last executing test programs: 25.447478242s ago: executing program 3 (id=1123): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1e, @rand_addr=0x64010101}, 0x10) 25.369833941s ago: executing program 3 (id=1125): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 25.089162601s ago: executing program 3 (id=1131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xcd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfa35d8eb3c0edf2e}, 0x14) 25.005590305s ago: executing program 3 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 24.913170399s ago: executing program 3 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x3, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 24.452312077s ago: executing program 3 (id=1145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000) 24.27617517s ago: executing program 32 (id=1145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000) 4.968534244s ago: executing program 2 (id=1419): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x80, 0x1e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @NDA_FLAGS_EXT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 4.729802317s ago: executing program 2 (id=1422): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r0, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000005c0), 0x4) 4.526226075s ago: executing program 2 (id=1427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000100), &(0x7f00000001c0)=r2}, 0x20) 4.374724491s ago: executing program 2 (id=1431): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.843439944s ago: executing program 0 (id=1435): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r1=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r1], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400"], 0x24}}, 0x0) 3.671551656s ago: executing program 0 (id=1436): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 3.213219526s ago: executing program 2 (id=1442): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001340)={0x2c, &(0x7f0000001180)={0x40, 0x9}, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x20, 0x3, 0x1, 0x9d}}) 2.627107539s ago: executing program 0 (id=1453): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90a2, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) futimesat(0xffffffffffffffff, 0x0, 0x0) 2.394681912s ago: executing program 1 (id=1459): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.151448218s ago: executing program 1 (id=1463): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 1.987354731s ago: executing program 1 (id=1466): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f00000001c0)='\x00', &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x0, 0x0) 1.838056673s ago: executing program 1 (id=1467): r0 = semget$private(0x0, 0x3, 0x31) semop(r0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) semop(r0, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) semop(r0, &(0x7f0000001400)=[{0x0, 0x200}], 0x1) 1.830499129s ago: executing program 4 (id=1468): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={0x1c, r1, 0x419, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) 1.744287415s ago: executing program 4 (id=1470): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x52}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.535420188s ago: executing program 4 (id=1472): sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 1.390434663s ago: executing program 4 (id=1475): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1.33556785s ago: executing program 0 (id=1476): pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0) 1.288755149s ago: executing program 5 (id=1477): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, 0x0, 0x5, 0x602, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) 1.118066526s ago: executing program 5 (id=1478): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r1, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.045872901s ago: executing program 2 (id=1479): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 923.205155ms ago: executing program 1 (id=1480): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 919.603573ms ago: executing program 4 (id=1481): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, 0x0) 857.858527ms ago: executing program 5 (id=1482): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, r1, 0x7d243a6ea807936d, 0x10, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) 763.74628ms ago: executing program 4 (id=1483): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 763.194129ms ago: executing program 1 (id=1484): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 570.058703ms ago: executing program 5 (id=1485): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) alarm(0x5) 450.929534ms ago: executing program 5 (id=1486): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1}, 0x0) 361.748165ms ago: executing program 0 (id=1487): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000100)={0x0}) 282.202311ms ago: executing program 5 (id=1488): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 0 (id=1489): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000002fc0)='1', 0x1) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) kernel console output (not intermixed with test programs): 27][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.385662][ T8] usb 1-1: Product: syz [ 79.393202][ T8] usb 1-1: SerialNumber: syz [ 79.624584][ T8] usbhid 1-1:1.0: can't add hid device: -71 [ 79.633969][ T8] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 79.658009][ T8] usb 1-1: USB disconnect, device number 5 [ 79.841631][ T5898] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.045044][ T5898] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.063780][ T5898] usb 5-1: config 0 has no interface number 0 [ 80.069945][ T5898] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.083664][ T5898] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.097572][ T5898] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 80.108010][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.148089][ T5898] usb 5-1: config 0 descriptor?? [ 80.326981][ T6603] pim6reg: entered allmulticast mode [ 80.568331][ T5898] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 80.588790][ T5898] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 80.607999][ T5898] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 80.615741][ T5898] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 80.623941][ T5898] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 80.631506][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.639130][ T5898] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 80.648081][ T5898] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 80.658808][ T5898] prodikeys 0003:041E:2801.0007: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 80.678957][ T5898] hid_prodikeys: hid-prodikeys: failed to find output report [ 80.678957][ T5898] [ 80.794355][ T5927] usb 5-1: USB disconnect, device number 3 [ 80.805868][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 80.816346][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.824537][ T9] usb 1-1: Product: syz [ 80.828833][ T9] usb 1-1: Manufacturer: syz [ 80.835544][ T9] usb 1-1: SerialNumber: syz [ 80.841742][ T9] usb 1-1: config 0 descriptor?? [ 80.848464][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 80.990794][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 81.156640][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.178780][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.178821][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 81.178844][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.181961][ T25] usb 4-1: config 0 descriptor?? [ 81.455115][ T9] gspca_sunplus: reg_r err -71 [ 81.476437][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 81.486463][ T9] usb 1-1: USB disconnect, device number 6 [ 81.593760][ T25] wacom 0003:056A:0028.0008: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 81.616330][ T25] wacom 0003:056A:0028.0008: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.3-1/input0 [ 81.634056][ T25] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0028.0008/input/input15 [ 81.651131][ T5851] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.822289][ T5927] usb 4-1: USB disconnect, device number 5 [ 81.823779][ T5851] usb 5-1: Using ep0 maxpacket: 16 [ 81.850077][ T5851] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.875797][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.892474][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.903183][ T5851] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 81.909494][ T5867] kernel write not supported for file /sg0 (pid: 5867 comm: kworker/1:3) [ 81.914121][ T5851] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.937895][ T5851] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 81.951214][ T5851] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 81.960198][ T5851] usb 5-1: Manufacturer: syz [ 81.973767][ T5851] usb 5-1: config 0 descriptor?? [ 82.154483][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 82.154499][ T29] audit: type=1400 audit(1739540726.133:303): avc: denied { create } for pid=6656 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.240781][ T29] audit: type=1400 audit(1739540726.133:304): avc: denied { connect } for pid=6656 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.269478][ T29] audit: type=1400 audit(1739540726.173:305): avc: denied { ioctl } for pid=6634 comm="syz.4.310" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.301095][ T5851] rc_core: IR keymap rc-hauppauge not found [ 82.312501][ T5851] Registered IR keymap rc-empty [ 82.323490][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.360891][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.374571][ T6665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'. [ 82.384119][ T6665] netlink: 68 bytes leftover after parsing attributes in process `syz.0.324'. [ 82.392603][ T5851] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 82.394172][ T6665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'. [ 82.410395][ T5851] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 82.416003][ T6665] netlink: 68 bytes leftover after parsing attributes in process `syz.0.324'. [ 82.431357][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.476363][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.501581][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.532035][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.574732][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.613796][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.643508][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.682391][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.722053][ T29] audit: type=1400 audit(1739540726.693:306): avc: denied { map } for pid=6679 comm="syz.2.330" path="socket:[10935]" dev="sockfs" ino=10935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.730820][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.777035][ T5851] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.801756][ T5851] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 82.809948][ T29] audit: type=1400 audit(1739540726.693:307): avc: denied { read accept } for pid=6679 comm="syz.2.330" path="socket:[10935]" dev="sockfs" ino=10935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.841210][ T5851] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 82.868846][ T5851] usb 5-1: USB disconnect, device number 4 [ 83.016752][ T29] audit: type=1400 audit(1739540726.993:308): avc: denied { write } for pid=6685 comm="syz.3.333" path="socket:[10949]" dev="sockfs" ino=10949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.429723][ T6703] input: syz1 as /devices/virtual/input/input19 [ 83.537827][ T29] audit: type=1400 audit(1739540727.513:309): avc: denied { read write } for pid=6707 comm="syz.0.343" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.579667][ T29] audit: type=1400 audit(1739540727.513:310): avc: denied { open } for pid=6707 comm="syz.0.343" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.637245][ T29] audit: type=1400 audit(1739540727.613:311): avc: denied { mount } for pid=6709 comm="syz.4.344" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 83.717790][ T29] audit: type=1400 audit(1739540727.693:312): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 83.952057][ T6723] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 83.982666][ T6727] netlink: 188 bytes leftover after parsing attributes in process `syz.4.352'. [ 84.005496][ T6723] SELinux: failed to load policy [ 84.030837][ T6727] netlink: 'syz.4.352': attribute type 1 has an invalid length. [ 84.455889][ T6750] netlink: 'syz.2.363': attribute type 46 has an invalid length. [ 84.478246][ T6750] netlink: 44 bytes leftover after parsing attributes in process `syz.2.363'. [ 84.611266][ T5927] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 84.775807][ T5927] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 84.796028][ T5927] usb 2-1: config 7 has no interface number 0 [ 84.809052][ T5927] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 84.826984][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.874254][ T5927] usb 2-1: Product: syz [ 84.878478][ T5927] usb 2-1: Manufacturer: syz [ 84.899117][ T5927] usb 2-1: SerialNumber: syz [ 85.701921][ T5927] as10x_usb: device has been detected [ 85.717742][ T5927] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 85.731354][ T5898] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.765960][ T5927] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 85.839377][ T6817] rdma_op ffff888059d859f0 conn xmit_rdma 0000000000000000 [ 85.895464][ T5927] as10x_usb: error during firmware upload part1 [ 85.898060][ T5898] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.903793][ T5927] Registered device Elgato EyeTV DTT Deluxe [ 85.928536][ T5927] usb 2-1: USB disconnect, device number 7 [ 85.934905][ T5898] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.979585][ T5898] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.005012][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.006973][ T5927] Unregistered device Elgato EyeTV DTT Deluxe [ 86.031628][ T5927] as10x_usb: device has been disconnected [ 86.046949][ T6806] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 86.074078][ T5898] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.380818][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.415480][ T9] usb 5-1: USB disconnect, device number 5 [ 86.450980][ T5898] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 86.543943][ T25] usb 3-1: config 0 has no interfaces? [ 86.553149][ T25] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.568751][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.578920][ T25] usb 3-1: config 0 descriptor?? [ 86.632005][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 86.644619][ T5898] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 86.664955][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.673912][ T5898] usb 1-1: Product: syz [ 86.678221][ T5898] usb 1-1: Manufacturer: syz [ 86.683176][ T5898] usb 1-1: SerialNumber: syz [ 86.690511][ T5898] usb 1-1: config 0 descriptor?? [ 86.698833][ T5898] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 86.791399][ T9] usb 3-1: USB disconnect, device number 4 [ 86.901633][ T6846] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 87.454674][ T6859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. [ 87.464005][ T6859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. [ 