last executing test programs: 2.760935288s ago: executing program 0 (id=2245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c000c800800058004"], 0x2c}}, 0x0) 2.542132324s ago: executing program 0 (id=2252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a40)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYRES16, @ANYRES64=r1, @ANYBLOB="323c8f4607c03ab54ad3f072f1ca1e5e11e0"], 0xfc}}, 0x20040800) 2.4890643s ago: executing program 0 (id=2255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x4}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) 2.385563638s ago: executing program 0 (id=2258): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.20239163s ago: executing program 0 (id=2264): mlockall(0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.099078662s ago: executing program 2 (id=2267): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}]}}) 1.966641358s ago: executing program 2 (id=2270): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000a7461d1079d18f79109569ff83fecc053206df5b7be7e91e347fae4b3565d86231687c44a2e05bb28563e55ba8d1f74fe2b607e9457eb49dee69fcab5b184baf19d8a9f156715c876f701222a29a372a6bf2d9470d7b759946e4bf5f16c6b1c88452d5ca4adb3dc55da972c12e3fb7266bf8c85801da491b1b4b849b188bbe754dc705c53094e1b8a7f2185c794ba6489473263e26955afeec1e92f7f421024864634cc08729d9df8a850416caec03b9b169d95f00b0008054b0a75ab915147cee7407d9b81864bef9dc2bb182888b84a924", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000bd0f8ace31360be0a609b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10e53a9f792ecb28ec39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8132301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979ce67c7a1f8924017e73bcf1ae3ed821a4b9839725000000000000000000000000000000f0ce2bf979256f99e89e05d466843d32b983d19cfa3c2a04e9f48311b786927c6c2d505637cad9ae8ae32fbee21a721e38edf6e80ff33a3a3cef251918374de4d4636348ef77a7bad1e8250117d604f59921f29bda75f135865bdc3e10906562e01af1fef96e49b969eaf4ec6b4c51fa2dcc7c1a117243fd64d641426e6a582fcda4be9f58724d4a66e46c032e6f6b3d46fb9616b4b6efc5d083e003fdcf3d78fea7ee48b2a5cc89"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.871678703s ago: executing program 2 (id=2272): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) 1.769265409s ago: executing program 4 (id=2273): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) munlockall() 1.757034782s ago: executing program 2 (id=2274): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 1.586670077s ago: executing program 2 (id=2275): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.054496605s ago: executing program 4 (id=2278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b80)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 793.041764ms ago: executing program 4 (id=2283): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 676.321515ms ago: executing program 4 (id=2286): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpgid(0x0) 655.82062ms ago: executing program 0 (id=2287): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000406d040cc50000000000010902"], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x40000018) 495.090719ms ago: executing program 3 (id=2288): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000047c0)=r1, 0x4) write(r0, &(0x7f00000000c0)="240000005a001f021007f4f9002304000a04f51108000500020100020800038005000000", 0x24) 464.567956ms ago: executing program 1 (id=2289): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [], {0x10, 0x4}, {0x20, 0x4}}, 0x3c, 0x1) 451.080364ms ago: executing program 2 (id=2290): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 375.298506ms ago: executing program 3 (id=2291): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 375.075295ms ago: executing program 1 (id=2292): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffff3e23, 0x8) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x6, 0x8) 313.668731ms ago: executing program 1 (id=2293): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009404, &(0x7f0000000140)) 299.943341ms ago: executing program 3 (id=2294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f00000002c0)='\\/\xb7\x92P\xdf\x8d>Y\x87`\xb8\xd9\x93\xbf\xa2\x1a\xac\xbb\xc2\xce\xfe\xeb\xa1\x86\xd9\xd5\xa9Q\xc3\xdb\xab\xa44\xb1\xb9\xa5\xc0*\xa3:\x82Y\x9f\xf4\xbb\xf6\x8e\x9b \xbe}\xb4(3\x91\xa0\xf5\xd1\xab\x19Q7h\xbd\x81\x9d\xe8\x1d\xec\xb1Y\x1bO\xf3)J+\xd6\a3\xa5\xb1`\xebd\xd4q\xab0\xd3\r\x148PP\xe7\\\x96\xf0\x1fX\xc0\x0f\xec\x03\xe3<\x96\x83\x8f\xacS\x03\xc7\xd1!\xef\x16_H\xe7\x1e]\x06\xa4\x04-\x8b\xc2e0\x1aE\x1c\xbf\x86K!\xf0\x19\xbb=,\x1c\xebh\x1d\xf2\xd3v\xd3PU\x8f\xdb\xd8\xde\xfc\x9a/\x80f\xda\x7f\xb1\xa5a', 0x0) 231.676715ms ago: executing program 1 (id=2295): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a010100000000000000000700000009"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 190.759177ms ago: executing program 4 (id=2296): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) close(0x3) 178.55346ms ago: executing program 3 (id=2297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @random}]}, 0x2c}}, 0x0) 134.952769ms ago: executing program 1 (id=2298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 104.82532ms ago: executing program 3 (id=2299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 55.453181ms ago: executing program 4 (id=2300): r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x2010}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 42.313534ms ago: executing program 3 (id=2301): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc8}]}, 0x2c}}, 0x10) 0s ago: executing program 1 (id=2302): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000140)="f8", 0x1, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) kernel console output (not intermixed with test programs): [ 70.754601][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 71.004900][ T6372] process 'syz.1.191' launched './file1' with NULL argv: empty string added [ 71.013741][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 71.013754][ T29] audit: type=1400 audit(1738748305.636:286): avc: denied { read write } for pid=6373 comm="syz.4.192" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.115159][ T29] audit: type=1400 audit(1738748305.636:287): avc: denied { open } for pid=6373 comm="syz.4.192" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.155448][ T29] audit: type=1400 audit(1738748305.696:288): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 71.166767][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.176922][ T29] audit: type=1400 audit(1738748305.696:289): avc: denied { execute_no_trans } for pid=6371 comm="syz.1.191" path="/42/file1" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.205379][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.226456][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.337367][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 71.373736][ T29] audit: type=1400 audit(1738748306.006:290): avc: denied { read } for pid=6384 comm="syz.1.197" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.466898][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.481979][ T29] audit: type=1400 audit(1738748306.036:291): avc: denied { open } for pid=6384 comm="syz.1.197" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.759101][ T29] audit: type=1400 audit(1738748306.396:292): avc: denied { setopt } for pid=6403 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.875832][ T29] audit: type=1326 audit(1738748306.506:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bb38cde9 code=0x7ffc0000 [ 71.879898][ T6406] netlink: 830 bytes leftover after parsing attributes in process `syz.1.208'. [ 71.976406][ T29] audit: type=1326 audit(1738748306.546:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bb38cde9 code=0x7ffc0000 [ 72.030887][ T29] audit: type=1326 audit(1738748306.546:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4bb38cde9 code=0x7ffc0000 [ 72.111027][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.136455][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.177774][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.317295][ T6433] random: crng reseeded on system resumption [ 72.682777][ T6448] ======================================================= [ 72.682777][ T6448] WARNING: The mand mount option has been deprecated and [ 72.682777][ T6448] and is ignored by this kernel. Remove the mand [ 72.682777][ T6448] option from the mount to silence this warning. [ 72.682777][ T6448] ======================================================= [ 72.834203][ T6457] netlink: 'syz.1.230': attribute type 2 has an invalid length. [ 72.845286][ T6457] netlink: 16138 bytes leftover after parsing attributes in process `syz.1.230'. [ 72.887401][ T6461] syz.0.234 uses obsolete (PF_INET,SOCK_PACKET) [ 72.926381][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.936576][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.944877][ T6465] batadv_slave_1: entered promiscuous mode [ 72.954691][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 73.004491][ T6467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 73.086467][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 73.098227][ T5869] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 73.113320][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.117752][ T5949] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.126214][ T5869] usb 5-1: Product: syz [ 73.144133][ T5869] usb 5-1: Manufacturer: syz [ 73.157326][ T5869] usb 5-1: SerialNumber: syz [ 73.165772][ T5869] usb 5-1: config 0 descriptor?? [ 73.287068][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 73.305977][ T5949] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.314654][ T5949] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 73.329260][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.339300][ T5949] usb 4-1: config 0 descriptor?? [ 73.385087][ T5869] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 73.400494][ T5869] usb 5-1: USB disconnect, device number 3 [ 73.486401][ T5908] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 73.596055][ T6489] netlink: 10 bytes leftover after parsing attributes in process `syz.2.247'. [ 73.657404][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 73.682677][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.694161][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.705887][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 73.715683][ T5908] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 73.738218][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.757856][ T5908] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 73.772870][ T5949] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0003/input/input12 [ 73.784266][ T5908] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 73.784289][ T5908] usb 1-1: Manufacturer: syz [ 73.785726][ T5908] usb 1-1: config 0 descriptor?? [ 73.805653][ T5949] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0003/input/input13 [ 73.946086][ T5949] kye 0003:0458:5013.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 74.006017][ T8] usb 4-1: USB disconnect, device number 3 [ 74.096472][ T5908] rc_core: IR keymap rc-hauppauge not found [ 74.105023][ T5908] Registered IR keymap rc-empty [ 74.114596][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.146354][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.181531][ T6510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.193023][ T6510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.203125][ T6510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.207280][ T5908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 74.215269][ T6510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.237527][ T5908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 74.251850][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.276448][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.298274][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.316474][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.336334][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.356359][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.387005][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.401629][ T6518] overlayfs: disabling nfs_export due to verity=require [ 74.408909][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.426512][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.448210][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 74.481150][ T5908] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 74.502514][ T5908] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 74.526421][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 74.535356][ T5908] usb 1-1: USB disconnect, device number 4 [ 74.567190][ T5825] net_ratelimit: 5 callbacks suppressed [ 74.567204][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.707739][ T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 74.720197][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.732081][ T8] usb 3-1: config 0 descriptor?? [ 75.010638][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 75.019505][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 75.029609][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 75.044085][ T8] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 75.056356][ T8] [drm] Initialized udl on minor 2 [ 75.067919][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 75.081209][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 75.089836][ T5908] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 75.101223][ T8] usb 3-1: USB disconnect, device number 4 [ 75.107528][ T5908] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 75.420492][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 75.607213][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.701354][ T6576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.287'. [ 75.714188][ T6576] netlink: 43 bytes leftover after parsing attributes in process `syz.1.287'. [ 75.723177][ T6576] netlink: 'syz.1.287': attribute type 5 has an invalid length. [ 75.731001][ T6576] netlink: 43 bytes leftover after parsing attributes