last executing test programs: 3m35.070988889s ago: executing program 1 (id=118): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c50f80b000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x40, 0x2, 0x4, {0x4, 0x0, "34d0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m33.015089s ago: executing program 1 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a55d25bd7000fedbdf251400000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 3m32.873274248s ago: executing program 1 (id=160): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000011) 3m31.810237008s ago: executing program 1 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 3m31.68933186s ago: executing program 1 (id=180): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m31.40682026s ago: executing program 1 (id=190): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 3m31.254660651s ago: executing program 32 (id=190): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 2.863814019s ago: executing program 2 (id=5371): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000080)) 2.772788922s ago: executing program 2 (id=5376): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 2.697529294s ago: executing program 2 (id=5380): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x14) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000004c0)={0x0, {}, 0x0, {}, 0x5, 0x9, 0x1, 0x10, "649f130063a0921768d2836c5bd00eeff8433c7b78ac9fa9c3cea4f17119f71a8a7b052165879db2ab924147b037d58173d7cfad51c2cd6cc3ef605cf0758a59", "7cff0291dee1b69a812ad4a176535a23b30d787735ecf61ff594f4d0c9b39a03", [0x4, 0x1]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 2.570784541s ago: executing program 2 (id=5383): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x400000001) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) 1.693132823s ago: executing program 0 (id=5418): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0xf4) 1.314837715s ago: executing program 0 (id=5427): r0 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{}, {}], 0x2) semop(r0, &(0x7f0000000180)=[{}, {}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 1.076085883s ago: executing program 0 (id=5438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x3, 0x0, 0x0, 0x8, 0x94, 0x0, 0x0, 0x6, 0xdf, 0x0, 0x8000000000000001}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x8, 0xfc, 0x0, 0x3, 0x0, 0x800000100000000}, {0x1, 0x5, 0x76, 0x24, 0x0, 0x40, 0x4, 0x2, 0x1, 0xff, 0x0, 0x0, 0x8}], 0xfffffffc}) 989.488747ms ago: executing program 0 (id=5442): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000006c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5e7, @bcast, @rose={'rose', 0x0}, 0x2, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 912.349219ms ago: executing program 0 (id=5447): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 900.644903ms ago: executing program 4 (id=5448): io_setup(0x9, &(0x7f0000000080)=0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0xffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)={0xa0001011}) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0xde, 0x0, 0x1, r2}]) 804.068168ms ago: executing program 0 (id=5453): timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) 714.811032ms ago: executing program 4 (id=5456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000001380)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 677.603682ms ago: executing program 4 (id=5458): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000f80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1000000) 634.274376ms ago: executing program 3 (id=5459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000040000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) 574.483613ms ago: executing program 3 (id=5460): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendfile(r1, r0, 0x0, 0x5) 573.483927ms ago: executing program 5 (id=5461): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40814) 489.137405ms ago: executing program 3 (id=5462): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 486.163252ms ago: executing program 5 (id=5463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x4}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xd}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x57}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_FQ_CODEL_FLOWS={0xfffffffffffffc74, 0x5, 0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x6}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xb4}}, 0x0) 442.331124ms ago: executing program 2 (id=5464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x1000000, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x200}, {0x448eade7, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x10000, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x10}, {0xfffffffd, 0x0, 0x0, 0x5, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffb}, {}, {}, {0x0, 0xff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xcb, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x83f}, {}, {}, {}, {0xffff0001, 0x0, 0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffb}, {}, {}, {0x0, 0x0, 0x0, 0xf1a}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x200000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 303.192769ms ago: executing program 5 (id=5465): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) syz_open_dev$hiddev(0x0, 0x0, 0x0) 303.030553ms ago: executing program 3 (id=5466): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 302.756892ms ago: executing program 2 (id=5467): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) lseek(r0, 0x289e0cb5, 0x0) 275.759426ms ago: executing program 4 (id=5468): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x81) 247.552104ms ago: executing program 5 (id=5469): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) 246.811329ms ago: executing program 3 (id=5470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x1, 0x23, 0x65, 0x66, 0x0, 0x3, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@noop]}}, {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x8, 0x0, 0xfffb}, {"710eea588f4b5cd4af199cb2edb000319ddf4937b4f5af64e5bf3411938caa6d8bec2fbc46c4310f7178e79723ed43f7c28d7385935fafa46f"}}}}, 0x73) 184.484328ms ago: executing program 4 (id=5471): io_uring_setup(0x5427, &(0x7f0000000080)={0x0, 0x8926, 0x400, 0x1, 0x189}) syz_open_dev$rtc(&(0x7f00000012c0), 0x0, 0xb42) r0 = syz_io_uring_setup(0x66d, &(0x7f0000000400)={0x0, 0x29ce, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x1ff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 184.056719ms ago: executing program 5 (id=5472): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace(0x4208, r0) ptrace$getregset(0x4204, r0, 0x6, 0x0) 86.869131ms ago: executing program 4 (id=5473): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r0, 0x40203, 0x4) 78.052958ms ago: executing program 3 (id=5474): r0 = syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) 0s ago: executing program 5 (id=5475): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) kernel console output (not intermixed with test programs): ted [ 190.358620][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.361506][T12850] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 190.385541][ T10] gp8psk_fe: Frontend attached [ 190.402852][ T10] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 190.413814][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 190.433891][ T5905] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 190.445907][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.464974][ T5905] usb 1-1: Product: syz [ 190.471560][ T5905] usb 1-1: Manufacturer: syz [ 190.476988][ T10] gp8psk: usb in 138 operation failed. [ 190.485211][ T5905] usb 1-1: SerialNumber: syz [ 190.488667][T12855] syz.2.2994: attempt to access beyond end of device [ 190.488667][T12855] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 190.493944][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 190.514273][ T10] gp8psk: found Genpix USB device pID = 203 (hex) [ 190.528711][T12855] FAT-fs (loop5): unable to read boot sector [ 190.535850][ T5905] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 190.555921][ T5874] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 190.569436][ T10] usb 6-1: USB disconnect, device number 28 [ 190.632204][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 190.752824][T12873] input: syz1 as /devices/virtual/input/input54 [ 190.878439][T12883] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 190.884983][T12883] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.901306][T12883] vhci_hcd vhci_hcd.0: Device attached [ 190.910541][T12881] devpts: Unknown parameter 'g' [ 190.913049][T12884] vhci_hcd: connection closed [ 190.915863][ T5996] vhci_hcd: stop threads [ 190.939431][ T5996] vhci_hcd: release socket [ 190.943888][ T5996] vhci_hcd: disconnect device [ 191.206208][ T10] usb 1-1: USB disconnect, device number 28 [ 191.449706][T12907] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 191.453074][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 191.464341][ T5996] Bluetooth: hci5: Frame reassembly failed (-84) [ 191.619923][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 191.627481][ T24] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 191.636753][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.644773][ T24] usb 5-1: Product: syz [ 191.648993][ T24] usb 5-1: Manufacturer: syz [ 191.653614][ T24] usb 5-1: SerialNumber: syz [ 191.658917][ T24] usb 5-1: config 0 descriptor?? [ 191.665244][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 191.859902][ T5874] usb 1-1: Service connection timeout for: 256 [ 191.873858][ T5874] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 191.893638][ T5874] ath9k_htc: Failed to initialize the device [ 191.900647][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 192.078434][T12934] sch_fq: defrate 0 ignored. [ 192.122936][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 192.122951][ T30] audit: type=1400 audit(1743050722.581:1074): avc: denied { audit_write } for pid=12937 comm="syz.3.3031" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 192.173838][ T30] audit: type=1400 audit(1743050722.631:1075): avc: denied { mount } for pid=12939 comm="syz.5.3032" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 192.213814][ T30] audit: type=1400 audit(1743050722.661:1076): avc: denied { mounton } for pid=12939 comm="syz.5.3032" path="/552/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 192.237752][ T30] audit: type=1400 audit(1743050722.701:1077): avc: denied { unmount } for pid=6413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 192.242908][ T24] usb 5-1: reset high-speed USB device number 27 using dummy_hcd [ 192.371538][ T30] audit: type=1400 audit(1743050722.831:1078): avc: denied { bind } for pid=12953 comm="syz.3.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.385984][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3040'. [ 192.402610][ T30] audit: type=1400 audit(1743050722.861:1079): avc: denied { write } for pid=12953 comm="syz.3.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.584504][T12956] team0 (unregistering): Port device team_slave_0 removed [ 192.597385][T12956] team0 (unregistering): Port device team_slave_1 removed [ 192.725439][ T30] audit: type=1400 audit(1743050723.181:1080): avc: denied { create } for pid=12969 comm="syz.5.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.763345][ T30] audit: type=1400 audit(1743050723.211:1081): avc: denied { setopt } for pid=12969 comm="syz.5.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.851078][ T30] audit: type=1400 audit(1743050723.311:1082): avc: denied { setopt } for pid=12977 comm="syz.3.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.874769][ T24] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 192.895001][ T24] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 192.908085][ T24] usb 5-1: USB disconnect, device number 27 [ 192.953394][ T30] audit: type=1400 audit(1743050723.411:1083): avc: denied { create } for pid=12986 comm="syz.3.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.139468][ T47] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 193.309921][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 193.316003][ T47] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 193.324772][ T47] usb 6-1: config 179 has no interface number 0 [ 193.331196][ T47] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 193.342325][ T47] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 193.353689][ T47] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 193.364860][ T47] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 193.376272][ T47] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 193.389619][ T47] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 193.398642][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.409185][T12980] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 193.459470][ T5815] Bluetooth: hci5: command 0x1003 tx timeout [ 193.460365][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 193.724222][T13031] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3076'. [ 193.866550][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.932030][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 193.940343][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 193.955266][ T47] usb 6-1: USB disconnect, device number 29 [ 193.958032][T13047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.076591][ T5863] kernel write not supported for file /snd/seq (pid: 5863 comm: kworker/1:4) [ 194.289402][ T24] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 194.451516][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 194.472631][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 194.489695][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 194.508218][ T24] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 194.517628][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.529592][ T24] usb 3-1: Product: syz [ 194.533793][ T24] usb 3-1: Manufacturer: syz [ 194.538393][ T24] usb 3-1: SerialNumber: syz [ 194.547233][ T24] usb 3-1: config 0 descriptor?? [ 194.553385][T13053] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.562913][T13053] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.575485][ T24] usb 3-1: ucan: probing device on interface #0 [ 195.181806][ T24] ucan 3-1:0.0 can0: registered device [ 195.322999][T13127] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3124'. [ 195.332308][T13127] netlink: 'syz.4.3124': attribute type 1 has an invalid length. [ 195.385578][ T24] ucan 3-1:0.0 can0: firmware string: unknown [ 195.400507][ T24] usb 3-1: USB disconnect, device number 25 [ 195.522325][T13139] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 195.649296][ T5863] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 195.653605][T13145] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.814580][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.833222][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.843486][ T5863] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 195.853613][T13156] netlink: 'syz.3.3136': attribute type 11 has an invalid length. [ 195.861547][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.869390][T13156] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3136'. [ 195.883876][ T5863] usb 5-1: config 0 descriptor?? [ 196.280889][T13180] input: syz0 as /devices/virtual/input/input55 [ 196.309892][ T5863] isku 0003:1E7D:319C.