last executing test programs: 5.282366617s ago: executing program 2 (id=1994): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r1, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x1, 0x5}, 0x8) 4.883621749s ago: executing program 2 (id=1997): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) 4.815795801s ago: executing program 0 (id=1998): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x3, 0x80, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 4.503418701s ago: executing program 2 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050023bd7040fddbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300001000700005000800"], 0x38}}, 0x40) 4.353646914s ago: executing program 0 (id=2004): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x70000000, 0x0, 0x3f00, 0x0, 0x0, 0x1000, 0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}, 0x3b) 3.971636477s ago: executing program 2 (id=2008): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011c80)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) 3.863202479s ago: executing program 0 (id=2009): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) poll(0x0, 0x0, 0x0) 3.475967305s ago: executing program 2 (id=2013): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}]}, 0x4c}}, 0x0) 3.246162857s ago: executing program 3 (id=2016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0xa00}) 3.038872839s ago: executing program 2 (id=2017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) 2.39060477s ago: executing program 1 (id=2022): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc) close(r0) 2.122245631s ago: executing program 1 (id=2024): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x40000001) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x40) 2.061815668s ago: executing program 4 (id=2025): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) semget$private(0x0, 0x5, 0x0) semop(0x0, &(0x7f0000000440)=[{0x0, 0xff86}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 1.867086602s ago: executing program 1 (id=2026): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 1.767241285s ago: executing program 4 (id=2027): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/172, 0xac}], 0x1, 0x0, 0x0) 1.602563104s ago: executing program 0 (id=2028): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cpuacct.usage\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) 1.499252195s ago: executing program 4 (id=2029): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x0, 0x0, r0, 0x0}]) 1.255477356s ago: executing program 0 (id=2030): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000140)) 1.213594955s ago: executing program 1 (id=2031): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b003dd108000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000300050800800030002ac0f0011000100cabee339084eeef16f162471f40000000500090002000000050002"], 0x58}}, 0x0) 1.151889728s ago: executing program 3 (id=2032): r0 = landlock_create_ruleset(&(0x7f0000000180)={0xe739, 0x1}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0xd) 984.84851ms ago: executing program 0 (id=2033): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc087, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0x81, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x833}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x5, 0xb1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000b80)={0x0, 0x3, 0x4, @string={0x4, 0x3, "1a66"}}, 0x0, 0x0}, 0x0) 904.002263ms ago: executing program 1 (id=2034): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0xfffbf038}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 891.547224ms ago: executing program 3 (id=2035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008009776b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000008f5d00850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xa) 766.45565ms ago: executing program 4 (id=2036): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3, 0x7}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x60, &(0x7f0000000340)={@random="cf702e8cf675", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2a, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x4}]}}}}}}, 0x0) 633.882895ms ago: executing program 1 (id=2037): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x40, 0xc, 0xc, {0xc, 0x21, "f5b3da68079828108b91"}}, 0x0}, 0x0) 613.151948ms ago: executing program 3 (id=2038): r0 = syz_io_uring_setup(0x34, &(0x7f0000000080)={0x0, 0x4, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)={0x77359400}}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304, 0x38}, "faffffff0000003c", "82d7773879241628cb2d7129d5a01853", '\n\x00^ ', "614db575ffffffff"}, 0x28) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 264.591246ms ago: executing program 3 (id=2039): r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff}) 253.995335ms ago: executing program 4 (id=2040): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000400)=""/20, 0x14}], 0x1, 0x0, 0x0) 21.890794ms ago: executing program 4 (id=2041): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x7928, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) 0s ago: executing program 3 (id=2042): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000600)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000000c0)=0x1) kernel console output (not intermixed with test programs): has an invalid bInterval 0, changing to 7 [ 130.701046][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.719891][ T938] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 130.732847][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.762525][ T938] usb 2-1: config 0 descriptor?? [ 130.855019][ T45] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 130.935025][ T5319] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 131.005926][ T45] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 131.014433][ T45] usb 1-1: config 4 has no interface number 0 [ 131.023160][ T45] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 131.032351][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.040743][ T45] usb 1-1: Product: syz [ 131.052639][ T45] usb 1-1: Manufacturer: syz [ 131.058258][ T45] usb 1-1: SerialNumber: syz [ 131.064695][ T5308] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 131.084874][ T45] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 131.086292][ T5319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.110757][ T5319] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 131.120464][ T5319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.143080][ T5319] usb 5-1: config 0 descriptor?? [ 131.192911][ T938] hid-multitouch 0003:1FD2:6007.0022: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 131.254300][ T5308] usb 3-1: Using ep0 maxpacket: 16 [ 131.262514][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.284138][ T5308] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 131.293285][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.299331][ T45] vp7045: USB control message 'out' went wrong. [ 131.310471][ T5308] usb 3-1: config 0 descriptor?? [ 131.320224][ T45] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 131.340316][ T45] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 131.364316][ T45] usb 1-1: USB disconnect, device number 17 [ 131.391405][ T5273] usb 2-1: USB disconnect, device number 13 [ 131.591163][ T5319] uclogic 0003:28BD:0042.0023: interface is invalid, ignoring [ 131.757607][ T5308] glorious 0003:258A:0033.0024: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.2-1/input0 [ 131.821785][ T5273] usb 5-1: USB disconnect, device number 14 [ 132.010950][ T5273] usb 3-1: USB disconnect, device number 11 [ 132.038506][ T7256] tipc: Started in network mode [ 132.058318][ T7256] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 132.077707][ T7256] tipc: Enabled bearer , priority 9 [ 132.282704][ T7266] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.884'. [ 132.295566][ T7266] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 132.407661][ T29] audit: type=1400 audit(1727912155.126:373): avc: denied { checkpoint_restore } for pid=7269 comm="syz.3.886" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.429369][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.772552][ T7286] mkiss: ax0: crc mode is auto. [ 132.817978][ T29] audit: type=1326 audit(1727912155.556:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7287 comm="syz.3.896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x0 [ 132.894201][ T5308] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 132.991807][ T7295] random: crng reseeded on system resumption [ 133.039201][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.045709][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.059066][ T5308] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 133.081091][ T5308] usb 5-1: config 4 has no interface number 0 [ 133.107503][ T5308] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 133.119047][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.128266][ T5308] usb 5-1: Product: syz [ 133.133113][ T5308] usb 5-1: Manufacturer: syz [ 133.138444][ T5308] usb 5-1: SerialNumber: syz [ 133.152469][ T5308] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 133.199334][ T45] tipc: Node number set to 9480874 [ 133.366017][ T5308] vp7045: USB control message 'out' went wrong. [ 133.372449][ T5308] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 133.383012][ T5308] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 133.417220][ T5308] usb 5-1: USB disconnect, device number 15 [ 133.836561][ T7322] netlink: 216 bytes leftover after parsing attributes in process `syz.2.911'. [ 134.066927][ T5308] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 134.124037][ T5273] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 134.242860][ T5308] usb 4-1: Using ep0 maxpacket: 8 [ 134.249426][ T5308] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 134.258053][ T5308] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.271123][ T5308] usb 4-1: config 0 has no interface number 0 [ 134.279527][ T5308] usb 4-1: config 0 interface 186 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 134.293598][ T5308] usb 4-1: config 0 interface 186 has no altsetting 0 [ 134.293972][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 134.301514][ T5308] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=d6.1d [ 134.305790][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 134.316006][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.342543][ T5308] usb 4-1: config 0 descriptor?? [ 134.346496][ T5273] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.364889][ T5273] usb 1-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 134.394577][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.416149][ T5273] usb 1-1: config 0 descriptor?? [ 134.431793][ T5273] r8712u: register rtl8712_netdev_ops to netdev_ops [ 134.444160][ T5273] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 134.455155][ T5299] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 134.494069][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 134.501162][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 134.508996][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.520372][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 134.531516][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 134.553054][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 134.563304][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.575146][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 134.583471][ T5308] usb 4-1: string descriptor 0 read error: -71 [ 134.600946][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 134.613518][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 134.619763][ T5308] usb 4-1: USB disconnect, device number 15 [ 134.627757][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.640146][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 134.651959][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 134.662211][ T5299] usb 2-1: Using ep0 maxpacket: 16 [ 134.681978][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.693146][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.703176][ T5299] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 134.712391][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.725691][ T5299] usb 2-1: config 0 descriptor?? [ 134.731745][ T45] usb 3-1: string descriptor 0 read error: -22 [ 134.738384][ T45] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 134.755024][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.773003][ T45] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 134.880430][ T5273] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 134.887333][ T5273] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 134.895252][ T5273] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 134.898900][ T7355] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.927'. [ 134.916431][ T7355] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 135.011488][ T5308] usb 3-1: USB disconnect, device number 12 [ 135.150203][ T45] usb 1-1: USB disconnect, device number 18 [ 135.172967][ T5299] microsoft 0003:045E:00F9.0025: hidraw0: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0 [ 135.195952][ T5299] microsoft 0003:045E:00F9.0025: no inputs found [ 135.203177][ T5299] microsoft 0003:045E:00F9.0025: could not initialize ff, continuing anyway [ 135.434911][ T5308] usb 2-1: USB disconnect, device number 14 [ 135.434964][ T7371] tipc: Enabling of bearer rejected, failed to enable media [ 135.482249][ T29] audit: type=1400 audit(1727912158.216:375): avc: denied { create } for pid=7375 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 135.553062][ T29] audit: type=1400 audit(1727912158.246:376): avc: denied { setopt } for pid=7375 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 136.124115][ T5308] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 136.290717][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 136.304101][ T5308] usb 4-1: Using ep0 maxpacket: 32 [ 136.339657][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.359660][ T7422] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 136.384186][ T7422] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.946'. [ 136.388064][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.393246][ T7422] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 136.430577][ T5308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 136.460121][ T5308] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 