last executing test programs: 2.654454173s ago: executing program 4 (id=2005): r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r1, 0x1) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.466588633s ago: executing program 4 (id=2008): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1000005}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) write(r0, &(0x7f0000000000)="110000001a005f0214f9f4070009040081", 0x11) 2.417335074s ago: executing program 4 (id=2010): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.303490867s ago: executing program 4 (id=2013): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 2.259668525s ago: executing program 4 (id=2014): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000480)=""/198, 0xc6}, {0x0}, {&(0x7f00000005c0)=""/219, 0xdb}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/222, 0xde}], 0x5, 0x2000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) close(r0) 2.066052271s ago: executing program 4 (id=2019): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.941884068s ago: executing program 0 (id=2021): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 1.779915568s ago: executing program 1 (id=2024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 1.73054298s ago: executing program 1 (id=2025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x1000, 0xffffffff, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x701, 0x70bd2a, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x10004891}, 0x10) 1.620812502s ago: executing program 1 (id=2027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x9) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x5, "490e79"}]}}}}}}}}, 0x0) 1.516121599s ago: executing program 3 (id=2030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.507860529s ago: executing program 1 (id=2031): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000880)={0x1, 0x400, 0x0, 0x80000000000000b, 0xfffffffffffffff7, 0x4, 0x6, 0x6, 0xffffffffeffffff9, 0x4, 0xfffffffe, 0x1}) 1.408696153s ago: executing program 0 (id=2032): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="a132729475da", 0x6}], 0x1}}], 0x1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/211, 0xd3, 0x0, 0x0}, &(0x7f0000000400)=0x40) 1.407754703s ago: executing program 3 (id=2033): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x1005) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 1.360130054s ago: executing program 1 (id=2034): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@assoc={0x18, 0x117, 0x4, 0x6}, @iv={0xb0, 0x117, 0x2, 0x95, "15303a9441163d96b19f848f16eceda6d599fb03d60f4488233fb954886790bf9d27884a77b7a0ad1b234c54bc45d135ce75b13bf225f9a99b5fbbc1e2ee6cfc6fee170e4ab9533cece17ba19ddc632fe2af0d81cbd4417ac385c636d6fe5a862d3344fa1bea10b63bd338058df110bcadb942b33f01656451faef811861156b78c1670161110188ec19ce88be4a088791040ec5ac"}], 0xc8, 0x100040c0}], 0x1, 0x20040000) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x60, 0x4004000}], 0x1, 0x8001) 1.344984978s ago: executing program 0 (id=2035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba42000f01c966ef0f29902cbb0000f4666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x3f}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.284295416s ago: executing program 1 (id=2037): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x1, "ba"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.283562843s ago: executing program 3 (id=2038): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 1.16004989s ago: executing program 3 (id=2039): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/44, 0x10b8c}], 0x1}}], 0x1, 0x2001, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) 1.064669313s ago: executing program 3 (id=2042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 1.014872665s ago: executing program 0 (id=2043): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x8, @val=@iter={0x0}}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000640)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) 977.596286ms ago: executing program 3 (id=2045): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, 0x0) 712.157782ms ago: executing program 0 (id=2048): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1}, 0x141) 612.747116ms ago: executing program 0 (id=2049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000010c0)=ANY=[@ANYBLOB="0100000000000000074d564b"]) 272.019911ms ago: executing program 2 (id=2052): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c0000000000000009bad88f", 0x6}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000f80)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3a) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) 240.163876ms ago: executing program 2 (id=2053): unshare(0x2c0b0300) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x880, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) finit_module(r0, 0x0, 0x3) 195.236526ms ago: executing program 2 (id=2054): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[{0x10, 0x84, 0x10000}], 0x10}}], 0x1, 0x400c0) 124.203767ms ago: executing program 2 (id=2055): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) accept4(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80, 0x80000) 81.172166ms ago: executing program 2 (id=2056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000100000000000000adb3000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400002bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r1}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 0s ago: executing program 2 (id=2057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="080000000400000004000000a4"], 0x48) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r2}, 0x20) kernel console output (not intermixed with test programs): or -71 req 04 val 1500 [ 118.446850][ T5873] pwc: recv_control_msg error -71 req 02 val 2500 [ 118.453773][ T5873] pwc: recv_control_msg error -71 req 02 val 2400 [ 118.461009][ T5873] pwc: recv_control_msg error -71 req 02 val 2600 [ 118.467655][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 118.474524][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 118.481375][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 118.488079][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 118.497135][ T5873] pwc: Registered as video103. [ 118.503059][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 118.510588][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 118.517157][ T5873] usb 3-1: USB disconnect, device number 15 [ 118.530701][ T5950] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 118.542816][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.553189][ T5950] usb 4-1: Product: syz [ 118.557368][ T5950] usb 4-1: Manufacturer: syz [ 118.562337][ T5950] usb 4-1: SerialNumber: syz [ 118.571027][ T5950] usb 4-1: config 0 descriptor?? [ 118.589058][ T5950] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 118.891315][ T7897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.898297][ T30] audit: type=1400 audit(1745454841.105:621): avc: denied { watch_sb } for pid=7898 comm="syz.1.834" path="/153" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.969426][ T30] audit: type=1400 audit(1745454841.175:622): avc: denied { read append } for pid=7901 comm="syz.4.835" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 119.014964][ T30] audit: type=1400 audit(1745454841.175:623): avc: denied { open } for pid=7901 comm="syz.4.835" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 119.047049][ T7897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.159611][ T7897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.248836][ T7897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.340007][ T5873] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 119.374129][ T7897] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.397710][ T7897] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.446313][ T7897] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.475060][ T7897] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.504268][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 119.518024][ T5873] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 119.541164][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.576134][ T7930] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.578422][ T5873] usb 2-1: config 0 descriptor?? [ 119.597071][ T7910] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 119.616243][ T5950] gspca_stk1135: reg_w 0x7 err -71 [ 119.624085][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 119.638883][ T5950] gspca_stk1135: Sensor write failed [ 119.648707][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 119.661554][ T5950] gspca_stk1135: Sensor write failed [ 119.666871][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 119.676995][ T5950] gspca_stk1135: Sensor read failed [ 119.682927][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 119.689356][ T5950] gspca_stk1135: Sensor read failed [ 119.698850][ T5950] gspca_stk1135: Detected sensor type unknown (0x0) [ 119.706558][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 119.736891][ T5950] gspca_stk1135: Sensor read failed [ 119.742732][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 119.749071][ T5950] gspca_stk1135: Sensor read failed [ 119.755576][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 119.762272][ T5950] gspca_stk1135: Sensor write failed [ 119.767578][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 119.774230][ T5950] gspca_stk1135: Sensor write failed [ 119.779575][ T5950] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 119.791343][ T5950] usb 4-1: USB disconnect, device number 14 [ 120.030578][ T5873] elan 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 120.367943][ T30] audit: type=1400 audit(1745454842.575:624): avc: denied { ioctl } for pid=7952 comm="syz.3.858" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 120.596531][ T7966] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 120.604538][ T7966] netlink: 224 bytes leftover after parsing attributes in process `syz.3.863'. [ 120.985137][ T30] audit: type=1400 audit(1745454843.195:625): avc: denied { mount } for pid=7984 comm="syz.4.871" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 121.038848][ T30] audit: type=1400 audit(1745454843.245:626): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 121.253688][ T8003] netlink: 176 bytes leftover after parsing attributes in process `syz.4.880'. [ 121.291890][ T8003] ip6gretap0: entered promiscuous mode [ 121.318772][ T8003] netlink: 176 bytes leftover after parsing attributes in process `syz.4.880'. [ 121.620105][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 121.681469][ T5920] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 121.792307][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 121.818212][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.841929][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.863669][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.876170][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 121.886331][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.900315][ T5920] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 121.909444][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.931104][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.941340][ T24] usb 3-1: config 0 descriptor?? [ 121.960633][ T5920] usb 1-1: config 0 descriptor?? [ 121.969791][ T5920] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 121.991695][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 122.004771][ T5920] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 122.006824][ T5920] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 122.006869][ T5920] usb 1-1: media controller created [ 122.008278][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.046238][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 122.046304][ T5920] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 122.052060][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 122.112364][ T5920] dvb-usb: schedule remote query interval to 150 msecs. [ 122.119376][ T5920] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 122.162390][ T1605] usb 2-1: USB disconnect, device number 11 [ 122.272880][ T5873] dvb-usb: bulk message failed: -22 (1/0) [ 122.278730][ T5873] dvb-usb: error while querying for an remote control event. [ 122.310828][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.319510][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.371420][ T5873] usb 1-1: USB disconnect, device number 16 [ 122.391806][ T24] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 122.404786][ T1605] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 122.432515][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 122.447255][ T5873] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 122.468733][ T8033] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 122.600154][ T1605] usb 2-1: Using ep0 maxpacket: 16 [ 122.608821][ T1605] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 122.629766][ T1605] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 122.640660][ T1605] usb 2-1: Manufacturer: syz [ 122.660868][ T1605] usb 2-1: config 0 descriptor?? [ 122.717620][ T5873] usb 3-1: USB disconnect, device number 16 [ 122.754599][ T30] audit: type=1400 audit(1745454844.965:627): avc: denied { name_connect } for pid=8036 comm="syz.3.896" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 122.876863][ T30] audit: type=1400 audit(1745454845.085:628): avc: denied { setopt } for pid=8038 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 122.880198][ T1605] usb 2-1: Cannot retrieve CPort count: 0 [ 122.940019][ T1605] usb 2-1: Cannot retrieve CPort count: -5 [ 122.946467][ T1605] es2_ap_driver 2-1:0.0: probe with driver es2_ap_driver failed with error -5 [ 122.985141][ T8042] netlink: 'syz.0.898': attribute type 29 has an invalid length. [ 123.017672][ T8042] netlink: 'syz.0.898': attribute type 29 has an invalid length. [ 123.037358][ T8042] netlink: 500 bytes leftover after parsing attributes in process `syz.0.898'. [ 123.228436][ T5873] usb 2-1: USB disconnect, device number 12 [ 123.550306][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 123.577366][ T8063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.703347][ T10] IPVS: starting estimator thread 0... [ 123.703358][ T8065] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 123.810088][ T8071] IPVS: using max 48 ests per chain, 115200 per kthread [ 124.117037][ T8081] capability: warning: `syz.3.913' uses 32-bit capabilities (legacy support in use) [ 124.129981][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 124.169031][ T8084] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 124.314089][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 124.331753][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 124.344546][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 124.355774][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.364111][ T10] usb 3-1: Product: syz [ 124.368320][ T10] usb 3-1: Manufacturer: syz [ 124.394303][ T10] usb 3-1: SerialNumber: syz [ 124.418356][ T10] usb 3-1: config 0 descriptor?? [ 124.433334][ T8073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.463717][ T8073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.535822][ T8107] unknown channel width for channel at 909000KHz? [ 124.729089][ T8073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.749148][ T8073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.990385][ T8129] overlayfs: invalid origin (0000) [ 125.212547][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 125.405966][ T10] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 125.435180][ T10] usb 3-1: USB disconnect, device number 17 [ 125.645867][ T8159] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 125.645867][ T8159] The task syz.1.940 (8159) triggered the difference, watch for misbehavior. [ 125.763886][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 126.037030][ T8181] input: syz0 as /devices/virtual/input/input19 [ 126.130074][ T55] Bluetooth: hci4: command tx timeout [ 126.153497][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 126.310082][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 126.324729][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 126.334123][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.342311][ T24] usb 4-1: Product: syz [ 126.346570][ T24] usb 4-1: Manufacturer: syz [ 126.364937][ T24] usb 4-1: SerialNumber: syz [ 126.390478][ T24] usb 4-1: config 0 descriptor?? [ 126.402167][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 126.456006][ T8195] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 126.473060][ T8195] netlink: 208 bytes leftover after parsing attributes in process `syz.2.960'. [ 126.484893][ T8195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.960'. [ 127.415291][ T24] gspca_sonixj: reg_w1 err -71 [ 127.490497][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 127.510302][ T24] usb 4-1: USB disconnect, device number 15 [ 127.540798][ T30] audit: type=1400 audit(1745454849.755:629): avc: denied { create } for pid=8229 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.259537][ T8262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.322314][ T30] audit: type=1400 audit(1745454850.535:630): avc: denied { mounton } for pid=8265 comm="syz.2.990" path="/proc/458/cgroup" dev="proc" ino=19334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 128.409284][ T30] audit: type=1400 audit(1745454850.615:631): avc: denied { mount } for pid=8268 comm="syz.4.991" name="/" dev="autofs" ino=18078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 128.502320][ T30] audit: type=1400 audit(1745454850.715:632): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 128.522238][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.647673][ T30] audit: type=1400 audit(1745454850.855:633): avc: denied { listen } for pid=8279 comm="syz.1.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.711938][ T30] audit: type=1326 audit(1745454850.855:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bb78e969 code=0x7fc00000 [ 128.830013][ T1605] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 128.840254][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.992007][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 129.001129][ T1605] usb 3-1: Using ep0 maxpacket: 16 [ 129.006810][ T8292] netlink: 'syz.0.1002': attribute type 29 has an invalid length. [ 129.007277][ T10] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 129.034220][ T1605] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 129.039256][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.053982][ T1605] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 129.061318][ T10] usb 5-1: Product: syz [ 129.064423][ T8292] netlink: 'syz.0.1002': attribute type 29 has an invalid length. [ 129.068239][ T10] usb 5-1: Manufacturer: syz [ 129.081030][ T10] usb 5-1: SerialNumber: syz [ 129.086776][ T1605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.097187][ T10] usb 5-1: config 0 descriptor?? [ 129.098178][ T1605] usb 3-1: config 0 descriptor?? [ 129.116395][ T1605] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 129.117591][ T8292] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1002'. [ 129.148169][ T30] audit: type=1400 audit(1745454851.345:635): avc: denied { write } for pid=8293 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 129.171274][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 129.295812][ T8299] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 129.366176][ T5185] bcm5974 3-1:0.0: could not read from device [ 129.392804][ T5185] bcm5974 3-1:0.0: could not read from device [ 129.404079][ T8307] syzkaller1: entered promiscuous mode [ 129.416374][ T1605] bcm5974 3-1:0.0: could not read from device [ 129.423126][ T8307] syzkaller1: entered allmulticast mode [ 129.432930][ T30] audit: type=1400 audit(1745454851.645:636): avc: denied { remount } for pid=8309 comm="syz.0.1010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 129.464472][ T1605] input: failed to attach handler mousedev to device input20, error: -5 [ 129.475740][ T5185] bcm5974 3-1:0.0: could not read from device [ 129.501528][ T5185] bcm5974 3-1:0.0: could not read from device [ 129.515401][ T30] audit: type=1400 audit(1745454851.715:637): avc: denied { create } for pid=8311 comm="syz.1.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 129.540231][ T1605] usb 3-1: USB disconnect, device number 18 [ 129.573829][ T10] gspca_se401: ExtraFeatures: 255 [ 129.578875][ T10] gspca_se401: Too many frame sizes [ 129.609878][ T30] audit: type=1400 audit(1745454851.815:638): avc: denied { write } for pid=8311 comm="syz.1.1011" path="socket:[18211]" dev="sockfs" ino=18211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 129.862533][ T10] usb 5-1: USB disconnect, device number 11 [ 130.538522][ T8351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.550550][ T5873] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 130.715253][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.726365][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.758459][ T5873] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 130.774554][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.793093][ T5873] usb 4-1: config 0 descriptor?? [ 131.240877][ T8337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.258740][ T8337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.292771][ T5873] sony 0003:054C:024B.0014: unexpected long global item [ 131.322853][ T5873] sony 0003:054C:024B.0014: parse failed [ 131.328613][ T5873] sony 0003:054C:024B.0014: probe with driver sony failed with error -22 [ 131.528914][ T1605] usb 4-1: USB disconnect, device number 16 [ 132.374991][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.557013][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 132.557028][ T30] audit: type=1400 audit(1745454854.765:643): avc: denied { create } for pid=8414 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.920834][ T30] audit: type=1400 audit(1745454855.135:644): avc: denied { getopt } for pid=8438 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.972314][ T8443] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 132.983191][ T8443] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 132.995290][ T8443] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 133.002935][ T30] audit: type=1400 audit(1745454855.205:645): avc: denied { firmware_load } for pid=8439 comm="syz.2.1068" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 133.114815][ T8452] syz.0.1072: attempt to access beyond end of device [ 133.114815][ T8452] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 133.132469][ T8452] syz.0.1072: attempt to access beyond end of device [ 133.132469][ T8452] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 133.146353][ T8452] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 133.169018][ T30] audit: type=1400 audit(1745454855.375:646): avc: denied { connect } for pid=8453 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.169769][ T8452] syz.0.1072: attempt to access beyond end of device [ 133.169769][ T8452] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 133.188697][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.221203][ T8452] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 133.235800][ T8452] syz.0.1072: attempt to access beyond end of device [ 133.235800][ T8452] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 133.254399][ T8452] syz.0.1072: attempt to access beyond end of device [ 133.254399][ T8452] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 133.269835][ T8452] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 133.283059][ T8452] syz.0.1072: attempt to access beyond end of device [ 133.283059][ T8452] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 133.297526][ T8452] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 133.309509][ T8452] syz.0.1072: attempt to access beyond end of device [ 133.309509][ T8452] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 133.325833][ T8452] syz.0.1072: attempt to access beyond end of device [ 133.325833][ T8452] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 133.339875][ T8452] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 133.350881][ T8452] syz.0.1072: attempt to access beyond end of device [ 133.350881][ T8452] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 133.364896][ T8452] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 133.377617][ T8452] syz.0.1072: attempt to access beyond end of device [ 133.377617][ T8452] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 133.405792][ T8452] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 133.416931][ T8452] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 133.429334][ T8452] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 133.563468][ T30] audit: type=1400 audit(1745454855.775:647): avc: denied { write } for pid=8461 comm="syz.3.1076" path="socket:[20552]" dev="sockfs" ino=20552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.910145][ T5873] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 134.066436][ T5873] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 134.077301][ T5873] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 134.111309][ T5873] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 134.120596][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.128591][ T5873] usb 1-1: Product: syz [ 134.135012][ T5873] usb 1-1: Manufacturer: syz [ 134.139622][ T5873] usb 1-1: SerialNumber: syz [ 134.160482][ T5873] usb 1-1: config 0 descriptor?? [ 134.167067][ T8464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.174940][ T30] audit: type=1400 audit(1745454856.375:648): avc: denied { read } for pid=8480 comm="syz.3.1086" name="/" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.197476][ T8464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.214629][ T30] audit: type=1400 audit(1745454856.375:649): avc: denied { open } for pid=8480 comm="syz.3.1086" path="/222/file0" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.242306][ T30] audit: type=1400 audit(1745454856.375:650): avc: denied { setattr } for pid=8480 comm="syz.3.1086" name="/" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.267980][ T30] audit: type=1400 audit(1745454856.425:651): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 134.448139][ T8464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.470171][ T8464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.780223][ T30] audit: type=1400 audit(1745454856.985:652): avc: denied { mount } for pid=8511 comm="syz.3.1099" name="/" dev="ocfs2_dlmfs" ino=20645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 134.814807][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'. [ 134.884037][ T5873] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 135.270022][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 135.297502][ T5873] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 135.315841][ T5873] usb 1-1: USB disconnect, device number 17 [ 135.430151][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 135.436743][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.445199][ T10] usb 3-1: config 179 has no interface number 0 [ 135.451576][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.462908][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.474313][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.485589][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 135.497259][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.514779][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.523898][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.534233][ T8531] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 135.758057][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21 [ 135.865899][ T8535] syzkaller1: entered promiscuous mode [ 135.871912][ T8535] syzkaller1: entered allmulticast mode [ 135.953960][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.966130][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.114198][ T5873] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5873 comm: kworker/1:4) [ 136.181618][ T10] usb 3-1: USB disconnect, device number 19 [ 136.187593][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 136.187640][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 136.632899][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.640499][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.765525][ T8569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.781408][ T8569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.844605][ T8569] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.855172][ T8569] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.864393][ T8569] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.874684][ T8569] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.149896][ T8600] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1137'. [ 137.165403][ T8599] input: syz0 as /devices/virtual/input/input22 [ 137.172356][ T8596] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1137'. [ 137.179136][ T8599] input: failed to attach handler leds to device input22, error: -6 [ 137.684254][ T8634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.993286][ T8652] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.004504][ T8652] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 138.577480][ T8697] input: syz0 as /devices/virtual/input/input23 [ 139.020053][ T5876] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 139.175097][ T5876] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 139.184739][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.197070][ T5876] usb 2-1: config 0 descriptor?? [ 139.203903][ T5876] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 139.310599][ T8705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.418889][ T5876] gp8psk: usb in 128 operation failed. [ 139.447384][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 139.447398][ T30] audit: type=1400 audit(1745454861.655:663): avc: denied { listen } for pid=8712 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.516871][ T30] audit: type=1400 audit(1745454861.725:664): avc: denied { create } for pid=8714 comm="syz.0.