235][ T10] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 144.089420][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.111034][ T10] usb 4-1: config 0 descriptor?? [ 144.343681][ T5874] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 144.502909][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 144.514161][ T5874] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 144.532721][ T5874] usb 5-1: config 0 has no interface number 0 [ 144.546952][ T5874] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 144.556827][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.569744][ T5874] usb 5-1: Product: syz [ 144.575129][ T5874] usb 5-1: Manufacturer: syz [ 144.579976][ T5874] usb 5-1: SerialNumber: syz [ 144.583220][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 144.583231][ T30] audit: type=1400 audit(1742158127.433:568): avc: denied { getopt } for pid=9475 comm="syz.0.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.611675][ T5874] usb 5-1: config 0 descriptor?? [ 144.730653][ T10] usb 4-1: Cannot set autoneg [ 144.735530][ T10] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 144.748910][ T10] usb 4-1: USB disconnect, device number 15 [ 144.921295][ T5875] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 145.085371][ T5874] radio-si470x 5-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 145.098643][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 145.104968][ T5874] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 145.117388][ T5875] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.130788][ T5875] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.145514][ T5875] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 145.155800][ T5874] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 145.167095][ T5875] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 145.176274][ T5875] usb 1-1: Product: syz [ 145.182314][ T5874] usb 5-1: USB disconnect, device number 19 [ 145.194299][ T5875] usb 1-1: Manufacturer: syz [ 145.202952][ T5875] hub 1-1:4.0: USB hub found [ 145.405600][ T5875] hub 1-1:4.0: 2 ports detected [ 145.429693][ T9499] block nbd1: NBD_DISCONNECT [ 145.436568][ T9498] block nbd1: Disconnected due to user request. [ 145.447633][ T9498] block nbd1: shutting down sockets [ 145.469596][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 145.619318][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 145.643082][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.660028][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.673917][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.684210][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.697117][ T10] usb 3-1: config 0 descriptor?? [ 146.006254][ T5875] usb 1-1: USB disconnect, device number 15 [ 146.056601][ T971] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 146.182118][ T9534] veth1_to_batadv: entered promiscuous mode [ 146.189939][ T9534] macsec1: entered promiscuous mode [ 146.207620][ T971] usb 2-1: Using ep0 maxpacket: 32 [ 146.235927][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.251158][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.263090][ T971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 146.286629][ T971] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 146.296162][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.306897][ T971] usb 2-1: config 0 descriptor?? [ 146.563503][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 146.745874][ T971] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.001A/input/input32 [ 146.826147][ T971] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.001A/input/input33 [ 146.933102][ T9558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.947409][ T971] kye 0003:0458:5011.001A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 146.965086][ T9558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.977505][ T9568] netlink: 'syz.4.1664': attribute type 1 has an invalid length. [ 146.985694][ T9558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.992576][ T9558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.997604][ T9568] netlink: 'syz.4.1664': attribute type 1 has an invalid length. [ 147.000341][ T9558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.188866][ T5875] usb 2-1: USB disconnect, device number 14 [ 147.262127][ T26] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 147.314128][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1671'. [ 147.371807][ T971] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 147.411584][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 147.418150][ T26] usb 1-1: config 0 has no interfaces? [ 147.425517][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 147.434684][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.442792][ T26] usb 1-1: Product: syz [ 147.447006][ T26] usb 1-1: Manufacturer: syz [ 147.451731][ T26] usb 1-1: SerialNumber: syz [ 147.457718][ T26] usb 1-1: config 0 descriptor?? [ 147.522552][ T971] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.532172][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.542613][ T971] usb 4-1: config 0 descriptor?? [ 147.548755][ T971] cp210x 4-1:0.0: cp210x converter detected [ 147.686052][ T26] usb 1-1: USB disconnect, device number 16 [ 147.954031][ T971] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 147.963560][ T971] usb 4-1: cp210x converter now attached to ttyUSB0 [ 148.168934][ T5871] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 148.174973][ T26] usb 4-1: USB disconnect, device number 16 [ 148.184557][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 148.199623][ T26] cp210x 4-1:0.0: device disconnected [ 148.237962][ T9590] vlan2: entered allmulticast mode [ 148.243363][ T9590] batadv0: entered allmulticast mode [ 148.253465][ T9590] batadv0: left allmulticast mode [ 148.259712][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 148.272961][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 148.284031][ T10] usb 3-1: USB disconnect, device number 18 [ 148.317413][ T9594] Illegal XDP return value 4294967294 on prog (id 215) dev N/A, expect packet loss! [ 148.345006][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.358891][ T5871] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 148.376616][ T5871] usb 2-1: can't read configurations, error -71 [ 148.637430][ T26] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 148.818273][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 148.824935][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.835509][ T26] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 148.872437][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.890743][ T26] usb 5-1: Product: syz [ 148.894957][ T26] usb 5-1: Manufacturer: syz [ 148.907266][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.936714][ T26] usb 5-1: SerialNumber: syz [ 148.956913][ T26] usb 5-1: config 0 descriptor?? [ 148.986303][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.992338][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.000510][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.066103][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 149.191492][ T30] audit: type=1400 audit(1742158132.050:569): avc: denied { ioctl } for pid=9622 comm="syz.1.1690" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 149.335176][ T971] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 149.381980][ T26] gs_usb 5-1:0.0: Configuring for 142 interfaces [ 149.397010][ T26] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 149.409245][ T26] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 149.484734][ T971] usb 1-1: Using ep0 maxpacket: 32 [ 149.491145][ T971] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 149.503048][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.517703][ T971] usb 1-1: config 0 descriptor?? [ 149.525909][ T971] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 149.594655][ T26] usb 5-1: USB disconnect, device number 20 [ 149.639845][ T30] audit: type=1400 audit(1742158132.501:570): avc: denied { mounton } for pid=9642 comm="syz.2.1700" path="/342/file0" dev="tmpfs" ino=1760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 149.644858][ T5871] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 149.823676][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 149.830680][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.850723][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.861286][ T5871] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 149.871640][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.893179][ T5871] usb 4-1: config 0 descriptor?? [ 150.097509][ T30] audit: type=1400 audit(1742158132.963:571): avc: denied { ioctl } for pid=9658 comm="syz.2.1706" path="socket:[25181]" dev="sockfs" ino=25181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.122041][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.260028][ T30] audit: type=1400 audit(1742158133.123:572): avc: denied { append } for pid=9665 comm="syz.1.1710" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 150.316391][ T5871] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.001B/input/input34 [ 150.352107][ T971] gspca_vc032x: reg_w err -71 [ 150.357055][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.368639][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.375012][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.380787][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.391679][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.396147][ T9674] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1714'. [ 150.406599][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406612][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406620][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406629][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406638][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406646][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406655][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406663][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406672][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406681][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406691][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406699][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406707][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.406715][ T971] gspca_vc032x: Unknown sensor... [ 150.406753][ T971] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 150.408146][ T971] usb 1-1: USB disconnect, device number 17 [ 150.532407][ T5871] appleir 0003:05AC:8241.001B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 150.553691][ T5871] usb 4-1: USB disconnect, device number 17 [ 150.646413][ T9685] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1719'. [ 150.676522][ T30] audit: type=1400 audit(1742158133.544:573): avc: denied { mount } for pid=9686 comm="syz.4.1720" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 150.717863][ T30] audit: type=1400 audit(1742158133.584:574): avc: denied { remount } for pid=9686 comm="syz.4.1720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 150.737603][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.756684][ T30] audit: type=1400 audit(1742158133.625:575): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 150.833368][ T30] audit: type=1400 audit(1742158133.695:576): avc: denied { mount } for pid=9694 comm="syz.4.1723" name="/" dev="rpc_pipefs" ino=25637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 150.856404][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.250877][ T9724] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1737'. [ 151.828077][ T971] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 151.908730][ T30] audit: type=1400 audit(1742158134.778:577): avc: denied { read } for pid=9744 comm="syz.2.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.990340][ T971] usb 4-1: Using ep0 maxpacket: 8 [ 152.013581][ T971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.033841][ T971] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 152.060997][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.085055][ T971] usb 4-1: config 0 descriptor?? [ 152.104689][ T971] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 152.301132][ T9759] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1753'. [ 152.315584][ T9759] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1753'. [ 152.488556][ T9768] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1758'. [ 152.504326][ T9768] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1758'. [ 152.698085][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 152.926716][ T971] gspca_vc032x: reg_w err -71 [ 152.931819][ T971] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 152.947505][ T971] usb 4-1: USB disconnect, device number 18 [ 153.265838][ T30] audit: type=1400 audit(1742158136.141:578): avc: denied { nlmsg_read } for pid=9816 comm="syz.0.