last executing test programs: 2m12.145219518s ago: executing program 2 (id=759): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 2m12.068086704s ago: executing program 2 (id=762): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) close(0x3) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 2m12.025424566s ago: executing program 2 (id=764): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x0) 2m11.907944142s ago: executing program 2 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m11.907555905s ago: executing program 2 (id=766): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, 0x14a, 0x0) 2m11.66295784s ago: executing program 2 (id=775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x10000, 0x8, 0xfff, 0x6f677948, 0x3ff, 0x4}]}) 2m11.506458911s ago: executing program 32 (id=775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x10000, 0x8, 0xfff, 0x6f677948, 0x3ff, 0x4}]}) 8.731423861s ago: executing program 4 (id=3133): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 8.69898626s ago: executing program 4 (id=3134): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x50, 0xfd, 0x7fffffff}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) 8.578525888s ago: executing program 4 (id=3138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) 8.568215605s ago: executing program 4 (id=3139): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x2295898, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 8.441875606s ago: executing program 4 (id=3142): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x6}, &(0x7f00000000c0)=0x8) 8.368293264s ago: executing program 4 (id=3145): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 8.189329966s ago: executing program 33 (id=3145): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 2.262432693s ago: executing program 5 (id=3245): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x1a}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1=0x7f000001}, 0x10) 2.158970425s ago: executing program 5 (id=3246): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 1.995153795s ago: executing program 5 (id=3250): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.335354846s ago: executing program 3 (id=3267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f00000002c0)='\\/\xb7\x92P\xdf\x8d>Y\x87`\xb8\xd9\x93\xbf\xa2\x1a\xac\xbb\xc2\xce\xfe\xeb\xa1\x86\xd9\xd5\xa9Q\xc3\xdb\xab\xa44\xb1\xb9\xa5\xc0*\xa3:\x82Y\x9f\xf4\xbb\xf6\x8e\x9b \xbe}\xb4(3\x91\xa0\xf5\xd1\xab\x19Q7h\xbd\x81\x9d\xe8\x1d\xec\xb1Y\x1bO\xf3)J+\xd6\a3\xa5\xb1`\xebd\xd4q\xab0\xd3\r\x148PP\xe7\\\x96\xf0\x1fX\xc0\x0f\xec\x03\xe3<\x96\x83\x8f\xacS\x03\xc7\xd1!\xef\x16_H\xe7\x1e]\x06\xa4\x04-\x8b\xc2e0\x1aE\x1c\xbf\x86K!\xf0\x19\xbb=,\x1c\xebh\x1d\xf2\xd3v\xd3PU\x8f\xdb\xd8\xde\xfc\x9a/\x80f\xda\x7f\xb1\xa5a', 0x0) 1.334199145s ago: executing program 1 (id=3268): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1.308792221s ago: executing program 6 (id=3269): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000440)=@in6={0xa, 0x4e20, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x58}, 0x0) 1.263555156s ago: executing program 3 (id=3270): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x7) fsetxattr$trusted_overlay_origin(r0, 0x0, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1.155890564s ago: executing program 6 (id=3271): openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0xc80) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1.15541055s ago: executing program 1 (id=3273): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x8, 0xfffffffc, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6], [0x0, 0x0, 0x0, 0x0, 0x2000100, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff11e]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 1.107665321s ago: executing program 6 (id=3274): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=@other={'decodes', ' ', 'io'}, 0xb) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'decodes', ' ', 'none'}, 0xd) write$vga_arbiter(r0, &(0x7f00000001c0)=@other={'decodes', ' ', 'none'}, 0xd) 1.07130122s ago: executing program 0 (id=3275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) 963.895967ms ago: executing program 3 (id=3276): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(0xffffffffffffffff, 0x0, 0x0) 951.485616ms ago: executing program 6 (id=3277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x34, 0x1, 0x0, 0x0, @sint={0x7, 0xfffffffc}}]}) 919.698291ms ago: executing program 1 (id=3278): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup2(r0, r1) sendto$inet6(r2, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007040012000f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400040012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0) 892.732423ms ago: executing program 0 (id=3279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 843.215331ms ago: executing program 5 (id=3280): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x11e, 0x1, &(0x7f0000000100)=@ccm_128={{}, "ee6a8e64a9f4d496", "2742cd9e1a7dee0a5709069c6e67af34", "2a715cd7", "bc0876e56d217c57"}, 0x28) 764.656558ms ago: executing program 5 (id=3281): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x8a8, 0x10, 0xd, 0x11, 0x1a, 0x6}}]}}]}, 0x148}}, 0x20000000) 752.662275ms ago: executing program 1 (id=3282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, 0x0}]) 707.357363ms ago: executing program 6 (id=3283): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x8, 0x12) 707.09119ms ago: executing program 0 (id=3284): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 643.355795ms ago: executing program 6 (id=3285): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/89, 0x59}, {0x0}], 0x3}, 0x0) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r0, 0x1) 454.573382ms ago: executing program 5 (id=3286): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 454.280215ms ago: executing program 0 (id=3287): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x11, 0x0, 0xffffffffffffff9c, &(0x7f0000000a80)={0x200500, 0x83, 0x12}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 454.161289ms ago: executing program 0 (id=3288): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000480)={r2, 0x4}, 0x8) 446.210903ms ago: executing program 1 (id=3289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff0180c2000000080045000024000000000011"], 0x0) 445.851376ms ago: executing program 0 (id=3290): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 271.029186ms ago: executing program 3 (id=3291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 270.86088ms ago: executing program 1 (id=3292): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@verity_on}, {@userxattr}]}) 226.385007ms ago: executing program 3 (id=3293): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000000038005080080003000dac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 0s ago: executing program 3 (id=3294): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) kernel console output (not intermixed with test programs): have been left with an inconsistent configuration, please check. [ 147.638641][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 147.689396][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 147.912068][ T29] audit: type=1400 audit(1738700876.087:528): avc: denied { write } for pid=9440 comm="syz.0.1597" name="cgroup.subtree_control" dev="cgroup2" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.970387][ T29] audit: type=1400 audit(1738700876.127:529): avc: denied { open } for pid=9440 comm="syz.0.1597" path="" dev="cgroup2" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.029962][ T29] audit: type=1400 audit(1738700876.127:530): avc: denied { ioctl } for pid=9440 comm="syz.0.1597" path="" dev="cgroup2" ino=284 ioctlcmd=0x54cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.056336][ T29] audit: type=1400 audit(1738700876.157:531): avc: denied { write } for pid=9446 comm="syz.5.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.076434][ T29] audit: type=1400 audit(1738700876.227:532): avc: denied { read } for pid=9446 comm="syz.5.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.440688][ T3071] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 148.610728][ T3071] usb 2-1: Using ep0 maxpacket: 16 [ 148.620017][ T3071] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.641307][ T3071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 148.648372][ T3071] usb 2-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.00 [ 148.662639][ T3071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.673385][ T3071] usb 2-1: config 0 descriptor?? [ 148.694019][ T9483] can0: slcan on ttyS3. [ 148.741506][ T9483] can0 (unregistered): slcan off ttyS3. [ 148.797142][ T9491] delete_channel: no stack [ 148.810153][ T29] audit: type=1400 audit(1738700876.987:533): avc: denied { write } for pid=9490 comm="syz.0.1618" path="socket:[23994]" dev="sockfs" ino=23994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.845821][ T9488] netlink: 'syz.4.1617': attribute type 13 has an invalid length. [ 148.869589][ T29] audit: type=1400 audit(1738700877.027:534): avc: denied { getopt } for pid=9492 comm="syz.3.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.916254][ T9488] gretap0: refused to change device tx_queue_len [ 148.926775][ T9488] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 149.087185][ T29] audit: type=1400 audit(1738700877.267:535): avc: denied { getopt } for pid=9506 comm="syz.0.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 149.112739][ T3071] apple 0003:05AC:0304.000A: unexpected long global item [ 149.120278][ T3071] apple 0003:05AC:0304.000A: parse failed [ 149.127167][ T3071] apple 0003:05AC:0304.000A: probe with driver apple failed with error -22 [ 149.268225][ T29] audit: type=1400 audit(1738700877.447:536): avc: denied { append } for pid=9515 comm="syz.0.1630" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.312701][ T5869] usb 2-1: USB disconnect, device number 12 [ 149.504734][ T29] audit: type=1400 audit(1738700877.687:537): avc: denied { setopt } for pid=9529 comm="syz.0.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.485135][ T29] audit: type=1400 audit(1738700878.667:538): avc: denied { bind } for pid=9580 comm="syz.0.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 150.770996][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 150.859820][ T29] audit: type=1400 audit(1738700879.037:539): avc: denied { recv } for pid=9607 comm="syz.5.1676" saddr=10.128.0.169 src=30006 daddr=10.128.1.135 dest=40162 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 150.885273][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.942376][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 150.958509][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 150.988327][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.025121][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.065475][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 151.097468][ T45] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 151.110876][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.119387][ T45] usb 4-1: Product: syz [ 151.134657][ T45] usb 4-1: Manufacturer: syz [ 151.139321][ T45] usb 4-1: SerialNumber: syz [ 151.146174][ T45] usb 4-1: config 0 descriptor?? [ 151.160390][ T45] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 151.293656][ T9630] netlink: 'syz.1.1686': attribute type 178 has an invalid length. [ 151.365008][ T5899] usb 4-1: USB disconnect, device number 15 [ 151.403531][ T9632] sctp: [Deprecated]: syz.4.1687 (pid 9632) Use of int in max_burst socket option. [ 151.403531][ T9632] Use struct sctp_assoc_value instead [ 151.724331][ T9648] SELinux: failed to load policy [ 151.888624][ T29] audit: type=1400 audit(1738700880.067:540): avc: denied { getopt } for pid=9654 comm="syz.4.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.191895][ T5899] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 152.372205][ T5899] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.392632][ T5899] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.409556][ T29] audit: type=1400 audit(1738700880.587:541): avc: denied { read } for pid=9675 comm="syz.1.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.430903][ T5899] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.440106][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.457533][ T5899] usb 6-1: SerialNumber: syz [ 152.462508][ T29] audit: type=1400 audit(1738700880.637:542): avc: denied { validate_trans } for pid=9679 comm="syz.3.1709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 152.482882][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.590262][ T9690] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 152.598700][ T9690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.640864][ T5869] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 152.719073][ T5899] usb 6-1: 0:2 : does not exist [ 152.743274][ T5899] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 152.760967][ T5899] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 152.778951][ T5899] usb 6-1: USB disconnect, device number 8 [ 152.814555][ T5869] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.845648][ T5869] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.871109][ T5869] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 152.880245][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.891750][ T9678] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 152.902352][ T5869] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.137133][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.146411][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.280973][ T5869] usb 5-1: USB disconnect, device number 13 [ 153.523707][ T9729] netlink: 'syz.0.1733': attribute type 12 has an invalid length. [ 153.537647][ T9729] netlink: 'syz.0.1733': attribute type 29 has an invalid length. [ 153.555792][ T9729] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1733'. [ 153.574708][ T9729] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1733'. [ 153.901014][ T9750] input: syz0 as /devices/virtual/input/input25 [ 154.068278][ T9757] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 154.239919][ T5831] Bluetooth: hci1: adv larger than maximum supported [ 154.239979][ T5831] Bluetooth: hci1: Malformed LE Event: 0x0d [ 154.740853][ T3071] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 154.923803][ T3071] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.949671][ T3071] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.976926][ T3071] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.999492][ T3071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.035046][ T9778] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 155.051935][ T3071] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.409898][ T5819] usb 6-1: USB disconnect, device number 9 [ 155.592371][ T3071] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 155.764681][ T3071] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.778485][ T3071] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 155.794927][ T3071] usb 4-1: can't read configurations, error -71 [ 156.018602][ T9824] netlink: 1268 bytes leftover after parsing attributes in process `syz.5.1777'. [ 156.039060][ T9824] openvswitch: netlink: Flow key attribute not present in set flow. [ 156.421412][ T29] audit: type=1326 audit(1738700884.597:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7fc00000 [ 156.475584][ T29] audit: type=1326 audit(1738700884.597:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd80638cda9 code=0x7fc00000 [ 156.559090][ T29] audit: type=1326 audit(1738700884.597:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7fc00000 [ 156.646397][ T29] audit: type=1326 audit(1738700884.597:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7fc00000 [ 156.659946][ T9840] netlink: 'syz.5.1785': attribute type 10 has an invalid length. [ 156.715240][ T29] audit: type=1326 audit(1738700884.597:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7fc00000 [ 156.744846][ T29] audit: type=1326 audit(1738700884.597:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7fc00000 [ 156.797268][ T29] audit: type=1326 audit(1738700884.597:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7fc00000 [ 156.835034][ T9840] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 156.895939][ T29] audit: type=1326 audit(1738700884.597:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7fc00000 [ 156.970237][ T29] audit: type=1326 audit(1738700884.597:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7fc00000 [ 157.012378][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1795'. [ 157.048385][ T29] audit: type=1326 audit(1738700884.597:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7fc00000 [ 157.774083][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1812'. [ 158.190362][ T9923] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.434481][ T9932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.461151][ T9932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.485473][ T9932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.085565][ T9968] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 159.170724][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.235586][ T9976] hugetlbfs: syz.4.1848 (9976): Using mlock ulimits for SHM_HUGETLB is obsolete [ 159.342923][ T25] usb 1-1: too many configurations: 89, using maximum allowed: 8 [ 159.393394][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 159.410703][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.427134][ T25] usb 1-1: Product: syz [ 159.442503][ T25] usb 1-1: Manufacturer: syz [ 159.447190][ T25] usb 1-1: SerialNumber: syz [ 159.448474][ T9988] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 159.463436][ T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 159.488856][ T3071] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 159.560163][ T9994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1855'. [ 159.789777][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 160.300781][ T25] usb 1-1: USB disconnect, device number 9 [ 160.484917][T10049] netlink: 'syz.1.1881': attribute type 2 has an invalid length. [ 160.739491][ T3071] usb 1-1: Service connection timeout for: 256 [ 160.749200][ T3071] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 160.764265][ T3071] ath9k_htc: Failed to initialize the device [ 160.778174][ T25] usb 1-1: ath9k_htc: USB layer deinitialized [ 161.350885][ T3071] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 161.521929][ T3071] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.547127][ T3071] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.572816][ T3071] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.584640][ T3071] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 161.602415][ T5826] Bluetooth: hci2: command 0x0405 tx timeout [ 161.602777][ T3071] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 161.610683][ T5869] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 161.624623][ T3071] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.639815][T10116] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 161.640713][ T3071] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.646371][T10116] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 161.665759][ T3071] usb 5-1: Product: syz [ 161.675927][ T3071] usb 5-1: Manufacturer: syz [ 161.686463][ T3071] cdc_wdm 5-1:1.0: skipping garbage [ 161.700768][ T3071] cdc_wdm 5-1:1.0: skipping garbage [ 161.707107][ T3071] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 161.717888][ T3071] cdc_wdm 5-1:1.0: Unknown control protocol [ 161.830732][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 161.850307][ T5869] usb 6-1: config 0 has no interfaces? [ 161.866632][ T5869] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 161.876988][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.911253][ T5869] usb 6-1: Product: syz [ 161.915602][ T5869] usb 6-1: Manufacturer: syz [ 161.920227][ T5869] usb 6-1: SerialNumber: syz [ 161.949778][ T5869] usb 6-1: config 0 descriptor?? [ 161.974638][ T45] usb 5-1: USB disconnect, device number 14 [ 162.171009][ T3071] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 162.198638][ T5869] usb 6-1: USB disconnect, device number 10 [ 162.265561][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 162.265576][ T29] audit: type=1400 audit(1738700890.447:573): avc: denied { nosuid_transition } for pid=10149 comm="syz.0.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 162.292830][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.300104][ T29] audit: type=1400 audit(1738700890.447:574): avc: denied { transition } for pid=10149 comm="syz.0.1930" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 162.329693][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.336906][ T29] audit: type=1400 audit(1738700890.447:575): avc: denied { entrypoint } for pid=10149 comm="syz.0.1930" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1086 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.366593][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.375991][ T29] audit: type=1400 audit(1738700890.447:576): avc: denied { noatsecure } for pid=10149 comm="syz.0.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 162.385943][ T3071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.412681][ T3071] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 162.425575][ T3071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.437772][ T3071] usb 4-1: config 0 descriptor?? [ 162.486194][T10155] block device autoloading is deprecated and will be removed. [ 162.876623][ T3071] hid-steam 0003:28DE:1205.000B: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 162.951304][ T3071] hid-steam 0003:28DE:1205.000B: Steam Controller 'XXXXXXXXXX' connected [ 162.975330][ T3071] input: Steam Deck as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.000B/input/input26 [ 163.019616][ T3071] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.000B/input/input27 [ 163.080335][ T3071] hid-steam 0003:28DE:1205.000C: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 163.113527][ T3071] usb 4-1: USB disconnect, device number 18 [ 163.177356][ T3071] hid-steam 0003:28DE:1205.000B: Steam Controller 'XXXXXXXXXX' disconnected [ 163.435569][T10197] netlink: 'syz.0.1952': attribute type 10 has an invalid length. [ 163.690158][ T29] audit: type=1400 audit(1738700891.867:577): avc: denied { remount } for pid=10215 comm="syz.5.1961" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.709961][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.001198][ T5869] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 164.015220][ T29] audit: type=1326 audit(1738700892.197:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 164.043999][ T29] audit: type=1326 audit(1738700892.197:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 164.085807][ T29] audit: type=1400 audit(1738700892.197:580): avc: denied { getopt } for pid=10232 comm="syz.3.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.109886][ T29] audit: type=1326 audit(1738700892.227:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 164.137893][ T29] audit: type=1326 audit(1738700892.267:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 164.161331][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.217369][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 164.241594][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.276330][ T5869] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.290651][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.303660][ T5869] usb 5-1: config 0 descriptor?? [ 164.519530][ T5869] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 164.675089][T10254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10254 comm=syz.5.1988 [ 164.753026][ T5869] usb 5-1: USB disconnect, device number 15 [ 164.994850][T10265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1981'. [ 165.099398][T10267] blktrace: Concurrent blktraces are not allowed on sg0 [ 165.303363][T10279] ptrace attach of "./syz-executor exec"[7615] was attempted by "./syz-executor exec"[10279] [ 166.330783][ T3071] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 166.492165][ T3071] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.517461][ T3071] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.544010][ T3071] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 166.556802][ T3071] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 166.570668][ T3071] usb 4-1: Product: syz [ 166.574958][ T3071] usb 4-1: Manufacturer: syz [ 166.593040][ T3071] hub 4-1:4.0: USB hub found [ 166.769742][T10341] : entered promiscuous mode [ 166.815829][ T3071] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 167.151039][ T3071] usb 4-1: USB disconnect, device number 19 [ 167.481790][T10374] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input28 [ 168.020679][ T969] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 168.172768][ T969] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.181550][ T969] usb 4-1: config 0 has no interface number 0 [ 168.190661][ T969] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.211004][ T969] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.221241][ T969] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 168.230777][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.242149][ T969] usb 4-1: config 0 descriptor?? [ 168.435504][T10381] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 168.441819][T10404] delete_channel: no stack [ 168.897577][ T969] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.000D/input/input29 [ 168.985850][T10423] syz_tun: entered allmulticast mode [ 168.999080][ T969] holtek_kbd 0003:04D9:A055.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 169.003785][T10422] syz_tun: left allmulticast mode [ 169.137103][ T969] usb 4-1: USB disconnect, device number 20 [ 169.471270][ T5869] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 169.502123][T10446] @: renamed from vlan0 (while UP) [ 169.553519][T10448] netlink: 'syz.1.2061': attribute type 13 has an invalid length. [ 169.566058][T10448] gretap0: refused to change device tx_queue_len [ 169.574807][T10448] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 169.630666][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 169.642362][ T5869] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 169.652872][ T5869] usb 5-1: config 4 has no interface number 0 [ 169.659069][ T5869] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.690781][ T5831] Bluetooth: hci4: command 0x0401 tx timeout [ 169.703588][ T5869] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.780775][ T5869] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 169.827001][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.858670][ T5869] hub 5-1:4.128: USB hub found [ 169.954752][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 169.954770][ T29] audit: type=1400 audit(1738700898.137:593): avc: denied { map } for pid=10471 comm="syz.0.2072" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.075276][ T5869] hub 5-1:4.128: config failed, hub has too many ports! (err -19) [ 170.414993][ T45] usb 5-1: USB disconnect, device number 16 [ 170.490081][ T29] audit: type=1400 audit(1738700898.667:594): avc: denied { mount } for pid=10483 comm="syz.3.2078" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 170.512037][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.947643][ T29] audit: type=1400 audit(1738700899.127:595): avc: denied { write } for pid=10506 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.390631][ T25] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 171.554785][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2097'. [ 171.572837][ T25] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 171.584859][T10528] netem: invalid attributes len -15 [ 171.590180][ T25] usb 6-1: config 0 has no interface number 0 [ 171.601874][ T25] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 171.603698][T10528] netem: change failed [ 171.625099][ T25] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 171.647325][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.667586][ T25] usb 6-1: config 0 descriptor?? [ 171.684033][ T25] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input30 [ 171.924501][ T25] usb 6-1: USB disconnect, device number 11 [ 172.027300][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'. [ 172.042449][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'. [ 172.071615][ T5899] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 172.221309][ T3071] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 172.222878][ T5899] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.248088][ T5899] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 172.259105][ T5899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.268663][ T5899] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 172.285465][ T5899] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 172.302801][ T5899] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.312520][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.330692][ T5899] usb 4-1: Product: syz [ 172.335029][ T5899] usb 4-1: Manufacturer: syz [ 172.351116][ T5899] cdc_wdm 4-1:1.0: skipping garbage [ 172.356555][ T5899] cdc_wdm 4-1:1.0: skipping garbage [ 172.368213][ T5899] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 172.375867][ T5899] cdc_wdm 4-1:1.0: Unknown control protocol [ 172.392896][ T3071] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.414963][ T3071] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.428863][ T3071] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.458840][ T3071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.478456][T10540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.488459][ T3071] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.562067][ T5899] usb 4-1: USB disconnect, device number 21 [ 172.757538][ T5899] usb 2-1: USB disconnect, device number 13 [ 173.261608][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 173.310865][ T3071] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 173.338794][T10604] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 173.349417][T10604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.501786][ T3071] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 173.520652][ T3071] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 173.548020][ T3071] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.582360][ T3071] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.598353][ T3071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.616831][ T3071] usb 1-1: Product: syz [ 173.626971][ T3071] usb 1-1: Manufacturer: syz [ 173.640735][ T3071] usb 1-1: SerialNumber: syz [ 174.266080][ T3071] usb 1-1: 0:2 : does not exist [ 174.356830][T10653] loop6: detected capacity change from 0 to 524287999 [ 174.379088][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.388676][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.399137][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.408420][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.417504][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.426751][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.435675][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.444899][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.453901][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.463153][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.472806][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.482041][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.489922][ T5899] usb 1-1: USB disconnect, device number 10 [ 174.490686][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.505006][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.514107][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.523341][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.532477][T10653] ldm_validate_partition_table(): Disk read failed. [ 174.540573][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.549774][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.558022][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.567282][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.575632][T10653] Dev loop6: unable to read RDB block 0 [ 174.586390][T10653] loop6: unable to read partition table [ 174.590408][ T29] audit: type=1400 audit(1738700902.767:596): avc: denied { read } for pid=10655 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.593494][T10653] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 174.643282][ T29] audit: type=1400 audit(1738700902.827:597): avc: denied { setopt } for pid=10655 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.718246][T10664] capability: warning: `syz.5.2155' uses 32-bit capabilities (legacy support in use) [ 174.828981][T10674] netlink: 'syz.5.2159': attribute type 1 has an invalid length. [ 174.892633][ T29] audit: type=1400 audit(1738700903.077:598): avc: denied { name_bind 0x1000000 } for pid=10676 comm="syz.5.2160" path="socket:[30022]" dev="sockfs" ino=30022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.000722][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 175.048860][ T29] audit: type=1400 audit(1738700903.227:599): avc: denied { write } for pid=10681 comm="syz.0.2163" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 175.091975][ T29] audit: type=1400 audit(1738700903.227:600): avc: denied { open } for pid=10681 comm="syz.0.2163" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 175.172108][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.190820][T10687] netlink: 'syz.0.2164': attribute type 8 has an invalid length. [ 175.192920][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.216482][ T45] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 175.226015][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.236490][ T45] usb 2-1: config 0 descriptor?? [ 175.501803][T10696] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2168'. [ 175.654734][ T45] steelseries 0003:1038:12B6.000E: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 175.797672][T10708] bridge0: entered allmulticast mode [ 176.068507][ T45] usb 2-1: USB disconnect, device number 14 [ 176.190769][ T3071] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 176.383480][ T3071] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 176.392260][ T3071] usb 5-1: config 0 has no interface number 0 [ 176.398394][ T3071] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.434566][ T3071] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.445358][ T3071] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 176.454911][ T3071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.465513][ T3071] usb 5-1: config 0 descriptor?? [ 176.472367][ T5899] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 176.630882][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 176.656493][ T5899] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 176.668345][ T5899] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 176.678583][ T5899] usb 6-1: Product: syz [ 176.688093][ T5899] usb 6-1: Manufacturer: syz [ 176.695024][ T5899] usb 6-1: SerialNumber: syz [ 176.703056][ T5899] usb 6-1: config 0 descriptor?? [ 176.719224][ T5899] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 176.730680][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.750123][ T29] audit: type=1400 audit(1738700904.927:601): avc: denied { read } for pid=10757 comm="syz.3.2196" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 176.840476][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2199'. [ 176.853778][T10764] batadv0: entered promiscuous mode [ 176.860120][T10764] team0: entered promiscuous mode [ 176.865518][T10764] team_slave_0: entered promiscuous mode [ 176.873307][T10764] team_slave_1: entered promiscuous mode [ 176.880424][T10764] hsr1: entered promiscuous mode [ 176.885593][T10764] hsr1: entered allmulticast mode [ 176.891147][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 176.899063][ T45] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 176.912676][ T3071] logitech-djreceiver 0003:046D:C71B.000F: unknown main item tag 0x7 [ 176.920926][T10764] batadv0: entered allmulticast mode [ 176.926248][T10764] team0: entered allmulticast mode [ 176.931479][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.940656][ T3071] logitech-djreceiver 0003:046D:C71B.000F: item fetching failed at offset 5/7 [ 176.949855][ T3071] logitech-djreceiver 0003:046D:C71B.000F: logi_dj_probe: parse failed [ 176.958347][T10764] team_slave_0: entered allmulticast mode [ 176.964405][ T3071] logitech-djreceiver 0003:046D:C71B.000F: probe with driver logitech-djreceiver failed with error -22 [ 176.974239][T10764] team_slave_1: entered allmulticast mode [ 176.983127][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.992348][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.000359][ T45] usb 1-1: Product: syz [ 177.008515][ T45] usb 1-1: Manufacturer: syz [ 177.013280][ T45] usb 1-1: SerialNumber: syz [ 177.104897][ T3071] usb 5-1: USB disconnect, device number 17 [ 177.158890][ T5899] gspca_zc3xx: reg_r err -71 [ 177.164614][ T5899] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 177.183208][ T5899] usb 6-1: USB disconnect, device number 12 [ 177.228397][ T45] usb 1-1: unknown interface protocol 0xff, assuming v1 [ 177.235896][ T45] usb 1-1: cannot find UAC_HEADER [ 177.247229][ T45] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 177.257648][ T45] usb 1-1: USB disconnect, device number 11 [ 177.306862][ T29] audit: type=1400 audit(1738700905.487:602): avc: denied { write } for pid=10776 comm="syz.1.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 177.716785][T10789] ALSA: mixer_oss: invalid index 80000 [ 177.940175][ T29] audit: type=1400 audit(1738700906.117:603): avc: denied { shutdown } for pid=10794 comm="syz.4.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.960319][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.036064][T10808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2218'. [ 178.125582][ T29] audit: type=1326 audit(1738700906.307:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.5.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 178.210666][ T29] audit: type=1326 audit(1738700906.327:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.5.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 178.277440][ T29] audit: type=1326 audit(1738700906.327:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.5.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 178.327213][ T29] audit: type=1326 audit(1738700906.327:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.5.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 178.395341][ T29] audit: type=1326 audit(1738700906.327:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.5.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 178.895826][T10852] kvm: apic: phys broadcast and lowest prio [ 179.310694][ T5869] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 179.483340][ T5869] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.483402][T10881] tmpfs: Bad value for 'mpol' [ 179.509389][ T5869] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.530251][ T5869] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.547031][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.575367][T10865] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.586103][ T5869] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.598111][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2255'. [ 179.676275][T10890] netlink: 280 bytes leftover after parsing attributes in process `syz.5.2258'. [ 179.920767][ T5826] Bluetooth: hci2: command 0x0405 tx timeout [ 180.032939][ T5868] usb 5-1: USB disconnect, device number 18 [ 180.631724][T10940] syz.1.2290 (10940): /proc/10939/oom_adj is deprecated, please use /proc/10939/oom_score_adj instead. [ 180.817109][T10948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2283'. [ 180.900782][ T5868] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 180.973294][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 180.973310][ T29] audit: type=1400 audit(1738700909.157:612): avc: denied { map } for pid=10957 comm="syz.5.2289" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 181.035228][T10960] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2291'. [ 181.091716][ T5868] usb 4-1: too many configurations: 15, using maximum allowed: 8 [ 181.102406][ T5868] usb 4-1: config index 0 descriptor too short (expected 64853, got 72) [ 181.118601][ T5868] usb 4-1: config index 1 descriptor too short (expected 64853, got 72) [ 181.127661][T10963] netlink: 1256 bytes leftover after parsing attributes in process `syz.5.2292'. [ 181.138644][T10963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.148554][ T5868] usb 4-1: config index 2 descriptor too short (expected 64853, got 72) [ 181.158075][ T5868] usb 4-1: config index 3 descriptor too short (expected 64853, got 72) [ 181.168267][ T5868] usb 4-1: config index 4 descriptor too short (expected 64853, got 72) [ 181.178356][ T5868] usb 4-1: config index 5 descriptor too short (expected 64853, got 72) [ 181.190136][ T5868] usb 4-1: config index 6 descriptor too short (expected 64853, got 72) [ 181.200167][ T5868] usb 4-1: config index 7 descriptor too short (expected 64853, got 72) [ 181.210512][ T5868] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.220055][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.228143][ T5868] usb 4-1: Product: syz [ 181.232514][ T5868] usb 4-1: Manufacturer: syz [ 181.237135][ T5868] usb 4-1: SerialNumber: syz [ 181.246438][ T5868] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 181.277986][ T45] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.464630][T10979] team0: Device gtp0 is of different type [ 181.488163][ T5868] usb 4-1: USB disconnect, device number 22 [ 181.590790][ T3071] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 181.631459][ T5899] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 181.751781][ T3071] usb 6-1: Using ep0 maxpacket: 8 [ 181.760166][ T3071] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 181.768612][ T3071] usb 6-1: config 179 has no interface number 0 [ 181.775141][ T3071] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 181.789816][ T3071] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 181.794173][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.802377][ T3071] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 181.827370][ T3071] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 181.838567][ T3071] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 181.845571][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.857356][ T3071] usb 6-1: config 179 interface 65 has no altsetting 0 [ 181.878736][ T5899] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 181.887986][ T3071] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 181.888014][ T3071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.898186][ T3071] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input31 [ 181.927343][ T5831] Bluetooth: hci4: command 0x0401 tx timeout [ 181.928690][ T29] audit: type=1400 audit(1738700910.107:613): avc: denied { map } for pid=10999 comm="syz.0.2310" path="socket:[29669]" dev="sockfs" ino=29669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.933626][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 181.963505][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.991980][ T5899] usb 5-1: config 0 descriptor?? [ 182.134227][ T3071] usb 6-1: USB disconnect, device number 13 [ 182.145838][ T3071] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 182.320827][ T45] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 182.330068][ T45] ath9k_htc: Failed to initialize the device [ 182.355831][ T5868] usb 4-1: ath9k_htc: USB layer deinitialized [ 182.607988][ T5899] hid-led 0003:1D34:000A.0010: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 182.650795][ T5899] hid-led 0003:1D34:000A.0010: Dream Cheeky Webmail Notifier initialized [ 182.815435][ T5899] usb 5-1: USB disconnect, device number 19 [ 182.966015][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'. [ 183.091820][T11034] syz.5.2325 (11034) used greatest stack depth: 20352 bytes left [ 183.567325][ T5819] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 183.616892][T11063] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 183.730645][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 183.730962][ T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 183.742679][ T5819] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 