87.476311][ T6859] gretap0: entered promiscuous mode [ 87.484450][ T6859] batadv_slave_1: entered promiscuous mode [ 87.514906][ T5898] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 87.527324][ T5898] usb 1-1: USB disconnect, device number 7 [ 87.783088][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 87.783103][ T29] audit: type=1400 audit(1739540731.763:336): avc: denied { map } for pid=6867 comm="syz.1.416" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.891105][ T29] audit: type=1326 audit(1739540731.803:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce418cde9 code=0x7fc00000 [ 87.988138][ T29] audit: type=1400 audit(1739540731.963:338): avc: denied { watch watch_reads } for pid=6878 comm="syz.2.420" path="/90" dev="tmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.192570][ T5898] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 88.361016][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 88.367589][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.390878][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.408404][ T5898] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 88.410839][ T5927] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.425097][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.442070][ T5898] usb 2-1: config 0 descriptor?? [ 88.454500][ T6896] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 88.485148][ T6896] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 88.600841][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 88.608359][ T5927] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 88.617376][ T5927] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.627687][ T5927] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.638682][ T5927] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.649868][ T5927] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.664898][ T5927] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.674442][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.869669][ T5898] kone 0003:1E7D:2CED.0009: item fetching failed at offset 3/5 [ 88.894492][ T5898] kone 0003:1E7D:2CED.0009: parse failed [ 88.908100][ T5927] usb 3-1: GET_CAPABILITIES returned 0 [ 88.913801][ T5898] kone 0003:1E7D:2CED.0009: probe with driver kone failed with error -22 [ 88.925935][ T5927] usbtmc 3-1:16.0: can't read capabilities [ 89.095200][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 89.119233][ T5898] usb 2-1: USB disconnect, device number 8 [ 89.136789][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 89.179894][ T8] usb 3-1: USB disconnect, device number 5 [ 89.318538][ T29] audit: type=1326 audit(1739540733.293:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.4.438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcce418cde9 code=0x0 [ 89.360879][ T29] audit: type=1400 audit(1739540733.333:340): avc: denied { bind } for pid=6920 comm="syz.3.436" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.367393][ T6922] capability: warning: `syz.4.438' uses deprecated v2 capabilities in a way that may be insecure [ 89.391677][ T29] audit: type=1400 audit(1739540733.333:341): avc: denied { node_bind } for pid=6920 comm="syz.3.436" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 89.725943][ T29] audit: type=1400 audit(1739540733.703:342): avc: denied { write } for pid=6938 comm="syz.1.446" name="rt6_stats" dev="proc" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 89.786343][ T29] audit: type=1400 audit(1739540733.703:343): avc: denied { write } for pid=6938 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 89.813457][ T29] audit: type=1400 audit(1739540733.703:344): avc: denied { nlmsg_read } for pid=6938 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 89.965697][ T29] audit: type=1400 audit(1739540733.943:345): avc: denied { connect } for pid=6948 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.005950][ T6951] netlink: 6 bytes leftover after parsing attributes in process `syz.0.451'. [ 90.027484][ T6951] netlink: 6 bytes leftover after parsing attributes in process `syz.0.451'. [ 90.302770][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 90.311923][ T6966] bridge_slave_1: left allmulticast mode [ 90.318321][ T6966] bridge_slave_1: left promiscuous mode [ 90.321011][ T5898] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 90.341460][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.363069][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 90.381316][ T6966] bridge_slave_0: left allmulticast mode [ 90.386968][ T6966] bridge_slave_0: left promiscuous mode [ 90.402973][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.491416][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.498964][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 90.506042][ T5898] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.518030][ T5898] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 90.530081][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.545689][ T5898] usb 2-1: Product: syz [ 90.549876][ T5898] usb 2-1: Manufacturer: syz [ 90.557331][ T5898] usb 2-1: SerialNumber: syz [ 90.572468][ T5898] usb 2-1: config 0 descriptor?? [ 90.668613][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.691434][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.721008][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.743837][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.763548][ T6964] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 90.785359][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.836066][ T6987] syz.2.466 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.008105][ T5898] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 91.075754][ T5927] usb 5-1: USB disconnect, device number 6 [ 91.279827][ T6997] hsr0: entered promiscuous mode [ 91.409406][ T5898] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 91.418934][ T5898] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 91.442090][ T5898] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 91.478367][ T5898] usb 2-1: USB disconnect, device number 9 [ 92.483644][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 92.591691][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 92.651572][ T5927] hid-generic 0000:40000003:0000.000A: unknown main item tag 0x0 [ 92.694871][ T5927] hid-generic 0000:40000003:0000.000A: unknown main item tag 0x0 [ 92.735521][ T5927] hid-generic 0000:40000003:0000.000A: hidraw0: <UNKNOWN> HID v21.1d Device [syz0] on syz1 [ 93.020834][ T5927] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 93.111811][ T7074] ALSA: mixer_oss: invalid OSS volume 'P�}VIN' [ 93.201000][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 93.207389][ T7076] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 93.212173][ T5927] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 93.233557][ T5927] usb 2-1: config 8 has an invalid descriptor of length 255, skipping remainder of the config [ 93.244105][ T7076] overlayfs: missing 'lowerdir' [ 93.275971][ T5927] usb 2-1: config 8 has no interface number 0 [ 93.296708][ T5927] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 93.316820][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.349420][ T5927] usb 2-1: Product: syz [ 93.363862][ T5927] usb 2-1: Manufacturer: syz [ 93.372769][ T5927] usb 2-1: SerialNumber: syz [ 93.379137][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 93.379150][ T29] audit: type=1400 audit(1739540737.353:352): avc: denied { append } for pid=7087 comm="syz.2.511" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.412756][ T7088] loop6: detected capacity change from 0 to 524287999 [ 93.440497][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.449880][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.468281][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.477545][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.486931][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.491054][ T29] audit: type=1400 audit(1739540737.473:353): avc: denied { getopt } for pid=7089 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.496103][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.526746][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.535930][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.551001][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.560199][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.575038][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.584221][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.595591][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.603804][ T5927] ipheth 2-1:8.39: Unable to find alternate settings interface [ 93.604751][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.621244][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.630412][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.638661][ T7088] ldm_validate_partition_table(): Disk read failed. [ 93.646428][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.655655][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.664210][ T5927] usb 2-1: USB disconnect, device number 10 [ 93.672221][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.681432][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.689647][ T7088] Dev loop6: unable to read RDB block 0 [ 93.726581][ T7088] loop6: unable to read partition table [ 93.736853][ T7088] loop_reread_partitions: partition scan of loop6 (3��x��C�) failed (rc=-5) [ 93.815364][ T5192] ldm_validate_partition_table(): Disk read failed. [ 93.834058][ T5192] Dev loop6: unable to read RDB block 0 [ 93.850021][ T5192] loop6: unable to read partition table [ 94.191249][ T29] audit: type=1400 audit(1739540738.163:354): avc: denied { create } for pid=7119 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.214809][ T29] audit: type=1400 audit(1739540738.193:355): avc: denied { bind } for pid=7119 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.419008][ T29] audit: type=1400 audit(1739540738.393:356): avc: denied { read } for pid=7131 comm="syz.0.531" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.500561][ T29] audit: type=1400 audit(1739540738.393:357): avc: denied { open } for pid=7131 comm="syz.0.531" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.526046][ T29] audit: type=1400 audit(1739540738.393:358): avc: denied { ioctl } for pid=7131 comm="syz.0.531" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.553349][ T29] audit: type=1400 audit(1739540738.483:359): avc: denied { create } for pid=7136 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.553604][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.852406][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.861942][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.872403][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.910113][ T7150] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 94.976747][ T7154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.339779][ T5192] udevd[5192]: worker [6018] terminated by signal 33 (Unknown signal 33) [ 95.349709][ T5192] udevd[5192]: worker [6018] failed while handling '/devices/virtual/block/loop3' [ 95.500886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.523586][ T29] audit: type=1400 audit(1739540739.503:360): avc: denied { setopt } for pid=7177 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 95.572299][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.725766][ T29] audit: type=1400 audit(1739540739.703:361): avc: denied { getattr } for pid=7186 comm="syz.3.558" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=13110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.930796][ T5927] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.092611][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.126617][ T5927] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 96.150762][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.171479][ T5927] usb 3-1: config 0 descriptor?? [ 96.326734][ T7204] netlink: 248 bytes leftover after parsing attributes in process `syz.4.566'. [ 96.588629][ T5927] logitech 0003:046D:CA03.000B: unknown main item tag 0x0 [ 96.599854][ T5927] logitech 0003:046D:CA03.000B: unknown main item tag 0x0 [ 96.610097][ T5927] logitech 0003:046D:CA03.000B: unknown main item tag 0x0 [ 96.617786][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.641299][ T5927] logitech 0003:046D:CA03.000B: unknown main item tag 0x0 [ 96.648481][ T5927] logitech 0003:046D:CA03.000B: unknown main item tag 0x0 [ 96.671090][ T5927] logitech 0003:046D:CA03.000B: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.2-1/input0 [ 96.700833][ T5927] logitech 0003:046D:CA03.000B: no inputs found [ 96.811450][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.842567][ T5898] usb 3-1: USB disconnect, device number 6 [ 96.988790][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 97.005979][ T25] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 97.019673][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.035079][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.047217][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.070483][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.087794][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.098374][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.125102][ T7138] Set syz1 is full, maxelem 65536 reached [ 97.337599][ T25] usb 4-1: GET_CAPABILITIES returned 0 [ 97.344030][ T25] usbtmc 4-1:16.0: can't read capabilities [ 97.367471][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 97.401589][ T7234] bridge_slave_1: left allmulticast mode [ 97.417414][ T7234] bridge_slave_1: left promiscuous mode [ 97.425594][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.431083][ T5898] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 97.437356][ T7238] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.581'. [ 97.451226][ T7234] bridge_slave_0: left allmulticast mode [ 97.456960][ T7234] bridge_slave_0: left promiscuous mode [ 97.462943][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.556415][ T5851] usb 4-1: USB disconnect, device number 6 [ 97.602995][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 97.623495][ T5898] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 97.647392][ T5898] usb 2-1: config 0 has no interface number 0 [ 97.653723][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.663621][ T5898] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 97.674124][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 97.688663][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.707486][ T5898] usb 2-1: Product: syz [ 97.717597][ T5898] usb 2-1: Manufacturer: syz [ 97.725472][ T5898] usb 2-1: SerialNumber: syz [ 97.752816][ T5898] usb 2-1: config 0 descriptor?? [ 97.760078][ T5898] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 97.841813][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 97.852245][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.860310][ T9] usb 1-1: config 0 has no interface number 0 [ 97.872072][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 97.885598][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.904210][ T9] usb 1-1: Product: syz [ 97.914232][ T9] usb 1-1: Manufacturer: syz [ 97.921580][ T9] usb 1-1: SerialNumber: syz [ 97.931114][ T9] usb 1-1: config 0 descriptor?? [ 97.946015][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 97.966536][ T9] usb 1-1: selecting invalid altsetting 1 [ 97.997984][ T5898] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 98.007895][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 98.031095][ T5898] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 98.042413][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 98.072475][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 98.095698][ C1] hrtimer: interrupt took 69724 ns [ 98.116349][ T9] usb 1-1: media controller created [ 98.203830][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.282310][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 98.403587][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 98.431172][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 98.451225][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 98.494919][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 98.503015][ T5868] usb 2-1: USB disconnect, device number 11 [ 98.522936][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 98.522950][ T29] audit: type=1400 audit(1739540742.503:367): avc: denied { getopt } for pid=7276 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.562358][ T5868] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 98.576698][ T9] usb 1-1: USB disconnect, device number 8 [ 98.626869][ T5868] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 98.660529][ T5868] quatech2 2-1:0.51: device disconnected [ 99.208491][ T29] audit: type=1400 audit(1739540743.183:368): avc: denied { ioctl } for pid=7301 comm="syz.3.612" path="socket:[13773]" dev="sockfs" ino=13773 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.317453][ T29] audit: type=1400 audit(1739540743.293:369): avc: denied { read } for pid=7305 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.731314][ T5913] net_ratelimit: 2 callbacks suppressed [ 99.731330][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.182878][ T29] audit: type=1400 audit(1739540744.163:370): avc: denied { setopt } for pid=7353 comm="syz.4.