in process `syz.1.287'. [ 76.260943][ T46] cfg80211: failed to load regulatory.db [ 76.340901][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 76.340917][ T29] audit: type=1400 audit(1738748310.976:378): avc: denied { write } for pid=6604 comm="syz.4.300" path="socket:[10719]" dev="sockfs" ino=10719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.410110][ T29] audit: type=1400 audit(1738748310.986:379): avc: denied { create } for pid=6606 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 76.466319][ T29] audit: type=1400 audit(1738748310.986:380): avc: denied { write } for pid=6606 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 76.490330][ T6613] netlink: 76 bytes leftover after parsing attributes in process `syz.3.303'. [ 76.522147][ T29] audit: type=1326 audit(1738748311.046:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.2.301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4bb38cde9 code=0x0 [ 76.595375][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 76.617334][ T6616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.305'. [ 76.632225][ T6616] vlan2: entered allmulticast mode [ 76.876320][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.056936][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 77.063436][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.084390][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.107580][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.126380][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.145972][ T8] usb 1-1: config 0 descriptor?? [ 77.199481][ T6645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.317'. [ 77.597590][ T8] HID 045e:07da: Invalid code 65791 type 1 [ 77.611567][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input15 [ 77.654271][ T8] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 77.675950][ T29] audit: type=1400 audit(1738748312.306:382): avc: denied { map } for pid=6666 comm="syz.1.329" path="socket:[10898]" dev="sockfs" ino=10898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 77.748625][ T6671] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 78.115072][ T5825] usb 1-1: USB disconnect, device number 5 [ 78.213486][ T6692] Zero length message leads to an empty skb [ 78.401812][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 78.452630][ T6698] bond0 (unregistering): Released all slaves [ 78.594548][ T29] audit: type=1400 audit(1738748313.226:383): avc: denied { write } for pid=6703 comm="syz.3.344" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.627234][ T6704] loop6: detected capacity change from 0 to 524287999 [ 78.635378][ T6707] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 78.659807][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.669160][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.704948][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.714153][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.730065][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.739013][ T29] audit: type=1400 audit(1738748313.366:384): avc: denied { mount } for pid=6710 comm="syz.4.348" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.739235][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.760878][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.782790][ T29] audit: type=1400 audit(1738748313.406:385): avc: denied { remount } for pid=6710 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.786278][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.811524][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.820807][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.829990][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.838054][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.847259][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.856397][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.864650][ T6716] fuse: Bad value for 'fd' [ 78.865577][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.896280][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.905434][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.914910][ T6704] ldm_validate_partition_table(): Disk read failed. [ 78.922411][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.931650][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.943199][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.952369][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.961756][ T6704] Dev loop6: unable to read RDB block 0 [ 78.973312][ T6704] loop6: unable to read partition table [ 79.028868][ T6704] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 79.033753][ T29] audit: type=1400 audit(1738748313.666:386): avc: denied { setopt } for pid=6720 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.111361][ T29] audit: type=1400 audit(1738748313.666:387): avc: denied { write } for pid=6720 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.116382][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 80.172936][ T6777] bond1 (unregistering): Released all slaves [ 81.218044][ T5869] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 81.377355][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 81.387677][ T5869] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 81.397018][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.405019][ T5869] usb 3-1: Product: syz [ 81.409258][ T5869] usb 3-1: Manufacturer: syz [ 81.414077][ T5869] usb 3-1: SerialNumber: syz [ 81.421161][ T5869] usb 3-1: config 0 descriptor?? [ 81.427387][ T5869] option 3-1:0.0: GSM modem (1-port) converter detected [ 81.640001][ T46] usb 3-1: USB disconnect, device number 5 [ 81.646947][ T46] option 3-1:0.0: device disconnected [ 81.816026][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 81.816042][ T29] audit: type=1400 audit(1738748316.446:399): avc: denied { read } for pid=6842 comm="syz.1.407" path="socket:[11929]" dev="sockfs" ino=11929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.845670][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.913893][ T29] audit: type=1400 audit(1738748316.546:400): avc: denied { listen } for pid=6847 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.970254][ T29] audit: type=1400 audit(1738748316.566:401): avc: denied { accept } for pid=6847 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.081556][ T29] audit: type=1400 audit(1738748316.716:402): avc: denied { create } for pid=6860 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.123594][ T29] audit: type=1400 audit(1738748316.756:403): avc: denied { connect } for pid=6860 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.142975][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.154923][ T29] audit: type=1400 audit(1738748316.756:404): avc: denied { name_connect } for pid=6860 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 82.174927][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.254279][ T29] audit: type=1326 audit(1738748316.886:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 82.277529][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.285543][ T29] audit: type=1326 audit(1738748316.886:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 82.308776][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.316608][ T29] audit: type=1326 audit(1738748316.886:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 82.341944][ T29] audit: type=1326 audit(1738748316.886:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 83.416641][ T5908] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.480692][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 83.491161][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 83.596547][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 83.616698][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.639926][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.663835][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.695716][ T5908] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 83.705542][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.721456][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.738451][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.757515][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.767204][ T5908] usb 4-1: config 0 descriptor?? [ 83.783931][ T8] usb 3-1: SerialNumber: syz [ 84.009885][ T8] usb 3-1: 0:2 : does not exist [ 84.035234][ T8] usb 3-1: USB disconnect, device number 6 [ 84.181944][ T5908] dragonrise 0003:0079:0011.0005: item fetching failed at offset 3/5 [ 84.197610][ T5908] dragonrise 0003:0079:0011.0005: parse failed [ 84.206364][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 84.206593][ T5908] dragonrise 0003:0079:0011.0005: probe with driver dragonrise failed with error -22 [ 84.389804][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 84.418024][ T46] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 84.436390][ T46] usb 1-1: config 0 has no interface number 0 [ 84.451588][ T46] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 84.467384][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.485609][ T46] usb 1-1: Product: syz [ 84.490023][ T46] usb 1-1: Manufacturer: syz [ 84.494622][ T46] usb 1-1: SerialNumber: syz [ 84.509223][ T46] usb 1-1: config 0 descriptor?? [ 84.518323][ T46] ums-jumpshot 1-1:0.16: USB Mass Storage device detected [ 84.539566][ T46] ums-jumpshot 1-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 84.759951][ T46] usb 1-1: USB disconnect, device number 6 [ 84.782462][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 84.812713][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 84.966708][ T7002] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 85.426521][ T7022] Invalid logical block size (-1) [ 86.027327][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 86.037793][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.502'. [ 86.047366][ T7059] netlink: 'syz.0.502': attribute type 20 has an invalid length. [ 86.057417][ T46] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 86.084998][ T5908] usb 4-1: USB disconnect, device number 4 [ 86.216396][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 86.228953][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.240839][ T46] usb 3-1: config 0 has no interfaces? [ 86.247204][ T7068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.268822][ T46] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 86.278847][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.296029][ T46] usb 3-1: Product: syz [ 86.304713][ T46] usb 3-1: Manufacturer: syz [ 86.315852][ T46] usb 3-1: SerialNumber: syz [ 86.330629][ T46] r8152-cfgselector 3-1: Unknown version 0x0000 [ 86.339950][ T46] r8152-cfgselector 3-1: config 0 descriptor?? [ 86.521066][ T7080] netlink: 84 bytes leftover after parsing attributes in process `syz.0.511'. [ 86.614805][ T8] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 86.764115][ T7096] netlink: 'syz.1.519': attribute type 19 has an invalid length. [ 86.885377][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 86.885392][ T29] audit: type=1400 audit(1738748321.516:422): avc: denied { accept } for pid=7107 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.934375][ T29] audit: type=1400 audit(1738748321.556:423): avc: denied { write } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.994228][ T29] audit: type=1400 audit(1738748321.556:424): avc: denied { remove_name } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.038065][ T29] audit: type=1400 audit(1738748321.556:425): avc: denied { rename } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.072841][ T29] audit: type=1400 audit(1738748321.556:426): avc: denied { add_name } for pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.096348][ T29] audit: type=1400 audit(1738748321.556:427): avc: denied { unlink } for pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.220496][ T29] audit: type=1400 audit(1738748321.556:428): avc: denied { create } for pid=5176 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.290237][ T29] audit: type=1400 audit(1738748321.626:429): avc: denied { mount } for pid=7112 comm="syz.3.528" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 87.356445][ T29] audit: type=1400 audit(1738748321.896:430): avc: denied { map } for pid=7130 comm="syz.0.537" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 87.599271][ T7149] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 87.626729][ T7150] netlink: 128 bytes leftover after parsing attributes in process `syz.1.542'. [ 87.652963][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.661766][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.694417][ T29] audit: type=1400 audit(1738748322.326:431): avc: denied { bind } for pid=7153 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.791961][ T7157] netlink: 165 bytes leftover after parsing attributes in process `syz.4.546'. [ 88.200547][ T7186] tap0: tun_chr_ioctl cmd 1074025672 [ 88.205993][ T7186] tap0: ignored: set checksum disabled [ 88.500688][ T7204] netlink: 'syz.3.567': attribute type 12 has an invalid length. [ 88.526966][ T7204] netlink: 'syz.3.567': attribute type 29 has an invalid length. [ 88.545246][ T7204] netlink: 148 bytes leftover after parsing attributes in process `syz.3.567'. [ 88.577119][ T7204] netlink: 59 bytes leftover after parsing attributes in process `syz.3.567'. [ 88.720894][ T7214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.572'. [ 89.356380][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.538934][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 89.547260][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.554205][ T8] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 89.565775][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.583304][ T8] usb 4-1: config 0 descriptor?? [ 89.625464][ T7219] orangefs_mount: mount request failed with -4 [ 89.799111][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 89.946183][ T7284] bond0: option resend_igmp: invalid value (7540) [ 89.959839][ T7284] bond0: option resend_igmp: allowed values 0 - 255 [ 89.996641][ T8] hid (null): unknown global tag 0xd [ 90.005305][ T8] hid (null): unknown global tag 0xe [ 90.036332][ T8] hid (null): unknown global tag 0xc [ 90.042021][ T8] hid (null): invalid report_count 822083584 [ 90.051529][ T8] hid (null): invalid report_size -1701018685 [ 90.058061][ T8] hid (null): global environment stack overflow [ 90.079031][ T8] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0006/input/input16 [ 90.172356][ T8] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0006/input/input17 [ 90.234312][ T8] kye 0003:0458:5013.