last executing test programs: 2m22.951635781s ago: executing program 3 (id=2461): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x7, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x6}]}}]}]}, 0x34}}, 0x40) 2m22.865416561s ago: executing program 3 (id=2463): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000500)={r2, r1, r1}, &(0x7f0000000600)=""/257, 0x126, &(0x7f0000000400)={&(0x7f0000000340)={'sha1-generic\x00'}}) 2m22.794212394s ago: executing program 3 (id=2464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"]) 2m22.574513391s ago: executing program 3 (id=2465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 2m22.461925546s ago: executing program 3 (id=2466): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x149702) 2m22.150817497s ago: executing program 3 (id=2468): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 2m22.043134985s ago: executing program 32 (id=2468): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 2m18.745314389s ago: executing program 1 (id=2518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0x8) 2m18.591358724s ago: executing program 1 (id=2521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') 2m18.481161968s ago: executing program 1 (id=2523): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002502000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe5d6405000000000075040000000d00000701000000000000b70400001000e5206a0700fe000000008500000088000000b70000000a00000095000000000000006458c2c62fc206000000f909a63796c113a80c19aab9d60700ffffffff483be3f0d3253730e78000000062c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766aeb39439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c013700e69274f8e9c31975e551558055dc2dc29edc33b375fa325dcf3e91e20f63d7030dbe7ff7f51fe89c3d17cf45a1616ad237682057034dfdc81f5a53cd640212cad88e8b687a2446049577c75b76b775c1e80dbc4ba3ce2e95c02301caf2465ed4b2ad56b848d046c52bfc3737127120ab17d82a294d174f240a3cdc725cfe6e839a1f80f59486578e45b008d39ab618f660e3c53ed4409aa92ae4fecd913060ca74ed8a303e22de12087a217d8d7be0ae1117cc791313b1318497dd5ebeef0d7e1795a6ff20f699870ebb137cffa79465da52ab2b3430ba0ba59152496a1ea5dd1e4dee46f6d3688603b5f25a588a31da4e481884074e211dd09a8b8039d0834507656ed7d552a990c1354d7638b2c2215dd9f606b01a92fabc6eb6fa033a86f8920e2168a80d7c86da5ad1d27c8d2a180e56046a49b989128ea736894d3eef8dca16ed63520be4654ddb14bfe4268c487c5a75c044e21021c089608c50adbc4e3f4c6a4ca86c7d2df5bc7c76e413d05e8f57b1e22d4af34f9d4d2e6e4d4f57f47aebdd5f98f67834c656b2fe09df4a1b15116fceaa404a6df278c7c629f584ba8d37c1137c2263ae02ad3718a03a886"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m18.420477727s ago: executing program 1 (id=2524): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r0, r1, 0x0, 0x8000fb00) 2m18.179902378s ago: executing program 1 (id=2525): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 2m18.103943277s ago: executing program 1 (id=2526): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfff00005}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 2m2.983026478s ago: executing program 33 (id=2526): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfff00005}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 30.798807541s ago: executing program 5 (id=4528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 30.581213041s ago: executing program 5 (id=4531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 30.50291127s ago: executing program 5 (id=4532): r0 = io_uring_setup(0x6b66, &(0x7f0000000040)={0x0, 0xffbffffc, 0x400, 0x0, 0x3bd}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) close_range(r0, 0xffffffffffffffff, 0x0) 30.415539662s ago: executing program 5 (id=4533): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 30.26146475s ago: executing program 5 (id=4535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000005000000000000000000000000000500030005000000110004006163746976656a61847611e09e"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 30.033531397s ago: executing program 5 (id=4537): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 29.747395846s ago: executing program 34 (id=4537): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 4.39758869s ago: executing program 7 (id=4971): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13b", 0xfffffce2, 0x0, &(0x7f0000000140)={0x11, 0x1a, r1, 0x1, 0x0, 0x6, @local}, 0x14) 4.363907577s ago: executing program 7 (id=4973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="06001200000000000600b50085017daa0a000600ffffffffffff0000040013000c0043"], 0x48}}, 0x0) 4.245548993s ago: executing program 7 (id=4976): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 4.157987393s ago: executing program 7 (id=4978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0xc00, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.010042624s ago: executing program 7 (id=4980): io_setup(0x9, 0x0) io_destroy(0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa7, &(0x7f0000002300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x8, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x1}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x7, 0x5, 0x9, 0x5, 0xa, 0x4], 0xa}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x6, 0x4, 0x86}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x0, 0x5, {0x7, 0x25, 0x1, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x80, 0x3, 'R'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8001, 0x1ff, 0x78, "ae"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb9, 0xe, 0x7, {0x7, 0x25, 0x1, 0x80, 0x9, 0x8}}}}}}}]}}, &(0x7f0000002680)={0x0, 0x0, 0x5, &(0x7f0000002480)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) 2.637758559s ago: executing program 2 (id=4989): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) 2.425577303s ago: executing program 2 (id=4992): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockname$l2tp(r0, 0x0, &(0x7f0000000100)) 2.178736286s ago: executing program 2 (id=4994): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.727533006s ago: executing program 0 (id=5003): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x30000014}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x20002000}) 1.596189132s ago: executing program 0 (id=5007): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) 1.435736999s ago: executing program 0 (id=5010): r0 = io_uring_setup(0x669, &(0x7f0000000580)={0x0, 0x2, 0x100, 0x4}) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x10001, 0x3c, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 1.376780041s ago: executing program 0 (id=5013): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x11, 0x67}], 0x10}}], 0x1, 0x800) 1.295881338s ago: executing program 0 (id=5015): r0 = syz_io_uring_setup(0x56f, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x14f}, &(0x7f0000000000), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000280)={0x80000000, 0xf1}, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x51) 1.176730534s ago: executing program 0 (id=5016): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x2, 0x1}, 0x20) close(0xffffffffffffffff) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 949.729498ms ago: executing program 7 (id=5017): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003bc0), 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x8, 0x4c440) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000044c0)={{0x12, 0x1, 0x250, 0xc3, 0x9f, 0x3, 0x40, 0x2001, 0x3a02, 0xb262, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x18, 0xd, 0x0, 0x1, [{{0x9, 0x4, 0xd0, 0x4, 0x1, 0xd0, 0x94, 0xa7, 0x4, [], [{{0x9, 0x5, 0x1, 0x9543b46040fbecff, 0x8, 0x7, 0x9, 0xf}}]}}]}}]}}, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0}) 659.804905ms ago: executing program 2 (id=5024): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x1}) r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)="000087000000000000cc4c52bb85dfcda2245ca1b071d74d025ef7", 0x1b, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/67, 0x43, 0x0) 591.580067ms ago: executing program 2 (id=5027): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flock(0xffffffffffffffff, 0xe) 552.437788ms ago: executing program 6 (id=5028): openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x5e5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 506.547744ms ago: executing program 6 (id=5029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x3) 431.554643ms ago: executing program 4 (id=5030): r0 = inotify_init() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0xc01, 0x3, 0x300, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x268, 0x3c8, 0x3c8, 0x268, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'gre0\x00', 'veth0_to_batadv\x00', 0x15, 0x0, 0x5, 0x0, 0x5, 0xfffffff7, {0x2}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x10}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x20000}}}, {{@uncond, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x29, 0x1d], 0x0, 0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x149, 0xffff, 0x2, 'netbios-ns\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 351.440773ms ago: executing program 6 (id=5031): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x40086602, &(0x7f0000000000)) 337.640822ms ago: executing program 4 (id=5032): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x5) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 253.000392ms ago: executing program 6 (id=5033): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xf8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r1, r0) getpeername$packet(r0, 0x0, 0x0) 217.214404ms ago: executing program 4 (id=5034): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x38, r2, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1860000, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x0) 167.542785ms ago: executing program 4 (id=5035): r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885, 0x400, 0x1, 0x2ad}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xc, 0x0, 0x8001, 0x2, 0x0, 0xfffffff9, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 160.501597ms ago: executing program 6 (id=5036): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 56.314067ms ago: executing program 4 (id=5037): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x10, 0x0, 0x0, 0x2, 0x0, 0xe16}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 17.110083ms ago: executing program 6 (id=5038): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102020000000005a1a440000102030109023b000101ffa002090400ae0302060001052406000005240000000d240f010f0000000900a107b209058202100003ae01090503022000040c"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 9.845221ms ago: executing program 2 (id=5039): setresuid(0xee01, 0xee00, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xd555, 0x1, 0x4, 0xb9}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)=""/36, 0x24}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) 0s ago: executing program 4 (id=5040): capset(0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x0, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) kernel console output (not intermixed with test programs): lter) [ 241.687349][ T5901] prodikeys 0003:041E:2801.0032: unknown main item tag 0x0 [ 241.696231][ T975] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 241.715953][ T5901] prodikeys 0003:041E:2801.0032: unknown main item tag 0x0 [ 241.724661][ T975] dvb_usb_cxusb 1-1:7.34: probe with driver dvb_usb_cxusb failed with error -22 [ 241.738217][ T5901] prodikeys 0003:041E:2801.0032: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 241.762738][ T5901] hid_prodikeys: hid-prodikeys: failed to find output report [ 241.762738][ T5901] [ 241.829025][ T10] usb 5-1: USB disconnect, device number 35 [ 241.866337][ T5901] usb 1-1: USB disconnect, device number 33 [ 241.918040][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3564'. [ 242.400421][ T10] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 242.504549][T13810] can0: slcan on ttyprintk. [ 242.570304][T13809] can0 (unregistered): slcan off ttyprintk. [ 242.582706][ T10] usb 7-1: config 0 has an invalid interface number: 33 but max is 0 [ 242.598288][ T10] usb 7-1: config 0 has no interface number 0 [ 242.612696][T13817] --map-set only usable from mangle table [ 242.623831][ T10] usb 7-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=f6.9e [ 242.643641][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.663220][ T10] usb 7-1: Product: syz [ 242.673048][ T10] usb 7-1: Manufacturer: syz [ 242.690678][ T10] usb 7-1: SerialNumber: syz [ 242.760981][ T10] usb 7-1: config 0 descriptor?? [ 242.889292][ T5901] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 242.925865][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 242.925881][ T30] audit: type=1400 audit(1742691953.965:1289): avc: denied { read } for pid=13832 comm="syz.2.3582" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 242.990442][ T5870] usb 7-1: USB disconnect, device number 11 [ 242.998871][ T30] audit: type=1400 audit(1742691953.965:1290): avc: denied { open } for pid=13832 comm="syz.2.3582" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 243.037379][ T30] audit: type=1400 audit(1742691953.965:1291): avc: denied { ioctl } for pid=13832 comm="syz.2.3582" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 243.067100][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 243.068512][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3585'. [ 243.074405][ T5901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.114976][ T5901] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 243.137508][ T5901] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 243.154181][ T5901] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 243.163274][ T5901] usb 6-1: config 128 has no interface number 0 [ 243.175038][ T5901] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 243.199059][ T5901] usb 6-1: config 128 interface 127 has no altsetting 0 [ 243.215878][T13848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3589'. [ 243.222563][ T30] audit: type=1400 audit(1742691954.255:1292): avc: denied { bind } for pid=13847 comm="syz.2.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 243.259698][ T5901] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 243.268751][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.278202][ T5901] usb 6-1: Product: syz [ 243.283584][ T5901] usb 6-1: Manufacturer: syz [ 243.288189][ T5901] usb 6-1: SerialNumber: syz [ 243.295527][T13816] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 243.316530][ T30] audit: type=1400 audit(1742691954.355:1293): avc: denied { accept } for pid=13849 comm="syz.4.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 243.337090][ T30] audit: type=1400 audit(1742691954.355:1294): avc: denied { write } for pid=13849 comm="syz.4.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 243.532024][ T5901] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.551506][ T5901] usb 6-1: USB disconnect, device number 6 [ 243.662568][ T30] audit: type=1400 audit(1742691954.705:1295): avc: denied { setattr } for pid=13867 comm="syz.6.3598" name="/" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.730958][T13870] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3599'. [ 243.741965][T13870] netlink: zone id is out of range [ 243.754633][T13870] netlink: zone id is out of range [ 243.763264][T13870] netlink: zone id is out of range [ 243.780297][T13870] netlink: zone id is out of range [ 243.785463][T13870] netlink: zone id is out of range [ 243.800285][T13870] netlink: zone id is out of range [ 243.815762][T13870] netlink: zone id is out of range [ 243.822570][T13870] netlink: zone id is out of range [ 243.827696][T13870] netlink: zone id is out of range [ 243.852897][ T30] audit: type=1400 audit(1742691954.895:1296): avc: denied { setopt } for pid=13876 comm="syz.6.