136.485875][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.530668][ T5308] usb 4-1: config 0 descriptor?? [ 136.651243][ T7434] random: crng reseeded on system resumption [ 136.754085][ T5273] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 136.924061][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 136.936473][ T5273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.964288][ T5273] usb 3-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 136.968449][ T5308] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 136.993643][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.022055][ T5308] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 137.039621][ T5273] usb 3-1: config 0 descriptor?? [ 137.040679][ T5308] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 137.062483][ T5308] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 137.068760][ T5273] r8712u: register rtl8712_netdev_ops to netdev_ops [ 137.082750][ T5308] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 137.085776][ T5273] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 137.104031][ T5308] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 137.111090][ T5308] waltop 0003:172F:0502.0026: unknown main item tag 0x0 [ 137.158580][ T5308] waltop 0003:172F:0502.0026: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.3-1/input0 [ 137.207346][ T5308] usb 4-1: USB disconnect, device number 16 [ 137.543369][ T5273] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 137.554828][ T5273] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 137.562356][ T5273] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 137.704547][ T45] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 137.785785][ T5273] usb 3-1: USB disconnect, device number 13 [ 137.874037][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 137.888625][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.909918][ T45] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 137.927980][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.950518][ T45] usb 5-1: config 0 descriptor?? [ 138.064101][ T5308] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 138.265747][ T5308] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 138.285969][ T5308] usb 2-1: config 4 has no interface number 0 [ 138.313720][ T5308] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 138.340232][ T5308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.374072][ T5308] usb 2-1: Product: syz [ 138.392413][ T5308] usb 2-1: Manufacturer: syz [ 138.410734][ T5308] usb 2-1: SerialNumber: syz [ 138.556681][ T5308] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 138.724452][ T45] glorious 0003:258A:0033.0027: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.4-1/input0 [ 138.817380][ T45] usb 5-1: USB disconnect, device number 16 [ 138.910102][ T5308] vp7045: USB control message 'out' went wrong. [ 138.916545][ T5308] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 138.941815][ T5308] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 139.003739][ T5308] usb 2-1: USB disconnect, device number 15 [ 139.047125][ T7501] random: crng reseeded on system resumption [ 139.447701][ T7519] netlink: 'syz.3.976': attribute type 1 has an invalid length. [ 139.456170][ T7519] netlink: 9396 bytes leftover after parsing attributes in process `syz.3.976'. [ 139.864054][ T7501] Unrecognized hibernate image header format! [ 139.878467][ T7533] tipc: Enabling not permitted [ 139.882211][ T7501] PM: hibernation: Image mismatch: architecture specific data [ 139.884225][ T7533] tipc: Enabling of bearer rejected, failed to enable media [ 140.021149][ T29] audit: type=1400 audit(1727912162.756:377): avc: denied { getopt } for pid=7539 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.178326][ T29] audit: type=1326 audit(1727912162.896:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.1.989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53cad7dff9 code=0x0 [ 140.190900][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'. [ 140.214063][ T938] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 140.257237][ T29] audit: type=1400 audit(1727912162.996:379): avc: denied { setopt } for pid=7551 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.276546][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.351042][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 140.360120][ T7557] netlink: 'syz.0.993': attribute type 3 has an invalid length. [ 140.367980][ T5319] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 140.379520][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.406392][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.416643][ T938] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 140.426003][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.436237][ T938] usb 5-1: config 0 descriptor?? [ 140.527528][ T5319] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 140.552850][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.573481][ T5319] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 140.594711][ T5319] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.621610][ T5319] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 140.632425][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.649521][ T5319] usb 4-1: Product: syz [ 140.653766][ T5319] usb 4-1: Manufacturer: syz [ 140.658847][ T5319] usb 4-1: SerialNumber: syz [ 140.680406][ T5319] usb 4-1: config 0 descriptor?? [ 140.695111][ T5319] redrat3 4-1:0.0: Couldn't find all endpoints [ 140.833287][ T7570] PM: Enabling pm_trace changes system date and time during resume. [ 140.833287][ T7570] PM: Correct system time has to be restored manually after resume. [ 140.877504][ T938] waltop 0003:172F:0034.0028: item fetching failed at offset 5/7 [ 140.891823][ T938] waltop 0003:172F:0034.0028: probe with driver waltop failed with error -22 [ 140.942372][ T5319] usb 4-1: USB disconnect, device number 17 [ 141.021468][ T29] audit: type=1400 audit(1727912163.756:380): avc: denied { write } for pid=7573 comm="syz.1.1001" name="igmp" dev="proc" ino=4026532974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 141.106033][ T8] usb 5-1: USB disconnect, device number 17 [ 141.175449][ T938] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 141.315073][ T5308] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 141.344074][ T938] usb 3-1: Using ep0 maxpacket: 8 [ 141.355702][ T938] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 141.365068][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.373087][ T938] usb 3-1: Product: syz [ 141.377439][ T938] usb 3-1: Manufacturer: syz [ 141.382074][ T938] usb 3-1: SerialNumber: syz [ 141.388374][ T938] usb 3-1: config 0 descriptor?? [ 141.401655][ T938] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 141.414190][ T5273] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 141.484178][ T5308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.502982][ T5308] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 141.517298][ T5308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.536968][ T5308] usb 2-1: config 0 descriptor?? [ 141.564525][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 141.582299][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.592651][ T5273] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.619475][ T5273] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 141.637482][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.650278][ T5273] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 141.703345][ T5273] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 141.730156][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 141.764087][ T5273] usb 4-1: Product: syz [ 141.768306][ T5273] usb 4-1: Manufacturer: syz [ 141.772933][ T5273] usb 4-1: SerialNumber: syz [ 141.786322][ T5273] usb 4-1: config 0 descriptor?? [ 141.818565][ T5273] usb 4-1: NFC: intf ffff88807b6ed000 id ffffffff8f0fa4e0 [ 141.841296][ T938] gspca_m5602: Failed to find a sensor [ 141.853750][ T938] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 141.860313][ T5273] nfcmrvl 4-1:0.0: NFC: registered with nci successfully [ 141.880340][ T938] usb 3-1: USB disconnect, device number 14 [ 141.896912][ T29] audit: type=1400 audit(1727912164.636:381): avc: denied { mount } for pid=7585 comm="syz.4.1006" name="/" dev="hugetlbfs" ino=14294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 141.900719][ T7586] ======================================================= [ 141.900719][ T7586] WARNING: The mand mount option has been deprecated and [ 141.900719][ T7586] and is ignored by this kernel. Remove the mand [ 141.900719][ T7586] option from the mount to silence this warning. [ 141.900719][ T7586] ======================================================= [ 141.920349][ T29] audit: type=1400 audit(1727912164.636:382): avc: denied { remount } for pid=7585 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 142.013083][ T5308] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 142.021983][ T5308] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 142.029627][ T5308] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 142.045825][ T5308] megaworld 0003:07B5:0312.0029: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 142.057556][ T5308] megaworld 0003:07B5:0312.0029: no inputs found [ 142.082887][ T29] audit: type=1400 audit(1727912164.806:383): avc: denied { unmount } for pid=5229 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 142.145564][ T8] usb 4-1: USB disconnect, device number 18 [ 142.152836][ T8] usb 4-1: NFC: intf ffff88807b6ed000 [ 142.183746][ T29] audit: type=1400 audit(1727912164.916:384): avc: denied { shutdown } for pid=7589 comm="syz.4.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.245793][ T938] usb 2-1: USB disconnect, device number 16 [ 142.751357][ T7580] syz.0.1004: vmalloc error: size 3403776, failed to allocated page array size 6648, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 142.774153][ T7580] CPU: 1 UID: 0 PID: 7580 Comm: syz.0.1004 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 142.784896][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.795082][ T7580] Call Trace: [ 142.798393][ T7580] [ 142.801354][ T7580] dump_stack_lvl+0x16c/0x1f0 [ 142.806204][ T7580] warn_alloc+0x24d/0x3a0 [ 142.810580][ T7580] ? __pfx_warn_alloc+0x10/0x10 [ 142.815487][ T7580] ? __get_vm_area_node+0x190/0x2d0 [ 142.820737][ T7580] ? __get_vm_area_node+0x1bc/0x2d0 [ 142.825996][ T7580] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 142.832042][ T7580] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 142.838247][ T7580] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.844617][ T7580] ? __get_vm_area_node+0x190/0x2d0 [ 142.849860][ T7580] ? __get_vm_area_node+0x1bc/0x2d0 [ 142.855113][ T7580] __vmalloc_node_range_noprof+0xd85/0x15a0 [ 142.858622][ T7596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1010'. [ 142.861029][ T7580] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 142.876181][ T7580] ? __mutex_trylock_common+0xea/0x250 [ 142.881685][ T7580] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 142.887893][ T7580] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.894294][ T7580] ? rcu_is_watching+0x12/0xc0 [ 142.899106][ T7580] ? rcu_is_watching+0x12/0xc0 [ 142.903914][ T7580] ? trace_kmalloc+0x2d/0xe0 [ 142.908720][ T7580] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 142.914494][ T7580] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 142.920698][ T7580] __kvmalloc_node_noprof+0x14f/0x1a0 [ 142.926118][ T7580] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 142.932317][ T7580] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 142.938349][ T7580] vivid_update_format_cap+0x127b/0x2530 [ 142.944040][ T7580] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 142.950070][ T7580] ? v4l2_match_dv_timings+0x1df/0x1010 [ 142.955684][ T7580] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 142.961464][ T7580] vidioc_s_dv_timings+0xa5/0xc0 [ 142.966453][ T7580] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 142.971781][ T7580] __video_do_ioctl+0xaf0/0xf00 [ 142.976693][ T7580] ? __pfx___video_do_ioctl+0x10/0x10 [ 142.982129][ T7580] video_usercopy+0x4ce/0x1600 [ 142.986961][ T7580] ? __pfx___video_do_ioctl+0x10/0x10 [ 142.992473][ T7580] ? __pfx_video_usercopy+0x10/0x10 [ 142.997719][ T7580] v4l2_ioctl+0x1ba/0x250 [ 143.002074][ T7580] ? __pfx_v4l2_ioctl+0x10/0x10 [ 143.006948][ T7580] __x64_sys_ioctl+0x18f/0x220 [ 143.011757][ T7580] do_syscall_64+0xcd/0x250 [ 143.016378][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.022272][ T7580] RIP: 0033:0x7f545d17dff9 [ 143.026701][ T7580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.046437][ T7580] RSP: 002b:00007f545df94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.054889][ T7580] RAX: ffffffffffffffda RBX: 00007f545d335f80 RCX: 00007f545d17dff9 [ 143.062987][ T7580] RDX: 00000000200007c0 RSI: 00000000c0845657 RDI: 0000000000000003 [ 143.070974][ T7580] RBP: 00007f545d1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 143.078945][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.086928][ T7580] R13: 0000000000000000 R14: 00007f545d335f80 R15: 00007fffee4b0968 [ 143.094953][ T7580] [ 143.124011][ T7580] Mem-Info: [ 143.127188][ T7580] active_anon:4842 inactive_anon:0 isolated_anon:0 [ 143.127188][ T7580] active_file:11423 inactive_file:38520 isolated_file:0 [ 143.127188][ T7580] unevictable:768 dirty:412 writeback:0 [ 143.127188][ T7580] slab_reclaimable:9805 slab_unreclaimable:95674 [ 143.127188][ T7580] mapped:21888 shmem:1255 pagetables:849 [ 143.127188][ T7580] sec_pagetables:0 bounce:0 [ 143.127188][ T7580] kernel_misc_reclaimable:0 [ 143.127188][ T7580] free:1301018 free_pcp:561 free_cma:0 [ 143.174770][ T7580] Node 0 active_anon:19468kB inactive_anon:0kB active_file:45692kB inactive_file:154008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87552kB dirty:1644kB writeback:0kB shmem:3484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10204kB pagetables:3396kB sec_pagetables:0kB all_unreclaimable? no [ 143.270009][ T7580] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 143.304763][ T7580] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 143.334494][ T7580] lowmem_reserve[]: 0 2461 2461 0 0 [ 143.354460][ T7580] Node 0 DMA32 free:1258216kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19432kB inactive_anon:0kB active_file:45692kB inactive_file:153692kB unevictable:1536kB writepending:1644kB present:3129332kB managed:2549168kB mlocked:0kB bounce:0kB free_pcp:1912kB local_pcp:844kB free_cma:0kB [ 143.473332][ T7580] lowmem_reserve[]: 0 0 0 0 0 [ 143.494899][ T7580] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 143.557509][ T7580] lowmem_reserve[]: 0 0 0 0 0 [ 143.562315][ T7580] Node 1 Normal free:3931032kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:208kB local_pcp:208kB free_cma:0kB [ 143.594591][ T7580] lowmem_reserve[]: 0 0 0 0 0 [ 143.603242][ T7580] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 143.616345][ T7580] Node 0 DMA32: 19*4kB (ME) 433*8kB (UME) 413*16kB (ME) 426*32kB (UME) 325*64kB (UME) 41*128kB (UME) 24*256kB (ME) 16*512kB (UM) 7*1024kB (UM) 4*2048kB (M) 288*4096kB (M) = 1259172kB [ 143.640920][ T7580] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 143.654440][ T7580] Node 1 Normal: 142*4kB (U) 38*8kB (UME) 29*16kB (UME) 191*32kB (UME) 94*64kB (UME) 24*128kB (UME) 9*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 953*4096kB (M) = 3931032kB [ 143.682533][ T7580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.699248][ T7580] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.709642][ T7580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.719419][ T7580] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.729231][ T7580] 51198 total pagecache pages [ 143.734076][ T7580] 0 pages in swap cache [ 143.738263][ T7580] Free swap = 124984kB [ 143.742446][ T7580] Total swap = 124996kB [ 143.755604][ T7580] 2097051 pages RAM [ 143.759460][ T7580] 0 pages HighMem/MovableOnly [ 143.773512][ T7580] 428037 pages reserved [ 143.784193][ T7580] 0 pages cma reserved [ 143.825299][ T29] audit: type=1400 audit(1727912166.556:385): avc: denied { accept } for pid=7627 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 143.874604][ T29] audit: type=1400 audit(1727912166.556:386): avc: denied { write } for pid=7627 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.062028][ T7640] nbd: must specify an index to disconnect [ 144.663301][ T29] audit: type=1400 audit(1727912167.396:387): avc: denied { read } for pid=7665 comm="syz.3.1043" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 144.884129][ T5299] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 144.974018][ T29] audit: type=1400 audit(1727912167.426:388): avc: denied { open } for pid=7665 comm="syz.3.1043" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 145.014161][ T29] audit: type=1400 audit(1727912167.456:389): avc: denied { map } for pid=7665 comm="syz.3.1043" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 145.084002][ T5299] usb 5-1: Using ep0 maxpacket: 8 [ 145.092793][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.111532][ T5299] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 145.141301][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.189822][ T5299] usb 5-1: config 0 descriptor?? [ 145.647840][ T5299] waltop 0003:172F:0037.002A: collection stack underflow [ 145.671248][ T5299] waltop 0003:172F:0037.002A: item 0 1 0 12 parsing failed [ 145.693639][ T5299] waltop 0003:172F:0037.002A: probe with driver waltop failed with error -22 [ 145.823851][ T5273] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 145.883289][ T5299] usb 5-1: USB disconnect, device number 18 [ 146.004214][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 146.034285][ T5273] usb 2-1: Using ep0 maxpacket: 16 [ 146.044729][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.063968][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.083435][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.103574][ T5273] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.116042][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.150808][ T5273] usb 2-1: config 0 descriptor?? [ 146.183502][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.202653][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.235116][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.259442][ T45] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 146.270423][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.305390][ T45] usb 4-1: config 0 descriptor?? [ 146.465186][ T5299] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 146.585901][ T5273] microsoft 0003:045E:07DA.002B: unexpected long global item [ 146.612218][ T5273] microsoft 0003:045E:07DA.002B: parse failed [ 146.623820][ T5273] microsoft 0003:045E:07DA.002B: probe with driver microsoft failed with error -22 [ 146.664610][ T5299] usb 3-1: Using ep0 maxpacket: 32 [ 146.691500][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.724646][ T5299] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 146.752989][ T45] holtek_mouse 0003:04D9:A070.002C: unknown main item tag 0x0 [ 146.775466][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.787581][ T45] holtek_mouse 0003:04D9:A070.002C: unknown main item tag 0x0 [ 146.833993][ T45] holtek_mouse 0003:04D9:A070.002C: unknown main item tag 0x0 [ 146.845599][ T5299] usb 3-1: config 0 descriptor?? [ 146.873998][ T45] holtek_mouse 0003:04D9:A070.002C: unknown main item tag 0x0 [ 146.902698][ T45] holtek_mouse 0003:04D9:A070.002C: unknown main item tag 0x0 [ 146.967243][ T45] holtek_mouse 0003:04D9:A070.002C: hidraw0: USB HID v0.00 Device [HID 04d9:a070] on usb-dummy_hcd.3-1/input0 [ 147.052189][ T45] usb 4-1: USB disconnect, device number 19 [ 147.331185][ T5299] wacom 0003:056A:032C.002D: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.2-1/input0 [ 147.464086][ T5299] usb 2-1: USB disconnect, device number 17 [ 147.538026][ T45] usb 3-1: USB disconnect, device number 15 [ 148.185388][ T7714] sch_tbf: peakrate 4 is lower than or equals to rate 33554432 ! [ 148.409506][ T7721] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1070'. [ 149.964702][ T29] audit: type=1326 audit(1727912172.696:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 149.988142][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.044334][ T29] audit: type=1326 audit(1727912172.696:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 150.067682][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.142466][ T29] audit: type=1326 audit(1727912172.726:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 150.214195][ T29] audit: type=1326 audit(1727912172.726:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 150.237508][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.270512][ T29] audit: type=1326 audit(1727912172.736:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 150.328655][ T29] audit: type=1326 audit(1727912172.736:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 150.352055][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.394426][ T29] audit: type=1326 audit(1727912172.736:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 150.417784][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.438858][ T29] audit: type=1326 audit(1727912172.736:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 150.462512][ T29] audit: type=1326 audit(1727912172.736:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 150.485813][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.492086][ T29] audit: type=1326 audit(1727912172.736:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 151.565472][ T7847] omfs: Invalid superblock (0) [ 151.754967][ T7856] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.834201][ T5275] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 151.957267][ T7862] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1133'. [ 151.985923][ T7864] sch_fq: defrate 0 ignored. [ 152.252739][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.264220][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.274335][ T5275] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.283451][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.315433][ T5275] usb 5-1: config 0 descriptor?? [ 152.385795][ T5275] hub 5-1:0.0: USB hub found [ 152.572483][ T5275] hub 5-1:0.0: 1 port detected [ 152.690217][ T7898] kernel read not supported for file /eth0 (pid: 7898 comm: syz.2.1149) [ 153.113093][ T5275] usb 5-1: USB disconnect, device number 19 [ 153.728629][ T7932] xt_hashlimit: max too large, truncated to 1048576 [ 153.754373][ T7932] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 153.861960][ T7937] can0: slcan on ttyS3. [ 153.984824][ T7937] can0 (unregistered): slcan off ttyS3. [ 154.504071][ T5275] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 154.674109][ T5275] usb 4-1: Using ep0 maxpacket: 16 [ 154.685711][ T5275] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.694975][ T5275] usb 4-1: config 0 has no interface number 0 [ 154.745176][ T5275] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 154.754504][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.779596][ T5275] usb 4-1: Product: syz [ 154.797474][ T5275] usb 4-1: Manufacturer: syz [ 154.802165][ T5275] usb 4-1: SerialNumber: syz [ 154.841636][ T5275] usb 4-1: config 0 descriptor?? [ 154.875877][ T5275] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 155.241772][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 155.241792][ T29] audit: type=1400 audit(1727912177.976:426): avc: denied { bind } for pid=7995 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.842831][ T5275] gspca_spca1528: reg_w err -71 [ 155.875855][ T5275] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 155.896874][ T5275] usb 4-1: USB disconnect, device number 20 [ 156.351382][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1199'. [ 156.490212][ T29] audit: type=1326 audit(1727912179.226:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.3.1202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x0 [ 156.557803][ T29] audit: type=1400 audit(1727912179.296:428): avc: denied { listen } for pid=8044 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.619528][ T29] audit: type=1400 audit(1727912179.296:429): avc: denied { setopt } for pid=8044 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.670323][ T29] audit: type=1400 audit(1727912179.296:430): avc: denied { read } for pid=8044 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.709955][ T29] audit: type=1400 audit(1727912179.416:431): avc: denied { ioctl } for pid=8053 comm="syz.0.1205" path="socket:[16488]" dev="sockfs" ino=16488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 156.734616][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.048777][ T29] audit: type=1400 audit(1727912179.786:432): avc: denied { read } for pid=8068 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.068203][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.447569][ T8078] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 157.484406][ T5308] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 157.588544][ T8080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1217'. [ 157.663605][ T5308] usb 3-1: Using ep0 maxpacket: 16 [ 157.699969][ T5308] usb 3-1: config 128 has an invalid interface number: 61 but max is 0 [ 157.708746][ T5308] usb 3-1: config 128 has no interface number 0 [ 157.754193][ T5308] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=25.84 [ 157.763393][ T5308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.771585][ T5308] usb 3-1: Product: syz [ 157.775870][ T5308] usb 3-1: Manufacturer: syz [ 157.780502][ T5308] usb 3-1: SerialNumber: syz [ 158.244114][ T5308] usb 3-1: ignoring: probably an ADSL modem [ 158.314879][ T4611] Bluetooth: hci3: unexpected subevent 0x1a length: 10 > 6 [ 158.330281][ T8104] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1225'. [ 158.376317][ T8104] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 158.485602][ T8110] process 'syz.0.1230' launched './file0' with NULL argv: empty string added [ 158.523947][ T29] audit: type=1400 audit(1727912181.256:433): avc: denied { listen } for pid=8111 comm="syz.1.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.595362][ T29] audit: type=1400 audit(1727912181.306:434): avc: denied { execute_no_trans } for pid=8109 comm="syz.0.1230" path="/235/file0" dev="tmpfs" ino=1208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.618812][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.626345][ T8116] syz.3.1232 uses obsolete (PF_INET,SOCK_PACKET) [ 158.643669][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1232'. [ 158.653382][ T5308] cxacru 3-1:128.61: usbatm_usb_probe: bind failed: -19! [ 158.694594][ T5308] usb 3-1: USB disconnect, device number 16 [ 159.012600][ T29] audit: type=1400 audit(1727912181.746:435): avc: denied { shutdown } for pid=8126 comm="syz.0.1237" lport=49904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.304034][ T5299] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 159.455898][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.467494][ T5299] usb 5-1: config 0 has no interfaces? [ 159.475020][ T5299] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.488929][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.497626][ T8146] misc userio: Can't change port type on an already running userio instance [ 159.514758][ T5299] usb 5-1: config 0 descriptor?? [ 159.756057][ T45] usb 5-1: USB disconnect, device number 20 [ 160.133970][ T8166] mkiss: ax0: crc mode is auto. [ 160.404796][ T4611] Bluetooth: hci3: command tx timeout [ 160.467610][ T8173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1256'. [ 160.891955][ T8196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.999061][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 160.999082][ T29] audit: type=1400 audit(1727912183.736:437): avc: denied { shutdown } for pid=8200 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 161.421650][ T8223] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1278'. [ 161.489482][ T8228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1280'. [ 161.656577][ T8233] ax25_connect(): syz.0.1284 uses autobind, please contact jreuter@yaina.de [ 161.672681][ T8238] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 161.771113][ T29] audit: type=1326 audit(1727912184.506:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d17dff9 code=0x7ffc0000 [ 161.832814][ T29] audit: type=1326 audit(1727912184.536:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d17dff9 code=0x7ffc0000 [ 161.916019][ T29] audit: type=1326 audit(1727912184.536:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f545d17dff9 code=0x7ffc0000 [ 161.944719][ T5299] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 161.990809][ T29] audit: type=1326 audit(1727912184.536:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d17dff9 code=0x7ffc0000 [ 162.039330][ T29] audit: type=1326 audit(1727912184.536:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d17dff9 code=0x7ffc0000 [ 162.066670][ T29] audit: type=1326 