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 90.250385][ T8] usb 4-1: USB disconnect, device number 5 [ 90.316297][ T5908] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 90.412831][ T5827] Bluetooth: unknown link type 115 [ 90.418158][ T5827] Bluetooth: hci1: connection err: -111 [ 90.467495][ T5866] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.497796][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.510908][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.520912][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 90.534356][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.551636][ T5908] usb 3-1: config 0 descriptor?? [ 90.628863][ T5866] usb 1-1: config 0 has an invalid interface number: 137 but max is 0 [ 90.641117][ T5866] usb 1-1: config 0 has no interface number 0 [ 90.647566][ T5866] usb 1-1: too many endpoints for config 0 interface 137 altsetting 239: 202, using maximum allowed: 30 [ 90.664478][ T5866] usb 1-1: config 0 interface 137 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 90.682518][ T5866] usb 1-1: config 0 interface 137 has no altsetting 0 [ 90.694412][ T5866] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 90.708787][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.720591][ T5866] usb 1-1: Product: syz [ 90.724793][ T5866] usb 1-1: Manufacturer: syz [ 90.732847][ T5866] usb 1-1: SerialNumber: syz [ 90.742739][ T5866] usb 1-1: config 0 descriptor?? [ 90.751623][ T5866] peak_usb 1-1:0.137: probe with driver peak_usb failed with error 137 [ 90.978596][ T5908] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 91.007434][ T5866] usb 1-1: USB disconnect, device number 7 [ 91.013365][ T5908] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 91.033001][ T5908] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 91.048040][ T5908] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 91.070186][ T5908] lg-g15 0003:046D:C222.0007: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 91.175768][ T25] usb 3-1: USB disconnect, device number 8 [ 91.542420][ T7360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.030172][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 92.030186][ T29] audit: type=1400 audit(1738748326.666:444): avc: denied { write } for pid=7395 comm="syz.4.657" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.059442][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.080609][ T7396] input: syz0 as /devices/virtual/input/input18 [ 92.115396][ T7400] IPVS: length: 163 != 24 [ 92.202724][ T29] audit: type=1400 audit(1738748326.836:445): avc: denied { ioctl } for pid=7406 comm="syz.4.661" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 92.227943][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.398000][ T7418] input: syz1 as /devices/virtual/input/input19 [ 92.610440][ T29] audit: type=1400 audit(1738748327.246:446): avc: denied { create } for pid=7425 comm="syz.3.670" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.805064][ T7440] macsec1: entered promiscuous mode [ 92.825963][ T7440] macvlan1: entered promiscuous mode [ 92.850424][ T7440] macvlan1: left promiscuous mode [ 93.023181][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 93.521811][ T29] audit: type=1400 audit(1738748328.156:447): avc: denied { create } for pid=7485 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.541315][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.558781][ T29] audit: type=1400 audit(1738748328.196:448): avc: denied { setopt } for pid=7485 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.580582][ T29] audit: type=1400 audit(1738748328.226:449): avc: denied { getopt } for pid=7485 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.629736][ T29] audit: type=1400 audit(1738748328.256:450): avc: denied { ioctl } for pid=7487 comm="syz.2.699" path="/dev/sg0" dev="devtmpfs" ino=734 ioctlcmd=0x5385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.706009][ T5866] kernel write not supported for file bpf-map (pid: 5866 comm: kworker/0:4) [ 93.759498][ T29] audit: type=1400 audit(1738748328.396:451): avc: denied { search } for pid=7497 comm="syz.2.704" name="/" dev="configfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.793332][ T29] audit: type=1400 audit(1738748328.396:452): avc: denied { write } for pid=7499 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.163911][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.179018][ T7519] batadv_slave_0: entered promiscuous mode [ 94.248610][ T5866] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 94.264789][ T7524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.715'. [ 94.280526][ T5827] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 94.287899][ T5827] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 94.368069][ T29] audit: type=1400 audit(1738748329.006:453): avc: denied { watch watch_reads } for pid=7531 comm="syz.0.720" path="/129" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.416527][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 94.426288][ T5866] usb 4-1: config 0 interface 0 altsetting 112 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.447432][ T5866] usb 4-1: config 0 interface 0 altsetting 112 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.464313][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.479671][ T5866] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice=11.00 [ 94.496957][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.513087][ T5866] usb 4-1: config 0 descriptor?? [ 94.601169][ T5832] Bluetooth: hci4: adv larger than maximum supported [ 94.601220][ T5832] Bluetooth: hci4: Malformed LE Event: 0x0d [ 94.726444][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 94.877626][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.888140][ T25] usb 1-1: config 0 has no interfaces? [ 94.893692][ T25] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 94.903218][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.920302][ T25] usb 1-1: config 0 descriptor?? [ 94.925663][ T5866] kye 0003:0458:0153.0008: bogus close delimiter [ 94.932956][ T5866] kye 0003:0458:0153.0008: item 0 2 2 10 parsing failed [ 94.944356][ T5866] kye 0003:0458:0153.0008: parse failed [ 94.950713][ T5866] kye 0003:0458:0153.0008: probe with driver kye failed with error -22 [ 95.138940][ T5825] usb 1-1: USB disconnect, device number 8 [ 95.145463][ T5866] usb 4-1: USB disconnect, device number 6 [ 95.623937][ T7572] netlink: 'syz.2.738': attribute type 2 has an invalid length. [ 95.750518][ T7574] Illegal XDP return value 1232378281 on prog (id 86) dev N/A, expect packet loss! [ 96.090034][ T7595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=7595 comm=syz.4.748 [ 96.549880][ T7615] 9pnet_fd: Insufficient options for proto=fd [ 96.744460][ T7622] netlink: 160 bytes leftover after parsing attributes in process `syz.4.761'. [ 97.436738][ T7665] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 97.571571][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'. [ 97.867071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.957656][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 97.957671][ T29] audit: type=1400 audit(1738748332.586:463): avc: denied { ioctl } for pid=7688 comm="syz.3.793" path="socket:[15727]" dev="sockfs" ino=15727 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.968318][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.005862][ T29] audit: type=1400 audit(1738748332.596:464): avc: denied { bind } for pid=7694 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.038527][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.055088][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.066512][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.076656][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.103618][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.129527][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 98.157328][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 98.319400][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 98.343405][ T25] usb 3-1: config 0 has an invalid interface number: 215 but max is 0 [ 98.357885][ T25] usb 3-1: config 0 has no interface number 0 [ 98.370019][ T25] usb 3-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 98.386392][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.404655][ T25] usb 3-1: Product: syz [ 98.419074][ T25] usb 3-1: Manufacturer: syz [ 98.436364][ T25] usb 3-1: SerialNumber: syz [ 98.449743][ T25] usb 3-1: config 0 descriptor?? [ 98.475262][ T25] io_ti 3-1:0.215: required endpoints missing [ 98.720777][ T5866] usb 3-1: USB disconnect, device number 9 [ 98.746489][ T29] audit: type=1326 audit(1738748333.376:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 98.779977][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 98.836348][ T29] audit: type=1326 audit(1738748333.376:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 98.882011][ T29] audit: type=1326 audit(1738748333.416:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 98.936422][ T29] audit: type=1326 audit(1738748333.416:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 98.995478][ T29] audit: type=1326 audit(1738748333.416:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 99.028913][ T29] audit: type=1326 audit(1738748333.416:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 99.119573][ T29] audit: type=1326 audit(1738748333.416:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 99.174724][ T7754] tipc: Started in network mode [ 99.203625][ T7754] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 99.249187][ T7754] tipc: Enabled bearer , priority 10 [ 99.501991][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 99.677293][ T29] audit: type=1400 audit(1738748334.316:472): avc: denied { append } for pid=7773 comm="syz.3.831" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.013089][ T7792] mmap: syz.1.842 (7792) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.036411][ T7796] program syz.3.843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.366414][ T8] tipc: Node number set to 4269801488 [ 100.474069][ T8] kernel write not supported for file /sg0 (pid: 8 comm: kworker/0:0) [ 100.501886][ T7818] veth3: entered allmulticast mode [ 100.723932][ T7830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.857'. [ 101.227586][ T7860] vcan0: tx address claim with dest, not broadcast [ 101.901005][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 102.572527][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 102.680522][ T7933] netlink: 104 bytes leftover after parsing attributes in process `syz.4.907'. [ 103.144062][ T7961] netlink: 332 bytes leftover after parsing attributes in process `syz.2.920'. [ 103.165571][ T7961] netlink: 160 bytes leftover after parsing attributes in process `syz.2.920'. [ 103.170454][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 103.170466][ T29] audit: type=1400 audit(1738748337.806:483): avc: denied { write } for pid=7962 comm="syz.0.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.276424][ T29] audit: type=1400 audit(1738748337.846:484): avc: denied { read } for pid=7962 comm="syz.0.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.365679][ T29] audit: type=1400 audit(1738748337.996:485): avc: denied { bind } for pid=7973 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.413612][ T7975] delete_channel: no stack [ 103.416719][ T29] audit: type=1400 audit(1738748338.046:486): avc: denied { write } for pid=7975 comm="syz.0.926" path="socket:[16195]" dev="sockfs" ino=16195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 103.503916][ T29] audit: type=1400 audit(1738748338.126:487): avc: denied { create } for pid=7977 comm="syz.3.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.539816][ T29] audit: type=1400 audit(1738748338.136:488): avc: denied { write } for pid=7977 comm="syz.3.