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 139.640132][ T5876] gp8psk: usb in 146 operation failed. [ 139.645734][ T5876] gp8psk: failed to get FW version [ 139.663152][ T5876] gp8psk: FPGA Version = 245 [ 139.864532][ T5876] gp8psk: usb in 138 operation failed. [ 139.876676][ T5876] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 139.910149][ T5876] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 139.930965][ T5876] usb 2-1: USB disconnect, device number 13 [ 139.994219][ T8736] overlayfs: upper fs does not support file handles, falling back to index=off. [ 140.006906][ T8736] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 140.138756][ T8747] tun0: tun_chr_ioctl cmd 2164298801 [ 140.148793][ T8747] tun0: tun_chr_ioctl cmd 1074812118 [ 140.336128][ T30] audit: type=1400 audit(1745454862.535:665): avc: denied { bind } for pid=8756 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.356464][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.508046][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1213'. [ 140.535414][ T30] audit: type=1326 audit(1745454862.735:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fa38e969 code=0x7fc00000 [ 140.558714][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.666001][ T8767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.763117][ T8777] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1218'. [ 140.820011][ T5876] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 140.896901][ T30] audit: type=1400 audit(1745454863.105:667): avc: denied { mounton } for pid=8786 comm="syz.2.1223" path="/proc/608/cgroup" dev="nsfs" ino=4026532985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 140.993200][ T5873] kernel write not supported for file /610/net/ip_vs_stats (pid: 5873 comm: kworker/1:4) [ 141.011902][ T5876] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.020553][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'. [ 141.030285][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.051588][ T5876] usb 4-1: config 0 descriptor?? [ 141.070654][ T5876] cp210x 4-1:0.0: cp210x converter detected [ 141.141189][ T5873] kernel write not supported for file /508/loginuid (pid: 5873 comm: kworker/1:4) [ 141.457631][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 141.477347][ T5876] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 141.497302][ T5876] usb 4-1: cp210x converter now attached to ttyUSB0 [ 141.515400][ T30] audit: type=1400 audit(1745454863.725:668): avc: denied { ioctl } for pid=8820 comm="syz.2.1239" path="socket:[21840]" dev="sockfs" ino=21840 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.540097][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.591164][ T30] audit: type=1400 audit(1745454863.725:669): avc: denied { read } for pid=8820 comm="syz.2.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.619981][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 141.646036][ T30] audit: type=1326 audit(1745454863.825:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef878e969 code=0x7ffc0000 [ 141.676995][ T30] audit: type=1326 audit(1745454863.825:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef878e969 code=0x7ffc0000 [ 141.694220][ T5873] usb 4-1: USB disconnect, device number 17 [ 141.722660][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 141.723028][ T30] audit: type=1326 audit(1745454863.825:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efef878e969 code=0x7ffc0000 [ 141.815730][ T5873] cp210x 4-1:0.0: device disconnected [ 141.819961][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 141.849579][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 141.888594][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 141.901453][ T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 141.920989][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.935583][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.947244][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.955813][ T10] usb 5-1: Product: syz [ 141.960251][ T10] usb 5-1: Manufacturer: syz [ 141.964883][ T10] usb 5-1: SerialNumber: syz [ 142.170229][ T5876] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 142.188119][ T10] usb 5-1: 0:2 : does not exist [ 142.226917][ T10] usb 5-1: USB disconnect, device number 12 [ 142.330226][ T5873] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 142.343252][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 142.362990][ T5876] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 142.378253][ T5876] usb 2-1: config 0 has no interface number 0 [ 142.385865][ T5876] usb 2-1: config 0 interface 55 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1023 [ 142.408066][ T5876] usb 2-1: config 0 interface 55 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 142.424234][ T5876] usb 2-1: config 0 interface 55 has no altsetting 0 [ 142.433027][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.453613][ T5876] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=b4.92 [ 142.471841][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.482212][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 142.485621][ T5876] usb 2-1: Product: syz [ 142.497264][ T5876] usb 2-1: Manufacturer: syz [ 142.502071][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 142.502405][ T5876] usb 2-1: SerialNumber: syz [ 142.528497][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 142.530557][ T5876] usb 2-1: config 0 descriptor?? [ 142.553864][ T5873] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 142.560582][ T8837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.563236][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.577620][ T8837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.595151][ T5876] spcp8x5 2-1:0.55: SPCP8x5 converter detected [ 142.598706][ T5873] usb 3-1: Product: syz [ 142.608810][ T5873] usb 3-1: Manufacturer: syz [ 142.618214][ T5876] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 142.626332][ T5873] usb 3-1: SerialNumber: syz [ 142.652659][ T5873] usb 3-1: config 0 descriptor?? [ 142.662058][ T8843] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 142.678894][ T8843] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 142.698201][ T5873] usb 3-1: ucan: probing device on interface #0 [ 142.878702][ T8867] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.074061][ T8877] syzkaller1: entered promiscuous mode [ 143.079710][ T8877] syzkaller1: entered allmulticast mode [ 143.120593][ T5873] usb 3-1: ucan: device reported invalid tx-fifo size [ 143.127393][ T5873] usb 3-1: ucan: probe failed; try to update the device firmware [ 143.190003][ T1605] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 143.343840][ T1605] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.360469][ T10] usb 3-1: USB disconnect, device number 20 [ 143.370877][ T1605] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6A, changing to 0xA [ 143.402475][ T1605] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 143.444668][ T1605] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.480078][ T1605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.488102][ T1605] usb 5-1: Product: syz [ 143.499967][ T1605] usb 5-1: Manufacturer: syz [ 143.504583][ T1605] usb 5-1: SerialNumber: syz [ 143.897388][ T5950] kernel write not supported for file /620/coredump_filter (pid: 5950 comm: kworker/0:7) [ 144.611276][ T1605] cdc_ncm 5-1:1.0: bind() failure [ 144.634371][ T1605] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 144.655475][ T1605] usb 5-1: USB disconnect, device number 13 [ 144.790966][ T8925] kvm: apic: phys broadcast and lowest prio [ 144.846817][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 144.846832][ T30] audit: type=1400 audit(1745454867.055:684): avc: denied { setopt } for pid=8926 comm="syz.2.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 144.924840][ T10] usb 2-1: USB disconnect, device number 14 [ 144.934496][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 144.950892][ T10] spcp8x5 2-1:0.55: device disconnected [ 144.955414][ T8931] input: syz1 as /devices/virtual/input/input24 [ 145.040043][ T5840] udevd[5840]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 145.244035][ T8945] tipc: Started in network mode [ 145.269355][ T8945] tipc: Node identity ac1414aa, cluster identity 4711 [ 145.288416][ T8945] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.323443][ T8945] tipc: Enabled bearer , priority 10 [ 145.421311][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.460211][ T8953] netlink: 'syz.1.1295': attribute type 3 has an invalid length. [ 145.468358][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 145.559968][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.653314][ T8966] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 145.699971][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.709554][ T8970] input: syz0 as /devices/virtual/input/input25 [ 145.745502][ T30] audit: type=1400 audit(1745454867.945:685): avc: denied { getopt } for pid=8971 comm="syz.4.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.826525][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1308'. [ 145.839982][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.872038][ T8979] netlink: 'syz.3.1308': attribute type 7 has an invalid length. [ 145.887344][ T8979] netlink: 'syz.3.1308': attribute type 8 has an invalid length. [ 145.897499][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 145.979987][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 146.009157][ T8989] syzkaller1: entered promiscuous mode [ 146.015202][ T8989] syzkaller1: entered allmulticast mode [ 146.120073][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 146.212599][ T9003] syz_tun: entered allmulticast mode [ 146.219144][ T9002] syz_tun: left allmulticast mode [ 146.259979][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 146.404002][ T1605] tipc: Node number set to 2886997162 [ 146.488523][ T9025] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1329'. [ 146.503578][ T9025] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 146.711841][ T30] audit: type=1400 audit(1745454868.925:686): avc: denied { mount } for pid=9034 comm="syz.2.1333" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 146.817362][ T30] audit: type=1400 audit(1745454868.995:687): avc: denied { mounton } for pid=9038 comm="syz.4.1334" path="/241/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 146.995769][ T30] audit: type=1400 audit(1745454869.205:688): avc: denied { create } for pid=9045 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.053253][ T30] audit: type=1400 audit(1745454869.265:689): avc: denied { write } for pid=9045 comm="syz.2.1338" path="socket:[22289]" dev="sockfs" ino=22289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.403000][ T30] audit: type=1400 audit(1745454869.605:690): avc: denied { load_policy } for pid=9059 comm="syz.2.1344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 147.445136][ T9060] SELinux: failed to load policy [ 147.493878][ T30] audit: type=1400 audit(1745454869.705:691): avc: denied { setopt } for pid=9065 comm="syz.0.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.624712][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1352'. [ 147.927668][ T30] audit: type=1400 audit(1745454870.135:692): avc: denied { bind } for pid=9085 comm="syz.2.