audit(1727912184.536:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f545d17dff9 code=0x7ffc0000 [ 162.124076][ T5299] usb 5-1: Using ep0 maxpacket: 16 [ 162.131307][ T5299] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.151602][ T5299] usb 5-1: config 0 has no interface number 0 [ 162.173615][ T29] audit: type=1326 audit(1727912184.536:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d17dff9 code=0x7ffc0000 [ 162.204859][ T5299] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.221952][ T5299] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.238604][ T5299] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 162.248055][ T29] audit: type=1326 audit(1727912184.536:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d17dff9 code=0x7ffc0000 [ 162.289206][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.305251][ T8259] random: crng reseeded on system resumption [ 162.311088][ T5299] usb 5-1: config 0 descriptor?? [ 162.327872][ T29] audit: type=1326 audit(1727912184.536:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f545d17dff9 code=0x7ffc0000 [ 162.987893][ T5299] uclogic 0003:28BD:0071.002E: pen parameters not found [ 162.999490][ T5299] uclogic 0003:28BD:0071.002E: interface is invalid, ignoring [ 163.184148][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 163.223222][ T938] usb 5-1: USB disconnect, device number 21 [ 163.241828][ T5274] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 163.355092][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 163.362121][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.373277][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.383191][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 163.396349][ T45] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 163.405628][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.417747][ T45] usb 3-1: config 0 descriptor?? [ 163.434034][ T5274] usb 4-1: Using ep0 maxpacket: 8 [ 163.443745][ T5274] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 163.452979][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.461199][ T5274] usb 4-1: Product: syz [ 163.466466][ T5274] usb 4-1: Manufacturer: syz [ 163.471154][ T5274] usb 4-1: SerialNumber: syz [ 163.479549][ T5274] usb 4-1: config 0 descriptor?? [ 163.484153][ T5308] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 163.643308][ T5308] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 163.661594][ T5308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.672932][ T5308] usb 1-1: config 0 descriptor?? [ 163.681159][ T5308] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 163.721456][ T5274] kaweth 4-1:0.0: Firmware present in device. [ 163.837668][ T45] waltop 0003:172F:0502.002F: unknown main item tag 0x0 [ 163.860659][ T45] waltop 0003:172F:0502.002F: unknown main item tag 0x0 [ 163.874941][ T45] waltop 0003:172F:0502.002F: unknown main item tag 0x0 [ 163.899194][ T45] waltop 0003:172F:0502.002F: unknown main item tag 0x0 [ 163.899864][ T5308] gp8psk: usb in 128 operation failed. [ 163.921247][ T45] waltop 0003:172F:0502.002F: unknown main item tag 0x0 [ 163.929278][ T45] waltop 0003:172F:0502.002F: unknown main item tag 0x0 [ 163.936776][ T45] waltop 0003:172F:0502.002F: unknown main item tag 0x0 [ 163.945878][ T5274] kaweth 4-1:0.0: Statistics collection: 0 [ 163.951744][ T5274] kaweth 4-1:0.0: Multicast filter limit: 0 [ 163.957749][ T5274] kaweth 4-1:0.0: MTU: 0 [ 163.962046][ T5274] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 163.969425][ T45] waltop 0003:172F:0502.002F: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.2-1/input0 [ 164.084560][ T938] usb 3-1: USB disconnect, device number 17 [ 164.123842][ T5308] gp8psk: FW Version = 151.149.9 (0x979509) Build 2189/151/153 [ 164.333315][ T5274] kaweth 4-1:0.0: Error setting SOFS wait [ 164.336829][ T5308] gp8psk: usb in 149 operation failed. [ 164.339930][ T5274] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 164.346442][ T5308] gp8psk: failed to get FPGA version [ 164.369656][ T5274] usb 4-1: USB disconnect, device number 21 [ 164.377029][ T5308] gp8psk: usb in 138 operation failed. [ 164.382814][ T5308] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.393345][ T5308] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 164.403160][ T5308] usb 1-1: media controller created [ 164.419773][ T5308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.444600][ T5308] gp8psk_fe: Frontend attached [ 164.454550][ T5308] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 164.467436][ T5308] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 164.501609][ T5308] gp8psk: usb in 138 operation failed. [ 164.510903][ T5308] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 164.521239][ T5308] gp8psk: found Genpix USB device pID = 203 (hex) [ 164.533208][ T5308] usb 1-1: USB disconnect, device number 19 [ 164.596409][ T5308] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 165.185508][ T8324] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 165.538737][ T8340] openvswitch: netlink: Actions may not be safe on all matching packets [ 165.922698][ T8353] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1334'. [ 166.060632][ T8363] Zero length message leads to an empty skb [ 166.224894][ T8368] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 166.541639][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 166.541659][ T29] audit: type=1326 audit(1727912189.276:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f357dff9 code=0x7ffc0000 [ 166.623985][ T45] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 166.650049][ T29] audit: type=1326 audit(1727912189.306:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06f357dff9 code=0x7ffc0000 [ 166.754283][ T29] audit: type=1326 audit(1727912189.306:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f357dff9 code=0x7ffc0000 [ 166.779865][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 166.786156][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.831374][ T29] audit: type=1326 audit(1727912189.306:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f357dff9 code=0x7ffc0000 [ 166.843179][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.855759][ T29] audit: type=1326 audit(1727912189.326:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f06f357dff9 code=0x7ffc0000 [ 166.875134][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 166.905210][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.917609][ T45] usb 3-1: config 0 descriptor?? [ 166.938830][ T45] hub 3-1:0.0: USB hub found [ 166.943507][ T29] audit: type=1326 audit(1727912189.326:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f357dff9 code=0x7ffc0000 [ 166.977833][ T29] audit: type=1326 audit(1727912189.326:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f357dff9 code=0x7ffc0000 [ 167.001769][ T29] audit: type=1326 audit(1727912189.336:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f06f357dff9 code=0x7ffc0000 [ 167.025721][ T29] audit: type=1326 audit(1727912189.336:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f357dff9 code=0x7ffc0000 [ 167.049415][ T29] audit: type=1326 audit(1727912189.336:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f357dff9 code=0x7ffc0000 [ 167.106871][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.118360][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.128467][ T8] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 167.137857][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.143708][ T45] hub 3-1:0.0: 1 port detected [ 167.153542][ T8] usb 2-1: config 0 descriptor?? [ 167.405003][ T938] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 167.562919][ T45] usb 3-1: USB disconnect, device number 18 [ 167.565100][ T938] usb 1-1: Using ep0 maxpacket: 8 [ 167.615202][ T938] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 167.641202][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.655866][ T938] usb 1-1: Product: syz [ 167.660299][ T938] usb 1-1: Manufacturer: syz [ 167.665046][ T938] usb 1-1: SerialNumber: syz [ 167.684944][ T938] usb 1-1: config 0 descriptor?? [ 167.901505][ T938] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 167.912825][ T938] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 167.930982][ T938] usb 1-1: USB disconnect, device number 20 [ 167.996068][ T8] hid-led 0003:27B8:01ED.0030: probe with driver hid-led failed with error -71 [ 168.014679][ T8] usb 2-1: USB disconnect, device number 18 [ 168.174143][ T5273] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 168.334119][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 168.343864][ T5273] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.353799][ T5273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.365617][ T5273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.397217][ T5273] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.411594][ T5273] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.421086][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.652173][ T5273] usb 5-1: GET_CAPABILITIES returned 0 [ 168.658692][ T5273] usbtmc 5-1:16.0: can't read capabilities [ 168.681136][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 168.859179][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.865872][ T5274] usb 5-1: USB disconnect, device number 23 [ 168.883493][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.901978][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 168.907172][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 168.912100][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.938604][ T8] usb 3-1: config 0 descriptor?? [ 169.089262][ T5273] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 169.284799][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 169.321195][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.351730][ T5273] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 169.365479][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.374994][ T8] arvo 0003:1E7D:30D4.0031: unknown main item tag 0x0 [ 169.382208][ T8] arvo 0003:1E7D:30D4.0031: unknown main item tag 0x0 [ 169.389570][ T5273] usb 2-1: config 0 descriptor?? [ 169.398358][ T8450] netlink: 'syz.0.1381': attribute type 9 has an invalid length. [ 169.409100][ T8] arvo 0003:1E7D:30D4.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 169.423021][ T5273] hub 2-1:0.0: USB hub found [ 169.567816][ T8] arvo 0003:1E7D:30D4.0031: couldn't init struct arvo_device [ 169.591690][ T8] arvo 0003:1E7D:30D4.0031: couldn't install keyboard [ 169.614565][ T8] arvo 0003:1E7D:30D4.0031: probe with driver arvo failed with error -71 [ 169.643188][ T5273] hub 2-1:0.0: 1 port detected [ 169.659991][ T8] usb 3-1: USB disconnect, device number 19 [ 170.014077][ T938] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 170.062716][ T5273] usb 2-1: USB disconnect, device number 19 [ 170.140497][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 170.165036][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 170.171864][ T938] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.193382][ T938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.209780][ T938] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 170.221419][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.244270][ T938] usb 4-1: config 0 descriptor?? [ 170.735397][ T938] cougar 0003:060B:500A.0032: unexpected long global item [ 170.749186][ T938] cougar 0003:060B:500A.0032: parse failed [ 170.765710][ T938] cougar 0003:060B:500A.0032: probe with driver cougar failed with error -22 [ 170.940809][ T938] usb 4-1: USB disconnect, device number 22 [ 170.972111][ T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 171.168159][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 171.188979][ T45] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.213934][ T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.243938][ T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.263963][ T45] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.264051][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 171.300143][ T45] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.330491][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.474068][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 171.494438][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.512635][ T8] usb 5-1: config 0 has no interface number 0 [ 171.534028][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.560394][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.579028][ T45] usb 2-1: GET_CAPABILITIES returned 0 [ 171.581914][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.613704][ T45] usbtmc 2-1:16.0: can't read capabilities [ 171.662176][ T8] usb 5-1: config 0 descriptor?? [ 171.695426][ T8] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 171.707361][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 171.707380][ T29] audit: type=1400 audit(1727912194.439:484): avc: denied { setopt } for pid=8506 comm="syz.3.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.809484][ T45] usb 2-1: USB disconnect, device number 20 [ 171.994313][ T8] usb 5-1: USB disconnect, device number 24 [ 172.017180][ T8] iowarrior 5-1:0.1: I/O-Warror #1 now disconnected [ 172.394563][ T29] audit: type=1400 audit(1727912195.129:485): avc: denied { mount } for pid=8523 comm="syz.2.1416" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 172.683946][ T29] audit: type=1400 audit(1727912195.419:486): avc: denied { bind } for pid=8533 comm="syz.1.