last executing test programs: 25.056278943s ago: executing program 1 (id=1867): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="2cde", 0x2) 25.002494311s ago: executing program 1 (id=1868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x4, 0x57]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 24.580272242s ago: executing program 1 (id=1871): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x558410e9) 24.328293902s ago: executing program 1 (id=1877): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x9f22) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 24.044233226s ago: executing program 1 (id=1880): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x42982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSBRK(r0, 0x5427) 22.75613478s ago: executing program 4 (id=1900): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0x5c) 22.754567843s ago: executing program 0 (id=1901): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x4}) 22.71869745s ago: executing program 2 (id=1902): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x54, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) 22.652153303s ago: executing program 0 (id=1903): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) write$tun(r1, &(0x7f0000000180)={@void, @void, @mpls={[], @llc={@snap={0xaa, 0xaa, '*', "5912f5", 0x8}}}}, 0x8) 22.643308863s ago: executing program 4 (id=1904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000001c0)=0x1) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="3f2826bd15"], 0xfdef) 22.551074241s ago: executing program 0 (id=1906): socket$packet(0x11, 0x3, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 22.55097849s ago: executing program 2 (id=1907): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close(0x3) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 22.482085764s ago: executing program 2 (id=1908): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 22.467724217s ago: executing program 4 (id=1910): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22.14142119s ago: executing program 3 (id=1911): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\xa9\x06\x00\x00\x00\b\x00\x00'}, 0x1d, r0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 22.126342448s ago: executing program 0 (id=1912): bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c050003"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 22.013838657s ago: executing program 3 (id=1913): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000000)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x101042, 0x9d) write(r0, &(0x7f00000005c0)="1f0102030405060708090a0b0c0d0e0f101112", 0x13) 22.012326105s ago: executing program 0 (id=1914): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 21.839111715s ago: executing program 0 (id=1915): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r0, &(0x7f00000024c0)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) 21.837577094s ago: executing program 3 (id=1916): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 21.674678893s ago: executing program 3 (id=1917): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000040)=0x312) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f00000000c0)=0x312) 21.672992006s ago: executing program 4 (id=1918): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 21.632001785s ago: executing program 2 (id=1919): r0 = timerfd_create(0x8, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x2, 0x0, 0x5a6c103, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x4}) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) 21.564256713s ago: executing program 4 (id=1920): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240)) 21.518889974s ago: executing program 3 (id=1921): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b80), 0x101000, 0x0) close(r0) 21.479443497s ago: executing program 2 (id=1931): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="68dd", 0x2}], 0x1) 21.478211094s ago: executing program 3 (id=1922): socket$packet(0x11, 0x3, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 21.43206965s ago: executing program 4 (id=1923): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 21.431865049s ago: executing program 2 (id=1924): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r0, &(0x7f0000001280)=[{&(0x7f0000000280)="1eb3b309e1d7a62173048620b7c9e64c4bcd84af1d4d1e642281a6f18cdd1330c095b74bdd3ea73c10949c7b1f99fd6a0c274a34ffd75b537a3b151d6736850b4cda1cab4ec785ef79467d083ce13dc15987e2c31faf17fc26ee4532023a8014d7669cdc67502c3d9603701349580e7c172d4e28441af716acb9dd2af2cf7642471a7034d7b74b0f96ad7a563bc1a4d2ab8254940b52d24a6cea0dc6915c33c19bafd1d9c6feb64ef0053ac9befdd9467645053336182efe65a3a3e7118426f3ed12e33e97b668d05d4b5ea020dae780d4f52c38f03eb4641fea13724137250c3ac6401ca2d9dbe9db6bcc933069735680c609add28bf39801c76590a18754e7ff120cb220b9d5737defd19db91f8f58061760b8c1f0f10dc5fad4d29cc17aa9aed27bf0f2ab3071f596adaad2cabf4758895011d47945f2ae98cec1266f8f5dc006f2b09210534df4b237c866a0c41a0080f7633575671edaa0b6d3b5195ac2fce94eb6344c6c264a43ec42f201944dda7b80167fdee08e4119634bb31d3754098f2fa2fbfe5585e82d2e7e851e6001fb1ba3d8200a5c5db3e53532fdac05d112b86edb151cb122f00f25c9c64d3ccb38f0983fbe17161490ec0f539e0a2d7197087ae68bbdd1b1e319ff0f25a220af3f353fce7aeb87dea47ceeefacb2a9a7d5e52b72d55e7019584409feb697a8f061f6b1e4958f0d865376117849d303c4c1df327035940377a423bac7fe9926c097d94175112dbb05eb41e974d6c6c14e1737967dbd4ea3f8f369433a51789be20d935b042b12a8e4a6fa41ea0f8f5e4da5328021a7599c3c87b86269d9091b6bab29752036c3710dc9d216d3d739a1e3ceb38ad83bdc96db2260c06e9d9c66a59080986c0352b18fa8f134791f053155e292c75e55261af123de9482e5b187447c53c32e795651cfc0fe4b95b40b2aacdb17c7f29fa5f9d5a431ed71133a6d5e58f47b8e8a2c18d8103641270347621432d4ccff8feb55ac18000058abac86459fe630be0183d37d6bc143f2df9be567c9af6a1685c5fa1e8b1fd229b15085542a2a7a37c4a7a8dd04660b9a5aea58449f33cf77e24cdefd8b8d3fcf7523197909c71368896392681b480acc4b258c13d27a17d92b7afe195049e10a4fbe469643446f86bc72b3c2e206dc85717684d6a94daffede06fc8350728d715483e6df13aee053ad9af29d04ec4803f12ef01a7db8db96da0c37effc9a6fd0f36691a8fa2f6c4bc82de95cd5f7335d30174514780c718b1734c4a726559c0743de4d89de33a49bd79b18c98af19fbbf2740f474b6f03563ecca44581f8c6b13579252a2dd37bfc6707c4d3755a04a38b6dfd6a47a7aaafdbf753631cfd78332998943d90b3eb4bde707997c67b4bb476e3018fd4ce882cbc5608bbab9940c9113f9ce0836c888b20e123ae03c151cfd5b622970c", 0x401}], 0x1, 0x43, 0x3) 0s ago: executing program 1 (id=1925): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x40c0) kernel console output (not intermixed with test programs): '. [ 80.099197][ T6573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.205281][ T6577] GUP no longer grows the stack in syz.0.362 (6577): 200000004000-200000005000 (200000001000) [ 80.205313][ T6577] CPU: 0 UID: 0 PID: 6577 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(full) [ 80.205333][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 80.205343][ T6577] Call Trace: [ 80.205349][ T6577] [ 80.205356][ T6577] dump_stack_lvl+0x100/0x190 [ 80.205396][ T6577] gup_vma_lookup.cold+0x83/0x96 [ 80.205426][ T6577] __get_user_pages+0x252/0x2c30 [ 80.205455][ T6577] ? lock_acquire+0x1d1/0x380 [ 80.205482][ T6577] ? __pfx___get_user_pages+0x10/0x10 [ 80.205506][ T6577] ? lock_acquire+0x1d1/0x380 [ 80.205527][ T6577] ? __pfx_down_read_killable+0x10/0x10 [ 80.205562][ T6577] __gup_longterm_locked+0x87d/0x16f0 [ 80.205596][ T6577] ? __pfx___gup_longterm_locked+0x10/0x10 [ 80.205622][ T6577] ? lock_acquire+0x1d1/0x380 [ 80.205642][ T6577] ? gup_fast_fallback+0x946/0x2790 [ 80.205677][ T6577] gup_fast_fallback+0x16dc/0x2790 [ 80.205722][ T6577] ? __pfx_gup_fast_fallback+0x10/0x10 [ 80.205750][ T6577] ? __lock_acquire+0x5c0/0x1f40 [ 80.205775][ T6577] ? rcu_is_watching+0x13/0xc0 [ 80.205804][ T6577] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 80.205832][ T6577] get_user_pages_fast+0xa7/0xf0 [ 80.205858][ T6577] ? __pfx_get_user_pages_fast+0x10/0x10 [ 80.205882][ T6577] ? lock_acquire+0x1d1/0x380 [ 80.205902][ T6577] ? pipe_lock+0x69/0x80 [ 80.205932][ T6577] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 80.205960][ T6577] ? __mutex_lock+0x26c/0x1bd0 [ 80.205981][ T6577] ? pipe_lock+0x69/0x80 [ 80.206008][ T6577] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 80.206033][ T6577] ? __pfx___mutex_lock+0x10/0x10 [ 80.206054][ T6577] ? __fget_files+0x34/0x3d0 [ 80.206080][ T6577] ? import_ubuf+0x1b6/0x220 [ 80.206110][ T6577] iov_iter_get_pages2+0xa3/0x100 [ 80.206133][ T6577] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 80.206157][ T6577] ? wait_for_space+0x2ca/0x3b0 [ 80.206189][ T6577] __do_sys_vmsplice+0x7dd/0x13c0 [ 80.206224][ T6577] ? __pfx_futex_hash+0x10/0x10 [ 80.206251][ T6577] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 80.206287][ T6577] ? __pfx_futex_wait+0x10/0x10 [ 80.206352][ T6577] ? do_syscall_64+0x123/0x790 [ 80.206373][ T6577] do_syscall_64+0x123/0x790 [ 80.206402][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.206422][ T6577] RIP: 0033:0x7f2a5e99e1d9 [ 80.206438][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.206456][ T6577] RSP: 002b:00007f2a5f8cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 80.206476][ T6577] RAX: ffffffffffffffda RBX: 00007f2a5ec25fa0 RCX: 00007f2a5e99e1d9 [ 80.206490][ T6577] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 80.206501][ T6577] RBP: 00007f2a5ea35888 R08: 0000000000000000 