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 196.475754][T13189] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.510442][ T5863] isku 0003:1E7D:319C.0024: couldn't init struct isku_device [ 196.518341][ T5863] isku 0003:1E7D:319C.0024: couldn't install keyboard [ 196.525957][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.530027][ T5863] isku 0003:1E7D:319C.0024: probe with driver isku failed with error -71 [ 196.533980][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.551115][ T5863] usb 5-1: USB disconnect, device number 28 [ 196.564642][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.583860][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.593929][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 196.719988][T13203] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 13203 comm: syz.3.3160) [ 197.128906][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 197.297066][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 197.297081][ T30] audit: type=1400 audit(1743050727.751:1114): avc: denied { append } for pid=13237 comm="syz.2.3177" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 197.352809][ T30] audit: type=1400 audit(1743050727.801:1115): avc: denied { create } for pid=13239 comm="syz.5.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.395950][ T30] audit: type=1400 audit(1743050727.801:1116): avc: denied { connect } for pid=13239 comm="syz.5.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.432421][ T30] audit: type=1400 audit(1743050727.811:1117): avc: denied { write } for pid=13239 comm="syz.5.3178" laddr=fe80::11 lport=2 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.455100][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.518899][ T30] audit: type=1400 audit(1743050727.811:1118): avc: denied { read } for pid=13239 comm="syz.5.3178" path="socket:[42858]" dev="sockfs" ino=42858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.800079][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 197.818814][ T30] audit: type=1400 audit(1743050728.271:1119): avc: denied { read } for pid=13269 comm="syz.3.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 197.949711][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 197.962577][ T10] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 197.971463][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.992131][ T10] usb 5-1: config 0 has no interface number 0 [ 198.012956][ T10] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 198.022169][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.045427][ T10] usb 5-1: Product: syz [ 198.053948][ T10] usb 5-1: Manufacturer: syz [ 198.062063][ T10] usb 5-1: SerialNumber: syz [ 198.081003][ T10] usb 5-1: config 0 descriptor?? [ 198.303873][ T10] usb 5-1: USB disconnect, device number 29 [ 198.354491][T13295] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 198.365616][ T30] audit: type=1400 audit(1743050728.821:1120): avc: denied { mount } for pid=13293 comm="syz.0.3201" name="/" dev="rpc_pipefs" ino=43309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 198.579677][ T5863] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 198.740609][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 198.746976][ T5863] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 198.755166][ T5863] usb 3-1: config 0 has no interface number 0 [ 198.762871][ T5863] usb 3-1: New USB device found, idVendor=05ac, idProduct=e7da, bcdDevice=4b.a9 [ 198.772008][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.780063][ T5863] usb 3-1: Product: syz [ 198.784229][ T5863] usb 3-1: Manufacturer: syz [ 198.788795][ T5863] usb 3-1: SerialNumber: syz [ 198.794215][ T5863] usb 3-1: config 0 descriptor?? [ 199.004929][ T5863] ipheth 3-1:0.15: Unable to find alternate settings interface [ 199.015373][ T5863] usb 3-1: USB disconnect, device number 26 [ 199.070960][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 199.219694][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 199.231720][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.245257][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.255649][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 199.263606][ T10] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 199.272975][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.289619][ T10] usb 5-1: config 0 descriptor?? [ 199.708923][ T10] cougar 0003:060B:500A.0025: unexpected long global item [ 199.717737][ T10] cougar 0003:060B:500A.0025: parse failed [ 199.723686][ T10] cougar 0003:060B:500A.0025: probe with driver cougar failed with error -22 [ 199.809396][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 199.916524][ T5874] usb 5-1: USB disconnect, device number 30 [ 199.959369][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 199.965641][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 199.975695][ T9] usb 1-1: config 0 has no interface number 0 [ 199.982021][ T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.993050][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 200.001604][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 200.010708][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.018677][ T9] usb 1-1: Product: syz [ 200.022869][ T9] usb 1-1: Manufacturer: syz [ 200.027459][ T9] usb 1-1: SerialNumber: syz [ 200.033046][ T9] usb 1-1: config 0 descriptor?? [ 200.039479][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 200.190460][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.198581][ T10] usb 3-1: config 0 has no interface number 0 [ 200.204740][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.215897][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.225637][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 200.234735][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.246398][ T10] usb 3-1: config 0 descriptor?? [ 200.525298][ T30] audit: type=1326 audit(1743050730.981:1121): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13368 comm="syz.3.3236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f194918d169 code=0x0 [ 200.656907][ T9] appletouch 1-1:0.85: Geyser mode initialized. [ 200.664911][ T10] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 200.672600][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input56 [ 200.682133][ T10] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 200.691729][ T10] prodikeys 0003:041E:2801.0026: item fetching failed at offset 2/7 [ 200.700679][ T10] prodikeys 0003:041E:2801.0026: hid parse failed [ 200.708563][ T10] prodikeys 0003:041E:2801.0026: probe with driver prodikeys failed with error -22 [ 200.749596][ T5905] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 200.874869][ T10] usb 1-1: USB disconnect, device number 29 [ 200.885697][ T10] appletouch 1-1:0.85: input: appletouch disconnected [ 200.885843][ T24] usb 3-1: USB disconnect, device number 27 [ 200.899565][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 200.906256][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 200.917944][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.932994][ T5905] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 200.942444][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.950803][ T5905] usb 5-1: Product: syz [ 200.954957][ T5905] usb 5-1: Manufacturer: syz [ 200.959735][ T5905] usb 5-1: SerialNumber: syz [ 200.965475][ T5905] usb 5-1: config 0 descriptor?? [ 200.971841][ T5905] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 200.981253][ T5905] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 201.583400][ T5905] em28xx 5-1:0.0: chip ID is em2874 [ 201.621798][T13392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3246'. [ 201.793780][ T30] audit: type=1400 audit(1743050732.251:1122): avc: denied { ioctl } for pid=13400 comm="syz.0.3251" path="socket:[44274]" dev="sockfs" ino=44274 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.857217][ T30] audit: type=1400 audit(1743050732.281:1123): avc: denied { setopt } for pid=13400 comm="syz.0.3251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.861065][ T24] usb 5-1: USB disconnect, device number 31 [ 201.907004][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 201.921849][ T24] em28xx 5-1:0.0: Freeing device [ 202.110604][T13430] sctp: [Deprecated]: syz.3.3265 (pid 13430) Use of int in max_burst socket option. [ 202.110604][T13430] Use struct sctp_assoc_value instead [ 202.118170][T13432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.199748][ T5905] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 202.234259][T13439] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3270'. [ 202.349609][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 202.360515][ T5905] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 202.369987][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.382251][ T5905] usb 3-1: config 0 descriptor?? [ 202.389118][ T5905] gspca_main: sunplus-2.14.0 probing 041e:400b [ 202.401426][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 202.401439][ T30] audit: type=1400 audit(1743050732.861:1125): avc: denied { write } for pid=13452 comm="syz.3.3276" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 202.701798][T13477] sctp: [Deprecated]: syz.5.3287 (pid 13477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.701798][T13477] Use struct sctp_sack_info instead [ 202.779413][ T5874] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 202.794948][ T5905] gspca_sunplus: reg_w_riv err -71 [ 202.800301][ T5905] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 202.809719][ T5905] usb 3-1: USB disconnect, device number 28 [ 202.874297][T13483] SELinux: failed to load policy [ 202.889501][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 202.916172][ T30] audit: type=1400 audit(1743050733.371:1126): avc: denied { listen } for pid=13484 comm="syz.5.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.935720][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.950524][ T30] audit: type=1400 audit(1743050733.401:1127): avc: denied { accept } for pid=13484 comm="syz.5.3291" lport=36678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.981752][ T5874] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 202.990901][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.998862][ T5874] usb 1-1: Product: syz [ 203.005988][ T5874] usb 1-1: Manufacturer: syz [ 203.011306][ T5874] usb 1-1: SerialNumber: syz [ 203.016613][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3292'. [ 203.026376][ T5874] usb 1-1: config 0 descriptor?? [ 203.049400][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 203.057056][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 203.068338][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 203.072388][T13489] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 203.085463][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 203.094718][ T9] usb 4-1: config 1 has no interface number 0 [ 203.100840][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.111724][ T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 203.124760][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 203.133792][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.145137][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 203.361277][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 203.443943][ T5874] usb 1-1: Firmware: major: 108, minor: 98, hardware type: RZUSB (3) [ 203.486072][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3299'. [ 203.499088][T13501] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 203.537381][ T30] audit: type=1400 audit(1743050733.991:1128): avc: denied { getopt } for pid=13503 comm="syz.4.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.654255][ T5874] usb 1-1: failed to fetch extended address, random address set [ 203.687132][T13517] mkiss: ax0: crc mode is auto. [ 203.690827][ T30] audit: type=1800 audit(1743050734.141:1129): pid=13518 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3305" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 203.695788][ T5874] usb 1-1: USB disconnect, device number 30 [ 203.814703][ T5905] usb 4-1: USB disconnect, device number 27 [ 203.822070][ T5905] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 203.883725][T13528] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3312'. [ 203.894260][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3312'. [ 204.091462][T13549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3321'. [ 204.393416][ T5902] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 204.558755][ T24] kernel write not supported for file /uhid (pid: 24 comm: kworker/1:0) [ 204.577884][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 204.585321][ T5902] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 204.600287][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.620478][ T5902] usb 5-1: config 0 descriptor?? [ 204.798225][ T30] audit: type=1400 audit(1743050735.251:1130): avc: denied { create } for pid=13588 comm="syz.0.