last executing test programs: 46.655628915s ago: executing program 3 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r0, @ANYBLOB="f765b814db05d2"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 46.566948818s ago: executing program 3 (id=318): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x33eb4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getitimer(0x1, 0x0) 45.672253347s ago: executing program 3 (id=326): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 45.48953758s ago: executing program 3 (id=329): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 44.047857359s ago: executing program 3 (id=350): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 43.924346782s ago: executing program 3 (id=351): sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"}) 28.891082509s ago: executing program 32 (id=351): sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"}) 3.18854461s ago: executing program 2 (id=929): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4bc, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) 2.873639229s ago: executing program 1 (id=932): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x406, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.526594133s ago: executing program 2 (id=945): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0xac}}, 0x0) 1.42011596s ago: executing program 2 (id=948): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x85}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.275351009s ago: executing program 2 (id=950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) 995.485507ms ago: executing program 1 (id=958): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 907.17254ms ago: executing program 1 (id=960): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000000)) 897.107957ms ago: executing program 4 (id=962): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) 786.597949ms ago: executing program 0 (id=963): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0xf, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x6, 0x5, 0x40, 0x0, 0xffffffff, 0x0, 0x6, 0x13, 0x5, 0x0, 0x6, 0x0, 0xfeffffff, 0x4000000, 0x0, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0xb, 0x681c1eb2, 0x11e, 0x0, 0x0, 0x0, 0x2, 0x12, 0xffffffff, 0x7, 0x4, 0x200, 0x3, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xa, 0xfffffffe, 0x1, 0x0, 0x0, 0x3, 0x0, 0xe0, 0x1, 0x5, 0xfffffff6, 0x0, 0xf681, 0x0, 0x1abb, 0xffffffff, 0x1, 0x0, 0xfffffffb, 0x1c15d73a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x6, 0x0, 0x7fff, 0x200, 0x1, 0x0, 0x61c5fb56, 0x10000, 0x0, 0x5, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x0, 0x9, 0x0, 0x9, 0x4, 0x103, 0x0, 0x10001, 0x3, 0x8, 0x7, 0xfffffffb, 0xbc, 0x0, 0x10, 0x8, 0x0, 0x0, 0x1, 0x0, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x7, 0x0, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf59, 0x0, 0x40, 0x0, 0xc7, 0x7, 0x400000, 0x6, 0x100, 0x0, 0x0, 0x205, 0x5, 0x80000, 0xc, 0x5, 0x200, 0xcc0, 0x0, 0x6, 0x63, 0x0, 0x0, 0x0, 0xe, 0x929, 0x2f, 0x0, 0x7, 0x0, 0x0, 0x15960318, 0xc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6574, 0x0, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0x2, 0x5, 0x3, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x400, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xffffff14, 0x0, 0x194e, 0x0, 0xe793, 0xddda, 0x3, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x40, 0x10000, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3, 0x10045d, 0x4, 0x0, 0xffd, 0xb2, 0x9, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 776.542546ms ago: executing program 5 (id=964): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x5) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 776.011272ms ago: executing program 4 (id=965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 722.671023ms ago: executing program 4 (id=966): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x7) 665.588589ms ago: executing program 1 (id=967): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/159, 0x9f}], 0x1) 622.671508ms ago: executing program 0 (id=968): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd1, 0x0, 0x0) 608.591048ms ago: executing program 4 (id=969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2}, 0xc5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fanotify_init(0x0, 0x1) 603.294854ms ago: executing program 1 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc) 541.683226ms ago: executing program 5 (id=971): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}, 0x1c) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0xb, 0x0, 0x1b, 0x0, 0x4f, 0x0, 0xe7}) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) 493.897534ms ago: executing program 5 (id=972): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 490.9937ms ago: executing program 0 (id=973): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000580)=0x4) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa8e81) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) 464.642682ms ago: executing program 1 (id=974): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) alarm(0x1) 460.825147ms ago: executing program 4 (id=975): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuacct.stat\x00', 0x0, 0x0) read$msr(r1, &(0x7f0000000040)=""/87, 0x57) 362.05063ms ago: executing program 2 (id=976): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 356.365757ms ago: executing program 5 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x6}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) 332.647446ms ago: executing program 0 (id=978): r0 = io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 329.214408ms ago: executing program 4 (id=979): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x184880) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) 227.234188ms ago: executing program 5 (id=980): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x40}, 0x28) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) 214.783936ms ago: executing program 0 (id=981): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000400)="1b86", 0x2}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001280)="57c5", 0x2}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r1, 0x2}, 0x8) 170.879697ms ago: executing program 2 (id=982): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 136.513036ms ago: executing program 0 (id=983): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 0s ago: executing program 5 (id=984): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) tkill(r0, 0x18) kernel console output (not intermixed with test programs): device team_slave_1 added [ 70.901685][ T5852] team0: Port device team_slave_1 added [ 70.921845][ T5853] team0: Port device team_slave_0 added [ 70.959311][ T5853] team0: Port device team_slave_1 added [ 70.984164][ T5172] Bluetooth: hci0: command tx timeout [ 71.002660][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.009855][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.036087][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.062191][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.069343][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.095838][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.095864][ T5172] Bluetooth: hci1: command tx timeout [ 71.108386][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.118956][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.145358][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.156041][ T5172] Bluetooth: hci2: command tx timeout [ 71.166778][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.173775][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.199860][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.216221][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.225753][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.226183][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.251852][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.260883][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.270166][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.281864][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.308011][ T5172] Bluetooth: hci4: command tx timeout [ 71.308016][ T5848] Bluetooth: hci3: command tx timeout [ 71.308312][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.402671][ T5850] hsr_slave_0: entered promiscuous mode [ 71.408797][ T5850] hsr_slave_1: entered promiscuous mode [ 71.416343][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 71.422075][ T5850] Cannot create hsr debugfs directory [ 71.451808][ T5853] hsr_slave_0: entered promiscuous mode [ 71.458581][ T5853] hsr_slave_1: entered promiscuous mode [ 71.464743][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 71.470457][ T5853] Cannot create hsr debugfs directory [ 71.519592][ T5852] hsr_slave_0: entered promiscuous mode [ 71.526235][ T5852] hsr_slave_1: entered promiscuous mode [ 71.532171][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 71.537993][ T5852] Cannot create hsr debugfs directory [ 71.625965][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.660208][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.671361][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.710616][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.874818][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.884283][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.906141][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.917610][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.975082][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.985838][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.997445][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.016015][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.100907][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.112049][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.126615][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.136789][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.146987][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.198439][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.240577][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.247786][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.277827][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.284944][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.305039][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.315922][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.339965][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.350386][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.404740][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.449807][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.505325][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.525917][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.538045][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.545201][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.555913][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 72.555927][ T30] audit: type=1400 audit(1757366321.666:86): avc: denied { sys_module } for pid=5847 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.558423][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.626174][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.633370][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.662899][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.670060][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.699927][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.711408][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.718900][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.752782][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.759944][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.791709][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.798886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.865781][ T5853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.876921][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.900669][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.926536][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.965614][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.978828][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.020604][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.073303][ T5848] Bluetooth: hci0: command tx timeout [ 73.107236][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.114403][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.127954][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.135605][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.145548][ T5848] Bluetooth: hci1: command tx timeout [ 73.197439][ T5847] veth0_vlan: entered promiscuous mode [ 73.223579][ T5848] Bluetooth: hci2: command tx timeout [ 73.257115][ T5847] veth1_vlan: entered promiscuous mode [ 73.316294][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.329356][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.377594][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.385146][ T5848] Bluetooth: hci4: command tx timeout [ 73.385154][ T5172] Bluetooth: hci3: command tx timeout [ 73.447520][ T5847] veth0_macvtap: entered promiscuous mode [ 73.488451][ T5847] veth1_macvtap: entered promiscuous mode [ 73.510488][ T5853] veth0_vlan: entered promiscuous mode [ 73.531352][ T5850] veth0_vlan: entered promiscuous mode [ 73.550315][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.569070][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.585159][ T5844] veth0_vlan: entered promiscuous mode [ 73.591566][ T5850] veth1_vlan: entered promiscuous mode [ 73.599410][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.609143][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.630786][ T5853] veth1_vlan: entered promiscuous mode [ 73.643555][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.654471][ T5844] veth1_vlan: entered promiscuous mode [ 73.668456][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.683672][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.701286][ T5853] veth0_macvtap: entered promiscuous mode [ 73.745755][ T5853] veth1_macvtap: entered promiscuous mode [ 73.773030][ T5850] veth0_macvtap: entered promiscuous mode [ 73.802709][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.832842][ T5850] veth1_macvtap: entered promiscuous mode [ 73.872888][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.907194][ T5844] veth0_macvtap: entered promiscuous mode [ 73.921534][ T5844] veth1_macvtap: entered promiscuous mode [ 