R09: 0000000000000000 [ 80.206513][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.206524][ T6577] R13: 00007f2a5ec26038 R14: 00007f2a5ec25fa0 R15: 00007fffcfaf57c8 [ 80.206551][ T6577] [ 80.417152][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 80.417183][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 80.543248][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.543909][ T268] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.543941][ T268] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.543969][ T268] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.595484][ T6592] Bluetooth: MGMT ver 1.23 [ 80.684079][ T6596] rnbd_client L127: Can't parse path i: -93 [ 80.709516][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.368'. [ 80.977581][ T6613] bq24190-charger 0-006b: No support for SMBUS_BYTE_DATA [ 80.986467][ T6613] i2c i2c-0: new_device: Instantiated device bq24190 at 0x6b [ 81.162694][ T6627] : renamed from vlan0 (while UP) [ 81.227937][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 81.227954][ T31] audit: type=1400 audit(1791498746.252:393): avc: denied { setopt } for pid=6628 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.388048][ T6640] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 81.388048][ T6640] The task syz.4.386 (6640) triggered the difference, watch for misbehavior. [ 81.513331][ T31] audit: type=1400 audit(1791498746.542:394): avc: denied { read } for pid=6651 comm="syz.3.394" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.513379][ T31] audit: type=1400 audit(1791498746.542:395): avc: denied { open } for pid=6651 comm="syz.3.394" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.514156][ T31] audit: type=1400 audit(1791498746.542:396): avc: denied { ioctl } for pid=6651 comm="syz.3.394" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.602378][ T6654] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.395' sets config #0 [ 81.602537][ T6654] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.395' sets config #1 [ 81.724935][ T6664] warning: `syz.0.400' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.724935][ T31] audit: type=1400 audit(1791498746.752:397): avc: denied { ioctl } for pid=6662 comm="syz.0.400" path="socket:[12849]" dev="sockfs" ino=12849 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.076356][ T6687] input: syz0 as /devices/virtual/input/input13 [ 82.327263][ T6705] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.389416][ T31] audit: type=1400 audit(1791498747.422:398): avc: denied { setopt } for pid=6707 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.391506][ T31] audit: type=1400 audit(1791498747.422:399): avc: denied { getopt } for pid=6707 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.465193][ T6712] 6 [ 82.465750][ T31] audit: type=1400 audit(1791498747.492:400): avc: denied { write } for pid=6711 comm="syz.2.423" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 82.514392][ T31] audit: type=1400 audit(1791498747.542:401): avc: denied { map } for pid=6713 comm="syz.3.424" path="/82/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 82.515992][ T31] audit: type=1400 audit(1791498747.542:402): avc: denied { execute } for pid=6713 comm="syz.3.424" path="/82/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 82.743910][ T6732] ip_tables: iptables: counters copy to user failed while replacing table [ 82.794313][ T5724] kernel write not supported for file /ppp (pid: 5724 comm: kworker/1:8) [ 82.883885][ T6739] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 82.883908][ T6739] netlink: 'syz.0.436': attribute type 2 has an invalid length. [ 83.013520][ T6750] loop9: detected capacity change from 0 to 524287998 [ 83.017320][ T6751] vivid-001: disconnect [ 83.018775][ T6749] vivid-001: reconnect [ 83.928763][ T6799] __nla_validate_parse: 2 callbacks suppressed [ 83.928788][ T6799] netlink: 96 bytes leftover after parsing attributes in process `syz.2.464'. [ 84.018776][ T6801] 9p: Bad value for 'rfdno' [ 84.466903][ T5724] wiimote 0005:057E:0306.0003: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 84.485703][ T5724] wiimote 0005:057E:0306.0003: New device registered [ 84.661319][ T6837] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.699860][ T56] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.746092][ T6843] veth1_to_bond: entered allmulticast mode [ 84.746259][ T6843] veth1_to_bond: left allmulticast mode [ 84.851830][ T56] usb 2-1: Using ep0 maxpacket: 8 [ 84.856215][ T56] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 84.856874][ T56] usb 2-1: config 0 has no interfaces? [ 84.863265][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.863286][ T56] usb 2-1: Product: syz [ 84.863298][ T56] usb 2-1: Manufacturer: syz [ 84.863310][ T56] usb 2-1: SerialNumber: syz [ 84.867649][ T56] usb 2-1: config 0 descriptor?? [ 85.096810][ T6822] wiimote 0005:057E:0306.0003: Unhandled report 32 size 2 [ 85.098500][ T56] usb 2-1: USB disconnect, device number 4 [ 85.113490][ T6860] kAFS: bad VL server IP address [ 85.114176][ T6821] wiimote 0005:057E:0306.0003: Device removed [ 85.376535][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 85.529434][ T5724] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 85.539819][ T5702] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.593811][ T5724] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input15 [ 85.638213][ T5724] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input16 [ 85.663837][ T5724] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input14 [ 85.709242][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 85.711877][ T5702] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 85.714367][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.730193][ T5702] pvrusb2: Hardware description: Terratec Grabster AV400 [ 85.730207][ T5702] pvrusb2: ********** [ 85.730212][ T5702] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 85.730220][ T5702] pvrusb2: Important functionality might not be entirely working. [ 85.730226][ T5702] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 85.730234][ T5702] pvrusb2: ********** [ 85.930615][ T2345] pvrusb2: Invalid write control endpoint [ 86.001552][ T2345] pvrusb2: Invalid write control endpoint [ 86.001566][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 86.001574][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 86.001580][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 86.001587][ T2345] pvrusb2: Device being rendered inoperable [ 86.003771][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 86.003812][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 86.006030][ T2345] pvrusb2: Attached sub-driver cx25840 [ 86.006041][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 86.006049][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 86.134757][ T6872] pvrusb2: Attempted to execute control transfer when device not ok [ 86.137491][ T9] usb 5-1: USB disconnect, device number 4 [ 86.444602][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 86.469434][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 86.734069][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 86.734089][ T31] audit: type=1400 audit(1791498751.762:427): avc: denied { create } for pid=6926 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.774930][ T31] audit: type=1400 audit(1791498751.802:428): avc: denied { accept } for pid=6926 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.112100][ T31] audit: type=1400 audit(1791498752.142:429): avc: denied { append } for pid=6939 comm="syz.0.528" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.261398][ T31] audit: type=1400 audit(1791498752.292:430): avc: denied { create } for pid=6943 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 87.277304][ T31] audit: type=1400 audit(1791498752.302:431): avc: denied { ioctl } for pid=6943 comm="syz.0.530" path="socket:[14118]" dev="sockfs" ino=14118 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 87.290762][ T31] audit: type=1400 audit(1791498752.322:432): avc: denied { bind } for pid=6943 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 87.420110][ T31] audit: type=1400 audit(1791498752.452:433): avc: denied { sqpoll } for pid=6949 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.629956][ T5702] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.693804][ T6967] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 87.722838][ T31] audit: type=1400 audit(1791498752.752:434): avc: denied { read write } for pid=6969 comm="syz.4.542" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 87.724822][ T31] audit: type=1400 audit(1791498752.752:435): avc: denied { open } for pid=6969 comm="syz.4.542" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 87.729139][ T31] audit: type=1400 audit(1791498752.752:436): avc: denied { ioctl } for pid=6969 comm="syz.4.542" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 87.780805][ T5702] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 87.781710][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.781731][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.781757][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.787315][ T5702] usb 1-1: config 0 descriptor?? [ 87.917783][ T6978] sch_fq: defrate 0 ignored. [ 88.074054][ T6988] loop9: detected capacity change from 0 to 524156864 [ 