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.934281][ T29] audit: type=1326 audit(1727912195.669:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cad7dff9 code=0x7ffc0000 [ 173.030573][ T29] audit: type=1326 audit(1727912195.699:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cad7dff9 code=0x7ffc0000 [ 173.039965][ T8541] ebtables: ebtables: counters copy to user failed while replacing table [ 173.090628][ T29] audit: type=1326 audit(1727912195.699:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f53cad7dff9 code=0x7ffc0000 [ 173.160217][ T29] audit: type=1326 audit(1727912195.759:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cad7dff9 code=0x7ffc0000 [ 173.264209][ T29] audit: type=1326 audit(1727912195.769:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53cadb00e5 code=0x7ffc0000 [ 173.334089][ T29] audit: type=1326 audit(1727912195.769:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cad7dff9 code=0x7ffc0000 [ 173.408954][ T29] audit: type=1326 audit(1727912195.819:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f53cad7dff9 code=0x7ffc0000 [ 173.452602][ T8556] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1429'. [ 173.874115][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 174.056848][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 174.072090][ T8] usb 3-1: config 0 has no interfaces? [ 174.082633][ T8] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 174.102189][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.132601][ T8] usb 3-1: Product: syz [ 174.142822][ T8] usb 3-1: Manufacturer: syz [ 174.163102][ T8] usb 3-1: SerialNumber: syz [ 174.175004][ T8] usb 3-1: config 0 descriptor?? [ 174.351048][ T8583] netlink: 'syz.3.1441': attribute type 5 has an invalid length. [ 174.441528][ T8] usb 3-1: USB disconnect, device number 20 [ 174.865582][ T8599] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 175.044055][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 175.111677][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'. [ 175.138080][ T8611] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1454'. [ 175.215677][ T8] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 175.227170][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.294222][ T8] usb 1-1: config 0 descriptor?? [ 175.316602][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 175.329407][ T8619] netem: incorrect gi model size [ 175.353210][ T8619] netem: change failed [ 175.734027][ T8634] GUP no longer grows the stack in syz.4.1463 (8634): 20004000-2000a000 (20002000) [ 175.748391][ T8] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 175.774083][ T8634] CPU: 1 UID: 0 PID: 8634 Comm: syz.4.1463 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 175.784837][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.795020][ T8634] Call Trace: [ 175.798334][ T8634] [ 175.801290][ T8634] dump_stack_lvl+0x16c/0x1f0 [ 175.806013][ T8634] gup_vma_lookup+0x1d2/0x220 [ 175.810739][ T8634] __get_user_pages+0x26c/0x3b90 [ 175.815725][ T8634] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 175.821410][ T8634] ? __gup_longterm_locked+0x126/0x1b30 [ 175.827011][ T8634] ? __pfx___get_user_pages+0x10/0x10 [ 175.832419][ T8634] ? down_read_killable+0xcc/0x380 [ 175.837578][ T8634] ? __pfx_down_read_killable+0x10/0x10 [ 175.843180][ T8634] ? find_held_lock+0x2d/0x110 [ 175.848000][ T8634] ? __pfx_mark_lock+0x10/0x10 [ 175.852812][ T8634] __gup_longterm_locked+0x22e/0x1b30 [ 175.858239][ T8634] ? __pfx_lock_release+0x10/0x10 [ 175.863305][ T8634] ? __pfx___gup_longterm_locked+0x10/0x10 [ 175.869162][ T8634] ? mark_held_locks+0x9f/0xe0 [ 175.873974][ T8634] gup_fast_fallback+0x180b/0x2690 [ 175.879156][ T8634] ? __pfx_gup_fast_fallback+0x10/0x10 [ 175.884664][ T8634] ? __pfx___lock_acquire+0x10/0x10 [ 175.889905][ T8634] ? hlock_class+0x4e/0x130 [ 175.894450][ T8634] ? __lock_acquire+0xbdd/0x3ce0 [ 175.899429][ T8634] get_user_pages_fast+0xa8/0x100 [ 175.904592][ T8634] ? __pfx_get_user_pages_fast+0x10/0x10 [ 175.910280][ T8634] __iov_iter_get_pages_alloc+0x8e8/0x2230 [ 175.916138][ T8634] ? rcu_is_watching+0x12/0xc0 [ 175.920947][ T8634] ? trace_contention_end+0xea/0x140 [ 175.926275][ T8634] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 175.932553][ T8634] ? __fget_files+0x23a/0x3f0 [ 175.937276][ T8634] ? __pfx_lock_release+0x10/0x10 [ 175.942347][ T8634] ? pipe_lock+0x64/0x80 [ 175.946630][ T8634] ? schedule+0x1fd/0x350 [ 175.951000][ T8634] ? __pfx___mutex_lock+0x10/0x10 [ 175.956077][ T8634] iov_iter_get_pages2+0xa4/0x100 [ 175.961128][ T8634] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 175.966784][ T8634] ? wait_for_space+0x224/0x2d0 [ 175.971656][ T8634] __do_sys_vmsplice+0x7c3/0xef0 [ 175.976629][ T8634] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 175.982110][ T8634] ? __pfx_futex_wait+0x10/0x10 [ 175.986989][ T8634] ? lock_acquire.part.0+0x11b/0x380 [ 175.992280][ T8634] ? find_held_lock+0x2d/0x110 [ 175.997102][ T8634] ? rcu_is_watching+0x12/0xc0 [ 176.001883][ T8634] ? do_syscall_64+0xcd/0x250 [ 176.006577][ T8634] do_syscall_64+0xcd/0x250 [ 176.011100][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.017009][ T8634] RIP: 0033:0x7f06f357dff9 [ 176.021442][ T8634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.041075][ T8634] RSP: 002b:00007f06f42fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 176.049508][ T8634] RAX: ffffffffffffffda RBX: 00007f06f3735f80 RCX: 00007f06f357dff9 [ 176.057486][ T8634] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 176.065494][ T8634] RBP: 00007f06f35f0296 R08: 0000000000000000 R09: 0000000000000000 [ 176.073479][ T8634] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 176.081465][ T8634] R13: 0000000000000000 R14: 00007f06f3735f80 R15: 00007ffe49231918 [ 176.089470][ T8634] [ 176.153569][ T8] gspca_cpia1: usb_control_msg 02, error -71 [ 176.163721][ T8] gspca_cpia1: usb_control_msg 05, error -71 [ 176.169945][ T8] cpia1 1-1:0.0: unexpected systemstate: 00 [ 176.207316][ T8] usb 1-1: USB disconnect, device number 21 [ 176.234205][ T938] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 176.280351][ T8616] netlink: 'syz.2.1455': attribute type 4 has an invalid length. [ 176.288372][ T8616] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1455'. [ 176.424489][ T938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.439345][ T938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.463692][ T938] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 176.480306][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 176.498764][ T938] usb 2-1: SerialNumber: syz [ 176.933108][ T938] usb 2-1: 0:2 : does not exist [ 177.008045][ T938] usb 2-1: USB disconnect, device number 21 [ 177.068386][ T5230] udevd[5230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.096355][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 177.096376][ T29] audit: type=1400 audit(1727912199.829:514): avc: denied { ioctl } for pid=8668 comm="syz.0.1479" path="/dev/vhost-net" dev="devtmpfs" ino=1082 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 177.326401][ T29] audit: type=1400 audit(1727912200.069:515): avc: denied { unmount } for pid=5220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 177.573048][ T8681] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 178.440116][ T8707] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1496'. [ 178.449745][ T8707] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 178.625218][ T29] audit: type=1400 audit(1727912201.329:516): avc: denied { bind } for pid=8712 comm="syz.4.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 178.677195][ T8716] Option ' ' to dns_resolver key: bad/missing value [ 178.679803][ T29] audit: type=1400 audit(1727912201.329:517): avc: denied { name_bind } for pid=8712 comm="syz.4.1499" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 178.741907][ T29] audit: type=1400 audit(1727912201.329:518): avc: denied { node_bind } for pid=8712 comm="syz.4.1499" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 179.351410][ T29] audit: type=1400 audit(1727912202.089:519): avc: denied { name_bind } for pid=8739 comm="syz.0.1509" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 179.539567][ T29] audit: type=1400 audit(1727912202.279:520): avc: denied { write } for pid=8745 comm="syz.2.1512" name="ppp" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 179.743689][ T29] audit: type=1400 audit(1727912202.479:521): avc: denied { write } for pid=8754 comm="syz.2.1517" name="ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.770299][ T45] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 179.778829][ T5274] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 179.936521][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.948812][ T5274] usb 2-1: config 0 has no interfaces? [ 179.954394][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.964250][ T5274] usb 2-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 179.973330][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.988291][ T45] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 180.008522][ T5274] usb 2-1: config 0 descriptor?? [ 180.013627][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.043383][ T45] usb 1-1: config 0 descriptor?? [ 180.240933][ T5274] usb 2-1: USB disconnect, device number 22 [ 180.268988][ T8] kernel read not supported for file /dsp (pid: 8 comm: kworker/0:0) [ 180.335285][ T8774] random: crng reseeded on system resumption [ 180.485918][ T45] playstation 0003:054C:09CC.0033: hidraw0: USB HID v0.00 Device [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 180.544070][ T29] audit: type=1400 audit(1727912203.279:522): avc: denied { create } for pid=8778 comm="syz.2.1528" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 180.589944][ T29] audit: type=1400 audit(1727912203.329:523): avc: denied { unlink } for pid=5226 comm="syz-executor" name="file7" dev="tmpfs" ino=1571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 180.673424][ T45] playstation 0003:054C:09CC.0033: Invalid byte count transferred, expected 16 got 0 [ 180.694070][ T45] playstation 0003:054C:09CC.0033: Failed to retrieve DualShock4 pairing info: -22 [ 180.712737][ T45] playstation 0003:054C:09CC.0033: Failed to get MAC address from DualShock4 [ 180.732750][ T45] playstation 0003:054C:09CC.0033: Failed to create dualshock4. [ 180.745540][ T45] playstation 0003:054C:09CC.0033: probe with driver playstation failed with error -22 [ 180.895143][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 180.906461][ T45] usb 1-1: USB disconnect, device number 22 [ 181.745421][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.788299][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.816398][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.835807][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.857139][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.889917][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.943990][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.965384][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.991862][ T8816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.013662][ T8816] batadv_slave_0: entered promiscuous mode [ 182.154652][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 182.334037][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 182.354852][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.397122][ T45] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 182.407662][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.452094][ T45] usb 3-1: Product: syz [ 182.465351][ T45] usb 3-1: Manufacturer: syz [ 182.470013][ T45] usb 3-1: SerialNumber: syz [ 182.494981][ T938] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 182.507224][ T45] usb 3-1: config 0 descriptor?? [ 182.531380][ T45] gspca_main: se401-2.14.0 probing 047d:5003 [ 182.648383][ T8842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.658063][ T938] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 182.669305][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.687831][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 182.687852][ T29] audit: type=1400 audit(1727912205.429:526): avc: denied { load_policy } for pid=8840 comm="syz.4.1556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 182.726591][ T938] usb 2-1: config 0 descriptor?? [ 183.181462][ T938] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 183.212855][ T938] [drm] Initialized udl on minor 2 [ 183.412740][ T8861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1565'. [ 183.416016][ T45] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 183.576760][ T938] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 183.623414][ T938] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 183.656309][ T5308] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 183.666211][ T938] usb 2-1: USB disconnect, device number 23 [ 183.690770][ T5308] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 183.925579][ T5274] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 184.066634][ T45] gspca_se401: read req failed req 0x06 error -71 [ 184.073220][ T45] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 184.095939][ T5274] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 184.114560][ T45] usb 3-1: USB disconnect, device number 21 [ 184.121441][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.137314][ T5274] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 184.154749][ T5274] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 184.169006][ T5274] usb 1-1: Manufacturer: syz [ 184.176563][ T5274] usb 1-1: config 0 descriptor?? [ 184.198848][ T8876] netlink: 'syz.4.1572': attribute type 7 has an invalid length. [ 184.217186][ T8876] Êü: entered promiscuous mode [ 184.254385][ T938] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 184.321077][ T5274] rc_core: IR keymap rc-hauppauge not found [ 184.328942][ T5274] Registered IR keymap rc-empty [ 184.335258][ T5274] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 184.353586][ T5274] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 184.393452][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 184.408684][ T938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.444280][ T938] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 184.474489][ T5274] usb 1-1: USB disconnect, device number 23 [ 184.479986][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.507833][ T938] usb 4-1: config 0 descriptor?? [ 184.731391][ T29] audit: type=1400 audit(1727912207.469:527): avc: denied { read } for pid=8889 comm="syz.1.