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.265884][ T9817] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1778'. [ 153.362588][ T9812] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.380455][ T9812] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.391036][ T9812] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.402075][ T9812] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.412550][ T9812] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.501861][ T9824] tipc: Started in network mode [ 153.526369][ T9824] tipc: Node identity ac14140f, cluster identity 4711 [ 153.539397][ T9824] tipc: New replicast peer: 255.255.255.255 [ 153.556158][ T9824] tipc: Enabled bearer , priority 10 [ 153.593200][ T30] audit: type=1400 audit(1742158136.462:579): avc: denied { read } for pid=9825 comm="syz.0.1783" name="/" dev="configfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.615120][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.660312][ T971] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 153.752686][ T5831] syz_tun (unregistering): left allmulticast mode [ 153.759711][ T5831] syz_tun (unregistering): left promiscuous mode [ 153.767800][ T5831] bridge0: port 3(syz_tun) entered disabled state [ 153.824374][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 153.832761][ T971] usb 5-1: config 0 has no interfaces? [ 153.845248][ T971] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 153.858908][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.868147][ T971] usb 5-1: Product: syz [ 153.872317][ T971] usb 5-1: Manufacturer: syz [ 153.877119][ T971] usb 5-1: SerialNumber: syz [ 153.892167][ T971] usb 5-1: config 0 descriptor?? [ 153.927635][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.034431][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.092579][ T26] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 154.153509][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.183938][ T971] usb 5-1: USB disconnect, device number 21 [ 154.262029][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 154.279202][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.299084][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.311193][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.313090][ T26] usb 4-1: config 255 has an invalid interface number: 81 but max is 0 [ 154.323776][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.335539][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.347575][ T26] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 154.351322][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.367151][ T5823] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.374657][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.386620][ T26] usb 4-1: config 255 has no interface number 0 [ 154.421914][ T26] usb 4-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 154.461149][ T26] usb 4-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.516225][ T26] usb 4-1: config 255 interface 81 has no altsetting 0 [ 154.534224][ T26] usb 4-1: string descriptor 0 read error: -22 [ 154.540467][ T26] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 154.553895][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.567271][ T26] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:255.81/input/input35 [ 154.592636][ T57] bridge_slave_1: left allmulticast mode [ 154.598756][ T57] bridge_slave_1: left promiscuous mode [ 154.618350][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.647443][ T57] bridge_slave_0: left allmulticast mode [ 154.663556][ T971] tipc: Node number set to 2886997007 [ 154.669472][ T57] bridge_slave_0: left promiscuous mode [ 154.676662][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.811414][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 154.811429][ T30] audit: type=1400 audit(1742158137.685:582): avc: denied { write } for pid=9869 comm="syz.1.1803" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.894162][ T5874] usb 4-1: USB disconnect, device number 19 [ 154.965217][ T30] audit: type=1400 audit(1742158137.835:583): avc: denied { rename } for pid=9873 comm="syz.1.1806" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.186344][ T57] team0: Port device geneve0 removed [ 155.371538][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.449465][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.455515][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.462742][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.522948][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.543452][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.556132][ T57] bond0 (unregistering): (slave team0): Releasing backup interface [ 155.567996][ T57] bond0 (unregistering): Released all slaves [ 155.644518][ T9851] chnl_net:caif_netlink_parms(): no params data found [ 155.679545][ T9891] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.686139][ T9891] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.693956][ T9891] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.705511][ T9891] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.719043][ T9891] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.729570][ T9891] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.745473][ T9891] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.813450][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.832717][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.847285][ T9851] bridge_slave_0: entered allmulticast mode [ 155.860629][ T9851] bridge_slave_0: entered promiscuous mode [ 155.875670][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.886029][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.894588][ T9851] bridge_slave_1: entered allmulticast mode [ 155.901501][ T9851] bridge_slave_1: entered promiscuous mode [ 155.940422][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.974285][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.988272][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 156.029108][ T9851] team0: Port device team_slave_0 added [ 156.037793][ T9851] team0: Port device team_slave_1 added [ 156.080237][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.087195][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.128731][ T30] audit: type=1326 audit(1742158138.997:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9928 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 156.153759][ T9851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.164701][ T30] audit: type=1326 audit(1742158138.997:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9928 