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.202729][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.221526][ T5913] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.278068][ T7363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.320337][ T29] audit: type=1400 audit(1739540744.293:371): avc: denied { sys_module } for pid=7358 comm="syz.0.639" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 100.391710][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 100.409931][ T5913] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 100.430074][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.487971][ T5913] usb 3-1: config 0 descriptor?? [ 100.500487][ T5913] gspca_main: sunplus-2.14.0 probing 041e:400b [ 100.613531][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.622852][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.632297][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.690410][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 100.770956][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.840824][ T5927] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.998667][ T29] audit: type=1400 audit(1739540744.973:372): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.021786][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.039367][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.062729][ T5927] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 101.082978][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.112630][ T5927] usb 5-1: config 0 descriptor?? [ 101.319969][ T5913] gspca_sunplus: reg_r err -71 [ 101.328288][ T5913] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 101.371879][ T5913] usb 3-1: USB disconnect, device number 7 [ 101.548508][ T5927] megaworld 0003:07B5:0312.000C: item fetching failed at offset 0/5 [ 101.552624][ T7408] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 101.579574][ T5927] megaworld 0003:07B5:0312.000C: parse failed [ 101.610804][ T5927] megaworld 0003:07B5:0312.000C: probe with driver megaworld failed with error -22 [ 101.646136][ T29] audit: type=1400 audit(1739540745.623:373): avc: denied { setopt } for pid=7409 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.762070][ T5913] usb 5-1: USB disconnect, device number 7 [ 101.812252][ T7414] mmap: syz.3.662 (7414) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.815729][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.167391][ T29] audit: type=1400 audit(1739540746.143:374): avc: denied { map } for pid=7428 comm="syz.1.670" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.190865][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.192993][ T7388] syz.0.651 (7388): drop_caches: 2 [ 102.541341][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.643533][ T29] audit: type=1400 audit(1739540746.613:375): avc: denied { append } for pid=7444 comm="syz.3.675" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.852341][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.151968][ T7461] netlink: 'syz.2.680': attribute type 13 has an invalid length. [ 103.180365][ T7461] gretap0: refused to change device tx_queue_len [ 103.202082][ T7461] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 103.421773][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.581392][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 103.594595][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.602649][ T5913] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 103.615549][ T9] usb 4-1: config 0 has no interface number 0 [ 103.629966][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.642689][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.657755][ T29] audit: type=1400 audit(1739540747.633:376): avc: denied { write } for pid=7479 comm="syz.2.690" path="socket:[14777]" dev="sockfs" ino=14777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.672813][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 103.681777][ T7480] Bluetooth: MGMT ver 1.23 [ 103.716772][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.740422][ T9] usb 4-1: config 0 descriptor?? [ 103.770971][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 103.790876][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.822465][ T5913] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 103.851041][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.859114][ T5913] usb 1-1: Product: syz [ 103.870894][ T5913] usb 1-1: Manufacturer: syz [ 103.875534][ T5913] usb 1-1: SerialNumber: syz [ 103.902357][ T5913] usb 1-1: config 0 descriptor?? [ 104.013490][ T29] audit: type=1400 audit(1739540747.993:377): avc: denied { create } for pid=7488 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.046221][ T29] audit: type=1400 audit(1739540748.023:378): avc: denied { setopt } for pid=7488 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.086445][ T29] audit: type=1400 audit(1739540748.023:379): avc: denied { getopt } for pid=7488 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.119888][ T5913] usb 1-1: USB disconnect, device number 9 [ 104.150422][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.157633][ T7490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.368534][ T9] uclogic 0003:28BD:0071.000D: pen parameters not found [ 104.387077][ T9] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring [ 104.403936][ T7507] IPv6: Can't replace route, no match found [ 104.492971][ T7513] input: syz0 as /devices/virtual/input/input24 [ 104.638962][ T29] audit: type=1400 audit(1739540748.613:380): avc: denied { read } for pid=7516 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.670568][ T9] usb 4-1: USB disconnect, device number 7 [ 104.932666][ T5913] net_ratelimit: 2 callbacks suppressed [ 104.932682][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.976360][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.715'. [ 104.985585][ T7533] netlink: 72 bytes leftover after parsing attributes in process `syz.4.715'. [ 105.001158][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.715'. [ 105.027163][ T7533] netlink: 72 bytes leftover after parsing attributes in process `syz.4.715'. [ 105.205585][ T7542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.719'. [ 105.410564][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 105.551707][ T5913] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 105.595823][ T29] audit: type=1400 audit(1739540749.573:381): avc: denied { mount } for pid=7561 comm="syz.2.730" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 105.720817][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 105.738167][ T29] audit: type=1400 audit(1739540749.713:382): avc: denied { read } for pid=7575 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.740876][ T5913] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.845832][ T7580] overlayfs: missing 'lowerdir' [ 105.850989][ T5913] usb 2-1: config 0 has no interface number 0 [ 105.886445][ T5913] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.909180][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.932618][ T5913] usb 2-1: Product: syz [ 105.941304][ T5913] usb 2-1: Manufacturer: syz [ 105.959845][ T5913] usb 2-1: SerialNumber: syz [ 105.970919][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.984498][ T5913] usb 2-1: config 0 descriptor?? [ 105.992548][ T5913] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 106.203749][ T5913] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 106.241174][ T5913] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 106.374310][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.374415][ T7599] netlink: 'syz.0.744': attribute type 2 has an invalid length. [ 106.425518][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.434460][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.500151][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.512909][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.641426][ T5898] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.678003][ T7604] netlink: 'syz.0.746': attribute type 29 has an invalid length. [ 106.689117][ T7604] netlink: 'syz.0.746': attribute type 29 has an invalid length. [ 106.702320][ T7604] netlink: 'syz.0.746': attribute type 29 has an invalid length. [ 106.710528][ T7604] netlink: 'syz.0.746': attribute type 29 has an invalid length. [ 106.723217][ T7604] netlink: 'syz.0.746': attribute type 29 has an invalid length. [ 106.732757][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 106.741114][ T5927] usb 2-1: USB disconnect, device number 12 [ 106.749675][ T29] audit: type=1326 audit(1739540750.723:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.3.747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd4cf8cde9 code=0x0 [ 106.751124][ T5927] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 106.772353][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.800308][ T7604] netlink: 'syz.0.746': attribute type 29 has an invalid length. [ 106.810382][ T7604] netlink: 'syz.0.746': attribute type 29 has an invalid length. [ 106.821050][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 106.833886][ T5898] usb 3-1: config 0 has no interfaces? [ 106.834170][ T7604] netlink: 'syz.0.746': attribute type 29 has an invalid length. [ 106.843696][ T5898] usb 3-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 106.861653][ T5927] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 106.874487][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.876902][ T5927] quatech2 2-1:0.51: device disconnected [ 106.887078][ T5898] usb 3-1: Product: syz [ 106.893030][ T5898] usb 3-1: Manufacturer: syz [ 106.898172][ T5898] usb 3-1: SerialNumber: syz [ 106.915182][ T5898] usb 3-1: config 0 descriptor?? [ 107.020874][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.108029][ T7617] block device autoloading is deprecated and will be removed. [ 107.202862][ T5927] usb 3-1: USB disconnect, device number 8 [ 107.306922][ T7619] syz.4.752 (7619): drop_caches: 2 [ 107.485334][ T5898] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 107.532153][ T7631] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 107.538165][ T7631] syzkaller1: linktype set to 780 [ 107.650871][ T5898] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 107.685729][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.699581][ T5898] usb 1-1: Product: syz [ 107.714131][ T5898] usb 1-1: Manufacturer: syz [ 107.722185][ T5898] usb 1-1: SerialNumber: syz [ 107.754602][ T5898] usb 1-1: config 0 descriptor?? [ 107.910041][ T7650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.768'. [ 107.980885][ T5927] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.008456][ T9] usb 1-1: USB disconnect, device number 10 [ 108.027012][ T5898] kernel write not supported for file /sequencer (pid: 5898 comm: kworker/0:7) [ 108.051925][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.162383][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.181600][ T5927] usb 5-1: config 6 has an invalid interface number: 96 but max is 0 [ 108.198459][ T5927] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 108.229042][ T5927] usb 5-1: config 6 has no interface number 0 [ 108.239142][ T5927] usb 5-1: config 6 interface 96 has no altsetting 0 [ 108.256927][ T5927] usb 5-1: string descriptor 0 read error: -22 [ 108.264086][ T5927] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=4f.2b [ 108.283417][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.371207][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.611051][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.617995][ T7673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.778'. [ 108.883756][ T5927] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 108.922097][ T5927] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 108.944809][ T5927] dib0700: firmware download failed at 28 with -71 [ 108.957603][ T5927] usb 5-1: USB disconnect, device number 8 [ 109.092804][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.352416][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 109.800780][ T5913] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.960791][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 110.002496][ T5913] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 110.030779][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.041635][ T5913] usb 4-1: config 0 descriptor?? [ 110.102959][ T7765] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.810'. [ 110.130909][ T5927] net_ratelimit: 3 callbacks suppressed [ 110.130923][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.253320][ T29] audit: type=1400 audit(1739540754.223:384): avc: denied { mount } for pid=7768 comm="syz.0.811" name="/" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.264162][ T5913] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 110.322219][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.333190][ T5913] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 110.358183][ T5913] usb 4-1: media controller created [ 110.383058][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.455438][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.777020][ T29] audit: type=1400 audit(1739540754.753:385): avc: denied { write } for pid=7782 comm="syz.4.819" path="socket:[15975]" dev="sockfs" ino=15975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.837718][ T29] audit: type=1400 audit(1739540754.803:386): avc: denied { write } for pid=7787 comm="syz.2.821" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.901046][ T5913] az6027: usb out operation failed. (-71) [ 110.920472][ T5913] stb0899_attach: Driver disabled by Kconfig [ 110.956989][ T5913] az6027: no front-end attached [ 110.956989][ T5913] [ 110.968196][ T5913] az6027: usb out operation failed. (-71) [ 110.974482][ T5913] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 