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 204.817796][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.844537][ T5902] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 204.887818][ T30] audit: type=1804 audit(1743050735.341:1131): pid=13591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3340" name="/" dev="pidfs" ino=13591 res=1 errno=0 [ 205.010518][ T30] audit: type=1400 audit(1743050735.471:1132): avc: denied { read write } for pid=13599 comm="syz.0.3343" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 205.034258][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.046361][ T30] audit: type=1400 audit(1743050735.471:1133): avc: denied { open } for pid=13599 comm="syz.0.3343" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 205.069993][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.081387][ T30] audit: type=1400 audit(1743050735.541:1134): avc: denied { ioctl } for pid=13599 comm="syz.0.3343" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 205.106488][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.149454][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 205.150172][ T5815] Bluetooth: hci5: command 0x1003 tx timeout [ 205.246728][ T5902] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 205.249317][ T5905] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 205.257173][ T5902] asix 5-1:0.0: probe with driver asix failed with error -71 [ 205.280510][ T5902] usb 5-1: USB disconnect, device number 32 [ 205.420399][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 205.427698][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.439394][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.451354][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.480696][ T5905] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.492755][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.503714][ T5905] usb 4-1: config 0 descriptor?? [ 205.509361][T13598] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 205.517319][ T5905] hub 4-1:0.0: USB hub found [ 205.599335][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 205.723589][ T5905] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 205.750908][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.771927][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 205.786102][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.798767][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.806861][ T10] usb 3-1: Product: syz [ 205.813748][ T10] usb 3-1: Manufacturer: syz [ 205.818387][ T10] usb 3-1: SerialNumber: syz [ 205.832047][ T10] usb 3-1: bad CDC descriptors [ 205.978910][T13650] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 205.996316][T13650] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 206.020577][T13652] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3368'. [ 206.040146][ T24] usb 3-1: USB disconnect, device number 29 [ 206.125449][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 206.149649][ T5905] usbhid 4-1:0.0: can't add hid device: -71 [ 206.157151][ T5905] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 206.194956][T13667] macvlan0: entered allmulticast mode [ 206.205962][T13667] veth1_vlan: entered allmulticast mode [ 206.207138][ T5905] usb 4-1: USB disconnect, device number 28 [ 206.221124][T13667] macvlan0: left allmulticast mode [ 206.229425][T13667] veth1_vlan: left allmulticast mode [ 206.520431][ T10] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 206.568880][T13692] sctp: [Deprecated]: syz.4.3387 (pid 13692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.568880][T13692] Use struct sctp_sack_info instead [ 206.682316][ T10] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.720120][ T10] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 206.738138][ T10] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 206.757915][ T10] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 206.767233][ T10] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 206.778917][ T10] usb 1-1: Manufacturer: syz [ 206.783892][ T10] usb 1-1: SerialNumber: syz [ 207.004455][ T10] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 207.012701][ T10] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input57 [ 207.028728][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.035712][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.042705][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.049859][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.056799][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.063814][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.070804][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.077735][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.084501][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 207.111128][ T10] usb 1-1: USB disconnect, device number 31 [ 207.204886][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3409'. [ 207.414458][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 207.414474][ T30] audit: type=1400 audit(1743050737.871:1141): avc: denied { attach_queue } for pid=13751 comm="syz.5.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 207.444005][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3416'. [ 207.522812][ T30] audit: type=1400 audit(1743050737.981:1142): avc: denied { read } for pid=13757 comm="syz.5.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.568015][T13762] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3420'. [ 207.569597][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 207.758763][ T10] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.771445][ T10] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.802613][ T10] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.825873][ T10] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 207.845705][ T10] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 207.857735][ T10] usb 1-1: Manufacturer: syz [ 207.869801][ T10] usb 1-1: SerialNumber: syz [ 207.874623][T13789] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13789 comm=syz.3.3433 [ 207.900834][ T30] audit: type=1400 audit(1743050738.351:1143): avc: denied { read } for pid=13788 comm="syz.3.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 207.934653][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'. [ 207.962374][ T30] audit: type=1400 audit(1743050738.391:1144): avc: denied { create } for pid=13790 comm="syz.5.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 208.014250][ T30] audit: type=1400 audit(1743050738.391:1145): avc: denied { write } for pid=13790 comm="syz.5.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 208.104624][ T10] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 208.116998][ T10] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input58 [ 208.127547][ T5905] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 208.138640][ T30] audit: type=1400 audit(1743050738.601:1146): avc: denied { setopt } for pid=13802 comm="syz.4.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.167954][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 208.174994][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 208.182420][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 208.189362][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 208.196310][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 208.203273][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 208.210462][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 208.217558][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 208.224324][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 208.237832][ T10] usb 1-1: USB disconnect, device number 32 [ 208.310523][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 208.322321][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 208.334293][ T5905] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 208.345048][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.353545][ T5905] usb 3-1: Product: syz [ 208.357717][ T5905] usb 3-1: Manufacturer: syz [ 208.362662][ T5905] usb 3-1: SerialNumber: syz [ 208.368062][ T5905] usb 3-1: config 0 descriptor?? [ 208.373605][T13787] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 208.382931][T13787] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 208.593393][T13787] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 208.600861][T13787] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 208.681515][ T30] audit: type=1400 audit(1743050739.141:1147): avc: denied { read } for pid=13819 comm="syz.0.3446" name="mouse0" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 208.704990][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.012670][ T5905] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 209.087916][ T30] audit: type=1400 audit(1743050739.541:1148): avc: denied { lock } for pid=13833 comm="syz.4.3453" path="socket:[45823]" dev="sockfs" ino=45823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 209.096905][T13836] block device autoloading is deprecated and will be removed. [ 209.122102][T13836] syz.5.3454: attempt to access beyond end of device [ 209.122102][T13836] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 209.220732][ T5905] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 209.232136][ T5905] usb 3-1: USB disconnect, device number 30 [ 209.459545][ T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/1:0) [ 209.659303][ T5902] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 209.751755][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 209.812444][ T5902] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.824520][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.833497][ T5902] usb 4-1: Product: syz [ 209.837847][ T5902] usb 4-1: Manufacturer: syz [ 209.844483][ T5902] usb 4-1: SerialNumber: syz [ 209.852036][ T5902] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 209.868524][ T5863] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 209.909358][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 209.917301][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 209.927524][ T24] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 209.947766][ T24] usb 1-1: Product: syz [ 209.953564][ T24] usb 1-1: Manufacturer: syz [ 209.958813][ T24] usb 1-1: SerialNumber: syz [ 209.968015][ T24] usb 1-1: config 0 descriptor?? [ 209.975623][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 210.178492][ T30] audit: type=1400 audit(1743050740.631:1149): avc: denied { connect } for pid=13871 comm="syz.4.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 210.199377][ T30] audit: type=1400 audit(1743050740.631:1150): avc: denied { name_connect } for pid=13871 comm="syz.4.3471" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 210.289447][ T9] usb 4-1: USB disconnect, device number 29 [ 210.602850][ T24] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59 [ 210.852661][ T10] usb 1-1: USB disconnect, device number 33 [ 210.899520][ T5863] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 210.919375][ T5863] ath9k_htc: Failed to initialize the device [ 210.925678][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 211.102462][T13897] team0: entered promiscuous mode [ 211.107618][T13897] team_slave_0: entered promiscuous mode [ 211.116680][T13897] team_slave_1: entered promiscuous mode [ 211.126254][T13896] team0: left promiscuous mode [ 211.131258][T13896] team_slave_0: left promiscuous mode [ 211.146691][T13896] team_slave_1: left promiscuous mode [ 211.224836][T13906] cgroup: fork rejected by pids controller in /syz2 [ 211.299687][ T9] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 211.462331][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 211.480256][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.502555][ T9] usb 4-1: Product: syz [ 211.506774][ T9] usb 4-1: Manufacturer: syz [ 211.522323][ T9] usb 4-1: SerialNumber: syz [ 211.532885][ T9] usb 4-1: config 0 descriptor?? [ 211.568244][ T5952] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.639709][ T5952] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.724149][ T5952] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.732172][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.748143][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.757029][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.764776][ T9] peak_usb 4-1:0.0: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 211.765076][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.783305][ T5815] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.790533][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.803054][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.810830][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.818686][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.827276][ T5952] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.839216][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.848617][ T5820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.856232][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.881277][T13928] vcan0 speed is unknown, defaulting to 1000 [ 211.927414][ T5952] bridge_slave_1: left allmulticast mode [ 211.934353][ T5952] bridge_slave_1: left promiscuous mode [ 211.940281][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.952642][ T5952] bridge_slave_0: left allmulticast mode [ 211.958320][ T5952] bridge_slave_0: left promiscuous mode [ 211.964664][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.972021][ T9] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 211.978850][ T9] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 211.985774][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 211.993858][ T9] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 212.003012][ T5952] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 212.046629][ T5952] batman_adv: batadv0: Removing interface: ip6gretap1 [ 212.149400][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 212.155952][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.166995][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 212.177268][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 212.191537][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.200990][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.209001][ T10] usb 5-1: Product: syz [ 212.213329][ T10] usb 5-1: Manufacturer: syz [ 212.217946][ T10] usb 5-1: SerialNumber: syz [ 212.275636][ T5952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.285859][ T5952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.296813][ T5952] bond0 (unregistering): (slave bond2): Releasing backup interface [ 212.305366][ T5952] bond0 (unregistering): Released all slaves [ 212.314497][ T5952] bond1 (unregistering): Released all slaves [ 212.420610][ T5952] bond2 (unregistering): Released all slaves [ 212.427429][ T10] cdc_ncm 5-1:1.0: bind() failure [ 212.433491][ T5952] bond3 (unregistering): Released all slaves [ 212.439815][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 212.449150][ T10] cdc_ncm 5-1:1.1: bind() failure [ 212.450584][T13928] lo speed is unknown, defaulting to 1000 [ 212.467119][ T10] usb 5-1: USB disconnect, device number 33 [ 212.501153][ T9] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 212.522030][ T9] usb 4-1: USB disconnect, device number 30 [ 212.569574][T13928] chnl_net:caif_netlink_parms(): no params data found [ 212.639527][T13928] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.646653][T13928] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.653915][T13928] bridge_slave_0: entered allmulticast mode [ 212.663048][T13928] bridge_slave_0: entered promiscuous mode [ 212.672086][T13928] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.681741][T13928] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.688842][T13928] bridge_slave_1: entered allmulticast mode [ 212.696095][T13928] bridge_slave_1: entered promiscuous mode [ 212.709832][ T5874] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 212.753790][T13928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.787861][T13928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.813337][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.816247][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 212.816262][ T30] audit: type=1400 audit(1743050743.271:1158): avc: denied { read } for pid=13942 