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 156.188743][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 156.196114][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.203313][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.240099][ T10] usb 2-1: config 0 has no interfaces? [ 156.245655][ T30] audit: type=1326 audit(1742158138.997:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9928 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 156.278893][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 156.280597][ T9851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.288601][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.328136][ T30] audit: type=1326 audit(1742158139.007:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9928 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 156.352027][ T10] usb 2-1: Product: syz [ 156.368121][ T10] usb 2-1: Manufacturer: syz [ 156.378754][ T9851] hsr_slave_0: entered promiscuous mode [ 156.382940][ T10] usb 2-1: SerialNumber: syz [ 156.392390][ T9851] hsr_slave_1: entered promiscuous mode [ 156.398763][ T10] usb 2-1: config 0 descriptor?? [ 156.408708][ T30] audit: type=1326 audit(1742158139.007:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9928 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 156.433994][ T9851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.440343][ T30] audit: type=1326 audit(1742158139.007:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9928 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 156.465485][ T30] audit: type=1326 audit(1742158139.007:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9928 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 156.475629][ T9851] Cannot create hsr debugfs directory [ 156.510391][ T30] audit: type=1326 audit(1742158139.007:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9928 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc338d169 code=0x7ffc0000 [ 156.622994][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1834'. [ 156.677714][ T5871] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 156.685710][ T9851] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.722174][ T9851] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.737162][ T5874] usb 2-1: USB disconnect, device number 17 [ 156.751761][ T9851] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.769415][ T9851] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.857648][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.863765][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.875267][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.894477][ T5871] usb 5-1: config 1 has no interface number 0 [ 156.895600][ T9851] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.904580][ T5871] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 156.919052][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.927789][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.938892][ T5871] usb 5-1: config 1 interface 1 has no altsetting 0 [ 156.948962][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.956042][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.973762][ T5871] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.996106][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.006000][ T5871] usb 5-1: Product: syz [ 157.011755][ T5871] usb 5-1: Manufacturer: syz [ 157.018400][ T5871] usb 5-1: SerialNumber: syz [ 157.167808][ T971] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 157.174164][ T9851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.326464][ T971] usb 1-1: Using ep0 maxpacket: 32 [ 157.343039][ T971] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 157.362651][ T971] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 157.384918][ T971] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 157.417521][ T971] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 157.463827][ T971] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.492758][ T971] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 157.504461][ T5871] usb 5-1: USB disconnect, device number 22 [ 157.512837][ T971] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 157.521986][ T971] usb 1-1: Product: syz [ 157.541399][ T971] usb 1-1: Manufacturer: syz [ 157.555966][ T971] usb 1-1: SerialNumber: syz [ 157.566396][ T971] usb 1-1: config 0 descriptor?? [ 157.580273][ T971] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 157.597079][ T971] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 157.613101][ T9851] veth0_vlan: entered promiscuous mode [ 157.650834][ T9851] veth1_vlan: entered promiscuous mode [ 157.672257][ T57] hsr_slave_0: left promiscuous mode [ 157.682279][ T57] hsr_slave_1: left promiscuous mode [ 157.687298][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.693669][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.701266][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.712130][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.719769][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.739460][ T57] veth1_macvtap: left promiscuous mode [ 157.747827][ T57] veth0_macvtap: left promiscuous mode [ 157.753393][ T57] veth1_vlan: left promiscuous mode [ 157.760124][ T57] veth0_vlan: left promiscuous mode [ 157.765870][ T5823] Bluetooth: hci4: command 0x041b tx timeout [ 157.773355][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.773399][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.779454][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.811574][ T26] usb 1-1: USB disconnect, device number 18 [ 157.819225][ T26] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 157.914642][ T5874] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 158.075145][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 158.086591][ T5874] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 158.106962][ T57] team0 (unregistering): Port device team_slave_1 removed [ 158.116891][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.131739][ T5874] usb 4-1: config 0 descriptor?? [ 158.158457][ T57] team0 (unregistering): Port device team_slave_0 removed [ 158.347850][ T5874] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 158.428578][ T9851] veth0_macvtap: entered promiscuous mode [ 158.440121][ T9851] veth1_macvtap: entered promiscuous mode [ 