110.991923][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 111.004816][ T5913] dvb-usb: schedule remote query interval to 400 msecs. [ 111.021249][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 111.038771][ T5913] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 111.063217][ T5913] usb 4-1: USB disconnect, device number 8 [ 111.121897][ T5913] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 111.171684][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.491274][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.661151][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.723506][ T29] audit: type=1326 audit(1739540755.703:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7826 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4cf8cde9 code=0x7ffc0000 [ 111.786802][ T29] audit: type=1326 audit(1739540755.703:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7826 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4cf8cde9 code=0x7ffc0000 [ 111.855982][ T29] audit: type=1326 audit(1739540755.723:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7826 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd4cf8cde9 code=0x7ffc0000 [ 111.914441][ T29] audit: type=1326 audit(1739540755.723:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7826 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4cf8cde9 code=0x7ffc0000 [ 111.967192][ T29] audit: type=1326 audit(1739540755.723:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7826 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4cf8cde9 code=0x7ffc0000 [ 112.005815][ T29] audit: type=1326 audit(1739540755.723:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7826 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdd4cf8cde9 code=0x7ffc0000 [ 112.034810][ T29] audit: type=1326 audit(1739540755.723:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7826 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4cf8cde9 code=0x7ffc0000 [ 112.058017][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.132525][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.211594][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.341393][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 112.491231][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 112.509948][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 112.531168][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.536170][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.548115][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.572266][ T9] usb 2-1: config 0 descriptor?? [ 112.641820][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 112.654787][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 112.667728][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.705474][ T5913] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.733591][ T5913] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 246 [ 112.760943][ T5913] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 112.799060][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.823757][ T5913] usb 3-1: config 0 descriptor?? [ 112.839818][ T7848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 112.995984][ T7882] netlink: 'syz.4.864': attribute type 3 has an invalid length. [ 113.006918][ T7882] netlink: 'syz.4.864': attribute type 3 has an invalid length. [ 113.021564][ T9] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 113.214010][ T7891] xt_connbytes: Forcing CT accounting to be enabled [ 113.223264][ T9] usb 2-1: USB disconnect, device number 13 [ 113.225701][ T7891] Cannot find del_set index 1 as target [ 113.250889][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.318835][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 113.328801][ T5868] usb 3-1: USB disconnect, device number 9 [ 113.332127][ T5913] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 113.335263][ T5823] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 113.522648][ T5913] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 113.531305][ T5913] usb 4-1: config 0 has no interface number 0 [ 113.539135][ T5913] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 113.549116][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.558416][ T5913] usb 4-1: Product: syz [ 113.563622][ T5913] usb 4-1: Manufacturer: syz [ 113.568381][ T5913] usb 4-1: SerialNumber: syz [ 113.581967][ T5913] usb 4-1: config 0 descriptor?? [ 113.799171][ T5913] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 113.811373][ T5913] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 113.835928][ T5913] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 113.844500][ T5913] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 113.854896][ T5913] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 114.070938][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 114.241449][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 114.253816][ T9] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 114.273702][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.286108][ T5868] usb 4-1: USB disconnect, device number 9 [ 114.295824][ T9] usb 1-1: Product: syz [ 114.300027][ T9] usb 1-1: Manufacturer: syz [ 114.305418][ T5868] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 114.325852][ T9] usb 1-1: SerialNumber: syz [ 114.336536][ T5868] keyspan 4-1:0.133: device disconnected [ 114.346716][ T9] usb 1-1: config 0 descriptor?? [ 114.420868][ T5913] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 114.562344][ T9] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 114.577758][ T9] usb 1-1: USB disconnect, device number 11 [ 114.586363][ T5913] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 114.596565][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.605594][ T5913] usb 2-1: Product: syz [ 114.609950][ T5913] usb 2-1: Manufacturer: syz [ 114.615596][ T5913] usb 2-1: SerialNumber: syz [ 114.622956][ T5913] usb 2-1: config 0 descriptor?? [ 114.872585][ T5913] usb 2-1: USB disconnect, device number 14 [ 115.331304][ T5913] net_ratelimit: 5 callbacks suppressed [ 115.331319][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.383148][ T7954] netlink: 'syz.0.898': attribute type 33 has an invalid length. [ 115.402950][ T7954] netlink: 152 bytes leftover after parsing attributes in process `syz.0.898'. [ 115.435611][ T7954] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 115.457402][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 115.484393][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.900'. [ 115.517596][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 115.517609][ T29] audit: type=1400 audit(1739540759.493:399): avc: denied { listen } for pid=7959 comm="syz.3.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 115.546035][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.585534][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.601083][ T7954] team0: Port device batadv0 added [ 115.651847][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.915085][ T29] audit: type=1400 audit(1739540759.883:400): avc: denied { mount } for pid=7980 comm="syz.0.912" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 115.926851][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.937190][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.952258][ T29] audit: type=1400 audit(1739540759.893:401): avc: denied { remount } for pid=7980 comm="syz.0.912" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 115.952539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.984868][ T29] audit: type=1400 audit(1739540759.963:402): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 116.370914][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.434469][ T29] audit: type=1400 audit(1739540760.413:403): avc: denied { create } for pid=8013 comm="syz.3.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.453683][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.490820][ T29] audit: type=1400 audit(1739540760.443:404): avc: denied { setopt } for pid=8013 comm="syz.3.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.560805][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 116.690889][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.721206][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 116.729166][ T9] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 116.738720][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.753147][ T9] usb 5-1: Product: syz [ 116.763910][ T9] usb 5-1: Manufacturer: syz [ 116.775147][ T9] usb 5-1: SerialNumber: syz [ 116.794035][ T9] usb 5-1: config 0 descriptor?? [ 116.818917][ T9] option 5-1:0.0: GSM modem (1-port) converter detected [ 116.964679][ T5913] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.043172][ T9] usb 5-1: USB disconnect, device number 9 [ 117.049888][ T9] option 5-1:0.0: device disconnected [ 117.130810][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 117.150399][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 117.174585][ T5913] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 117.192818][ T5913] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 117.217243][ T5913] usb 1-1: Product: syz [ 117.231419][ T5913] usb 1-1: Manufacturer: syz [ 117.236086][ T5913] usb 1-1: SerialNumber: syz [ 117.415978][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.451015][ T5913] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 117.471623][ T5913] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 117.493953][ T5913] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 117.511710][ T5913] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 117.688639][ T5913] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 117.718568][ T5913] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 117.731002][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.739159][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.776061][ T5913] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 117.797116][ T8044] overlayfs: failed to clone lowerpath [ 117.803518][ T29] audit: type=1400 audit(1739540761.773:405): avc: denied { mounton } for pid=8043 comm="syz.3.939" path="/202/file0" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.933444][ T970] usb 1-1: USB disconnect, device number 12 [ 117.943385][ T970] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 117.956914][ T29] audit: type=1400 audit(1739540761.933:406): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 117.999378][ T970] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 118.015990][ T8048] netlink: 'syz.4.941': attribute type 6 has an invalid length. [ 118.026616][ T970] visor 1-1:1.0: device disconnected [ 118.054093][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 118.179390][ T29] audit: type=1400 audit(1739540762.153:407): avc: denied { create } for pid=8051 comm="syz.4.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.221168][ T8052] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 118.261089][ T29] audit: type=1400 audit(1739540762.193:408): avc: denied { bind } for pid=8051 comm="syz.4.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.586402][ T8066] netlink: 'syz.2.950': attribute type 5 has an invalid length. [ 119.525001][ T8106] syz.1.961 uses obsolete (PF_INET,SOCK_PACKET) [ 119.544661][ T8106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.961'. [ 119.591825][ T8109] Failed to get privilege flags for destination (handle=0x2:0x7) [ 119.743109][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 120.026263][ T8129] netlink: 'syz.0.972': attribute type 1 has an invalid length. [ 120.052393][ T8131] input: syz0 as /devices/virtual/input/input26 [ 120.107596][ T8133] netlink: 'syz.1.973': attribute type 3 has an invalid length. [ 120.140718][ T8133] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.973'. [ 120.419573][ T8148] input: syz0 as /devices/virtual/input/input27 [ 120.631093][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 120.631106][ T29] audit: type=1400 audit(1739540764.603:416): avc: denied { ioctl } for pid=8158 comm="syz.1.984" path="mnt:[4026532966]" dev="nsfs" ino=4026532966 ioctlcmd=0x8b0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.861400][ T5898] net_ratelimit: 12 callbacks suppressed [ 120.861417][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.875212][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.877766][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.093376][ T29] audit: type=1400 audit(1739540765.053:417): avc: denied { mount } for pid=8168 comm="syz.3.989" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 121.166446][ T29] audit: type=1400 audit(1739540765.143:418): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 121.327304][ T8181] bridge0: port 3(veth3) entered blocking state [ 121.342476][ T8181] bridge0: port 3(veth3) entered disabled state [ 121.362621][ T8181] veth3: entered allmulticast mode [ 121.368785][ T8181] veth3: entered promiscuous mode [ 121.405969][ T8184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.995'. [ 121.554557][ T8200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.611902][ T8200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.620368][ T8200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.637531][ T8200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.648405][ T8200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.700908][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.732693][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.831530][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 122.016546][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1015'. [ 122.091166][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 122.275311][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 122.296520][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.331295][ T9] usb 2-1: Product: syz [ 122.335496][ T9] usb 2-1: Manufacturer: syz [ 122.340089][ T9] usb 2-1: SerialNumber: syz [ 122.378157][ T9] usb 2-1: config 0 descriptor?? [ 122.521809][ T29] audit: type=1400 audit(1739540766.503:419): avc: denied { create } for pid=8249 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.546384][ T29] audit: type=1400 audit(1739540766.503:420): avc: denied { read } for pid=8249 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.658075][ T5868] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 122.827024][ T29] audit: type=1400 audit(1739540766.803:421): avc: denied { setcheckreqprot } for pid=8259 comm="syz.0.1029" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.827999][ T5868] usb 3-1: config 1 has an invalid interface number: 3 but max is 1 [ 122.860898][ T5868] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.899697][ T5868] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 122.910073][ T5868] usb 3-1: config 1 has no interface number 2 [ 122.920326][ T5868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.942916][ T5868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 122.956982][ T5868] usb 3-1: config 1 interface 3 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.989948][ T5868] usb 3-1: config 1 interface 3 has no altsetting 0 [ 123.009325][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 123.022360][ T9] usb 2-1: Please update to version 0.2 or newer [ 123.029022][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.044517][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.055474][ T5868] usb 3-1: Product: syz [ 123.059645][ T5868] usb 3-1: Manufacturer: syz [ 123.081025][ T5868] usb 3-1: SerialNumber: syz [ 123.098571][ T9] usb 2-1: USB disconnect, device number 15 [ 123.111734][ T8246] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 123.174806][ T5868] usb 3-1: selecting invalid altsetting 1 [ 123.588107][ T5868] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 123.595508][ T5868] cdc_ncm 3-1:1.0: bind() failure [ 123.625239][ T5868] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 123.634771][ T5868] cdc_ncm 3-1:1.1: bind() failure [ 123.644285][ T5913] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 123.820751][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.840813][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 123.847364][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.868912][ T5913] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 123.899710][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.930942][ T5913] usb 5-1: config 0 descriptor?? [ 123.955666][ T970] usb 3-1: USB disconnect, device number 10 [ 123.993749][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 124.011281][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.036337][ T9] usb 4-1: Product: syz [ 124.056548][ T9] usb 4-1: Manufacturer: syz [ 124.080243][ T9] usb 4-1: SerialNumber: syz [ 124.087569][ T9] usb 4-1: config 0 descriptor?? [ 124.254448][ T29] audit: type=1400 audit(1739540768.233:422): avc: denied { execute } for pid=8286 comm="syz.1.1039" path="/dev/audio1" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 124.315153][ T5898] usb 4-1: USB disconnect, device number 10 [ 124.347364][ T5913] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 124.525460][ T8296] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1043'. [ 124.535528][ T8296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1043'. [ 124.640836][ T970] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 124.755254][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 124.786320][ T5898] usb 5-1: USB disconnect, device number 10 [ 124.809367][ T970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.828204][ T970] usb 1-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=5d.6c [ 124.838915][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.847795][ T970] usb 1-1: Product: syz [ 124.852320][ T970] usb 1-1: Manufacturer: syz [ 124.856918][ T970] usb 1-1: SerialNumber: syz [ 124.864039][ T970] usb 1-1: config 0 descriptor?? [ 125.090654][ T8319] random: crng reseeded on system resumption [ 125.096448][ T29] audit: type=1400 audit(1739540769.063:423): avc: denied { append } for pid=8318 comm="syz.1.1053" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 125.141578][ T29] audit: type=1400 audit(1739540769.063:424): avc: denied { open } for pid=8318 comm="syz.1.1053" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 125.184233][ T5927] usb 1-1: USB disconnect, device number 13 [ 125.687304][ T29] audit: type=1400 audit(1739540769.663:425): avc: denied { map } for pid=8333 comm="syz.2.1060" path="/dev/sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.712069][ T29] audit: type=1400 audit(1739540769.663:426): avc: denied { execute } for pid=8333 comm="syz.2.1060" path="/dev/sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.736122][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.873045][ T29] audit: type=1400 audit(1739540769.853:427): avc: denied { bind } for pid=8343 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.896728][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 125.911130][ T5898] net_ratelimit: 16 callbacks suppressed [ 125.911145][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.052245][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.062186][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.085880][ T29] audit: type=1400 audit(1739540770.063:428): avc: denied { listen } for pid=8355 comm="syz.1.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.147691][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 126.169848][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.186721][ T29] audit: type=1400 audit(1739540770.093:429): avc: denied { read } for pid=8355 comm="syz.1.1072" path="socket:[17384]" dev="sockfs" ino=17384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.225913][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.237990][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 126.255009][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.274988][ T9] usb 4-1: config 0 descriptor?? [ 126.472532][ T8378] netlink: 'syz.1.1082': attribute type 21 has an invalid length. [ 126.482049][ T8378] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1082'. [ 126.493693][ T8378] netlink: 'syz.1.1082': attribute type 4 has an invalid length. [ 126.501937][ T8378] netlink: 'syz.1.1082': attribute type 5 has an invalid length. [ 126.509689][ T8378] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1082'. [ 126.697332][ T9] uclogic 0003:5543:0522.0010: unknown main item tag 0x7 [ 126.705074][ T5868] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 126.714825][ T9] uclogic 0003:5543:0522.0010: No inputs registered, leaving [ 126.729750][ T9] uclogic 0003:5543:0522.0010: hidraw0: USB HID v0.04 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 126.852164][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.873495][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 126.885200][ T5868] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 126.896148][ T5868] usb 5-1: config 0 has no interface number 0 [ 126.904897][ T5868] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.905930][ T970] usb 4-1: USB disconnect, device number 11 [ 126.915874][ T5868] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.937831][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.955572][ T5868] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 126.955598][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 126.955616][ T5868] usb 5-1: Product: syz [ 126.955632][ T5868] usb 5-1: SerialNumber: syz [ 126.958360][ T5868] usb 5-1: config 0 descriptor?? [ 126.960409][ T5868] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 126.963249][ T5868] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input28 [ 127.072926][ T8397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1090'. [ 127.091003][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.100221][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.241293][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 127.469013][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.479679][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.486858][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.496206][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.503652][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.511093][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.518234][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.525372][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.533469][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.540626][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.557043][ T9] usb 5-1: USB disconnect, device number 11 [ 127.563397][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 127.612841][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 127.890899][ T5927] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 128.011528][ T8438] ubi31: attaching mtd0 [ 128.025503][ T8438] ubi31: scanning is finished [ 128.030294][ T8438] ubi31: empty MTD device detected [ 128.065469][ T5927] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.090851][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.120957][ T5927] usb 4-1: Product: syz [ 128.128568][ T5927] usb 4-1: Manufacturer: syz [ 128.134480][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.142843][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.144337][ T8438] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 128.158993][ T5927] usb 4-1: SerialNumber: syz [ 128.170555][ T5927] usb 4-1: config 0 descriptor?? [ 128.175680][ T8438] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 128.190767][ T8438] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 128.197952][ T8438] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 128.210221][ T8438] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 128.219388][ T8438] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 128.234318][ T8438] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1447056358 [ 128.258236][ T5927] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 128.269811][ T8438] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 128.284203][ T8441] ubi31: background thread "ubi_bgt31d" started, PID 8441 [ 128.314001][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.418094][ T9] usb 4-1: USB disconnect, device number 12 [ 128.440597][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 128.572817][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 128.761958][ T8459] serio: Serial port ttyS3 [ 128.773560][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.919637][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'. [ 128.935313][ T8467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1120'. [ 128.966268][ T29] audit: type=1400 audit(1739540772.943:430): avc: denied { ioctl } for pid=8468 comm="syz.1.1121" path="socket:[18418]" dev="sockfs" ino=18418 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.020831][ T5913] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 129.173369][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.185317][ T5913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.294611][ T5913] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.304456][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.321094][ T5913] usb 3-1: SerialNumber: syz [ 129.549002][ T5913] usb 3-1: 0:2 : does not exist [ 129.599905][ T5913] usb 3-1: USB disconnect, device number 11 [ 129.681883][ T29] audit: type=1400 audit(1739540773.653:431): avc: denied { ioctl } for pid=8500 comm="syz.0.1137" path="socket:[18683]" dev="sockfs" ino=18683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.957089][ T8511] delete_channel: no stack [ 129.961539][ T29] audit: type=1400 audit(1739540773.933:432): avc: denied { ioctl } for pid=8511 comm="syz.4.1142" path="socket:[19510]" dev="sockfs" ino=19510 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 129.986247][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.049193][ T29] audit: type=1400 audit(1739540774.023:433): avc: denied { write } for pid=8515 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.116065][ T7737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.248378][ T7737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.447225][ T7737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.543730][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.561804][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.570315][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.585120][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.594032][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.601618][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.613888][ T29] audit: type=1400 audit(1739540774.593:434): avc: denied { mounton } for pid=8539 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 130.662577][ T7737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.827419][ T8553] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 131.255167][ T5927] net_ratelimit: 8 callbacks suppressed [ 131.255181][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.308803][ T7737] bridge_slave_1: left allmulticast mode [ 131.330884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.345220][ T7737] bridge_slave_1: left promiscuous mode [ 131.376823][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.592473][ T7737] bridge_slave_0: left allmulticast mode [ 131.603044][ T7737] bridge_slave_0: left promiscuous mode [ 131.631797][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.099238][ T29] audit: type=1400 audit(1739540776.073:435): avc: denied { getopt } for pid=8607 comm="syz.0.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.118563][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.292083][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.309904][ T7737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.321881][ T7737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.332491][ T7737] bond0 (unregistering): (slave bond1): Releasing backup interface [ 132.342198][ T7737] bond0 (unregistering): Released all slaves [ 132.434143][ T7737] bond1 (unregistering): Released all slaves [ 132.465745][ T8539] chnl_net:caif_netlink_parms(): no params data found [ 132.585569][ T29] audit: type=1400 audit(1739540776.563:436): avc: denied { listen } for pid=8609 comm="syz.4.1173" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.586116][ T8612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.630979][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.637263][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.691175][ T5827] Bluetooth: hci4: command tx timeout [ 132.699101][ T8612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.811126][ T5927] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 132.890417][ T8539] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.920798][ T8539] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.927991][ T8539] bridge_slave_0: entered allmulticast mode [ 132.953004][ T8539] bridge_slave_0: entered promiscuous mode [ 132.973746][ T5927] usb 1-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 132.993849][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 133.029813][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 133.047121][ T8539] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.064412][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.078322][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 57923, setting to 1024 [ 133.090374][ T8539] bridge_slave_1: entered allmulticast mode [ 133.097602][ T8539] bridge_slave_1: entered promiscuous mode [ 133.105324][ T5927] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 133.122553][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.123025][ T5927] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 133.147618][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.156891][ T5927] usb 1-1: Product: syz [ 133.166680][ T5927] usb 1-1: Manufacturer: syz [ 133.172070][ T5927] usb 1-1: SerialNumber: syz [ 133.196631][ T5927] usb 1-1: config 0 descriptor?? [ 133.209168][ T8611] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.216593][ T5913] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 133.232007][ T5927] usb 1-1: ucan: probing device on interface #0 [ 133.244910][ T5927] usb 1-1: ucan: invalid endpoint configuration [ 133.252363][ T5927] usb 1-1: ucan: probe failed; try to update the device firmware [ 133.298693][ T8539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.317563][ T8539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.340937][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.381824][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.394420][ T5913] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 133.408654][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.426640][ T5913] usb 2-1: config 0 descriptor?? [ 133.471343][ T8539] team0: Port device team_slave_0 added [ 133.521383][ T5898] usb 1-1: USB disconnect, device number 14 [ 133.530474][ T7737] hsr_slave_0: left promiscuous mode [ 133.548179][ T7737] hsr_slave_1: left promiscuous mode [ 133.554909][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.573976][ T7737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.590880][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.608621][ T7737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.671172][ T7737] veth1_macvtap: left promiscuous mode [ 133.680436][ T7737] veth0_macvtap: left promiscuous mode [ 133.693371][ T7737] veth1_vlan: left promiscuous mode [ 133.698871][ T7737] veth0_vlan: left allmulticast mode [ 133.752325][ T7737] veth0_vlan: left promiscuous mode [ 133.850024][ T5913] hid-multitouch 0003:1FD2:6007.0011: item fetching failed at offset 2/5 [ 133.892872][ T5913] hid-multitouch 0003:1FD2:6007.0011: probe with driver hid-multitouch failed with error -22 [ 133.961056][ T7737] pim6reg (unregistering): left allmulticast mode [ 134.091810][ T5868] usb 2-1: USB disconnect, device number 16 [ 134.183470][ T29] audit: type=1400 audit(1739540778.153:437): avc: denied { read } for pid=8662 comm="syz.0.1190" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 134.209358][ T29] audit: type=1400 audit(1739540778.153:438): avc: denied { open } for pid=8662 comm="syz.0.1190" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 134.370224][ T7737] team0 (unregistering): Port device team_slave_1 removed [ 134.377980][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.411062][ T7737] team0 (unregistering): Port device team_slave_0 removed [ 134.743641][ T8539] team0: Port device team_slave_1 added [ 134.770895][ T5827] Bluetooth: hci4: command tx timeout [ 134.873185][ T29] audit: type=1326 audit(1739540778.843:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.2.