183.759806][ T5819] usb 6-1: config 0 has no interface number 0 [ 183.774647][ T5819] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 183.788558][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.804531][ T5819] usb 6-1: Product: syz [ 183.814276][ T5819] usb 6-1: Manufacturer: syz [ 183.823434][ T5819] usb 6-1: SerialNumber: syz [ 183.836142][ T5819] usb 6-1: config 0 descriptor?? [ 183.914934][ T45] usb 4-1: config 0 has no interfaces? [ 183.925121][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 183.956069][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.978570][ T45] usb 4-1: config 0 descriptor?? [ 184.200392][ T45] usb 4-1: USB disconnect, device number 23 [ 184.255233][T11047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.276831][T11047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.308420][ T5819] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 184.327544][ T5819] usb 6-1: No valid video chain found. [ 184.339148][ T5819] usb 6-1: USB disconnect, device number 14 [ 184.511429][T11079] misc userio: Begin command sent, but we're already running [ 184.613758][ T29] audit: type=1400 audit(1738700912.797:614): avc: denied { read } for pid=11084 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.892568][T11098] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2355'. [ 184.997008][T11100] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2357'. [ 185.020188][T11100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2357'. [ 185.376775][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'. [ 185.408932][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2369'. [ 185.432656][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 185.445080][T11126] netlink: 'syz.0.2369': attribute type 20 has an invalid length. [ 185.617400][ T45] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.636891][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.655414][ T45] usb 4-1: Product: syz [ 185.660149][ T45] usb 4-1: Manufacturer: syz [ 185.665537][ T45] usb 4-1: SerialNumber: syz [ 185.678840][ T45] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 185.699145][ T3071] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 185.822767][ T29] audit: type=1400 audit(1738700914.007:615): avc: denied { append } for pid=11143 comm="syz.5.2380" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 185.919170][ C1] usb 4-1: ath9k_htc: invalid pkt_len (ff62) [ 186.100508][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2383'. [ 186.144403][ T5868] usb 4-1: USB disconnect, device number 24 [ 186.418392][T11172] raw_sendmsg: syz.1.2390 forgot to set AF_INET. Fix it! [ 186.474469][T11177] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2394'. [ 186.484954][T11177] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2394'. [ 186.520770][ T5819] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 186.695894][ T5819] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 186.720686][ T3071] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 186.736080][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.740733][ T3071] ath9k_htc: Failed to initialize the device [ 186.746121][ T5819] usb 6-1: config 0 descriptor?? [ 186.762234][ T5819] cp210x 6-1:0.0: cp210x converter detected [ 186.771146][ T5868] usb 4-1: ath9k_htc: USB layer deinitialized [ 186.790733][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 186.893601][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2404'. [ 186.952929][ T29] audit: type=1400 audit(1738700915.137:616): avc: denied { ioctl } for pid=11200 comm="syz.4.2405" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 186.953716][ T45] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 186.978428][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.995595][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.011648][ T45] usb 2-1: config 0 descriptor?? [ 187.183441][ T5819] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 187.205217][ T5819] usb 6-1: cp210x converter now attached to ttyUSB0 [ 187.409038][ T5819] usb 6-1: USB disconnect, device number 15 [ 187.415118][ T5899] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 187.427147][ T5819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 187.438458][ T5819] cp210x 6-1:0.0: device disconnected [ 187.586671][ T5899] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 187.596384][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.604788][ T5899] usb 5-1: Product: syz [ 187.608969][ T5899] usb 5-1: Manufacturer: syz [ 187.618143][ T5899] usb 5-1: SerialNumber: syz [ 187.625018][T11223] bpf: Bad value for 'uid' [ 187.626868][ T5899] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 187.644099][ T5869] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 187.809231][ T29] audit: type=1400 audit(1738700915.987:617): avc: denied { mounton } for pid=11229 comm="syz.0.2419" path="/proc/1100" dev="proc" ino=32123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 187.840918][ T45] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 187.869489][ T45] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 187.891265][ T45] asix 2-1:0.0: probe with driver asix failed with error -71 [ 187.914055][ T45] usb 2-1: USB disconnect, device number 15 [ 188.321131][ T29] audit: type=1326 audit(1738700916.457:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 188.514407][ T29] audit: type=1326 audit(1738700916.467:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 188.599582][ T29] audit: type=1326 audit(1738700916.467:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 188.682422][ T29] audit: type=1326 audit(1738700916.467:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 188.767250][ T29] audit: type=1326 audit(1738700916.467:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 188.790794][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.934201][ T29] audit: type=1326 audit(1738700916.477:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 188.957614][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.117361][ T29] audit: type=1326 audit(1738700916.477:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 189.297696][ T29] audit: type=1326 audit(1738700916.477:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 189.560790][ T5899] usb 5-1: USB disconnect, device number 20 [ 189.568631][ T5869] usb 5-1: Service connection timeout for: 256 [ 189.578554][ T5869] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 189.589370][ T5869] ath9k_htc: Failed to initialize the device [ 189.595760][ T5899] usb 5-1: ath9k_htc: USB layer deinitialized [ 189.740735][ T5870] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 189.911573][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 189.935237][ T5870] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.956413][ T5870] usb 4-1: config 0 has no interface number 0 [ 189.979045][ T5870] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 189.998734][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.016321][ T5870] usb 4-1: Product: syz [ 190.030644][ T5870] usb 4-1: Manufacturer: syz [ 190.035464][ T5870] usb 4-1: SerialNumber: syz [ 190.052726][ T5870] usb 4-1: config 0 descriptor?? [ 190.073337][ T5870] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 190.115161][ T5870] usb 4-1: selecting invalid altsetting 1 [ 190.131020][ T5870] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 190.161482][ T5870] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 190.198401][ T5870] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 190.230663][ T5870] usb 4-1: media controller created [ 190.255704][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.376565][ T5870] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 190.384406][ T5870] zl10353_read_register: readreg error (reg=127, ret==-71) [ 190.393814][ T5870] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 190.483266][ T5870] usb 4-1: USB disconnect, device number 25 [ 191.830219][T11371] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input34 [ 192.934607][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 192.934624][ T29] audit: type=1326 audit(1738700921.117:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f504ab8cda9 code=0x0 [ 192.963775][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.008129][T11401] netlink: 'syz.0.2504': attribute type 2 has an invalid length. [ 193.895487][T11407] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 195.017764][T11466] delete_channel: no stack [ 195.120703][ T5827] Bluetooth: hci4: command 0x0401 tx timeout [ 195.211247][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.217672][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.008123][T11508] @: renamed from vlan0 (while UP) [ 196.541746][T11530] __nla_validate_parse: 1 callbacks suppressed [ 196.541764][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2547'. [ 196.868527][ T29] audit: type=1400 audit(1738700925.047:644): avc: denied { mount } for pid=11541 comm="syz.5.2553" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 196.885871][T11544] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 196.933842][ T29] audit: type=1400 audit(1738700925.087:645): avc: denied { mounton } for pid=11541 comm="syz.5.2553" path="/324/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 196.984368][ T29] audit: type=1400 audit(1738700925.097:646): avc: denied { remount } for pid=11541 comm="syz.5.2553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 197.031418][ T29] audit: type=1400 audit(1738700925.197:647): avc: denied { unmount } for pid=7615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 197.290853][ T29] audit: type=1400 audit(1738700925.467:648): avc: denied { relabelfrom } for pid=11562 comm="syz.5.2563" name="" dev="pipefs" ino=33021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 197.492635][T11573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.503503][T11576] netlink: 'syz.1.2567': attribute type 1 has an invalid length. [ 197.581346][ T29] audit: type=1400 audit(1738700925.767:649): avc: denied { wake_alarm } for pid=11580 comm="syz.0.2570" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 197.822955][ T5870] kernel write not supported for file /sg0 (pid: 5870 comm: kworker/1:5) [ 198.170713][ T5819] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 198.362211][ T5819] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 198.370364][ T5819] usb 1-1: config 0 has no interface number 0 [ 198.380977][ T5819] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.410637][ T5819] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.430900][ T5819] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 198.440034][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.463306][ T5819] usb 1-1: config 0 descriptor?? [ 198.594678][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2591'. [ 198.866155][T11649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11649 comm=syz.1.2600 [ 198.888726][ T5819] logitech-djreceiver 0003:046D:C71B.0011: unknown main item tag 0x7 [ 198.922298][ T5819] logitech-djreceiver 0003:046D:C71B.0011: item fetching failed at offset 5/7 [ 198.930726][ T29] audit: type=1400 audit(1738700927.107:650): avc: denied { write } for pid=11650 comm="syz.1.2602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 198.942948][ T5819] logitech-djreceiver 0003:046D:C71B.0011: logi_dj_probe: parse failed [ 198.974345][ T5819] logitech-djreceiver 0003:046D:C71B.0011: probe with driver logitech-djreceiver failed with error -22 [ 199.147055][ T5869] usb 1-1: USB disconnect, device number 12 [ 199.416993][T11667] input: syz0 as /devices/virtual/input/input35 [ 199.507433][T11672] tipc: Started in network mode [ 199.527669][T11672] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 199.549279][T11672] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 199.557906][T11672] tipc: Enabled bearer , priority 10 [ 199.612046][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2614'. [ 199.643380][T11679] IPVS: Error joining to the multicast group [ 199.871165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 199.988995][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'. [ 200.171012][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2633'. [ 200.247472][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2637'. [ 200.461603][ T29] audit: type=1400 audit(1738700928.647:651): avc: denied { read } for pid=11738 comm="syz.0.2642" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 200.519663][ T29] audit: type=1400 audit(1738700928.647:652): avc: denied { open } for pid=11738 comm="syz.0.2642" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 200.599793][ T29] audit: type=1400 audit(1738700928.657:653): avc: denied { write } for pid=11738 comm="syz.0.2642" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 200.631923][T11747] SELinux: Context system_u:object_r:newrole_exec_t:s0 is not valid (left unmapped). [ 200.650636][ T29] audit: type=1400 audit(1738700928.827:654): avc: denied { relabelto } for pid=11746 comm="syz.0.2645" name="control" dev="tmpfs" ino=2796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:newrole_exec_t:s0" [ 200.693416][ T5870] tipc: Node number set to 1 [ 200.780633][ T29] audit: type=1400 audit(1738700928.827:655): avc: denied { associate } for pid=11746 comm="syz.0.2645" name="control" dev="tmpfs" ino=2796 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:newrole_exec_t:s0" [ 200.837618][ T29] audit: type=1400 audit(1738700928.937:656): avc: denied { rmdir } for pid=5815 comm="syz-executor" name="control" dev="tmpfs" ino=2796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:newrole_exec_t:s0" [ 200.865532][ T29] audit: type=1400 audit(1738700929.017:657): avc: denied { append } for pid=11752 comm="syz.0.2649" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 200.920216][T11753] netlink: 'syz.4.2648': attribute type 16 has an invalid length. [ 200.947448][T11753] netlink: 'syz.4.2648': attribute type 3 has an invalid length. [ 201.009244][T11753] netlink: 'syz.4.2648': attribute type 1 has an invalid length. [ 201.030999][T11753] netlink: 'syz.4.2648': attribute type 2 has an invalid length. [ 201.068505][T11753] netlink: 64022 bytes leftover after parsing attributes in process `syz.4.2648'. [ 201.256356][T11761] kvm: apic: phys broadcast and lowest prio [ 201.397708][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2656'. [ 201.558612][T11782] tmpfs: Bad value for 'mpol' [ 201.608640][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 201.620782][ T5868] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 201.626034][T11787] batadv0: entered promiscuous mode [ 201.635711][T11787] team0: entered promiscuous mode [ 201.640967][T11787] team_slave_0: entered promiscuous mode [ 201.648891][T11787] team_slave_1: entered promiscuous mode [ 201.688858][T11787] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 201.700816][T11787] Cannot