158.476839][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.487874][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.497949][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.508827][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.518722][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.530233][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.540283][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.551050][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.570596][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.586693][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.597513][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.608197][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.618733][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.628754][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.639445][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.649677][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.660150][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.679805][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.696775][ T9851] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.705781][ T9851] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.714824][ T9851] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.724190][ T9851] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.752894][ T5874] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 158.764009][ T5874] asix 4-1:0.0: probe with driver asix failed with error -71 [ 158.775637][ T5874] usb 4-1: USB disconnect, device number 20 [ 158.822346][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.841080][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.862530][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.875681][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.269444][T10009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.275814][T10009] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.281943][T10009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.289554][T10009] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.295762][T10009] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.516211][T10035] input: syz1 as /devices/virtual/input/input36 [ 159.547638][ T5874] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.701619][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 159.710004][ T5874] usb 6-1: config 0 has no interfaces? [ 159.717992][ T5874] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.727412][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.735542][ T5874] usb 6-1: Product: syz [ 159.743357][ T5874] usb 6-1: Manufacturer: syz [ 159.749314][ T5874] usb 6-1: SerialNumber: syz [ 159.755050][ T5874] usb 6-1: config 0 descriptor?? [ 159.911789][ T26] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 160.005118][ T5874] usb 6-1: USB disconnect, device number 2 [ 160.054319][ T5871] kernel write not supported for file /input/event2 (pid: 5871 comm: kworker/0:4) [ 160.091372][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.111915][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.141853][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.162722][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.178540][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.189202][ T26] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.209286][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.232177][ T26] usb 4-1: config 0 descriptor?? [ 160.239597][ T26] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 160.420745][ T5871] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 160.430594][ T971] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 160.468225][ T26] usb 4-1: USB disconnect, device number 21 [ 160.571788][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 160.590291][ T5871] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 160.599733][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.614367][ T971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.626191][ T5871] usb 5-1: config 0 descriptor?? [ 160.632005][ T971] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 160.641790][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.650177][T10070] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.659230][ T971] usb 1-1: config 0 descriptor?? [ 160.666830][ T971] pwc: Askey VC010 type 2 USB webcam detected. [ 161.069972][ T971] pwc: recv_control_msg error -32 req 02 val 2b00 [ 161.086994][ T5871] a4tech 0003:09DA:0006.001C: hidraw0: USB HID v20.00 Device [HID 09da:0006] on usb-dummy_hcd.4-1/input0 [ 161.200186][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.278383][ T971] pwc: recv_control_msg error -71 req 02 val 2c00 [ 161.289408][ T971] pwc: recv_control_msg error -71 req 04 val 1000 [ 161.295979][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.302088][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.308554][ T971] pwc: recv_control_msg error -71 req 04 val 1300 [ 161.313812][ T5875] usb 5-1: USB disconnect, device number 23 [ 161.315372][ T971] pwc: recv_control_msg error -71 req 04 val 1400 [ 161.327912][ T971] pwc: recv_control_msg error -71 req 02 val 2000 [ 161.335385][ T971] pwc: recv_control_msg error -71 req 02 val 2100 [ 161.343215][ T971] pwc: recv_control_msg error -71 req 04 val 1500 [ 161.350945][ T971] pwc: recv_control_msg error -71 req 02 val 2500 [ 161.357691][ T971] pwc: recv_control_msg error -71 req 02 val 2400 [ 161.364690][ T971] pwc: recv_control_msg error -71 req 02 val 2600 [ 161.371203][ T5836] Bluetooth: hci4: command 0x041b tx timeout [ 161.371229][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.377539][ T971] pwc: recv_control_msg error -71 req 02 val 2900 [ 161.390767][ T971] pwc: recv_control_msg error -71 req 02 val 2800 [ 161.397531][ T971] pwc: recv_control_msg error -71 req 04 val 1100 [ 161.404299][ T971] pwc: recv_control_msg error -71 req 04 val 1200 [ 161.414751][ T971] pwc: Registered as video103. [ 161.425433][ T971] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 161.452650][ T971] usb 1-1: USB disconnect, device number 19 [ 161.679368][T10110] tmpfs: Invalid gid '0x00000000ffffffff' [ 161.679440][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 161.679451][ T30] audit: type=1400 audit(1742158144.577:600): avc: denied { getopt } for pid=10108 comm="syz.1.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.799165][T10114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.875781][T10118] ucma_write: process 22 (syz.5.1910) changed security contexts after opening file descriptor, this is not allowed. [ 161.940231][ T30] audit: type=1400 audit(1742158144.837:601): avc: denied { override_creds } for pid=10120 comm="syz.4.