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.900879][ T30] audit: type=1400 audit(1742691954.925:1297): avc: denied { read } for pid=13876 comm="syz.6.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.930368][ T30] audit: type=1400 audit(1742691954.935:1298): avc: denied { bind } for pid=13878 comm="syz.4.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 244.610610][T13909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.812874][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3621'. [ 244.938639][ T975] kernel write not supported for file /admmidi2 (pid: 975 comm: kworker/1:2) [ 244.997148][T13924] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 245.200652][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 245.276030][T13940] netlink: 'syz.5.3632': attribute type 58 has an invalid length. [ 245.285633][T13940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3632'. [ 245.381493][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.390181][ T10] usb 3-1: config 0 has no interface number 0 [ 245.396600][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.408411][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.412826][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3636'. [ 245.420018][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 245.441611][T13948] macsec0: entered promiscuous mode [ 245.449798][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.470353][ T10] usb 3-1: config 0 descriptor?? [ 245.689975][T13960] syz.0.3642: attempt to access beyond end of device [ 245.689975][T13960] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 245.705297][T13960] FAT-fs (loop1): unable to read boot sector [ 245.781236][ T5831] kernel read not supported for file /dsp1 (pid: 5831 comm: kworker/0:3) [ 245.887657][ T10] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 245.915447][ T10] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 245.927581][ T10] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 245.937657][ T10] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 245.946890][ T10] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 245.954740][ T10] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 245.963464][ T10] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 245.975416][ T10] prodikeys 0003:041E:2801.0033: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 245.994211][ T10] hid_prodikeys: hid-prodikeys: failed to find output report [ 245.994211][ T10] [ 246.128072][T13984] Device name cannot be null; rc = [-22] [ 246.147029][ T975] usb 3-1: USB disconnect, device number 27 [ 246.229785][ T5831] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 246.390446][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 246.417550][ T5831] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 246.427531][ T5831] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 246.445711][ T5831] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.458665][ T5831] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.479814][ T5831] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.512892][ T5831] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 246.527984][ T5831] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 246.580233][ T5831] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.607435][ T5831] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.643539][ T5831] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.707086][ T5831] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 246.726935][ T5831] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 246.744659][ T5831] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.773203][ T5831] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.807348][ T5831] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.843637][ T5831] usb 6-1: string descriptor 0 read error: -22 [ 246.859890][ T5831] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 246.882878][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.910359][ T5831] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 247.123392][ T5831] usb 6-1: USB disconnect, device number 7 [ 247.955723][T14062] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 14062 comm: syz.5.3689) [ 247.971568][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 247.971581][ T30] audit: type=1800 audit(1742691959.015:1322): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3689" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=41900 res=0 errno=0 [ 248.225521][ T30] audit: type=1400 audit(1742691959.265:1323): avc: denied { create } for pid=14079 comm="syz.0.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.252790][ T30] audit: type=1400 audit(1742691959.265:1324): avc: denied { connect } for pid=14079 comm="syz.0.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.277479][ T30] audit: type=1400 audit(1742691959.265:1325): avc: denied { bind } for pid=14079 comm="syz.0.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.309311][ T5901] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 248.345159][ T30] audit: type=1400 audit(1742691959.265:1326): avc: denied { write } for pid=14079 comm="syz.0.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.374924][ T30] audit: type=1400 audit(1742691959.415:1327): avc: denied { listen } for pid=14087 comm="syz.0.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.486025][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 248.491424][ T30] audit: type=1326 audit(1742691959.525:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.4.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4758d169 code=0x7fc00000 [ 248.547089][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.577605][ T5901] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.599244][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.608588][ T5901] usb 3-1: config 0 descriptor?? [ 248.626102][ T30] audit: type=1400 audit(1742691959.665:1329): avc: denied { write } for pid=14097 comm="syz.4.3706" name="fd" dev="proc" ino=41971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 248.656088][T14100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.700046][ T30] audit: type=1400 audit(1742691959.695:1330): avc: denied { add_name } for pid=14097 comm="syz.4.3706" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 248.720216][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.733728][ T30] audit: type=1400 audit(1742691959.695:1331): avc: denied { create } for pid=14097 comm="syz.4.3706" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 248.753780][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.043456][ T5901] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 249.091768][ T5901] usb 3-1: USB disconnect, device number 28 [ 249.182405][ T5817] Bluetooth: hci0: sending frame failed (-49) [ 249.190857][ T5824] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 249.202227][T14130] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 249.388785][T14143] netlink: 45 bytes leftover after parsing attributes in process `syz.5.3727'. [ 249.427566][T14145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3728'. [ 249.606914][T14151] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 249.617585][T14151] team0: Port device batadv1 added [ 249.661822][T14155] delete_channel: no stack [ 249.668590][T14154] delete_channel: no stack [ 249.740760][ T5869] kernel read not supported for file /dsp1 (pid: 5869 comm: kworker/0:5) [ 249.959572][ T5831] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 249.990128][ T5870] kernel read not supported for file /dsp1 (pid: 5870 comm: kworker/1:3) [ 250.121476][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 250.133370][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.145763][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 250.169588][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 250.180850][ T5831] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 250.199002][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.210634][ T5831] usb 3-1: config 0 descriptor?? [ 250.216233][T14159] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.237179][ T5831] hub 3-1:0.0: USB hub found [ 250.438305][T14192] mkiss: ax0: crc mode is auto. [ 250.439333][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3750'. [ 250.447842][ T5831] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 250.715668][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'. [ 250.899901][ T5831] hid-generic 0003:046D:C314.0034: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0 [ 251.041082][T14223] netlink: 'syz.5.3764': attribute type 5 has an invalid length. [ 251.159941][ T5831] usb 3-1: USB disconnect, device number 29 [ 251.560306][T14250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3774'. [ 251.652825][T14252] random: crng reseeded on system resumption [ 251.939801][T14241] syz.5.3773 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 252.134452][T14274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3785'. [ 252.531012][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3799'. [ 252.637915][T14312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3803'. [ 252.924289][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3812'. [ 252.949227][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3812'. [ 252.958263][T14331] netlink: 'syz.5.3812': attribute type 20 has an invalid length. [ 253.126552][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 253.126569][ T30] audit: type=1400 audit(1742691964.165:1361): avc: denied { write } for pid=14341 comm="syz.4.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.154177][T14342] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3817'. [ 253.216840][ T30] audit: type=1400 audit(1742691964.165:1362): avc: denied { nlmsg_write } for pid=14341 comm="syz.4.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.237537][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.309790][T14346] netlink: 19 bytes leftover after parsing attributes in process `syz.6.3819'. [ 253.369945][ T30] audit: type=1400 audit(1742691964.405:1363): avc: denied { create } for pid=14348 comm="syz.4.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 253.416473][ T30] audit: type=1400 audit(1742691964.445:1364): avc: denied { ioctl } for pid=14349 comm="syz.5.3820" path="socket:[44164]" dev="sockfs" ino=44164 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.558102][ T30] audit: type=1400 audit(1742691964.445:1365): avc: denied { write } for pid=14348 comm="syz.4.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 253.624854][ T30] audit: type=1400 audit(1742691964.655:1366): avc: denied { nlmsg_write } for pid=14358 comm="syz.0.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 253.939835][ T30] audit: type=1400 audit(1742691964.965:1367): avc: denied { read } for pid=14376 comm="syz.6.3833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.087172][ T30] audit: type=1400 audit(1742691965.125:1368): avc: denied { write } for pid=14390 comm="syz.6.3839" path="socket:[43678]" dev="sockfs" ino=43678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.224405][ T30] audit: type=1400 audit(1742691965.265:1369): avc: denied { ioctl } for pid=14398 comm="syz.0.3843" path="socket:[43691]" dev="sockfs" ino=43691 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.409290][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 254.447518][ T30] audit: type=1400 audit(1742691965.485:1370): avc: denied { write } for pid=14411 comm="syz.4.3849" name="file0" dev="tmpfs" ino=3847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 254.470055][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.561826][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.573684][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.594764][ T10] usb 7-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 254.604533][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.637140][ T10] usb 7-1: config 0 descriptor?? [ 254.746181][T14433] input: syz1 as /devices/virtual/input/input41 [ 255.071902][ T10] hid-led 0003:1D34:0004.0035: unknown main item tag 0x0 [ 255.286808][ T10] hid-led 0003:1D34:0004.0035: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.6-1/input0 [ 255.311791][ T10] hid-led 0003:1D34:0004.0035: Dream Cheeky Webmail Notifier initialized [ 255.341494][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.354730][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.489081][ T10] usb 7-1: USB disconnect, device number 12 [ 255.579519][ T5901] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 255.752682][ T5901] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 255.761863][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.770471][ T5901] usb 3-1: Product: syz [ 255.774719][ T5901] usb 3-1: Manufacturer: syz [ 255.779349][ T5901] usb 3-1: SerialNumber: syz [ 255.786191][ T5901] usb 3-1: config 0 descriptor?? [ 255.793168][ T5901] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 030 [ 255.817391][T14474] sctp: [Deprecated]: syz.4.3878 (pid 14474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.817391][T14474] Use struct sctp_sack_info instead [ 255.951381][T14478] Invalid logical block size (2047) [ 256.053327][ T5831] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 256.234125][ T5831] usb 6-1: unable to get BOS descriptor or descriptor too short [ 256.251771][ T5831] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 256.259392][ T5831] usb 6-1: can't read configurations, error -71 [ 256.404364][ T5901] i2c i2c-1: failure reading functionality [ 256.414401][ T5901] i2c i2c-1: connected i2c-tiny-usb device [ 256.430346][ T5901] usb 3-1: USB disconnect, device number 30 [ 256.739346][ T5870] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 256.910007][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 256.945763][ T5870] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 256.953958][T14516] SELinux: failed to load policy [ 257.015249][ T5870] usb 1-1: config 0 has no interface number 0 [ 257.046216][ T5870] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 257.056316][T14520] tipc: Enabling not permitted [ 257.065521][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.078725][T14520] tipc: Enabling of bearer rejected, failed to enable media [ 257.088782][ T5870] usb 1-1: Product: syz [ 257.109075][ T5870] usb 1-1: Manufacturer: syz [ 257.121762][ T5870] usb 1-1: SerialNumber: syz [ 257.137929][ T5870] usb 1-1: config 0 descriptor?? [ 257.154908][ T5870] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 257.368404][ T5870] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 257.389682][ T5870] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 257.458935][T14545] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3909'. [ 257.569269][ T5901] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 257.752186][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.763479][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.783420][ T5901] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.797286][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.815185][ T5901] usb 3-1: SerialNumber: syz [ 257.818781][ T5831] usb 1-1: USB disconnect, device