create hsr debugfs directory [ 201.707440][T11787] hsr1: entered promiscuous mode [ 201.714896][T11787] hsr1: entered allmulticast mode [ 201.722661][T11787] batadv0: entered allmulticast mode [ 201.728374][T11787] team0: entered allmulticast mode [ 201.734328][T11787] team_slave_0: entered allmulticast mode [ 201.740382][T11787] team_slave_1: entered allmulticast mode [ 201.799659][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.800777][ T5819] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 201.823650][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.848227][ T5868] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 201.863437][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.879662][ T5868] usb 5-1: config 0 descriptor?? [ 201.973690][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.987215][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.002946][ T5819] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 202.013145][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.044240][ T5819] usb 1-1: config 0 descriptor?? [ 202.099143][ T29] audit: type=1400 audit(1738700930.277:658): avc: denied { mount } for pid=11811 comm="syz.3.2675" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 202.120808][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.176883][ T29] audit: type=1400 audit(1738700930.357:659): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 202.241213][ T5820] Bluetooth: hci2: command 0x0405 tx timeout [ 202.303264][ T5868] sony 0003:054C:024B.0012: unexpected long global item [ 202.331279][ T5868] sony 0003:054C:024B.0012: parse failed [ 202.337074][ T5868] sony 0003:054C:024B.0012: probe with driver sony failed with error -22 [ 202.501250][ T5819] steelseries 0003:1038:12B6.0013: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 202.517989][ T5869] usb 5-1: USB disconnect, device number 21 [ 202.642402][T11837] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2685'. [ 202.955000][ T5819] usb 1-1: USB disconnect, device number 13 [ 203.296468][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2698'. [ 203.930411][T11895] pim6reg: entered allmulticast mode [ 203.990900][T11896] pim6reg: left allmulticast mode [ 204.400969][ T5819] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 204.447487][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2720'. [ 204.562128][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.580676][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.590623][ T5819] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 204.599694][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.634060][ T5819] usb 4-1: config 0 descriptor?? [ 205.055698][ T5819] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 205.179285][T11948] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2731'. [ 205.341047][ T5870] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 205.371882][T11958] netlink: 'syz.4.2735': attribute type 21 has an invalid length. [ 205.380060][T11958] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2735'. [ 205.389762][T11958] netlink: 'syz.4.2735': attribute type 4 has an invalid length. [ 205.401559][T11958] netlink: 'syz.4.2735': attribute type 5 has an invalid length. [ 205.409374][T11958] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2735'. [ 205.456491][ T5819] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 205.464687][ T5819] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 205.486397][ T5819] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -71 [ 205.500827][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 205.510419][ T5870] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 205.516444][ T5819] usb 4-1: USB disconnect, device number 26 [ 205.524463][ T5870] usb 2-1: config 0 has no interface number 0 [ 205.527567][ T5870] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 205.544078][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.570735][ T5870] usb 2-1: Product: syz [ 205.576084][ T5870] usb 2-1: Manufacturer: syz [ 205.580911][ T5870] usb 2-1: SerialNumber: syz [ 205.592239][ T5870] usb 2-1: config 0 descriptor?? [ 205.599931][ T5870] smsc95xx v2.0.0 [ 205.722998][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 205.723016][ T29] audit: type=1400 audit(1738700933.907:661): avc: denied { name_bind } for pid=11974 comm="syz.0.2741" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 205.861883][T11977] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.187870][ T29] audit: type=1326 audit(1738700934.367:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24df8cda9 code=0x7ffc0000 [ 206.217958][ T29] audit: type=1326 audit(1738700934.397:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24df8cda9 code=0x7ffc0000 [ 206.270998][ T29] audit: type=1326 audit(1738700934.397:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa24df8cda9 code=0x7ffc0000 [ 206.294772][ T29] audit: type=1326 audit(1738700934.397:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24df8cda9 code=0x7ffc0000 [ 206.328646][ T29] audit: type=1326 audit(1738700934.397:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24df8cda9 code=0x7ffc0000 [ 206.352757][ T29] audit: type=1326 audit(1738700934.397:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa24df8cda9 code=0x7ffc0000 [ 206.376888][ T29] audit: type=1326 audit(1738700934.397:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24df8cda9 code=0x7ffc0000 [ 206.410671][ T29] audit: type=1326 audit(1738700934.397:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fa24df8cda9 code=0x7ffc0000 [ 206.452607][ T5870] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 206.478248][ T5870] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 206.484920][ T29] audit: type=1326 audit(1738700934.397:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24df8cda9 code=0x7ffc0000 [ 206.523006][ T5870] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 206.537691][ T5870] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 206.550946][ T5870] usb 2-1: USB disconnect, device number 16 [ 206.580735][ T45] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 206.742950][ T45] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 206.756710][ T45] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 206.769299][ T45] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 206.816749][ T45] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 206.828820][ T45] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 206.860701][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 206.889488][ T45] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 206.909110][ T45] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 206.929258][ T45] usb 4-1: Product: syz [ 206.933845][ T45] usb 4-1: Manufacturer: syz [ 206.938451][ T45] usb 4-1: SerialNumber: syz [ 206.961755][ T45] usb 4-1: config 0 descriptor?? [ 207.011200][T12010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 207.023088][ T45] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 207.056408][ T45] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 207.084536][T12038] xt_hashlimit: max too large, truncated to 1048576 [ 207.115553][T12037] IPVS: persistence engine module ip_vs_pe_m not found [ 207.224374][T12051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.233800][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2773'. [ 207.251063][T12049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2773'. [ 207.472515][ T45] usb 4-1: USB disconnect, device number 27 [ 207.488695][ T45] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 207.515371][T12068] bridge0: entered allmulticast mode [ 207.740170][T12082] ALSA: mixer_oss: invalid OSS volume '' [ 207.818704][T12086] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 207.831995][ T969] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 207.850920][ T5819] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 208.002412][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 208.012078][ T5819] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 208.021221][ T5819] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 208.033583][ T969] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 208.048361][ T5819] usb 2-1: config 0 has no interface number 0 [ 208.054769][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.062968][ T5819] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.075070][ T969] usb 1-1: Product: syz [ 208.079256][ T969] usb 1-1: Manufacturer: syz [ 208.083056][T12100] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.092735][ T5819] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 208.104372][T12100] bridge0: entered allmulticast mode [ 208.104425][ T969] usb 1-1: SerialNumber: syz [ 208.120678][ T5819] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 208.141364][ T969] usb 1-1: config 0 descriptor?? [ 208.159828][ T5819] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 208.183505][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 208.204817][ T5819] usb 2-1: Product: syz [ 208.215603][ T5819] usb 2-1: config 0 descriptor?? [ 208.221492][T12078] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 208.372028][ T5869] usb 1-1: USB disconnect, device number 14 [ 208.562134][ T5868] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 208.580264][T12112] Failed to get privilege flags for destination (handle=0x2:0x2) [ 208.733078][ T5868] usb 5-1: config 0 has no interfaces? [ 208.738676][ T5868] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 208.758141][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.782219][ T5868] usb 5-1: config 0 descriptor?? [ 208.839626][ T5819] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input38 [ 209.004537][ T45] usb 5-1: USB disconnect, device number 22 [ 209.053028][T12124] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2808'. [ 209.066755][ T5868] usb 2-1: USB disconnect, device number 17 [ 209.066769][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 209.420792][ T5870] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 209.450858][ T5869] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 209.570727][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 209.577645][ T5870] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 209.586723][ T5870] usb 1-1: config 179 has no interface number 0 [ 209.594014][ T5870] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 209.605136][ T5870] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 209.613974][ T5869] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.616854][ T5870] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 209.628396][ T5869] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 209.638907][ T5870] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 209.638944][ T5870] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 209.638980][ T5870] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 209.639000][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.641012][T12126] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 209.698428][ T5868] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 209.702116][ T5869] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.715217][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.725870][T12132] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 209.735064][ T5869] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.871170][ T5868] usb 6-1: too many configurations: 15, using maximum allowed: 8 [ 209.879966][ T5868] usb 6-1: config index 0 descriptor too short (expected 64853, got 72) [ 209.889439][ T5868] usb 6-1: config index 1 descriptor too short (expected 64853, got 72) [ 209.898708][ T5868] usb 6-1: config index 2 descriptor too short (expected 64853, got 72) [ 209.907995][ T5868] usb 6-1: config index 3 descriptor too short (expected 64853, got 72) [ 209.921459][ T5868] usb 6-1: config index 4 descriptor too short (expected 64853, got 72) [ 209.932557][ T5868] usb 6-1: config index 5 descriptor too short (expected 64853, got 72) [ 209.941052][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.942068][ T5868] usb 6-1: config index 6 descriptor too short (expected 64853, got 72) [ 209.959312][ T5868] usb 6-1: config index 7 descriptor too short (expected 64853, got 72) [ 209.970175][ T5868] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.973577][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.979711][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.996345][ T5868] usb 6-1: Product: syz [ 210.000791][ T5868] usb 6-1: Manufacturer: syz [ 210.005509][ T5868] usb 6-1: SerialNumber: syz [ 210.015210][ T5868] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 210.035026][ T5870] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 210.128457][ T5869] usb 4-1: USB disconnect, device number 28 [ 210.207300][ T45] usb 1-1: USB disconnect, device number 15 [ 210.213307][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 210.213333][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 210.279430][ T5819] usb 6-1: USB disconnect, device number 16 [ 210.695300][T12140] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.709391][T12140] bridge0: entered allmulticast mode [ 211.133587][T12165] block nbd1: NBD_DISCONNECT [ 211.135179][ T5870] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 211.158024][ T5870] ath9k_htc: Failed to initialize the device [ 211.164866][ T5819] usb 6-1: ath9k_htc: USB layer deinitialized [ 211.213597][T12163] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 211.219634][T12163] syzkaller1: linktype set to 780 [ 211.240061][T12168] 9pnet_virtio: no channels available for device syz [ 211.250635][ T3071] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 211.377880][T12175] input: syz0 as /devices/virtual/input/input39 [ 211.410702][ T3071] usb 4-1: Using ep0 maxpacket: 16 [ 211.418669][ T3071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.440074][ T3071] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 211.456297][ T3071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.487283][ T3071] usb 4-1: config 0 descriptor?? [ 211.912810][ T3071] kye 0003:0458:5016.0015: control desc unexpectedly large [ 211.940301][ T3071] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0015/input/input40 [ 212.054387][ T3071] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0015/input/input41 [ 212.157614][ T3071] kye 0003:0458:5016.0015: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 212.189916][ T3071] usb 4-1: USB disconnect, device number 29 [ 212.661522][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2870'. [ 212.921371][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 212.921392][ T29] audit: type=1326 audit(1738700941.094:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.5.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 212.987517][ T29] audit: type=1326 audit(1738700941.094:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.5.