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.236137][T10147] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1924'. [ 162.260373][T10147] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 162.329262][ T30] audit: type=1400 audit(1742158145.218:602): avc: denied { getopt } for pid=10142 comm="syz.4.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.137996][ T30] audit: type=1400 audit(1742158146.029:603): avc: denied { search } for pid=10172 comm="syz.1.1939" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 163.223885][ T30] audit: type=1400 audit(1742158146.059:604): avc: denied { write } for pid=10172 comm="syz.1.1939" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 163.337837][T10184] Invalid logical block size (2047) [ 163.437365][ T53] Bluetooth: hci4: command 0x041b tx timeout [ 163.790194][ T30] audit: type=1400 audit(1742158146.680:605): avc: denied { listen } for pid=10212 comm="syz.0.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.836184][ T30] audit: type=1400 audit(1742158146.710:606): avc: denied { read } for pid=10212 comm="syz.0.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.884909][T10220] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1960'. [ 164.097054][ T30] audit: type=1400 audit(1742158146.970:607): avc: denied { watch watch_reads } for pid=10235 comm="syz.1.1966" path="pipe:[29021]" dev="pipefs" ino=29021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 164.192333][ T30] audit: type=1400 audit(1742158147.030:608): avc: denied { listen } for pid=10237 comm="syz.5.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.705305][ T5871] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 164.835014][ T971] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 164.855251][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 164.861525][ T5871] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 164.877324][ T5871] usb 5-1: config 0 has no interface number 0 [ 164.883664][ T5871] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 164.898865][ T5871] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 164.911404][ T5871] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 164.926182][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.934269][ T5871] usb 5-1: Product: syz [ 164.940951][ T5871] usb 5-1: Manufacturer: syz [ 164.945690][ T5871] usb 5-1: SerialNumber: syz [ 164.951921][ T5871] usb 5-1: config 0 descriptor?? [ 164.958172][T10256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 164.965730][T10256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 165.006380][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.017526][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.027359][ T971] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 165.036812][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.046874][ T971] usb 2-1: config 0 descriptor?? [ 165.190221][T10256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 165.204267][T10256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 165.514057][ T53] Bluetooth: hci4: command 0x041b tx timeout [ 165.621808][ T30] audit: type=1400 audit(1742158148.512:609): avc: denied { write } for pid=10303 comm="syz.0.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 165.851985][ T5871] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 165.874391][ T971] hid-led 0003:0FC5:B080.001D: probe with driver hid-led failed with error -71 [ 165.894408][ T5871] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 165.913977][ T971] usb 2-1: USB disconnect, device number 18 [ 165.935046][ T5871] asix 5-1:0.251: probe with driver asix failed with error -71 [ 165.951094][ T5871] usb 5-1: USB disconnect, device number 24 [ 165.963389][ T5875] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 166.143194][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 166.159803][ T5875] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 166.180309][ T5875] usb 1-1: config 0 has no interface number 0 [ 166.196580][ T5875] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 166.210280][ T5875] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 166.223529][ T5875] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 166.237525][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.257052][ T5875] usb 1-1: Product: syz [ 166.261226][ T5875] usb 1-1: Manufacturer: syz [ 166.265921][ T5875] usb 1-1: SerialNumber: syz [ 166.283655][ T5875] usb 1-1: config 0 descriptor?? [ 166.292871][T10310] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 166.305245][T10310] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 166.526444][T10310] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 166.533769][T10310] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 271.632479][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 271.639474][ C1] rcu: 0-...!: (0 ticks this GP) idle=5224/1/0x4000000000000000 softirq=31064/31064 fqs=0 [ 271.650344][ C1] rcu: (detected by 1, t=10502 jiffies, g=27025, q=253 ncpus=2) [ 271.658062][ C1] Sending NMI from CPU 1 to CPUs 0: [ 271.658086][ C0] NMI backtrace for cpu 0 [ 271.658095][ C0] CPU: 0 UID: 0 PID: 9851 Comm: syz-executor Not tainted 6.14.0-rc6-syzkaller-00263-gd1275e99d1c4 #0 [ 271.658110][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 271.658118][ C0] RIP: 0010:timerqueue_add+0x6c/0x330 [ 271.658142][ C0] Code: df e8 b8 30 66 f6 48 39 eb 0f 85 47 02 00 00 e8 3a 36 66 f6 48 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 4b 02 00 00 48 8b 04 24 48 8b 18 48 85 db 0f 84 56 01 00 00 [ 271.658155][ C0] RSP: 0018:ffffc90000007ad8 EFLAGS: 00000046 [ 271.658167][ C0] RAX: dffffc0000000000 RBX: ffff888032d04340 RCX: ffffffff8b53bc18 [ 271.658177][ C0] RDX: 1ffff110170c58fa RSI: ffffffff8b53bc26 RDI: 0000000000000006 [ 271.658186][ C0] RBP: ffff888032d04340 R08: 0000000000000006 R09: ffff888032d04340 [ 271.658195][ C0] R10: ffff888032d04340 R11: 000000000000000a R12: ffff888032d04340 [ 271.658204][ C0] R13: ffff8880b862c780 R14: ffff8880b862c680 R15: ffffffff896ada30 [ 271.658212][ C0] FS: 000055557f3bf500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 271.658226][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.658235][ C0] CR2: 0000400000000240 CR3: 00000000247ba000 CR4: 00000000003526f0 [ 271.658244][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.658252][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 271.658260][ C0] Call Trace: [ 271.658265][ C0] [ 