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf9f8cde9 code=0x7fc00000 [ 134.912914][ T29] audit: type=1400 audit(1739540778.893:440): avc: denied { read } for pid=8669 comm="syz.4.1194" name="/" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.934728][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.941822][ T29] audit: type=1400 audit(1739540778.893:441): avc: denied { open } for pid=8669 comm="syz.4.1194" path="/217/file0" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.965070][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.972105][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.054949][ T29] audit: type=1400 audit(1739540778.923:442): avc: denied { accept } for pid=8673 comm="syz.0.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.087097][ T8539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.116969][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.139457][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.184913][ T29] audit: type=1400 audit(1739540779.153:443): avc: denied { map } for pid=8679 comm="syz.0.1198" path="socket:[19756]" dev="sockfs" ino=19756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.219151][ T8539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.230265][ T29] audit: type=1400 audit(1739540779.153:444): avc: denied { read } for pid=8679 comm="syz.0.1198" path="socket:[19756]" dev="sockfs" ino=19756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.253570][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.349180][ T8696] netlink: 'syz.1.1202': attribute type 9 has an invalid length. [ 135.391869][ T8539] hsr_slave_0: entered promiscuous mode [ 135.411464][ T8539] hsr_slave_1: entered promiscuous mode [ 135.411661][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.417432][ T8539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.481652][ T8539] Cannot create hsr debugfs directory [ 135.988658][ T8539] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.013936][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 136.027698][ T8539] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.065831][ T8539] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.094831][ T8539] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.102712][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 136.131604][ T7730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.357643][ T8539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.401112][ T8539] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.423194][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.430312][ T7737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.454413][ T7730] net_ratelimit: 2 callbacks suppressed [ 136.454428][ T7730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.469149][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.477276][ T7744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.488646][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.498625][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.508106][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.539422][ T7741] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.546566][ T7741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.662751][ T8755] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 136.851106][ T5827] Bluetooth: hci4: command tx timeout [ 136.886409][ T8539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.926094][ T5868] kernel write not supported for file /input/mouse0 (pid: 5868 comm: kworker/0:4) [ 137.159815][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 137.232183][ T8798] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 137.239953][ T8798] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1228'. [ 137.358583][ T8539] veth0_vlan: entered promiscuous mode [ 137.406796][ T8539] veth1_vlan: entered promiscuous mode [ 137.465510][ T8813] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 137.472074][ T8813] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.501636][ T8813] vhci_hcd vhci_hcd.0: Device attached [ 137.507138][ T8539] veth0_macvtap: entered promiscuous mode [ 137.520313][ T8539] veth1_macvtap: entered promiscuous mode [ 137.528176][ T8816] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 137.534720][ T8816] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.538464][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.544436][ T8816] vhci_hcd vhci_hcd.0: Device attached [ 137.564817][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.571747][ T8684] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 137.580628][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.581427][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.597575][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.600306][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.607747][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.627244][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.635239][ T8813] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 137.637639][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.643535][ T8813] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.645477][ T8813] vhci_hcd vhci_hcd.0: Device attached [ 137.658537][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.679510][ T8813] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 137.682158][ T8539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.686020][ T8813] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.698270][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.700616][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.718336][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.729368][ T5913] vhci_hcd: vhci_device speed not set [ 137.736205][ T8813] vhci_hcd vhci_hcd.0: Device attached [ 137.741934][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.761115][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.773612][ T8823] vhci_hcd: connection closed [ 137.773688][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.774897][ T7744] vhci_hcd: stop threads [ 137.778369][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.778382][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.778395][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.796730][ T8821] vhci_hcd: connection closed [ 137.803537][ T5913] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 137.804402][ T8539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.832638][ T7744] vhci_hcd: release socket [ 137.851897][ T8817] vhci_hcd: connection closed [ 137.852065][ T8814] vhci_hcd: connection reset by peer [ 137.855452][ T7744] vhci_hcd: disconnect device [ 137.876048][ T7744] vhci_hcd: stop threads [ 137.895645][ T8539] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.912309][ T7744] vhci_hcd: release socket [ 137.932116][ T7744] vhci_hcd: disconnect device [ 137.937013][ T8539] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.949488][ T7744] vhci_hcd: stop threads [ 137.954711][ T7744] vhci_hcd: release socket [ 137.966256][ T8539] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.976899][ T7744] vhci_hcd: disconnect device [ 137.985139][ T8539] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.996501][ T7744] vhci_hcd: stop threads [ 138.004495][ T7744] vhci_hcd: release socket [ 138.009570][ T7744] vhci_hcd: disconnect device [ 138.119600][ T8684] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.153003][ T8684] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.181956][ T8684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.201047][ T8684] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 138.227945][ T8684] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 138.251895][ T8684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.263492][ T8684] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 138.278172][ T8684] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 138.297794][ T8684] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.316987][ T8684] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 138.333710][ T8684] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 138.387583][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 138.387598][ T29] audit: type=1400 audit(1739540782.363:447): avc: denied { sys_chroot } for pid=8853 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 138.440630][ T29] audit: type=1400 audit(1739540782.403:448): avc: denied { setgid } for pid=8853 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 138.450847][ T7741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.464124][ T29] audit: type=1400 audit(1739540782.403:449): avc: denied { setrlimit } for pid=8853 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 138.506725][ T7741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.552763][ T7744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.566618][ T7744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.615955][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.634721][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.642143][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.659417][ T29] audit: type=1400 audit(1739540782.603:450): avc: denied { mounton } for pid=8539 comm="syz-executor" path="/root/syzkaller.0IGaxM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 138.686028][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.710210][ T8860] bridge0: entered allmulticast mode [ 138.874166][ T29] audit: type=1400 audit(1739540782.853:451): avc: denied { ioctl } for pid=8872 comm="syz.2.1245" path="socket:[20833]" dev="sockfs" ino=20833 ioctlcmd=0x8b24 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.899919][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.980656][ T29] audit: type=1400 audit(1739540782.933:452): avc: denied { bind } for pid=8878 comm="syz.1.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.000239][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.170869][ T5927] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 139.171195][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.336687][ T5927] usb 6-1: No LPM exit latency info found, disabling LPM. [ 139.364422][ T5927] usb 6-1: config 1 interface 0 altsetting 129 endpoint 0x1 is Bulk; changing to Interrupt [ 139.385278][ T5927] usb 6-1: config 1 interface 0 altsetting 129 endpoint 0x82 is Bulk; changing to Interrupt [ 139.417544][ T5927] usb 6-1: config 1 interface 0 has no altsetting 0 [ 139.455807][ T5927] usb 6-1: string descriptor 0 read error: -22 [ 139.470975][ T5927] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 139.492485][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.514808][ T8877] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 139.531194][ T8877] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 139.650985][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.659279][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.671478][ T5898] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 139.832893][ T5927] usb 6-1: USB disconnect, device number 2 [ 139.841061][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 139.853855][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.878404][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.911020][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.937965][ T5898] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.958239][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.012882][ T5898] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 140.025891][ T5898] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 140.043946][ T5898] usb 1-1: Manufacturer: syz [ 140.050616][ T5898] usb 1-1: config 0 descriptor?? [ 140.078321][ T29] audit: type=1400 audit(1739540784.053:453): avc: denied { read } for pid=8928 comm="syz.2.1260" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 140.097454][ T8922] serio: Serial port ptm0 [ 140.099828][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.162909][ T29] audit: type=1400 audit(1739540784.053:454): avc: denied { open } for pid=8928 comm="syz.2.1260" path="/285/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 140.185167][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.230730][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.248028][ T29] audit: type=1400 audit(1739540784.213:455): avc: denied { connect } for pid=8934 comm="syz.1.