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.271571][ T1605] kernel write not supported for file /input/event2 (pid: 1605 comm: kworker/1:2) [ 148.371147][ C1] net_ratelimit: 3 callbacks suppressed [ 148.371166][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.458908][ T30] audit: type=1400 audit(1745454870.655:693): avc: denied { mount } for pid=9096 comm="syz.4.1361" name="/" dev="hugetlbfs" ino=22372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 148.960203][ T5950] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 149.122403][ T5950] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 149.150054][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.160778][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 149.169165][ T5950] usb 2-1: config 0 descriptor?? [ 149.181493][ T5950] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 149.250192][ T5876] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 149.320090][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 149.334271][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.351416][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 149.369432][ T10] usb 4-1: can't read configurations, error -71 [ 149.384255][ T5950] gp8psk: usb in 128 operation failed. [ 149.390295][ T5950] gp8psk: usb in 137 operation failed. [ 149.395761][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.410419][ T5950] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 149.411202][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 149.426367][ T5950] usb 2-1: media controller created [ 149.432099][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 149.443039][ T5876] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 149.459963][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.470155][ T5876] usb 3-1: Product: syz [ 149.474323][ T5876] usb 3-1: Manufacturer: syz [ 149.482711][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.491715][ T5876] usb 3-1: SerialNumber: syz [ 149.502061][ T5876] usb 3-1: config 0 descriptor?? [ 149.519461][ T5876] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 149.531520][ T5950] gp8psk_fe: Frontend attached [ 149.542901][ T5950] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 149.552340][ T5950] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 149.742043][ T5950] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 149.755998][ T5950] gp8psk: found Genpix USB device pID = 203 (hex) [ 149.831606][ T9129] tipc: Started in network mode [ 149.836630][ T9129] tipc: Node identity ac1414aa, cluster identity 4711 [ 149.858169][ T9129] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 149.875331][ T9129] tipc: Enabled bearer , priority 10 [ 149.950362][ T1605] usb 2-1: USB disconnect, device number 15 [ 149.990127][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.033853][ T1605] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 150.130002][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.231706][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 150.269988][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.409969][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.411489][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 150.439979][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.449980][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 150.461659][ T10] usb 4-1: config 0 descriptor?? [ 150.480780][ T10] cp210x 4-1:0.0: cp210x converter detected [ 150.535076][ T5876] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 150.546823][ T5876] usb 3-1: USB disconnect, device number 21 [ 150.550074][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.690017][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.878982][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 150.973347][ T1605] tipc: Node number set to 2886997162 [ 151.033247][ T9173] input: syz0 as /devices/virtual/input/input26 [ 151.111112][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 151.195491][ T9181] vlan0: entered promiscuous mode [ 151.206024][ T9181] veth1_virt_wifi: entered promiscuous mode [ 151.227161][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 151.227177][ T30] audit: type=1400 audit(1745454873.435:695): avc: denied { create } for pid=9179 comm="syz.2.1399" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 151.330480][ T1605] usb 4-1: USB disconnect, device number 19 [ 151.344200][ T1605] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 151.372414][ T1605] cp210x 4-1:0.0: device disconnected [ 151.749868][ T9209] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input27 [ 151.966633][ T30] audit: type=1400 audit(1745454874.165:696): avc: denied { map } for pid=9220 comm="syz.3.1418" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 152.440121][ T1605] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 152.488143][ T5873] kernel write not supported for file bpf-prog (pid: 5873 comm: kworker/1:4) [ 152.588782][ T30] audit: type=1400 audit(1745454874.795:697): avc: denied { create } for pid=9270 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 152.624776][ T1605] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.637725][ T1605] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.657741][ T30] audit: type=1400 audit(1745454874.825:698): avc: denied { write } for pid=9270 comm="syz.0.1436" path="socket:[24870]" dev="sockfs" ino=24870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 152.681077][ T1605] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.681105][ T1605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.685010][ T9240] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.712783][ T1605] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.968003][ T9287] cgroup: Unknown subsys name 'cpuset' [ 152.993395][ T1605] usb 3-1: USB disconnect, device number 22 [ 153.154343][ T9297] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 153.231380][ T9303] rdma_op ffff88807d0371f0 conn xmit_rdma 0000000000000000 [ 153.310010][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 153.479984][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 153.486637][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.497801][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 153.509837][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 153.522021][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 153.535995][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.553910][ T24] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 153.563295][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.571355][ C1] net_ratelimit: 7 callbacks suppressed [ 153.571371][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.586859][ T24] usb 5-1: Product: syz [ 153.591308][ T24] usb 5-1: Manufacturer: syz [ 153.595904][ T24] usb 5-1: SerialNumber: syz [ 153.603639][ T24] usb 5-1: config 0 descriptor?? [ 153.614012][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28 [ 153.634875][ C1] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 153.650425][ T5876] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 153.740203][ T5950] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 153.818962][ T24] usb 5-1: USB disconnect, device number 14 [ 153.832136][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.848025][ T5876] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 153.874268][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.890420][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 153.903655][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 153.921946][ T5876] usb 1-1: config 0 descriptor?? [ 153.933147][ T5950] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 153.954852][ T5950] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 153.966461][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 153.970425][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.975998][ T5950] usb 4-1: Product: syz [ 153.985838][ T5950] usb 4-1: Manufacturer: syz [ 153.991297][ T5950] usb 4-1: SerialNumber: syz [ 154.006513][ T5950] usb 4-1: config 0 descriptor?? [ 154.148831][ T30] audit: type=1400 audit(1745454876.355:699): avc: denied { getopt } for pid=9328 comm="syz.1.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.157784][ T5876] usbhid 1-1:0.0: can't add hid device: -71 [ 154.177079][ T5876] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 154.223979][ T5876] usb 1-1: USB disconnect, device number 18 [ 154.344312][ T30] audit: type=1400 audit(1745454876.555:700): avc: denied { search } for pid=9336 comm="syz.2.1468" name="/" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.366429][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.402262][ T24] usb 4-1: USB disconnect, device number 20 [ 154.427227][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 154.609977][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.658910][ T9356] input: syz1 as /devices/virtual/input/input29 [ 154.660060][ T5876] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 154.673309][ T30] audit: type=1400 audit(1745454876.885:701): avc: denied { append } for pid=9355 comm="syz.2.1477" name="event4" dev="devtmpfs" ino=3177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.731948][ T30] audit: type=1400 audit(1745454876.945:702): avc: denied { bind } for pid=9357 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.751448][ T5950] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 154.759586][ T30] audit: type=1400 audit(1745454876.945:703): avc: denied { listen } for pid=9357 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.783040][ T30] audit: type=1400 audit(1745454876.945:704): avc: denied { accept } for pid=9357 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.870011][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 154.876492][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.887477][ T5876] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 154.896761][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.906603][ T5876] usb 1-1: config 0 descriptor?? [ 154.914259][ T5876] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 154.934112][ T5876] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 154.942299][ T5950] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 154.951533][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.970652][ T5950] usb 2-1: config 0 descriptor?? [ 155.009964][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.060016][ T5874] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 155.209949][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 155.216410][ T5874] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 155.226183][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.236015][ T5874] usb 3-1: config 0 descriptor?? [ 155.340602][ T24] usb 1-1: USB disconnect, device number 19 [ 155.358253][ T24] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 155.444444][ T5874] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 155.596566][ T9373] 9pnet: p9_errstr2errno: server reported unknown error  [ 155.659978][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 155.867860][ T9384] SELinux: ebitmap start bit (1819307264) is beyond the end of the bitmap (1472) [ 155.883226][ T9384] SELinux: failed to load policy [ 155.960154][ T5876] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 156.049971][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.088957][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 156.124761][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.151143][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.166074][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.187977][ T5876] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.200033][ T5950] pegasus 2-1:0.0: can't reset MAC [ 156.205408][ T5950] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 156.230516][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.250664][ T5950] usb 2-1: USB disconnect, device number 16 [ 156.262402][ T5876] usb 5-1: config 0 descriptor?? [ 156.264016][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 156.264026][ T30] audit: type=1400 audit(1745454878.475:707): avc: denied { create } for pid=9401 comm="syz.3.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.313674][ T30] audit: type=1400 audit(1745454878.525:708): avc: denied { getopt } for pid=9401 comm="syz.3.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.370089][ T10] kernel read not supported for file /video37 (pid: 10 comm: kworker/0:1) [ 156.432205][ T30] audit: type=1400 audit(1745454878.635:709): avc: denied { allowed } for pid=9412 comm="syz.0.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 156.466349][ T5874] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 156.499063][ T5874] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 156.511883][ T5874] asix 3-1:0.0: probe with driver asix failed with error -71 [ 156.526654][ T5874] usb 3-1: USB disconnect, device number 23 [ 156.689287][ T5876] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 156.689963][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 156.726953][ T5876] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 156.773299][ T30] audit: type=1400 audit(1745454878.955:710): avc: denied { read } for pid=9432 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.840029][ T30] audit: type=1400 audit(1745454879.025:711): avc: denied { module_request } for pid=9436 comm="syz.1.1514" kmod="crypto-ccm(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 156.862007][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.930038][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 156.994221][ T5876] usb 5-1: USB disconnect, device number 15 [ 157.084944][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.096029][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.109491][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.123462][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.133534][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.158995][ T9431] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 157.176278][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.325735][ T9467] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 157.488656][ T5874] usb 1-1: USB disconnect, device number 20 [ 157.729973][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.034608][ T30] audit: type=1326 audit(1745454880.245:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.4.1536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1fa38e969 code=0x0 [ 158.091362][ T9497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'. [ 158.130118][ T9497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'. [ 158.139695][ T9497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'. [ 158.175066][ T9501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'. [ 158.207045][ T9501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'. [ 158.229033][ T9501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'. [ 158.246221][ T9497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'. [ 158.283773][ T9497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'. [ 158.350033][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 158.503178][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.515006][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.527591][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.541684][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.551523][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.566127][ T24] usb 4-1: config 0 descriptor?? [ 158.643056][ T5874] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 158.769963][ C1] net_ratelimit: 1 callbacks suppressed [ 158.769974][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.821546][ T5874] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.833322][ T5874] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 158.843312][ T5874] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.854464][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.870635][ T9511] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.880054][ T5874] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.952807][ T5873] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 158.994964][ T24] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 159.017339][ T24] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 159.055485][ T9534] geneve2: entered promiscuous mode [ 159.066126][ T9534] geneve2: entered allmulticast mode [ 159.090924][ T55] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 159.091923][ T5826] Bluetooth: hci0: command 0x0401 tx timeout [ 159.125496][ T24] usb 3-1: USB disconnect, device number 24 [ 159.131886][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 159.153441][ T5873] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.169964][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.189050][ T5873] usb 1-1: config 0 has no interface number 0 [ 159.218530][ T5873] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 159.232888][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.247386][ T5873] usb 1-1: Product: syz [ 159.254402][ T5873] usb 1-1: Manufacturer: syz [ 159.258990][ T5873] usb 1-1: SerialNumber: syz [ 159.271471][ T1211] usb 4-1: USB disconnect, device number 21 [ 159.275500][ T5873] usb 1-1: config 0 descriptor?? [ 159.301886][ T5873] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 159.479982][ T5874] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 159.630054][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 159.638123][ T5874] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 159.646398][ T5874] usb 2-1: config 0 has no interface number 0 [ 159.657468][ T5874] usb 2-1: New USB device found, idVendor=0c45, idProduct=62b0, bcdDevice=b8.ce [ 159.666624][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.674854][ T5874] usb 2-1: Product: syz [ 159.679032][ T5874] usb 2-1: Manufacturer: syz [ 159.683640][ T5874] usb 2-1: SerialNumber: syz [ 159.692016][ T5874] usb 2-1: config 0 descriptor?? [ 159.700494][ T5874] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b0 [ 159.809970][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 159.909021][ T30] audit: type=1400 audit(1745454882.115:713): avc: denied { mount } for pid=9548 comm="syz.2.1557" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 159.931480][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.088126][ T5826] Bluetooth: hci4: ISO packet for unknown connection handle 1380 [ 160.102468][ T1211] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 160.105063][ T5873] gspca_spca1528: reg_w err -71 [ 160.123466][ T5874] gspca_sn9c20x: Write register 1001 failed -71 [ 160.130543][ T5873] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 160.139289][ T5874] gspca_sn9c20x: Device initialization failed [ 160.146913][ T5873] usb 1-1: USB disconnect, device number 21 [ 160.151352][ T5874] gspca_sn9c20x 2-1:0.167: probe with driver gspca_sn9c20x failed with error -71 [ 160.181755][ T5874] usb 2-1: USB disconnect, device number 17 [ 160.209975][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.230055][ T5876] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 160.292618][ T1211] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.310008][ T1211] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.323439][ T1211] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.333140][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.351735][ T9547] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 160.366510][ T1211] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.417355][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.430455][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.441552][ T5876] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 160.451097][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.460500][ T5876] usb 3-1: config 0 descriptor?? [ 160.588593][ T1211] usb 4-1: USB disconnect, device number 22 [ 160.610357][ T5873] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 160.726670][ T30] audit: type=1400 audit(1745454882.935:714): avc: denied { map } for pid=9568 comm="syz.0.1566" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.750391][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.780128][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 160.786937][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.825026][ T5873] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 160.834380][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.849960][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 160.856898][ T5873] usb 5-1: Product: syz [ 160.870471][ T5873] usb 5-1: Manufacturer: syz [ 160.875087][ T5873] usb 5-1: SerialNumber: syz [ 160.883871][ T5876] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 160.893109][ T5873] usb 5-1: config 0 descriptor?? [ 160.908015][ T5876] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 160.933776][ T5876] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0017/input/input31 [ 160.962117][ T5876] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 161.128566][ T5876] usb 3-1: USB disconnect, device number 25 [ 161.139182][ T9583] IPv4: Oversized IP packet from 127.202.26.0 [ 161.249964][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.320437][ T5873] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 161.355444][ T30] audit: type=1400 audit(1745454883.565:715): avc: denied { connect } for pid=9591 comm="syz.3.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 161.375172][ T30] audit: type=1400 audit(1745454883.565:716): avc: denied { write } for pid=9591 comm="syz.3.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 161.460002][ T24] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 161.533584][ T5873] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 161.539112][ T9594] input: syz0 as /devices/virtual/input/input32 [ 161.556272][ T5873] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 161.582474][ T5873] usb 5-1: USB disconnect, device number 16 [ 161.738079][ T30] audit: type=1400 audit(1745454883.945:717): avc: denied { audit_write } for pid=9603 comm="syz.2.1583" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 161.899964][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.225706][ T30] audit: type=1400 audit(1745454884.425:718): avc: denied { validate_trans } for pid=9633 comm="syz.3.1597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 162.277418][ T9638] input: syz0 as /devices/virtual/input/input33 [ 162.290087][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 162.460354][ T5873] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 162.569886][ T9659] macsec1: entered allmulticast mode [ 162.632695][ T5873] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 162.643000][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.652800][ T5873] usb 5-1: config 0 descriptor?? [ 162.669979][ T5876] psmouse serio4: Failed to reset mouse on : -5 [ 162.740092][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 162.850172][ T1605] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 162.910050][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 162.917384][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.929281][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 162.938389][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.945894][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.955329][ T24] usb 1-1: config 0 descriptor?? [ 162.962096][ T24] hub 1-1:0.0: USB hub found [ 163.020033][ T1605] usb 3-1: Using ep0 maxpacket: 8 [ 163.026464][ T1605] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.037768][ T1605] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 163.046896][ T1605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.056461][ T1605] usb 3-1: config 0 descriptor?? [ 163.065954][ T1605] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 163.090160][ T5920] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 163.166390][ T24] hub 1-1:0.0: 1 port detected [ 163.240030][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 163.247855][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.259175][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.269312][ T5920] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 163.278681][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.288363][ T5920] usb 4-1: config 0 descriptor?? [ 163.670447][ T5873] usb 5-1: Cannot set autoneg [ 163.675289][ T5873] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 163.700872][ T5920] playstation 0003:054C:05C4.0018: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 163.874720][ T5904] usb 5-1: USB disconnect, device number 17 [ 163.969982][ C1] net_ratelimit: 1 callbacks suppressed [ 163.970010][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 164.101048][ T5920] playstation 0003:054C:05C4.0018: Failed to retrieve feature with reportID 163: -32 [ 164.110607][ T5920] playstation 0003:054C:05C4.0018: Failed to retrieve DualShock4 firmware info: -32 [ 164.120109][ T5920] playstation 0003:054C:05C4.0018: Failed to get firmware info from DualShock4 [ 164.129058][ T5920] playstation 0003:054C:05C4.0018: HW/FW version data in sysfs will be invalid. [ 164.141254][ T5920] input: HID 054c:05c4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0018/input/input35 [ 164.156353][ T5920] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0018/input/input36 [ 164.173611][ T5920] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0018/input/input37 [ 164.183621][ T1211] usb 1-1: USB disconnect, device number 22 [ 164.204705][ T5920] playstation 0003:054C:05C4.0018: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 164.288148][ T1605] gspca_vc032x: reg_w err -71 [ 164.293144][ T1605] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 164.302083][ T1605] usb 3-1: USB disconnect, device number 26 [ 164.343985][ T5920] usb 4-1: USB disconnect, device number 23 [ 164.370019][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 164.622726][ T9681] __nla_validate_parse: 12 callbacks suppressed [ 164.622737][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'. [ 164.946955][ T9702] use of bytesused == 0 is deprecated and will be removed in the future, [ 164.955780][ T9702] use the actual size instead. [ 165.009973][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 165.023056][ T5920] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 165.140178][ T1211] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 165.180024][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 165.186648][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 165.197768][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 165.208891][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 165.221696][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 165.232723][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 165.246666][ T5920] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 165.255854][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.263927][ T5920] usb 1-1: Product: syz [ 165.268072][ T5920] usb 1-1: Manufacturer: syz [ 165.272671][ T5920] usb 1-1: SerialNumber: syz [ 165.278736][ T5920] usb 1-1: config 0 descriptor?? [ 165.284237][ T9691] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.289983][ T1211] usb 4-1: Using ep0 maxpacket: 16 [ 165.295276][ T5920] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 165.309160][ T1211] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 165.322519][ T1211] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 165.331873][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.342360][ T1211] usb 4-1: config 0 descriptor?? [ 165.350480][ T1211] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input39 [ 165.410047][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 165.542340][ T9691] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 165.563322][ T5920] usb 1-1: USB disconnect, device number 23 [ 165.612053][ T1211] bcm5974 4-1:0.0: could not read from device [ 165.646449][ T1211] input: failed to attach handler mousedev to device input39, error: -5 [ 165.659369][ T1211] usb 4-1: USB disconnect, device number 24 [ 165.683820][ T30] audit: type=1400 audit(1745454887.895:719): avc: denied { override_creds } for pid=9713 comm="syz.4.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 166.050008][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 166.230834][ T1211] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 166.244464][ T9740] kvm: user requested TSC rate below hardware speed [ 166.391487][ T1211] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.401664][ T1211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.411388][ T1211] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.420524][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.428686][ T1211] usb 5-1: SerialNumber: syz [ 166.449973][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 166.470002][ T1605] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 166.489978][ T5876] misc userio: Buffer overflowed, userio client isn't keeping up [ 166.560135][ T5874] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 166.623742][ T1605] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.635098][ T1605] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 166.650434][ T1605] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.651803][ T1211] usb 5-1: 0:2 : does not exist [ 166.659555][ T1605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.666673][ T1211] usb 5-1: unit 1 not found! [ 166.677796][ T9738] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 166.685713][ T1211] usb 5-1: USB disconnect, device number 18 [ 166.687769][ T1605] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.713049][ T5874] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 166.722232][ T5874] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 166.733676][ T5874] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 166.745637][ T5874] usb 4-1: config 220 has no interface number 2 [ 166.751936][ T5874] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 166.766046][ T5874] usb 4-1: config 220 interface 0 has no altsetting 0 [ 166.772928][ T5874] usb 4-1: config 220 interface 76 has no altsetting 0 [ 166.779887][ T5874] usb 4-1: config 220 interface 1 has no altsetting 0 [ 166.789120][ T5874] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 166.809858][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.819530][ T5874] usb 4-1: Product: syz [ 166.824901][ T5874] usb 4-1: Manufacturer: syz [ 166.829507][ T5874] usb 4-1: SerialNumber: syz [ 166.924397][ T5920] usb 1-1: USB disconnect, device number 24 [ 167.047735][ T5874] usb 4-1: selecting invalid altsetting 0 [ 167.065849][ T5874] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 167.075074][ T5874] usb 4-1: No valid video chain found. [ 167.086798][ T5874] usb 4-1: selecting invalid altsetting 0 [ 167.089963][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 167.092675][ T5874] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 167.113483][ T5874] usb 4-1: USB disconnect, device number 25 [ 167.489961][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 167.551265][ T5876] input: PS/2 Generic Mouse as /devices/serio4/input/input34 [ 167.694458][ T9773] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 167.761880][ T9773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.780109][ T5876] psmouse serio4: Failed to enable mouse on [ 167.797321][ T9776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.824831][ T9776] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 167.856008][ T30] audit: type=1326 audit(1745454890.065:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653638e969 code=0x7fc00000 [ 167.858080][ T9776] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 167.879314][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.937698][ T30] audit: type=1400 audit(1745454890.145:721): avc: denied { read } for pid=9782 comm="syz.3.