comm="syz.3.3502" path="socket:[47291]" dev="sockfs" ino=47291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.822258][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.858674][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.871623][ T5952] veth1_macvtap: left promiscuous mode [ 212.877183][ T5952] veth0_macvtap: left promiscuous mode [ 212.881004][ T5874] usb 1-1: unable to get BOS descriptor or descriptor too short [ 212.891254][ T5874] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 212.906327][ T5874] usb 1-1: config 6 has no interface number 0 [ 212.913094][ T5874] usb 1-1: config 6 interface 200 has no altsetting 0 [ 212.921845][ T5874] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 212.941246][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.962088][ T5874] usb 1-1: Product: syz [ 212.966378][ T5874] usb 1-1: Manufacturer: syz [ 212.979882][ T5874] usb 1-1: SerialNumber: syz [ 213.018705][ T30] audit: type=1400 audit(1743050743.481:1159): avc: denied { append } for pid=13949 comm="syz.4.3505" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 213.077435][ T30] audit: type=1400 audit(1743050743.501:1160): avc: denied { map } for pid=13949 comm="syz.4.3505" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 213.101010][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.108421][ T30] audit: type=1400 audit(1743050743.501:1161): avc: denied { execute } for pid=13949 comm="syz.4.3505" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 213.227225][ T5874] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 213.254483][ T5874] dvb-usb: bulk message failed: -22 (3/0) [ 213.268951][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.281204][ T5874] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 213.297125][ T5874] usb 1-1: media controller created [ 213.333745][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.340264][T13963] netlink: 'syz.4.3511': attribute type 1 has an invalid length. [ 213.353033][T13963] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3511'. [ 213.363533][T13963] netlink: 'syz.4.3511': attribute type 1 has an invalid length. [ 213.371065][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 213.382537][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 213.382739][T13963] netlink: 'syz.4.3511': attribute type 2 has an invalid length. [ 213.388302][ T5874] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 213.436017][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 213.451216][T13965] SELinux: ebitmap: truncated map [ 213.451719][ T5874] dvb-usb: schedule remote query interval to 150 msecs. [ 213.456259][T13965] SELinux: failed to load policy [ 213.465197][ T5874] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 213.492635][ T5952] team_slave_1 (unregistering): left allmulticast mode [ 213.501695][ T30] audit: type=1400 audit(1743050743.961:1162): avc: denied { watch } for pid=13966 comm="syz.4.3513" path="/734/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 213.507419][ T5874] usb 1-1: USB disconnect, device number 34 [ 213.546397][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.546991][ T30] audit: type=1400 audit(1743050743.961:1163): avc: denied { watch_sb watch_reads } for pid=13966 comm="syz.4.3513" path="/734/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 213.604192][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.621856][ T5952] team0 (unregistering): Port device team_slave_1 removed [ 213.643045][ T5874] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 213.676321][ T5952] team_slave_0 (unregistering): left allmulticast mode [ 213.690428][ T5952] team0 (unregistering): Port device team_slave_0 removed [ 213.697717][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3515'. [ 213.791411][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3516'. [ 213.932490][ T5952] team0 (unregistering): left allmulticast mode [ 213.942061][ T5815] Bluetooth: hci4: command tx timeout [ 213.996517][T13928] team0: Port device team_slave_0 added [ 214.020699][T13928] team0: Port device team_slave_1 added [ 214.087884][T13928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.102560][T13928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.153572][T13928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.167874][T13928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.177655][T13928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.192504][ T30] audit: type=1400 audit(1743050744.641:1164): avc: denied { read } for pid=13985 comm="syz.3.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.215160][T13928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.328809][T13928] hsr_slave_0: entered promiscuous mode [ 214.335556][T13928] hsr_slave_1: entered promiscuous mode [ 214.348362][T13928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.358412][T13928] Cannot create hsr debugfs directory [ 214.461998][T14004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.535495][T14010] netlink: 'syz.4.3534': attribute type 12 has an invalid length. [ 214.543393][T14010] netlink: 'syz.4.3534': attribute type 29 has an invalid length. [ 214.552709][T14010] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3534'. [ 214.562229][T14010] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3534'. [ 214.595471][ T30] audit: type=1400 audit(1743050745.051:1165): avc: denied { bind } for pid=14011 comm="syz.4.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 214.615069][ T30] audit: type=1400 audit(1743050745.051:1166): avc: denied { name_bind } for pid=14011 comm="syz.4.3535" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 214.636805][ T30] audit: type=1400 audit(1743050745.051:1167): avc: denied { node_bind } for pid=14011 comm="syz.4.3535" saddr=fc01::8 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 214.671639][T14014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.792652][T13928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.811524][T13928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.821444][T13928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.832802][T13928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.901106][T13928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.939171][T13928] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.968031][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.975145][ T5953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.990158][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.997286][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.020811][T14034] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3542'. [ 215.027797][T13928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.043154][T13928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.184916][T13928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.233285][T13928] veth0_vlan: entered promiscuous mode [ 215.252039][T13928] veth1_vlan: entered promiscuous mode [ 215.305465][T13928] veth0_macvtap: entered promiscuous mode [ 215.322750][T13928] veth1_macvtap: entered promiscuous mode [ 215.335080][T14054] hub 6-0:1.0: USB hub found [ 215.341516][T14054] hub 6-0:1.0: 1 port detected [ 215.344638][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.373182][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.391875][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.404626][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.418079][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.431328][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.441948][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.452627][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.463541][T13928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.490271][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.501440][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.514530][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.547245][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.567671][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.581210][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.591378][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.602626][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.613327][T13928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.624106][T13928] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.632933][T13928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.641751][T13928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.676889][T13928] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.769673][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.789318][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.818132][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.834111][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.003030][T14091] bond0 (unregistering): Released all slaves [ 216.019727][ T5815] Bluetooth: hci4: command tx timeout [ 216.041533][T14096] ax25_connect(): syz.3.3571 uses autobind, please contact jreuter@yaina.de [ 216.319771][T14123] team0: entered allmulticast mode [ 216.328006][T14123] team_slave_0: entered allmulticast mode [ 216.339642][ T5905] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 216.347237][T14123] team_slave_1: entered allmulticast mode [ 216.509930][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 216.517559][ T5905] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.528049][ T5905] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 216.541810][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 216.548503][ T5905] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 216.565221][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.580789][ T5905] usb 4-1: config 0 descriptor?? [ 216.620015][ T5874] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 216.712263][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3594'. [ 216.749641][ T5874] usb 1-1: device descriptor read/64, error -71 [ 216.989611][ T5874] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 217.012788][ T5905] corsair-cpro 0003:1B1C:0C10.0027: item fetching failed at offset 1/5 [ 217.026252][ T5905] corsair-cpro 0003:1B1C:0C10.0027: probe with driver corsair-cpro failed with error -22 [ 217.131789][ T5874] usb 1-1: device descriptor read/64, error -71 [ 217.242706][ T5863] usb 4-1: USB disconnect, device number 31 [ 217.249961][ T5874] usb usb1-port1: attempt power cycle [ 217.399380][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 217.551515][ T24] usb 6-1: config 14 has an invalid interface number: 144 but max is 2 [ 217.569520][ T24] usb 6-1: config 14 has an invalid interface association descriptor of length 5, skipping [ 217.586126][ T24] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 217.597653][ T24] usb 6-1: config 14 has 2 interfaces, different from the descriptor's value: 3 [ 217.607437][ T24] usb 6-1: config 14 has no interface number 0 [ 217.613675][ T5874] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 217.626182][T14175] kernel read not supported for file /veth1 (pid: 14175 comm: syz.2.3608) [ 217.629955][ T5874] usb 1-1: device descriptor read/8, error -71 [ 217.635397][ T24] usb 6-1: config 14 interface 1 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.657239][ T24] usb 6-1: config 14 interface 144 has no altsetting 0 [ 217.664669][ T24] usb 6-1: config 14 interface 1 has no altsetting 0 [ 217.673124][ T24] usb 6-1: New USB device found, idVendor=12d1, idProduct=51bd, bcdDevice=c4.42 [ 217.682381][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.690473][ T24] usb 6-1: Product: syz [ 217.694693][ T24] usb 6-1: Manufacturer: syz [ 217.699328][ T24] usb 6-1: SerialNumber: syz [ 217.889329][ T5874] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 217.915103][ T24] huawei_cdc_ncm 6-1:14.144: CDC Union missing and no IAD found [ 217.915749][ T5874] usb 1-1: device descriptor read/8, error -71 [ 217.924806][ T24] huawei_cdc_ncm 6-1:14.144: bind() failure [ 217.941736][ T24] usb 6-1: USB disconnect, device number 30 [ 218.049653][ T5874] usb usb1-port1: unable to enumerate USB device [ 218.109578][ T5815] Bluetooth: hci4: command tx timeout [ 218.578787][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 218.578802][ T30] audit: type=1400 audit(1743050749.031:1181): avc: denied { read } for pid=14222 comm="syz.5.3627" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 218.632682][ T30] audit: type=1400 audit(1743050749.071:1182): avc: denied { open } for pid=14222 comm="syz.5.3627" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 218.665022][ T30] audit: type=1400 audit(1743050749.071:1183): avc: denied { write } for pid=14224 comm="syz.2.3628" path="socket:[48380]" dev="sockfs" ino=48380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.732184][ T30] audit: type=1326 audit(1743050749.191:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.4.3631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685a78d169 code=0x0 [ 218.773128][ T30] audit: type=1400 audit(1743050749.231:1185): avc: denied { connect } for pid=14233 comm="syz.2.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.903052][T14243] macsec2: entered promiscuous mode [ 218.908369][T14243] macvlan1: entered promiscuous mode [ 218.919743][T14243] macvlan1: left promiscuous mode [ 219.156376][T14254] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 219.187062][ T30] audit: type=1400 audit(1743050749.641:1186): avc: denied { write } for pid=14255 comm="syz.3.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.229084][ T30] audit: type=1400 audit(1743050749.681:1187): avc: denied { write } for pid=14258 comm="syz.3.3643" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.252304][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.399336][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 219.576429][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.586956][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.611282][ T24] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 219.627125][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.643496][ T24] usb 6-1: config 0 descriptor?? [ 219.716457][ T30] audit: type=1400 audit(1743050750.171:1188): avc: denied { setopt } for pid=14290 comm="syz.0.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.833778][ T30] audit: type=1400 audit(1743050750.291:1189): avc: denied { getopt } for pid=14296 comm="syz.2.