73.931584][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.948608][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.949766][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.988978][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.013037][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.024358][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.035069][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.059943][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.077391][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.086362][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.095725][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.115211][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.134035][ T30] audit: type=1400 audit(1757366323.236:87): avc: denied { mounton } for pid=5847 comm="syz-executor" path="/root/syzkaller.ulsrH8/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.158837][ T30] audit: type=1400 audit(1757366323.236:88): avc: denied { mount } for pid=5847 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.161926][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.182328][ T30] audit: type=1400 audit(1757366323.236:89): avc: denied { mounton } for pid=5847 comm="syz-executor" path="/root/syzkaller.ulsrH8/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.223278][ T30] audit: type=1400 audit(1757366323.246:90): avc: denied { mount } for pid=5847 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.245823][ T30] audit: type=1400 audit(1757366323.246:91): avc: denied { mounton } for pid=5847 comm="syz-executor" path="/root/syzkaller.ulsrH8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.254857][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.278649][ T30] audit: type=1400 audit(1757366323.246:92): avc: denied { mounton } for pid=5847 comm="syz-executor" path="/root/syzkaller.ulsrH8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.309255][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.318297][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.327558][ T30] audit: type=1400 audit(1757366323.246:93): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.350643][ T30] audit: type=1400 audit(1757366323.326:94): avc: denied { mounton } for pid=5847 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.377324][ T30] audit: type=1400 audit(1757366323.326:95): avc: denied { mount } for pid=5847 comm="syz-executor" name="/" dev="gadgetfs" ino=8332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.380592][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.422463][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.447421][ T5852] veth0_vlan: entered promiscuous mode [ 74.454048][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.459837][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.462395][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.471914][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.535456][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.589375][ T5852] veth1_vlan: entered promiscuous mode [ 74.619017][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.633219][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.685881][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.717271][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.777545][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.787790][ T5852] veth0_macvtap: entered promiscuous mode [ 74.801611][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.812885][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.828282][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.846603][ T5852] veth1_macvtap: entered promiscuous mode [ 74.929069][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.944800][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.967752][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.991846][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.055099][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.074910][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.096570][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.143404][ T5848] Bluetooth: hci0: command tx timeout [ 75.223739][ T5848] Bluetooth: hci1: command tx timeout [ 75.229292][ T1038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.308525][ T5848] Bluetooth: hci2: command tx timeout [ 75.365942][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.406145][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.463437][ T5848] Bluetooth: hci4: command tx timeout [ 75.463446][ T5172] Bluetooth: hci3: command tx timeout [ 75.518185][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.577066][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.491709][ T6038] loop7: detected capacity change from 0 to 7 [ 76.558613][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.568115][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.597115][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.606310][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.615813][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.625013][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.635124][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.644323][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.652202][ T6030] SELinux: failed to load policy [ 76.655570][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.666515][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.679155][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.688373][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.697507][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.706740][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.714698][ T6038] ldm_validate_partition_table(): Disk read failed. [ 76.724370][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.733551][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.743465][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.752627][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.763239][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.772465][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.789137][ T6038] Dev loop7: unable to read RDB block 0 [ 76.797098][ T6038] loop7: unable to read partition table [ 76.805134][ T6038] loop7: partition table beyond EOD, truncated [ 76.866230][ T6038] loop_reread_partitions: partition scan of loop7 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 76.957855][ T6039] ldm_validate_partition_table(): Disk read failed. [ 76.977129][ T6039] Dev loop7: unable to read RDB block 0 [ 76.992891][ T6039] loop7: unable to read partition table [ 77.016678][ T6039] loop7: partition table beyond EOD, truncated [ 77.223662][ T5172] Bluetooth: hci0: command tx timeout [ 77.248627][ T975] kernel write not supported for file /input/event2 (pid: 975 comm: kworker/1:2) [ 77.304958][ T5172] Bluetooth: hci1: command tx timeout [ 77.305603][ T5911] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.383738][ T5172] Bluetooth: hci2: command tx timeout [ 77.510422][ T5911] usb 1-1: config index 0 descriptor too short (expected 65463, got 72) [ 77.532918][ T5911] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 77.544284][ T5172] Bluetooth: hci3: command tx timeout [ 77.553727][ T5172] Bluetooth: hci4: command tx timeout [ 77.561314][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.583054][ T5911] usb 1-1: Product: syz [ 77.588865][ T5911] usb 1-1: Manufacturer: syz [ 77.595444][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 77.595460][ T30] audit: type=1400 audit(1757366326.696:132): avc: denied { write } for pid=6072 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 77.621436][ T5911] usb 1-1: SerialNumber: syz [ 77.642653][ T5911] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 77.661634][ T30] audit: type=1400 audit(1757366326.766:133): avc: denied { firmware_load } for pid=978 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 77.667060][ T6075] trusted_key: encrypted_key: keyword 'R}A>te' not recognized [ 77.704651][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.732900][ T978] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 77.792300][ T30] audit: type=1400 audit(1757366326.896:134): avc: denied { create } for pid=6076 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.812320][ T30] audit: type=1400 audit(1757366326.896:135): avc: denied { setopt } for pid=6076 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.843326][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.893590][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 77.904364][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 77.923062][ T5920] usb 3-1: config 4 interface 0 has no altsetting 0 [ 77.936822][ T5920] usb 3-1: string descriptor 0 read error: -22 [ 77.943532][ T5920] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 77.952693][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.978504][ T5920] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 77.993251][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 78.005928][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.022105][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 78.033610][ T5920] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 78.053513][ T43] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 78.062567][ T5920] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 78.070588][ T43] usb 4-1: Manufacturer: syz [ 78.075895][ T5920] usb 3-1: media controller created [ 78.089027][ T43] usb 4-1: config 0 descriptor?? [ 78.127151][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.235178][ T43] usb 1-1: USB disconnect, device number 2 [ 78.327943][ T975] usb 4-1: USB disconnect, device number 2 [ 78.623374][ T5912] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.785631][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.800637][ T5912] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 78.804716][ T6090] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.813374][ T30] audit: type=1400 audit(1757366327.906:136): avc: denied { create } for pid=6089 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.823760][ T978] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 78.843624][ T5848] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 78.858243][ T5172] Bluetooth: hci5: command 0xfc11 tx timeout [ 78.878445][ T978] ath9k_htc: Failed to initialize the device [ 78.881684][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.893367][ T6046] sp0: Synchronizing with TNC [ 78.893640][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.907907][ T5912] usb 5-1: Product: syz [ 78.912077][ T5912] usb 5-1: Manufacturer: syz [ 78.916887][ T30] audit: type=1400 audit(1757366327.966:137): avc: denied { ioctl } for pid=6089 comm="syz.0.35" path="socket:[9108]" dev="sockfs" ino=9108 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.941288][ T5912] usb 5-1: SerialNumber: syz [ 78.955660][ T5912] usb 5-1: bad CDC descriptors [ 78.961490][ T43] usb 1-1: ath9k_htc: USB layer deinitialized [ 79.047512][ T30] audit: type=1400 audit(1757366328.146:138): avc: denied { ioctl } for pid=6091 comm="syz.0.36" path="socket:[9117]" dev="sockfs" ino=9117 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.176675][ T6098] capability: warning: `syz.1.38' uses deprecated v2 capabilities in a way that may be insecure [ 79.230875][ T6101] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 79.255579][ T5912] usb 5-1: USB disconnect, device number 2 [ 79.272366][ T6101] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 79.295696][ T6101] overlayfs: failed to get uuid (8/file0, err=-13); falling back to uuid=null. [ 79.310752][ T30] audit: type=1400 audit(1757366328.416:139): avc: denied { mount } for pid=6100 comm="syz.3.40" name="/" dev="overlay" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.363576][ T5920] usb 3-1: USB disconnect, device number 2 [ 79.419221][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.513021][ T30] audit: type=1400 audit(1757366328.616:140): avc: denied { ioctl } for pid=6107 comm="syz.1.43" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7946 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.584967][ T30] audit: type=1400 audit(1757366328.696:141): avc: denied { block_suspend } for pid=6109 comm="syz.3.44" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.910636][ T6127] block nbd0: Unsupported socket: shutdown callout must be supported. [ 80.060673][ T5990] Bluetooth: hci5: Frame reassembly failed (-84) [ 80.511897][ T6161] netlink: 48 bytes leftover after parsing attributes in process `syz.1.68'. [ 80.513262][ T5919] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.652555][ T6153] mmap: syz.0.64 (6153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.697520][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 80.715467][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.733182][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.769297][ T5919] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 80.786938][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.803591][ T5919] usb 5-1: config 0 descriptor?? [ 80.811873][ T5919] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 81.021075][ T5919] usb 5-1: USB disconnect, device number 3 [ 81.123177][ T5955] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 81.275925][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.287131][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.297014][ T5955] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 81.309139][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.319171][ T6184] netlink: 56 bytes leftover after parsing attributes in process `syz.2.75'. [ 81.323713][ T5955] usb 1-1: config 0 descriptor?? [ 81.466767][ T10] cfg80211: failed to load regulatory.db [ 81.538600][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 81.646875][ T6196] delete_channel: no stack [ 81.789721][ T5955] hid-u2fzero 0003:10C4:8ACF.0001: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 81.828814][ T5955] hid-u2fzero 0003:10C4:8ACF.0001: U2F Zero LED initialised [ 81.843744][ T5955] hid-u2fzero 0003:10C4:8ACF.0001: U2F Zero RNG initialised [ 82.021612][ T10] usb 1-1: USB disconnect, device number 3 [ 82.105869][ T5172] Bluetooth: hci5: command 0x1003 tx timeout [ 82.112419][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 82.502199][ T6221] input: syz0 as /devices/virtual/input/input5 [ 82.673929][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 82.673945][ T30] audit: type=1400 audit(1757366331.776:192): avc: denied { read write } for pid=6230 comm="syz.4.96" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 82.779926][ T30] audit: type=1400 audit(1757366331.776:193): avc: denied { open } for pid=6230 comm="syz.4.96" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 82.823659][ T30] audit: type=1400 audit(1757366331.886:194): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 82.971451][ T30] audit: type=1400 audit(1757366332.076:195): avc: denied { read write } for pid=6242 comm="syz.4.103" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.999780][ T6243] loop6: detected capacity change from 0 to 524287999 [ 83.040680][ T30] audit: type=1400 audit(1757366332.076:196): avc: denied { open } for pid=6242 comm="syz.4.103" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.093176][ T978] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.233856][ T6250] SELinux: Context is not valid (left unmapped). [ 83.265316][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 83.277775][ T978] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 83.318615][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.335092][ T978] usb 1-1: Product: syz [ 83.351115][ T978] usb 1-1: Manufacturer: syz [ 83.363180][ T978] usb 1-1: SerialNumber: syz [ 83.370433][ T30] audit: type=1326 audit(1757366332.476:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.2.108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dbb78ebe9 code=0x0 [ 83.427404][ T978] usb 1-1: config 0 descriptor?? [ 83.603958][ T6263] input: syz1 as /devices/virtual/input/input6 [ 83.632116][ T30] audit: type=1400 audit(1757366332.736:198): avc: denied { bind } for pid=6264 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.676177][ T978] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 83.696338][ T978] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 83.716244][ T30] audit: type=1400 audit(1757366332.736:199): avc: denied { node_bind } for pid=6264 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 83.744272][ T978] usb 1-1: USB disconnect, device number 4 [ 83.772375][ T30] audit: type=1400 audit(1757366332.756:200): avc: denied { connect } for pid=6264 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.828969][ T30] audit: type=1400 audit(1757366332.766:201): avc: denied { getopt } for pid=6264 comm="syz.4.111" laddr=fe80::11 faddr=fe80::3f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.351094][ T6292] blkio.reset_stats is deprecated [ 84.833660][ T6310] dvmrp1: tun_chr_ioctl cmd 1074025676 [ 84.850387][ T6310] dvmrp1: owner set to 0 [ 84.959611][ T6314] process 'syz.4.132' launched './file1' with NULL argv: empty string added [ 85.593286][ T978] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.765609][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 85.777254][ T978] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 85.796096][ T978] usb 2-1: config 0 has no interface number 0 [ 85.814422][ T978] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 85.827081][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.843545][ T978] usb 2-1: Product: syz [ 85.849971][ T978] usb 2-1: Manufacturer: syz [ 85.873223][ T978] usb 2-1: SerialNumber: syz [ 85.882413][ T978] usb 2-1: config 0 descriptor?? [ 85.897880][ T978] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 86.133612][ T978] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 86.180953][ T978] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 86.579096][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 86.591431][ T978] usb 2-1: USB disconnect, device number 2 [ 86.615854][ T978] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 86.646295][ T978] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 86.714888][ T978] quatech2 2-1:0.51: device disconnected [ 86.975959][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.166'. [ 87.015539][ T6390] netem: change failed [ 87.135780][ T6398] mkiss: ax0: crc mode is auto. [ 87.302140][ T5920] kernel write not supported for file bpf-map (pid: 5920 comm: kworker/1:5) [ 87.316872][ T5912] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.346033][ T6407] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.174'. [ 87.473480][ T5920] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 87.513232][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 87.627907][ T5912] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 87.638996][ T5912] usb 4-1: config 0 has no interface number 0 [ 87.650905][ T5912] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.684376][ T6419] SELinux: failed to load policy [ 87.689707][ T5912] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.745630][ T5912] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 87.754987][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 87.770053][ T5912] usb 4-1: Product: syz [ 87.774301][ T5912] usb 4-1: SerialNumber: syz [ 87.781164][ T5912] usb 4-1: config 0 descriptor?? [ 87.833290][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.853183][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 87.877327][ T5912] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 87.901905][ T5912] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input7 [ 87.913956][ T5920] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 87.923009][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.927207][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 87.927223][ T30] audit: type=1400 audit(1757366337.036:218): avc: denied { create } for pid=6420 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.954261][ T5920] usb 3-1: config 0 descriptor?? [ 88.006900][ T30] audit: type=1400 audit(1757366337.036:219): avc: denied { getopt } for pid=6420 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.038097][ T5920] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 88.066688][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 88.097131][ T5920] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 88.116707][ T5920] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 88.143313][ T5920] usb 3-1: media controller created [ 88.157665][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.170858][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.170955][ T978] usb 4-1: USB disconnect, device number 3 [ 88.177859][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 88.189082][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 88.219333][ T5920] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 88.220654][ T978] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 88.227975][ T6401] dvb-usb: bulk message failed: -22 (2/0) [ 88.252038][ T6427] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 88.272787][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 88.311979][ T5920] dvb-usb: schedule remote query interval to 150 msecs. [ 88.351842][ T5920] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 88.385138][ T5920] usb 3-1: USB disconnect, device number 3 [ 88.412966][ T5920] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 88.967556][ T6444] SELinux: failed to load policy [ 89.045289][ T30] audit: type=1400 audit(1757366338.136:220): avc: denied { accept } for pid=6448 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.104675][ T30] audit: type=1400 audit(1757366338.136:221): avc: denied { write } for pid=6448 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.437132][ T30] audit: type=1400 audit(1757366338.546:222): avc: denied { watch } for pid=6457 comm="syz.3.199" path="pipe:[10015]" dev="pipefs" ino=10015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.483342][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 89.506503][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 89.524769][ T30] audit: type=1400 audit(1757366338.576:223): avc: denied { setattr } for pid=6457 comm="syz.3.199" name="" dev="pipefs" ino=10015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.872021][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 89.898484][ T30] audit: type=1400 audit(1757366338.996:224): avc: denied { mount } for pid=6471 comm="syz.1.205" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 89.970736][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 89.986210][ T30] audit: type=1400 audit(1757366339.086:225): avc: denied { write } for pid=6478 comm="syz.0.207" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 90.060715][ T30] audit: type=1400 audit(1757366339.126:226): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 90.177450][ T30] audit: type=1400 audit(1757366339.246:227): avc: denied { read write } for pid=6482 comm="syz.3.210" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.200760][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.361702][ T6495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.414633][ T6497] overlayfs: workdir and upperdir must be separate subtrees [ 90.678956][ T6499] SELinux: failed to load policy [ 90.843201][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.053174][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 91.067904][ T5920] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 91.087200][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.112958][ T5920] usb 1-1: config 0 descriptor?? [ 91.113396][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.123887][ T5920] gspca_main: sq930x-2.14.0 probing 041e:403c [ 91.233293][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.301002][ T5911] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 91.310410][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.322326][ T5911] usb 3-1: config 0 descriptor?? [ 91.399405][ T43] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 91.421563][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.435893][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.447725][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.455849][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.468504][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.479966][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.491212][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.511410][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.522833][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.534073][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.535353][ T5911] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 91.543282][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.573739][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.592320][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.602982][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.620071][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.628384][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.637746][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.649159][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.670285][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.683061][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.694405][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.703964][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.714290][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.742567][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.761107][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 91.772945][ T5911] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 91.780445][ T43] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 91.783064][ T5911] [drm] Initialized udl on minor 2 [ 91.790425][ T5920] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 91.825131][ T43] usb 5-1: Product: syz [ 91.829344][ T43] usb 5-1: Manufacturer: syz [ 91.842103][ T5920] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 91.853248][ T43] usb 5-1: SerialNumber: syz [ 91.882968][ T5920] usb 1-1: USB disconnect, device number 5 [ 91.891056][ T43] usb 5-1: config 0 descriptor?? [ 91.926164][ T43] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 91.943358][ T5911] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 91.968849][ T5911] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 92.144756][ T5955] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 92.185266][ T5955] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 92.201859][ T5911] usb 3-1: USB disconnect, device number 4 [ 92.213881][ T5955] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 92.308506][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 92.322744][ T43] usb 5-1: USB disconnect, device number 4 [ 92.336993][ T43] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 92.392208][ T6541] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 92.462670][ T6545] binder: 6544:6545 ioctl c018620c 200000000000 returned -22 [ 92.839011][ T6560] capability: warning: `syz.2.245' uses 32-bit capabilities (legacy support in use) [ 93.051196][ T6566] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.225824][ T6566] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.391484][ T6566] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.510371][ T6566] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.523732][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.632443][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 93.632458][ T30] audit: type=1400 audit(1757366342.736:254): avc: denied { listen } for pid=6585 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.668253][ T30] audit: type=1400 audit(1757366342.736:255): avc: denied { getopt } for pid=6585 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.698762][ T6007] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.704586][ T6588] ======================================================= [ 93.704586][ T6588] WARNING: The mand mount option has been deprecated and [ 93.704586][ T6588] and is ignored by this kernel. Remove the mand [ 93.704586][ T6588] option from the mount to silence this warning. [ 93.704586][ T6588] ======================================================= [ 93.708609][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.741829][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.780386][ T6007] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.803373][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.813263][ T5955] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.822212][ T6007] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.823433][ T5920] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 93.854063][ T5987] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860598][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.883861][ T5920] usb 1-1: config 0 descriptor?? [ 93.963739][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 93.971570][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.985392][ T5955] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 93.997290][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.011019][ T5955] usb 5-1: config 0 descriptor?? [ 94.146934][ T30] audit: type=1400 audit(1757366343.256:256): avc: denied { read } for pid=6596 comm="syz.3.262" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.178687][ T30] audit: type=1400 audit(1757366343.256:257): avc: denied { open } for pid=6596 comm="syz.3.262" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.204643][ T30] audit: type=1400 audit(1757366343.256:258): avc: denied { ioctl } for pid=6596 comm="syz.3.262" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.298271][ T5920] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 94.309288][ T5920] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 94.340926][ T30] audit: type=1400 audit(1757366343.436:259): avc: denied { write } for pid=6601 comm="syz.3.264" path="socket:[12301]" dev="sockfs" ino=12301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.451693][ T5955] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 94.458802][ T30] audit: type=1400 audit(1757366343.556:260): avc: denied { create } for pid=6604 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.495620][ T30] audit: type=1400 audit(1757366343.556:261): avc: denied { setopt } for pid=6604 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.497360][ T5920] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 94.523209][ T30] audit: type=1400 audit(1757366343.556:262): avc: denied { connect } for pid=6604 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.589970][ T6608] netlink: 196 bytes leftover after parsing attributes in process `syz.3.266'. [ 94.600199][ T6608] Zero length message leads to an empty skb [ 94.698443][ T5920] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 94.723080][ T5920] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 94.768121][ T5920] usb 1-1: USB disconnect, device number 6 [ 94.852529][ T43] usb 5-1: USB disconnect, device number 5 [ 95.293373][ T43] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 95.434310][ T30] audit: type=1400 audit(1757366344.546:263): avc: denied { bind } for pid=6628 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.468442][ T6631] netlink: 'syz.3.276': attribute type 25 has an invalid length. [ 95.475290][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.497936][ T43] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 95.509298][ T6631] netlink: 'syz.3.276': attribute type 28 has an invalid length. [ 95.553353][ T43] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 95.582783][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.611239][ T43] usb 3-1: config 0 descriptor?? [ 95.698642][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 95.874202][ T5920] usb 3-1: USB disconnect, device number 5 [ 96.110716][ T6657] netlink: 27 bytes leftover after parsing attributes in process `syz.3.288'. [ 96.709685][ T6678] block nbd1: Send control failed (result -107) [ 96.728049][ T6678] block nbd1: Request send failed, requeueing [ 96.741781][ T94] block nbd1: Dead connection, failed to find a fallback [ 96.750653][ T94] block nbd1: shutting down sockets [ 96.756381][ T94] blk_print_req_error: 25 callbacks suppressed [ 96.756398][ T94] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.894949][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 96.940627][ T6692] loop0: Can't mount, would change RO state [ 97.531354][ T5920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5920 comm=kworker/1:5 [ 97.563205][ T5911] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 97.743229][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 97.755357][ T5911] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 97.793213][ T5911] usb 1-1: config 0 has no interface number 0 [ 97.799375][ T5911] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 97.832109][ T6732] Bluetooth: MGMT ver 1.23 [ 97.834727][ T5911] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 97.860939][ T5911] usb 1-1: config 0 interface 126 has no altsetting 0 [ 97.872052][ T5911] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 97.891483][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.900882][ T6734] warning: `syz.4.320' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.921843][ T5911] usb 1-1: Product: syz [ 97.940901][ T5911] usb 1-1: Manufacturer: syz [ 97.952551][ T5911] usb 1-1: SerialNumber: syz [ 97.974016][ T5911] usb 1-1: config 0 descriptor?? [ 97.979638][ T6714] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.999306][ T6714] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.445758][ T5911] ir_usb 1-1:0.126: IR Dongle converter detected [ 98.532930][ T5919] IPVS: starting estimator thread 0... [ 98.545864][ T6750] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 98.577737][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 98.654785][ T6751] IPVS: using max 41 ests per chain, 98400 per kthread [ 98.688841][ T5911] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 98.929358][ T5919] usb 1-1: USB disconnect, device number 7 [ 98.971909][ T5919] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 99.004689][ T5911] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.024301][ T5919] ir_usb 1-1:0.126: device disconnected [ 99.189017][ T5911] usb 4-1: config 0 has no interfaces? [ 99.196990][ T5911] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 99.213306][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.221333][ T5911] usb 4-1: Product: syz [ 99.233584][ T5911] usb 4-1: Manufacturer: syz [ 99.238392][ T5911] usb 4-1: SerialNumber: syz [ 99.246595][ T5911] usb 4-1: config 0 descriptor?? [ 99.503029][ T43] usb 4-1: USB disconnect, device number 4 [ 99.694344][ T6782] openvswitch: netlink: Key type 251 is out of range max 32 [ 100.280832][ T10] kernel write not supported for file /vbi9 (pid: 10 comm: kworker/0:1) [ 100.369984][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.554523][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.585236][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.626965][ T43] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.646274][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.672183][ T43] usb 5-1: SerialNumber: syz [ 100.898814][ T43] usb 5-1: 0:2 : does not exist [ 100.970169][ T43] usb 5-1: USB disconnect, device number 6 [ 101.120389][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 101.120423][ T30] audit: type=1400 audit(1757366350.226:289): avc: denied { read write } for pid=6821 comm="syz.2.357" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.144600][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.212786][ T30] audit: type=1400 audit(1757366350.256:290): avc: denied { open } for pid=6821 comm="syz.2.357" path="/dev/sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.287860][ T30] audit: type=1400 audit(1757366350.256:291): avc: denied { ioctl } for pid=6821 comm="syz.2.357" path="/dev/sg0" dev="devtmpfs" ino=776 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.379064][ T43] kernel read not supported for file /dsp (pid: 43 comm: kworker/1:1) [ 101.479503][ T30] audit: type=1400 audit(1757366350.586:292): avc: denied { ioctl } for pid=6827 comm="syz.2.360" path="/dev/vim2m" dev="devtmpfs" ino=696 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.530271][ T5919] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 101.608194][ T30] audit: type=1400 audit(1757366350.596:293): avc: denied { map } for pid=6827 comm="syz.2.360" path="/dev/vim2m" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.672202][ T6834] raw_sendmsg: syz.2.364 forgot to set AF_INET. Fix it! [ 101.730687][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.755135][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.792589][ T5919] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 101.813502][ T5920] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 101.831051][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.857346][ T5919] usb 2-1: config 0 descriptor?? [ 101.987039][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 102.003703][ T5920] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 102.017006][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.035445][ T5920] usb 1-1: Product: syz [ 102.049339][ T5920] usb 1-1: Manufacturer: syz [ 102.067186][ T5920] usb 1-1: SerialNumber: syz [ 102.093349][ T5920] r8152-cfgselector 1-1: Unknown version 0x0000 [ 102.105274][ T5920] r8152-cfgselector 1-1: config 0 descriptor?? [ 102.115550][ T5920] hub 1-1:0.0: bad descriptor, ignoring hub [ 102.121530][ T5920] hub 1-1:0.0: probe with driver hub failed with error -5 [ 102.321433][ T5919] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 102.348721][ T30] audit: type=1400 audit(1757366351.456:294): avc: denied { append } for pid=6841 comm="syz.4.368" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.667544][ T5911] r8152-cfgselector 1-1: reset high-speed USB device number 8 using dummy_hcd [ 102.759626][ T5920] usb 2-1: USB disconnect, device number 3 [ 103.173463][ T10] r8152-cfgselector 1-1: USB disconnect, device number 8 [ 103.375709][ T30] audit: type=1400 audit(1757366352.486:295): avc: denied { connect } for pid=6858 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.415850][ T5920] kernel write not supported for file /sequencer2 (pid: 5920 comm: kworker/1:5) [ 104.628271][ T6889] netlink: 'syz.1.384': attribute type 8 has an invalid length. [ 105.097366][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 105.186315][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 105.488065][ T30] audit: type=1400 audit(1757366354.596:296): avc: denied { append } for pid=6917 comm="syz.0.397" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.694451][ T5911] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.854884][ T5911] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 105.866988][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.879289][ T5911] usb 2-1: config 0 descriptor?? [ 105.903858][ T5920] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 106.031578][ T6928] bridge1: entered allmulticast mode [ 106.074542][ T5920] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.082619][ T5920] usb 1-1: config 0 has no interface number 0 [ 106.097602][ T5920] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 106.119732][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.138002][ T5920] usb 1-1: Product: syz [ 106.142295][ T5920] usb 1-1: Manufacturer: syz [ 106.153050][ T5920] usb 1-1: SerialNumber: syz [ 106.167587][ T5920] usb 1-1: config 0 descriptor?? [ 106.323531][ T5911] usb 2-1: Cannot read MAC address [ 106.339241][ T5911] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 106.382294][ T5911] usb 2-1: USB disconnect, device number 4 [ 106.388865][ T5920] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 106.416038][ T30] audit: type=1400 audit(1757366355.516:297): avc: denied { create } for pid=6935 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 106.449340][ T5920] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 106.490661][ T5920] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 106.499231][ T30] audit: type=1400 audit(1757366355.526:298): avc: denied { ioctl } for pid=6935 comm="syz.2.407" path="socket:[13266]" dev="sockfs" ino=13266 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 106.528285][ T5920] usb 1-1: media controller created [ 106.560869][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.851225][ T5919] usb 1-1: USB disconnect, device number 9 [ 106.933221][ T5920] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 107.104735][ T5920] usb 5-1: config 0 has an invalid interface number: 62 but max is 0 [ 107.112852][ T5920] usb 5-1: config 0 has no interface number 0 [ 107.131803][ T5920] usb 5-1: config 0 interface 62 has no altsetting 0 [ 107.155235][ T5920] usb 5-1: New USB device found, idVendor=2584, idProduct=4a8f, bcdDevice=a4.2c [ 107.169095][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.188112][ T5920] usb 5-1: Product: syz [ 107.192380][ T5920] usb 5-1: Manufacturer: syz [ 107.205174][ T5920] usb 5-1: SerialNumber: syz [ 107.220520][ T5920] usb 5-1: config 0 descriptor?? [ 107.420781][ T30] audit: type=1400 audit(1757366356.526:299): avc: denied { create } for pid=6961 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 107.468864][ T5920] usb-storage 5-1:0.62: USB Mass Storage device detected [ 107.493576][ T30] audit: type=1400 audit(1757366356.596:300): avc: denied { ioctl } for pid=6961 comm="syz.2.418" path="socket:[13305]" dev="sockfs" ino=13305 ioctlcmd=0x42d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 107.581415][ T5920] usb 5-1: USB disconnect, device number 7 [ 107.613209][ T30] audit: type=1400 audit(1757366356.626:301): avc: denied { accept } for pid=6961 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 107.913385][ T5911] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 108.087102][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 108.113081][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.133232][ T5911] usb 1-1: config 0 has no interfaces? [ 108.151509][ T5911] usb 1-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 108.160905][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.177177][ T5911] usb 1-1: Product: syz [ 108.201754][ T5911] usb 1-1: Manufacturer: syz [ 108.211829][ T5911] usb 1-1: SerialNumber: syz [ 108.226944][ T5911] usb 1-1: config 0 descriptor?? [ 108.278362][ T6982] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.426'. [ 108.459589][ T5911] usb 1-1: USB disconnect, device number 10 [ 109.010307][ T30] audit: type=1400 audit(1757366358.116:302): avc: denied { read } for pid=6997 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 109.370609][ T30] audit: type=1400 audit(1757366358.476:303): avc: denied { ioctl } for pid=7011 comm="syz.2.440" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.443676][ T5911] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.613584][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 109.622884][ T5911] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 109.643162][ T5911] usb 2-1: config 0 has no interface number 0 [ 109.655703][ T5911] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.683157][ T5911] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.706129][ T5911] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 109.726036][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 109.746495][ T5911] usb 2-1: Product: syz [ 109.750810][ T5911] usb 2-1: SerialNumber: syz [ 109.766869][ T5911] usb 2-1: config 0 descriptor?? [ 109.789611][ T5911] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 109.799111][ T30] audit: type=1400 audit(1757366358.906:304): avc: denied { open } for pid=7024 comm="syz.0.445" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 109.808519][ T5911] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input9 [ 109.852760][ T5919] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 109.874738][ T30] audit: type=1400 audit(1757366358.946:305): avc: denied { ioctl } for pid=7024 comm="syz.0.445" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 109.908832][ T30] audit: type=1400 audit(1757366359.016:306): avc: denied { ioctl } for pid=7020 comm="syz.4.443" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.965458][ T7029] binder: 7028:7029 ioctl c0306201 200000000640 returned -22 [ 110.028697][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 110.029572][ T5912] usb 2-1: USB disconnect, device number 5 [ 110.035719][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 