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.595786][ T7982] tap0: tun_chr_ioctl cmd 1074025678 [ 103.601229][ T7982] tap0: group set to 0 [ 103.859171][ T29] audit: type=1400 audit(1738748338.486:489): avc: denied { connect } for pid=7996 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.889683][ T29] audit: type=1400 audit(1738748338.516:490): avc: denied { write } for pid=7996 comm="syz.3.937" path="socket:[16549]" dev="sockfs" ino=16549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.924771][ T7999] netlink: 'syz.2.938': attribute type 2 has an invalid length. [ 104.325871][ T8021] netlink: 'syz.3.949': attribute type 25 has an invalid length. [ 104.358266][ T8021] netlink: 'syz.3.949': attribute type 7 has an invalid length. [ 104.386278][ T8021] netlink: 'syz.3.949': attribute type 7 has an invalid length. [ 104.394013][ T8021] netlink: 'syz.3.949': attribute type 10 has an invalid length. [ 104.437436][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 104.527733][ T8030] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 104.546871][ T29] audit: type=1400 audit(1738748339.166:491): avc: denied { load_policy } for pid=8029 comm="syz.2.953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 104.574702][ T8030] SELinux: failed to load policy [ 104.800864][ T8041] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 105.078191][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 105.184061][ T29] audit: type=1400 audit(1738748339.816:492): avc: denied { ioctl } for pid=8061 comm="syz.4.966" path="socket:[16644]" dev="sockfs" ino=16644 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.707567][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 105.867373][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 105.880101][ T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 105.891586][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.916837][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.932306][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.957634][ T8097] tipc: Started in network mode [ 105.959097][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.962507][ T8097] tipc: Node identity 2007ff, cluster identity 4711 [ 105.962520][ T8097] tipc: Node number set to 2099199 [ 106.001953][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.008828][ T8101] netlink: 'syz.3.985': attribute type 10 has an invalid length. [ 106.015472][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.063092][ T8101] team0: Port device netdevsim0 added [ 106.152431][ T8109] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 106.278830][ T25] usb 1-1: usb_control_msg returned -32 [ 106.284576][ T25] usbtmc 1-1:16.0: can't read capabilities [ 106.310406][ T25] usb 1-1: USB disconnect, device number 9 [ 106.323410][ T8117] netlink: 'syz.3.993': attribute type 11 has an invalid length. [ 106.727289][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 106.846990][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 107.083135][ T8171] can0: slcan on ttyS3. [ 107.088781][ T8173] batadv_slave_1: entered promiscuous mode [ 107.103558][ T8173] batadv_slave_1: left promiscuous mode [ 107.176924][ T8174] can0 (unregistered): slcan off ttyS3. [ 107.392283][ T8193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.573592][ T8256] 9p: Unknown Cache mode or invalid value m [ 108.696946][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 108.696960][ T29] audit: type=1400 audit(1738748343.326:494): avc: denied { setopt } for pid=8258 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.964233][ T29] audit: type=1400 audit(1738748343.596:495): avc: denied { write } for pid=8268 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.984998][ T5832] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 108.993161][ T5832] Bluetooth: hci0: command 0x0401 tx timeout [ 108.999690][ T29] audit: type=1400 audit(1738748343.596:496): avc: denied { read } for pid=8268 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.084956][ T29] audit: type=1400 audit(1738748343.706:497): avc: denied { getopt } for pid=8275 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.118776][ T8269] syz.1.1063 (8269) used greatest stack depth: 21104 bytes left [ 109.155466][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.294472][ T8291] macvlan2: entered promiscuous mode [ 109.301307][ T8291] bond0: entered promiscuous mode [ 109.327728][ T8291] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.350469][ T29] audit: type=1400 audit(1738748343.976:498): avc: denied { mount } for pid=8289 comm="syz.0.1074" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 109.470071][ T29] audit: type=1400 audit(1738748344.096:499): avc: denied { ioctl } for pid=8299 comm="syz.1.1075" path="socket:[16991]" dev="sockfs" ino=16991 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.613806][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1080'. [ 109.644618][ T8315] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 109.669306][ T8315] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 109.995214][ T29] audit: type=1400 audit(1738748344.626:500): avc: denied { bind } for pid=8333 comm="syz.0.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.118102][ T8342] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1096'. [ 110.173593][ T8344] netlink: 'syz.3.1097': attribute type 1 has an invalid length. [ 110.190637][ T8344] netlink: 134708 bytes leftover after parsing attributes in process `syz.3.1097'. [ 110.217135][ T5866] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.292559][ T29] audit: type=1326 audit(1738748344.926:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9bd8cde9 code=0x7ffc0000 [ 110.323066][ T29] audit: type=1326 audit(1738748344.926:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9bd8cde9 code=0x7ffc0000 [ 110.389232][ T29] audit: type=1326 audit(1738748344.956:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f1b9bd8cde9 code=0x7ffc0000 [ 110.456939][ T5866] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 110.466171][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.484930][ T5866] usb 5-1: Product: syz [ 110.491682][ T5866] usb 5-1: Manufacturer: syz [ 110.527624][ T5866] usb 5-1: SerialNumber: syz [ 110.549640][ T5866] usb 5-1: config 0 descriptor?? [ 110.800783][ T5866] usb 5-1: USB disconnect, device number 4 [ 111.107099][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 111.291760][ T46] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.313812][ T46] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.319276][ T8407] netlink: 'syz.1.1127': attribute type 10 has an invalid length. [ 111.331575][ T46] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.331635][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.368590][ T8374] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.379081][ T46] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.403937][ T8407] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 111.811571][ T5908] usb 3-1: USB disconnect, device number 10 [ 112.134438][ T8453] sch_tbf: peakrate 2646 is lower than or equals to rate 17014499898028217207 ! [ 112.424767][ T8467] netlink: 'syz.0.1156': attribute type 10 has an invalid length. [ 112.462148][ T8467] team0: Port device netdevsim0 added [ 112.566710][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 112.937929][ T8494] cgroup: fork rejected by pids controller in /syz4 [ 113.325954][ T5866] kernel write not supported for file /sg0 (pid: 5866 comm: kworker/0:4) [ 113.451605][ T8523] syz.2.1182: attempt to access beyond end of device [ 113.451605][ T8523] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 113.509927][ T8523] syz.2.1182: attempt to access beyond end of device [ 113.509927][ T8523] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 113.559608][ T65] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.569617][ T8523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 113.624784][ T8523] syz.2.1182: attempt to access beyond end of device [ 113.624784][ T8523] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 113.646921][ T8523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 113.672368][ T8523] syz.2.1182: attempt to access beyond end of device [ 113.672368][ T8523] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 113.709327][ T65] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.716208][ T8523] syz.2.1182: attempt to access beyond end of device [ 113.716208][ T8523] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 113.785832][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 113.785846][ T29] audit: type=1400 audit(1738748348.416:527): avc: denied { bind } for pid=8529 comm="syz.1.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 113.790101][ T8523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 113.840083][ T8523] syz.2.1182: attempt to access beyond end of device [ 113.840083][ T8523] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 113.875886][ T65] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.875893][ T8536] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 113.908017][ T8523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 113.919009][ T8536] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1187'. [ 113.934228][ T8523] syz.2.1182: attempt to access beyond end of device [ 113.934228][ T8523] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 113.997064][ T8523] syz.2.1182: attempt to access beyond end of device [ 113.997064][ T8523] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 114.018114][ T65] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.032601][ T8523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 114.087957][ T8523] syz.2.1182: attempt to access beyond end of device [ 114.087957][ T8523] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 114.140786][ T8523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 114.157075][ T8548] netlink: 'syz.1.1190': attribute type 1 has an invalid length. [ 114.179544][ T8523] syz.2.1182: attempt to access beyond end of device [ 114.179544][ T8523] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 114.216461][ T8523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 114.228935][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.236379][ T8523] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 114.239476][ T65] bridge_slave_1: left allmulticast mode [ 114.252644][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.261997][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.269913][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.281896][ T8523] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 114.291519][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 114.298890][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.317485][ T29] audit: type=1400 audit(1738748348.956:528): avc: denied { mounton } for pid=8552 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 114.339377][ T65] bridge_slave_1: left promiscuous mode [ 114.346468][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.363565][ T65] bridge_slave_0: left allmulticast mode [ 114.368829][ T8556] netlink: 'syz.1.1192': attribute type 10 has an invalid length. [ 114.373698][ T65] bridge_slave_0: left promiscuous mode [ 114.396677][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.596130][ T8566] xt_hashlimit: max too large, truncated to 1048576 [ 114.760618][ T65] bond0 (unregistering): left promiscuous mode [ 114.785699][ T65] bond0 (unregistering): Released all slaves [ 114.814013][ T8556] team0: Port device netdevsim0 added [ 114.978168][ T8576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.985589][ T8576] IPv6: NLM_F_CREATE should be set when creating new route [ 115.225500][ T8552] chnl_net:caif_netlink_parms(): no params data found [ 115.483468][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.520545][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.542574][ T8552] bridge_slave_0: entered allmulticast mode [ 115.549694][ T8552] bridge_slave_0: entered promiscuous mode [ 115.568354][ T8552] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.575478][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.596161][ T8552] bridge_slave_1: entered allmulticast mode [ 115.623113][ T8552] bridge_slave_1: entered promiscuous mode [ 115.639966][ T65] hsr_slave_0: left promiscuous mode [ 115.645757][ T65] hsr_slave_1: left promiscuous mode [ 115.659427][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.676362][ T46] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 115.680729][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.704988][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.715384][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.787661][ T65] veth1_macvtap: left promiscuous mode [ 115.793598][ T65] veth0_macvtap: left promiscuous mode [ 115.804525][ T65] veth1_vlan: left promiscuous mode [ 115.810100][ T65] veth0_vlan: left promiscuous mode [ 115.847596][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.866590][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.889590][ T46] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 115.908499][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.938778][ T46] usb 3-1: config 0 descriptor?? [ 115.956922][ T46] usbhid 3-1:0.0: can't add hid device: -22 [ 115.964286][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 116.161504][ T65] team0 (unregistering): Port device team_slave_1 removed [ 116.175633][ T8] usb 3-1: USB disconnect, device number 11 [ 116.204009][ T65] team0 (unregistering): Port device team_slave_0 removed [ 116.327953][ T5827] Bluetooth: hci1: command tx timeout [ 116.458123][ T8603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.535300][ T8552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.555345][ T8607] netlink: 'syz.0.1212': attribute type 178 has an invalid length. [ 116.555865][ T8552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.665692][ T8552] team0: Port device team_slave_0 added [ 116.718008][ T8552] team0: Port device team_slave_1 added [ 116.787407][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.815839][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.859607][ T8552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.898630][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.910440][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.940473][ T8552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.009950][ T8552] hsr_slave_0: entered promiscuous mode [ 117.016117][ T8552] hsr_slave_1: entered promiscuous mode [ 117.031106][ T8552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.048672][ T8552] Cannot create hsr debugfs directory [ 117.221477][ T8631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1225'. [ 117.247007][ T8631] netem: unknown loss type 13 [ 117.252123][ T8631] netem: change failed [ 117.296432][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1224'. [ 117.391802][ T8639] overlayfs: conflicting options: userxattr,metacopy=on [ 117.521297][ T8647] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1231'. [ 117.809982][ T8552] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.860084][ T8552] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.876342][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 117.903345][ T8552] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.929073][ T8552] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.029260][ T8] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 118.048782][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.072713][ T8] usb 3-1: Product: syz [ 118.091290][ T8] usb 3-1: Manufacturer: syz [ 118.105559][ T8] usb 3-1: SerialNumber: syz [ 118.133057][ T8] usb 3-1: config 0 descriptor?? [ 118.151385][ T8] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 118.182423][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 