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.941367][T14307] usb usb7: usbfs: process 14307 (syz.2.3667) did not claim interface 0 before use [ 220.003120][ T30] audit: type=1400 audit(1743050750.461:1190): avc: denied { read } for pid=14309 comm="syz.4.3668" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 220.083669][ T24] megaworld 0003:07B5:0312.0028: unknown main item tag 0x0 [ 220.091313][ T24] megaworld 0003:07B5:0312.0028: unknown main item tag 0x0 [ 220.098535][ T24] megaworld 0003:07B5:0312.0028: item fetching failed at offset 2/5 [ 220.114592][ T24] megaworld 0003:07B5:0312.0028: parse failed [ 220.120901][ T24] megaworld 0003:07B5:0312.0028: probe with driver megaworld failed with error -22 [ 220.183128][ T5815] Bluetooth: hci4: command tx timeout [ 220.298413][ T10] usb 6-1: USB disconnect, device number 31 [ 221.108138][T14388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3704'. [ 221.260348][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 221.379377][ T5863] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 221.431835][ T24] usb 1-1: config index 0 descriptor too short (expected 8228, got 36) [ 221.449647][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.477550][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.497585][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.527635][ T24] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.01 [ 221.539533][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 221.567484][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.577331][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.592359][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.604633][ T24] usb 1-1: config 0 descriptor?? [ 221.615257][ T5863] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 221.626783][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.636303][ T5863] usb 4-1: config 0 descriptor?? [ 221.955123][T14445] overlay: filesystem on ./file0 not supported [ 222.038821][ T24] hid-rmi 0003:1532:011D.0029: unknown main item tag 0x0 [ 222.053118][ T24] hid-rmi 0003:1532:011D.0029: unknown main item tag 0x0 [ 222.073139][ T5863] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 222.080161][ T24] hid-rmi 0003:1532:011D.0029: unknown main item tag 0x0 [ 222.095901][ T5863] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 222.107033][ T24] hid-rmi 0003:1532:011D.0029: unknown main item tag 0x0 [ 222.114763][ T5863] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 222.125768][ T5863] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 222.133209][ T24] hid-rmi 0003:1532:011D.0029: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.0-1/input0 [ 222.147675][ T5863] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 222.167839][ T5863] savu 0003:1E7D:2D5A.002A: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 222.274443][ T9] usb 4-1: USB disconnect, device number 32 [ 222.292378][ T5874] usb 1-1: USB disconnect, device number 39 [ 222.460439][T14483] loop5: detected capacity change from 0 to 9047 [ 222.480922][T14483] loop5: detected capacity change from 9047 to 10191 [ 222.679773][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 222.830244][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 222.843477][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 222.869596][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 222.885291][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 222.895081][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.911487][ T10] usb 5-1: Product: syz [ 222.915668][ T10] usb 5-1: Manufacturer: syz [ 222.925064][ T10] usb 5-1: SerialNumber: syz [ 222.931249][ T10] usb 5-1: config 0 descriptor?? [ 222.938245][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 222.964102][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 223.132706][ T24] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=24 comm=kworker/1:0 [ 223.299625][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 223.386500][T14544] loop8: detected capacity change from 0 to 1 [ 223.394774][T14544] Dev loop8: unable to read RDB block 1 [ 223.401861][T14544] loop8: unable to read partition table [ 223.407680][T14544] loop8: partition table beyond EOD, truncated [ 223.414211][T14544] loop_reread_partitions: partition scan of loop8 (ţ被xü^>Ńŕ– ) failed (rc=-5) [ 223.461089][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.475966][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.488274][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 223.501675][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.511093][ T9] usb 3-1: config 0 descriptor?? [ 223.545112][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 223.553962][ T10] em28xx 5-1:0.0: Config register raw data: 0x2e [ 223.560671][ T10] em28xx 5-1:0.0: I2S Audio (1 sample rate(s)) [ 223.566846][ T10] em28xx 5-1:0.0: No AC97 audio processor [ 223.599370][ T5863] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 223.749294][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 223.763255][ T10] usb 5-1: USB disconnect, device number 34 [ 223.773749][ T5863] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 223.782790][ T5863] usb 4-1: config 2 has no interface number 0 [ 223.788900][ T5863] usb 4-1: config 2 interface 31 has no altsetting 0 [ 223.798213][ T5863] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 223.809624][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.817674][ T5863] usb 4-1: Product: syz [ 223.823785][ T5863] usb 4-1: Manufacturer: syz [ 223.828428][ T5863] usb 4-1: SerialNumber: syz [ 223.839364][ T24] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 223.922522][ T9] hid-led 0003:0FC5:B080.002B: unknown main item tag 0x0 [ 224.002048][ T24] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 224.011399][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.021339][ T24] usb 1-1: Product: syz [ 224.025598][ T24] usb 1-1: Manufacturer: syz [ 224.032571][ T24] usb 1-1: SerialNumber: syz [ 224.045937][ T24] usb 1-1: config 0 descriptor?? [ 224.057044][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 224.458230][ T5863] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 224.472277][ T5863] usb 4-1: USB disconnect, device number 33 [ 224.525975][ T47] usb 3-1: USB disconnect, device number 31 [ 224.839523][ T9] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 224.992001][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 224.998784][ T9] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 225.008929][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.017460][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 225.029192][ T9] usb 6-1: config 0 descriptor?? [ 225.109498][ T24] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 225.182877][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.201422][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 225.223355][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.241347][ T10] usb 5-1: config 0 descriptor?? [ 225.249869][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 225.280904][T14625] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3809'. [ 225.330212][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 225.336367][ T24] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 225.345809][ T24] usb 1-1: USB disconnect, device number 40 [ 225.451563][ T9] elo 0003:04E7:0030.002C: item fetching failed at offset 0/2 [ 225.473443][ T9] elo 0003:04E7:0030.002C: parse failed [ 225.482207][ T9] elo 0003:04E7:0030.002C: probe with driver elo failed with error -22 [ 225.666384][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 225.674650][ T5874] usb 6-1: USB disconnect, device number 32 [ 225.719403][ T47] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 225.809694][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 225.872398][T14661] hub 9-0:1.0: USB hub found [ 225.877161][T14661] hub 9-0:1.0: 1 port detected [ 225.883756][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 225.890573][ T47] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.893999][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 225.902533][ T47] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 225.902561][ T47] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 225.903718][ T47] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 225.912054][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 225.920629][ T47] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 225.933601][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 225.954408][ T47] usb 4-1: Manufacturer: syz [ 225.966633][ T47] usb 4-1: SerialNumber: syz [ 225.971969][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 225.983492][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 225.990269][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 225.993679][T14663] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 225.995704][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 226.013986][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 226.022829][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.034929][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.046268][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.056361][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 226.060480][ T24] kernel write not supported for file /media3 (pid: 24 comm: kworker/1:0) [ 226.063029][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.081955][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 226.088674][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.102180][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 226.109642][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 226.116418][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 226.120728][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 226.120740][ T30] audit: type=1400 audit(1743050756.571:1199): avc: denied { setopt } for pid=14666 comm="syz.0.3829" lport=44297 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 226.125706][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.164747][ T9] usb 3-1: Manufacturer: syz [ 226.169726][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 226.176407][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 226.197710][ T10] pwc: Registered as video103. [ 226.198448][ T47] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 226.202978][ T9] usb 3-1: config 0 descriptor?? [ 226.216222][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input62 [ 226.226219][ T47] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input61 [ 226.232184][ T10] usb 5-1: USB disconnect, device number 35 [ 226.249351][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 226.256303][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 226.263352][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 226.270402][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 226.277383][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 226.284605][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 226.291566][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 226.298481][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 226.305277][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 226.317420][ T47] usb 4-1: USB disconnect, device number 34 [ 226.469962][ T9] rc_core: IR keymap rc-hauppauge not found [ 226.476335][ T9] Registered IR keymap rc-empty [ 226.482901][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.489387][ T5863] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 226.510922][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.529008][ T5905] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 226.537500][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 226.550812][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input63 [ 226.566227][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.599404][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.619332][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.639610][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.640534][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.659382][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.670358][ T5863] usb 6-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 226.679323][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.681268][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.702089][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.705906][ T5863] usb 6-1: config 0 descriptor?? [ 226.721711][ T5863] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 226.729859][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.737391][ T5905] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.752517][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.760041][ T5905] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 226.769303][ T47] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 226.770236][ T5905] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.789895][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.797083][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.811656][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 226.812150][T14673] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 226.827050][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.847516][ T5905] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.929021][ T5905] usb 3-1: USB disconnect, device number 32 [ 226.934021][T14671] netlink: 165 bytes leftover after parsing attributes in process `syz.5.3831'. [ 226.948003][ T47] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.963975][ T5863] usb 6-1: USB disconnect, device number 33 [ 226.972441][ T47] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.985633][T14686] input: syz1 as /devices/virtual/input/input64 [ 226.985998][ T47] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 227.005981][ T47] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 227.015264][ T47] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 227.026650][ T47] usb 4-1: Manufacturer: syz [ 227.031770][ T47] usb 4-1: SerialNumber: syz [ 227.063494][ T30] audit: type=1400 audit(1743050757.521:1200): avc: denied { append } for pid=14672 comm="syz.0.3832" name="midi3" dev="devtmpfs" ino=3164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.087594][ T24] usb 1-1: USB disconnect, device number 41 [ 227.248040][ T47] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 227.256819][ T47] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input65 [ 227.271933][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 227.278905][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 227.285968][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 227.292935][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 227.299915][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 227.306843][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 227.313796][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 227.320747][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 227.327513][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 227.337632][ T47] usb 4-1: USB disconnect, device number 35 [ 227.806419][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3859'. [ 227.818474][T14732] netlink: 'syz.2.3859': attribute type 7 has an invalid length. [ 227.826712][ T30] audit: type=1400 audit(1743050758.291:1201): avc: denied { bind } for pid=14730 comm="syz.5.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.848517][T14733] atomic_op ffff888052fb6998 conn xmit_atomic 0000000000000000 [ 227.857260][T14732] netlink: 'syz.2.3859': attribute type 8 has an invalid length. [ 227.869485][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3859'. [ 227.952997][T14743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3864'. [ 228.160445][ T30] audit: type=1400 audit(1743050758.611:1202): avc: denied { create } for pid=14756 comm="syz.3.