number 34 [ 257.820351][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 257.834448][ T5831] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 257.863063][ T5831] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 257.890332][ T5831] quatech2 1-1:0.51: device disconnected [ 258.030699][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3919'. [ 258.078526][ T5901] usb 3-1: 0:2 : does not exist [ 258.105111][ T5901] usb 3-1: USB disconnect, device number 31 [ 258.457973][T14579] misc userio: Can't change port type on an already running userio instance [ 258.667625][T14587] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 258.852159][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 258.852174][ T30] audit: type=1400 audit(1742691969.895:1394): avc: denied { create } for pid=14598 comm="syz.5.3932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 258.945489][T14601] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 258.947407][ T30] audit: type=1400 audit(1742691969.925:1395): avc: denied { listen } for pid=14598 comm="syz.5.3932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 258.992969][ T30] audit: type=1400 audit(1742691969.925:1396): avc: denied { accept } for pid=14598 comm="syz.5.3932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 259.504437][T14614] input: syz1 as /devices/virtual/input/input45 [ 260.151295][ T5870] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 260.300813][ T5831] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 260.344100][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 260.355662][ T5870] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.364392][ T5870] usb 3-1: config 0 has no interface number 0 [ 260.376866][ T5870] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.407088][ T5870] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.417846][ T5870] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 260.427179][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.442547][ T5870] usb 3-1: config 0 descriptor?? [ 260.482253][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.511989][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.536415][ T5831] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 260.565150][ T5831] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 260.600465][ T5831] usb 6-1: Manufacturer: syz [ 260.622978][ T5831] usb 6-1: config 0 descriptor?? [ 260.776920][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3958'. [ 261.062345][ T5870] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0036/input/input46 [ 261.075282][ T5831] cougar 0003:060B:700A.0037: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 261.151563][ T5870] uclogic 0003:28BD:0094.0036: input,hidraw1: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 261.283628][ T975] usb 3-1: USB disconnect, device number 32 [ 261.362331][ T5831] usb 6-1: USB disconnect, device number 10 [ 261.676188][T14679] net_ratelimit: 48 callbacks suppressed [ 261.676204][T14679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.880486][T14689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3972'. [ 261.994271][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3975'. [ 262.168680][T14704] openvswitch: netlink: IP tunnel TTL not specified. [ 262.302863][T14714] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 262.477939][ T30] audit: type=1400 audit(1742691973.505:1397): avc: denied { execute } for pid=14718 comm="syz.5.3988" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=45607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 262.502986][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.523540][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3991'. [ 262.635273][ T30] audit: type=1400 audit(1742691973.675:1398): avc: denied { connect } for pid=14727 comm="syz.0.3993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.655345][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.673828][ T30] audit: type=1400 audit(1742691973.715:1399): avc: denied { shutdown } for pid=14727 comm="syz.0.3993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.800162][ T30] audit: type=1400 audit(1742691973.835:1400): avc: denied { mount } for pid=14745 comm="syz.6.4000" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 262.823482][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.869755][ T5831] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 263.020116][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 263.034337][ T5831] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 263.046715][ T5831] usb 6-1: config 2 has no interface number 0 [ 263.057045][ T5831] usb 6-1: config 2 interface 31 has no altsetting 0 [ 263.071401][ T5831] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 263.085024][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.096773][ T5831] usb 6-1: Product: syz [ 263.102463][ T5831] usb 6-1: Manufacturer: syz [ 263.107258][ T5831] usb 6-1: SerialNumber: syz [ 263.215109][ T30] audit: type=1400 audit(1742691974.255:1401): avc: denied { ioctl } for pid=14757 comm="syz.6.4006" path="socket:[44950]" dev="sockfs" ino=44950 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 263.239825][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.310534][T14763] netlink: 'syz.6.4008': attribute type 25 has an invalid length. [ 263.313992][ T30] audit: type=1400 audit(1742691974.305:1402): avc: denied { create } for pid=14759 comm="syz.4.4007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 263.318357][T14763] netlink: 184 bytes leftover after parsing attributes in process `syz.6.4008'. [ 263.337832][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.364165][ T30] audit: type=1400 audit(1742691974.315:1403): avc: denied { setopt } for pid=14759 comm="syz.4.4007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 263.546481][T14773] input: syz0 as /devices/virtual/input/input47 [ 263.758953][ T5831] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 263.776465][ T5831] usb 6-1: USB disconnect, device number 11 [ 264.255632][T14801] SELinux: failed to load policy [ 264.444622][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4030'. [ 264.484784][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 264.484799][ T30] audit: type=1400 audit(1742691975.525:1418): avc: denied { write } for pid=14814 comm="syz.2.4032" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 264.730660][T14826] overlayfs: conflicting options: userxattr,verity=on [ 264.806031][ T30] audit: type=1400 audit(1742691975.835:1419): avc: denied { write } for pid=14829 comm="syz.2.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 264.890286][ T30] audit: type=1400 audit(1742691975.895:1420): avc: denied { remount } for pid=14834 comm="syz.0.4041" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 264.944139][T14841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.957135][T14842] netem: incorrect ge model size [ 264.964813][T14842] netem: change failed [ 264.972643][ T10] kernel write not supported for file /snd/seq (pid: 10 comm: kworker/0:1) [ 265.148939][ T30] audit: type=1400 audit(1742691976.185:1421): avc: denied { mount } for pid=14848 comm="syz.4.4049" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 265.195551][T14852] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 265.225591][ T30] audit: type=1400 audit(1742691976.215:1422): avc: denied { unmount } for pid=14848 comm="syz.4.4049" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 265.328595][ T30] audit: type=1400 audit(1742691976.365:1423): avc: denied { create } for pid=14862 comm="syz.4.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 265.381845][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4054'. [ 265.382833][ T30] audit: type=1400 audit(1742691976.395:1424): avc: denied { write } for pid=14862 comm="syz.4.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 265.418709][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4054'. [ 265.419463][T14866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4056'. [ 265.675534][ T30] audit: type=1400 audit(1742691976.715:1425): avc: denied { read } for pid=14881 comm="syz.4.4064" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 265.707156][ T30] audit: type=1400 audit(1742691976.715:1426): avc: denied { open } for pid=14881 comm="syz.4.4064" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 265.799340][ T975] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 265.950111][ T975] usb 7-1: Using ep0 maxpacket: 16 [ 265.960528][ T975] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 265.974951][ T975] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.986226][ T30] audit: type=1400 audit(1742691977.025:1427): avc: denied { map } for pid=14896 comm="syz.4.4071" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 266.014843][ T975] usb 7-1: config 0 has no interface number 0 [ 266.023759][ T975] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 266.038396][ T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.046895][ T975] usb 7-1: Product: syz [ 266.057366][ T975] usb 7-1: Manufacturer: syz [ 266.079893][ T975] usb 7-1: SerialNumber: syz [ 266.085093][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4073'. [ 266.086351][ T975] usb 7-1: config 0 descriptor?? [ 266.095842][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4073'. [ 266.120624][T14902] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.130104][T14902] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.138800][T14902] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.148353][T14902] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.381416][ T10] usb 7-1: USB disconnect, device number 13 [ 267.030569][T14957] CIFS mount error: No usable UNC path provided in device string! [ 267.030569][T14957] [ 267.043338][T14957] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 267.130465][T14960] wireguard0: entered promiscuous mode [ 267.135988][T14960] wireguard0: entered allmulticast mode [ 267.465681][T14977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.650471][ T5831] kernel read not supported for file /dsp1 (pid: 5831 comm: kworker/0:3) [ 267.759787][ T975] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 267.946100][ T975] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 267.969602][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.016317][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.041224][ T5831] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 268.049284][ T975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 268.076349][ T975] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 268.085894][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.103674][ T975] usb 1-1: config 0 descriptor?? [ 268.160988][ T10] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 268.187399][T15001] netlink: 'syz.5.4121': attribute type 13 has an invalid length. [ 268.204132][ T5831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.217579][ T5831] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 268.231550][ T5831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 268.243760][T15001] gretap0: refused to change device tx_queue_len [ 268.251507][T15001] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 268.267690][ T5831] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 268.277429][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.288462][T14989] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.297031][ T5831] hub 5-1:1.0: bad descriptor, ignoring hub [ 268.303784][ T5831] hub 5-1:1.0: probe with driver hub failed with error -5 [ 268.319539][ T5831] cdc_wdm 5-1:1.0: skipping garbage [ 268.324750][ T5831] cdc_wdm 5-1:1.0: skipping garbage [ 268.342510][ T10] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 268.354380][ T10] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.365188][ T5831] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 268.377386][ T5831] cdc_wdm 5-1:1.0: Unknown control protocol [ 268.383916][ T10] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x8B has invalid wMaxPacketSize 0 [ 268.398089][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 268.421720][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 268.434126][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.450113][ T10] usb 3-1: config 0 descriptor?? [ 268.471500][ T5824] Bluetooth: hci0: urb ffff888035883c00 submission failed (90) [ 268.541083][ T975] hid-picolcd 0003:04D8:C002.0038: unknown main item tag 0x0 [ 268.558897][ T975] hid-picolcd 0003:04D8:C002.0038: unknown main item tag 0x0 [ 268.574362][ T975] hid-picolcd 0003:04D8:C002.0038: unknown main item tag 0x0 [ 268.583242][ T975] hid-picolcd 0003:04D8:C002.0038: unknown main item tag 0x0 [ 268.597720][ T975] hid-picolcd 0003:04D8:C002.0038: unknown main item tag 0x0 [ 268.630292][ T10] usb 5-1: USB disconnect, device number 36 [ 268.659583][ T975] hid-picolcd 0003:04D8:C002.0038: No report with id 0x11 found [ 268.685691][ T10] usb 3-1: USB disconnect, device number 33 [ 268.758570][ T5831] usb 1-1: USB disconnect, device number 35 [ 269.420246][ T975] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 269.592546][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.616483][ T975] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 269.633539][ T975] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 269.654838][ T975] usb 5-1: Manufacturer: syz [ 269.666612][ T975] usb 5-1: SerialNumber: syz [ 269.686221][ T975] usb 5-1: config 0 descriptor?? [ 269.937945][ T975] usb 5-1: USB disconnect, device number 37 [ 270.040418][T15075] netlink: 'syz.0.4154': attribute type 1 has an invalid length. [ 270.115985][T15078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.144526][T15078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.177746][T15078] bond0 (unregistering): (slave bond1): Releasing backup interface [ 270.205500][T15078] bond0 (unregistering): Released all slaves [ 270.232543][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4160'. [ 270.458500][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 270.458514][ T30] audit: type=1400 audit(1742691981.495:1444): avc: denied { map } for pid=15097 comm="syz.5.4166" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 270.488929][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.887045][ T30] audit: type=1326 audit(1742691981.925:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15111 comm="syz.4.4172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f4758d169 code=0x0 [ 271.080873][T15122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.137272][ T30] audit: type=1400 audit(1742691982.175:1446): avc: denied { write } for pid=15125 comm="syz.5.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 271.218234][ T30] audit: type=1400 audit(1742691982.255:1447): avc: denied { create } for pid=15127 comm="syz.0.