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.799510][ T29] audit: type=1400 audit(1727912207.539:528): avc: denied { ioctl } for pid=8892 comm="syz.2.1579" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 184.826373][ T8894] binder: 8892:8894 ioctl c0306201 20000480 returned -22 [ 184.882333][ T8896] mkiss: ax0: crc mode is auto. [ 184.969609][ T938] ath6kl: Failed to read usb control message: -71 [ 184.989435][ T938] ath6kl: Unable to read the bmi data from the device: -71 [ 185.011154][ T938] ath6kl: Unable to recv target info: -71 [ 185.034132][ T938] ath6kl: Failed to init ath6kl core: -71 [ 185.040245][ T938] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 185.092229][ T938] usb 4-1: USB disconnect, device number 23 [ 185.171705][ T29] audit: type=1400 audit(1727912207.909:529): avc: denied { mount } for pid=8906 comm="syz.0.1586" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 185.249675][ T29] audit: type=1400 audit(1727912207.949:530): avc: denied { mounton } for pid=8906 comm="syz.0.1586" path="/301/file0" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.357791][ T29] audit: type=1400 audit(1727912207.949:531): avc: denied { search } for pid=8906 comm="syz.0.1586" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.407521][ T29] audit: type=1400 audit(1727912208.049:532): avc: denied { unmount } for pid=5220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 185.441470][ T8918] kernel read not supported for file /cpuset.effective_cpus (pid: 8918 comm: syz.2.1591) [ 185.452070][ T8920] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1592'. [ 185.462390][ T8920] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 185.484178][ T29] audit: type=1800 audit(1727912208.229:533): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1591" name="cpuset.effective_cpus" dev="mqueue" ino=20047 res=0 errno=0 [ 185.660213][ T29] audit: type=1326 audit(1727912208.399:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cad7dff9 code=0x7ffc0000 [ 185.708840][ T29] audit: type=1326 audit(1727912208.429:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53cad7dff9 code=0x7ffc0000 [ 185.893999][ T5299] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 186.043954][ T5299] usb 4-1: Using ep0 maxpacket: 8 [ 186.067348][ T5299] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 186.096423][ T5299] usb 4-1: config 0 has no interface number 1 [ 186.102592][ T5299] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.185179][ T5299] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 186.224827][ T5299] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 186.246163][ T5299] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 186.258509][ T5299] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.272608][ T5299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 186.284417][ T5299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.297070][ T5299] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 186.306834][ T5299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.315304][ T5236] Bluetooth: hci0: command 0x0406 tx timeout [ 186.321527][ T5228] Bluetooth: hci3: command 0x0406 tx timeout [ 186.327699][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 186.339446][ T5299] usb 4-1: Product: syz [ 186.350350][ T5299] usb 4-1: Manufacturer: syz [ 186.355330][ T5299] usb 4-1: SerialNumber: syz [ 186.364818][ T5299] usb 4-1: config 0 descriptor?? [ 186.371328][ T8931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.429874][ T5299] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.440567][ T5299] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.449014][ T5299] usb 4-1: invalid MIDI in EP 0 [ 186.507770][ T8962] netlink: 'syz.2.1610': attribute type 10 has an invalid length. [ 186.521663][ T8962] team0: Port device wlan1 added [ 186.525427][ T5299] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 186.570710][ T8961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.817245][ T5299] usb 4-1: USB disconnect, device number 24 [ 187.274696][ T4611] Bluetooth: hci2: command 0x0405 tx timeout [ 188.282229][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 188.282250][ T29] audit: type=1400 audit(1727912211.019:546): avc: denied { bind } for pid=9010 comm="syz.1.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.355154][ T9015] netlink: 4056 bytes leftover after parsing attributes in process `syz.2.1630'. [ 188.364883][ T9015] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.454076][ T5274] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 188.466602][ T9017] @: renamed from vlan0 (while UP) [ 188.631790][ T5274] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 188.639108][ T9026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1637'. [ 188.641095][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.682173][ T5274] usb 5-1: config 0 descriptor?? [ 189.110385][ T9046] gfs2: gfs2 mount does not exist [ 189.126155][ T5274] corsair-psu 0003:1B1C:1C0B.0034: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0b] on usb-dummy_hcd.4-1/input0 [ 189.214194][ T5274] corsair-psu 0003:1B1C:1C0B.0034: unable to initialize device (-38) [ 189.234762][ T5274] corsair-psu 0003:1B1C:1C0B.0034: probe with driver corsair-psu failed with error -38 [ 189.436549][ T5299] usb 5-1: USB disconnect, device number 25 [ 189.834264][ T4611] Bluetooth: hci2: command 0x0405 tx timeout [ 189.855002][ T9070] netlink: 'syz.3.1655': attribute type 3 has an invalid length. [ 189.903264][ T9070] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1655'. [ 190.142416][ T9084] geneve0: invalid flags given to default FDB implementation [ 190.270669][ T9089] netlink: 'syz.4.1665': attribute type 9 has an invalid length. [ 190.289370][ T9089] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1665'. [ 190.364066][ T938] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 190.392370][ T9091] netlink: 'syz.4.1665': attribute type 9 has an invalid length. [ 190.422568][ T9091] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1665'. [ 190.545091][ T938] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 190.560440][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.622278][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.678036][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.705241][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.789733][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.844021][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.875854][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.949493][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.961232][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.979918][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.989958][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 191.002320][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.014628][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.044062][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 191.058252][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.072653][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.088221][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 191.101641][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.133811][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.184088][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 191.205665][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.249727][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.259079][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 191.270518][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.347220][ T938] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 191.356673][ T938] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 191.365172][ T938] usb 2-1: Product: syz [ 191.369890][ T938] usb 2-1: Manufacturer: syz [ 191.374739][ T938] usb 2-1: SerialNumber: syz [ 191.389153][ T938] usb 2-1: config 0 descriptor?? [ 191.403784][ T938] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 191.882323][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 191.902361][ T5308] usb 2-1: USB disconnect, device number 24 [ 191.931466][ T5308] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 192.474307][ T5308] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 192.648686][ T5308] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 192.684170][ T5308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.698848][ T5308] usb 4-1: Product: syz [ 192.721952][ T5308] usb 4-1: Manufacturer: syz [ 192.731100][ T5308] usb 4-1: SerialNumber: syz [ 192.760287][ T5308] usb 4-1: config 0 descriptor?? [ 193.001853][ T29] audit: type=1400 audit(1727912215.739:547): avc: denied { append } for pid=9165 comm="syz.0.1696" name="rtc0" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 193.044342][ T29] audit: type=1400 audit(1727912215.739:548): avc: denied { append } for pid=9168 comm="syz.2.1698" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.554401][ T5308] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 193.570655][ T938] usb 4-1: USB disconnect, device number 25 [ 193.668930][ T29] audit: type=1400 audit(1727912216.409:549): avc: denied { read } for pid=9190 comm="syz.1.1707" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.700332][ T29] audit: type=1400 audit(1727912216.409:550): avc: denied { open } for pid=9190 comm="syz.1.1707" path="/350/file0" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.727056][ T5308] usb 3-1: Using ep0 maxpacket: 8 [ 193.732553][ T29] audit: type=1400 audit(1727912216.469:551): avc: denied { module_request } for pid=9192 comm="syz.4.1708" kmod="net-pf-10-proto-0-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 193.763191][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.779941][ T5308] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.792647][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.830216][ T5308] usb 3-1: config 0 descriptor?? [ 193.846884][ T9198] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1709'. [ 194.065493][ T5308] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 194.281321][ T5273] usb 3-1: USB disconnect, device number 22 [ 194.297468][ T5273] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 194.391404][ T29] audit: type=1400 audit(1727912217.129:552): avc: denied { wake_alarm } for pid=9216 comm="syz.4.1718" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.485522][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.491865][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.578956][ T9226] SELinux: Context Ü is not valid (left unmapped). [ 194.614077][ T5299] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 194.679280][ T9231] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 194.685871][ T9231] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.697022][ T9231] vhci_hcd vhci_hcd.0: Device attached [ 194.699049][ T938] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 194.714100][ T9231] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 194.720663][ T9231] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 194.736198][ T9231] vhci_hcd vhci_hcd.0: Device attached [ 194.747832][ T9235] vhci_hcd: connection closed [ 194.748798][ T11] vhci_hcd: stop threads [ 194.759051][ T11] vhci_hcd: release socket [ 194.763488][ T11] vhci_hcd: disconnect device [ 194.769956][ T9233] vhci_hcd: connection closed [ 194.772454][ T11] vhci_hcd: stop threads [ 194.781865][ T5299] usb 1-1: Using ep0 maxpacket: 32 [ 194.791861][ T11] vhci_hcd: release socket [ 194.801491][ T11] vhci_hcd: disconnect device [ 194.807755][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.824052][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.841159][ T5299] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 194.853047][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.865542][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 194.869079][ T5299] usb 1-1: config 0 descriptor?? [ 194.886387][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.905905][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.917161][ T938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.931092][ T938] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.940948][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.965659][ T938] usb 4-1: config 0 descriptor?? [ 195.311716][ T5299] elecom 0003:056E:00E6.0035: item fetching failed at offset 2/5 [ 195.331774][ T5299] elecom 0003:056E:00E6.0035: probe with driver elecom failed with error -22 [ 195.344079][ T5319] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 195.395085][ T938] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0036/input/input20 [ 195.501712][ T938] input input20: event field not found [ 195.514857][ T5319] usb 3-1: Using ep0 maxpacket: 16 [ 195.531632][ T5319] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 195.564909][ T5319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.586158][ T5274] usb 1-1: USB disconnect, device number 24 [ 195.593307][ T938] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 195.614274][ T5319] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 195.629711][ T5319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.651924][ T938] usb 4-1: USB disconnect, device number 26 [ 195.663604][ T5319] usb 3-1: Product: syz [ 195.677661][ T5319] usb 3-1: Manufacturer: syz [ 195.701963][ T5319] usb 3-1: SerialNumber: syz [ 195.710332][ T938] input input20: event field not found [ 195.737893][ T5319] usb 3-1: config 0 descriptor?? [ 195.787356][ T5319] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 195.817840][ T5319] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 196.084709][ T5274] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 196.254210][ T5274] usb 2-1: Using ep0 maxpacket: 8 [ 196.273054][ T5274] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 196.314615][ T5274] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 196.348660][ T5274] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.370156][ T5319] em28xx 3-1:0.0: chip ID is em28178 [ 196.379864][ T5274] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.410346][ T5274] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.442706][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.534091][ T5319] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 196.618331][ T938] usb 3-1: USB disconnect, device number 23 [ 196.628036][ T938] em28xx 3-1:0.0: Disconnecting em28xx [ 196.658515][ T938] em28xx 3-1:0.0: Freeing device [ 196.681508][ T5274] usb 2-1: GET_CAPABILITIES returned 0 [ 196.688642][ T5274] usbtmc 2-1:16.0: can't read capabilities [ 196.705848][ T5319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.732939][ T5319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.754193][ T5319] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 196.763289][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.785939][ T5319] usb 1-1: config 0 descriptor?? [ 196.834019][ T5273] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 196.916079][ T5274] usb 2-1: USB disconnect, device number 25 [ 197.004788][ T5273] usb 4-1: Using ep0 maxpacket: 8 [ 197.016111][ T5273] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.024716][ T5273] usb 4-1: config 0 has no interface number 0 [ 197.030929][ T5273] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.044806][ T5273] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.054687][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.072875][ T5273] usb 4-1: config 0 descriptor?? [ 197.088156][ T5273] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 197.268679][ T5319] ryos 0003:1E7D:3138.0037: unknown main item tag 0x0 [ 197.284611][ T5319] ryos 0003:1E7D:3138.