118.198707][ T8552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.244048][ T8552] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.272783][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.280829][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.319558][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.326693][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.416924][ T5827] Bluetooth: hci1: command tx timeout [ 118.467504][ T8681] sctp: [Deprecated]: syz.0.1246 (pid 8681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.467504][ T8681] Use struct sctp_sack_info instead [ 118.695185][ T8552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.705783][ T8693] syz.1.1251 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 118.767822][ T8] gspca_sunplus: reg_r err -71 [ 118.772719][ T8] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 118.783341][ T8] usb 3-1: USB disconnect, device number 12 [ 119.071858][ T8552] veth0_vlan: entered promiscuous mode [ 119.102525][ T8552] veth1_vlan: entered promiscuous mode [ 119.148039][ T8552] veth0_macvtap: entered promiscuous mode [ 119.158495][ T8552] veth1_macvtap: entered promiscuous mode [ 119.187455][ T8713] delete_channel: no stack [ 119.188825][ T29] audit: type=1400 audit(1738748353.826:529): avc: denied { ioctl } for pid=8713 comm="syz.1.1258" path="socket:[18892]" dev="sockfs" ino=18892 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 119.235274][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.279865][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.319331][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.346454][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.409383][ T8552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.432334][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.443557][ T8724] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 119.443557][ T8724] The task syz.2.1271 (8724) triggered the difference, watch for misbehavior. [ 119.465021][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.486035][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.515164][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.541492][ T8552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.584165][ T8552] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.603606][ T8552] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.627258][ T8552] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.647120][ T8552] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.876339][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.911511][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.013890][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.027936][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.051696][ T29] audit: type=1400 audit(1738748354.686:530): avc: denied { mounton } for pid=8552 comm="syz-executor" path="/root/syzkaller.pq9Kb9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 120.280263][ T29] audit: type=1400 audit(1738748354.906:531): avc: denied { ioctl } for pid=8741 comm="syz.2.1267" path="socket:[20375]" dev="sockfs" ino=20375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.361926][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1268'. [ 120.497106][ T5827] Bluetooth: hci1: command tx timeout [ 120.754455][ T8774] capability: warning: `syz.3.1283' uses 32-bit capabilities (legacy support in use) [ 121.259485][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1294'. [ 121.268577][ T8796] hsr0: entered promiscuous mode [ 121.268806][ T8796] macsec1: entered allmulticast mode [ 121.268833][ T8796] hsr0: entered allmulticast mode [ 121.268846][ T8796] hsr_slave_0: entered allmulticast mode [ 121.268859][ T8796] hsr_slave_1: entered allmulticast mode [ 121.296837][ T8796] hsr0: left allmulticast mode [ 121.304773][ T8796] hsr_slave_0: left allmulticast mode [ 121.318330][ T8796] hsr_slave_1: left allmulticast mode [ 121.770007][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 122.046346][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 122.131740][ T29] audit: type=1400 audit(1738748356.766:532): avc: denied { bind } for pid=8838 comm="syz.4.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 122.197880][ T8] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.206433][ T29] audit: type=1400 audit(1738748356.766:533): avc: denied { name_bind } for pid=8838 comm="syz.4.1313" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 122.216679][ T8] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 122.299051][ T29] audit: type=1400 audit(1738748356.766:534): avc: denied { node_bind } for pid=8838 comm="syz.4.1313" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 122.310062][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.352858][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 122.374312][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.394928][ T8] usb 4-1: config 0 descriptor?? [ 122.418692][ T8828] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.500982][ T29] audit: type=1400 audit(1738748357.136:535): avc: denied { create } for pid=8851 comm="syz.0.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 122.566970][ T5827] Bluetooth: hci1: command tx timeout [ 122.574728][ T29] audit: type=1400 audit(1738748357.136:536): avc: denied { connect } for pid=8851 comm="syz.0.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 122.643683][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 122.650640][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 122.667050][ T8] usb 4-1: USB disconnect, device number 7 [ 122.705701][ T8862] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1324'. [ 123.359767][ T29] audit: type=1400 audit(1738748357.996:537): avc: denied { ioctl } for pid=8908 comm="syz.2.1346" path="socket:[19312]" dev="sockfs" ino=19312 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.365711][ T8911] xt_hashlimit: max too large, truncated to 1048576 [ 123.427572][ T8911] No such timeout policy "syz1" [ 123.546392][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.550732][ T8917] @: renamed from vlan0 (while UP) [ 123.597556][ T29] audit: type=1400 audit(1738748358.236:538): avc: denied { map } for pid=8915 comm="syz.4.1350" path="/proc/43/net/vlan/vlan0" dev="proc" ino=4026533104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.749714][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.772713][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 123.792561][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.817826][ T8] usb 4-1: config 0 descriptor?? [ 123.832006][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 123.866951][ T5908] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 124.050104][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 7278, setting to 64 [ 124.072716][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.125716][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 124.139299][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.161823][ T5908] usb 3-1: config 0 descriptor?? [ 124.187860][ T8920] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.198832][ T5908] hub 3-1:0.0: USB hub found [ 124.232115][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 124.431263][ T5908] hub 3-1:0.0: 1 port detected [ 124.453856][ T8] pwc: recv_control_msg error -71 req 02 val 2c00 [ 124.461339][ T8] pwc: recv_control_msg error -71 req 04 val 1000 [ 124.469285][ T8] pwc: recv_control_msg error -71 req 04 val 1300 [ 124.485752][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 124.498959][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 124.510771][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 124.528282][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 124.555956][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 124.584757][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 124.600755][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 124.609655][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 124.617445][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 124.624415][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 124.632416][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 124.646763][ T8] pwc: Registered as video103. [ 124.653429][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 124.668364][ T8] usb 4-1: USB disconnect, device number 8 [ 124.695529][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 124.695544][ T29] audit: type=1400 audit(1738748359.326:540): avc: denied { read } for pid=8978 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.845482][ T5908] usb 3-1: USB disconnect, device number 13 [ 125.410951][ T29] audit: type=1400 audit(1738748360.046:541): avc: denied { accept } for pid=9020 comm="syz.3.1377" lport=33239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.744173][ T9036] bpf: Bad value for 'uid' [ 125.862458][ T9041] block device autoloading is deprecated and will be removed. [ 125.917656][ T9046] SELinux: Context system_u:object_r:newrole_exec_t:s0 is not valid (left unmapped). [ 125.934625][ T9048] netlink: 900 bytes leftover after parsing attributes in process `syz.1.1387'. [ 125.952893][ T29] audit: type=1400 audit(1738748360.586:542): avc: denied { relabelto } for pid=9045 comm="syz.4.1389" name="control" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:newrole_exec_t:s0" [ 126.016317][ T29] audit: type=1400 audit(1738748360.586:543): avc: denied { associate } for pid=9045 comm="syz.4.1389" name="control" dev="tmpfs" ino=173 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:newrole_exec_t:s0" [ 126.031128][ T9052] netlink: 'syz.0.1392': attribute type 1 has an invalid length. [ 126.049219][ T29] audit: type=1400 audit(1738748360.636:544): avc: denied { rmdir } for pid=8552 comm="syz-executor" name="control" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:newrole_exec_t:s0" [ 126.093638][ T9052] netlink: 'syz.0.1392': attribute type 2 has an invalid length. [ 126.165029][ T29] audit: type=1400 audit(1738748360.686:545): avc: denied { create } for pid=9053 comm="syz.3.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.207215][ T29] audit: type=1400 audit(1738748360.726:546): avc: denied { setopt } for pid=9053 comm="syz.3.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.288526][ T29] audit: type=1400 audit(1738748360.726:547): avc: denied { ioctl } for pid=9053 comm="syz.3.1391" path="socket:[21538]" dev="sockfs" ino=21538 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.615311][ T9082] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 126.880336][ T9091] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1409'. [ 127.268026][ T9111] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1416'. [ 127.449386][ T29] audit: type=1400 audit(1738748362.086:548): avc: denied { name_bind 0x1000000 } for pid=9118 comm="syz.2.1421" path="socket:[20886]" dev="sockfs" ino=20886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.543652][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 127.578822][ T29] audit: type=1400 audit(1738748362.216:549): avc: denied { mount } for pid=9129 comm="syz.3.1429" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 127.930539][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1442'. [ 128.202888][ T9179] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 128.279828][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 128.871280][ T9225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1473'. [ 129.493885][ T9258] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1488'. [ 129.516445][ T5908] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 129.686549][ T5866] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.697266][ T5908] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 129.707429][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 129.715504][ T5908] usb 4-1: Product: syz [ 129.722697][ T5908] usb 4-1: Manufacturer: syz [ 129.727526][ T5908] usb 4-1: SerialNumber: syz [ 129.737295][ T5908] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 129.896333][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 129.902928][ T5866] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.912587][ T5866] usb 5-1: config 179 has no interface number 0 [ 129.918996][ T5866] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 129.946358][ T5908] vp7045: USB control message 'out' went wrong. [ 129.953209][ T5866] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 129.975031][ T5908] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 129.986810][ T5866] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.006560][ T5908] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 130.019079][ T5866] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 130.040540][ T5908] usb 4-1: USB disconnect, device number 9 [ 130.076961][ T9277] vxcan2: entered allmulticast mode [ 130.104202][ T5866] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.132285][ T5866] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 130.175320][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.204644][ T9254] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 130.391915][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 130.391929][ T29] audit: type=1400 audit(1738748365.026:552): avc: denied { bind } for pid=9286 comm="syz.2.