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 271.349852][ T5831] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 271.513569][ T5831] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.551499][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.581320][ T5831] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.599980][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.613987][ T5831] usb 3-1: SerialNumber: syz [ 271.855742][ T5831] usb 3-1: 0:2 : does not exist [ 271.903032][ T5831] usb 3-1: USB disconnect, device number 34 [ 271.926830][ T30] audit: type=1400 audit(1742691982.965:1448): avc: denied { getopt } for pid=15155 comm="syz.6.4192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.056822][ T30] audit: type=1400 audit(1742691983.095:1449): avc: denied { getopt } for pid=15165 comm="syz.0.4197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.192414][ T30] audit: type=1400 audit(1742691983.225:1450): avc: denied { getopt } for pid=15175 comm="syz.4.4202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 272.219777][ T975] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 272.402437][ T975] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 272.416456][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.440972][ T975] usb 6-1: config 0 descriptor?? [ 272.451499][ T975] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 272.542966][ T30] audit: type=1400 audit(1742691983.585:1451): avc: denied { ioctl } for pid=15193 comm="syz.2.4209" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47764 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 272.769247][ T5831] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 272.939789][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 272.951983][ T5831] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 272.967246][ T5831] usb 5-1: config 0 has no interface number 0 [ 272.978520][ T5831] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 272.995908][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.004757][ T5831] usb 5-1: Product: syz [ 273.008990][ T5831] usb 5-1: Manufacturer: syz [ 273.014060][ T5831] usb 5-1: SerialNumber: syz [ 273.021413][ T5831] usb 5-1: config 0 descriptor?? [ 273.028573][ T5831] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 273.082835][ T5870] kernel read not supported for file /dsp1 (pid: 5870 comm: kworker/1:3) [ 273.213065][ T30] audit: type=1400 audit(1742691984.255:1452): avc: denied { mount } for pid=15217 comm="syz.2.4222" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 273.237705][ T5831] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 273.271023][ T5831] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 273.283205][ T975] usb 6-1: USB disconnect, device number 12 [ 273.293320][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'. [ 273.567161][ T30] audit: type=1400 audit(1742691984.605:1453): avc: denied { listen } for pid=15235 comm="syz.6.4230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.648640][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 273.659910][ T5831] usb 5-1: USB disconnect, device number 38 [ 273.676755][ T5831] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 273.697383][ T5831] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 273.721606][ T5831] quatech2 5-1:0.51: device disconnected [ 273.856372][T15250] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 273.864940][T15250] syzkaller1: linktype set to 780 [ 274.170043][ T5831] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 274.179783][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 274.187463][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 274.339376][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 274.346865][ T9] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 274.356777][ T10] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 274.371302][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.383850][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.392637][ T9] usb 6-1: config 0 has no interface number 0 [ 274.392757][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4250'. [ 274.401736][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.421205][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.432725][ T10] usb 3-1: config 0 descriptor?? [ 274.438439][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 274.448486][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.458801][ T9] usb 6-1: Product: syz [ 274.463609][ T9] usb 6-1: Manufacturer: syz [ 274.468218][ T9] usb 6-1: SerialNumber: syz [ 274.473460][ T5831] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 274.474871][T15285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4252'. [ 274.485025][ T5831] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.507035][ T9] usb 6-1: config 0 descriptor?? [ 274.514585][ T5831] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 274.524298][T15285] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4252'. [ 274.538936][T15285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4252'. [ 274.557471][ T5831] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 274.566669][ T5831] usb 1-1: Manufacturer: syz [ 274.579859][T15285] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4252'. [ 274.600564][ T5831] usb 1-1: config 0 descriptor?? [ 274.686256][ T10] kaweth 3-1:0.0: Firmware present in device. [ 274.872517][ T10] kaweth 3-1:0.0: Statistics collection: 0 [ 274.886687][ T10] kaweth 3-1:0.0: Multicast filter limit: 0 [ 274.894821][ T10] kaweth 3-1:0.0: MTU: 0 [ 274.900456][ T5831] rc_core: IR keymap rc-hauppauge not found [ 274.906364][ T5831] Registered IR keymap rc-empty [ 274.918757][ T10] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 274.926218][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 274.953863][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 274.990698][ T5831] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 275.011716][ T5831] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input48 [ 275.031226][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 275.050396][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 275.069808][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 275.077252][ T10] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 275.096771][T15310] netlink: 'syz.6.4263': attribute type 1 has an invalid length. [ 275.099710][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 275.119975][ T10] usb 3-1: USB disconnect, device number 35 [ 275.142580][ T9] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 275.152033][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 275.162843][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 275.173850][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 275.189754][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 275.205347][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 275.214667][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 275.223261][ T9] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 275.238159][ T9] usb 6-1: USB disconnect, device number 13 [ 275.245785][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 275.260938][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 275.271372][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 275.279966][ T9] keyspan 6-1:0.133: device disconnected [ 275.291203][ T5831] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 275.331497][ T5831] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 275.342919][ T5831] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 275.355847][ T5831] usb 1-1: USB disconnect, device number 36 [ 275.649829][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4276'. [ 275.969743][ T5831] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 275.990220][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 276.141763][ T5831] usb 7-1: config 0 has no interfaces? [ 276.145552][T15368] sit1: entered allmulticast mode [ 276.152428][ T5831] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 276.166258][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.177015][ T5831] usb 7-1: config 0 descriptor?? [ 276.182034][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 276.191569][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.210849][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 276.221780][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.244609][ T10] usb 6-1: config 0 descriptor?? [ 276.296329][T15378] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 276.361348][T15376] Falling back ldisc for ttyS3. [ 276.395292][ T5831] usb 7-1: USB disconnect, device number 14 [ 276.659851][ T5870] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 276.672562][ T10] mcp2221 0003:04D8:00DD.0039: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 276.809812][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 276.816279][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.826501][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.836965][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=ec01, bcdDevice= 0.2e [ 276.846676][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.854832][ T5870] usb 5-1: Product: syz [ 276.859042][ T5870] usb 5-1: Manufacturer: syz [ 276.863720][ T5870] usb 5-1: SerialNumber: syz [ 277.094245][ T10] usb 6-1: USB disconnect, device number 14 [ 277.291561][ T5870] usb 5-1: 0:2 : does not exist [ 277.559814][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 277.695352][ T5870] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 277.730527][ T5870] usb 5-1: USB disconnect, device number 39 [ 277.754603][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 277.768330][ T10] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 277.791252][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 277.816166][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 277.816180][ T30] audit: type=1400 audit(1742691988.855:1468): avc: denied { write } for pid=15411 comm="syz.2.4311" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 277.859730][ T10] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 277.881108][ T10] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 277.909990][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 277.921185][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 277.935623][ T10] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 277.954369][ T10] usb 7-1: Product: syz [ 277.958619][ T10] usb 7-1: Manufacturer: syz [ 277.980192][ T10] usb 7-1: SerialNumber: syz [ 277.993796][ T10] usb 7-1: config 0 descriptor?? [ 278.006421][ T10] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 278.012602][T15388] syz.0.4300 (15388): drop_caches: 2 [ 278.019938][ T10] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 278.226264][ T30] audit: type=1400 audit(1742691989.265:1469): avc: denied { getopt } for pid=15425 comm="syz.2.4317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 278.258157][ T10] usb 7-1: USB disconnect, device number 15 [ 278.278844][ T10] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 278.530281][ T9] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 278.681019][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 278.696995][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 278.716723][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 278.727828][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.170366][ T9] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 279.178255][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input49 [ 279.216963][ T9] input: failed to attach handler kbd to device input49, error: -5 [ 279.248694][ T9] usb 1-1: USB disconnect, device number 37 [ 279.296005][T15478] input: syz0 as /devices/virtual/input/input50 [ 279.328265][ T30] audit: type=1400 audit(1742691990.365:1470): avc: denied { map } for pid=15479 comm="syz.4.4342" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 279.363564][T15482] Bluetooth: hci1: Opcode 0x080f failed: -22 [ 279.399979][ T30] audit: type=1400 audit(1742691990.445:1471): avc: denied { write } for pid=15483 comm="syz.4.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 279.523413][T15491] macvtap1: entered allmulticast mode [ 279.528840][T15491] batadv0: entered allmulticast mode [ 279.536810][T15491] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 279.545721][T15491] team0: Device macvtap1 is up. Set it down before adding it as a team port [ 279.565230][T15491] batadv0: left allmulticast mode [ 280.286293][ T30] audit: type=1400 audit(1742691991.325:1472): avc: denied { mount } for pid=15519 comm="syz.6.4360" name="/" dev="ocfs2_dlmfs" ino=49488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 280.396097][ T30] audit: type=1400 audit(1742691991.435:1473): avc: denied { setopt } for pid=15522 comm="syz.6.4362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 280.653016][ T30] audit: type=1400 audit(1742691991.695:1474): avc: denied { watch_mount } for pid=15530 comm="syz.2.4366" path="/888" dev="tmpfs" ino=4507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 280.822764][T15537] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.865350][T15540] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4370'. [ 280.989955][ T30] audit: type=1400 audit(1742691992.025:1475): avc: denied { write } for pid=15542 comm="syz.2.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.024322][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4374'. [ 281.055523][T15547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.095820][T15547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.123758][T15547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.144863][T15547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.419837][ T5824] Bluetooth: hci1: command tx timeout [ 281.628978][T15566] input: syz0 as /devices/virtual/input/input51 [ 281.905539][ T30] audit: type=1400 audit(1742691992.945:1476): avc: denied { ioctl } for pid=15576 comm="syz.2.4387" path="socket:[48828]" dev="sockfs" ino=48828 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 282.009861][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 282.103627][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4391'. [ 282.175613][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 282.193743][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.207351][ T30] audit: type=1400 audit(1742691993.255:1477): avc: denied { write } for pid=15590 comm="syz.5.4393" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 282.223726][ T10] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 282.270484][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.323280][ T10] usb 1-1: config 0 descriptor?? [ 282.747311][ T10] uclogic 0003:5543:0003.003A: unknown main item tag 0x0 [ 282.755343][ T10] uclogic 0003:5543:0003.003A: unknown main item tag 0x0 [ 282.770985][ T10] uclogic 0003:5543:0003.003A: unknown main item tag 0x0 [ 282.778613][ T10] uclogic 0003:5543:0003.003A: unknown main item tag 0x0 [ 282.787758][ T10] uclogic 0003:5543:0003.003A: unknown main item tag 0x0 [ 282.796296][ T10] uclogic 0003:5543:0003.003A: No inputs registered, leaving [ 282.805080][ T10] uclogic 0003:5543:0003.003A: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.0-1/input0 [ 282.825573][ T30] audit: type=1326 audit(1742691993.865:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15580 comm="syz.6.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd3f8d169 code=0x7fc00000 [ 282.924941][T15609] program syz.6.4401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.991288][ T5870] usb 1-1: USB disconnect, device number 38 [ 284.194080][ T30] audit: type=1400 audit(1742691995.235:1479): avc: denied { read } for pid=15664 comm="syz.4.4427" path="socket:[48967]" dev="sockfs" ino=48967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.839396][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 284.961684][ T30] audit: type=1400 audit(1742691996.005:1480): avc: denied { connect } for pid=15699 comm="syz.5.