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 213.026835][ T29] audit: type=1326 audit(1738700941.154:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.5.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 213.137667][ T29] audit: type=1326 audit(1738700941.154:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.5.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 213.202276][ T29] audit: type=1326 audit(1738700941.154:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.5.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 213.248098][ T29] audit: type=1326 audit(1738700941.154:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.5.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 213.277067][ T29] audit: type=1326 audit(1738700941.154:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.5.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 213.308256][ T29] audit: type=1326 audit(1738700941.154:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.5.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438fd8cda9 code=0x7ffc0000 [ 213.333723][ T29] audit: type=1400 audit(1738700941.164:685): avc: denied { lock } for pid=12273 comm="syz.3.2879" path="socket:[35492]" dev="sockfs" ino=35492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 213.363009][ T29] audit: type=1400 audit(1738700941.234:686): avc: denied { mounton } for pid=12277 comm="syz.0.2881" path="/proc/1295/cgroup" dev="proc" ino=36752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 213.513989][ T5819] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 213.686986][ T5819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.700652][ T5819] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.722131][ T5819] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 213.733908][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.756177][ T5819] usb 4-1: SerialNumber: syz [ 213.993599][ T5819] usb 4-1: 0:2 : does not exist [ 214.022789][ T5819] usb 4-1: USB disconnect, device number 30 [ 214.291256][ T969] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 214.393230][ T5870] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 214.443467][ T969] usb 6-1: Using ep0 maxpacket: 32 [ 214.450677][ T969] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.460637][ T969] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 214.464163][T12372] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 214.469719][ T969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.469745][ T969] usb 6-1: Product: syz [ 214.469759][ T969] usb 6-1: Manufacturer: syz [ 214.469770][ T969] usb 6-1: SerialNumber: syz [ 214.503202][T12372] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 214.512361][ T969] usb 6-1: config 0 descriptor?? [ 214.585316][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 214.599413][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.620633][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.640709][ T5870] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 214.650117][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.671984][ T5870] usb 1-1: config 0 descriptor?? [ 214.688800][T12378] netlink: 'syz.1.2927': attribute type 5 has an invalid length. [ 214.925287][ T969] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 215.108593][ T5870] gt683r_led 0003:1770:FF00.0016: item fetching failed at offset 2/5 [ 215.126180][ T969] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 215.126870][ T5870] gt683r_led 0003:1770:FF00.0016: hid parsing failed [ 215.141255][ T969] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 215.161089][ T5870] gt683r_led 0003:1770:FF00.0016: probe with driver gt683r_led failed with error -22 [ 215.172198][ T969] usb 6-1: USB disconnect, device number 17 [ 215.316209][ T5870] usb 1-1: USB disconnect, device number 16 [ 215.961937][ T969] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 216.124807][ T969] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 216.147029][ T969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.158300][T12419] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input42 [ 216.163750][ T969] usb 6-1: Product: syz [ 216.194645][ T969] usb 6-1: Manufacturer: syz [ 216.207926][ T969] usb 6-1: SerialNumber: syz [ 216.241470][ T969] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 216.279255][ T5869] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 216.995383][ T5819] usb 6-1: USB disconnect, device number 18 [ 217.601815][ T5869] usb 6-1: Service connection timeout for: 256 [ 217.608271][ T5869] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 217.627860][ T5869] ath9k_htc: Failed to initialize the device [ 217.656784][ T5819] usb 6-1: ath9k_htc: USB layer deinitialized [ 217.910933][ T5870] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 217.921286][ T5899] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 218.073360][ T5870] usb 2-1: too many configurations: 89, using maximum allowed: 8 [ 218.073508][ T5899] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.104512][ T5899] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 218.119573][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.129774][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 218.154707][ T5870] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 218.174193][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.190794][ T5870] usb 2-1: Product: syz [ 218.195039][ T5870] usb 2-1: Manufacturer: syz [ 218.199645][ T5870] usb 2-1: SerialNumber: syz [ 218.214608][ T5870] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 218.220736][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 218.248653][ T3071] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.255963][ T5899] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.272763][T12479] delete_channel: no stack [ 218.277514][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.297837][ T5899] usb 1-1: Product: syz [ 218.310642][ T5899] usb 1-1: Manufacturer: syz [ 218.334933][ T5899] cdc_wdm 1-1:1.0: skipping garbage [ 218.351387][ T5899] cdc_wdm 1-1:1.0: skipping garbage [ 218.364199][ T5899] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 218.370169][ T5899] cdc_wdm 1-1:1.0: Unknown control protocol [ 218.608599][ T5899] usb 1-1: USB disconnect, device number 17 [ 218.668292][T12497] netlink: 'syz.4.2980': attribute type 10 has an invalid length. [ 218.720795][ T45] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 218.872124][ T45] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 218.883799][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 218.894817][ T45] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.906487][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.919328][ T5899] usb 2-1: USB disconnect, device number 18 [ 218.924670][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 218.937318][ T45] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 218.946534][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.954707][ T45] usb 6-1: Product: syz [ 218.958886][ T45] usb 6-1: Manufacturer: syz [ 218.963516][ T45] usb 6-1: SerialNumber: syz [ 218.969759][ T45] usb 6-1: config 0 descriptor?? [ 218.976618][ T45] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 219.232347][ T45] usb 6-1: USB disconnect, device number 19 [ 219.395263][T12512] bpf: Bad value for 'uid' [ 219.520685][ T3071] usb 2-1: Service connection timeout for: 256 [ 219.526905][ T3071] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 219.542764][ T5819] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 219.552543][ T3071] ath9k_htc: Failed to initialize the device [ 219.566849][ T5899] usb 2-1: ath9k_htc: USB layer deinitialized [ 219.703998][ T5819] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 219.723628][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.752862][ T5819] usb 1-1: config 0 descriptor?? [ 219.766854][ T5819] cp210x 1-1:0.0: cp210x converter detected [ 219.870865][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2997'. [ 219.890195][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2997'. [ 219.899536][T12531] netlink: 'syz.5.2997': attribute type 20 has an invalid length. [ 220.173459][ T5819] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 220.284631][ T5819] usb 1-1: cp210x converter now attached to ttyUSB0 [ 220.333252][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3003'. [ 220.408574][ T5869] usb 1-1: USB disconnect, device number 18 [ 220.426738][ T5869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 220.468584][ T5869] cp210x 1-1:0.0: device disconnected [ 220.486551][T12557] team0: Device gtp0 is of different type [ 220.600761][ T5899] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 220.782220][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.805702][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.832016][ T5899] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 220.858501][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.877735][ T5899] usb 6-1: config 0 descriptor?? [ 221.022245][T12585] loop6: detected capacity change from 0 to 524287999 [ 221.038278][ C1] blk_print_req_error: 7 callbacks suppressed [ 221.038299][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.053728][ C1] buffer_io_error: 7 callbacks suppressed [ 221.053742][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.074810][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.084097][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.094574][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.103866][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.114923][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.124188][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.132552][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.141726][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.153930][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.163161][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.171842][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.181077][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.189800][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.199139][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.219088][T12585] ldm_validate_partition_table(): Disk read failed. [ 221.230563][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.239800][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.248053][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.257287][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.267655][T12585] Dev loop6: unable to read RDB block 0 [ 221.277023][T12585] loop6: unable to read partition table [ 221.294089][T12585] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 221.499885][ T5899] hid-led 0003:1D34:000A.0017: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.5-1/input0 [ 221.514927][ T5899] hid-led 0003:1D34:000A.0017: Dream Cheeky Webmail Notifier initialized [ 221.716613][ T5899] usb 6-1: USB disconnect, device number 20 [ 222.229637][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'. [ 222.370459][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 222.370475][ T29] audit: type=1326 audit(1738700950.544:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 222.454493][ T29] audit: type=1326 audit(1738700950.544:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 222.481421][ T29] audit: type=1326 audit(1738700950.594:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 222.504825][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.512018][ T29] audit: type=1326 audit(1738700950.594:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 222.535389][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.574105][ T29] audit: type=1326 audit(1738700950.594:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 222.605116][ T29] audit: type=1326 audit(1738700950.594:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 222.655714][ T29] audit: type=1326 audit(1738700950.594:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 222.685436][ T29] audit: type=1326 audit(1738700950.594:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 222.741328][ T29] audit: type=1326 audit(1738700950.604:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 222.769397][ T29] audit: type=1326 audit(1738700950.604:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd806383d67 code=0x7ffc0000 [ 223.100714][ T3071] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 223.281246][ T3071] usb 6-1: Using ep0 maxpacket: 32 [ 223.287910][ T3071] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.313865][ T3071] usb 6-1: config 0 has no interface number 0 [ 223.335228][ T3071] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 223.350756][ T3071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.364281][ T3071] usb 6-1: Product: syz [ 223.368539][ T3071] usb 6-1: Manufacturer: syz [ 223.373422][ T3071] usb 6-1: SerialNumber: syz [ 223.379611][ T3071] usb 6-1: config 0 descriptor?? [ 223.387847][ T3071] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 223.397410][ T3071] usb 6-1: selecting invalid altsetting 1 [ 223.406274][ T3071] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 223.419810][ T3071] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 223.431206][ T3071] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 223.440136][ T3071] usb 6-1: media controller created [ 223.469741][ T3071] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.491354][ T5899] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 223.521481][T12712] batadv_slave_0: entered promiscuous mode [ 223.650739][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 223.660360][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.690600][ T5899] usb 2-1: config 0 has no interfaces? [ 223.709929][ T5899] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 223.730650][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.740124][ T3071] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 223.741988][ T5899] usb 2-1: config 0 descriptor?? [ 223.759181][ T3071] zl10353_read_register: readreg error (reg=127, ret==-71) [ 223.780274][ T3071] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 223.815029][ T3071] usb 6-1: USB disconnect, device number 21 [ 223.986838][ T3071] usb 2-1: USB disconnect, device number 19 [ 224.003033][ T5820] Bluetooth: hci2: command 0x0405 tx timeout [ 224.020664][ T5899] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 224.103689][T12738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.173416][ T5899] usb 4-1: config 0 has an invalid interface number: 81 but max is 0 [ 224.185213][ T5899] usb 4-1: config 0 has no interface number 0 [ 224.191867][ T5899] usb 4-1: config 0 interface 81 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.206772][ T5899] usb 4-1: config 0 interface 81 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.224298][ T5899] usb 4-1: config 