110.064535][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 110.078418][ T5919] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 110.087631][ T5919] usb 5-1: config 179 has no interface number 0 [ 110.096986][ T5919] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 110.117167][ T5919] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 110.131782][ T5919] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.148498][ T5912] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 110.178325][ T5919] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 110.196167][ T5919] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.223354][ T5919] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 110.234973][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.246067][ T7021] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 110.559692][ T5912] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input10 [ 110.571074][ T5172] Bluetooth: hci5: sending frame failed (-49) [ 110.582293][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 110.792063][ T5912] usb 5-1: USB disconnect, device number 8 [ 110.798031][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 110.798078][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.207012][ T7065] UHID_CREATE from different security context by process 238 (syz.1.465), this is not allowed. [ 111.220713][ T5911] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 111.234071][ T5911] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 111.242993][ T5911] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 111.251012][ T5911] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 111.283239][ T5911] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 111.290705][ T5911] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 111.329161][ T5911] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 111.348054][ T5911] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 111.368494][ T5911] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 111.393219][ T5911] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 111.437272][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 111.437286][ T30] audit: type=1400 audit(1757366360.546:316): avc: denied { write } for pid=7074 comm="syz.4.469" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 111.467937][ T5911] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.03 Device [syz1] on syz1 [ 111.499866][ T30] audit: type=1400 audit(1757366360.606:317): avc: denied { ioctl } for pid=7074 comm="syz.4.469" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 111.528649][ T7077] Bluetooth: MGMT ver 1.23 [ 111.629627][ T30] audit: type=1400 audit(1757366360.736:318): avc: denied { ioctl } for pid=7078 comm="syz.4.473" path="socket:[13527]" dev="sockfs" ino=13527 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.739850][ T7080] fido_id[7080]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.904779][ T7091] netlink: 'syz.2.477': attribute type 9 has an invalid length. [ 111.912664][ T7091] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.477'. [ 111.973737][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.053489][ T5920] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 112.133271][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 112.147088][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.172441][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.198677][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.227458][ T10] usb 2-1: config 0 descriptor?? [ 112.244069][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 112.255362][ T5920] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 112.273891][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 112.279919][ T5920] usb 5-1: config 0 has no interface number 0 [ 112.284352][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 112.312543][ T5920] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 112.332171][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.353304][ T5920] usb 5-1: Product: syz [ 112.357511][ T5920] usb 5-1: Manufacturer: syz [ 112.371357][ T5920] usb 5-1: SerialNumber: syz [ 112.391544][ T5920] usb 5-1: config 0 descriptor?? [ 112.410951][ T5920] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 112.539124][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 112.548522][ T7108] netlink: 9 bytes leftover after parsing attributes in process `syz.0.485'. [ 112.636302][ T5920] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 112.648538][ T5920] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 112.654550][ T10] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 112.744062][ T5955] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.859647][ C0] usb 2-1: input irq status -75 received [ 112.894157][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 112.907285][ T5955] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 112.917669][ T5955] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 112.934905][ T5955] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 112.946605][ T5955] usb 3-1: config 1 has no interface number 0 [ 112.952810][ T5955] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.967168][ T5955] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 112.980950][ T5955] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 112.998640][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.021260][ T5955] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 113.041279][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 113.052943][ T5920] usb 5-1: USB disconnect, device number 9 [ 113.060564][ T5911] usb 2-1: USB disconnect, device number 6 [ 113.074688][ T5920] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 113.100030][ T5920] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 113.124956][ T5920] quatech2 5-1:0.51: device disconnected [ 113.222670][ T5955] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 113.671271][ T5920] usb 3-1: USB disconnect, device number 6 [ 113.691622][ T5920] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 114.304801][ T7133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.496'. [ 114.843290][ T5955] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.861500][ T30] audit: type=1400 audit(1757366363.966:319): avc: denied { shutdown } for pid=7149 comm="syz.0.504" laddr=fe80::11 lport=255 faddr=ff01::1 fport=20064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.943774][ T5920] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.014137][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 115.039034][ T5955] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 115.062278][ T5955] usb 5-1: config 0 has no interface number 0 [ 115.069297][ T5955] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 115.079864][ T5955] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 115.090198][ T5955] usb 5-1: config 0 interface 126 has no altsetting 0 [ 115.104995][ T5955] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 115.105677][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.123566][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.128079][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.141183][ T5955] usb 5-1: Product: syz [ 115.141204][ T5955] usb 5-1: Manufacturer: syz [ 115.141219][ T5955] usb 5-1: SerialNumber: syz [ 115.157279][ T5955] usb 5-1: config 0 descriptor?? [ 115.165112][ T5920] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.169322][ T7143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.191757][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.212013][ T5920] usb 3-1: SerialNumber: syz [ 115.223433][ T7143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.476057][ T5920] usb 3-1: 0:2 : does not exist [ 115.547358][ T5920] usb 3-1: USB disconnect, device number 7 [ 115.617660][ T6746] udevd[6746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.681448][ T30] audit: type=1400 audit(1757366364.786:320): avc: denied { write } for pid=7168 comm="syz.0.514" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.685142][ T5955] ir_usb 5-1:0.126: IR Dongle converter detected [ 115.776957][ T30] audit: type=1400 audit(1757366364.826:321): avc: denied { ioctl } for pid=7168 comm="syz.0.514" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.869706][ T5172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.881935][ T5955] usb 5-1: IRDA class descriptor not found, device not bound [ 115.890752][ T5172] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.898904][ T5172] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.913042][ T5172] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.921619][ T5172] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.942101][ T30] audit: type=1400 audit(1757366365.046:322): avc: denied { mounton } for pid=7170 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 116.110317][ T978] usb 5-1: USB disconnect, device number 10 [ 116.215154][ T6001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.245520][ T5955] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 116.255600][ T7170] chnl_net:caif_netlink_parms(): no params data found [ 116.320362][ T6001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.400426][ T6001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.404802][ T5955] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.421014][ T5955] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 116.441995][ T5955] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.451436][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.459840][ T5955] usb 1-1: Product: syz [ 116.464269][ T5955] usb 1-1: Manufacturer: syz [ 116.468915][ T5955] usb 1-1: SerialNumber: syz [ 116.507918][ T7187] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 116.513751][ T7187] pim6reg0: group set to 60928 [ 116.544960][ T6001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.559617][ T7170] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.566871][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.574681][ T7170] bridge_slave_0: entered allmulticast mode [ 116.583639][ T7170] bridge_slave_0: entered promiscuous mode [ 116.592209][ T7170] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.599518][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.608257][ T7170] bridge_slave_1: entered allmulticast mode [ 116.615627][ T7170] bridge_slave_1: entered promiscuous mode [ 116.699276][ T30] audit: type=1400 audit(1757366365.796:323): avc: denied { ioctl } for pid=7194 comm="syz.4.522" path="socket:[14904]" dev="sockfs" ino=14904 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.723927][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.734999][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.766810][ T7170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.785692][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.793360][ T5911] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 116.802370][ T7170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.819956][ T5955] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 116.848476][ T5955] usb 1-1: USB disconnect, device number 11 [ 116.919645][ T7170] team0: Port device team_slave_0 added [ 116.967745][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 116.968047][ T7170] team0: Port device team_slave_1 added [ 116.998922][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.020405][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 117.042937][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 117.068540][ T5911] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.086203][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.086629][ T7170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.108147][ T5911] usb 2-1: Product: syz [ 117.109720][ T7170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.112370][ T5911] usb 2-1: Manufacturer: syz [ 117.112386][ T5911] usb 2-1: SerialNumber: syz [ 117.116085][ T5911] usb 2-1: config 0 descriptor?? [ 117.149134][ T7170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.170869][ T7170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.178635][ T7170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.206276][ T7170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.222326][ T6001] bridge_slave_1: left allmulticast mode [ 117.228988][ T6001] bridge_slave_1: left promiscuous mode [ 117.235758][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.248274][ T6001] bridge_slave_0: left allmulticast mode [ 117.254686][ T6001] bridge_slave_0: left promiscuous mode [ 117.260378][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.283431][ T5955] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 117.313237][ T5919] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.435072][ T5955] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 117.454189][ T5911] usb 2-1: USB disconnect, device number 7 [ 117.469709][ T5955] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.493978][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 117.496373][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.506113][ T5919] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 117.523249][ T5919] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 117.539923][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.539957][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.551650][ T5955] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.572609][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.590217][ T5955] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.590242][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.592555][ T5955] usb 5-1: config 0 descriptor?? [ 117.610805][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.621559][ T7206] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 117.631189][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 117.642007][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.653239][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.669871][ T5919] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.680952][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.758774][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.776162][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.792722][ T6001] bond0 (unregistering): Released all slaves [ 117.894556][ T7170] hsr_slave_0: entered promiscuous mode [ 117.901953][ T5919] usb 1-1: usb_control_msg returned -71 [ 117.910348][ T5919] usbtmc 1-1:16.0: can't read capabilities [ 117.924996][ T5919] usbtmc 1-1:16.0: Failed to submit iin_urb [ 117.925210][ T7170] hsr_slave_1: entered promiscuous mode [ 117.941255][ T5919] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -90 [ 117.950866][ T5848] Bluetooth: hci5: command tx timeout [ 117.958572][ T7170] debugfs: 'hsr0' already exists in 'hsr' [ 117.973000][ T7170] Cannot create hsr debugfs directory [ 117.977244][ T5919] usb 1-1: USB disconnect, device number 12 [ 118.081475][ T5955] plantronics 0003:047F:FFFF.0007: collection stack underflow [ 118.098713][ T5955] plantronics 0003:047F:FFFF.0007: item 0 2 0 12 parsing failed [ 118.120495][ T5955] plantronics 0003:047F:FFFF.0007: parse failed [ 118.129646][ T5955] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 118.289883][ T6001] hsr_slave_0: left promiscuous mode [ 118.303261][ T6001] hsr_slave_1: left promiscuous mode [ 118.317295][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.331012][ T5955] usb 5-1: USB disconnect, device number 11 [ 118.338051][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.347058][ T5912] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.361585][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.369189][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.400916][ T6001] veth1_macvtap: left promiscuous mode [ 118.407005][ T6001] veth0_macvtap: left promiscuous mode [ 118.412613][ T6001] veth1_vlan: left promiscuous mode [ 118.419552][ T6001] veth0_vlan: left promiscuous mode [ 118.518549][ T5912] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.531755][ T5912] usb 3-1: config 0 has no interface number 0 [ 118.549278][ T5912] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 118.562358][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.578836][ T5912] usb 3-1: Product: syz [ 118.583037][ T5912] usb 3-1: Manufacturer: syz [ 118.597886][ T5912] usb 3-1: SerialNumber: syz [ 118.606764][ T5912] usb 3-1: config 0 descriptor?? [ 118.680785][ T30] audit: type=1400 audit(1757366367.786:324): avc: denied { getopt } for pid=7229 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.819502][ T5912] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 118.838899][ T5912] usb 3-1: USB disconnect, device number 8 [ 119.131115][ T6001] team0 (unregistering): Port device team_slave_1 removed [ 119.179430][ T6001] team0 (unregistering): Port device team_slave_0 removed [ 119.580072][ T7253] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 119.582038][ T30] audit: type=1400 audit(1757366368.686:325): avc: denied { watch_reads } for pid=7252 comm="syz.4.549" path="pipe:[4904]" dev="pipefs" ino=4904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 119.610675][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.730394][ T7226] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 119.947410][ T978] hid_parser_main: 78 callbacks suppressed [ 119.947431][ T978] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 120.028549][ T978] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.033338][ T5848] Bluetooth: hci5: command tx timeout [ 120.047710][ T7170] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.099689][ T7170] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.123004][ T7170] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.150257][ T7170] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.219440][ T6001] IPVS: stop unused estimator thread 0... [ 120.315739][ T7170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.351157][ T7170] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.380241][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.387876][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.408037][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.415264][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.623999][ T30] audit: type=1400 audit(1757366369.736:326): avc: denied { sys_module } for pid=7170 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 120.904546][ T7170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.256423][ T30] audit: type=1400 audit(1757366370.346:327): avc: denied { bind } for pid=7318 comm="syz.4.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.296609][ T5919] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 121.378132][ T7170] veth0_vlan: entered promiscuous mode [ 121.399066][ T7170] veth1_vlan: entered promiscuous mode [ 121.413346][ T5920] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.450468][ T7170] veth0_macvtap: entered promiscuous mode [ 121.461672][ T7170] veth1_macvtap: entered promiscuous mode [ 121.473190][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 121.480444][ T5919] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.492707][ T5919] usb 1-1: config 0 has no interface number 0 [ 121.504935][ T5919] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.510653][ T7326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.575'. [ 121.521379][ T7170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.534050][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 121.534806][ T5919] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.550997][ T7170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.580092][ T5997] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.600412][ T5997] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.616211][ T5920] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 121.636478][ T5919] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 121.647966][ T5920] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 121.658406][ T5997] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.675399][ T5920] usb 2-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 121.688347][ T5997] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.697140][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.711174][ T5920] usb 2-1: config 220 has no interface number 2 [ 121.719005][ T5919] usb 1-1: config 0 descriptor?? [ 121.731963][ T5920] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 121.755901][ T5920] usb 2-1: config 220 interface 0 has no altsetting 0 [ 121.774376][ T5920] usb 2-1: config 220 interface 76 has no altsetting 0 [ 121.788703][ T5920] usb 2-1: config 220 interface 1 has no altsetting 0 [ 121.816705][ T5920] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 121.826296][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.843369][ T5920] usb 2-1: Product: syz [ 121.847605][ T5920] usb 2-1: Manufacturer: syz [ 121.852239][ T5920] usb 2-1: SerialNumber: syz [ 121.864041][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.871905][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.935358][ T6004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.947447][ T6004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.969881][ T30] audit: type=1400 audit(1757366371.076:328): avc: denied { mounton } for pid=7170 comm="syz-executor" path="/root/syzkaller.bxeMxp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 122.112937][ T5848] Bluetooth: hci5: command tx timeout [ 122.126088][ T5920] usb 2-1: selecting invalid altsetting 0 [ 122.153664][ T5920] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 122.179227][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 122.181344][ T5920] usb 2-1: No valid video chain found. [ 122.214676][ T5920] usb 2-1: selecting invalid altsetting 0 [ 122.220488][ T5920] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 122.239075][ T5920] usb 2-1: USB disconnect, device number 8 [ 122.353027][ T7354] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 122.353027][ T7354] program syz.4.587 not setting count and/or reply_len properly [ 122.371559][ T5919] uclogic 0003:28BD:0094.0009: pen parameters not found [ 122.389791][ T5919] uclogic 0003:28BD:0094.0009: interface is invalid, ignoring [ 122.607083][ T5955] usb 1-1: USB disconnect, device number 13 [ 122.638106][ T30] audit: type=1400 audit(1757366371.746:329): avc: denied { connect } for pid=7364 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.657424][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.667607][ T30] audit: type=1400 audit(1757366371.746:330): avc: denied { write } for pid=7364 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.723198][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 122.813900][ T978] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 122.883302][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 122.890563][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.910118][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.919990][ T10] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 122.933778][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.944011][ T10] usb 6-1: config 0 descriptor?? [ 122.983304][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 122.994127][ T978] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.002510][ T978] usb 5-1: config 0 has no interface number 0 [ 123.016862][ T978] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.033372][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.041526][ T978] usb 5-1: Product: syz [ 123.046402][ T978] usb 5-1: Manufacturer: syz [ 123.051052][ T978] usb 5-1: SerialNumber: syz [ 123.058549][ T978] usb 5-1: config 0 descriptor?? [ 123.066827][ T978] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 123.286488][ T978] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 123.307483][ T978] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 123.433700][ T10] corsair 0003:1B1C:1B02.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 123.568320][ T7407] Illegal XDP return value 4294967274 on prog (id 59) dev N/A, expect packet loss! [ 123.631913][ T7410] openvswitch: netlink: Duplicate or invalid key (type 0). [ 123.641866][ T7410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.774441][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 123.794254][ T10] usb 5-1: USB disconnect, device number 12 [ 123.807567][ T7415] input: syz1 as /devices/virtual/input/input11 [ 123.814524][ T7417] netlink: 128 bytes leftover after parsing attributes in process `syz.1.614'. [ 123.825181][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 123.839112][ T5919] usb 6-1: USB disconnect, device number 2 [ 123.847735][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 123.906852][ T10] quatech2 5-1:0.51: device disconnected [ 124.068855][ T30] audit: type=1400 audit(1757366373.176:331): avc: denied { create } for pid=7430 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.108517][ T30] audit: type=1400 audit(1757366373.176:332): avc: denied { setopt } for pid=7430 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.135812][ T30] audit: type=1400 audit(1757366373.176:333): avc: denied { write } for pid=7430 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.139064][ T7435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.167790][ T30] audit: type=1400 audit(1757366373.176:334): avc: denied { read } for pid=7430 comm="syz.0.622" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.195612][ T5848] Bluetooth: hci5: command tx timeout [ 124.224569][ T30] audit: type=1400 audit(1757366373.336:335): avc: denied { remount } for pid=7436 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.257294][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.626'. [ 124.587692][ T30] audit: type=1400 audit(1757366373.696:336): avc: denied { read } for pid=7458 comm="syz.5.635" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 124.631645][ T30] audit: type=1400 audit(1757366373.696:337): avc: denied { open } for pid=7458 comm="syz.5.635" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 124.804583][ T7468] macvtap1: entered promiscuous mode [ 124.813172][ T7468] vlan0: entered promiscuous mode [ 124.822570][ T7468] macvtap1: entered allmulticast mode [ 124.836978][ T7468] vlan0: entered allmulticast mode [ 124.842131][ T7468] veth0_vlan: entered allmulticast mode [ 125.393204][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.565614][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 125.598963][ T10] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 125.619174][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.644007][ T10] usb 3-1: config 0 descriptor?? [ 126.070582][ T10] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 126.092261][ T10] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 126.109077][ T10] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 126.127954][ T10] petalynx 0003:18B1:0037.000B: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 126.273068][ T978] usb 3-1: USB disconnect, device number 9 [ 126.355802][ T7520] sit1: entered promiscuous mode [ 126.371082][ T7520] sit1: entered allmulticast mode [ 126.914040][ T7546] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.942217][ T7546] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.960586][ T7545] overlay: filesystem on ./file1 is read-only [ 127.027640][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 127.027655][ T30] audit: type=1400 audit(1757366376.136:344): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 127.114261][ T5920] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 127.241535][ T7556] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 127.285246][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 127.296748][ T5920] usb 6-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 127.319846][ T5920] usb 6-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=1e.52 [ 127.346128][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.382225][ T5920] usb 6-1: Product: syz [ 127.401326][ T7562] : entered promiscuous mode [ 127.407967][ T5920] usb 6-1: Manufacturer: syz [ 127.412712][ T5920] usb 6-1: SerialNumber: syz [ 127.606334][ T7569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.654682][ T5920] s2255 6-1:192.0: Could not find bulk-in endpoint [ 127.661310][ T5920] Sensoray 2255 driver load failed: 0xfffffff4 [ 127.704022][ T5920] s2255 6-1:192.0: probe with driver s2255 failed with error -12 [ 127.761353][ T5920] usb 6-1: USB disconnect, device number 3 [ 128.059318][ T30] audit: type=1400 audit(1757366377.166:345): avc: denied { create } for pid=7590 comm="syz.2.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 128.106446][ T30] audit: type=1400 audit(1757366377.206:346): avc: denied { connect } for pid=7590 comm="syz.2.