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.020089][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 285.035369][ T30] audit: type=1400 audit(1742691996.005:1481): avc: denied { ioctl } for pid=15699 comm="syz.5.4443" path="socket:[49025]" dev="sockfs" ino=49025 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.060251][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.078100][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.115812][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.183476][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 285.208534][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 285.227360][ T9] usb 7-1: Manufacturer: syz [ 285.248252][ T9] usb 7-1: config 0 descriptor?? [ 285.490800][ T5870] usb 7-1: USB disconnect, device number 16 [ 285.703905][ T30] audit: type=1400 audit(1742691996.745:1482): avc: denied { create } for pid=15725 comm="syz.5.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 285.756451][ T30] audit: type=1400 audit(1742691996.745:1483): avc: denied { write } for pid=15725 comm="syz.5.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 285.776019][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.879307][ T5901] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 285.897497][T15734] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4459'. [ 286.030545][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 286.039407][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 286.049300][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 150, changing to 7 [ 286.069165][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 42231, setting to 1024 [ 286.110812][ T5901] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 286.136958][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.169277][ T5901] usb 3-1: Product: syz [ 286.173499][ T5901] usb 3-1: Manufacturer: syz [ 286.178105][ T5901] usb 3-1: SerialNumber: syz [ 286.194017][ T5901] usb 3-1: config 0 descriptor?? [ 286.199660][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 286.208879][ T5901] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 286.219020][ T9] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 286.235221][ T5901] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 286.237356][ T9] usb 6-1: config 0 has no interface number 0 [ 286.277085][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 286.287087][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.301679][ T9] usb 6-1: Product: syz [ 286.306454][ T9] usb 6-1: Manufacturer: syz [ 286.323052][ T9] usb 6-1: SerialNumber: syz [ 286.335859][ T9] usb 6-1: config 0 descriptor?? [ 286.349944][ T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 286.433184][T15759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4472'. [ 286.473767][ T5901] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 286.555116][ T5901] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 286.564427][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 286.584347][ T5901] em28xx 3-1:0.0: board has no eeprom [ 286.624901][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 286.668025][ T5901] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 286.694895][ T5901] em28xx 3-1:0.0: dvb set to isoc mode. [ 286.711663][ T975] em28xx 3-1:0.0: Binding DVB extension [ 286.733899][ T5901] usb 3-1: USB disconnect, device number 36 [ 286.762872][ T5901] em28xx 3-1:0.0: Disconnecting em28xx [ 286.827914][ T975] em28xx 3-1:0.0: Registering input extension [ 286.831794][T15728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.850399][T15728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.850643][ T5901] em28xx 3-1:0.0: Closing input extension [ 286.914321][ T5901] em28xx 3-1:0.0: Freeing device [ 287.096123][ T30] audit: type=1400 audit(1742691998.135:1484): avc: denied { read write } for pid=15782 comm="syz.2.4482" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 287.096400][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 287.129930][ T9] usb 6-1: USB disconnect, device number 15 [ 287.138869][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 287.154598][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 287.167356][ T30] audit: type=1400 audit(1742691998.135:1485): avc: denied { open } for pid=15782 comm="syz.2.4482" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 287.170417][ T9] quatech2 6-1:0.51: device disconnected [ 287.740433][T15810] kvm: kvm [15809]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x0 [ 287.965812][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4501'. [ 287.988910][ T30] audit: type=1400 audit(1742691999.025:1486): avc: denied { getopt } for pid=15825 comm="syz.4.4499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 288.008394][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.109790][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 288.262198][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.284667][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.315054][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 288.339796][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 288.360587][ T9] usb 7-1: SerialNumber: syz [ 288.581431][ T9] usb 7-1: 0:2 : does not exist [ 288.606783][ T9] usb 7-1: USB disconnect, device number 17 [ 289.042351][ T30] audit: type=1326 audit(1742692000.085:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.4.4518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f4758d169 code=0x0 [ 289.108053][T15865] overlay: filesystem on ./file0 is read-only [ 289.270126][T15871] netlink: 'syz.6.4523': attribute type 178 has an invalid length. [ 289.449209][ T30] audit: type=1804 audit(1742692000.485:1488): pid=15881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.4527" name="/" dev="pidfs" ino=15881 res=1 errno=0 [ 289.454370][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4526'. [ 289.809229][ T975] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 290.013229][ T975] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 290.029175][ T975] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 290.076399][ T975] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.099460][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 290.107528][ T975] usb 1-1: SerialNumber: syz [ 290.123147][T15885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.199874][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 290.352590][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.370224][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 290.376684][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 290.408052][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.424523][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.435777][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.455270][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.475292][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.485014][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.502365][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.620451][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.724477][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 290.745254][ T9] usbtmc 5-1:16.0: can't read capabilities [ 290.769235][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.787369][T15885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.912150][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.939199][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.941910][ T5831] usb 5-1: USB disconnect, device number 40 [ 290.948260][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.960956][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.974835][ T5817] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 290.982755][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.996425][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.006899][ T57] bridge_slave_1: left allmulticast mode [ 291.012759][ T57] bridge_slave_1: left promiscuous mode [ 291.018650][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.020080][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.035967][ T975] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 291.044810][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.046808][ T975] usb 1-1: USB disconnect, device number 39 [ 291.061639][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.070433][ T57] bridge_slave_0: left allmulticast mode [ 291.076194][ T57] bridge_slave_0: left promiscuous mode [ 291.090095][ T5824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.097759][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.107560][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.119165][ T30] audit: type=1400 audit(1742692002.155:1489): avc: denied { mounton } for pid=15911 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 291.140685][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.205513][ T30] audit: type=1400 audit(1742692002.205:1490): avc: denied { listen } for pid=15913 comm="syz.6.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 291.224983][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.300074][ T30] audit: type=1400 audit(1742692002.205:1491): avc: denied { read } for pid=15913 comm="syz.6.4542" path="socket:[51628]" dev="sockfs" ino=51628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 291.565470][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.588749][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.613861][ T57] bond0 (unregistering): Released all slaves [ 291.762126][ T30] audit: type=1400 audit(1742692002.805:1492): avc: denied { setopt } for pid=15931 comm="syz.6.4550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 291.824943][T15937] @: renamed from vlan0 [ 291.865501][ T30] audit: type=1400 audit(1742692002.905:1493): avc: denied { map } for pid=15936 comm="syz.2.4551" path="/proc/1957/net/vlan/vlan0" dev="proc" ino=4026533807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 291.909089][ T30] audit: type=1400 audit(1742692002.905:1494): avc: denied { execute } for pid=15936 comm="syz.2.4551" path="/proc/1957/net/vlan/vlan0" dev="proc" ino=4026533807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 291.934596][ T30] audit: type=1400 audit(1742692002.925:1495): avc: denied { setopt } for pid=15938 comm="syz.0.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 292.016440][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4554'. [ 292.141956][T15911] chnl_net:caif_netlink_parms(): no params data found [ 292.152772][T15951] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15951 comm=syz.6.4558 [ 292.260755][ T5831] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 292.381673][T15911] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.398497][T15911] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.412652][T15911] bridge_slave_0: entered allmulticast mode [ 292.420983][T15911] bridge_slave_0: entered promiscuous mode [ 292.421604][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.456893][ T57] hsr_slave_0: left promiscuous mode [ 292.469484][ T57] hsr_slave_1: left promiscuous mode [ 292.478411][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.479543][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.496221][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.516870][ T5831] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 292.520257][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.539917][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.543565][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.569892][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 292.583314][ T57] veth1_macvtap: left promiscuous mode [ 292.591815][ T5831] usb 3-1: config 0 descriptor?? [ 292.595565][ T57] veth0_macvtap: left promiscuous mode [ 292.606057][ T57] veth1_vlan: left promiscuous mode [ 292.619996][ T57] veth0_vlan: left promiscuous mode [ 292.729395][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 292.747422][ T9] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 292.767537][ T9] usb 7-1: config 0 has no interface number 0 [ 292.794742][ T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 292.814885][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.823663][ T9] usb 7-1: Product: syz [ 292.827929][ T9] usb 7-1: Manufacturer: syz [ 292.841022][ T9] usb 7-1: SerialNumber: syz [ 292.853668][ T9] usb 7-1: config 0 descriptor?? [ 292.866607][ T9] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 293.016919][ T5831] arvo 0003:1E7D:30D4.003B: unknown main item tag 0x0 [ 293.044423][ T5831] arvo 0003:1E7D:30D4.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 293.077772][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 293.097816][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 293.180869][ T5817] Bluetooth: hci0: command tx timeout [ 293.321858][ T57] team0 (unregistering): Port device team_slave_1 removed [ 293.362208][ T57] team0 (unregistering): Port device team_slave_0 removed [ 293.443546][ T5831] usb 3-1: USB disconnect, device number 37 [ 293.506817][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 293.515337][ T9] usb 7-1: USB disconnect, device number 18 [ 293.531015][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 293.545214][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 293.557520][ T9] quatech2 7-1:0.51: device disconnected [ 293.713138][T15911] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.722100][T15911] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.730622][T15911] bridge_slave_1: entered allmulticast mode [ 293.737097][T15911] bridge_slave_1: entered promiscuous mode [ 293.769050][T15911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.788596][T15911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.826376][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 293.826395][ T30] audit: type=1400 audit(1742692004.865:1497): avc: denied { connect } for pid=15990 comm="syz.0.4575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 293.878461][T15911] team0: Port device team_slave_0 added [ 293.886441][ T30] audit: type=1400 audit(1742692004.925:1498): avc: denied { read } for pid=15990 comm="syz.0.4575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 293.891219][T15911] team0: Port device team_slave_1 added [ 293.944632][T15911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.955759][T15911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.981657][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.031284][T15911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.071216][T15911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.078453][T15911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.119751][T15911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.188579][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4578'. [ 294.197621][T15999] nbd: socks must be embedded in a SOCK_ITEM attr [ 294.316499][T15911] hsr_slave_0: entered promiscuous mode [ 294.330703][T15911] hsr_slave_1: entered promiscuous mode [ 294.344755][T15911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.359977][T15911] Cannot create hsr debugfs directory [ 294.446752][ T30] audit: type=1400 audit(1742692005.485:1499): avc: denied { ioctl } for pid=16004 comm="syz.2.4581" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 294.640968][T15911] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 294.651819][T15911] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 294.663993][T15911] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 294.733692][T15911] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 294.803037][T16028] vcan0: entered allmulticast mode [ 294.907108][T15911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.914774][ T30] audit: type=1400 audit(1742692005.945:1500): avc: denied { read write } for pid=16032 comm="syz.0.4595" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 294.924599][T15911] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.950390][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.957479][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.957524][ T30] audit: type=1400 audit(1742692005.945:1501): avc: denied { open } for pid=16032 comm="syz.0.4595" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 294.987113][T15911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.013182][T15911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.032260][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.039372][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.194178][T15911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.261121][ T5817] Bluetooth: hci0: command tx timeout [ 295.487566][T15911] veth0_vlan: entered promiscuous mode [ 295.522605][T15911] veth1_vlan: entered promiscuous mode [ 295.554943][T15911] veth0_macvtap: entered promiscuous mode [ 295.566478][T15911] veth1_macvtap: entered promiscuous mode [ 295.594001][T15911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.613669][T15911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.640690][T15911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.658809][T15911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.700044][T15911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.724491][T15911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.752209][T15911] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.773332][T15911] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.805396][T15911] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.830710][T15911] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.963985][ T30] audit: type=1400 audit(1742692007.005:1502): avc: denied { create } for pid=16082 comm="syz.4.