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 197.334615][ T5273] usb 4-1: USB disconnect, device number 27 [ 197.340617][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 197.363420][ T5273] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 197.460892][ T9296] netlink: 'syz.2.1753': attribute type 10 has an invalid length. [ 197.471549][ T5299] usb 1-1: USB disconnect, device number 25 [ 197.489052][ T9296] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1753'. [ 197.535411][ T9296] team0: entered promiscuous mode [ 197.540510][ T9296] team_slave_0: entered promiscuous mode [ 197.564279][ T9296] team_slave_1: entered promiscuous mode [ 197.578326][ T9296] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 197.590023][ T9296] bridge0: port 3(team0) entered blocking state [ 197.597240][ T9296] bridge0: port 3(team0) entered disabled state [ 197.603762][ T9296] team0: entered allmulticast mode [ 197.609860][ T9296] team_slave_0: entered allmulticast mode [ 197.616967][ T9296] team_slave_1: entered allmulticast mode [ 197.622925][ T9296] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 197.632859][ T9296] bridge0: port 3(team0) entered blocking state [ 197.639858][ T9296] bridge0: port 3(team0) entered forwarding state [ 197.873417][ T9311] nbd: device at index 2 is going down [ 198.044536][ T29] audit: type=1400 audit(1727912220.779:553): avc: denied { create } for pid=9315 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 198.379875][ T9334] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1769'. [ 198.413660][ T9334] openvswitch: netlink: Actions may not be safe on all matching packets [ 199.115914][ T9366] binder: 9365:9366 ioctl c0306201 20000480 returned -22 [ 199.498044][ T9385] sp0: Synchronizing with TNC [ 202.071162][ T29] audit: type=1400 audit(1727912224.809:554): avc: denied { ioctl } for pid=9416 comm="syz.4.1805" path="socket:[22152]" dev="sockfs" ino=22152 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.262806][ T29] audit: type=1400 audit(1727912224.859:555): avc: denied { write } for pid=9416 comm="syz.4.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.870890][ T5299] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 203.045058][ T5299] usb 3-1: Using ep0 maxpacket: 8 [ 203.062368][ T5299] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 203.072419][ T5299] usb 3-1: config 179 has no interface number 0 [ 203.101247][ T5299] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 203.136883][ T5299] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 203.173641][ T5299] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 203.213951][ T5299] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 203.262399][ T5299] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 203.301168][ T5299] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 203.329299][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.357713][ T9427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.585140][ T5299] kernel write not supported for file /amidi2 (pid: 5299 comm: kworker/1:7) [ 203.843378][ T5299] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21 [ 204.143659][ T5273] usb 3-1: USB disconnect, device number 24 [ 204.143732][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 204.143799][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 204.285752][ T5273] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 204.325243][ T9446] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1817'. [ 204.383911][ C0] sched: DL replenish lagged too much [ 204.786990][ T5299] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 204.954186][ T5299] usb 1-1: Using ep0 maxpacket: 16 [ 204.977657][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.008451][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.032804][ T9454] can0: slcan on ttyS3. [ 205.070379][ T5299] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 205.107158][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.161805][ T5299] usb 1-1: config 0 descriptor?? [ 205.277517][ T29] audit: type=1400 audit(1727912228.019:556): avc: denied { read write } for pid=9456 comm="syz.4.1822" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.434678][ T29] audit: type=1400 audit(1727912228.049:557): avc: denied { open } for pid=9456 comm="syz.4.1822" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.586847][ T29] audit: type=1400 audit(1727912228.079:558): avc: denied { append } for pid=9456 comm="syz.4.1822" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.649122][ T5299] corsair 0003:1B1C:1B02.0038: unknown main item tag 0x0 [ 205.689322][ T5299] corsair 0003:1B1C:1B02.0038: unknown main item tag 0x0 [ 205.739606][ T5299] corsair 0003:1B1C:1B02.0038: unknown main item tag 0x0 [ 205.758322][ T29] audit: type=1400 audit(1727912228.449:559): avc: denied { read } for pid=9460 comm="syz.1.1823" path="socket:[22290]" dev="sockfs" ino=22290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.823495][ T5299] corsair 0003:1B1C:1B02.0038: unknown main item tag 0x0 [ 205.850693][ T5299] corsair 0003:1B1C:1B02.0038: unknown main item tag 0x0 [ 205.914171][ T5299] corsair 0003:1B1C:1B02.0038: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 206.087665][ T5299] corsair 0003:1B1C:1B02.0038: Read invalid backlight brightness: 5c. [ 206.393828][ T5299] usb 1-1: USB disconnect, device number 26 [ 206.751225][ T9454] can0 (unregistered): slcan off ttyS3. [ 207.078316][ T29] audit: type=1400 audit(1862129957.824:560): avc: denied { getopt } for pid=9490 comm="syz.4.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.443201][ T29] audit: type=1400 audit(1862129958.184:561): avc: denied { write } for pid=9496 comm="syz.4.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 207.573927][ T29] audit: type=1400 audit(1862129958.214:562): avc: denied { nlmsg_read } for pid=9496 comm="syz.4.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 208.155875][ T9517] netlink: 'syz.4.1839': attribute type 3 has an invalid length. [ 208.395884][ T29] audit: type=1400 audit(1862129959.134:563): avc: denied { read } for pid=9521 comm="syz.2.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.758748][ T29] audit: type=1326 audit(1862129959.504:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b597dff9 code=0x7ffc0000 [ 208.969347][ T29] audit: type=1326 audit(1862129959.504:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b597dff9 code=0x7ffc0000 [ 209.148217][ T29] audit: type=1326 audit(1862129959.564:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd8b597dff9 code=0x7ffc0000 [ 209.303288][ T29] audit: type=1326 audit(1862129959.564:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b597dff9 code=0x7ffc0000 [ 209.452698][ T29] audit: type=1326 audit(1862129959.564:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b597dff9 code=0x7ffc0000 [ 209.599560][ T29] audit: type=1326 audit(1862129959.564:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8b597dff9 code=0x7ffc0000 [ 209.815945][ T5273] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 210.374801][ T938] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 210.554082][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 210.570599][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.617395][ T9559] netlink: 'syz.1.1858': attribute type 5 has an invalid length. [ 210.634222][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.675303][ T938] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 210.735902][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.835384][ T938] usb 4-1: config 0 descriptor?? [ 211.170317][ T9568] Process accounting resumed [ 211.284177][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 211.329989][ T9550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.377909][ T9550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.460988][ T8] usb 2-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 211.509819][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 211.571997][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.632752][ T8] usb 2-1: config 0 descriptor?? [ 211.656108][ T938] usb 4-1: string descriptor 0 read error: -71 [ 211.733578][ T938] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 211.745130][ T9574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.775891][ T938] letsketch 0003:6161:4D15.0039: probe with driver letsketch failed with error -32 [ 211.834516][ T938] usb 4-1: USB disconnect, device number 28 [ 211.988404][ T5319] usb 2-1: USB disconnect, device number 26 [ 212.434545][ T938] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 212.635769][ T938] usb 5-1: Using ep0 maxpacket: 32 [ 212.679081][ T938] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 212.724072][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.784807][ T938] usb 5-1: Product: syz [ 212.819642][ T938] usb 5-1: Manufacturer: syz [ 212.874368][ T938] usb 5-1: SerialNumber: syz [ 212.909261][ T938] usb 5-1: config 0 descriptor?? [ 212.960815][ T938] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG [ 213.414323][ T938] usb 5-1: USB disconnect, device number 26 [ 213.929012][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 213.929032][ T29] audit: type=1326 audit(1862129964.674:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 214.114035][ T29] audit: type=1326 audit(1862129964.724:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 214.296454][ T29] audit: type=1326 audit(1862129964.724:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 214.471685][ T29] audit: type=1326 audit(1862129964.724:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 214.714155][ T29] audit: type=1326 audit(1862129964.724:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 216.632067][ T9669] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 216.695606][ T8] IPVS: starting estimator thread 0... [ 216.854284][ T9673] IPVS: using max 16 ests per chain, 38400 per kthread [ 217.003556][ T9679] CUSE: info not properly terminated [ 217.984163][ T938] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 218.123077][ T9705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1925'. [ 218.174053][ T938] usb 5-1: Using ep0 maxpacket: 32 [ 218.192756][ T938] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 218.252958][ T938] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 218.284704][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.333719][ T938] usb 5-1: Product: syz [ 218.352592][ T938] usb 5-1: Manufacturer: syz [ 218.374056][ T938] usb 5-1: SerialNumber: syz [ 218.409043][ T938] usb 5-1: config 0 descriptor?? [ 218.427831][ T9697] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 218.441417][ T938] hub 5-1:0.0: bad descriptor, ignoring hub [ 218.466692][ T938] hub 5-1:0.0: probe with driver hub failed with error -5 [ 218.566719][ T938] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 219.041951][ T5319] usb 5-1: USB disconnect, device number 27 [ 219.048040][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 219.252846][ T938] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 219.474029][ T938] usb 2-1: Using ep0 maxpacket: 8 [ 219.511135][ T938] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.549348][ T938] usb 2-1: config 0 has no interface number 0 [ 219.584504][ T938] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.654026][ T938] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 219.703833][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.755176][ T938] usb 2-1: config 0 descriptor?? [ 219.776761][ T938] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 220.141655][ T5319] usb 2-1: USB disconnect, device number 27 [ 220.190364][ T5319] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 220.204109][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1933'. [ 220.356574][ T29] audit: type=1400 audit(1862129971.104:581): avc: denied { create } for pid=9724 comm="syz.4.1934" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 220.728933][ T9731] tap0: tun_chr_ioctl cmd 1074025672 [ 220.767746][ T9731] tap0: ignored: set checksum enabled [ 221.448735][ T9750] hugetlbfs: syz.2.1945 (9750): Using mlock ulimits for SHM_HUGETLB is obsolete [ 226.340215][ T9772] vlan2: entered promiscuous mode [ 226.386724][ T9772] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 227.417483][ T29] audit: type=1326 audit(1862129978.164:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 227.588136][ T29] audit: type=1326 audit(1862129978.164:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 227.878989][ T29] audit: type=1326 audit(1862129978.224:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 228.103070][ T29] audit: type=1326 audit(1862129978.234:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 228.322718][ T29] audit: type=1326 audit(1862129978.234:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 228.430142][ T29] audit: type=1326 audit(1862129978.244:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 228.592646][ T29] audit: type=1326 audit(1862129978.244:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 228.744014][ T29] audit: type=1326 audit(1862129978.244:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1b37dff9 code=0x7ffc0000 [ 228.880334][ T29] audit: type=1400 audit(1862129978.574:590): avc: denied { execheap } for pid=9800 comm="syz.4.