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 228.223636][ T30] audit: type=1400 audit(1743050758.671:1203): avc: denied { connect } for pid=14756 comm="syz.3.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 228.287879][ T30] audit: type=1400 audit(1743050758.681:1204): avc: denied { write } for pid=14756 comm="syz.3.3873" path="socket:[50893]" dev="sockfs" ino=50893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 228.331684][ T30] audit: type=1400 audit(1743050758.781:1205): avc: denied { mount } for pid=14767 comm="syz.4.3877" name="/" dev="ramfs" ino=50966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 228.375678][T14769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.382994][T14775] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3876'. [ 228.397208][T14768] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3876'. [ 228.458123][ T30] audit: type=1400 audit(1743050758.911:1206): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 228.483847][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3881'. [ 228.519452][ T30] audit: type=1400 audit(1743050758.941:1207): avc: denied { ioctl } for pid=14779 comm="syz.3.3881" path="socket:[51644]" dev="sockfs" ino=51644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 228.559367][ T5863] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 228.567705][T14783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3883'. [ 228.639694][T14789] siw: device registration error -23 [ 228.710071][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.718058][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 228.734104][ T5863] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 228.747234][ T5863] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.767567][ T5863] usb 6-1: config 0 has no interface number 0 [ 228.773899][ T5863] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 228.789554][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.792504][ T5863] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.816622][ T30] audit: type=1400 audit(1743050759.271:1208): avc: denied { read } for pid=14800 comm="syz.4.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.816960][ T5863] usb 6-1: config 0 interface 52 has no altsetting 0 [ 228.849129][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.864651][ T5863] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 228.875804][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 228.896129][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 228.906671][ T5863] usb 6-1: Product: syz [ 228.912425][ T5863] usb 6-1: SerialNumber: syz [ 228.918225][ T5863] usb 6-1: config 0 descriptor?? [ 228.939510][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.019609][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.044256][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 229.055666][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.067710][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.080813][ T24] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.095323][ T24] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.106609][ T24] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 229.120247][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.131710][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.142328][ T24] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 229.151467][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.162901][ T24] usb 4-1: config 0 descriptor?? [ 229.220138][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.261438][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.329618][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.348559][ T47] usb 6-1: USB disconnect, device number 34 [ 229.575326][ T24] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x0 [ 229.583360][ T24] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x0 [ 229.591298][ T24] hid-thrustmaster 0003:044F:B65D.002D: item fetching failed at offset 2/5 [ 229.600201][ T24] hid-thrustmaster 0003:044F:B65D.002D: parse failed with error -22 [ 229.608178][ T24] hid-thrustmaster 0003:044F:B65D.002D: probe with driver hid-thrustmaster failed with error -22 [ 229.800417][ T9] usb 4-1: USB disconnect, device number 36 [ 229.990476][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 230.149661][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 230.157263][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.166535][ T10] usb 5-1: config 11 has an invalid interface number: 244 but max is 0 [ 230.175502][ T10] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 230.186157][ T10] usb 5-1: config 11 has no interface number 0 [ 230.194938][ T10] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 230.238731][ T10] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 230.251674][ T10] usb 5-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.265846][ T10] usb 5-1: config 11 interface 244 has no altsetting 0 [ 230.287630][ T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 230.299265][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.307264][ T10] usb 5-1: Product: syz [ 230.313474][ T10] usb 5-1: Manufacturer: syz [ 230.318079][ T10] usb 5-1: SerialNumber: syz [ 230.325460][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 230.433802][T14850] sp0: Synchronizing with TNC [ 230.484743][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 230.494289][ T24] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 230.511375][ T24] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 230.529331][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 230.533061][ T10] peak_usb 5-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 230.538308][ T24] usb 3-1: config 1 has no interface number 0 [ 230.558966][ T24] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.574649][ T10] peak_usb 5-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 230.574979][T14858] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3916'. [ 230.599295][ T24] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 230.617775][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 230.627335][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.645822][T14858] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3916'. [ 230.660390][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 230.690219][ T10] peak_usb 5-1:11.244: probe with driver peak_usb failed with error -71 [ 230.712055][ T10] usb 5-1: USB disconnect, device number 36 [ 230.879719][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 231.099306][ T5905] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 231.269805][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 231.280754][ T5905] usb 1-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 231.299609][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.307701][ T5905] usb 1-1: Product: syz [ 231.316939][ T5905] usb 1-1: Manufacturer: syz [ 231.330539][ T5905] usb 1-1: SerialNumber: syz [ 231.338903][ T5905] usb 1-1: config 0 descriptor?? [ 231.348826][ T10] usb 3-1: USB disconnect, device number 33 [ 231.356816][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 231.364902][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 231.364916][ T30] audit: type=1400 audit(1743050761.831:1215): avc: denied { read write } for pid=14889 comm="syz.4.3931" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 231.377151][ T5905] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 231.433916][ T30] audit: type=1400 audit(1743050761.831:1216): avc: denied { open } for pid=14889 comm="syz.4.3931" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 231.437383][T14893] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 231.472649][T14893] vlan0: entered allmulticast mode [ 231.687005][T14900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.754137][ T30] audit: type=1400 audit(1743050762.211:1217): avc: denied { setopt } for pid=14907 comm="syz.4.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.782354][ T30] audit: type=1400 audit(1743050762.241:1218): avc: denied { read } for pid=14907 comm="syz.4.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.820754][T14900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.944401][T14900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.038457][T14900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.148527][T14922] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.174750][T14900] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.194469][T14900] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.215554][T14900] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.262974][T14900] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.330503][T14935] netlink: 'syz.5.3950': attribute type 13 has an invalid length. [ 232.338483][T14935] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.3950'. [ 232.408897][ T30] audit: type=1400 audit(1743050762.861:1219): avc: denied { create } for pid=14937 comm="syz.3.3952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 232.437463][ T30] audit: type=1400 audit(1743050762.891:1220): avc: denied { sys_admin } for pid=14937 comm="syz.3.3952" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 232.484333][ T5905] gspca_sonixj: reg_w err -71 [ 232.493330][ T30] audit: type=1400 audit(1743050762.951:1221): avc: denied { ioctl } for pid=14944 comm="syz.5.3955" path="socket:[52525]" dev="sockfs" ino=52525 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.495378][ T5905] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 232.518172][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.611789][ T5905] usb 1-1: USB disconnect, device number 42 [ 232.646532][T14950] random: crng reseeded on system resumption [ 232.655700][ T30] audit: type=1400 audit(1743050763.101:1222): avc: denied { append } for pid=14948 comm="syz.4.3958" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 232.739529][ T30] audit: type=1400 audit(1743050763.101:1223): avc: denied { open } for pid=14948 comm="syz.4.3958" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 232.944091][T14956] SELinux: ebitmap: truncated map [ 232.963116][T14956] SELinux: failed to load policy [ 233.115021][ T30] audit: type=1400 audit(1743050763.561:1224): avc: denied { unmount } for pid=6413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 233.144038][T14963] vcan0 speed is unknown, defaulting to 1000 [ 233.189559][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 233.332024][T14963] lo speed is unknown, defaulting to 1000 [ 233.339283][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 233.350702][ T10] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 233.362535][ T10] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 233.389191][ T10] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 233.414437][ T10] usb 4-1: config 250 has no interface number 0 [ 233.431983][ T10] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 233.468702][ T10] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 233.531944][ T10] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.552868][ T10] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 233.564253][ T10] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 233.578243][ T10] usb 4-1: config 250 interface 228 has no altsetting 0 [ 233.589321][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 233.598362][ T10] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 233.624688][ T10] usb 4-1: Product: syz [ 233.636442][ T10] usb 4-1: SerialNumber: syz [ 233.643671][ T10] hub 4-1:250.228: bad descriptor, ignoring hub [ 233.657534][ T10] hub 4-1:250.228: probe with driver hub failed with error -5 [ 233.873130][ T10] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 37 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 233.922178][ T10] usb 4-1: USB disconnect, device number 37 [ 233.943984][ T10] usblp0: removed [ 234.016087][T14989] vcan0 speed is unknown, defaulting to 1000 [ 234.049598][ T5905] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 234.116792][T14989] lo speed is unknown, defaulting to 1000 [ 234.225168][ T5905] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 234.238189][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.252389][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.263782][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 234.290916][ T5905] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 234.300056][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.310045][ T5905] usb 1-1: config 0 descriptor?? [ 234.347347][T15006] syzkaller1: entered promiscuous mode [ 234.354250][T15006] syzkaller1: entered allmulticast mode [ 234.447085][ T5874] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 234.535545][ T5905] usbhid 1-1:0.0: can't add hid device: -71 [ 234.541793][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 234.559741][ T5905] usb 1-1: USB disconnect, device number 43 [ 234.799621][ T5874] usb 5-1: device not accepting address 37, error -71 [ 234.954530][T15042] vcan0 speed is unknown, defaulting to 1000 [ 235.218086][T15042] lo speed is unknown, defaulting to 1000 [ 236.380615][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 236.380632][ T30] audit: type=1400 audit(1743050766.841:1365): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 236.458939][ T30] audit: type=1400 audit(1743050766.861:1366): avc: denied { read write } for pid=15139 comm="syz.4.4044" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 236.482241][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.519358][ T30] audit: type=1400 audit(1743050766.881:1367): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 236.572669][ T30] audit: type=1400 audit(1743050766.891:1368): avc: denied { create } for pid=15134 comm="syz.3.4042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 236.611723][ T30] audit: type=1400 audit(1743050766.921:1369): avc: denied { read write } for pid=13928 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 236.635972][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.704642][ T30] audit: type=1400 audit(1743050766.921:1370): avc: denied { create } for pid=15141 comm="syz.4.4045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 236.748210][ T30] audit: type=1400 audit(1743050766.951:1371): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 236.806801][ T30] audit: type=1400 audit(1743050767.021:1372): avc: denied { map_create } for pid=15143 comm="syz.4.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 236.836020][ T30] audit: type=1400 audit(1743050767.031:1373): avc: denied { prog_load } for pid=15143 comm="syz.4.