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 295.992935][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.012284][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.075216][ T30] audit: type=1400 audit(1742692007.035:1503): avc: denied { connect } for pid=16082 comm="syz.4.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 296.119541][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.137569][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.190790][ T30] audit: type=1400 audit(1742692007.225:1504): avc: denied { mounton } for pid=15911 comm="syz-executor" path="/root/syzkaller.8867v3/syz-tmp" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 296.282143][ T30] audit: type=1400 audit(1742692007.265:1505): avc: denied { mounton } for pid=15911 comm="syz-executor" path="/root/syzkaller.8867v3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 296.359773][ T30] audit: type=1400 audit(1742692007.265:1506): avc: denied { mounton } for pid=15911 comm="syz-executor" path="/root/syzkaller.8867v3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=53425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 296.653299][T16099] team_slave_1 (unregistering): left allmulticast mode [ 296.719922][T16099] team0: Port device team_slave_1 removed [ 296.907622][T16115] Bluetooth: MGMT ver 1.23 [ 296.984971][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4627'. [ 297.029534][ T5870] kernel read not supported for file /dsp (pid: 5870 comm: kworker/1:3) [ 297.340804][ T5817] Bluetooth: hci0: command tx timeout [ 297.974941][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4646'. [ 298.634892][T16193] xt_hashlimit: size too large, truncated to 1048576 [ 298.761513][T16199] xt_HMARK: proto mask must be zero with L3 mode [ 298.915431][ T5831] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 299.034671][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 299.034686][ T30] audit: type=1400 audit(1742692010.075:1510): avc: denied { setopt } for pid=16207 comm="syz.4.4666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 299.096535][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 299.129235][ T5831] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 299.158638][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 19501, setting to 1024 [ 299.181827][ T5831] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 299.209066][ T5831] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 299.247500][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.276457][ T5831] usb 1-1: Product: syz [ 299.291252][ T5831] usb 1-1: Manufacturer: syz [ 299.303958][ T5831] usb 1-1: SerialNumber: syz [ 299.313980][ T30] audit: type=1400 audit(1742692010.355:1511): avc: denied { ioctl } for pid=16219 comm="syz.6.4672" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 299.342889][ T5831] usb 1-1: config 0 descriptor?? [ 299.354946][T16197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 299.366309][T16197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 299.419970][ T5817] Bluetooth: hci0: command tx timeout [ 299.469763][ T975] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 299.630274][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 299.647636][ T975] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 299.650870][ T5831] rc_core: IR keymap rc-hauppauge not found [ 299.667923][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.675942][ T5831] Registered IR keymap rc-empty [ 299.676358][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.696479][ T975] usb 3-1: Product: syz [ 299.707771][T16230] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4677'. [ 299.710866][ T975] usb 3-1: Manufacturer: syz [ 299.730725][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.731529][ T975] usb 3-1: SerialNumber: syz [ 299.758142][ T5831] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 299.765667][ T975] usb 3-1: config 0 descriptor?? [ 299.803185][ T975] gspca_main: sq930x-2.14.0 probing 2770:930c [ 299.807529][ T5831] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input53 [ 299.867226][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.909804][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.930636][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.959978][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 300.010518][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 300.030127][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 300.050587][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 300.050851][ T30] audit: type=1400 audit(1742692011.095:1512): avc: denied { mounton } for pid=16241 comm="syz.6.4682" path="/409/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 300.109797][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 300.139768][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 300.168970][ T5831] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 300.205805][ T5831] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 300.210727][ T30] audit: type=1400 audit(1742692011.245:1513): avc: denied { unmount } for pid=11934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 300.253834][ T5831] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 300.271304][ T5831] usb 1-1: USB disconnect, device number 40 [ 300.390035][ T30] audit: type=1400 audit(1742692011.425:1514): avc: denied { bind } for pid=16249 comm="syz.0.4686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 300.458334][ T30] audit: type=1400 audit(1742692011.425:1515): avc: denied { name_bind } for pid=16249 comm="syz.0.4686" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 300.546431][ T30] audit: type=1400 audit(1742692011.425:1516): avc: denied { node_bind } for pid=16249 comm="syz.0.4686" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 300.568343][ T30] audit: type=1400 audit(1742692011.455:1517): avc: denied { connect } for pid=16249 comm="syz.0.4686" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 300.606429][ T30] audit: type=1400 audit(1742692011.455:1518): avc: denied { name_connect } for pid=16249 comm="syz.0.4686" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 300.627632][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.648485][ T975] gspca_sq930x: ucbus_write failed -71 [ 300.837868][T16279] program syz.6.4698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.847779][ T30] audit: type=1400 audit(1742692011.875:1519): avc: denied { getopt } for pid=16273 comm="syz.0.4696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.869771][ T975] gspca_sq930x: Sensor ov9630 not yet treated [ 300.889239][ T975] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 300.907320][ T975] usb 3-1: USB disconnect, device number 38 [ 301.362457][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 301.530254][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 301.546842][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 301.557188][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 301.593477][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 301.610283][T16321] netlink: 'syz.2.4718': attribute type 3 has an invalid length. [ 301.634094][ T9] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 301.649180][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.657182][ T9] usb 7-1: Product: syz [ 301.671542][ T9] usb 7-1: Manufacturer: syz [ 301.676161][ T9] usb 7-1: SerialNumber: syz [ 301.691512][ T9] usb 7-1: config 0 descriptor?? [ 301.697996][ T9] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 301.954349][T16338] netlink: 'syz.4.4724': attribute type 19 has an invalid length. [ 301.964243][ T9] ums-isd200 7-1:0.0: probe with driver ums-isd200 failed with error -22 [ 302.165231][ T5872] usb 7-1: USB disconnect, device number 19 [ 302.443501][T16369] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4738'. [ 302.586352][ T5869] Process accounting resumed [ 303.025137][T16400] input: syz1 as /devices/virtual/input/input54 [ 303.084823][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4755'. [ 303.141906][T16408] netlink: 'syz.0.4757': attribute type 1 has an invalid length. [ 303.357971][T16424] macvlan0: entered allmulticast mode [ 303.363893][T16424] macvlan0: left allmulticast mode [ 303.709592][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4771'. [ 304.259192][ T975] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 304.439287][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 304.448824][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4795'. [ 304.463507][ T975] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.481697][ T975] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 304.507324][ T975] usb 1-1: config 0 interface 0 has no altsetting 0 [ 304.517299][ T975] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 304.529087][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.555231][ T975] usb 1-1: config 0 descriptor?? [ 304.559227][ T9] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 304.731009][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.742922][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.766101][ T9] usb 5-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 304.789223][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.798719][ T9] usb 5-1: config 0 descriptor?? [ 304.870127][ T5831] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 304.912810][T16495] cgroup: fork rejected by pids controller in /syz6 [ 304.990031][ T975] wacom 0003:056A:0094.003C: Using device in hidraw-only mode [ 304.998453][ T975] wacom 0003:056A:0094.003C: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 305.029395][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 305.052151][ T5831] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.066612][ T5831] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 305.086826][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 305.093885][ T5831] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 305.110673][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.125324][ T5831] usb 3-1: config 0 descriptor?? [ 305.209037][ T5869] usb 1-1: USB disconnect, device number 41 [ 305.232007][ T9] smartjoyplus 0003:6666:8802.003D: unknown main item tag 0x0 [ 305.239777][ T9] smartjoyplus 0003:6666:8802.003D: unknown main item tag 0x0 [ 305.247284][ T9] smartjoyplus 0003:6666:8802.003D: unknown main item tag 0x0 [ 305.256312][ T9] smartjoyplus 0003:6666:8802.003D: unknown main item tag 0x0 [ 305.264896][ T9] smartjoyplus 0003:6666:8802.003D: unknown main item tag 0x0 [ 305.274153][ T9] smartjoyplus 0003:6666:8802.003D: hidraw0: USB HID v0.00 Device [HID 6666:8802] on usb-dummy_hcd.4-1/input0 [ 305.286738][ T9] smartjoyplus 0003:6666:8802.003D: no output reports found [ 305.403097][ T3466] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.510437][ T3466] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.536995][ T5831] corsair 0003:1B1C:1B3E.003E: report_id 3291754556 is invalid [ 305.550893][ T5831] corsair 0003:1B1C:1B3E.003E: item 0 4 1 8 parsing failed [ 305.565287][ T5831] corsair 0003:1B1C:1B3E.003E: parse failed [ 305.567459][ T5870] usb 5-1: USB disconnect, device number 41 [ 305.584335][ T5831] corsair 0003:1B1C:1B3E.003E: probe with driver corsair failed with error -22 [ 305.621281][ T3466] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.692082][ T3466] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.750731][ T5869] usb 3-1: USB disconnect, device number 39 [ 305.775752][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.787948][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.797177][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.807058][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.814710][ T5824] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 305.822121][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.864708][ T3466] bridge_slave_1: left allmulticast mode [ 305.879235][ T3466] bridge_slave_1: left promiscuous mode [ 305.885033][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.896104][ T3466] bridge_slave_0: left allmulticast mode [ 305.905151][ T3466] bridge_slave_0: left promiscuous mode [ 305.911091][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.913394][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4803'. [ 306.210298][ T3466] bond1 (unregistering): Released all slaves [ 306.422270][T16504] team_slave_0: left allmulticast mode [ 306.445760][T16504] team0 (unregistering): Port device team_slave_0 removed [ 306.639948][T16499] chnl_net:caif_netlink_parms(): no params data found [ 306.918946][ T3466] hsr_slave_0: left promiscuous mode [ 306.929335][ T3466] hsr_slave_1: left promiscuous mode [ 306.938413][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 306.938426][ T30] audit: type=1400 audit(1742692017.975:1531): avc: denied { write } for pid=16536 comm="syz.7.4816" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 306.953555][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.996154][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.022129][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.035707][T16541] netlink: 'syz.7.4818': attribute type 3 has an invalid length. [ 307.043584][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.075867][ T3466] veth1_macvtap: left promiscuous mode [ 307.092289][ T3466] veth0_macvtap: left promiscuous mode [ 307.103461][ T3466] veth1_vlan: left promiscuous mode [ 307.114261][ T3466] veth0_vlan: left promiscuous mode [ 307.570209][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 