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.267493][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.290753][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.370811][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 140.396773][ T5898] rc_core: IR keymap rc-hauppauge not found [ 140.445563][ T5898] Registered IR keymap rc-empty [ 140.469104][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.521760][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.576262][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 140.614284][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 140.656897][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.691649][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.737381][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.801359][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.841321][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.872778][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.921116][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.970781][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.010822][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.041152][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.081338][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.131532][ T5898] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 141.178802][ T5898] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 141.233497][ T5898] usb 1-1: USB disconnect, device number 15 [ 141.370953][ T29] audit: type=1400 audit(1739540785.293:456): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 141.454032][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1275'. [ 141.698317][ T5851] net_ratelimit: 5 callbacks suppressed [ 141.698332][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.732934][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.741177][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.212179][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.222943][ T7737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.237471][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.277393][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.301637][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.309735][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.320733][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.370771][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.450752][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.920811][ T5913] vhci_hcd: vhci_device speed not set [ 143.111738][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 143.199369][ T9050] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 143.504513][ T9063] veth1_macvtap: left promiscuous mode [ 143.604358][ T970] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 143.760964][ T970] usb 5-1: Using ep0 maxpacket: 16 [ 143.776774][ T970] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 143.795237][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 143.805956][ T970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 143.806041][ T9077] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 143.821202][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.835200][ T970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.847548][ T970] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 143.863081][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.884057][ T970] usb 5-1: Product: syz [ 143.893713][ T970] usb 5-1: Manufacturer: syz [ 143.903845][ T970] usb 5-1: SerialNumber: syz [ 143.915603][ T970] usb 5-1: config 0 descriptor?? [ 143.931989][ T970] port100 5-1:0.0: NFC: Could not get supported command types [ 144.010862][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 144.109794][ T9090] netlink: 'syz.2.1317': attribute type 1 has an invalid length. [ 144.190879][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 144.200064][ T970] usb 5-1: USB disconnect, device number 12 [ 144.213063][ T25] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 144.222271][ T25] usb 2-1: config 0 has no interface number 0 [ 144.230449][ T25] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 144.251347][ T25] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 144.298214][ T25] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 144.310754][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.318781][ T25] usb 2-1: Product: syz [ 144.354578][ T25] usb 2-1: Manufacturer: syz [ 144.359200][ T25] usb 2-1: SerialNumber: syz [ 144.374190][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.381003][ T25] usb 2-1: config 0 descriptor?? [ 144.391131][ T9076] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 144.398360][ T9076] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 144.432840][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 144.432854][ T29] audit: type=1400 audit(1739540788.413:458): avc: denied { write } for pid=9097 comm="syz.2.1321" path="socket:[21205]" dev="sockfs" ino=21205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.463042][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.530955][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 144.631953][ T9076] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 144.639221][ T9076] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 144.803511][ T29] audit: type=1400 audit(1739540788.783:459): avc: denied { connect } for pid=9107 comm="syz.4.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.863911][ T29] audit: type=1400 audit(1739540788.813:460): avc: denied { bind } for pid=9107 comm="syz.4.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.883054][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.916657][ T29] audit: type=1400 audit(1739540788.813:461): avc: denied { write } for pid=9107 comm="syz.4.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.939172][ T9111] vivid-000: ================= START STATUS ================= [ 144.970872][ T9111] vivid-000: Radio HW Seek Mode: Bounded [ 144.970950][ T9111] vivid-000: Radio Programmable HW Seek: false [ 144.970973][ T9111] vivid-000: RDS Rx I/O Mode: Block I/O [ 144.970996][ T9111] vivid-000: Generate RBDS Instead of RDS: false [ 144.971018][ T9111] vivid-000: RDS Reception: true [ 144.971067][ T9111] vivid-000: RDS Program Type: 0 inactive [ 144.971096][ T9111] vivid-000: RDS PS Name: inactive [ 144.971123][ T9111] vivid-000: RDS Radio Text: inactive [ 144.971149][ T9111] vivid-000: RDS Traffic Announcement: false inactive [ 144.971177][ T9111] vivid-000: RDS Traffic Program: false inactive [ 144.971224][ T9111] vivid-000: RDS Music: false inactive [ 144.971248][ T9111] vivid-000: ================== END STATUS ================== [ 145.272477][ T25] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 145.303246][ T25] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 145.347246][ T25] asix 2-1:0.251: probe with driver asix failed with error -71 [ 145.388140][ T25] usb 2-1: USB disconnect, device number 17 [ 145.498944][ T9133] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 145.525119][ T29] audit: type=1400 audit(1739540789.503:462): avc: denied { relabelto } for pid=9132 comm="syz.5.1336" name="pids.max" dev="cgroup2" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 145.551739][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.608561][ T29] audit: type=1400 audit(1739540789.503:463): avc: denied { associate } for pid=9132 comm="syz.5.1336" name="pids.max" dev="cgroup2" ino=293 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_log_t:s0" [ 145.636070][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.769682][ T9144] 9p: Unknown Cache mode or invalid value m [ 145.999636][ T9154] veth3: entered allmulticast mode [ 146.043653][ T9158] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1348'. [ 146.238758][ T29] audit: type=1400 audit(1739540790.213:464): avc: denied { module_request } for pid=9168 comm="syz.5.1352" kmod="crypto-hmac(sha256)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 146.410923][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 146.444850][ T29] audit: type=1326 audit(1739540790.423:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb058cde9 code=0x7ffc0000 [ 146.468174][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.506226][ T29] audit: type=1326 audit(1739540790.423:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb058cde9 code=0x7ffc0000 [ 146.535381][ T29] audit: type=1326 audit(1739540790.463:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbcb058cde9 code=0x7ffc0000 [ 146.558891][ T9184] xt_CT: No such helper "snmp" [ 146.584746][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 146.597361][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 146.665019][ T25] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 146.676191][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.704052][ T25] usb 5-1: Product: syz [ 146.708279][ T25] usb 5-1: Manufacturer: syz [ 146.725432][ T25] usb 5-1: SerialNumber: syz [ 146.735265][ T25] usb 5-1: config 0 descriptor?? [ 146.735655][ T9200] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 146.740856][ T9165] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 146.761405][ T9165] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.062433][ T9216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.069700][ T9216] IPv6: NLM_F_CREATE should be set when creating new route [ 147.091760][ T9165] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.112985][ T9165] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.540830][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 147.541797][ T25] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 147.610812][ T5927] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 147.724086][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.732332][ T9] usb 2-1: config 0 has no interface number 0 [ 147.738443][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.749613][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.760271][ T9] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 147.766636][ T25] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 147.775902][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.786166][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.786202][ T5927] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 147.786222][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.809621][ T25] usb 5-1: USB disconnect, device number 13 [ 147.824153][ T5927] usb 6-1: config 0 descriptor?? [ 147.837655][ T5927] usb 6-1: bad CDC descriptors [ 147.893939][ T9] usb 2-1: config 0 descriptor?? [ 147.993040][ T9260] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 148.052425][ T5851] usb 6-1: USB disconnect, device number 3 [ 148.376183][ T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0012/input/input32 [ 148.514621][ T9] holtek_kbd 0003:04D9:A055.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 148.547847][ T9] usb 2-1: USB disconnect, device number 18 [ 148.884963][ T9298] SELinux: Context system_u:object_r:newrole_exec_t:s0 is not valid (left unmapped). [ 149.541551][ T9340] bridge_slave_0: invalid flags given to default FDB implementation [ 149.795042][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 149.795057][ T29] audit: type=1400 audit(1739540793.773:486): avc: denied { connect } for pid=9351 comm="syz.2.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.859599][ T970] IPVS: starting estimator thread 0... [ 149.960926][ T9360] IPVS: using max 28 ests per chain, 67200 per kthread [ 150.551586][ T29] audit: type=1326 audit(1739540794.473:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.5.1434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f193b78cde9 code=0x0 [ 150.896863][ T29] audit: type=1400 audit(1739540794.873:488): avc: denied { connect } for pid=9393 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.988230][ T29] audit: type=1400 audit(1739540794.963:489): avc: denied { write } for pid=9393 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.529472][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 151.581324][ T5898] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 151.750859][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 151.758820][ T5898] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 151.785629][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 151.804122][ T5898] usb 3-1: Product: syz [ 151.823634][ T5898] usb 3-1: Manufacturer: syz [ 151.828272][ T5898] usb 3-1: SerialNumber: syz [ 151.881138][ T5898] usb 3-1: config 0 descriptor?? [ 151.958406][ T25] kernel write not supported for file /binder/state (pid: 25 comm: kworker/1:0) [ 152.528313][ T9457] nfs: Bad value for 'source' [ 152.773790][ T9467] input: syz0 as /devices/virtual/input/input33 [ 152.820886][ T970] usb 3-1: USB disconnect, device number 12 [ 153.010590][ T29] audit: type=1400 audit(1739540796.983:490): avc: denied { bind } for pid=9472 comm="syz.5.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.083145][ T29] audit: type=1400 audit(1739540796.993:491): avc: denied { listen } for pid=9472 comm="syz.5.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.524929][ T9497] syz.2.1479: attempt to access beyond end of device [ 153.524929][ T9497] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 153.552444][ T9497] syz.2.1479: attempt to access beyond end of device [ 153.552444][ T9497] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 153.659685][ T9497] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 153.756280][ T9497] syz.2.1479: attempt to access beyond end of device [ 153.756280][ T9497] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 153.808971][ T9497] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 153.887487][ T9497] syz.2.1479: attempt to access beyond end of device [ 153.887487][ T9497] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 153.927843][ T9497] syz.2.1479: attempt to access beyond end of device [ 153.927843][ T9497] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 154.021014][ T9497] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 154.093356][ T9497] syz.2.1479: attempt to access beyond end of device [ 154.093356][ T9497] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 154.097898][ T29] audit: type=1400 audit(1739540798.073:492): avc: denied { write } for pid=9519 comm="syz.5.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.177086][ T9497] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 154.221418][ T9497] syz.2.1479: attempt to access beyond end of device [ 154.221418][ T9497] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 154.291421][ T9497] syz.2.1479: attempt to access beyond end of device [ 154.291421][ T9497] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 154.351106][ T9497] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 154.396806][ T9497] syz.2.1479: attempt to access beyond end of device [ 154.396806][ T9497] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 154.441376][ T9497] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 259.520634][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 259.527604][ C0] rcu: 1-...!: (1 GPs behind) idle=6744/1/0x4000000000000000 softirq=30257/30264 fqs=0 [ 259.538215][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5818/1:b..l P9508/1:b..l [ 259.547264][ C0] rcu: (detected by 0, t=10506 jiffies, g=23361, q=543 ncpus=2) [ 259.554973][ C0] Sending NMI from CPU 0 to CPUs 1: [ 259.554997][ C1] NMI backtrace for cpu 1 [ 259.555006][ C1] CPU: 1 UID: 0 PID: 9514 Comm: dhcpcd-run-hook Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 259.555021][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 259.555028][ C1] RIP: 0010:do_raw_spin_lock+0x12d/0x2c0 [ 259.555046][ C1] Code: 0f 84 35 01 00 00 48 89 df be 04 00 00 00 c7 44 24 28 00 00 00 00 e8 42 da 85 00 be 04 00 00 00 48 8d 7c 24 28 e8 33 da 85 00 <8b> 44 24 28 ba 01 00 00 00 89 44 24 04 f0 0f b1 13 0f 85 95 00 00 [ 259.555059][ C1] RSP: 0018:ffffc90000a18ce8 EFLAGS: 00000097 [ 259.555069][ C1] RAX: 0000000000000001 RBX: ffff888078d0c2e8 RCX: ffffffff819719cd [ 259.555078][ C1] RDX: fffff520001431a2 RSI: 0000000000000004 RDI: ffffc90000a18d10 [ 259.555086][ C1] RBP: 1ffff9200014319e R08: 0000000000000001 R09: fffff520001431a2 [ 259.555095][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888078d0c2f0 [ 259.555103][ C1] R13: ffff888078d0c2f8 R14: ffff888078d0c340 R15: ffffffff896a4870 [ 259.555111][ C1] FS: 00007f98501c7500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 259.555126][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.555135][ C1] CR2: 0000564888054db8 CR3: 000000007a71e000 CR4: 00000000003526f0 [ 259.555143][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.555151][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.555159][ C1] Call Trace: [ 259.555165][ C1] <NMI> [ 259.555170][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 259.555190][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 259.555207][ C1] ? nmi_handle+0x1ac/0x5d0 [ 259.555225][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 259.555237][ C1] ? default_do_nmi+0x6a/0x160 [ 259.555254][ C1] ? exc_nmi+0x170/0x1e0 [ 259.555270][ C1] ? end_repeat_nmi+0xf/0x53 [ 259.555287][ C1] ? __pfx_advance_sched+0x10/0x10 [ 259.555307][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 