271.658270][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 271.658285][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 271.658303][ C0] ? nmi_handle+0x1ac/0x5d0 [ 271.658322][ C0] ? timerqueue_add+0x6c/0x330 [ 271.658341][ C0] ? default_do_nmi+0x6a/0x160 [ 271.658355][ C0] ? exc_nmi+0x170/0x1e0 [ 271.658367][ C0] ? end_repeat_nmi+0xf/0x53 [ 271.658385][ C0] ? __pfx_advance_sched+0x10/0x10 [ 271.658400][ C0] ? timerqueue_add+0x48/0x330 [ 271.658418][ C0] ? timerqueue_add+0x56/0x330 [ 271.658435][ C0] ? timerqueue_add+0x6c/0x330 [ 271.658453][ C0] ? timerqueue_add+0x6c/0x330 [ 271.658472][ C0] ? timerqueue_add+0x6c/0x330 [ 271.658490][ C0] [ 271.658495][ C0] [ 271.658500][ C0] ? __pfx_advance_sched+0x10/0x10 [ 271.658512][ C0] __hrtimer_run_queues+0x903/0xae0 [ 271.658529][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 271.658542][ C0] ? read_tsc+0x9/0x20 [ 271.658558][ C0] hrtimer_interrupt+0x392/0x8e0 [ 271.658576][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 271.658596][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 271.658611][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.658629][ C0] RIP: 0010:kasan_byte_accessible+0x18/0x30 [ 271.658647][ C0] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 0f b6 07 <3c> 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f [ 271.658660][ C0] RSP: 0018:ffffc90000007da8 EFLAGS: 00000282 [ 271.658669][ C0] RAX: 0000000000000000 RBX: ffff888028dc1bb0 RCX: ffff888028dc1ee0 [ 271.658678][ C0] RDX: 0000000000000000 RSI: ffff888028dc1bb0 RDI: ffffed10051b8376 [ 271.658686][ C0] RBP: ffffffff81a109ad R08: 0000000000000110 R09: 0000000000000000 [ 271.658695][ C0] R10: 0000000000000000 R11: 0000000000000009 R12: ffff888140409140 [ 271.658708][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888140409140 [ 271.658718][ C0] ? rcu_core+0x79d/0x14d0 [ 271.658734][ C0] check_slab_allocation+0xb2/0x130 [ 271.658748][ C0] slab_free_after_rcu_debug+0xf8/0x340 [ 271.658762][ C0] ? rcu_core+0x79b/0x14d0 [ 271.658774][ C0] rcu_core+0x79d/0x14d0 [ 271.658787][ C0] ? __pfx_rcu_core+0x10/0x10 [ 271.658802][ C0] handle_softirqs+0x213/0x8f0 [ 271.658823][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 271.658842][ C0] __irq_exit_rcu+0x109/0x170 [ 271.658859][ C0] irq_exit_rcu+0x9/0x30 [ 271.658876][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 271.658891][ C0] [ 271.658895][ C0] [ 271.658900][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.658917][ C0] RIP: 0010:kasan_check_range+0x14f/0x1a0 [ 271.658933][ C0] Code: 83 c0 01 49 89 d3 48 39 d0 74 11 80 38 00 74 ef 4d 8d 1c 2c 48 85 c0 48 89 c2 75 93 48 89 da 4c 89 d8 4c 29 da e9 2c ff ff ff <5b> b8 01 00 00 00 5d 41 5c c3 cc cc cc cc b8 01 00 00 00 c3 cc cc [ 271.658945][ C0] RSP: 0018:ffffc90005287560 EFLAGS: 00000246 [ 271.658954][ C0] RAX: fffffbfff20c4d03 RBX: fffffbfff20c4d03 RCX: ffffffff8196b329 [ 271.658963][ C0] RDX: fffffbfff20c4d03 RSI: 0000000000000008 RDI: ffffffff90626810 [ 271.658972][ C0] RBP: fffffbfff20c4d02 R08: 0000000000000000 R09: fffffbfff20c4d02 [ 271.658981][ C0] R10: ffffffff90626817 R11: 0000000000000007 R12: ffffffff8e1bd140 [ 271.658990][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 271.659000][ C0] ? lock_release+0xa9/0x6f0 [ 271.659020][ C0] lock_release+0xa9/0x6f0 [ 271.659036][ C0] ? rcu_is_watching+0x12/0xc0 [ 271.659050][ C0] ? page_ext_put+0x3e/0xd0 [ 271.659064][ C0] ? __pfx_lock_release+0x10/0x10 [ 271.659081][ C0] ? page_ext_get+0x34/0x310 [ 271.659097][ C0] page_ext_put+0x43/0xd0 [ 271.659109][ C0] page_table_check_set.part.0+0x3b8/0x550 [ 271.659125][ C0] page_table_check_set+0x275/0x4c0 [ 271.659139][ C0] __page_table_check_ptes_set+0x2d0/0x3e0 [ 271.659153][ C0] ? vm_normal_page+0x13c/0x2b0 [ 271.659170][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 271.659184][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 271.659197][ C0] ? copy_page_range+0xd09/0x55e0 [ 271.659217][ C0] copy_page_range+0x2068/0x55e0 [ 271.659246][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 271.659264][ C0] ? find_held_lock+0x2d/0x110 [ 271.659279][ C0] ? __pfx_lock_release+0x10/0x10 [ 271.659296][ C0] ? lock_acquire+0x2f/0xb0 [ 271.659312][ C0] ? copy_process+0x7c12/0x8c50 [ 271.659326][ C0] ? down_write+0x14e/0x200 [ 271.659345][ C0] ? up_write+0x1b2/0x520 [ 271.659363][ C0] copy_process+0x7ccb/0x8c50 [ 271.659375][ C0] ? wp_page_reuse+0x287/0x900 [ 271.659397][ C0] ? __pfx_copy_process+0x10/0x10 [ 271.659409][ C0] ? __pfx_mark_lock+0x10/0x10 [ 271.659434][ C0] kernel_clone+0xfd/0x960 [ 271.659447][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 271.659464][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 271.659478][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 271.659495][ C0] ? do_user_addr_fault+0xdc7/0x13f0 [ 271.659514][ C0] __do_sys_clone+0xcf/0x120 [ 271.659526][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 271.659544][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 271.659562][ C0] do_syscall_64+0xcd/0x250 [ 271.659579][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.659597][ C0] RIP: 0033:0x7f2be1b839d3 [ 271.659608][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 271.659619][ C0] RSP: 002b:00007fffbe3f3768 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 271.659631][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2be1b839d3 [ 271.659639][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 271.659647][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 271.659655][ C0] R10: 000055557f3bf7d0 R11: 0000000000000246 R12: 0000000000000000 [ 271.659663][ C0] R13: 00000000000927c0 R14: 0000000000028c6f R15: 00007fffbe3f3900 [ 271.659676][ C0] [ 271.660082][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g27025 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 272.387627][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 272.397588][ C1] rcu: RCU grace-period kthread stack dump: [ 272.403466][ C1] task:rcu_preempt state:R running task stack:26960 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 272.416953][ C1] Call Trace: [ 272.420222][ C1] [ 272.423149][ C1] __schedule+0xf43/0x5890 [ 272.427569][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 272.432780][ C1] ? __pfx___schedule+0x10/0x10 [ 272.437627][ C1] ? schedule+0x298/0x350 [ 272.441953][ C1] ? __pfx_lock_release+0x10/0x10 [ 272.446981][ C1] ? lock_acquire+0x2f/0xb0 [ 272.451481][ C1] ? schedule+0x1fd/0x350 [ 272.455810][ C1] schedule+0xe7/0x350 [ 272.459873][ C1] schedule_timeout+0x124/0x280 [ 272.464717][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 