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.452644][ T5908] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input23 [ 130.654837][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 130.663173][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 130.672098][ T5908] usb 5-1: USB disconnect, device number 5 [ 130.682932][ T5908] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 130.739146][ T9297] team0: No ports can be present during mode change [ 130.857348][ T5866] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 131.029262][ T5866] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.056503][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.070219][ T5866] usb 3-1: Product: syz [ 131.074421][ T5866] usb 3-1: Manufacturer: syz [ 131.082747][ T5866] usb 3-1: SerialNumber: syz [ 131.093969][ T5866] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 131.121771][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.126420][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 131.221984][ T29] audit: type=1326 audit(1738748365.856:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 131.277136][ T29] audit: type=1326 audit(1738748365.856:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 131.346336][ T29] audit: type=1326 audit(1738748365.856:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 131.395360][ T29] audit: type=1326 audit(1738748365.856:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 131.469259][ T9331] netlink: 'syz.4.1522': attribute type 5 has an invalid length. [ 131.543573][ T46] usb 3-1: USB disconnect, device number 14 [ 131.891114][ T29] audit: type=1400 audit(1738748366.526:557): avc: denied { ioctl } for pid=9356 comm="syz.3.1535" path="mnt:[4026532834]" dev="nsfs" ino=4026532834 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 132.010343][ T9363] pim6reg: entered allmulticast mode [ 132.023266][ T9363] pim6reg: left allmulticast mode [ 132.169786][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 132.184863][ T8] ath9k_htc: Failed to initialize the device [ 132.199447][ T46] usb 3-1: ath9k_htc: USB layer deinitialized [ 132.424911][ T9391] sctp: [Deprecated]: syz.3.1555 (pid 9391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.424911][ T9391] Use struct sctp_sack_info instead [ 132.570624][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.577847][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.615440][ T9405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1559'. [ 132.855183][ T29] audit: type=1400 audit(1738748367.476:558): avc: denied { map } for pid=9412 comm="syz.4.1563" path="socket:[21495]" dev="sockfs" ino=21495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.923096][ T9423] netlink: 'syz.0.1569': attribute type 12 has an invalid length. [ 132.931676][ T9423] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1569'. [ 133.016052][ T29] audit: type=1400 audit(1738748367.636:559): avc: denied { getopt } for pid=9426 comm="syz.4.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 133.067761][ T9429] vxcan1: tx address claim with dest, not broadcast [ 133.333979][ T9446] 9pnet_fd: Insufficient options for proto=fd [ 133.600343][ T29] audit: type=1400 audit(1738748368.236:560): avc: denied { mount } for pid=9464 comm="syz.1.1589" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 133.787442][ T9480] tipc: Started in network mode [ 133.795163][ T9480] tipc: Node identity ac141441, cluster identity 4711 [ 133.804917][ T9480] tipc: Enabled bearer , priority 10 [ 133.997940][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 134.265597][ T9514] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 134.397220][ T29] audit: type=1326 audit(1738748368.996:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.2.1613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4bb38cde9 code=0x0 [ 134.693548][ T9534] @: renamed from vlan0 (while UP) [ 134.916977][ T5825] tipc: Node number set to 2886997057 [ 134.986969][ T9549] syz.1.1627 (9549) used greatest stack depth: 20000 bytes left [ 135.775934][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 135.775948][ T29] audit: type=1400 audit(1738748370.406:564): avc: denied { mount } for pid=9603 comm="syz.0.1651" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 135.854062][ T29] audit: type=1400 audit(1738748370.426:565): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 135.995154][ T9607] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 136.036362][ T9607] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 136.383375][ T29] audit: type=1400 audit(1738748371.016:566): avc: denied { read } for pid=9619 comm="syz.0.1658" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 136.463009][ T9624] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 136.789544][ T29] audit: type=1400 audit(1738748371.426:567): avc: denied { setopt } for pid=9637 comm="syz.2.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 136.960339][ T29] audit: type=1400 audit(1738748371.596:568): avc: denied { watch watch_reads } for pid=9649 comm="syz.2.1672" path="/278/file0" dev="tmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.380487][ T29] audit: type=1326 audit(1738748372.016:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91378cde9 code=0x7fc00000 [ 137.421149][ T29] audit: type=1400 audit(1738748372.056:570): avc: denied { mount } for pid=9677 comm="syz.4.1685" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 137.573492][ T9684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1687'. [ 137.768571][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'. [ 137.943783][ T29] audit: type=1400 audit(1738748372.576:571): avc: denied { ioctl } for pid=9709 comm="syz.0.1700" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 138.076422][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 138.248173][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 138.266307][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.276182][ T25] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 138.289308][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.298913][ T25] usb 3-1: config 0 descriptor?? [ 138.407895][ T9742] netlink: 'syz.0.1714': attribute type 18 has an invalid length. [ 138.418721][ T9742] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.427924][ T9742] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.436813][ T9742] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.445827][ T9742] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.476452][ T46] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.600107][ T9748] futex_wake_op: syz.0.1717 tries to shift op by -1; fix this program [ 138.627343][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 138.653671][ T46] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 138.662455][ T46] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.686343][ T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.696112][ T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.725484][ T25] sony 0003:054C:0268.0009: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 138.740051][ T46] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.753645][ T25] sony 0003:054C:0268.0009: failed to claim input [ 138.761899][ T46] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.774656][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.876072][ T29] audit: type=1400 audit(1738748373.506:572): avc: denied { listen } for pid=9755 comm="syz.0.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 138.957139][ T29] audit: type=1326 audit(1738748373.576:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9721 comm="syz.3.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91378cde9 code=0x7fc00000 [ 138.988419][ T5825] usb 3-1: USB disconnect, device number 15 [ 139.014052][ T46] usb 5-1: GET_CAPABILITIES returned 0 [ 139.026335][ T46] usbtmc 5-1:16.0: can't read capabilities [ 139.236502][ T8] usb 5-1: USB disconnect, device number 6 [ 139.518222][ T9784] overlayfs: conflicting options: userxattr,verity=on [ 139.613197][ T9787] capability: warning: `syz.2.1735' uses deprecated v2 capabilities in a way that may be insecure [ 139.674917][ T9789] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 140.132439][ T9828] dummy0: vlans aren't supported yet for dev_uc|mc_add() [ 140.214168][ T9834] netlink: 352 bytes leftover after parsing attributes in process `syz.2.1757'. [ 140.353157][ T9845] ALSA: mixer_oss: invalid OSS volume '' [ 140.389272][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.396677][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.408438][ T9849] bridge0: entered promiscuous mode [ 140.516305][ T5825] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.684858][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 140.701771][ T5825] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 140.710076][ T5825] usb 4-1: config 0 has no interface number 0 [ 140.725800][ T5825] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 140.739210][ T9870] 9pnet_fd: Insufficient options for proto=fd [ 140.745575][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.774132][ T5825] usb 4-1: Product: syz [ 140.784235][ T5825] usb 4-1: Manufacturer: syz [ 140.801005][ T5825] usb 4-1: SerialNumber: syz [ 140.811654][ T5825] usb 4-1: config 0 descriptor?? [ 140.831352][ T5825] smsc95xx v2.0.0 [ 141.437280][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 141.437296][ T29] audit: type=1326 audit(1738748376.076:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 141.471946][ T29] audit: type=1326 audit(1738748376.106:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 141.508829][ T29] audit: type=1326 audit(1738748376.106:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 141.548965][ T29] audit: type=1326 audit(1738748376.176:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 141.572296][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.596078][ T29] audit: type=1326 audit(1738748376.176:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 141.626064][ T29] audit: type=1326 audit(1738748376.176:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 141.655504][ T5825] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 141.671483][ T5825] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 141.681890][ T29] audit: type=1326 audit(1738748376.176:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 141.721379][ T5825] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 141.734304][ T5825] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 141.744171][ T29] audit: type=1326 audit(1738748376.176:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 141.770916][ T5825] usb 4-1: USB disconnect, device number 10 [ 141.780125][ T29] audit: type=1326 audit(1738748376.176:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 141.796644][ T9910] sctp: [Deprecated]: syz.2.1791 (pid 9910) Use of int in max_burst socket option. [ 141.796644][ T9910] Use struct sctp_assoc_value instead [ 141.876416][ T29] audit: type=1326 audit(1738748376.176:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25e58cde9 code=0x7ffc0000 [ 141.991007][ T9920] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 142.102391][ T9930] input: syz0 as /devices/virtual/input/input26 [ 142.167998][ T5949] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 142.340229][ T5949] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 142.350609][ T5949] usb 5-1: config 0 has no interface number 0 [ 142.360008][ T5949] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.393633][ T5949] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 142.409330][ T5949] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 142.423257][ T5949] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 142.439806][ T5949] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 142.453087][ T5949] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 142.470462][ T5949] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 142.480166][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.496998][ T5949] usb 5-1: config 0 descriptor?? [ 142.502737][ T9916] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.514597][ T9916] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.530411][ T5949] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 142.654450][ T9960] random: crng reseeded on system resumption [ 142.846418][ T5949] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.886641][ T5825] usb 5-1: USB disconnect, device number 7 [ 142.895629][ T5825] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 143.006469][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 143.012657][ T5949] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 143.020840][ T5949] usb 1-1: config 0 has no interface number 0 [ 143.028655][ T5949] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 143.038050][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.046042][ T5949] usb 1-1: Product: syz [ 143.051865][ T5949] usb 1-1: Manufacturer: syz [ 143.057434][ T5949] usb 1-1: SerialNumber: syz [ 143.063875][ T5949] usb 1-1: config 0 descriptor?? [ 143.156303][ T5869] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 143.309066][ T5869] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 143.318300][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.326803][ T5869] usb 3-1: Product: syz [ 143.330982][ T5869] usb 3-1: Manufacturer: syz [ 143.335573][ T5869] usb 3-1: SerialNumber: syz [ 143.341557][ T5869] usb 3-1: config 0 descriptor?? [ 143.487294][ T9958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.501784][ T9958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.528534][ T5949] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 143.534949][ T5949] usb 1-1: No valid video chain found. [ 143.561958][ T5949] usb 1-1: USB disconnect, device number 10 [ 143.585723][ T5825] usb 3-1: USB disconnect, device number 16 [ 143.755279][T10000] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1834'. [ 144.136559][ T5866] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.302015][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.334215][ T5866] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.354414][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.378743][ T5866] usb 5-1: config 0 descriptor?? [ 144.470019][T10035] IPVS: Scheduler module ip_vs_ not found [ 144.594158][ T5866] usbhid 5-1:0.0: can't add hid device: -71 [ 144.605970][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 144.624477][ T5866] usb 5-1: USB disconnect, device number 8 [ 145.175740][T10081] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 145.187157][T10081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.424269][T10096] Process accounting resumed [ 145.445717][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'. [ 