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 128.243692][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 128.282203][ T30] audit: type=1400 audit(1757366377.386:347): avc: denied { write } for pid=7597 comm="syz.4.698" path="socket:[17485]" dev="sockfs" ino=17485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 128.305579][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.428194][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 128.443407][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 128.473322][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 128.493314][ T10] usb 2-1: config 220 has no interface number 2 [ 128.499660][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 128.543260][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 128.563234][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 128.570535][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 128.600823][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 128.610030][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.618297][ T10] usb 2-1: Product: syz [ 128.622495][ T10] usb 2-1: Manufacturer: syz [ 128.627587][ T10] usb 2-1: SerialNumber: syz [ 128.667483][ T7604] macvlan0: entered promiscuous mode [ 128.688017][ T7604] netlink: 'syz.5.701': attribute type 1 has an invalid length. [ 128.712733][ T7604] netlink: 'syz.5.701': attribute type 2 has an invalid length. [ 128.877067][ T10] usb 2-1: selecting invalid altsetting 0 [ 128.903881][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 128.928905][ T10] usb 2-1: No valid video chain found. [ 128.971497][ T10] usb 2-1: selecting invalid altsetting 0 [ 128.999128][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 129.033555][ T10] usb 2-1: USB disconnect, device number 9 [ 129.076698][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.085829][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.135760][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 129.163341][ T7624] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 129.321451][ T7634] CIFS: VFS: Malformed UNC in devname [ 129.793417][ T5920] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.855134][ T30] audit: type=1400 audit(1757366378.956:348): avc: denied { mounton } for pid=7652 comm="syz.2.722" path="/150/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 129.986714][ T5920] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 130.012564][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.034151][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 130.043431][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.063834][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.076600][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.109210][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.141607][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.181319][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.186033][ T7667] binder: 7666:7667 ioctl c018620c 200000000280 returned -1 [ 130.194655][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.214743][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.222711][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.232274][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.249444][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.264048][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.273444][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.284769][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.296838][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.307438][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.324934][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.338109][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.348187][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.365831][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.379948][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.391619][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.415683][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.429548][ T5920] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 130.439571][ T5920] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 130.448324][ T5920] usb 2-1: Product: syz [ 130.453445][ T5920] usb 2-1: Manufacturer: syz [ 130.461431][ T5920] usb 2-1: SerialNumber: syz [ 130.475972][ T5920] usb 2-1: config 0 descriptor?? [ 130.495594][ T5920] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 130.667149][ T7679] SELinux: ebitmap: truncated map [ 130.752588][ T7679] SELinux: failed to load policy [ 130.758957][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 130.759187][ T5955] usb 2-1: USB disconnect, device number 10 [ 130.787189][ T5955] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 131.102075][ T7687] SELinux: failed to load policy [ 131.197112][ T30] audit: type=1400 audit(1757366380.306:349): avc: denied { bind } for pid=7696 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.235886][ T30] audit: type=1400 audit(1757366380.306:350): avc: denied { write } for pid=7696 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.255046][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.279392][ T7699] vti0: entered promiscuous mode [ 131.349838][ T7703] netlink: 'syz.1.745': attribute type 2 has an invalid length. [ 131.394718][ T7703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.745'. [ 131.708095][ T30] audit: type=1400 audit(1757366380.816:351): avc: denied { watch_reads } for pid=7723 comm="syz.2.756" path="/161/control" dev="tmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.032969][ T7740] QAT: Device 7 not found [ 132.510342][ T30] audit: type=1400 audit(1757366381.616:352): avc: denied { write } for pid=7757 comm="syz.0.767" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.668435][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.674902][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.726037][ T30] audit: type=1400 audit(1757366381.836:353): avc: denied { set_context_mgr } for pid=7765 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.873225][ T30] audit: type=1400 audit(1757366381.976:354): avc: denied { create } for pid=7770 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.909229][ T7771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.932164][ T7771] bond0: (slave rose0): Enslaving as an active interface with an up link [ 132.943174][ T30] audit: type=1400 audit(1757366381.986:355): avc: denied { ioctl } for pid=7770 comm="syz.2.773" path="socket:[17383]" dev="sockfs" ino=17383 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 133.696797][ T6004] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.737890][ T6004] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.770481][ T6004] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.819343][ T6004] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.843441][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 134.214728][ T30] audit: type=1400 audit(1757366383.316:356): avc: denied { write } for pid=7828 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.653904][ T30] audit: type=1400 audit(1757366383.766:357): avc: denied { map } for pid=7841 comm="syz.1.804" path="socket:[18566]" dev="sockfs" ino=18566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.690781][ T30] audit: type=1400 audit(1757366383.766:358): avc: denied { read } for pid=7841 comm="syz.1.804" path="socket:[18566]" dev="sockfs" ino=18566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.236770][ T5955] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 135.249913][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 135.289511][ T30] audit: type=1400 audit(1757366384.396:359): avc: denied { write } for pid=978 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18629 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.360161][ T7883] sp0: Synchronizing with TNC [ 135.408450][ T5955] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.418753][ T5955] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.429931][ T5955] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.445300][ T5955] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 135.455014][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 135.470897][ T5955] usb 6-1: Product: syz [ 135.480288][ T5955] usb 6-1: Manufacturer: syz [ 135.503144][ T5955] usb 6-1: SerialNumber: syz [ 135.602328][ T7890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.709703][ T7894] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 135.733539][ T5955] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 135.747069][ T30] audit: type=1400 audit(1757366384.856:360): avc: denied { read } for pid=7895 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.925959][ T7900] mkiss: ax0: crc mode is auto. [ 135.935363][ T30] audit: type=1400 audit(1757366385.046:361): avc: denied { read write } for pid=7860 comm="syz.5.813" name="lp0" dev="devtmpfs" ino=3146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 135.941231][ T978] usb 6-1: USB disconnect, device number 4 [ 135.990360][ T978] usblp0: removed [ 136.197783][ T7916] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 136.206051][ T7916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.355212][ T7968] netlink: 'syz.2.862': attribute type 14 has an invalid length. [ 137.434498][ T7972] syz.1.860 (7972) used greatest stack depth: 19768 bytes left [ 137.455633][ T5920] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 137.634826][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 137.651373][ T5920] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 137.669845][ T5920] usb 5-1: config 0 has no interface number 0 [ 137.683211][ T5920] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 137.718488][ T5920] usb 5-1: config 0 interface 196 has no altsetting 0 [ 137.754843][ T5920] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 137.774754][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.788663][ T5920] usb 5-1: Product: syz [ 137.792870][ T5920] usb 5-1: Manufacturer: syz [ 137.830816][ T5920] usb 5-1: SerialNumber: syz [ 137.849149][ T5920] usb 5-1: config 0 descriptor?? [ 137.875526][ T7962] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.476913][ T8023] sch_fq: defrate 4294967295 ignored. [ 138.505234][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'. [ 138.506015][ T5920] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 138.570917][ T5920] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 138.584094][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 138.584111][ T30] audit: type=1400 audit(1757366387.696:367): avc: denied { execute } for pid=8027 comm="syz.2.888" path="/dev/nullb0" dev="devtmpfs" ino=3150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 138.685249][ T30] audit: type=1800 audit(1757366387.726:368): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.888" name="nullb0" dev="devtmpfs" ino=3150 res=0 errno=0 [ 138.707167][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.715509][ T5920] usb 5-1: USB disconnect, device number 13 [ 138.884460][ T5920] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 138.938587][ T8042] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 139.078237][ T8049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.141248][ T30] audit: type=1400 audit(1757366388.246:369): avc: denied { bind } for pid=8051 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.289472][ T30] audit: type=1400 audit(1757366388.396:370): avc: denied { create } for pid=8055 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.345528][ T30] audit: type=1400 audit(1757366388.396:371): avc: denied { connect } for pid=8055 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.392448][ T30] audit: type=1400 audit(1757366388.396:372): avc: denied { ioctl } for pid=8055 comm="syz.2.899" path="socket:[18312]" dev="sockfs" ino=18312 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.494114][ T30] audit: type=1400 audit(1757366388.396:373): avc: denied { write } for pid=8055 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.545845][ T30] audit: type=1400 audit(1757366388.396:374): avc: denied { read } for pid=8055 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.923245][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 140.105034][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.113501][ T10] usb 5-1: config 0 has no interface number 0 [ 140.126600][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 140.136922][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.163351][ T10] usb 5-1: Product: syz [ 140.173234][ T10] usb 5-1: Manufacturer: syz [ 140.182251][ T10] usb 5-1: SerialNumber: syz [ 140.222728][ T10] usb 5-1: config 0 descriptor?? [ 140.424263][ T30] audit: type=1326 audit(1757366389.526:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.1.918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76b9b8ebe9 code=0x0 [ 140.463518][ T10] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 140.480793][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.496580][ T30] audit: type=1400 audit(1757366389.586:376): avc: denied { watch } for pid=8095 comm="syz.0.919" path="/196/file0" dev="tmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.519678][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 140.532165][ T10] usb 5-1: media controller created [ 140.554938][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.835341][ T5920] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.905994][ T5912] kernel write not supported for file /snd/midiC2D0 (pid: 5912 comm: kworker/1:3) [ 140.995190][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 141.004126][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.015396][ T5920] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 141.024528][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.035484][ T5920] usb 1-1: config 0 descriptor?? [ 141.213843][ T5912] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.383228][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 141.389720][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.401962][ T5912] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.411086][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.421120][ T5912] usb 3-1: config 0 descriptor?? [ 141.454216][ T5920] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 141.461555][ T5920] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 141.472384][ T5920] hid-steam 0003:28DE:1102.000C: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 141.523194][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 141.554001][ T5920] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' connected [ 141.567629][ T5920] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.000C/input/input12 [ 141.600785][ T5920] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 141.623149][ T5920] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 141.624809][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 141.642515][ T5912] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 141.684137][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 141.702729][ T5920] hid-steam 0003:28DE:1102.000D: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 141.723323][ T43] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.752845][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.757543][ T10] usb 5-1: USB disconnect, device number 14 [ 141.762980][ T5920] usb 1-1: USB disconnect, device number 14 [ 141.792544][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 141.818065][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.863554][ T43] usb 2-1: config 0 descriptor?? [ 141.873926][ T5920] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' disconnected [ 141.878586][ T8124] fido_id[8124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 142.057074][ T5912] usb 3-1: USB disconnect, device number 10 [ 142.329992][ T43] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x0 [ 142.346034][ T43] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x0 [ 142.364738][ T43] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x0 [ 142.387552][ T43] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x0 [ 142.404115][ T43] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x0 [ 142.426024][ T43] magicmouse 0003:05AC:0265.000E: hidraw0: USB HID v4.06 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 142.440790][ T43] magicmouse 0003:05AC:0265.000E: magicmouse input not registered [ 142.451941][ T43] magicmouse 0003:05AC:0265.000E: probe with driver magicmouse failed with error -12 [ 142.582701][ T43] usb 2-1: USB disconnect, device number 11 [ 142.655802][ T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 143.455739][ T8195] netlink: 128 bytes leftover after parsing attributes in process `syz.5.964'. [ 143.484446][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.964'. [ 143.683034][ T5221] udevd[5221]: worker [6045] terminated by signal 33 (Unknown signal 33) [ 143.706655][ T5221] udevd[5221]: worker [6045] failed while handling '/devices/virtual/block/loop5' [ 144.053931][ T8231] bond0: entered promiscuous mode [ 144.063355][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 144.063375][ T30] audit: type=1400 audit(1757366393.166:383): avc: denied { connect } for pid=8229 comm="syz.0.