0 interface 81 has no altsetting 0 [ 224.231369][ T5899] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 224.244059][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.253946][ T5899] usb 4-1: config 0 descriptor?? [ 224.520760][ T5819] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 224.668548][ T5899] wacom 0003:056A:033B.0018: unknown main item tag 0xe [ 224.683579][ T5819] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 224.701269][ T5899] wacom 0003:056A:033B.0018: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 224.713531][ T5819] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.732772][ T5819] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.751350][ T5899] wacom 0003:056A:033B.0018: hidraw0: USB HID v0.40 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input81 [ 224.763332][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.771410][ T5899] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.81/0003:056A:033B.0018/input/input44 [ 224.785917][ T5819] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.795445][ T5819] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.811671][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.825321][ T5819] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.835159][ T5819] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.846730][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.878900][ T5899] usb 4-1: USB disconnect, device number 31 [ 224.901703][ T5819] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.920635][ T5819] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.937454][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.954037][ T5819] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.955478][T12764] loop6: detected capacity change from 0 to 524287999 [ 224.964699][ T5819] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.974751][T12764] ldm_validate_partition_table(): Disk read failed. [ 224.981647][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.001820][T12764] Dev loop6: unable to read RDB block 0 [ 225.008216][T12764] loop6: unable to read partition table [ 225.011744][ T5819] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.016895][T12764] loop_reread_partitions: partition scan of loop6 ($) failed (rc=-5) [ 225.024209][ T5819] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.049594][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.058476][ T5819] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.067624][ T5819] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.081458][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.089308][ T5819] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.098976][ T5819] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.111118][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.122769][ T5819] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 225.136367][ T5819] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 225.149257][ T5819] usb 1-1: Product: syz [ 225.157473][ T5819] usb 1-1: Manufacturer: syz [ 225.166315][ T5819] usb 1-1: SerialNumber: syz [ 225.175320][ T5819] usb 1-1: config 0 descriptor?? [ 225.184388][ T5819] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 225.735011][T12792] netlink: 'syz.1.3116': attribute type 4 has an invalid length. [ 226.141151][ T5819] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 226.313716][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.331470][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.342619][ T5819] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 226.352118][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.362793][ T5819] usb 6-1: config 0 descriptor?? [ 226.455653][T12839] IPVS: Scheduler module ip_vs_ not found [ 226.789096][ T5819] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 227.203152][ T5819] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 227.214643][ T5819] pyra 0003:1E7D:2CF6.0019: couldn't install mouse [ 227.228050][ T5819] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -71 [ 227.257806][ T5819] usb 6-1: USB disconnect, device number 22 [ 227.269542][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.282295][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.295453][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.332394][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.339947][ T3071] usb 1-1: USB disconnect, device number 19 [ 227.346657][ T5827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.354193][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.374250][ T3071] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 227.570808][T12860] chnl_net:caif_netlink_parms(): no params data found [ 227.673767][T12860] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.681975][T12860] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.689207][T12860] bridge_slave_0: entered allmulticast mode [ 227.696408][T12860] bridge_slave_0: entered promiscuous mode [ 227.704223][T12860] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.711772][T12860] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.718968][T12860] bridge_slave_1: entered allmulticast mode [ 227.725623][T12860] bridge_slave_1: entered promiscuous mode [ 227.760226][T12860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.775190][T12860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.816433][T12860] team0: Port device team_slave_0 added [ 227.828510][T12860] team0: Port device team_slave_1 added [ 227.853519][T12860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.860670][ T5899] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 227.868553][T12860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.899405][T12860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.912359][T12860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.934791][T12860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.965376][T12860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.025011][T12860] hsr_slave_0: entered promiscuous mode [ 228.036452][T12860] hsr_slave_1: entered promiscuous mode [ 228.043333][T12860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.051521][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 228.061359][T12860] Cannot create hsr debugfs directory [ 228.069702][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.085871][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.107743][ T5899] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.117692][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.150644][ T5899] usb 1-1: config 0 descriptor?? [ 228.216897][T12897] vxcan2: entered allmulticast mode [ 228.294159][T12860] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 228.316176][T12860] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 228.332439][T12860] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 228.353118][T12860] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.446063][T12860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.526154][T12860] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.543884][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 228.543901][ T29] audit: type=1326 audit(1738700956.724:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 228.573360][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.584123][ T5899] HID 045e:07da: Invalid code 65791 type 1 [ 228.592796][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.594064][ T5899] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001A/input/input47 [ 228.599916][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.622282][ T29] audit: type=1326 audit(1738700956.724:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 228.652673][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.659807][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.660700][ T5899] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 228.699102][ T29] audit: type=1326 audit(1738700956.724:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 228.722530][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.747674][ T29] audit: type=1326 audit(1738700956.724:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 228.771125][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.793757][T12860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.817273][ T29] audit: type=1326 audit(1738700956.724:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 228.840712][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.853664][ T29] audit: type=1326 audit(1738700956.864:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80638cda9 code=0x7ffc0000 [ 228.878100][ T29] audit: type=1326 audit(1738700956.864:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd806383d67 code=0x7ffc0000 [ 228.904144][ T29] audit: type=1326 audit(1738700956.864:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd806328fa9 code=0x7ffc0000 [ 228.929476][ T29] audit: type=1326 audit(1738700956.864:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd806383d67 code=0x7ffc0000 [ 228.952838][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.959600][ T29] audit: type=1326 audit(1738700956.864:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd806328fa9 code=0x7ffc0000 [ 229.010326][ T5869] usb 1-1: USB disconnect, device number 20 [ 229.049795][T12860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.267775][T12860] veth0_vlan: entered promiscuous mode [ 229.284364][T12860] veth1_vlan: entered promiscuous mode [ 229.312653][T12860] veth0_macvtap: entered promiscuous mode [ 229.324652][T12860] veth1_macvtap: entered promiscuous mode [ 229.364165][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.374828][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.396441][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.418625][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.430473][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.441577][ T5820] Bluetooth: hci1: command tx timeout [ 229.452921][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.465712][T12860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.476315][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.486904][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.510661][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.521348][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.531596][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.549673][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.571895][T12860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.599236][T12860] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.617716][T12860] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.633971][T12860] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.643736][T12860] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.803048][T12946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3186'. [ 229.914584][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.923983][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.935967][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.951362][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.279715][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3183'. [ 230.414602][T12979] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3190'. [ 230.472110][ T5868] IPVS: starting estimator thread 0... [ 230.570766][T12983] IPVS: using max 33 ests per chain, 79200 per kthread [ 230.580779][ T3071] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 230.740969][ T3071] usb 6-1: Using ep0 maxpacket: 16 [ 230.753714][ T3071] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 230.755053][T13001] Failed to get privilege flags for destination (handle=0x2:0x2) [ 230.770804][ T3071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.770835][ T3071] usb 6-1: Product: syz [ 230.770863][ T3071] usb 6-1: Manufacturer: syz [ 230.770876][ T3071] usb 6-1: SerialNumber: syz [ 230.796033][ T3071] usb 6-1: config 0 descriptor?? [ 230.828036][T13004] ALSA: mixer_oss: invalid OSS volume '' [ 231.222156][ T3071] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 231.263908][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3208'. [ 231.265327][ T3071] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.275340][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3208'. [ 231.294086][ T3071] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 231.310943][ T3071] usb 6-1: media controller created [ 231.333847][ T3071] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.432173][ T3071] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 231.440145][ T3071] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 231.530731][ T5820] Bluetooth: hci1: command tx timeout [ 231.585751][T13033] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 231.602979][ T5869] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 231.610905][T13033] syzkaller1: linktype set to 780 [ 231.647899][ T9] usb 6-1: USB disconnect, device number 23 [ 231.675679][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 231.777850][ T5869] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 231.800454][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.819147][ T5869] usb 1-1: Product: syz [ 231.829270][ T5869] usb 1-1: Manufacturer: syz [ 231.839391][ T5869] usb 1-1: SerialNumber: syz [ 231.853544][ T5869] usb 1-1: config 0 descriptor?? [ 231.862027][ T5869] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 232.475927][ T5869] gspca_sunplus: reg_r err -71 [ 232.492774][ T5869] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 232.510282][ T5869] usb 1-1: USB disconnect, device number 21 [ 232.598528][T13089] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3238'. [ 233.450196][T13140] netlink: 18 bytes leftover after parsing attributes in process `syz.6.3261'. [ 233.600874][ T5820] Bluetooth: hci1: command tx timeout [ 233.601365][ T3516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.611375][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 233.611389][ T29] audit: type=1400 audit(1738700961.784:824): avc: denied { create } for pid=13144 comm="syz.6.3263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 233.642872][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.654379][ T29] audit: type=1400 audit(1738700961.834:825): avc: denied { getattr } for pid=13144 comm="syz.6.3263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 233.679387][ T3071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.908402][T13159] sp0: Synchronizing with TNC [ 234.029746][T13167] input: syz1 as /devices/virtual/input/input48 [ 234.047451][T13169] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 234.077111][T13169] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 234.095175][T13169] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 234.232902][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3278'. [ 234.251265][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.577924][ T29] audit: type=1400 audit(1738700962.754:826): avc: denied { read } for pid=13192 comm="syz.6.