259.555319][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 259.555331][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 259.555344][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 259.555356][ C1] </NMI> [ 259.555360][ C1] <IRQ> [ 259.555365][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 259.555377][ C1] ? lock_acquire+0x2f/0xb0 [ 259.555392][ C1] ? advance_sched+0xd8/0xc60 [ 259.555410][ C1] advance_sched+0xd8/0xc60 [ 259.555433][ C1] ? timerqueue_del+0x83/0x150 [ 259.555449][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 259.555462][ C1] ? __pfx_advance_sched+0x10/0x10 [ 259.555478][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 259.555494][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 259.555506][ C1] ? read_tsc+0x9/0x20 [ 259.555522][ C1] hrtimer_interrupt+0x392/0x8e0 [ 259.555538][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 259.555558][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 259.555578][ C1] </IRQ> [ 259.555582][ C1] <TASK> [ 259.555587][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.555604][ C1] RIP: 0010:__orc_find+0xab/0xf0 [ 259.555622][ C1] Code: 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b <5d> 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 83 c4 08 31 c0 5b 5d [ 259.555634][ C1] RSP: 0018:ffffc9000d4c7898 EFLAGS: 00000296 [ 259.555644][ C1] RAX: ffffffff9105682a RBX: 0000000000000001 RCX: dffffc0000000000 [ 259.555653][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffffffff907d80a8 [ 259.555660][ C1] RBP: ffffffff907d80b0 R08: ffffffff91056866 R09: ffffffff9105a170 [ 259.555669][ C1] R10: ffffc9000d4c7938 R11: 0000000000012fd6 R12: ffffffff907d80ac [ 259.555677][ C1] R13: ffffffff822fd60e R14: ffffffff907d80a8 R15: 0000000000000001 [ 259.555687][ C1] ? vfs_fstatat+0xde/0xf0 [ 259.555707][ C1] ? vfs_fstatat+0xde/0xf0 [ 259.555721][ C1] unwind_next_frame+0x2be/0x20c0 [ 259.555738][ C1] ? vfs_fstatat+0xdf/0xf0 [ 259.555753][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 259.555768][ C1] arch_stack_walk+0x95/0x100 [ 259.555782][ C1] ? vfs_fstatat+0xdf/0xf0 [ 259.555798][ C1] stack_trace_save+0x95/0xd0 [ 259.555811][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 259.555825][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 259.555839][ C1] ? stack_depot_save_flags+0x28/0x9c0 [ 259.555859][ C1] kasan_save_stack+0x33/0x60 [ 259.555871][ C1] ? kasan_save_stack+0x33/0x60 [ 259.555882][ C1] ? kasan_save_track+0x14/0x30 [ 259.555892][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 259.555904][ C1] ? kmem_cache_alloc_noprof+0x226/0x3d0 [ 259.555917][ C1] ? getname_flags.part.0+0x4c/0x550 [ 259.555932][ C1] ? getname+0x8d/0xe0 [ 259.555948][ C1] ? vfs_fstatat+0xdf/0xf0 [ 259.555973][ C1] kasan_save_track+0x14/0x30 [ 259.555984][ C1] __kasan_slab_alloc+0x89/0x90 [ 259.555997][ C1] kmem_cache_alloc_noprof+0x226/0x3d0 [ 259.556010][ C1] ? getname_flags.part.0+0x4c/0x550 [ 259.556026][ C1] getname_flags.part.0+0x4c/0x550 [ 259.556042][ C1] getname+0x8d/0xe0 [ 259.556058][ C1] vfs_fstatat+0xdf/0xf0 [ 259.556072][ C1] __do_sys_newfstatat+0xa2/0x130 [ 259.556087][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 259.556109][ C1] do_syscall_64+0xcd/0x250 [ 259.556123][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.556139][ C1] RIP: 0033:0x7f985031b5f4 [ 259.556150][ C1] Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8 [ 259.556161][ C1] RSP: 002b:00007ffec0ea72f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 259.556172][ C1] RAX: ffffffffffffffda RBX: 00007ffec0ea74c8 RCX: 00007f985031b5f4 [ 259.556180][ C1] RDX: 00007ffec0ea7358 RSI: 0000564888054e28 RDI: 00000000ffffff9c [ 259.556188][ C1] RBP: 0000564888054d48 R08: 000000000000000d R09: 00007ffec0eabdf8 [ 259.556196][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.556204][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 259.556216][ C1] </TASK> [ 259.556991][ C0] task:syz.4.1483 state:R running task stack:26048 pid:9508 tgid:9508 ppid:5819 task_flags:0x40004c flags:0x00004000 [ 260.151463][ C0] Call Trace: [ 260.154740][ C0] <TASK> [ 260.157672][ C0] __schedule+0xf43/0x5890 [ 260.162094][ C0] ? hlock_class+0x4e/0x130 [ 260.166592][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 260.171789][ C0] ? __pfx_mark_lock+0x10/0x10 [ 260.176554][ C0] ? __pfx___schedule+0x10/0x10 [ 260.181404][ C0] ? find_held_lock+0x2d/0x110 [ 260.186172][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 260.191559][ C0] preempt_schedule_common+0x44/0xc0 [ 260.196840][ C0] preempt_schedule_thunk+0x1a/0x30 [ 260.202048][ C0] _raw_spin_unlock+0x3e/0x50 [ 260.206723][ C0] unmap_page_range+0xec7/0x43a0 [ 260.211681][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 260.217055][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 260.222011][ C0] ? uprobe_munmap+0x20/0x5c0 [ 260.226692][ C0] unmap_single_vma+0x194/0x2b0 [ 260.231544][ C0] unmap_vmas+0x22f/0x490 [ 260.235875][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 260.240731][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 260.245675][ C0] exit_mmap+0x1c1/0xba0 [ 260.249920][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 260.254688][ C0] ? __pfx_mark_lock+0x10/0x10 [ 260.259466][ C0] __mmput+0x12a/0x410 [ 260.263537][ C0] mmput+0x62/0x70 [ 260.267257][ C0] do_exit+0x9ba/0x2d70 [ 260.271413][ C0] ? __pfx_do_exit+0x10/0x10 [ 260.275995][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 260.281370][ C0] do_group_exit+0xd3/0x2a0 [ 260.285873][ C0] __x64_sys_exit_group+0x3e/0x50 [ 260.290900][ C0] x64_sys_call+0x151f/0x1720 [ 260.295569][ C0] do_syscall_64+0xcd/0x250 [ 260.300069][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.305962][ C0] RIP: 0033:0x7fcce418cde9 [ 260.310369][ C0] RSP: 002b:00007ffcf5f8cb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 260.318777][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcce418cde9 [ 260.326750][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.334714][ C0] RBP: 00007ffcf5f8cbfc R08: 00000004f5f8cc8f R09: 00000000000927c0 [ 260.342766][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000104 [ 260.350728][ C0] R13: 00000000000927c0 R14: 000000000002580d R15: 00007ffcf5f8cc50 [ 260.358705][ C0] </TASK> [ 260.361715][ C0] task:syz-executor state:R running task stack:22112 pid:5818 tgid:5818 ppid:5809 task_flags:0x400140 flags:0x00000000 [ 260.375198][ C0] Call Trace: [ 260.378467][ C0] <TASK> [ 260.381409][ C0] __schedule+0xf43/0x5890 [ 260.385826][ C0] ? __pfx_mark_lock+0x10/0x10 [ 260.390591][ C0] ? hlock_class+0x4e/0x130 [ 260.395089][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 260.400287][ C0] ? __pfx___schedule+0x10/0x10 [ 260.405147][ C0] ? irqentry_exit+0x3b/0x90 [ 260.409730][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.414921][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 260.420294][ C0] preempt_schedule_common+0x44/0xc0 [ 260.425572][ C0] preempt_schedule_thunk+0x1a/0x30 [ 260.430771][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 260.436404][ C0] sidtab_sid2str_put+0x4ae/0x890 [ 260.441432][ C0] ? __asan_memcpy+0x3c/0x60 [ 260.446047][ C0] sidtab_sid2str_get+0x234/0x680 [ 260.451074][ C0] sidtab_entry_to_string+0x33/0x110 [ 260.456361][ C0] security_sid_to_context_core+0x35c/0x640 [ 260.462255][ C0] selinux_inode_init_security+0x465/0x670 [ 260.468063][ C0] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 260.474389][ C0] ? rcu_is_watching+0x12/0xc0 [ 260.479171][ C0] security_inode_init_security+0x1e6/0x390 [ 260.485073][ C0] ? __pfx_shmem_initxattrs+0x10/0x10 [ 260.490436][ C0] ? __pfx_security_inode_init_security+0x10/0x10 [ 260.496845][ C0] ? shmem_get_inode+0x73a/0xf00 [ 260.501782][ C0] shmem_mknod+0x22e/0x450 [ 260.506202][ C0] shmem_mkdir+0x31/0x60 [ 260.510438][ C0] vfs_mkdir+0x57d/0x860 [ 260.514681][ C0] do_mkdirat+0x301/0x3a0 [ 260.519004][ C0] ? __pfx_do_mkdirat+0x10/0x10 [ 260.523848][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 260.529223][ C0] __x64_sys_mkdirat+0x83/0xb0 [ 260.533978][ C0] do_syscall_64+0xcd/0x250 [ 260.538480][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.544368][ C0] RIP: 0033:0x7f8a6af8b657 [ 260.548772][ C0] RSP: 002b:00007ffcdf61e3f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 260.557217][ C0] RAX: ffffffffffffffda RBX: 00007ffcdf61e450 RCX: 00007f8a6af8b657 [ 260.565205][ C0] RDX: 00000000000001ff RSI: 00007ffcdf61e450 RDI: 00000000ffffff9c [ 260.573198][ C0] RBP: 00007ffcdf61e43c R08: 0000000000000005 R09: 00007ffcdf61e195 [ 260.581180][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000012f [ 260.589157][ C0] R13: 00000000000927c0 R14: 0000000000025afe R15: 00007ffcdf61e490 [ 260.597145][ C0] </TASK> [ 260.600164][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g23361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 260.611346][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 260.621389][ C0] rcu: RCU grace-period kthread stack dump: [ 260.627263][ C0] task:rcu_preempt state:R running task stack:27456 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 260.640748][ C0] Call Trace: [ 260.644017][ C0] <TASK> [ 260.646944][ C0] __schedule+0xf43/0x5890 [ 260.651369][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 260.656579][ C0] ? __pfx___schedule+0x10/0x10 [ 260.661448][ C0] ? schedule+0x298/0x350 [ 260.665777][ C0] ? __pfx_lock_release+0x10/0x10 [ 260.670803][ C0] ? lock_acquire+0x2f/0xb0 [ 260.675301][ C0] ? schedule+0x1fd/0x350 [ 260.679644][ C0] schedule+0xe7/0x350 [ 260.683714][ C0] schedule_timeout+0x124/0x280 [ 260.688565][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 260.693936][ C0] ? __pfx_process_timeout+0x10/0x10 [ 260.699219][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 260.705027][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 260.710488][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 260.715254][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 260.720554][ C0] ? rcu_gp_init+0xc82/0x1630 [ 260.725258][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 260.730475][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 260.736287][ C0] rcu_gp_kthread+0x271/0x380 [ 260.740973][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 260.746173][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.751369][ C0] ? __kthread_parkme+0x148/0x220 [ 260.756386][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 260.761586][ C0] kthread+0x3af/0x750 [ 260.765651][ C0] ? __pfx_kthread+0x10/0x10 [ 260.770244][ C0] ? __pfx_kthread+0x10/0x10 [ 260.774829][ C0] ret_from_fork+0x45/0x80 [ 260.779248][ C0] ? __pfx_kthread+0x10/0x10 [ 260.783836][ C0] ret_from_fork_asm+0x1a/0x30 [ 260.788604][ C0] </TASK> [ 260.791628][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 260.797960][ C0] CPU: 0 UID: 0 PID: 9497 Comm: syz.2.1479 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 260.808643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 260.818794][ C0] RIP: 0010:smp_call_function_many_cond+0x4cb/0x12c0 [ 260.825476][ C0] Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 fc 04 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 ff 83 e0 01 41 [ 260.845075][ C0] RSP: 0018:ffffc9000c7bf920 EFLAGS: 00000246 [ 260.851141][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a80 RCX: ffffc90005afb000 [ 260.859104][ C0] RDX: 0000000000080000 RSI: ffffffff81adcee4 RDI: 0000000000000005 [ 260.867068][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 260.875043][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10170e8951 [ 260.883024][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88 [ 260.891012][ C0] FS: 00007f6bfad7a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 260.899953][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.906538][ C0] CR2: 000000110c2a512d CR3: 000000007be78000 CR4: 00000000003526f0 [ 260.914506][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 260.922467][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.930443][ C0] Call Trace: [ 260.933730][ C0] <IRQ> [ 260.936669][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 260.943016][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 260.948217][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 260.953679][ C0] ? timekeeping_advance+0x72e/0xa90 [ 260.958963][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 260.964590][ C0] ? __asan_memcpy+0x3c/0x60 [ 260.969194][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 260.974479][ C0] ? rcu_is_watching+0x12/0xc0 [ 260.979238][ C0] ? update_process_times+0x178/0x2d0 [ 260.984611][ C0] ? __pfx_update_process_times+0x10/0x10 [ 260.990335][ C0] ? update_wall_time+0x1c/0x40 [ 260.995185][ C0] ? tick_nohz_handler+0x376/0x530 [ 261.000292][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 261.005742][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 261.011111][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 261.016822][ C0] ? read_tsc+0x9/0x20 [ 261.020893][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 261.026008][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 261.032168][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 261.037984][ C0] </IRQ> [ 261.040909][ C0] <TASK> [ 261.043831][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 261.049996][ C0] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 261.056059][ C0] ? smp_call_function_many_cond+0x4cb/0x12c0 [ 261.062134][ C0] ? __pfx_has_bh_in_lru+0x10/0x10 [ 261.067251][ C0] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 261.072709][ C0] ? __pfx_has_bh_in_lru+0x10/0x10 [ 261.077817][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 261.082925][ C0] set_blocksize+0x299/0x360 [ 261.087512][ C0] sb_set_blocksize+0x47/0x120 [ 261.092273][ C0] udf_load_vrs+0xda/0x1050 [ 261.096781][ C0] ? __pfx_udf_load_vrs+0x10/0x10 [ 261.101800][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 261.107274][ C0] ? __pfx_udf_get_last_session+0x10/0x10 [ 261.113003][ C0] udf_fill_super+0x79b/0x1e00 [ 261.117767][ C0] ? __pfx_udf_fill_super+0x10/0x10 [ 261.122961][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 261.127979][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 261.133346][ C0] ? set_blocksize+0x2a8/0x360 [ 261.138105][ C0] ? sb_set_blocksize+0xf6/0x120 [ 261.143034][ C0] ? setup_bdev_super+0x369/0x730 [ 261.148064][ C0] get_tree_bdev_flags+0x38b/0x620 [ 261.153175][ C0] ? __pfx_udf_fill_super+0x10/0x10 [ 261.158370][ C0] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 261.164009][ C0] ? bpf_lsm_capable+0x9/0x10 [ 261.168696][ C0] ? security_capable+0x7e/0x260 [ 261.173650][ C0] vfs_get_tree+0x8b/0x340 [ 261.178082][ C0] path_mount+0x14e6/0x1f10 [ 261.182590][ C0] ? kmem_cache_free+0x2e2/0x4d0 [ 261.187523][ C0] ? __pfx_path_mount+0x10/0x10 [ 261.192373][ C0] ? putname+0x13c/0x180 [ 261.196616][ C0] __x64_sys_mount+0x28f/0x310 [ 261.201375][ C0] ? __pfx___x64_sys_mount+0x10/0x10 [ 261.206664][ C0] do_syscall_64+0xcd/0x250 [ 261.211184][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.217084][ C0] RIP: 0033:0x7f6bf9f8cde9 [ 261.221497][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.241099][ C0] RSP: 002b:00007f6bfad7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 261.249508][ C0] RAX: ffffffffffffffda RBX: 00007f6bfa1a5fa0 RCX: 00007f6bf9f8cde9 [ 261.257474][ C0] RDX: 0000400000000040 RSI: 0000400000004a00 RDI: 0000400000000000 [ 261.265442][ C0] RBP: 00007f6bfa00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 261.273420][ C0] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 261.281407][ C0] R13: 0000000000000000 R14: 00007f6bfa1a5fa0 R15: 00007ffdea9fa628 [ 261.289391][ C0] </TASK>