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 236.858163][ T30] audit: type=1400 audit(1743050767.031:1374): avc: denied { map_create } for pid=15145 comm="syz.2.4046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 238.251155][ T6010] Bluetooth: hci5: Frame reassembly failed (-84) [ 238.405202][ T5829] Bluetooth: hci6: sending frame failed (-49) [ 238.412512][ T5820] Bluetooth: hci6: Entering manufacturer mode failed (-49) [ 239.417573][T15358] vcan0 speed is unknown, defaulting to 1000 [ 239.498783][T15358] lo speed is unknown, defaulting to 1000 [ 240.259634][ T5815] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 240.259716][ T5820] Bluetooth: hci5: command 0xfc11 tx timeout [ 240.973609][T15392] orangefs_mount: mount request failed with -4 [ 241.419066][ T30] kauditd_printk_skb: 495 callbacks suppressed [ 241.419080][ T30] audit: type=1400 audit(1743050771.871:1870): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 241.454692][ T30] audit: type=1400 audit(1743050771.911:1871): avc: denied { name_bind } for pid=15496 comm="syz.3.4212" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 241.482477][ T30] audit: type=1400 audit(1743050771.941:1872): avc: denied { audit_write } for pid=15498 comm="syz.0.4213" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 241.527781][ T30] audit: type=1400 audit(1743050771.981:1873): avc: denied { read write } for pid=13928 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 241.552056][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.558796][ T30] audit: type=1400 audit(1743050772.011:1874): avc: denied { name_bind } for pid=15501 comm="syz.0.4214" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 241.583453][ T30] audit: type=1400 audit(1743050772.041:1875): avc: denied { mounton } for pid=15503 comm="syz.2.4215" path="/145/file0" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 241.616811][ T30] audit: type=1400 audit(1743050772.071:1876): avc: denied { read write } for pid=13928 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 241.657915][ T30] audit: type=1400 audit(1743050772.111:1877): avc: denied { read } for pid=15508 comm="syz.0.4217" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 241.695372][ T30] audit: type=1400 audit(1743050772.111:1878): avc: denied { read write } for pid=13928 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 241.725097][ T30] audit: type=1400 audit(1743050772.151:1879): avc: denied { create } for pid=15510 comm="syz.2.4218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 246.431949][ T30] kauditd_printk_skb: 296 callbacks suppressed [ 246.431964][ T30] audit: type=1400 audit(1743050776.891:2176): avc: denied { allowed } for pid=15831 comm="syz.0.4366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 246.471061][ T30] audit: type=1400 audit(1743050776.921:2177): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 246.514893][ T30] audit: type=1400 audit(1743050776.931:2178): avc: denied { prog_load } for pid=15833 comm="syz.0.4369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 246.535209][ T30] audit: type=1400 audit(1743050776.931:2179): avc: denied { map_create } for pid=15833 comm="syz.0.4369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 246.554786][ T30] audit: type=1400 audit(1743050776.931:2180): avc: denied { prog_load } for pid=15833 comm="syz.0.4369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 246.574398][ T30] audit: type=1400 audit(1743050776.941:2181): avc: denied { execmem } for pid=15835 comm="syz.3.4370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 246.604033][ T30] audit: type=1400 audit(1743050776.951:2182): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 246.637711][ T30] audit: type=1400 audit(1743050776.971:2183): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 246.662278][ T30] audit: type=1400 audit(1743050776.971:2184): avc: denied { read write } for pid=15837 comm="syz.4.4371" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 246.685799][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.692435][ T30] audit: type=1400 audit(1743050776.991:2185): avc: denied { create } for pid=15839 comm="syz.3.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 247.088461][T15883] mac80211_hwsim hwsim13 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.199682][T16150] vcan0 speed is unknown, defaulting to 1000 [ 250.285380][T16155] vcan0 speed is unknown, defaulting to 1000 [ 250.291877][T16150] lo speed is unknown, defaulting to 1000 [ 250.395869][T16155] lo speed is unknown, defaulting to 1000 [ 251.174036][T16212] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 251.182946][T16212] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 251.448575][ T30] kauditd_printk_skb: 356 callbacks suppressed [ 251.448589][ T30] audit: type=1400 audit(1743050781.901:2542): avc: denied { read write } for pid=13928 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 251.532501][ T30] audit: type=1400 audit(1743050781.941:2543): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 251.569822][ T30] audit: type=1400 audit(1743050781.961:2544): avc: denied { write } for pid=16229 comm="syz.3.4555" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 251.595413][ T30] audit: type=1400 audit(1743050781.971:2545): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 251.621091][ T30] audit: type=1400 audit(1743050781.971:2546): avc: denied { name_bind } for pid=16232 comm="syz.2.4554" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 251.643454][ T30] audit: type=1400 audit(1743050781.991:2547): avc: denied { name_bind } for pid=16234 comm="syz.3.4556" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 251.665899][ T30] audit: type=1400 audit(1743050781.991:2548): avc: denied { name_bind } for pid=16234 comm="syz.3.4556" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 251.715210][ T30] audit: type=1400 audit(1743050782.011:2549): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 251.740680][ T30] audit: type=1400 audit(1743050782.021:2550): avc: denied { read write } for pid=16236 comm="syz.3.4557" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 251.768372][ T30] audit: type=1400 audit(1743050782.031:2551): avc: denied { read write } for pid=13928 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 252.737082][T16327] vcan0 speed is unknown, defaulting to 1000 [ 252.817582][T16327] lo speed is unknown, defaulting to 1000 [ 254.145516][T16437] netlink: 'syz.4.4646': attribute type 29 has an invalid length. [ 254.159899][T16437] netlink: 'syz.4.4646': attribute type 29 has an invalid length. [ 255.302575][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.463891][ T30] kauditd_printk_skb: 354 callbacks suppressed [ 256.463906][ T30] audit: type=1400 audit(1743050786.921:2906): avc: denied { read write } for pid=6413 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.533474][ T30] audit: type=1400 audit(1743050786.991:2907): avc: denied { read write } for pid=6413 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.579822][ T30] audit: type=1400 audit(1743050787.021:2908): avc: denied { read write } for pid=16598 comm="syz.5.4722" name="vbi1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 256.627321][ T30] audit: type=1400 audit(1743050787.041:2909): avc: denied { read write } for pid=6413 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.654304][ T30] audit: type=1400 audit(1743050787.071:2910): avc: denied { create } for pid=16601 comm="syz.5.4723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 256.674531][ T30] audit: type=1400 audit(1743050787.081:2911): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.707763][ T30] audit: type=1400 audit(1743050787.081:2912): avc: denied { read write } for pid=6413 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.743428][ T30] audit: type=1400 audit(1743050787.161:2913): avc: denied { read write } for pid=6413 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.793441][ T30] audit: type=1400 audit(1743050787.161:2914): avc: denied { block_suspend } for pid=16605 comm="syz.3.4724" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 256.818506][ T30] audit: type=1400 audit(1743050787.201:2915): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.905702][T16701] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 258.495108][T16759] vcan0 speed is unknown, defaulting to 1000 [ 258.663874][T16759] lo speed is unknown, defaulting to 1000 [ 261.799740][ T30] kauditd_printk_skb: 331 callbacks suppressed [ 261.799755][ T30] audit: type=1400 audit(1743050792.261:3247): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.830083][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.836404][ T30] audit: type=1400 audit(1743050792.291:3248): avc: denied { create } for pid=16956 comm="syz.4.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 261.856901][ T30] audit: type=1400 audit(1743050792.301:3249): avc: denied { create } for pid=16956 comm="syz.4.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 261.877434][ T30] audit: type=1400 audit(1743050792.321:3250): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.901596][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.911208][ T30] audit: type=1400 audit(1743050792.371:3251): avc: denied { mounton } for pid=16958 comm="syz.4.4890" path="/1005/file0" dev="tmpfs" ino=5148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 261.952672][ T30] audit: type=1400 audit(1743050792.401:3252): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.980094][ T30] audit: type=1400 audit(1743050792.411:3253): avc: denied { read write } for pid=6413 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.005553][ T30] audit: type=1400 audit(1743050792.441:3254): avc: denied { prog_load } for pid=16960 comm="syz.4.4891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 262.026418][ T30] audit: type=1400 audit(1743050792.471:3255): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.051715][ T30] audit: type=1400 audit(1743050792.491:3256): avc: denied { read } for pid=16960 comm="syz.4.4891" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 262.268554][T16978] pim6reg1: entered promiscuous mode [ 262.281833][T16978] pim6reg1: entered allmulticast mode [ 262.851147][T17034] tun0: tun_chr_ioctl cmd 1074025675 [ 262.856462][T17034] tun0: persist enabled [ 262.861158][T17034] tun0: tun_chr_ioctl cmd 1074025675 [ 262.866464][T17034] tun0: persist disabled [ 263.181618][T17061] ALSA: mixer_oss: invalid OSS volume '' [ 263.299979][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 263.300549][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 266.835963][ T30] kauditd_printk_skb: 314 callbacks suppressed [ 266.835977][ T30] audit: type=1400 audit(1743050797.291:3571): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.848240][ T30] audit: type=1400 audit(1743050797.301:3572): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.900096][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.910733][ T30] audit: type=1400 audit(1743050797.361:3573): avc: denied { prog_load } for pid=17315 comm="syz.4.5060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 266.910777][ T30] audit: type=1400 audit(1743050797.371:3574): avc: denied { read write } for pid=17314 comm="syz.3.5059" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 266.929936][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.951440][ T30] audit: type=1400 audit(1743050797.391:3575): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.951480][ T30] audit: type=1400 audit(1743050797.401:3576): avc: denied { read write } for pid=17318 comm="syz.4.5061" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 266.975009][ T30] audit: type=1400 audit(1743050797.411:3577): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.976684][ T30] audit: type=1400 audit(1743050797.431:3578): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.990479][ T30] audit: type=1400 audit(1743050797.451:3579): avc: denied { create } for pid=17322 comm="syz.4.5063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 266.991962][ T30] audit: type=1400 audit(1743050797.451:3580): avc: denied { create } for pid=17322 comm="syz.4.5063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 268.338075][T17410] netlink: 'syz.0.5104': attribute type 29 has an invalid length. [ 268.386912][T17410] netlink: 'syz.0.5104': attribute type 29 has an invalid length. [ 268.685882][T17445] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 268.685882][T17445] The task syz.5.5116 (17445) triggered the difference, watch for misbehavior. [ 271.859364][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 271.859644][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 271.873403][ T30] kauditd_printk_skb: 341 callbacks suppressed [ 271.873416][ T30] audit: type=1400 audit(1743050802.321:3922): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 271.907581][ T30] audit: type=1400 audit(1743050802.341:3923): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 271.932681][ T30] audit: type=1400 audit(1743050802.341:3924): avc: denied { read write } for pid=13928 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 271.958194][ T30] audit: type=1400 audit(1743050802.421:3925): avc: denied { read write } for pid=17676 comm="syz.3.5232" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 271.983668][ T30] audit: type=1400 audit(1743050802.421:3926): avc: denied { read write } for pid=6413 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 272.008255][ T30] audit: type=1400 audit(1743050802.451:3927): avc: denied { create } for pid=17677 comm="syz.0.5230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 272.049790][ T30] audit: type=1400 audit(1743050802.491:3928): avc: denied { read write } for pid=17680 comm="syz.4.5231" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 272.115836][ T30] audit: type=1400 audit(1743050802.491:3929): avc: denied { mounton } for pid=17680 comm="syz.4.5231" path="/1087/file0" dev="tmpfs" ino=5567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 272.185282][ T30] audit: type=1400 audit(1743050802.541:3930): avc: denied { create } for pid=17682 comm="syz.5.5234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 272.216777][T17697] sp0: Synchronizing with TNC [ 272.227388][ T30] audit: type=1400 audit(1743050802.541:3931): avc: denied { append } for pid=17683 comm="syz.2.5233" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=0 [ 272.365098][T17706] sp0: Synchronizing with TNC [ 276.895023][ T30] kauditd_printk_skb: 359 callbacks suppressed [ 276.895038][ T30] audit: type=1400 audit(1743050807.351:4291): avc: denied { create } for pid=18082 comm="syz.3.