307.648842][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 307.684473][ T3466] team0 (unregistering): Port device team_slave_0 removed [ 307.740693][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 307.762656][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.773751][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.798865][ T10] usb 5-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 307.808126][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.837803][ T10] usb 5-1: config 0 descriptor?? [ 307.906005][ T5817] Bluetooth: hci1: command tx timeout [ 308.264127][ T10] cypress 0003:04B4:BCA1.003F: unknown main item tag 0x0 [ 308.287167][ T10] cypress 0003:04B4:BCA1.003F: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.4-1/input0 [ 308.287459][ T3466] vcan0 (unregistering): left allmulticast mode [ 308.376158][T16499] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.414945][T16499] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.434343][T16499] bridge_slave_0: entered allmulticast mode [ 308.481163][T16499] bridge_slave_0: entered promiscuous mode [ 308.530101][T16499] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.537187][T16499] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.562202][ T5869] usb 5-1: USB disconnect, device number 42 [ 308.577154][T16499] bridge_slave_1: entered allmulticast mode [ 308.600540][T16499] bridge_slave_1: entered promiscuous mode [ 308.743136][T16499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.777394][T16499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.797536][T16566] sg_write: data in/out 1837/10 bytes for SCSI command 0xc7-- guessing data in; [ 308.797536][T16566] program syz.0.4829 not setting count and/or reply_len properly [ 308.906652][T16499] team0: Port device team_slave_0 added [ 308.925570][T16499] team0: Port device team_slave_1 added [ 309.022870][T16499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.051981][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.077875][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.148738][T16499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.182895][T16499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.195338][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.230947][T16499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.366944][T16499] hsr_slave_0: entered promiscuous mode [ 309.394972][T16499] hsr_slave_1: entered promiscuous mode [ 309.401949][T16499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.419517][T16499] Cannot create hsr debugfs directory [ 309.551880][T16595] Failed to get privilege flags for destination (handle=0x2:0x7) [ 309.626046][ T30] audit: type=1400 audit(1742692020.665:1532): avc: denied { create } for pid=16596 comm="syz.7.4843" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.689249][ T30] audit: type=1400 audit(1742692020.685:1533): avc: denied { unlink } for pid=15911 comm="syz-executor" name="file0" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.711927][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.719511][ T5869] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 309.740925][ T30] audit: type=1400 audit(1742692020.765:1534): avc: denied { ioctl } for pid=16580 comm="syz.4.4834" path="socket:[54692]" dev="sockfs" ino=54692 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 309.764631][T16602] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4845'. [ 309.825292][T16604] sg_write: process 79 (syz.7.4846) changed security contexts after opening file descriptor, this is not allowed. [ 309.881464][ T30] audit: type=1400 audit(1742692020.925:1535): avc: denied { mounton } for pid=16605 comm="syz.4.4847" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 309.916700][ T5869] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 309.928912][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.950522][ T5869] usb 3-1: config 0 has no interface number 0 [ 309.980151][ T5817] Bluetooth: hci1: command tx timeout [ 309.987589][ T5869] usb 3-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 309.992560][T16499] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 310.018901][ T5869] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 310.036161][ T5869] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 310.046924][ T5869] usb 3-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 310.071707][ T5869] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 310.088517][T16499] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 310.095346][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.095370][ T5869] usb 3-1: Product: syz [ 310.095384][ T5869] usb 3-1: Manufacturer: syz [ 310.095398][ T5869] usb 3-1: SerialNumber: syz [ 310.130687][ T5869] usb 3-1: config 0 descriptor?? [ 310.139774][ T5869] symbolserial 3-1:0.175: symbol converter detected [ 310.156900][T16499] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 310.166564][ T5869] usb 3-1: symbol converter now attached to ttyUSB0 [ 310.187025][T16615] SELinux: failed to load policy [ 310.195410][T16499] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 310.284194][T16499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.318566][T16499] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.332559][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.339720][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.401501][T16591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.424592][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.428097][T16591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.431714][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.454930][ T5870] usb 3-1: USB disconnect, device number 40 [ 310.476314][ T5870] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 310.494878][ T5870] symbolserial 3-1:0.175: device disconnected [ 310.700238][ T975] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 310.724867][T16499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.845005][ T30] audit: type=1400 audit(1742692021.885:1536): avc: denied { unmount } for pid=15911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 310.884215][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 310.894813][ T975] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 310.917506][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.944604][T16499] veth0_vlan: entered promiscuous mode [ 310.953532][ T975] usb 1-1: Product: syz [ 310.957351][T16499] veth1_vlan: entered promiscuous mode [ 310.966635][ T975] usb 1-1: Manufacturer: syz [ 310.974618][ T975] usb 1-1: SerialNumber: syz [ 310.997465][ T975] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 310.997598][T16499] veth0_macvtap: entered promiscuous mode [ 311.018752][T16499] veth1_macvtap: entered promiscuous mode [ 311.038402][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4866'. [ 311.052001][T16499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.066208][T16499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.082171][T16499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.094016][T16499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.107179][T16499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.124014][T16499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.136063][T16499] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.145678][T16499] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.154684][T16499] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.164954][T16499] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.206476][ T30] audit: type=1400 audit(1742692022.245:1537): avc: denied { map } for pid=16663 comm="syz.7.4869" path="socket:[56165]" dev="sockfs" ino=56165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 311.268982][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.279032][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.316336][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.325507][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.352571][T16668] netlink: 1256 bytes leftover after parsing attributes in process `syz.7.4871'. [ 311.362589][T16668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.550434][ T5831] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 311.700003][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 311.709970][ T5831] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.723806][ T5831] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 311.734917][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 311.747500][ T5831] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 311.758957][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.769639][ T5831] usb 3-1: Product: syz [ 311.774139][ T5831] usb 3-1: Manufacturer: syz [ 311.778728][ T5831] usb 3-1: SerialNumber: syz [ 311.790717][ T5831] usb 3-1: config 0 descriptor?? [ 311.808373][ T975] gspca_ov534_9: reg_w failed -71 [ 311.849798][ T5870] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 312.019500][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 312.028468][ T5870] usb 5-1: config 162 has an invalid interface number: 253 but max is 0 [ 312.044816][ T5870] usb 5-1: config 162 has no interface number 0 [ 312.051218][ T5870] usb 5-1: config 162 interface 253 has no altsetting 0 [ 312.060232][ T5817] Bluetooth: hci1: command tx timeout [ 312.067020][ T5870] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 312.076214][ T5901] kernel read not supported for file /dsp1 (pid: 5901 comm: kworker/1:6) [ 312.090130][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.098123][ T5870] usb 5-1: Product: syz [ 312.107905][ T5870] usb 5-1: Manufacturer: syz [ 312.139873][ T975] gspca_ov534_9: Unknown sensor 0000 [ 312.139922][ T975] ov534_9 1-1:4.0: probe with driver ov534_9 failed with error -22 [ 312.153197][ T5870] usb 5-1: SerialNumber: syz [ 312.172739][ T975] usb 1-1: USB disconnect, device number 42 [ 312.206759][ T5831] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 312.377861][ T5870] go7007 5-1:162.253: probe with driver go7007 failed with error -12 [ 312.397766][ T5870] usb 5-1: USB disconnect, device number 43 [ 312.609754][ T5831] usb 3-1: USB disconnect, device number 41 [ 312.776432][T16719] mkiss: ax0: crc mode is auto. [ 312.783117][T16721] trusted_key: syz.0.4893 sent an empty control message without MSG_MORE. [ 312.834313][ T30] audit: type=1400 audit(1742692023.875:1538): avc: denied { accept } for pid=16722 comm="syz.0.4894" lport=41074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 313.312245][T16744] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4903'. [ 313.332619][T16744] netlink: 'syz.4.4903': attribute type 5 has an invalid length. [ 313.350030][T16744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4903'. [ 313.689358][ T30] audit: type=1400 audit(1742692024.725:1539): avc: denied { read } for pid=16755 comm="syz.7.4909" laddr=ff01::1 lport=128 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 313.814628][T16763] veth1_to_team: entered promiscuous mode [ 313.990335][T16772] netlink: 'syz.7.4918': attribute type 2 has an invalid length. [ 314.139925][ T5817] Bluetooth: hci1: command tx timeout [ 314.207812][T16790] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 314.500974][ T30] audit: type=1326 audit(1742692025.545:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16811 comm="syz.6.4936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f463258d169 code=0x0 [ 314.523921][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.617755][T16821] netlink: 'syz.7.4940': attribute type 1 has an invalid length. [ 314.649266][T16821] netlink: 184 bytes leftover after parsing attributes in process `syz.7.4940'. [ 314.689030][T16821] netlink: 'syz.7.4940': attribute type 1 has an invalid length. [ 314.971216][T16838] netlink: 'syz.7.4948': attribute type 7 has an invalid length. [ 314.995874][T16838] netlink: 140 bytes leftover after parsing attributes in process `syz.7.4948'. [ 315.135185][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4954'. [ 315.148128][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4954'. [ 315.438344][T16866] block nbd4: not configured, cannot reconfigure [ 315.510469][T16872] xt_hashlimit: size too large, truncated to 1048576 [ 315.820685][ T10] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 315.823133][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4970'. [ 315.899692][ T5872] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 315.980834][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 316.001167][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 316.017269][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 316.041363][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 316.043648][T16902] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 316.054902][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.067445][ T10] usb 5-1: Product: syz [ 316.074539][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 316.075674][ T10] usb 5-1: Manufacturer: syz [ 316.083730][T16902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.087463][ T10] usb 5-1: SerialNumber: syz [ 316.105312][ T10] usb 5-1: config 0 descriptor?? [ 316.110241][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 316.114240][ T5872] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 316.138025][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.157061][T16875] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 316.169370][ T5872] usb 1-1: Product: syz [ 316.170391][T16875] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 316.174372][ T5872] usb 1-1: Manufacturer: syz [ 316.207667][ T10] usb 5-1: ucan: probing device on interface #0 [ 316.209540][ T5872] usb 1-1: SerialNumber: syz [ 316.235768][ T5872] usb 1-1: config 0 descriptor?? [ 316.384704][T16916] bond0: entered promiscuous mode [ 316.390050][T16916] bond_slave_0: entered promiscuous mode [ 316.395798][T16916] bond_slave_1: entered promiscuous mode [ 316.401794][T16916] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 316.414628][T16916] batadv0: entered promiscuous mode [ 316.422258][T16916] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 316.432306][T16916] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 316.443639][T16916] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 316.457396][T16916] bond0: left promiscuous mode [ 316.462296][T16916] bond_slave_0: left promiscuous mode [ 316.467817][T16916] bond_slave_1: left promiscuous mode [ 316.473999][T16916] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 316.482303][T16916] batadv0: left promiscuous mode [ 316.569824][ T5870] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 316.658586][ T5872] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 316.720583][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.732227][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.742016][ T5870] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 316.752104][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.762059][ T5870] usb 7-1: config 0 descriptor?? [ 316.790868][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.797212][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.855976][ T10] ucan 5-1:0.0 can0: registered device [ 316.868729][ T5872] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 316.877648][ T5872] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 316.889313][ T5872] usb 1-1: USB disconnect, device number 43 [ 317.054297][ T10] ucan 5-1:0.0 can0: firmware string: unknown [ 317.062759][ T10] usb 