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 167.959990][ T30] audit: type=1326 audit(1745454890.155:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6536385927 code=0x7fc00000 [ 167.983181][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.039300][ T30] audit: type=1326 audit(1745454890.155:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f653632ab39 code=0x7fc00000 [ 168.062522][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.096637][ T30] audit: type=1326 audit(1745454890.155:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f653632abff code=0x7fc00000 [ 168.126839][ T30] audit: type=1326 audit(1745454890.155:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f653638e969 code=0x7fc00000 [ 168.129954][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.150111][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.176284][ T9787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.529972][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.591860][ T30] audit: type=1400 audit(1745454890.795:726): avc: denied { getopt } for pid=9803 comm="syz.2.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 168.755512][ T30] audit: type=1400 audit(1745454890.965:727): avc: denied { read write } for pid=9813 comm="syz.4.1671" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.756489][ T9814] GUP no longer grows the stack in syz.4.1671 (9814): 200000005000-20000000a000 (200000001000) [ 168.778567][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.794951][ T30] audit: type=1400 audit(1745454890.965:728): avc: denied { open } for pid=9813 comm="syz.4.1671" path="/316/bus" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.803538][ T9814] CPU: 1 UID: 0 PID: 9814 Comm: syz.4.1671 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 168.803563][ T9814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.803573][ T9814] Call Trace: [ 168.803578][ T9814] [ 168.803584][ T9814] dump_stack_lvl+0x16c/0x1f0 [ 168.803609][ T9814] gup_vma_lookup+0x1d2/0x220 [ 168.803632][ T9814] __get_user_pages+0x234/0x36f0 [ 168.803656][ T9814] ? __pfx___might_resched+0x10/0x10 [ 168.803683][ T9814] ? __pfx___get_user_pages+0x10/0x10 [ 168.803704][ T9814] ? __pfx_down_read_killable+0x10/0x10 [ 168.803730][ T9814] ? __lock_acquire+0x5ca/0x1ba0 [ 168.803747][ T9814] __gup_longterm_locked+0x20d/0x1850 [ 168.803774][ T9814] ? try_get_folio+0x1d2/0x730 [ 168.803793][ T9814] ? __pfx___gup_longterm_locked+0x10/0x10 [ 168.803817][ T9814] ? try_get_folio+0x255/0x730 [ 168.803835][ T9814] ? find_held_lock+0x2b/0x80 [ 168.803854][ T9814] ? sanity_check_pinned_pages+0x3ac/0x11e0 [ 168.803880][ T9814] gup_fast_fallback+0x183d/0x2650 [ 168.803915][ T9814] ? __pfx_gup_fast_fallback+0x10/0x10 [ 168.803936][ T9814] ? is_bpf_text_address+0x94/0x1a0 [ 168.803954][ T9814] ? kernel_text_address+0x8d/0x100 [ 168.803976][ T9814] ? do_raw_spin_lock+0x12c/0x2b0 [ 168.803995][ T9814] pin_user_pages_fast+0xa7/0xf0 [ 168.804017][ T9814] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 168.804037][ T9814] ? rcu_is_watching+0x12/0xc0 [ 168.804055][ T9814] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 168.804073][ T9814] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.804093][ T9814] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 168.804113][ T9814] iov_iter_extract_pages+0x3a2/0x2000 [ 168.804135][ T9814] ? __blkdev_direct_IO_simple+0x65b/0x810 [ 168.804157][ T9814] ? kasan_save_stack+0x42/0x60 [ 168.804171][ T9814] ? kasan_save_stack+0x33/0x60 [ 168.804183][ T9814] ? kasan_save_track+0x14/0x30 [ 168.804196][ T9814] ? __kasan_kmalloc+0xaa/0xb0 [ 168.804209][ T9814] ? __kmalloc_noprof+0x223/0x510 [ 168.804223][ T9814] ? __blkdev_direct_IO_simple+0x65b/0x810 [ 168.804238][ T9814] ? blkdev_direct_IO+0xa97/0x1cc0 [ 168.804254][ T9814] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 168.804271][ T9814] ? do_pwritev+0x1af/0x270 [ 168.804295][ T9814] ? __lock_acquire+0x5ca/0x1ba0 [ 168.804319][ T9814] bio_iov_iter_get_pages+0x374/0x10e0 [ 168.804340][ T9814] ? find_held_lock+0x2b/0x80 [ 168.804368][ T9814] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 168.804390][ T9814] ? bio_associate_blkg+0x137/0x2a0 [ 168.804419][ T9814] __blkdev_direct_IO_simple+0x358/0x810 [ 168.804441][ T9814] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 168.804479][ T9814] ? xas_start+0x153/0x790 [ 168.804499][ T9814] ? iov_iter_is_aligned+0xf2/0x5a0 [ 168.804514][ T9814] ? iov_iter_npages+0xf0/0x5a0 [ 168.804531][ T9814] blkdev_direct_IO+0xa97/0x1cc0 [ 168.804558][ T9814] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 168.804576][ T9814] ? __mark_inode_dirty+0x2a7/0xe50 [ 168.804603][ T9814] blkdev_write_iter+0x702/0xdf0 [ 168.804625][ T9814] do_iter_readv_writev+0x654/0x950 [ 168.804648][ T9814] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 168.804669][ T9814] ? avc_policy_seqno+0x9/0x20 [ 168.804682][ T9814] ? selinux_file_permission+0x11f/0x580 [ 168.804708][ T9814] ? bpf_lsm_file_permission+0x9/0x10 [ 168.804729][ T9814] ? security_file_permission+0x71/0x210 [ 168.804751][ T9814] ? rw_verify_area+0xcf/0x680 [ 168.804773][ T9814] vfs_writev+0x353/0xdc0 [ 168.804801][ T9814] ? __pfx_vfs_writev+0x10/0x10 [ 168.804838][ T9814] ? __fget_files+0x20e/0x3c0 [ 168.804859][ T9814] ? do_pwritev+0x1af/0x270 [ 168.804878][ T9814] do_pwritev+0x1af/0x270 [ 168.804900][ T9814] ? __pfx_do_pwritev+0x10/0x10 [ 168.804924][ T9814] ? rcu_is_watching+0x12/0xc0 [ 168.804944][ T9814] __x64_sys_pwritev2+0xef/0x160 [ 168.804962][ T9814] do_syscall_64+0xcd/0x260 [ 168.804984][ T9814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.804999][ T9814] RIP: 0033:0x7fa1fa38e969 [ 168.805011][ T9814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.805026][ T9814] RSP: 002b:00007fa1fb186038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 168.805040][ T9814] RAX: ffffffffffffffda RBX: 00007fa1fa5b5fa0 RCX: 00007fa1fa38e969 [ 168.805050][ T9814] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 168.805059][ T9814] RBP: 00007fa1fa410ab1 R08: 0000000000000000 R09: 000000000000000b [ 168.805068][ T9814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.805076][ T9814] R13: 0000000000000000 R14: 00007fa1fa5b5fa0 R15: 00007ffeab8fec58 [ 168.805097][ T9814] [ 168.969973][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 169.034731][ T30] audit: type=1400 audit(1745454891.255:729): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 169.170021][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 169.239971][ T5874] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 169.269998][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 169.336107][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 169.355995][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.371507][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.384807][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.395863][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.413425][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.424032][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.473694][ T5874] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 169.483025][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.498385][ T5874] usb 4-1: config 0 descriptor?? [ 169.569961][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.661615][ T24] usb 3-1: usb_control_msg returned -32 [ 169.667218][ T24] usbtmc 3-1:16.0: can't read capabilities [ 170.209967][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.239876][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 170.381525][ T5876] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 170.571078][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.583611][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.593458][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.606810][ T5876] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.615997][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.619988][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 170.632273][ T5876] usb 5-1: config 0 descriptor?? [ 170.749435][ T5874] pegasus 4-1:0.0: can't reset MAC [ 170.754918][ T5874] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 170.767650][ T5874] usb 4-1: USB disconnect, device number 26 [ 171.049039][ T5876] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 171.080216][ T5876] plantronics 0003:047F:FFFF.0019: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 171.249978][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 171.432251][ T9910] input: syz0 as /devices/virtual/input/input40 [ 171.649958][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 171.784330][ T5874] usb 3-1: USB disconnect, device number 27 [ 172.289961][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 172.404572][ T9971] SELinux: failed to load policy [ 172.689988][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.802877][ T9997] Bluetooth: hci0: invalid len left 7, exp >= 67 [ 172.868273][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'. [ 172.950003][ T5876] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 172.970009][ T5874] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 173.097786][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 173.097801][ T30] audit: type=1400 audit(1745454895.305:744): avc: denied { mounton } for pid=10011 comm="syz.3.1756" path="/proc/830/task" dev="proc" ino=28692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 173.131198][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 173.137777][ T5874] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.148931][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.159121][ T5874] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 173.169459][ T5876] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 173.174064][ T5904] usb 5-1: USB disconnect, device number 19 [ 173.178533][ T5874] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.193788][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.203804][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.212856][ T5876] usb 3-1: config 0 descriptor?? [ 173.221389][ T5876] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 173.229105][ T9994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 173.239292][ T5874] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.250416][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 173.333282][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.403994][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.415061][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 173.427818][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.441812][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 173.453674][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 173.481226][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.500013][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.508031][ T24] usb 1-1: Product: syz [ 173.527013][ T24] usb 1-1: Manufacturer: syz [ 173.534640][ T5874] usb 2-1: USB disconnect, device number 19 [ 173.536847][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 173.548754][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 173.555702][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 173.563896][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 173.729991][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 173.804812][ T5874] usb 1-1: USB disconnect, device number 25 [ 173.929396][ T30] audit: type=1400 audit(1745454896.135:745): avc: denied { mount } for pid=10034 comm="syz.4.1765" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 173.956278][ T30] audit: type=1400 audit(1745454896.165:746): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 174.369990][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.423194][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 174.455127][ T5876] gspca_vc032x: reg_w err -71 [ 174.480091][ T5876] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 174.512449][ T5876] usb 3-1: USB disconnect, device number 28 [ 174.655589][T10070] tipc: Can't bind to reserved service type 0 [ 174.769968][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 174.942940][ T30] audit: type=1400 audit(1745454897.155:747): avc: denied { bind } for pid=10081 comm="syz.0.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.053606][ T30] audit: type=1400 audit(1745454897.265:748): avc: denied { shutdown } for pid=10081 comm="syz.0.