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.085347][ T8231] bond_slave_0: entered promiscuous mode [ 144.105208][ T5848] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 144.114781][ T5848] Bluetooth: hci5: Injecting HCI hardware error event [ 144.123248][ T5172] Bluetooth: hci5: hardware error 0x00 [ 144.136698][ T8231] bond_slave_1: entered promiscuous mode [ 144.154782][ T5920] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 144.165868][ T8232] ================================================================== [ 144.173961][ T8232] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x883/0x900 [ 144.182128][ T8232] Read of size 8 at addr ffff888057ea8c50 by task syz.0.983/8232 [ 144.189844][ T8232] [ 144.192168][ T8232] CPU: 1 UID: 0 PID: 8232 Comm: syz.0.983 Not tainted syzkaller #0 PREEMPT(full) [ 144.192186][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.192195][ T8232] Call Trace: [ 144.192202][ T8232] [ 144.192209][ T8232] dump_stack_lvl+0x116/0x1f0 [ 144.192234][ T8232] print_report+0xcd/0x630 [ 144.192252][ T8232] ? __virt_addr_valid+0x81/0x610 [ 144.192273][ T8232] ? __phys_addr+0xe8/0x180 [ 144.192292][ T8232] ? cfusbl_device_notify+0x883/0x900 [ 144.192309][ T8232] kasan_report+0xe0/0x110 [ 144.192325][ T8232] ? cfusbl_device_notify+0x883/0x900 [ 144.192345][ T8232] cfusbl_device_notify+0x883/0x900 [ 144.192362][ T8232] ? net_generic+0xf4/0x2a0 [ 144.192376][ T8232] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 144.192394][ T8232] ? caif_device_notify+0x21b/0x12c0 [ 144.192414][ T8232] ? smc_pnet_netdev_event+0x8a/0x7c0 [ 144.192431][ T8232] ? lockdep_rtnl_is_held+0x26/0x40 [ 144.192448][ T8232] notifier_call_chain+0xb9/0x410 [ 144.192468][ T8232] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 144.192487][ T8232] call_netdevice_notifiers_info+0xbe/0x140 [ 144.192508][ T8232] register_netdevice+0xe02/0x2270 [ 144.192528][ T8232] ? __pfx_register_netdevice+0x10/0x10 [ 144.192548][ T8232] register_netdev+0x34/0x50 [ 144.192566][ T8232] bnep_add_connection+0x71c/0xd20 [ 144.192586][ T8232] ? __pfx_bnep_add_connection+0x10/0x10 [ 144.192605][ T8232] ? __fget_files+0x20e/0x3c0 [ 144.192622][ T8232] do_bnep_sock_ioctl.constprop.0+0x496/0x590 [ 144.192642][ T8232] ? __pfx_do_bnep_sock_ioctl.constprop.0+0x10/0x10 [ 144.192663][ T8232] ? find_held_lock+0x2b/0x80 [ 144.192683][ T8232] ? futex_wake+0x1ad/0x530 [ 144.192704][ T8232] sock_do_ioctl+0x118/0x280 [ 144.192725][ T8232] ? __pfx_sock_do_ioctl+0x10/0x10 [ 144.192746][ T8232] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 144.192767][ T8232] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 144.192793][ T8232] sock_ioctl+0x227/0x6b0 [ 144.192806][ T8232] ? __pfx_sock_ioctl+0x10/0x10 [ 144.192817][ T8232] ? hook_file_ioctl_common+0x145/0x410 [ 144.192834][ T8232] ? selinux_file_ioctl+0x180/0x270 [ 144.192852][ T8232] ? selinux_file_ioctl+0xb4/0x270 [ 144.192871][ T8232] ? __pfx_sock_ioctl+0x10/0x10 [ 144.192883][ T8232] __x64_sys_ioctl+0x18b/0x210 [ 144.192904][ T8232] do_syscall_64+0xcd/0x4c0 [ 144.192923][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.192937][ T8232] RIP: 0033:0x7f9bc738ebe9 [ 144.192949][ T8232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.192963][ T8232] RSP: 002b:00007f9bc819b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.192977][ T8232] RAX: ffffffffffffffda RBX: 00007f9bc75c5fa0 RCX: 00007f9bc738ebe9 [ 144.192986][ T8232] RDX: 0000200000000000 RSI: 00000000400442c8 RDI: 0000000000000005 [ 144.192994][ T8232] RBP: 00007f9bc7411e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.193002][ T8232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.193011][ T8232] R13: 00007f9bc75c6038 R14: 00007f9bc75c5fa0 R15: 00007fffbd184b48 [ 144.193024][ T8232] [ 144.193029][ T8232] [ 144.495915][ T8232] Allocated by task 5848: [ 144.500227][ T8232] kasan_save_stack+0x33/0x60 [ 144.504908][ T8232] kasan_save_track+0x14/0x30 [ 144.509585][ T8232] __kasan_kmalloc+0xaa/0xb0 [ 144.514168][ T8232] __hci_conn_add+0x130/0x1bd0 [ 144.518922][ T8232] hci_conn_add_unset+0x6d/0x100 [ 144.523839][ T8232] hci_conn_request_evt+0x88a/0xaf0 [ 144.529015][ T8232] hci_event_packet+0xa0d/0x11c0 [ 144.533929][ T8232] hci_rx_work+0x2c5/0x16b0 [ 144.538414][ T8232] process_one_work+0x9cc/0x1b70 [ 144.543335][ T8232] worker_thread+0x6c8/0xf10 [ 144.547910][ T8232] kthread+0x3c2/0x780 [ 144.551957][ T8232] ret_from_fork+0x5d4/0x6f0 [ 144.556524][ T8232] ret_from_fork_asm+0x1a/0x30 [ 144.561269][ T8232] [ 144.563570][ T8232] Freed by task 5172: [ 144.567543][ T8232] kasan_save_stack+0x33/0x60 [ 144.572198][ T8232] kasan_save_track+0x14/0x30 [ 144.576854][ T8232] kasan_save_free_info+0x3b/0x60 [ 144.581863][ T8232] __kasan_slab_free+0x60/0x70 [ 144.586625][ T8232] kfree+0x2b4/0x4d0 [ 144.590564][ T8232] device_release+0xa4/0x240 [ 144.595138][ T8232] kobject_put+0x1e7/0x5a0 [ 144.599543][ T8232] device_unregister+0x2f/0xc0 [ 144.604286][ T8232] hci_conn_del_sysfs+0xb4/0x180 [ 144.609211][ T8232] hci_conn_del+0x657/0x1180 [ 144.613783][ T8232] hci_conn_hash_flush+0x186/0x260 [ 144.618881][ T8232] hci_dev_close_sync+0x602/0x11d0 [ 144.623974][ T8232] hci_dev_do_close+0x2e/0x90 [ 144.628629][ T8232] hci_error_reset+0xbf/0x320 [ 144.633283][ T8232] process_one_work+0x9cc/0x1b70 [ 144.638212][ T8232] worker_thread+0x6c8/0xf10 [ 144.642780][ T8232] kthread+0x3c2/0x780 [ 144.646825][ T8232] ret_from_fork+0x5d4/0x6f0 [ 144.651394][ T8232] ret_from_fork_asm+0x1a/0x30 [ 144.656214][ T8232] [ 144.658514][ T8232] Last potentially related work creation: [ 144.664201][ T8232] kasan_save_stack+0x33/0x60 [ 144.668860][ T8232] kasan_record_aux_stack+0xa7/0xc0 [ 144.674050][ T8232] insert_work+0x36/0x230 [ 144.678443][ T8232] __queue_work+0x97e/0x1160 [ 144.683040][ T8232] __queue_delayed_work+0x35b/0x460 [ 144.688235][ T8232] queue_delayed_work_on+0x1b5/0x200 [ 144.693504][ T8232] l2cap_chan_del+0x5a0/0x8f0 [ 144.698173][ T8232] l2cap_conn_del+0x37a/0x730 [ 144.702855][ T8232] l2cap_disconn_cfm+0x96/0xd0 [ 144.707602][ T8232] hci_conn_hash_flush+0x10b/0x260 [ 144.712696][ T8232] hci_dev_close_sync+0x602/0x11d0 [ 144.717796][ T8232] hci_dev_do_close+0x2e/0x90 [ 144.722454][ T8232] hci_error_reset+0xbf/0x320 [ 144.727111][ T8232] process_one_work+0x9cc/0x1b70 [ 144.732025][ T8232] worker_thread+0x6c8/0xf10 [ 144.736591][ T8232] kthread+0x3c2/0x780 [ 144.740638][ T8232] ret_from_fork+0x5d4/0x6f0 [ 144.745205][ T8232] ret_from_fork_asm+0x1a/0x30 [ 144.749949][ T8232] [ 144.752250][ T8232] The buggy address belongs to the object at ffff888057ea8000 [ 144.752250][ T8232] which belongs to the cache kmalloc-8k of size 8192 [ 144.766454][ T8232] The buggy address is located 3152 bytes inside of [ 144.766454][ T8232] freed 8192-byte region [ffff888057ea8000, ffff888057eaa000) [ 144.780400][ T8232] [ 144.782698][ T8232] The buggy address belongs to the physical page: [ 144.789082][ T8232] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57ea8 [ 144.797814][ T8232] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 144.806285][ T8232] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 144.813814][ T8232] page_type: f5(slab) [ 144.817782][ T8232] raw: 00fff00000000040 ffff88801b842280 ffffea00006e6e00 dead000000000002 [ 144.826339][ T8232] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 144.834902][ T8232] head: 00fff00000000040 ffff88801b842280 ffffea00006e6e00 dead000000000002 [ 144.843551][ T8232] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 144.852210][ T8232] head: 00fff00000000003 ffffea00015faa01 00000000ffffffff 00000000ffffffff [ 144.860857][ T8232] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 144.869501][ T8232] page dumped because: kasan: bad access detected [ 144.875887][ T8232] page_owner tracks the page as allocated [ 144.881575][ T8232] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5850, tgid 5850 (syz-executor), ts 71969227049, free_ts 17878622499 [ 144.902736][ T8232] post_alloc_hook+0x1c0/0x230 [ 144.907491][ T8232] get_page_from_freelist+0x132b/0x38e0 [ 144.913026][ T8232] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 144.918899][ T8232] alloc_pages_mpol+0x1fb/0x550 [ 144.923728][ T8232] new_slab+0x247/0x330 [ 144.927869][ T8232] ___slab_alloc+0xcf2/0x1750 [ 144.932533][ T8232] __slab_alloc.constprop.0+0x56/0xb0 [ 144.937889][ T8232] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 144.944282][ T8232] kmalloc_reserve+0xef/0x2c0 [ 144.948946][ T8232] __alloc_skb+0x166/0x380 [ 144.953344][ T8232] netlink_dump+0x644/0xd30 [ 144.957837][ T8232] __netlink_dump_start+0x6d6/0x990 [ 144.963014][ T8232] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 144.968717][ T8232] genl_rcv_msg+0x46e/0x800 [ 144.973202][ T8232] netlink_rcv_skb+0x155/0x420 [ 144.977946][ T8232] genl_rcv+0x28/0x40 [ 144.981906][ T8232] page last free pid 1 tgid 1 stack trace: [ 144.987683][ T8232] __free_frozen_pages+0x7d5/0x10f0 [ 144.992863][ T8232] free_contig_range+0x183/0x4b0 [ 144.997781][ T8232] destroy_args+0x794/0xc10 [ 145.002258][ T8232] debug_vm_pgtable+0x1a32/0x3640 [ 145.007258][ T8232] do_one_initcall+0x120/0x6e0 [ 145.011999][ T8232] kernel_init_freeable+0x5c2/0x910 [ 145.017187][ T8232] kernel_init+0x1c/0x2b0 [ 145.021509][ T8232] ret_from_fork+0x5d4/0x6f0 [ 145.026080][ T8232] ret_from_fork_asm+0x1a/0x30 [ 145.030917][ T8232] [ 145.033220][ T8232] Memory state around the buggy address: [ 145.038823][ T8232] ffff888057ea8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.046862][ T8232] ffff888057ea8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.054909][ T8232] >ffff888057ea8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.062941][ T8232] ^ [ 145.069586][ T8232] ffff888057ea8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.077624][ T8232] ffff888057ea8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.085658][ T8232] ================================================================== [ 145.110723][ T8232] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 145.117954][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: syz.0.983 Not tainted syzkaller #0 PREEMPT(full) [ 145.127173][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.137217][ T8232] Call Trace: [ 145.140483][ T8232] [ 145.143394][ T8232] dump_stack_lvl+0x3d/0x1f0 [ 145.147972][ T8232] vpanic+0x6e8/0x7a0 [ 145.151940][ T8232] ? __pfx_vpanic+0x10/0x10 [ 145.156435][ T8232] ? cfusbl_device_notify+0x883/0x900 [ 145.161803][ T8232] panic+0xca/0xd0 [ 145.165535][ T8232] ? __pfx_panic+0x10/0x10 [ 145.169953][ T8232] ? cfusbl_device_notify+0x883/0x900 [ 145.175316][ T8232] ? preempt_schedule_common+0x44/0xc0 [ 145.180763][ T8232] ? preempt_schedule_thunk+0x16/0x30 [ 145.186121][ T8232] check_panic_on_warn+0xab/0xb0 [ 145.191038][ T8232] end_report+0x107/0x170 [ 145.195350][ T8232] kasan_report+0xee/0x110 [ 145.199765][ T8232] ? cfusbl_device_notify+0x883/0x900 [ 145.205126][ T8232] cfusbl_device_notify+0x883/0x900 [ 145.210306][ T8232] ? net_generic+0xf4/0x2a0 [ 145.214878][ T8232] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 145.220588][ T8232] ? caif_device_notify+0x21b/0x12c0 [ 145.225885][ T8232] ? smc_pnet_netdev_event+0x8a/0x7c0 [ 145.231260][ T8232] ? lockdep_rtnl_is_held+0x26/0x40 [ 145.236441][ T8232] notifier_call_chain+0xb9/0x410 [ 145.241455][ T8232] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 145.247159][ T8232] call_netdevice_notifiers_info+0xbe/0x140 [ 145.253046][ T8232] register_netdevice+0xe02/0x2270 [ 145.258148][ T8232] ? __pfx_register_netdevice+0x10/0x10 [ 145.263679][ T8232] register_netdev+0x34/0x50 [ 145.268252][ T8232] bnep_add_connection+0x71c/0xd20 [ 145.273348][ T8232] ? __pfx_bnep_add_connection+0x10/0x10 [ 145.279135][ T8232] ? __fget_files+0x20e/0x3c0 [ 145.283792][ T8232] do_bnep_sock_ioctl.constprop.0+0x496/0x590 [ 145.289840][ T8232] ? __pfx_do_bnep_sock_ioctl.constprop.0+0x10/0x10 [ 145.296428][ T8232] ? find_held_lock+0x2b/0x80 [ 145.301104][ T8232] ? futex_wake+0x1ad/0x530 [ 145.306035][ T8232] sock_do_ioctl+0x118/0x280 [ 145.310619][ T8232] ? __pfx_sock_do_ioctl+0x10/0x10 [ 145.315722][ T8232] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 145.320818][ T8232] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 145.327669][ T8232] sock_ioctl+0x227/0x6b0 [ 145.331994][ T8232] ? __pfx_sock_ioctl+0x10/0x10 [ 145.336829][ T8232] ? hook_file_ioctl_common+0x145/0x410 [ 145.342359][ T8232] ? selinux_file_ioctl+0x180/0x270 [ 145.347550][ T8232] ? selinux_file_ioctl+0xb4/0x270 [ 145.352653][ T8232] ? __pfx_sock_ioctl+0x10/0x10 [ 145.357481][ T8232] __x64_sys_ioctl+0x18b/0x210 [ 145.362230][ T8232] do_syscall_64+0xcd/0x4c0 [ 145.366734][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.372701][ T8232] RIP: 0033:0x7f9bc738ebe9 [ 145.377094][ T8232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.396681][ T8232] RSP: 002b:00007f9bc819b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.405070][ T8232] RAX: ffffffffffffffda RBX: 00007f9bc75c5fa0 RCX: 00007f9bc738ebe9 [ 145.413028][ T8232] RDX: 0000200000000000 RSI: 00000000400442c8 RDI: 0000000000000005 [ 145.420998][ T8232] RBP: 00007f9bc7411e19 R08: 0000000000000000 R09: 0000000000000000 [ 145.428972][ T8232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.436936][ T8232] R13: 00007f9bc75c6038 R14: 00007f9bc75c5fa0 R15: 00007fffbd184b48 [ 145.444892][ T8232] [ 145.448085][ T8232] Kernel Offset: disabled [ 145.452392][ T8232] Rebooting in 86400 seconds..