5-1: USB disconnect, device number 44 [ 317.183847][ T5870] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 317.194828][ T5870] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 317.204654][ T5870] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 317.212213][ T5870] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 317.219700][ T5870] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 317.227739][ T5870] playstation 0003:054C:0DF2.0040: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 317.381769][ T5870] playstation 0003:054C:0DF2.0040: Invalid reportID received, expected 9 got 32 [ 317.391097][ T5870] playstation 0003:054C:0DF2.0040: Failed to retrieve DualSense pairing info: -22 [ 317.400335][ T5870] playstation 0003:054C:0DF2.0040: Failed to get MAC address from DualSense [ 317.408999][ T5870] playstation 0003:054C:0DF2.0040: Failed to create dualsense. [ 317.417947][ T5870] playstation 0003:054C:0DF2.0040: probe with driver playstation failed with error -22 [ 317.614342][ T5870] usb 7-1: USB disconnect, device number 20 [ 317.645287][ T30] audit: type=1326 audit(1742692028.685:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 317.691550][ T30] audit: type=1326 audit(1742692028.685:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 317.715822][ T30] audit: type=1326 audit(1742692028.685:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 317.739186][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.760127][ T30] audit: type=1326 audit(1742692028.725:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16930 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d5bbbfa25 code=0x7ffc0000 [ 317.819233][ T30] audit: type=1326 audit(1742692028.725:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 317.842690][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.849673][ T30] audit: type=1326 audit(1742692028.735:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 317.873122][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.885526][ T30] audit: type=1326 audit(1742692028.795:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 317.908968][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.916161][ T30] audit: type=1326 audit(1742692028.795:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 317.939646][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.954477][ T30] audit: type=1326 audit(1742692028.795:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 317.977919][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.024095][ T30] audit: type=1326 audit(1742692028.795:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d5bb29359 code=0x7ffc0000 [ 318.093492][ T30] audit: type=1326 audit(1742692028.795:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 318.135180][ T30] audit: type=1326 audit(1742692028.805:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 318.159816][ T30] audit: type=1326 audit(1742692028.805:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 318.221120][ T30] audit: type=1326 audit(1742692028.805:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz.2.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5bb8d169 code=0x7ffc0000 [ 318.409282][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 318.597860][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 318.611840][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 318.636905][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 318.669723][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 318.677916][ T10] usb 3-1: Product: syz [ 318.710847][ T10] usb 3-1: Manufacturer: syz [ 318.715483][ T10] usb 3-1: SerialNumber: syz [ 318.746355][ T10] usb 3-1: config 0 descriptor?? [ 318.779712][T16941] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.025345][ T5872] usb 3-1: USB disconnect, device number 42 [ 319.359785][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 319.511336][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.529481][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.554724][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 319.568677][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 319.584446][ T10] usb 1-1: SerialNumber: syz [ 319.699583][T17019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5026'. [ 319.718982][T17019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5026'. [ 319.797901][ T10] usb 1-1: 0:2 : does not exist [ 319.805394][ T10] usb 1-1: unit 5: unexpected type 0x03 [ 319.829796][ T10] usb 1-1: USB disconnect, device number 44 [ 319.935387][ T30] audit: type=1400 audit(1742692030.975:1555): avc: denied { setattr } for pid=17026 comm="syz.6.5031" path="/dev/mixer" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 319.959299][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.279080][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 425.286048][ C0] rcu: 1-...!: (0 ticks this GP) idle=c5e4/1/0x4000000000000000 softirq=63816/63816 fqs=0 [ 425.297194][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17041/1:b..l [ 425.305188][ C0] rcu: (detected by 0, t=10502 jiffies, g=57645, q=313 ncpus=2) [ 425.312895][ C0] Sending NMI from CPU 0 to CPUs 1: [ 425.312919][ C1] NMI backtrace for cpu 1 [ 425.312928][ C1] CPU: 1 UID: 0 PID: 16499 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 425.312944][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 425.312952][ C1] RIP: 0010:lock_acquire.part.0+0x11b/0x380 [ 425.312975][ C1] Code: 00 81 e5 00 02 00 00 6a 00 41 0f 94 c1 6a 00 45 0f b6 c9 ff b4 24 f8 00 00 00 41 57 44 8b 44 24 2c 8b 4c 24 28 e8 45 ae ff ff <48> c7 c7 80 ff 6c 8b 48 83 c4 28 e8 c5 db c0 09 b8 ff ff ff ff 65 [ 425.312988][ C1] RSP: 0018:ffffc90000a28c70 EFLAGS: 00000082 [ 425.312999][ C1] RAX: 0000000000000001 RBX: 1ffff92000145194 RCX: 00000000d439196c [ 425.313007][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffffffff96ec8ae8 [ 425.313016][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2dd8d98 [ 425.313024][ C1] R10: ffffffff96ec6cc7 R11: 0000000000000008 R12: 0000000000000000 [ 425.313033][ C1] R13: ffffffff8e1bd140 R14: 0000000000000000 R15: 0000000000000000 [ 425.313041][ C1] FS: 000055556a9b9500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 425.313055][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.313064][ C1] CR2: 00007f46332d56c0 CR3: 00000000344a4000 CR4: 00000000003526f0 [ 425.313073][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 425.313080][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 425.313089][ C1] Call Trace: [ 425.313094][ C1] [ 425.313100][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 425.313117][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 425.313134][ C1] ? nmi_handle+0x1ac/0x5d0 [ 425.313154][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 425.313171][ C1] ? default_do_nmi+0x6a/0x160 [ 425.313185][ C1] ? exc_nmi+0x170/0x1e0 [ 425.313198][ C1] ? end_repeat_nmi+0xf/0x53 [ 425.313219][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 425.313236][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 425.313254][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 425.313272][ C1] [ 425.313276][ C1] [ 425.313280][ C1] ? advance_sched+0x679/0xc60 [ 425.313295][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 425.313313][ C1] ? rcu_is_watching+0x12/0xc0 [ 425.313327][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 425.313342][ C1] ? advance_sched+0x679/0xc60 [ 425.313355][ C1] ? lock_acquire+0x2f/0xb0 [ 425.313371][ C1] ? advance_sched+0x679/0xc60 [ 425.313385][ C1] advance_sched+0x67f/0xc60 [ 425.313398][ C1] ? advance_sched+0x679/0xc60 [ 425.313413][ C1] ? __pfx_advance_sched+0x10/0x10 [ 425.313426][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 425.313442][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 425.313455][ C1] ? read_tsc+0x9/0x20 [ 425.313471][ C1] hrtimer_interrupt+0x392/0x8e0 [ 425.313488][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 425.313508][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 425.313525][ C1] [ 425.313529][ C1] [ 425.313534][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 425.313552][ C1] RIP: 0010:kasan_check_range+0x105/0x1a0 [ 425.313570][ C1] Code: 75 0a 45 3a 11 b8 01 00 00 00 7c 0b 44 89 c2 e8 c1 ec ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 <48> 83 c0 01 48 39 d0 74 41 80 38 00 74 f2 eb b2 41 bc 08 00 00 00 [ 425.313581][ C1] RSP: 0018:ffffc9000438f638 EFLAGS: 00000246 [ 425.313592][ C1] RAX: ffffed10038cd97b RBX: ffffed10038cd97c RCX: ffffffff822897b6 [ 425.313601][ C1] RDX: ffffed10038cd97c RSI: 0000000000000004 RDI: ffff88801c66cbd8 [ 425.313610][ C1] RBP: ffffed10038cd97b R08: 0000000000000000 R09: ffffed10038cd97b [ 425.313618][ C1] R10: ffff88801c66cbdb R11: 0000000000000007 R12: 0000000000000000 [ 425.313627][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 425.313636][ C1] ? page_table_check_set.part.0+0x336/0x550 [ 425.313655][ C1] page_table_check_set.part.0+0x336/0x550 [ 425.313670][ C1] page_table_check_set+0x275/0x4c0 [ 425.313685][ C1] __page_table_check_ptes_set+0x2d0/0x3e0 [ 425.313699][ C1] ? vm_normal_page+0x13c/0x2b0 [ 425.313717][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 425.313731][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 425.313744][ C1] ? copy_page_range+0xd09/0x55e0 [ 425.313764][ C1] copy_page_range+0x2068/0x55e0 [ 425.313795][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 425.313813][ C1] ? find_held_lock+0x2d/0x110 [ 425.313828][ C1] ? __pfx_lock_release+0x10/0x10 [ 425.313845][ C1] ? lock_acquire+0x2f/0xb0 [ 425.313861][ C1] ? copy_process+0x7c12/0x8c50 [ 425.313879][ C1] ? down_write+0x14e/0x200 [ 425.313898][ C1] ? up_write+0x1b2/0x520 [ 425.313918][ C1] copy_process+0x7ccb/0x8c50 [ 425.313929][ C1] ? wp_page_reuse+0x287/0x900 [ 425.313951][ C1] ? __pfx_copy_process+0x10/0x10 [ 425.313963][ C1] ? __pfx_mark_lock+0x10/0x10 [ 425.313986][ C1] kernel_clone+0xfd/0x960 [ 425.313998][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 425.314015][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 425.314029][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 425.314045][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 425.314065][ C1] __do_sys_clone+0xcf/0x120 [ 425.314077][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 425.314094][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 425.314113][ C1] do_syscall_64+0xcd/0x250 [ 425.314131][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.314148][ C1] RIP: 0033:0x7f46325839d3 [ 425.314159][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 425.314171][ C1] RSP: 002b:00007ffc29fd1f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 425.314182][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f46325839d3 [ 425.314191][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 425.314199][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 425.314206][ C1] R10: 000055556a9b97d0 R11: 0000000000000246 R12: 0000000000000000 [ 425.314214][ C1] R13: 00000000000927c0 R14: 000000000004e2b9 R15: 00007ffc29fd2130 [ 425.314226][ C1] [ 425.314915][ C0] task:syz.4.5040 state:R running task stack:27904 pid:17041 tgid:17041 ppid:5825 task_flags:0x40004c flags:0x00004000 [ 425.920527][ C0] Call Trace: [ 425.923799][ C0] [ 425.926727][ C0] __schedule+0xf43/0x5890 [ 425.931147][ C0] ? hlock_class+0x4e/0x130 [ 425.935650][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 425.940852][ C0] ? __pfx_mark_lock+0x10/0x10 [ 425.945620][ C0] ? __pfx___schedule+0x10/0x10 [ 425.950466][ C0] ? find_held_lock+0x2d/0x110 [ 425.955239][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 425.960612][ C0] preempt_schedule_common+0x44/0xc0 [ 425.965896][ C0] preempt_schedule_thunk+0x1a/0x30 [ 425.971097][ C0] _raw_spin_unlock+0x3e/0x50 [ 425.975770][ C0] unmap_page_range+0xee3/0x4390 [ 425.980730][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 425.986105][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 425.991048][ C0] ? uprobe_munmap+0x20/0x5c0 [ 425.995723][ C0] unmap_single_vma+0x194/0x2b0 [ 426.000578][ C0] unmap_vmas+0x22f/0x490 [ 426.004917][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 426.009771][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 426.014723][ C0] exit_mmap+0x1c1/0xba0 [ 426.018972][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 426.023742][ C0] ? __pfx_mark_lock+0x10/0x10 [ 426.028525][ C0] __mmput+0x12a/0x410 [ 426.032601][ C0] mmput+0x62/0x70 [ 426.036322][ C0] do_exit+0x9ba/0x2db0 [ 426.040477][ C0] ? __pfx_do_exit+0x10/0x10 [ 426.045062][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 426.050439][ C0] do_group_exit+0xd3/0x2a0 [ 426.054948][ C0] __x64_sys_exit_group+0x3e/0x50 [ 426.059967][ C0] x64_sys_call+0x151f/0x1720 [ 426.064639][ C0] do_syscall_64+0xcd/0x250 [ 426.069147][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.075040][ C0] RIP: 0033:0x7f5f4758d169 [ 426.079447][ C0] RSP: 002b:00007fffaaaeecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 426.087857][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f4758d169 [ 426.095822][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.103786][ C0] RBP: 00007fffaaaeed5c R08: 00000004aaaeedef R09: 00000000000927c0 [ 426.111752][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000003fb [ 426.119716][ C0] R13: 00000000000927c0 R14: 000000000004e2c3 R15: 00007fffaaaeedb0 [ 426.127693][ C0] [ 426.130706][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g57645 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 426.143018][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=21763 [ 426.150893][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g57645 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 426.162249][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 426.172206][ C0] rcu: RCU grace-period kthread stack dump: [ 426.178079][ C0] task:rcu_preempt state:I stack:28112 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 426.189992][ C0] Call Trace: [ 426.193263][ C0] [ 426.196188][ C0] __schedule+0xf43/0x5890 [ 426.200606][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 426.205813][ C0] ? __pfx___schedule+0x10/0x10 [ 426.210676][ C0] ? schedule+0x298/0x350 [ 426.215013][ C0] ? __pfx_lock_release+0x10/0x10 [ 426.220052][ C0] ? lock_acquire+0x2f/0xb0 [ 426.224559][ C0] ? schedule+0x1fd/0x350 [ 426.228902][ C0] schedule+0xe7/0x350 [ 426.232977][ C0] schedule_timeout+0x124/0x280 [ 426.237829][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 426.243199][ C0] ? __pfx_process_timeout+0x10/0x10 [ 426.248503][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 426.254311][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 426.259775][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 426.264545][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 426.269832][ C0] ? rcu_gp_init+0xc82/0x1630 [ 426.274519][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 426.279719][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 426.285535][ C0] rcu_gp_kthread+0x271/0x380 [ 426.290214][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 426.295416][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 426.300614][ C0] ? __kthread_parkme+0x148/0x220 [ 426.305636][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 426.310833][ C0] kthread+0x3af/0x750 [ 426.314905][ C0] ? __pfx_kthread+0x10/0x10 [ 426.319498][ C0] ? __pfx_kthread+0x10/0x10 [ 426.324089][ C0] ret_from_fork+0x45/0x80 [ 426.328505][ C0] ? __pfx_kthread+0x10/0x10 [ 426.333091][ C0] ret_from_fork_asm+0x1a/0x30 [ 426.337875][ C0]