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.280004][ T24] usb 5-1: device descriptor read/64, error -71 [ 175.360303][ T1605] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 175.409964][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 175.511604][ T1605] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.525433][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 175.536230][ T1605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.553594][ T1605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.570471][ T1605] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.584319][ T1605] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.593522][ T1605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.604525][ T1605] usb 4-1: config 0 descriptor?? [ 175.702680][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.730286][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.760145][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.776387][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.794685][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.803804][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.811856][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.836170][ T24] usb 5-1: config 0 descriptor?? [ 176.034908][ T1605] plantronics 0003:047F:FFFF.001A: ignoring exceeding usage max [ 176.050048][ T1605] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 176.078916][ T1605] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 176.273872][ T24] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 176.302034][ T24] plantronics 0003:047F:FFFF.001B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 176.449966][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.663115][ T5874] usb 4-1: USB disconnect, device number 27 [ 176.796700][ T30] audit: type=1400 audit(1745454899.005:749): avc: denied { mounton } for pid=10148 comm="syz.1.1815" path="/327/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 176.849997][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 177.050098][ T1605] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 177.210042][ T1605] usb 1-1: Using ep0 maxpacket: 32 [ 177.224927][ T1605] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.253877][ T1605] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.280994][ T1605] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 177.292769][ T1605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.304555][ T1605] usb 1-1: config 0 descriptor?? [ 177.318547][ T1605] hub 1-1:0.0: USB hub found [ 177.486266][T10165] kvm: emulating exchange as write [ 177.489981][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.522469][ T1605] hub 1-1:0.0: 1 port detected [ 177.819235][ T30] audit: type=1400 audit(1745454900.025:750): avc: denied { create } for pid=10174 comm="syz.2.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 177.862447][ T30] audit: type=1400 audit(1745454900.045:751): avc: denied { connect } for pid=10174 comm="syz.2.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 177.889963][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 177.957227][ T30] audit: type=1400 audit(1745454900.135:752): avc: denied { bind } for pid=10174 comm="syz.2.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 178.008679][ T1211] usb 5-1: USB disconnect, device number 21 [ 178.169370][ T1605] hub 1-1:0.0: activate --> -90 [ 178.191725][ T30] audit: type=1400 audit(1745454900.405:753): avc: denied { ioctl } for pid=10196 comm="syz.4.1834" path="socket:[29142]" dev="sockfs" ino=29142 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 178.216301][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.331359][T10203] netlink: 'syz.2.1837': attribute type 12 has an invalid length. [ 178.351901][T10203] netlink: 'syz.2.1837': attribute type 29 has an invalid length. [ 178.359715][T10203] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1837'. [ 178.380186][T10203] netlink: 'syz.2.1837': attribute type 1 has an invalid length. [ 178.393219][T10203] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1837'. [ 178.411043][ T30] audit: type=1400 audit(1745454900.625:754): avc: denied { nlmsg_write } for pid=10209 comm="syz.3.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 178.431912][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.508606][T10214] 9pnet: p9_errstr2errno: server reported unknown error [ 178.529959][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.579470][ T24] usb 1-1: USB disconnect, device number 26 [ 178.679992][ T1211] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 178.810216][ T1605] usb 1-1-port1: config error [ 178.830029][ T1211] usb 3-1: Using ep0 maxpacket: 32 [ 178.842562][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.869979][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.879736][ T1211] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 178.899956][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.920358][ T1211] usb 3-1: config 0 descriptor?? [ 178.926764][ T1211] hub 3-1:0.0: USB hub found [ 178.939985][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 179.129429][ T1211] hub 3-1:0.0: 1 port detected [ 179.135482][T10241] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1853'. [ 179.442532][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 179.549682][T10261] SELinux: failed to load policy [ 179.569961][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.580009][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 179.737176][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.738715][ T5874] hub 3-1:0.0: activate --> -90 [ 179.749185][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.762511][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.772530][ T24] usb 5-1: config 0 descriptor?? [ 179.825403][T10273] SELinux: failed to load policy [ 179.840176][ T1211] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 179.954309][ T5950] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 179.954533][ T1605] usb 3-1: USB disconnect, device number 29 [ 179.969950][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.032833][ T1211] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 180.041207][ T1211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.051841][ T1211] usb 2-1: config 0 has no interface number 0 [ 180.057979][ T1211] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 180.080208][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.090375][ T1211] usb 2-1: config 0 descriptor?? [ 180.097299][ T1211] rndis_host 2-1:0.9: skipping garbage [ 180.104247][ T1211] rndis_host 2-1:0.9: More than one union descriptor, skipping ... [ 180.112489][ T1211] usb 2-1: bad CDC descriptors [ 180.120195][ T1211] cdc_acm 2-1:0.9: skipping garbage [ 180.125403][ T1211] cdc_acm 2-1:0.9: More than one union descriptor, skipping ... [ 180.163863][T10288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.188781][ T24] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 180.214815][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001C/input/input42 [ 180.249814][ T30] audit: type=1400 audit(1745454902.455:755): avc: denied { mounton } for pid=10291 comm="syz.3.1874" path="/399/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 180.283914][ T30] audit: type=1400 audit(1745454902.495:756): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 180.322335][ T24] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 180.341879][ T1211] usb 2-1: USB disconnect, device number 20 [ 180.480139][ T30] audit: type=1400 audit(1745454902.685:757): avc: denied { watch watch_reads } for pid=10295 comm="syz.0.1877" path="/proc/860/net/dev_mcast" dev="proc" ino=4026532828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 180.538115][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 180.544415][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 180.544431][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 180.553958][ T5837] Bluetooth: hci0: command 0x0401 tx timeout [ 180.609966][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 180.625931][T10303] netlink: 'syz.0.1879': attribute type 1 has an invalid length. [ 180.637370][T10303] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1879'. [ 180.671487][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 180.773741][ T1211] usb 5-1: USB disconnect, device number 22 [ 180.773872][ C1] keytouch 0003:0926:3333.001C: usb_submit_urb(ctrl) failed: -19 [ 180.965758][T10323] SELinux: unknown common r [ 180.975365][T10323] SELinux: failed to load policy [ 181.009957][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 181.276619][ T30] audit: type=1400 audit(1745454903.485:758): avc: denied { mounton } for pid=10338 comm="syz.1.1890" path="/339/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 181.475244][T10343] block nbd0: server does not support multiple connections per device. [ 181.501365][T10341] block nbd0: shutting down sockets [ 181.649992][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 181.780129][ T5876] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 181.861478][ T1605] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 181.942862][ T5876] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 10240, setting to 1024 [ 181.954166][ T5876] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 181.964285][ T5876] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.978570][ T5876] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 181.987778][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.995920][ T5876] usb 4-1: Product: syz [ 182.000114][ T5876] usb 4-1: Manufacturer: syz [ 182.004706][ T5876] usb 4-1: SerialNumber: syz [ 182.011681][ T1605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.024939][ T1605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.034898][ T1605] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.049822][ T1605] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.058913][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.066239][ T1605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.075862][ T1605] usb 5-1: config 0 descriptor?? [ 182.216932][ T5876] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 182.418992][ T5876] usb 4-1: USB disconnect, device number 28 [ 182.427501][ T5876] usblp0: removed [ 182.488166][ T1605] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 182.499073][ T1605] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 182.689956][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.751314][ T1211] usb 5-1: USB disconnect, device number 23 [ 182.863857][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'. [ 183.089968][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.251387][ T5920] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 183.399946][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 183.417933][ T5920] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 183.436851][ T5920] usb 1-1: config 0 has no interface number 0 [ 183.459973][ T5920] usb 1-1: config 0 interface 184 has no altsetting 0 [ 183.487627][ T5920] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 183.497216][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 183.503832][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 183.539927][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.547946][ T5920] usb 1-1: Product: syz [ 183.552176][ T5920] usb 1-1: Manufacturer: syz [ 183.556769][ T5920] usb 1-1: SerialNumber: syz [ 183.564478][ T5920] usb 1-1: config 0 descriptor?? [ 183.578756][ T5920] smsc75xx v1.0.0 [ 183.599720][ T30] audit: type=1400 audit(1745454905.805:759): avc: denied { listen } for pid=10415 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 183.619807][ T30] audit: type=1400 audit(1745454905.805:760): avc: denied { accept } for pid=10415 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 183.729957][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.010145][ T1605] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 184.129953][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.159962][ T1605] usb 4-1: Using ep0 maxpacket: 16 [ 184.167764][ T1605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.180712][ T1605] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.192394][ T1605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.203678][ T1605] usb 4-1: config 0 descriptor?? [ 184.219344][ T1211] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 184.235539][ T1211] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.626677][ T1605] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 184.769980][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.805147][ T5920] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 184.836469][ T5920] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 184.851976][ T5920] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 184.864179][ T30] audit: type=1400 audit(1745454907.085:761): avc: denied { append } for pid=10453 comm="syz.1.1936" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 184.887635][ T5920] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 184.897538][ T5920] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 184.908151][ T30] audit: type=1400 audit(1745454907.085:762): avc: denied { map } for pid=10453 comm="syz.1.1936" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 184.931894][ T5920] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 184.941981][ T5920] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 184.952582][ T30] audit: type=1400 audit(1745454907.085:763): avc: denied { execute } for pid=10453 comm="syz.1.1936" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 184.978295][ T5920] usb 1-1: USB disconnect, device number 27 [ 185.042236][ T1605] usb 4-1: USB disconnect, device number 29 [ 185.169965][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 185.460211][ T1211] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 185.619993][ T30] audit: type=1326 audit(1745454907.825:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bb78e969 code=0x7fc00000 [ 185.620166][ T1211] usb 3-1: Using ep0 maxpacket: 32 [ 185.762947][ T1211] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.775999][ T30] audit: type=1400 audit(1745454907.985:765): avc: denied { setopt } for pid=10489 comm="syz.4.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.800506][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 185.809740][ T1211] usb 3-1: can't read configurations, error -71 [ 185.810026][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.099974][ T5950] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 186.209959][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.237207][ T30] audit: type=1326 audit(1745454908.445:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0bb78e969 code=0x7fc00000 [ 186.261080][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 186.268524][ T5950] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.276798][ T5950] usb 4-1: config 0 has no interface number 0 [ 186.284969][ T5950] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 186.294877][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.317608][ T5950] usb 4-1: Product: syz [ 186.324077][ T5950] usb 4-1: Manufacturer: syz [ 186.333134][ T5950] usb 4-1: SerialNumber: syz [ 186.345417][ T5950] usb 4-1: config 0 descriptor?? [ 186.355910][ T5950] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 186.365716][ T5950] usb 4-1: selecting invalid altsetting 1 [ 186.371685][ T5950] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 186.385408][ T5950] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.395828][ T5874] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 186.404620][ T5950] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 186.426552][ T5950] usb 4-1: media controller created [ 186.431883][ T30] audit: type=1400 audit(1745454908.635:767): avc: denied { attach_queue } for pid=10510 comm="syz.0.