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 276.942640][ T30] audit: type=1400 audit(1743050807.391:4292): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 277.003996][ T30] audit: type=1400 audit(1743050807.391:4293): avc: denied { read write } for pid=6413 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 277.030519][ T30] audit: type=1400 audit(1743050807.431:4294): avc: denied { create } for pid=18084 comm="syz.5.5423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 277.052785][ T30] audit: type=1400 audit(1743050807.441:4295): avc: denied { read write } for pid=6413 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 277.080839][ T30] audit: type=1400 audit(1743050807.451:4296): avc: denied { read } for pid=18086 comm="syz.3.5424" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 277.104416][ T30] audit: type=1400 audit(1743050807.461:4297): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 277.128564][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.171469][ T30] audit: type=1400 audit(1743050807.491:4298): avc: denied { name_bind } for pid=18090 comm="syz.3.5426" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 277.204757][ T30] audit: type=1400 audit(1743050807.591:4299): avc: denied { read write } for pid=6413 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 277.228911][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.251572][ T30] audit: type=1400 audit(1743050807.611:4300): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 277.893789][ T5905] Process accounting resumed [ 277.939328][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 277.945818][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 278.476292][T18200] veth1_macvtap: left promiscuous mode [ 278.487639][T18200] macsec0: entered promiscuous mode [ 278.495276][T18153] ================================================================== [ 278.503346][T18153] BUG: KASAN: slab-use-after-free in move_to_new_folio+0x12e/0x700 [ 278.511246][T18153] Read of size 8 at addr ffff888025a5f3d0 by task syz.0.5453/18153 [ 278.519130][T18153] [ 278.521452][T18153] CPU: 1 UID: 0 PID: 18153 Comm: syz.0.5453 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 278.521476][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.521487][T18153] Call Trace: [ 278.521493][T18153] [ 278.521499][T18153] dump_stack_lvl+0x116/0x1f0 [ 278.521528][T18153] print_report+0xc3/0x670 [ 278.521546][T18153] ? __virt_addr_valid+0x5e/0x590 [ 278.521569][T18153] ? __phys_addr+0xc6/0x150 [ 278.521592][T18153] ? move_to_new_folio+0x12e/0x700 [ 278.521612][T18153] kasan_report+0xe0/0x110 [ 278.521631][T18153] ? move_to_new_folio+0x12e/0x700 [ 278.521653][T18153] kasan_check_range+0xef/0x1a0 [ 278.521674][T18153] move_to_new_folio+0x12e/0x700 [ 278.521695][T18153] migrate_pages_batch+0x201d/0x31a0 [ 278.521718][T18153] ? __pfx_compaction_free+0x10/0x10 [ 278.521748][T18153] ? __pfx_migrate_pages_batch+0x10/0x10 [ 278.521772][T18153] migrate_pages_sync+0x12d/0x8a0 [ 278.521794][T18153] ? __pfx_compaction_alloc+0x10/0x10 [ 278.521819][T18153] ? __pfx_compaction_free+0x10/0x10 [ 278.521846][T18153] ? mark_held_locks+0x49/0x80 [ 278.521869][T18153] ? __pfx_migrate_pages_sync+0x10/0x10 [ 278.521894][T18153] migrate_pages+0x1b28/0x2350 [ 278.521916][T18153] ? __pfx_compaction_alloc+0x10/0x10 [ 278.521941][T18153] ? __pfx_compaction_free+0x10/0x10 [ 278.521975][T18153] ? __pfx_migrate_pages+0x10/0x10 [ 278.521999][T18153] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 278.522018][T18153] ? pfn_to_online_page+0x1b0/0x4d0 [ 278.522045][T18153] compact_zone+0x1f6d/0x4220 [ 278.522072][T18153] ? __pfx_compact_zone+0x10/0x10 [ 278.522088][T18153] ? find_held_lock+0x2b/0x80 [ 278.522105][T18153] ? __flush_work+0xa48/0xcc0 [ 278.522126][T18153] compact_node+0x1a4/0x2d0 [ 278.522143][T18153] ? __pfx_compact_node+0x10/0x10 [ 278.522171][T18153] ? __lru_add_drain_all+0xe7/0x6f0 [ 278.522197][T18153] sysctl_compaction_handler+0x141/0x210 [ 278.522216][T18153] proc_sys_call_handler+0x3d0/0x5b0 [ 278.522239][T18153] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 278.522260][T18153] ? rcu_is_watching+0x12/0xc0 [ 278.522278][T18153] ? splice_from_pipe_next+0x1f8/0x5d0 [ 278.522308][T18153] iter_file_splice_write+0x91c/0x1150 [ 278.522342][T18153] ? __pfx_iter_file_splice_write+0x10/0x10 [ 278.522372][T18153] ? __pfx_copy_splice_read+0x10/0x10 [ 278.522403][T18153] ? __pfx_iter_file_splice_write+0x10/0x10 [ 278.522431][T18153] direct_splice_actor+0x18f/0x6c0 [ 278.522459][T18153] splice_direct_to_actor+0x342/0xa30 [ 278.522486][T18153] ? __pfx_direct_splice_actor+0x10/0x10 [ 278.522516][T18153] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 278.522544][T18153] ? __pfx___might_resched+0x10/0x10 [ 278.522567][T18153] do_splice_direct+0x174/0x240 [ 278.522593][T18153] ? __pfx_do_splice_direct+0x10/0x10 [ 278.522618][T18153] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 278.522646][T18153] ? rw_verify_area+0xcf/0x680 [ 278.522671][T18153] do_sendfile+0xafd/0xe50 [ 278.522698][T18153] ? __pfx_do_sendfile+0x10/0x10 [ 278.522726][T18153] __x64_sys_sendfile64+0x154/0x220 [ 278.522746][T18153] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 278.522764][T18153] ? rcu_is_watching+0x12/0xc0 [ 278.522785][T18153] do_syscall_64+0xcd/0x260 [ 278.522810][T18153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.522828][T18153] RIP: 0033:0x7fb94ff8d169 [ 278.522843][T18153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.522860][T18153] RSP: 002b:00007fb94ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 278.522878][T18153] RAX: ffffffffffffffda RBX: 00007fb9501a5fa0 RCX: 00007fb94ff8d169 [ 278.522889][T18153] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 278.522900][T18153] RBP: 00007fb95000e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 278.522911][T18153] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 278.522922][T18153] R13: 0000000000000000 R14: 00007fb9501a5fa0 R15: 00007ffecbed6148 [ 278.522939][T18153] [ 278.522945][T18153] [ 278.910278][T18153] Allocated by task 18120: [ 278.914671][T18153] kasan_save_stack+0x33/0x60 [ 278.919331][T18153] kasan_save_track+0x14/0x30 [ 278.923987][T18153] __kasan_slab_alloc+0x89/0x90 [ 278.928814][T18153] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 278.934597][T18153] shmem_alloc_inode+0x25/0x50 [ 278.939348][T18153] alloc_inode+0x61/0x240 [ 278.943666][T18153] new_inode+0x22/0x1c0 [ 278.947803][T18153] shmem_get_inode+0x19a/0xfb0 [ 278.952543][T18153] shmem_symlink+0xf7/0x780 [ 278.957027][T18153] vfs_symlink+0x400/0x680 [ 278.961425][T18153] do_symlinkat+0x261/0x310 [ 278.965905][T18153] __x64_sys_symlinkat+0x93/0xc0 [ 278.970820][T18153] do_syscall_64+0xcd/0x260 [ 278.975308][T18153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.981184][T18153] [ 278.983485][T18153] Freed by task 23: [ 278.987266][T18153] kasan_save_stack+0x33/0x60 [ 278.991920][T18153] kasan_save_track+0x14/0x30 [ 278.996573][T18153] kasan_save_free_info+0x3b/0x60 [ 279.001581][T18153] __kasan_slab_free+0x51/0x70 [ 279.006323][T18153] kmem_cache_free+0x2d4/0x4d0 [ 279.011063][T18153] i_callback+0x43/0x70 [ 279.015195][T18153] rcu_core+0x799/0x14e0 [ 279.019422][T18153] handle_softirqs+0x216/0x8e0 [ 279.024166][T18153] run_ksoftirqd+0x3a/0x60 [ 279.028568][T18153] smpboot_thread_fn+0x678/0xa70 [ 279.033489][T18153] kthread+0x3a4/0x760 [ 279.037542][T18153] ret_from_fork+0x45/0x80 [ 279.041937][T18153] ret_from_fork_asm+0x1a/0x30 [ 279.046686][T18153] [ 279.048987][T18153] Last potentially related work creation: [ 279.054677][T18153] kasan_save_stack+0x33/0x60 [ 279.059337][T18153] kasan_record_aux_stack+0xb8/0xd0 [ 279.064527][T18153] __call_rcu_common.constprop.0+0x9a/0x9f0 [ 279.070406][T18153] destroy_inode+0x12c/0x1b0 [ 279.074980][T18153] evict+0x5b4/0x920 [ 279.078854][T18153] iput+0x521/0x880 [ 279.082643][T18153] do_unlinkat+0x518/0x6a0 [ 279.087039][T18153] __x64_sys_unlink+0xc5/0x110 [ 279.091780][T18153] do_syscall_64+0xcd/0x260 [ 279.096267][T18153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.102138][T18153] [ 279.104438][T18153] The buggy address belongs to the object at ffff888025a5ef08 [ 279.104438][T18153] which belongs to the cache shmem_inode_cache of size 1544 [ 279.119076][T18153] The buggy address is located 1224 bytes inside of [ 279.119076][T18153] freed 1544-byte region [ffff888025a5ef08, ffff888025a5f510) [ 279.133021][T18153] [ 279.135324][T18153] The buggy address belongs to the physical page: [ 279.141708][T18153] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25a58 [ 279.150447][T18153] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 279.158918][T18153] memcg:ffff888028185b01 [ 279.163133][T18153] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 279.170652][T18153] page_type: f5(slab) [ 279.174612][T18153] raw: 00fff00000000040 ffff88814040dc80 ffffea0000d6c000 dead000000000002 [ 279.183175][T18153] raw: 0000000000000000 0000000000130013 00000000f5000000 ffff888028185b01 [ 279.191738][T18153] head: 00fff00000000040 ffff88814040dc80 ffffea0000d6c000 dead000000000002 [ 279.200387][T18153] head: 0000000000000000 0000000000130013 00000000f5000000 ffff888028185b01 [ 279.209034][T18153] head: 00fff00000000003 ffffea0000969601 ffffffffffffffff 0000000000000000 [ 279.217683][T18153] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 279.226326][T18153] page dumped because: kasan: bad access detected [ 279.232715][T18153] page_owner tracks the page as allocated [ 279.238403][T18153] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 26, tgid 26 (kdevtmpfs), ts 6038811187, free_ts 0 [ 279.258177][T18153] post_alloc_hook+0x181/0x1b0 [ 279.262929][T18153] get_page_from_freelist+0x10c4/0x34c0 [ 279.268450][T18153] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 279.274320][T18153] alloc_pages_mpol+0x1fb/0x540 [ 279.279151][T18153] new_slab+0x23c/0x330 [ 279.283289][T18153] ___slab_alloc+0xd9c/0x1940 [ 279.287948][T18153] __slab_alloc.constprop.0+0x56/0xb0 [ 279.293307][T18153] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 279.299006][T18153] shmem_alloc_inode+0x25/0x50 [ 279.303756][T18153] alloc_inode+0x61/0x240 [ 279.308066][T18153] new_inode+0x22/0x1c0 [ 279.312203][T18153] shmem_get_inode+0x19a/0xfb0 [ 279.316946][T18153] shmem_mknod+0x1a8/0x450 [ 279.321357][T18153] vfs_mknod+0x5d7/0x8e0 [ 279.325583][T18153] devtmpfs_work_loop+0x1c8/0x8e0 [ 279.330591][T18153] devtmpfsd+0x4c/0x50 [ 279.334640][T18153] page_owner free stack trace missing [ 279.339986][T18153] [ 279.342287][T18153] Memory state around the buggy address: [ 279.347891][T18153] ffff888025a5f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.355929][T18153] ffff888025a5f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.363972][T18153] >ffff888025a5f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.372028][T18153] ^ [ 279.378698][T18153] ffff888025a5f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.386749][T18153] ffff888025a5f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.394788][T18153] ================================================================== [ 279.402908][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.417960][T18200] macsec0: entered allmulticast mode [ 279.444414][T18153] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 279.451648][T18153] CPU: 0 UID: 0 PID: 18153 Comm: syz.0.5453 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 279.463379][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.473440][T18153] Call Trace: [ 279.476705][T18153] [ 279.479618][T18153] dump_stack_lvl+0x3d/0x1f0 [ 279.484201][T18153] panic+0x71c/0x800 [ 279.488080][T18153] ? __pfx_panic+0x10/0x10 [ 279.492480][T18153] ? mark_held_locks+0x49/0x80 [ 279.497229][T18153] ? preempt_schedule_thunk+0x16/0x30 [ 279.502589][T18153] ? move_to_new_folio+0x12e/0x700 [ 279.507687][T18153] ? preempt_schedule_common+0x44/0xc0 [ 279.513129][T18153] ? move_to_new_folio+0x12e/0x700 [ 279.518219][T18153] check_panic_on_warn+0xab/0xb0 [ 279.523159][T18153] end_report+0x107/0x170 [ 279.527467][T18153] kasan_report+0xee/0x110 [ 279.531862][T18153] ? move_to_new_folio+0x12e/0x700 [ 279.536954][T18153] kasan_check_range+0xef/0x1a0 [ 279.541786][T18153] move_to_new_folio+0x12e/0x700 [ 279.546705][T18153] migrate_pages_batch+0x201d/0x31a0 [ 279.551974][T18153] ? __pfx_compaction_free+0x10/0x10 [ 279.557247][T18153] ? __pfx_migrate_pages_batch+0x10/0x10 [ 279.562863][T18153] migrate_pages_sync+0x12d/0x8a0 [ 279.567871][T18153] ? __pfx_compaction_alloc+0x10/0x10 [ 279.573231][T18153] ? __pfx_compaction_free+0x10/0x10 [ 279.578505][T18153] ? mark_held_locks+0x49/0x80 [ 279.583251][T18153] ? __pfx_migrate_pages_sync+0x10/0x10 [ 279.588780][T18153] migrate_pages+0x1b28/0x2350 [ 279.593526][T18153] ? __pfx_compaction_alloc+0x10/0x10 [ 279.598884][T18153] ? __pfx_compaction_free+0x10/0x10 [ 279.604177][T18153] ? __pfx_migrate_pages+0x10/0x10 [ 279.609271][T18153] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 279.615490][T18153] ? pfn_to_online_page+0x1b0/0x4d0 [ 279.620674][T18153] compact_zone+0x1f6d/0x4220 [ 279.625353][T18153] ? __pfx_compact_zone+0x10/0x10 [ 279.630365][T18153] ? find_held_lock+0x2b/0x80 [ 279.635036][T18153] ? __flush_work+0xa48/0xcc0 [ 279.639711][T18153] compact_node+0x1a4/0x2d0 [ 279.644199][T18153] ? __pfx_compact_node+0x10/0x10 [ 279.649212][T18153] ? __lru_add_drain_all+0xe7/0x6f0 [ 279.654403][T18153] sysctl_compaction_handler+0x141/0x210 [ 279.660016][T18153] proc_sys_call_handler+0x3d0/0x5b0 [ 279.665283][T18153] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 279.671069][T18153] ? rcu_is_watching+0x12/0xc0 [ 279.675812][T18153] ? splice_from_pipe_next+0x1f8/0x5d0 [ 279.681258][T18153] iter_file_splice_write+0x91c/0x1150 [ 279.686714][T18153] ? __pfx_iter_file_splice_write+0x10/0x10 [ 279.692594][T18153] ? __pfx_copy_splice_read+0x10/0x10 [ 279.697953][T18153] ? __pfx_iter_file_splice_write+0x10/0x10 [ 279.703832][T18153] direct_splice_actor+0x18f/0x6c0 [ 279.708928][T18153] splice_direct_to_actor+0x342/0xa30 [ 279.714285][T18153] ? __pfx_direct_splice_actor+0x10/0x10 [ 279.719918][T18153] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 279.725827][T18153] ? __pfx___might_resched+0x10/0x10 [ 279.731108][T18153] do_splice_direct+0x174/0x240 [ 279.735946][T18153] ? __pfx_do_splice_direct+0x10/0x10 [ 279.741307][T18153] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 279.747186][T18153] ? rw_verify_area+0xcf/0x680 [ 279.751937][T18153] do_sendfile+0xafd/0xe50 [ 279.756342][T18153] ? __pfx_do_sendfile+0x10/0x10 [ 279.761268][T18153] __x64_sys_sendfile64+0x154/0x220 [ 279.766451][T18153] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 279.772149][T18153] ? rcu_is_watching+0x12/0xc0 [ 279.776894][T18153] do_syscall_64+0xcd/0x260 [ 279.781384][T18153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.787255][T18153] RIP: 0033:0x7fb94ff8d169 [ 279.791648][T18153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.811250][T18153] RSP: 002b:00007fb94ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 279.819665][T18153] RAX: ffffffffffffffda RBX: 00007fb9501a5fa0 RCX: 00007fb94ff8d169 [ 279.827625][T18153] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 279.835574][T18153] RBP: 00007fb95000e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 279.843523][T18153] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 279.851471][T18153] R13: 0000000000000000 R14: 00007fb9501a5fa0 R15: 00007ffecbed6148 [ 279.859429][T18153] [ 279.862634][T18153] Kernel Offset: disabled [ 279.866932][T18153] Rebooting in 86400 seconds..