145.464054][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.472349][T10098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.506783][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.527950][T10098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.788445][T10121] bridge0: port 3(syz_tun) entered blocking state [ 145.795544][T10121] bridge0: port 3(syz_tun) entered disabled state [ 145.802603][T10121] syz_tun: entered allmulticast mode [ 145.809735][T10121] syz_tun: entered promiscuous mode [ 145.911313][T10127] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 145.956459][ T5866] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 146.048045][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 146.109702][ T5866] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 146.126162][ T5866] usb 3-1: config 0 has no interface number 0 [ 146.143427][ T5866] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.171612][ T5866] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.212848][ T5866] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 146.224411][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.242896][ T5866] usb 3-1: config 0 descriptor?? [ 146.539411][T10164] Attempt to restore checkpoint with obsolete wellknown handles [ 146.555838][T10166] team0: entered promiscuous mode [ 146.591497][T10166] team_slave_0: entered promiscuous mode [ 146.591691][T10166] team_slave_1: entered promiscuous mode [ 146.591774][T10166] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 146.592960][T10165] team0: left promiscuous mode [ 146.593037][T10165] team_slave_0: left promiscuous mode [ 146.593248][T10165] team_slave_1: left promiscuous mode [ 146.593360][T10165] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 146.673220][ T5866] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x7 [ 146.673258][ T5866] logitech-djreceiver 0003:046D:C71B.000A: item fetching failed at offset 5/7 [ 146.673590][ T5866] logitech-djreceiver 0003:046D:C71B.000A: logi_dj_probe: parse failed [ 146.673632][ T5866] logitech-djreceiver 0003:046D:C71B.000A: probe with driver logitech-djreceiver failed with error -22 [ 146.890613][ T5825] usb 3-1: USB disconnect, device number 17 [ 147.169502][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.245039][T10202] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 147.254489][T10202] tipc: Enabled bearer , priority 10 [ 147.327860][ T46] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.339317][ T46] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 147.350831][ T46] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.369382][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.380380][T10187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.401102][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.745676][ T46] usb 1-1: USB disconnect, device number 11 [ 147.927138][ T5827] Bluetooth: hci0: command tx timeout [ 148.017225][T10247] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1952'. [ 148.686361][ T5825] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.801290][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 148.801305][ T29] audit: type=1400 audit(1738748383.436:689): avc: denied { write } for pid=10298 comm="syz.2.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.848790][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.865191][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.899692][ T5825] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 148.910146][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.924390][ T5825] usb 5-1: config 0 descriptor?? [ 148.967560][ T29] audit: type=1400 audit(1738748383.606:690): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 149.086958][ T29] audit: type=1400 audit(1738748383.716:691): avc: denied { ioctl } for pid=10310 comm="syz.0.1982" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.336807][ T5825] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 149.343655][ T5825] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 149.368652][ T5825] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 149.375486][ T5825] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 149.391812][ T5825] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 149.415221][ T5825] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 149.432846][ T5825] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 149.456406][ T5825] ryos 0003:1E7D:31CE.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.4-1/input0 [ 149.556039][ T5869] usb 5-1: USB disconnect, device number 9 [ 149.659847][T10344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1996'. [ 149.746634][ T5825] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 149.917881][ T5825] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.929815][ T5825] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.939815][ T5825] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.948979][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.956931][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.977467][T10336] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 149.986079][ T5825] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.007581][ T5869] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 150.118350][ T5866] usb 1-1: too many configurations: 15, using maximum allowed: 8 [ 150.137337][ T5866] usb 1-1: config index 0 descriptor too short (expected 64853, got 72) [ 150.157353][ T5866] usb 1-1: config index 1 descriptor too short (expected 64853, got 72) [ 150.166722][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 150.178117][ T5866] usb 1-1: config index 2 descriptor too short (expected 64853, got 72) [ 150.195991][ T5869] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.213126][ T5869] usb 4-1: config 179 has no interface number 0 [ 150.220069][ T8] usb 3-1: USB disconnect, device number 18 [ 150.226272][ T5866] usb 1-1: config index 3 descriptor too short (expected 64853, got 72) [ 150.239904][ T5869] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 150.256864][ T5866] usb 1-1: config index 4 descriptor too short (expected 64853, got 72) [ 150.259548][ T29] audit: type=1400 audit(1738748384.886:692): avc: denied { listen } for pid=10369 comm="syz.4.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.267066][ T5869] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 150.298873][ T5869] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.310915][ T5866] usb 1-1: config index 5 descriptor too short (expected 64853, got 72) [ 150.328987][ T5866] usb 1-1: config index 6 descriptor too short (expected 64853, got 72) [ 150.339440][ T5869] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.353891][ T5869] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 150.363684][ T5866] usb 1-1: config index 7 descriptor too short (expected 64853, got 72) [ 150.374444][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.385143][ T5866] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 150.394693][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.405213][ T5866] usb 1-1: Product: syz [ 150.409781][T10349] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 150.420190][ T5866] usb 1-1: Manufacturer: syz [ 150.430513][ T5866] usb 1-1: SerialNumber: syz [ 150.440534][ T5866] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 150.456926][ T5869] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 150.670132][ T5825] usb 4-1: USB disconnect, device number 11 [ 150.670135][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 150.741721][ T5908] usb 1-1: USB disconnect, device number 12 [ 150.804110][T10393] overlayfs: missing 'workdir' [ 150.971079][T10401] random: crng reseeded on system resumption [ 150.978665][ T29] audit: type=1400 audit(1738748385.606:693): avc: denied { write } for pid=10400 comm="syz.4.2023" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 151.037390][ T29] audit: type=1400 audit(1738748385.646:694): avc: denied { accept } for pid=10404 comm="syz.2.2024" path="socket:[25959]" dev="sockfs" ino=25959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.482840][ T29] audit: type=1326 audit(1738748386.116:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 151.527091][ T5869] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 151.538909][ T29] audit: type=1326 audit(1738748386.146:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 151.554211][ T5869] ath9k_htc: Failed to initialize the device [ 151.592057][ T29] audit: type=1326 audit(1738748386.146:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e09b8cde9 code=0x7ffc0000 [ 151.596477][ T5908] usb 1-1: ath9k_htc: USB layer deinitialized [ 152.348927][T10495] macvlan0: entered allmulticast mode [ 152.400203][T10495] veth1_vlan: entered allmulticast mode [ 152.414167][T10495] macvlan0: left allmulticast mode [ 152.438278][T10495] veth1_vlan: left allmulticast mode [ 152.657568][T10519] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 152.701279][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2081'. [ 152.832459][T10537] input: syz1 as /devices/virtual/input/input27 [ 153.002589][ T29] audit: type=1400 audit(1738748387.636:698): avc: denied { read } for pid=10532 comm="syz.3.2084" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 153.095378][T10536] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.119680][T10536] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.143278][T10536] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.154379][T10536] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.170372][T10536] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.182394][T10536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.189002][T10536] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 153.198952][T10536] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 153.210768][T10536] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.217788][T10536] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.224422][T10536] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.242357][T10561] fuse: Bad value for 'fd' [ 153.363664][T10568] netem: incorrect gi model size [ 153.380620][T10568] netem: change failed [ 153.496378][ T5869] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 153.687121][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 153.710148][ T5869] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 153.726860][ T5869] usb 5-1: config 0 has no interface number 0 [ 153.743466][ T5869] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 153.758095][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.780306][ T5869] usb 5-1: Product: syz [ 153.784583][ T5869] usb 5-1: Manufacturer: syz [ 153.794355][ T5869] usb 5-1: SerialNumber: syz [ 153.813597][ T5869] usb 5-1: config 0 descriptor?? [ 153.829658][ T5869] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 154.036850][ T5869] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 154.072506][ T5869] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 154.112603][T10603] IPVS: Error joining to the multicast group [ 154.186630][T10605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.194769][T10605] bond0: (slave bond1): Enslaving as an active interface with an up link [ 154.255390][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 35 [ 154.268168][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2123'. [ 154.287716][T10612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.308014][T10614] macsec0: entered promiscuous mode [ 154.465335][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 154.474092][ T5869] usb 5-1: USB disconnect, device number 10 [ 154.486956][ T5869] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 154.517595][ T5869] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 154.537245][ T5869] quatech2 5-1:0.51: device disconnected [ 154.846592][T10649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.855358][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 154.855373][ T29] audit: type=1400 audit(1738748389.485:703): avc: denied { mount } for pid=10651 comm="syz.1.2141" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 154.969557][ T29] audit: type=1400 audit(1738748389.595:704): avc: denied { open } for pid=10653 comm="syz.2.2142" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 155.044933][ T29] audit: type=1400 audit(1738748389.635:705): avc: denied { ioctl } for pid=10653 comm="syz.2.2142" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 155.126347][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.206835][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 155.208224][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 155.287429][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 155.335910][T10681] netem: change failed [ 155.388884][ T29] audit: type=1400 audit(1738748390.025:706): avc: denied { write } for pid=10685 comm="syz.4.2157" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.450319][ T46] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.453248][T10690] netlink: 'syz.1.2159': attribute type 46 has an invalid length. [ 155.511473][T10690] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2159'. [ 155.638886][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 155.662602][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.674199][ T46] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 155.686902][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.699824][ T46] usb 1-1: config 0 descriptor?? [ 155.746379][ T5157] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 155.804414][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2170'. [ 155.816012][T10713] netlink: 'syz.3.2170': attribute type 1 has an invalid length. [ 155.829019][T10713] netlink: 'syz.3.2170': attribute type 2 has an invalid length. [ 155.916608][ T5157] usb 3-1: Using ep0 maxpacket: 16 [ 155.924364][ T5157] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.941804][ T5157] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.959656][ T5157] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 155.988202][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.007887][ T5157] usb 3-1: config 0 descriptor?? [ 156.014172][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 156.025906][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 156.061130][ T46] usb 1-1: USB disconnect, device number 13 [ 156.081869][T10727] pim6reg: entered allmulticast mode [ 156.190245][ T29] audit: type=1400 audit(1738748390.825:707): avc: denied { append } for pid=10735 comm="syz.4.2181" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 156.420813][T10752] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.2188'. [ 156.433915][ T5157] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 156.443706][ T5157] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 156.452541][ T5157] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 156.460254][ T5157] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 156.468083][ T5157] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 156.481734][ T5157] waterforce 0003:1044:7A4D.000C: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0 [ 156.569888][ T5157] waterforce 0003:1044:7A4D.000C: fw version request failed with -38 [ 156.610676][ T29] audit: type=1400 audit(1738748391.245:708): avc: denied { read } for pid=10763 comm="syz.3.2193" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.637275][ T29] audit: type=1400 audit(1738748391.245:709): avc: denied { open } for pid=10763 comm="syz.3.2193" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.672209][ T5157] usb 3-1: USB disconnect, device number 19 [ 156.684408][ T29] audit: type=1400 audit(1738748391.245:710): avc: denied { ioctl } for pid=10763 comm="syz.3.2193" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.946482][ T46] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 156.967836][ T5869] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 157.083240][ T29] audit: type=1400 audit(1738748391.715:711): avc: denied { getopt } for pid=10772 comm="syz.1.