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 229.014096][ T29] audit: type=1400 audit(1862129979.684:591): avc: denied { write } for pid=9816 comm="syz.3.1972" path="socket:[23962]" dev="sockfs" ino=23962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 229.434070][ T5308] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 229.611851][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.663184][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.717474][ T5308] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 229.769681][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.835377][ T5308] usb 3-1: config 0 descriptor?? [ 229.923992][ T938] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 229.968911][ T9832] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1980'. [ 230.137753][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 230.188057][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.262689][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.298238][ T9821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.337461][ T938] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 230.377294][ T9821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.416521][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.446966][ T5308] sony 0003:054C:024B.003A: unknown main item tag 0x0 [ 230.492208][ T938] usb 1-1: config 0 descriptor?? [ 230.524067][ T5308] sony 0003:054C:024B.003A: unknown main item tag 0x0 [ 230.584094][ T5308] sony 0003:054C:024B.003A: unexpected long global item [ 230.644724][ T5308] sony 0003:054C:024B.003A: parse failed [ 230.650528][ T5308] sony 0003:054C:024B.003A: probe with driver sony failed with error -22 [ 230.828379][ T5308] usb 3-1: USB disconnect, device number 26 [ 231.027375][ T938] logitech 0003:046D:CA03.003B: item fetching failed at offset 0/5 [ 231.069883][ T938] logitech 0003:046D:CA03.003B: parse failed [ 231.089727][ T938] logitech 0003:046D:CA03.003B: probe with driver logitech failed with error -22 [ 231.318105][ T938] usb 1-1: USB disconnect, device number 27 [ 232.030511][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1988'. [ 232.143659][ T9859] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1991'. [ 232.215317][ T9859] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 232.471224][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 233.313241][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'. [ 234.624009][ T29] audit: type=1400 audit(1862129985.364:592): avc: denied { attach_queue } for pid=9910 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 235.273525][ T29] audit: type=1400 audit(1862129986.014:593): avc: denied { read write } for pid=9924 comm="syz.1.2022" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 235.404434][ T29] audit: type=1400 audit(1862129986.044:594): avc: denied { open } for pid=9924 comm="syz.1.2022" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 235.853392][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 236.994743][ T5274] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 237.204151][ T5274] usb 1-1: Using ep0 maxpacket: 32 [ 237.228340][ T5274] usb 1-1: config 1 interface 0 has no altsetting 0 [ 237.250597][ T5274] usb 1-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.40 [ 237.284136][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.333151][ T5274] usb 1-1: Product: syz [ 237.353557][ T5274] usb 1-1: Manufacturer: syz [ 237.362124][ T45] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 237.392452][ T5274] usb 1-1: SerialNumber: syz [ 342.433828][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 342.440928][ C1] rcu: 0-...!: (9 ticks this GP) idle=8724/1/0x4000000000000000 softirq=31679/31688 fqs=6 [ 342.452233][ C1] rcu: (detected by 1, t=10506 jiffies, g=31341, q=9643 ncpus=2) [ 342.460074][ C1] Sending NMI from CPU 1 to CPUs 0: [ 342.460112][ C0] NMI backtrace for cpu 0 [ 342.460137][ C0] CPU: 0 UID: 0 PID: 938 Comm: kworker/0:2 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 342.460166][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.460189][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 342.460224][ C0] RIP: 0010:find_held_lock+0xea/0x110 [ 342.460256][ C0] Code: 00 fc ff df 4c 89 f2 48 c1 ea 03 0f b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 15 45 89 3e 48 89 d8 5b 5d 41 5c <41> 5d 41 5e 41 5f c3 cc cc cc cc 4c 89 f7 e8 f3 4e 85 00 eb e1 e8 [ 342.460278][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00000097 [ 342.460297][ C0] RAX: ffff888026114780 RBX: 1ffff92000000f22 RCX: ffffc90000007950 [ 342.460313][ C0] RDX: 0000000000000004 RSI: ffff88805e8f3300 RDI: ffff888026114780 [ 342.460329][ C0] RBP: 0000000000000003 R08: 0000000000000000 R09: fffffbfff20be559 [ 342.460345][ C0] R10: ffffffff905f2acf R11: 0000000000000000 R12: ffff88805e8f3300 [ 342.460360][ C0] R13: ffff88805e8f3300 R14: ffffc90000007950 R15: 0000000000000004 [ 342.460376][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 342.460400][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.460417][ C0] CR2: 0000001b320faff8 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 342.460432][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 342.460447][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 342.460462][ C0] Call Trace: [ 342.460471][ C0] [ 342.460486][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 342.460515][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 342.460548][ C0] ? nmi_handle+0x1a9/0x5c0 [ 342.460574][ C0] ? find_held_lock+0xea/0x110 [ 342.460602][ C0] ? default_do_nmi+0x6a/0x160 [ 342.460636][ C0] ? exc_nmi+0x170/0x1e0 [ 342.460656][ C0] ? end_repeat_nmi+0xf/0x53 [ 342.460688][ C0] ? find_held_lock+0xea/0x110 [ 342.460716][ C0] ? find_held_lock+0xea/0x110 [ 342.460745][ C0] ? find_held_lock+0xea/0x110 [ 342.460772][ C0] [ 342.460779][ C0] [ 342.460787][ C0] lock_release+0x227/0x6f0 [ 342.460809][ C0] ? advance_sched+0x611/0xc60 [ 342.460843][ C0] ? __pfx_lock_release+0x10/0x10 [ 342.460865][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 342.460891][ C0] ? taprio_set_budgets+0x1e2/0x310 [ 342.460924][ C0] _raw_spin_unlock+0x16/0x50 [ 342.460948][ C0] advance_sched+0x611/0xc60 [ 342.460987][ C0] ? __pfx_advance_sched+0x10/0x10 [ 342.461020][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 342.461049][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 342.461074][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 342.461109][ C0] hrtimer_interrupt+0x31b/0x800 [ 342.461140][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 342.461167][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 342.461199][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.461227][ C0] RIP: 0010:do_raw_spin_lock+0xae/0x2c0 [ 342.461254][ C0] Code: 01 00 00 8b 43 04 3d ad 4e ad de 0f 85 81 01 00 00 4c 8d 6b 10 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 <0f> 85 c5 01 00 00 48 8b 53 10 65 48 8b 05 60 bc 98 7e 48 39 c2 0f [ 342.461276][ C0] RSP: 0018:ffffc90000007d18 EFLAGS: 00000246 [ 342.461294][ C0] RAX: dffffc0000000000 RBX: ffff8880b86409c0 RCX: 0000000000000001 [ 342.461310][ C0] RDX: 1ffff110170c813a RSI: ffffffff8b6cd340 RDI: ffff8880b86409c4 [ 342.461326][ C0] RBP: 1ffff92000000fa4 R08: 0000000000000000 R09: fffffbfff2dc49a1 [ 342.461341][ C0] R10: ffffffff96e24d0f R11: 0000000000000000 R12: ffffffff89800950 [ 342.461357][ C0] R13: ffff8880b86409d0 R14: ffff8880b86409c0 R15: ffff88807aadd238 [ 342.461374][ C0] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 342.461408][ C0] ? ipv4_dst_destroy+0x102/0x290 [ 342.461434][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 342.461461][ C0] ? lock_acquire+0x2f/0xb0 [ 342.461481][ C0] ? ipv4_dst_destroy+0x102/0x290 [ 342.461509][ C0] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 342.461536][ C0] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 342.461563][ C0] ipv4_dst_destroy+0x102/0x290 [ 342.461590][ C0] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 342.461618][ C0] dst_destroy+0xf2/0x820 [ 342.461646][ C0] ? rcu_core+0x79b/0x14d0 [ 342.461671][ C0] rcu_core+0x79d/0x14d0 [ 342.461699][ C0] ? __pfx_rcu_core+0x10/0x10 [ 342.461730][ C0] handle_softirqs+0x213/0x8f0 [ 342.461759][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 342.461786][ C0] ? wg_packet_encrypt_worker+0xa13/0xd60 [ 342.461810][ C0] do_softirq+0xb2/0xf0 [ 342.461835][ C0] [ 342.461842][ C0] [ 342.461850][ C0] __local_bh_enable_ip+0x100/0x120 [ 342.461876][ C0] wg_packet_encrypt_worker+0xa13/0xd60 [ 342.461905][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 342.461933][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 342.461959][ C0] ? lock_acquire+0x2f/0xb0 [ 342.461979][ C0] ? process_one_work+0x921/0x1ba0 [ 342.462004][ C0] process_one_work+0x9c5/0x1ba0 [ 342.462031][ C0] ? __pfx_psi_avgs_work+0x10/0x10 [ 342.462057][ C0] ? __pfx_process_one_work+0x10/0x10 [ 342.462084][ C0] ? assign_work+0x1a0/0x250 [ 342.462118][ C0] worker_thread+0x6c8/0xf00 [ 342.462146][ C0] ? __pfx_worker_thread+0x10/0x10 [ 342.462168][ C0] kthread+0x2c1/0x3a0 [ 342.462240][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.462263][ C0] ? __pfx_kthread+0x10/0x10 [ 342.462291][ C0] ret_from_fork+0x45/0x80 [ 342.462311][ C0] ? __pfx_kthread+0x10/0x10 [ 342.462338][ C0] ret_from_fork_asm+0x1a/0x30 [ 342.462376][ C0] [ 342.463109][ C1] rcu: rcu_preempt kthread starved for 10490 jiffies! g31341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 343.011857][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 343.021838][ C1] rcu: RCU grace-period kthread stack dump: [ 343.027731][ C1] task:rcu_preempt state:R running task stack:27504 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 343.039514][ C1] Call Trace: [ 343.042805][ C1] [ 343.045754][ C1] __schedule+0xef5/0x5750 [ 343.050284][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 343.055597][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 343.060998][ C1] ? __pfx___schedule+0x10/0x10 [ 343.065869][ C1] ? schedule+0x298/0x350 [ 343.070217][ C1] ? __pfx_lock_release+0x10/0x10 [ 343.075258][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 343.080485][ C1] ? lock_acquire+0x2f/0xb0 [ 343.085003][ C1] ? schedule+0x1fd/0x350 [ 343.089354][ C1] schedule+0xe7/0x350 [ 343.093443][ C1] schedule_timeout+0x136/0x2a0 [ 343.098398][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 343.103799][ C1] ? __pfx_process_timeout+0x10/0x10 [ 343.109113][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 343.114972][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 343.120480][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 343.125278][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 343.130585][ C1] ? rcu_gp_init+0xc82/0x1630 [ 343.135286][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 343.140512][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 343.146349][ C1] rcu_gp_kthread+0x271/0x380 [ 343.151048][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 343.156279][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 343.161542][ C1] ? __kthread_parkme+0x148/0x220 [ 343.166603][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 343.171828][ C1] kthread+0x2c1/0x3a0 [ 343.175922][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.181164][ C1] ? __pfx_kthread+0x10/0x10 [ 343.185792][ C1] ret_from_fork+0x45/0x80 [ 343.190228][ C1] ? __pfx_kthread+0x10/0x10 [ 343.194843][ C1] ret_from_fork_asm+0x1a/0x30 [ 343.199654][ C1] [ 343.202686][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 343.209016][ C1] CPU: 1 UID: 0 PID: 1105 Comm: kworker/u8:5 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 343.219880][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.229948][ C1] Workqueue: events_unbound toggle_allocation_gate [ 343.236493][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 343.243201][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 20 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a4 0c 00 00 8b 43 08 31 [ 343.262939][ C1] RSP: 0018:ffffc900042a7998 EFLAGS: 00000293 [ 343.269034][ C1] RAX: 0000000000000000 RBX: ffff8880b8646b80 RCX: ffffffff8181686c [ 343.277028][ C1] RDX: ffff8880276e9e00 RSI: ffffffff81816846 RDI: 0000000000000005 [ 343.285013][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 343.292996][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170c8d71 [ 343.300985][ C1] R13: 0000000000000001 R14: ffff8880b8646b88 R15: ffff8880b8740100 [ 343.308969][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 343.317918][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.324523][ C1] CR2: 00007eff1c0656c0 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 343.332510][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.340496][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.348496][ C1] Call Trace: [ 343.351887][ C1] [ 343.354747][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 343.361117][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 343.366369][ C1] ? rcu_sched_clock_irq+0x23d7/0x32a0 [ 343.371871][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 343.377529][ C1] ? __asan_memcpy+0x3c/0x60 [ 343.382149][ C1] ? __asan_memcpy+0x3c/0x60 [ 343.386779][ C1] ? update_process_times+0x178/0x220 [ 343.392169][ C1] ? __pfx_update_process_times+0x10/0x10 [ 343.397906][ C1] ? update_wall_time+0x1c/0x40 [ 343.402786][ C1] ? tick_nohz_handler+0x376/0x530 [ 343.407942][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 343.413421][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 343.418830][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 343.424600][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 343.430713][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 343.435871][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 343.442056][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 343.447890][ C1] [ 343.450831][ C1] [ 343.453778][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.459960][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 343.466045][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 343.472141][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 343.478231][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 343.484318][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 343.489373][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 343.494418][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 343.499551][ C1] text_poke_bp_batch+0x22b/0x760 [ 343.504602][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 343.510783][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 343.516348][ C1] ? __jump_label_patch+0x1db/0x400 [ 343.521574][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 343.527845][ C1] text_poke_finish+0x30/0x40 [ 343.532544][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 343.538549][ C1] jump_label_update+0x1d7/0x400 [ 343.543507][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 343.549416][ C1] static_key_enable+0x1a/0x20 [ 343.554223][ C1] toggle_allocation_gate+0xfc/0x260 [ 343.559622][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 343.565534][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 343.570756][ C1] ? process_one_work+0x921/0x1ba0 [ 343.575885][ C1] ? lock_acquire+0x2f/0xb0 [ 343.580404][ C1] ? process_one_work+0x921/0x1ba0 [ 343.585622][ C1] process_one_work+0x9c5/0x1ba0 [ 343.590596][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 343.595988][ C1] ? __pfx_process_one_work+0x10/0x10 [ 343.601383][ C1] ? assign_work+0x1a0/0x250 [ 343.606000][ C1] worker_thread+0x6c8/0xf00 [ 343.610615][ C1] ? __kthread_parkme+0x148/0x220 [ 343.615669][ C1] ? __pfx_worker_thread+0x10/0x10 [ 343.620798][ C1] kthread+0x2c1/0x3a0 [ 343.624889][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.630123][ C1] ? __pfx_kthread+0x10/0x10 [ 343.634737][ C1] ret_from_fork+0x45/0x80 [ 343.639168][ C1] ? __pfx_kthread+0x10/0x10 [ 343.643780][ C1] ret_from_fork_asm+0x1a/0x30 [ 343.648589][ C1]