272.470082][ C1] ? __pfx_process_timeout+0x10/0x10 [ 272.475367][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 272.481167][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 272.486631][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 272.491399][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 272.496684][ C1] ? rcu_gp_init+0xc82/0x1630 [ 272.501366][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 272.506565][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 272.512371][ C1] rcu_gp_kthread+0x271/0x380 [ 272.517048][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 272.522247][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.527447][ C1] ? __kthread_parkme+0x148/0x220 [ 272.532467][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 272.537666][ C1] kthread+0x3af/0x750 [ 272.541732][ C1] ? __pfx_kthread+0x10/0x10 [ 272.546323][ C1] ? __pfx_kthread+0x10/0x10 [ 272.550911][ C1] ret_from_fork+0x45/0x80 [ 272.555328][ C1] ? __pfx_kthread+0x10/0x10 [ 272.559916][ C1] ret_from_fork_asm+0x1a/0x30 [ 272.564687][ C1] [ 272.567693][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 272.574003][ C1] CPU: 1 UID: 0 PID: 10338 Comm: syz.1.2012 Not tainted 6.14.0-rc6-syzkaller-00263-gd1275e99d1c4 #0 [ 272.584754][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.594798][ C1] RIP: 0010:handle_softirqs+0x1da/0x8f0 [ 272.600345][ C1] Code: 89 44 24 18 48 89 6c 24 10 48 c7 c7 c0 83 6b 8b e8 ab 6d db 09 65 66 c7 05 f9 b9 87 7e 00 00 e8 dc 8a 45 00 fb bb ff ff ff ff <49> c7 c6 c0 b0 e0 8d 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 272.619945][ C1] RSP: 0018:ffffc90000a28f28 EFLAGS: 00000216 [ 272.626005][ C1] RAX: 00000000007ebaa0 RBX: 00000000ffffffff RCX: 1ffffffff2ddba1a [ 272.633967][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cfc80 RDI: ffffffff8bd36b60 [ 272.641930][ C1] RBP: ffff88807b9c4880 R08: 0000000000000001 R09: fffffbfff2dd8d9f [ 272.649892][ C1] R10: ffffffff96ec6cff R11: 0000000000000001 R12: 0000000000000100 [ 272.657856][ C1] R13: 000000000000000a R14: 0000000000000001 R15: 0000000000000000 [ 272.665818][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 272.674740][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.681317][ C1] CR2: 000000110c25f329 CR3: 000000006700e000 CR4: 00000000003526f0 [ 272.689282][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.697244][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.705205][ C1] Call Trace: [ 272.708474][ C1] [ 272.711312][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 272.717634][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 272.722827][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 272.728288][ C1] ? timekeeping_advance+0x72e/0xa90 [ 272.733571][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 272.739198][ C1] ? __asan_memcpy+0x3c/0x60 [ 272.743791][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 272.749079][ C1] ? rcu_is_watching+0x12/0xc0 [ 272.753842][ C1] ? update_process_times+0x178/0x2d0 [ 272.759214][ C1] ? __pfx_update_process_times+0x10/0x10 [ 272.764934][ C1] ? update_wall_time+0x1c/0x40 [ 272.769784][ C1] ? tick_nohz_handler+0x376/0x530 [ 272.774890][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 272.780343][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 272.785717][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 272.791428][ C1] ? read_tsc+0x9/0x20 [ 272.795506][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 272.800611][ C1] ? __pfx_mark_lock+0x10/0x10 [ 272.805378][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 272.811534][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 272.817336][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.823500][ C1] ? handle_softirqs+0x1da/0x8f0 [ 272.828445][ C1] ? handle_softirqs+0x1d4/0x8f0 [ 272.833382][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 272.838670][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 272.843959][ C1] __irq_exit_rcu+0x109/0x170 [ 272.848637][ C1] irq_exit_rcu+0x9/0x30 [ 272.852877][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 272.858506][ C1] [ 272.861429][ C1] [ 272.864357][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.870334][ C1] RIP: 0010:smp_call_function_many_cond+0x4c4/0x12c0 [ 272.877003][ C1] Code: d2 09 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ac 0e 0c 00 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 [ 272.896604][ C1] RSP: 0018:ffffc90003527a40 EFLAGS: 00000293 [ 272.902664][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81ade3da [ 272.910624][ C1] RDX: ffff88807b9c4880 RSI: ffffffff81ade3b4 RDI: 0000000000000005 [ 272.918589][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 272.926552][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10170c8d41 [ 272.934513][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 272.942482][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 272.948544][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 272.954617][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 272.959810][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 272.964917][ C1] flush_tlb_mm_range+0x271/0x4a0 [ 272.969937][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 272.975484][ C1] tlb_finish_mmu+0x3c9/0x7b0 [ 272.980159][ C1] exit_mmap+0x40e/0xba0 [ 272.984407][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 272.989179][ C1] ? __pfx_mark_lock+0x10/0x10 [ 272.993958][ C1] __mmput+0x12a/0x410 [ 272.998028][ C1] mmput+0x62/0x70 [ 273.001750][ C1] do_exit+0x9ba/0x2d70 [ 273.005903][ C1] ? __pfx_do_exit+0x10/0x10 [ 273.010490][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 273.015864][ C1] do_group_exit+0xd3/0x2a0 [ 273.020365][ C1] __x64_sys_exit_group+0x3e/0x50 [ 273.025386][ C1] x64_sys_call+0x151f/0x1720 [ 273.030056][ C1] do_syscall_64+0xcd/0x250 [ 273.034559][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.040456][ C1] RIP: 0033:0x7f5673b8d169 [ 273.044863][ C1] Code: Unable to access opcode bytes at 0x7f5673b8d13f. [ 273.051867][ C1] RSP: 002b:00007ffd2b6edc38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 273.060270][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5673b8d169 [ 273.068233][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.076195][ C1] RBP: 00007ffd2b6edc9c R08: 000000042b6edd2f R09: 00000000000927c0 [ 273.084156][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000193 [ 273.092117][ C1] R13: 00000000000927c0 R14: 0000000000028a9f R15: 00007ffd2b6edcf0 [ 273.100093][ C1]