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.105075][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 157.113296][ T46] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.123760][ T46] usb 4-1: config 0 has no interface number 0 [ 157.132195][ T46] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 157.142357][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.150407][ T46] usb 4-1: Product: syz [ 157.154720][ T46] usb 4-1: Manufacturer: syz [ 157.159319][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 157.166069][ T5869] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 157.169978][ T46] usb 4-1: SerialNumber: syz [ 157.175302][ T5869] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 157.197851][ T46] usb 4-1: config 0 descriptor?? [ 157.199000][ T5869] usb 1-1: config 0 has no interface number 0 [ 157.204720][ T46] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 157.218795][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.225639][ T46] usb 4-1: selecting invalid altsetting 1 [ 157.232570][ T46] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 157.244891][ T46] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 157.255762][ T46] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 157.264984][ T46] usb 4-1: media controller created [ 157.276544][ T5869] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.281084][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.298598][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 157.298605][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.326777][ T5869] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 157.368432][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 157.378532][ T5869] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.400488][ T5869] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 157.429890][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 157.467617][ T5869] usb 1-1: Product: syz [ 157.490195][ T5869] usb 1-1: config 0 descriptor?? [ 157.529763][T10771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 157.641276][ T46] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 157.659385][ T46] zl10353_read_register: readreg error (reg=127, ret==-71) [ 157.674633][ T29] audit: type=1400 audit(1738748392.305:712): avc: denied { setopt } for pid=10792 comm="syz.2.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 157.697539][ T46] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 157.745740][ T46] usb 4-1: USB disconnect, device number 12 [ 158.158350][ T5869] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input28 [ 158.375864][ T5869] usb 1-1: USB disconnect, device number 14 [ 158.381859][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 158.679632][T10847] netlink: 'syz.2.2230': attribute type 5 has an invalid length. [ 158.728980][T10849] 9pnet_fd: Insufficient options for proto=fd [ 159.124376][T10865] delete_channel: no stack [ 159.287337][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.335706][T10870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2240'. [ 159.376486][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.446384][ T5827] Bluetooth: hci1: command 0x0405 tx timeout [ 159.629783][T10882] netlink: 'syz.0.2245': attribute type 5 has an invalid length. [ 159.771553][T10902] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.2255'. [ 159.789975][T10902] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 159.805512][T10901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2253'. [ 159.916633][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 159.916651][ T29] audit: type=1400 audit(1738748394.535:715): avc: denied { shutdown } for pid=10903 comm="syz.1.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.307710][T10959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.325764][T10959] bond0: (slave bond1): Enslaving as an active interface with an up link [ 161.526943][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 161.636053][T10977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.669568][T10977] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 162.066362][ T5908] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 162.096540][ T46] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 162.216482][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 162.225486][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 162.237367][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.247725][ T5908] usb 3-1: config 0 descriptor?? [ 162.268085][ T46] usb 1-1: config 0 has no interfaces? [ 162.273884][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 162.294637][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.306180][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 267.313184][ C1] rcu: 0-...!: (0 ticks this GP) idle=e15c/1/0x4000000000000000 softirq=30671/30671 fqs=0 [ 267.324227][ C1] rcu: (detected by 1, t=10502 jiffies, g=26653, q=332 ncpus=2) [ 267.331950][ C1] Sending NMI from CPU 1 to CPUs 0: [ 267.331975][ C0] NMI backtrace for cpu 0 [ 267.331985][ C0] CPU: 0 UID: 0 PID: 5816 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 267.331999][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 267.332007][ C0] RIP: 0010:preempt_count_sub+0x5a/0x160 [ 267.332036][ C0] Code: 85 df 00 00 00 8b 0d 95 64 03 19 85 c9 75 1b 65 8b 05 32 e5 7b 7e 89 c2 81 e2 ff ff ff 7f 39 d3 7f 17 81 fb fe 00 00 00 76 71 db 65 01 1d 15 e5 7b 7e 5b c3 cc cc cc cc 90 e8 b1 34 39 03 85 [ 267.332048][ C0] RSP: 0018:ffffc90000007d18 EFLAGS: 00000002 [ 267.332058][ C0] RAX: 0000000080010002 RBX: 0000000000000001 RCX: 0000000000000000 [ 267.332066][ C0] RDX: 0000000000010002 RSI: 0000000000000004 RDI: 0000000000000001 [ 267.332074][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: fffffbfff355b448 [ 267.332082][ C0] R10: ffffffff9aada243 R11: 0000000000000001 R12: 0000000000000001 [ 267.332089][ C0] R13: dffffc0000000000 R14: ffff8880320c5340 R15: 1ffff92000000faa [ 267.332098][ C0] FS: 000055558f8fe500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 267.332111][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.332120][ C0] CR2: 00007f7e09d762d8 CR3: 000000006158a000 CR4: 00000000003526f0 [ 267.332128][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 267.332135][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 267.332143][ C0] Call Trace: [ 267.332149][ C0] [ 267.332154][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 267.332173][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 267.332189][ C0] ? nmi_handle+0x1ac/0x5d0 [ 267.332208][ C0] ? preempt_count_sub+0x5a/0x160 [ 267.332225][ C0] ? default_do_nmi+0x6a/0x160 [ 267.332241][ C0] ? exc_nmi+0x170/0x1e0 [ 267.332256][ C0] ? end_repeat_nmi+0xf/0x53 [ 267.332276][ C0] ? preempt_count_sub+0x5a/0x160 [ 267.332293][ C0] ? preempt_count_sub+0x5a/0x160 [ 267.332310][ C0] ? preempt_count_sub+0x5a/0x160 [ 267.332327][ C0] [ 267.332331][ C0] [ 267.332335][ C0] _raw_spin_unlock_irqrestore+0x3b/0x80 [ 267.332354][ C0] debug_object_deactivate+0x1ef/0x370 [ 267.332369][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 267.332383][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 267.332397][ C0] ? __pfx_advance_sched+0x10/0x10 [ 267.332414][ C0] __hrtimer_run_queues+0x47c/0xae0 [ 267.332429][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 267.332440][ C0] ? read_tsc+0x9/0x20 [ 267.332456][ C0] hrtimer_interrupt+0x392/0x8e0 [ 267.332471][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 267.332490][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 267.332508][ C0] [ 267.332512][ C0] [ 267.332516][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.332533][ C0] RIP: 0010:stack_trace_save+0x5d/0xd0 [ 267.332547][ C0] Code: 10 40 9a a5 81 48 01 c3 c7 03 f1 f1 f1 f1 c7 43 04 00 00 00 f3 c7 43 08 f3 f3 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 44 24 78 <31> c0 8d 42 01 48 89 7c 24 20 48 c7 c7 40 97 a5 81 48 c7 44 24 30 [ 267.332558][ C0] RSP: 0018:ffffc900037e79d8 EFLAGS: 00000282 [ 267.332568][ C0] RAX: 2f573cc225434900 RBX: fffff520006fcf3b RCX: 0000000000000000 [ 267.332576][ C0] RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffffc900037e7a68 [ 267.332583][ C0] RBP: 0000000000000cc0 R08: 0000000000000002 R09: 0000000000000000 [ 267.332591][ C0] R10: ffff88807943afe8 R11: 00000000ffffffff R12: 0000000000000001 [ 267.332599][ C0] R13: 0000000000000cc0 R14: 0000000000000138 R15: 0000000000000001 [ 267.332611][ C0] ? security_socket_post_create+0x247/0x260 [ 267.332626][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 267.332639][ C0] ? do_syscall_64+0xcd/0x250 [ 267.332651][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.332669][ C0] kasan_save_stack+0x33/0x60 [ 267.332696][ C0] kasan_save_track+0x14/0x30 [ 267.332707][ C0] __kasan_slab_alloc+0x89/0x90 [ 267.332720][ C0] kmem_cache_alloc_lru_noprof+0x226/0x3d0 [ 267.332733][ C0] ? find_held_lock+0x2d/0x110 [ 267.332745][ C0] ? __d_alloc+0x31/0xaa0 [ 267.332760][ C0] __d_alloc+0x31/0xaa0 [ 267.332773][ C0] d_alloc_pseudo+0x1c/0xc0 [ 267.332789][ C0] alloc_file_pseudo+0xd0/0x1f0 [ 267.332804][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 267.332819][ C0] ? alloc_fd+0x41f/0x760 [ 267.332832][ C0] sock_alloc_file+0x50/0x1d0 [ 267.332849][ C0] __sys_socket+0x1c2/0x260 [ 267.332861][ C0] ? __pfx___sys_socket+0x10/0x10 [ 267.332876][ C0] __x64_sys_socket+0x72/0xb0 [ 267.332887][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.332899][ C0] do_syscall_64+0xcd/0x250 [ 267.332912][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.332929][ C0] RIP: 0033:0x7f7e09b8ed07 [ 267.332940][ C0] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.332950][ C0] RSP: 002b:00007ffdf993cde8 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 267.332962][ C0] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f7e09b8ed07 [ 267.332970][ C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 267.332977][ C0] RBP: 00007ffdf993d51c R08: 00007ffdf993ce0c R09: 0079746972756365 [ 267.332986][ C0] R10: 00007ffdf993ce70 R11: 0000000000000206 R12: 00007f7e09d77c80 [ 267.332994][ C0] R13: 00000000000927c0 R14: 00000000000279c7 R15: 00007f7e09d79e40 [ 267.333006][ C0] [ 267.333971][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g26653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 267.872794][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=9280 [ 267.880594][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g26653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 267.891970][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 267.901936][ C1] rcu: RCU grace-period kthread stack dump: [ 267.907813][ C1] task:rcu_preempt state:I stack:27456 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 267.919731][ C1] Call Trace: [ 267.923011][ C1] [ 267.925947][ C1] __schedule+0xf43/0x5890 [ 267.930377][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 267.935592][ C1] ? __pfx___schedule+0x10/0x10 [ 267.940447][ C1] ? schedule+0x298/0x350 [ 267.944781][ C1] ? __pfx_lock_release+0x10/0x10 [ 267.949814][ C1] ? lock_acquire+0x2f/0xb0 [ 267.954315][ C1] ? schedule+0x1fd/0x350 [ 267.958649][ C1] schedule+0xe7/0x350 [ 267.962723][ C1] schedule_timeout+0x124/0x280 [ 267.967578][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 267.972952][ C1] ? __pfx_process_timeout+0x10/0x10 [ 267.978241][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 267.984055][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 267.989532][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 267.994300][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 267.999585][ C1] ? rcu_gp_init+0xc82/0x1630 [ 268.004268][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 268.009476][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 268.015287][ C1] rcu_gp_kthread+0x271/0x380 [ 268.019970][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 268.025169][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 268.030365][ C1] ? __kthread_parkme+0x148/0x220 [ 268.035384][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 268.040585][ C1] kthread+0x3af/0x750 [ 268.044652][ C1] ? __pfx_kthread+0x10/0x10 [ 268.049244][ C1] ? __pfx_kthread+0x10/0x10 [ 268.053832][ C1] ret_from_fork+0x45/0x80 [ 268.058254][ C1] ? __pfx_kthread+0x10/0x10 [ 268.062841][ C1] ret_from_fork_asm+0x1a/0x30 [ 268.067616][ C1]