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.722499][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.845718][T13209] overlayfs: conflicting options: userxattr,verity=on [ 234.920853][ T3071] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 235.093807][ T3071] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 235.107723][ T3071] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 235.117247][ T3071] usb 1-1: config 0 has no interface number 0 [ 235.133158][ T3071] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 235.153962][ T3071] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 235.175171][ T3071] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 235.193622][ T3071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.221710][ T3071] usb 1-1: config 0 descriptor?? [ 338.563206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.930492][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 339.937527][ C1] rcu: 0-...!: (1 GPs behind) idle=cfdc/1/0x4000000000000000 softirq=40149/40150 fqs=24 [ 339.948548][ C1] rcu: (detected by 1, t=10502 jiffies, g=39049, q=703 ncpus=2) [ 339.956279][ C1] Sending NMI from CPU 1 to CPUs 0: [ 339.956307][ C0] NMI backtrace for cpu 0 [ 339.956318][ C0] CPU: 0 UID: 0 PID: 13194 Comm: syz.5.3286 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 339.956333][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 339.956340][ C0] RIP: 0010:kasan_check_range+0x10e/0x1a0 [ 339.956380][ C0] Code: 00 7c 0b 44 89 c2 e8 c1 ec ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 41 <80> 38 00 74 f2 eb b2 41 bc 08 00 00 00 45 29 dc 49 8d 14 2c eb 0c [ 339.956391][ C0] RSP: 0018:ffffc90000007a70 EFLAGS: 00000086 [ 339.956406][ C0] RAX: fffffbfff2dd7599 RBX: fffffbfff2dd759a RCX: ffffffff8195b23e [ 339.956415][ C0] RDX: fffffbfff2dd759a RSI: 0000000000000008 RDI: ffffffff96ebacc8 [ 339.956424][ C0] RBP: fffffbfff2dd7599 R08: 0000000000000000 R09: fffffbfff2dd7599 [ 339.956431][ C0] R10: ffffffff96ebaccf R11: 0000000000000004 R12: ffff8880303a2440 [ 339.956439][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 1ffff92000000f5a [ 339.956447][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 339.956460][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.956468][ C0] CR2: 000000110c3f913c CR3: 0000000066c04000 CR4: 00000000003526f0 [ 339.956475][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 339.956482][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 339.956490][ C0] Call Trace: [ 339.956496][ C0] [ 339.956501][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 339.956522][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 339.956539][ C0] ? nmi_handle+0x1ac/0x5d0 [ 339.956557][ C0] ? kasan_check_range+0x10e/0x1a0 [ 339.956572][ C0] ? default_do_nmi+0x6a/0x160 [ 339.956589][ C0] ? exc_nmi+0x170/0x1e0 [ 339.956604][ C0] ? end_repeat_nmi+0xf/0x53 [ 339.956624][ C0] ? hlock_class+0x4e/0x130 [ 339.956639][ C0] ? kasan_check_range+0x10e/0x1a0 [ 339.956653][ C0] ? kasan_check_range+0x10e/0x1a0 [ 339.956669][ C0] ? kasan_check_range+0x10e/0x1a0 [ 339.956683][ C0] [ 339.956687][ C0] [ 339.956692][ C0] hlock_class+0x4e/0x130 [ 339.956705][ C0] mark_lock+0xb5/0xc60 [ 339.956722][ C0] ? __pfx_mark_lock+0x10/0x10 [ 339.956736][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 339.956753][ C0] ? hlock_class+0x4e/0x130 [ 339.956765][ C0] ? __lock_acquire+0xcc5/0x3c40 [ 339.956783][ C0] __lock_acquire+0x1390/0x3c40 [ 339.956801][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 339.956817][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 339.956833][ C0] ? advance_sched+0x6d2/0xc60 [ 339.956853][ C0] lock_acquire.part.0+0x11b/0x380 [ 339.956869][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 339.956882][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 339.956898][ C0] ? rcu_is_watching+0x12/0xc0 [ 339.956911][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 339.956925][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 339.956937][ C0] ? lock_acquire+0x2f/0xb0 [ 339.956952][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 339.956964][ C0] ? __pfx_advance_sched+0x10/0x10 [ 339.956979][ C0] _raw_spin_lock_irq+0x36/0x50 [ 339.956997][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 339.957008][ C0] __hrtimer_run_queues+0x2be/0xae0 [ 339.957023][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 339.957034][ C0] ? read_tsc+0x9/0x20 [ 339.957050][ C0] hrtimer_interrupt+0x392/0x8e0 [ 339.957066][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 339.957087][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 339.957106][ C0] [ 339.957109][ C0] [ 339.957113][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.957130][ C0] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 339.957147][ C0] Code: b8 ff ff ff ff 65 0f c1 05 80 de 6b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 339.957157][ C0] RSP: 0018:ffffc900049d74b0 EFLAGS: 00000206 [ 339.957166][ C0] RAX: 0000000000000046 RBX: 1ffff9200093ae97 RCX: 0000000057475fcc [ 339.957174][ C0] RDX: 0000000000000001 RSI: ffffffff8b6cf020 RDI: ffffffff8bd34c80 [ 339.957181][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd7598 [ 339.957189][ C0] R10: ffffffff96ebacc7 R11: 0000000000000003 R12: 0000000000000000 [ 339.957196][ C0] R13: ffffffff8e1bcbc0 R14: 0000000000000000 R15: 0000000000000000 [ 339.957208][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 339.957224][ C0] ? rcu_is_watching+0x12/0xc0 [ 339.957236][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 339.957249][ C0] ? __page_table_check_pte_clear+0x1ba/0x580 [ 339.957264][ C0] ? lock_acquire+0x2f/0xb0 [ 339.957278][ C0] ? __page_table_check_pte_clear+0x1ba/0x580 [ 339.957291][ C0] __page_table_check_pte_clear+0x1c0/0x580 [ 339.957312][ C0] ? __page_table_check_pte_clear+0x1ba/0x580 [ 339.957325][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 339.957339][ C0] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 339.957356][ C0] unmap_page_range+0x23b8/0x43a0 [ 339.957379][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 339.957395][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 339.957410][ C0] ? uprobe_munmap+0x20/0x5c0 [ 339.957428][ C0] unmap_single_vma+0x194/0x2b0 [ 339.957446][ C0] unmap_vmas+0x22f/0x490 [ 339.957463][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 339.957479][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 339.957496][ C0] exit_mmap+0x1c1/0xba0 [ 339.957515][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 339.957533][ C0] ? __pfx_mark_lock+0x10/0x10 [ 339.957553][ C0] __mmput+0x12a/0x410 [ 339.957572][ C0] mmput+0x62/0x70 [ 339.957588][ C0] do_exit+0x9ba/0x2d70 [ 339.957602][ C0] ? get_signal+0x8f7/0x26c0 [ 339.957620][ C0] ? __pfx_do_exit+0x10/0x10 [ 339.957633][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 339.957644][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.957657][ C0] do_group_exit+0xd3/0x2a0 [ 339.957670][ C0] get_signal+0x24ed/0x26c0 [ 339.957688][ C0] ? __pfx_add_device_randomness+0x10/0x10 [ 339.957706][ C0] ? __pfx_get_signal+0x10/0x10 [ 339.957724][ C0] ? __pfx_do_futex+0x10/0x10 [ 339.957739][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 339.957754][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 339.957772][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 339.957785][ C0] do_syscall_64+0xda/0x250 [ 339.957799][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.957815][ C0] RIP: 0033:0x7f438fd8cda9 [ 339.957824][ C0] Code: Unable to access opcode bytes at 0x7f438fd8cd7f. [ 339.957830][ C0] RSP: 002b:00007f4390b2f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 339.957841][ C0] RAX: fffffffffffffe00 RBX: 00007f438ffa5fa8 RCX: 00007f438fd8cda9 [ 339.957849][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f438ffa5fa8 [ 339.957856][ C0] RBP: 00007f438ffa5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 339.957864][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f438ffa5fac [ 339.957872][ C0] R13: 0000000000000000 R14: 00007ffc5aa20b00 R15: 00007ffc5aa20be8 [ 339.957883][ C0] [ 339.958303][ C1] rcu: rcu_preempt kthread starved for 10454 jiffies! g39049 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 340.651112][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 340.661089][ C1] rcu: RCU grace-period kthread stack dump: [ 340.666979][ C1] task:rcu_preempt state:R running task stack:27696 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 340.680508][ C1] Call Trace: [ 340.683785][ C1] [ 340.686743][ C1] __schedule+0xf43/0x5890 [ 340.691174][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 340.696391][ C1] ? __pfx___schedule+0x10/0x10 [ 340.701248][ C1] ? schedule+0x298/0x350 [ 340.705594][ C1] ? __pfx_lock_release+0x10/0x10 [ 340.710799][ C1] ? lock_acquire+0x2f/0xb0 [ 340.715327][ C1] ? schedule+0x1fd/0x350 [ 340.719688][ C1] schedule+0xe7/0x350 [ 340.723767][ C1] schedule_timeout+0x124/0x280 [ 340.728626][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 340.734019][ C1] ? __pfx_process_timeout+0x10/0x10 [ 340.739312][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 340.745132][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 340.750604][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 340.755381][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 340.760672][ C1] ? rcu_gp_init+0xc82/0x1630 [ 340.765356][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 340.770568][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 340.776383][ C1] rcu_gp_kthread+0x271/0x380 [ 340.781071][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 340.786282][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 340.791490][ C1] ? __kthread_parkme+0x148/0x220 [ 340.796540][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 340.801920][ C1] kthread+0x3af/0x750 [ 340.805995][ C1] ? __pfx_kthread+0x10/0x10 [ 340.810599][ C1] ? __pfx_kthread+0x10/0x10 [ 340.815191][ C1] ret_from_fork+0x45/0x80 [ 340.819625][ C1] ? __pfx_kthread+0x10/0x10 [ 340.824309][ C1] ret_from_fork_asm+0x1a/0x30 [ 340.829098][ C1] [ 340.832115][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 340.838442][ C1] CPU: 1 UID: 0 PID: 13199 Comm: syz.6.3285 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 340.849207][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 340.859268][ C1] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 340.865956][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 fc 04 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 340.885826][ C1] RSP: 0018:ffffc90003257820 EFLAGS: 00000293 [ 340.891944][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81adcd3a [ 340.899919][ C1] RDX: ffff88805ada4880 RSI: ffffffff81adcd14 RDI: 0000000000000005 [ 340.907892][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 340.915862][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10170c8d41 [ 340.923932][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 340.931913][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 340.940854][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.947441][ C1] CR2: 000000110c320ec6 CR3: 000000005cd46000 CR4: 00000000003526f0 [ 340.955416][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 340.963403][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 340.971389][ C1] Call Trace: [ 340.974666][ C1] [ 340.977508][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 340.983844][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 340.989049][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 340.994516][ C1] ? timekeeping_advance+0x72e/0xa90 [ 340.999806][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 341.005445][ C1] ? __asan_memcpy+0x3c/0x60 [ 341.010047][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 341.015347][ C1] ? rcu_is_watching+0x12/0xc0 [ 341.020117][ C1] ? update_process_times+0x178/0x2d0 [ 341.025509][ C1] ? __pfx_update_process_times+0x10/0x10 [ 341.031238][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 341.036701][ C1] ? update_wall_time+0x1c/0x40 [ 341.041558][ C1] ? tick_nohz_handler+0x376/0x530 [ 341.046684][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 341.052175][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 341.057587][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 341.063328][ C1] ? read_tsc+0x9/0x20 [ 341.067411][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 341.072539][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 341.078706][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 341.084611][ C1] [ 341.087543][ C1] [ 341.090475][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 341.096650][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 341.102724][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 341.108795][ C1] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 341.114875][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 341.120079][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 341.125228][ C1] flush_tlb_mm_range+0x271/0x4a0 [ 341.130284][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 341.135843][ C1] tlb_finish_mmu+0x3c9/0x7b0 [ 341.140545][ C1] exit_mmap+0x40e/0xba0 [ 341.144802][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 341.149580][ C1] ? __pfx_mark_lock+0x10/0x10 [ 341.154370][ C1] __mmput+0x12a/0x410 [ 341.158452][ C1] mmput+0x62/0x70 [ 341.162185][ C1] do_exit+0x9ba/0x2d70 [ 341.166374][ C1] ? get_signal+0x8f7/0x26c0 [ 341.170977][ C1] ? __pfx_do_exit+0x10/0x10 [ 341.175573][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 341.180601][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 341.185981][ C1] do_group_exit+0xd3/0x2a0 [ 341.190499][ C1] get_signal+0x24ed/0x26c0 [ 341.195011][ C1] ? kick_process+0xf6/0x1b0 [ 341.199611][ C1] ? __pfx_task_work_add+0x10/0x10 [ 341.204751][ C1] ? __pfx___file_ref_put+0x10/0x10 [ 341.209966][ C1] ? __pfx_get_signal+0x10/0x10 [ 341.214834][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 341.220386][ C1] ? __pfx___sys_connect+0x10/0x10 [ 341.225517][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 341.231805][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 341.237477][ C1] do_syscall_64+0xda/0x250 [ 341.242004][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.247908][ C1] RIP: 0033:0x7ff82fd8cda9 [ 341.252325][ C1] Code: Unable to access opcode bytes at 0x7ff82fd8cd7f. [ 341.259347][ C1] RSP: 002b:00007ff830c7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 341.267767][ C1] RAX: fffffffffffffffc RBX: 00007ff82ffa6080 RCX: 00007ff82fd8cda9 [ 341.275745][ C1] RDX: 0000000000000014 RSI: 0000000020000200 RDI: 0000000000000004 [ 341.283722][ C1] RBP: 00007ff82fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 341.291698][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.299672][ C1] R13: 0000000000000001 R14: 00007ff82ffa6080 R15: 00007fff726af698 [ 341.307660][ C1]