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 186.465166][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.553728][ T5874] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 186.565957][ T5950] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 186.573251][ T5950] zl10353_read_register: readreg error (reg=127, ret==-71) [ 186.580935][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.588953][ T5874] usb 5-1: Product: syz [ 186.602375][ T5950] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 186.619935][ T5874] usb 5-1: Manufacturer: syz [ 186.624562][ T5874] usb 5-1: SerialNumber: syz [ 186.644459][ T5874] usb 5-1: config 0 descriptor?? [ 186.670257][ T5950] usb 4-1: USB disconnect, device number 30 [ 186.849944][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.181334][ T5950] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 187.250051][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.352016][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 187.364828][ T5950] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 187.382771][ T5950] usb 1-1: config 0 has no interface number 0 [ 187.389013][ T5950] usb 1-1: config 0 interface 184 has no altsetting 0 [ 187.398939][ T5950] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 187.412329][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.422441][ T5950] usb 1-1: Product: syz [ 187.426655][ T5950] usb 1-1: Manufacturer: syz [ 187.433145][ T5950] usb 1-1: SerialNumber: syz [ 187.441663][ T5950] usb 1-1: config 0 descriptor?? [ 187.457187][ T5950] smsc75xx v1.0.0 [ 187.871687][ T5874] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 187.889955][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.891182][ T5874] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 187.926987][ T5874] asix 5-1:0.0: probe with driver asix failed with error -71 [ 187.950224][ T5874] usb 5-1: USB disconnect, device number 24 [ 188.061455][ T30] audit: type=1400 audit(1745454910.275:768): avc: denied { view } for pid=10563 comm="syz.3.1982" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 188.200429][T10572] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0î„&IØü [ 188.289949][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.501044][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 188.715447][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 188.736221][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 188.771302][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 188.790006][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 188.809137][ T5950] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 188.831238][ T5950] usb 1-1: USB disconnect, device number 28 [ 188.910389][T10607] kvm: user requested TSC rate below hardware speed [ 188.929970][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.940224][T10607] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 189.066202][ T30] audit: type=1400 audit(1745454911.275:769): avc: denied { accept } for pid=10612 comm="syz.4.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.263886][T10624] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2010'. [ 189.329980][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 189.355531][T10629] overlayfs: failed to clone upperpath [ 189.463929][ T30] audit: type=1400 audit(1745454911.675:770): avc: denied { listen } for pid=10636 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.483418][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.514640][ T30] audit: type=1400 audit(1745454911.705:771): avc: denied { accept } for pid=10636 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.534135][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.543877][ T1211] kernel read not supported for file /video37 (pid: 1211 comm: kworker/0:3) [ 189.851083][ T1211] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 189.899127][ T30] audit: type=1400 audit(1745454912.105:772): avc: denied { ioctl } for pid=10662 comm="syz.1.2024" path="socket:[31355]" dev="sockfs" ino=31355 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.970154][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.042696][ T1211] usb 5-1: Using ep0 maxpacket: 8 [ 190.055480][ T1211] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 190.073444][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.091648][ T1211] usb 5-1: Product: syz [ 190.095826][ T1211] usb 5-1: Manufacturer: syz [ 190.109947][ T1211] usb 5-1: SerialNumber: syz [ 190.131282][ T1211] usb 5-1: config 0 descriptor?? [ 190.163694][ T1211] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 190.370007][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.681260][ T5874] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 190.810461][ T30] audit: type=1400 audit(1745454913.015:773): avc: denied { read } for pid=10709 comm="syz.3.2045" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.833419][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.840628][ T30] audit: type=1400 audit(1745454913.015:774): avc: denied { open } for pid=10709 comm="syz.3.2045" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.864294][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 190.883164][ T5874] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 190.892323][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.911711][ T5834] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 190.918796][T10711] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 190.919451][ T5874] usb 2-1: config 0 descriptor?? [ 191.009956][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 191.168152][ T5874] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 191.398806][ T1211] gspca_sonixj: reg_w1 err -71 [ 191.410208][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.436325][T10734] netlink: 'syz.2.2053': attribute type 27 has an invalid length. [ 191.501537][ T1211] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 191.512358][ T1211] usb 5-1: USB disconnect, device number 25 [ 191.524146][ T30] audit: type=1400 audit(1745454913.735:775): avc: denied { accept } for pid=10737 comm="syz.2.2055" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 191.559309][T10716] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.574238][T10716] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.585625][T10716] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 191.598737][T10716] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.607777][T10716] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 191.617188][T10716] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.626651][T10716] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.633866][T10716] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.640251][T10716] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.657653][ T6959] ------------[ cut here ]------------ [ 191.663465][ T6959] refcount_t: underflow; use-after-free. [ 191.669282][ T6959] WARNING: CPU: 1 PID: 6959 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 191.678705][ T6959] Modules linked in: [ 191.682822][ T6959] CPU: 1 UID: 0 PID: 6959 Comm: kbnepd bnep0 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 191.695149][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.705226][ T6959] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 191.711391][ T6959] Code: ff 89 de e8 c8 71 eb fc 84 db 0f 85 66 ff ff ff e8 db 76 eb fc c6 05 9f d2 9e 0b 01 90 48 c7 c7 c0 11 f4 8b e8 37 05 ab fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 b8 76 eb fc 0f b6 1d 7a d2 9e 0b 31 [ 191.731241][ T6959] RSP: 0018:ffffc900034bf948 EFLAGS: 00010282 [ 191.737281][ T6959] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817adff8 [ 191.745512][ T6959] RDX: ffff8880310c2440 RSI: ffffffff817ae005 RDI: 0000000000000001 [ 191.753492][ T6959] RBP: ffff888034c64878 R08: 0000000000000001 R09: 0000000000000000 [ 191.761453][ T6959] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888025958000 [ 191.769397][ T6959] R13: ffff888034c64878 R14: ffffffff85fc6200 R15: 0000000000000000 [ 191.777377][ T6959] FS: 0000000000000000(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 191.786310][ T6959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.792964][ T6959] CR2: 0000001b2fd11ff8 CR3: 000000004a014000 CR4: 00000000003526f0 [ 191.800979][ T6959] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.808922][ T6959] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.816967][ T6959] Call Trace: [ 191.820242][ T6959] [ 191.823151][ T6959] klist_put+0x11b/0x1b0 [ 191.827559][ T6959] device_del+0x1d8/0x9f0 [ 191.831892][ T6959] ? __pfx_device_del+0x10/0x10 [ 191.836719][ T6959] ? netdev_unregister_kobject+0x2da/0x540 [ 191.842521][ T6959] unregister_netdevice_many_notify+0x1904/0x26f0 [ 191.848922][ T6959] ? rcu_is_watching+0x12/0xc0 [ 191.853689][ T6959] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 191.860441][ T6959] ? rtnl_net_dev_lock+0x146/0x360 [ 191.865527][ T6959] ? __pfx___mutex_lock+0x10/0x10 [ 191.870555][ T6959] unregister_netdevice_queue+0x305/0x3f0 [ 191.876248][ T6959] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 191.882485][ T6959] ? rtnl_net_dev_lock+0x28/0x360 [ 191.887482][ T6959] ? rtnl_net_dev_lock+0x146/0x360 [ 191.892592][ T6959] ? rtnl_lock+0x9/0x20 [ 191.896718][ T6959] ? rtnl_net_dev_lock+0x146/0x360 [ 191.901811][ T6959] unregister_netdev+0x1f/0x60 [ 191.906547][ T6959] bnep_session+0x224e/0x2d80 [ 191.911222][ T6959] ? __pfx_bnep_session+0x10/0x10 [ 191.916220][ T6959] ? do_raw_spin_lock+0x12c/0x2b0 [ 191.921238][ T6959] ? __pfx_woken_wake_function+0x10/0x10 [ 191.926985][ T6959] ? rcu_is_watching+0x12/0xc0 [ 191.931798][ T6959] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 191.937587][ T6959] ? lockdep_hardirqs_on+0x7c/0x110 [ 191.942779][ T6959] ? __kthread_parkme+0x19e/0x250 [ 191.947785][ T6959] ? __pfx_bnep_session+0x10/0x10 [ 191.952813][ T6959] kthread+0x3c2/0x780 [ 191.956854][ T6959] ? __pfx_kthread+0x10/0x10 [ 191.961430][ T6959] ? __pfx_kthread+0x10/0x10 [ 191.965991][ T6959] ? __pfx_kthread+0x10/0x10 [ 191.970576][ T6959] ? __pfx_kthread+0x10/0x10 [ 191.975138][ T6959] ? rcu_is_watching+0x12/0xc0 [ 191.979876][ T6959] ? __pfx_kthread+0x10/0x10 [ 191.984459][ T6959] ret_from_fork+0x45/0x80 [ 191.988847][ T6959] ? __pfx_kthread+0x10/0x10 [ 191.993422][ T6959] ret_from_fork_asm+0x1a/0x30 [ 191.998169][ T6959] [ 192.001178][ T6959] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.008426][ T6959] CPU: 1 UID: 0 PID: 6959 Comm: kbnepd bnep0 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 192.020540][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.030563][ T6959] Call Trace: [ 192.033813][ T6959] [ 192.036715][ T6959] dump_stack_lvl+0x3d/0x1f0 [ 192.041278][ T6959] panic+0x71c/0x800 [ 192.045143][ T6959] ? __pfx_panic+0x10/0x10 [ 192.049527][ T6959] ? show_trace_log_lvl+0x29b/0x3e0 [ 192.054700][ T6959] ? check_panic_on_warn+0x1f/0xb0 [ 192.059783][ T6959] ? refcount_warn_saturate+0x14a/0x210 [ 192.065299][ T6959] check_panic_on_warn+0xab/0xb0 [ 192.070205][ T6959] __warn+0xf6/0x3c0 [ 192.074068][ T6959] ? refcount_warn_saturate+0x14a/0x210 [ 192.079582][ T6959] report_bug+0x3c3/0x580 [ 192.083883][ T6959] ? refcount_warn_saturate+0x14a/0x210 [ 192.089398][ T6959] handle_bug+0x184/0x210 [ 192.093701][ T6959] exc_invalid_op+0x17/0x50 [ 192.098178][ T6959] asm_exc_invalid_op+0x1a/0x20 [ 192.102996][ T6959] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 192.109119][ T6959] Code: ff 89 de e8 c8 71 eb fc 84 db 0f 85 66 ff ff ff e8 db 76 eb fc c6 05 9f d2 9e 0b 01 90 48 c7 c7 c0 11 f4 8b e8 37 05 ab fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 b8 76 eb fc 0f b6 1d 7a d2 9e 0b 31 [ 192.128704][ T6959] RSP: 0018:ffffc900034bf948 EFLAGS: 00010282 [ 192.134740][ T6959] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817adff8 [ 192.142680][ T6959] RDX: ffff8880310c2440 RSI: ffffffff817ae005 RDI: 0000000000000001 [ 192.150623][ T6959] RBP: ffff888034c64878 R08: 0000000000000001 R09: 0000000000000000 [ 192.158565][ T6959] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888025958000 [ 192.166515][ T6959] R13: ffff888034c64878 R14: ffffffff85fc6200 R15: 0000000000000000 [ 192.174462][ T6959] ? __pfx_klist_children_put+0x10/0x10 [ 192.179980][ T6959] ? __warn_printk+0x198/0x350 [ 192.184712][ T6959] ? __warn_printk+0x1a5/0x350 [ 192.189445][ T6959] ? refcount_warn_saturate+0x149/0x210 [ 192.194959][ T6959] klist_put+0x11b/0x1b0 [ 192.199175][ T6959] device_del+0x1d8/0x9f0 [ 192.203479][ T6959] ? __pfx_device_del+0x10/0x10 [ 192.208304][ T6959] ? netdev_unregister_kobject+0x2da/0x540 [ 192.214086][ T6959] unregister_netdevice_many_notify+0x1904/0x26f0 [ 192.220475][ T6959] ? rcu_is_watching+0x12/0xc0 [ 192.225210][ T6959] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 192.231948][ T6959] ? rtnl_net_dev_lock+0x146/0x360 [ 192.237030][ T6959] ? __pfx___mutex_lock+0x10/0x10 [ 192.242032][ T6959] unregister_netdevice_queue+0x305/0x3f0 [ 192.247724][ T6959] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 192.253952][ T6959] ? rtnl_net_dev_lock+0x28/0x360 [ 192.258968][ T6959] ? rtnl_net_dev_lock+0x146/0x360 [ 192.264170][ T6959] ? rtnl_lock+0x9/0x20 [ 192.268305][ T6959] ? rtnl_net_dev_lock+0x146/0x360 [ 192.273397][ T6959] unregister_netdev+0x1f/0x60 [ 192.278139][ T6959] bnep_session+0x224e/0x2d80 [ 192.282810][ T6959] ? __pfx_bnep_session+0x10/0x10 [ 192.287810][ T6959] ? do_raw_spin_lock+0x12c/0x2b0 [ 192.292808][ T6959] ? __pfx_woken_wake_function+0x10/0x10 [ 192.298417][ T6959] ? rcu_is_watching+0x12/0xc0 [ 192.303151][ T6959] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 192.308937][ T6959] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.314123][ T6959] ? __kthread_parkme+0x19e/0x250 [ 192.319122][ T6959] ? __pfx_bnep_session+0x10/0x10 [ 192.324118][ T6959] kthread+0x3c2/0x780 [ 192.328158][ T6959] ? __pfx_kthread+0x10/0x10 [ 192.332715][ T6959] ? __pfx_kthread+0x10/0x10 [ 192.337273][ T6959] ? __pfx_kthread+0x10/0x10 [ 192.341837][ T6959] ? __pfx_kthread+0x10/0x10 [ 192.346409][ T6959] ? rcu_is_watching+0x12/0xc0 [ 192.351160][ T6959] ? __pfx_kthread+0x10/0x10 [ 192.355732][ T6959] ret_from_fork+0x45/0x80 [ 192.360129][ T6959] ? __pfx_kthread+0x10/0x10 [ 192.364694][ T6959] ret_from_fork_asm+0x1a/0x30 [ 192.369444][ T6959] [ 193.429255][ T6959] Shutting down cpus with NMI [ 193.434140][ T6959] Kernel Offset: disabled [ 193.438440][ T6959] Rebooting in 86400 seconds..