88.160172][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 88.160193][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 88.160204][ T6992] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 88.160218][ T6992] iwpm_mapping_info_cb: Unable to parse nlmsg [ 88.195743][ T6994] binder: binder_mmap: 6993 200000ffe000-200001000000 bad vm_flags failed -1 [ 88.227898][ T5702] hid_parser_main: 1 callbacks suppressed [ 88.227919][ T5702] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.227942][ T5702] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.227962][ T5702] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.227981][ T5702] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.227999][ T5702] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.228017][ T5702] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.228035][ T5702] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.248845][ T5702] arvo 0003:1E7D:30D4.0004: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 88.314753][ T7000] dyndbg: bad flag-op , at start of [ 88.314771][ T7000] dyndbg: flags parse failed [ 88.421471][ T5702] arvo 0003:1E7D:30D4.0004: couldn't init struct arvo_device [ 88.421518][ T5702] arvo 0003:1E7D:30D4.0004: couldn't install keyboard [ 88.428255][ T5702] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -32 [ 88.438383][ T5702] usb 1-1: USB disconnect, device number 3 [ 88.659169][ T268] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.758932][ T7024] nvme_fcloop: unknown parameter or missing value 'ww' [ 89.030424][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.031197][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.031290][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.031319][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.053699][ T7049] scsi_dev_info_list_add_str: bad dev info string 'Mꇋ8KH,P}/(a&WCa8(Au6c1كXPwe$XPK5'R X7R.]O\kekөopґ 0[{L;ȧ0GIq6?Uq9mߣ7``0I3ŵ' '' '' [ 89.952812][ T7115] capability: warning: `syz.4.609' uses deprecated v2 capabilities in a way that may be insecure [ 90.089167][ T5723] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.163586][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.612'. [ 90.163607][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.612'. [ 90.163619][ T7122] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 90.163633][ T7122] iwpm_hello_cb: Unable to parse nlmsg [ 90.280651][ T5723] usb 4-1: Using ep0 maxpacket: 8 [ 90.282625][ T5723] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 90.285213][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.285235][ T5723] usb 4-1: Product: syz [ 90.285249][ T5723] usb 4-1: Manufacturer: syz [ 90.285263][ T5723] usb 4-1: SerialNumber: syz [ 90.326559][ T5723] usb 4-1: config 0 descriptor?? [ 90.538263][ T5723] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 91.141840][ T5723] usb write operation failed. (-71) [ 91.147812][ T5723] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 91.148444][ T5723] dvbdev: DVB: registering new adapter (Terratec H7) [ 91.148475][ T5723] usb 4-1: media controller created [ 91.148737][ T5723] usb read operation failed. (-71) [ 91.154789][ T5723] usb write operation failed. (-71) [ 91.189774][ T5723] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 91.191777][ T5723] usb 4-1: USB disconnect, device number 3 [ 93.422027][ T7175] mmap: syz.3.627 (7175) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.457391][ T7176] netlink: 56 bytes leftover after parsing attributes in process `syz.1.633'. [ 93.509081][ T5777] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.660366][ T5777] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 93.661948][ T5777] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.661976][ T5777] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.661998][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.662028][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.672797][ T5777] usb 3-1: config 0 descriptor?? [ 93.898948][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 93.899003][ T31] audit: type=1400 audit(1791498758.922:451): avc: denied { append } for pid=7186 comm="syz.1.640" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.005768][ T31] audit: type=1400 audit(1791498759.032:452): avc: denied { name_connect } for pid=7190 comm="syz.0.642" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 94.087838][ T5777] usbhid 3-1:0.0: can't add hid device: -71 [ 94.087917][ T5777] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 94.092004][ T5777] usb 3-1: USB disconnect, device number 2 [ 94.190963][ T31] audit: type=1400 audit(1791498759.222:453): avc: denied { ioctl } for pid=7195 comm="syz.3.644" path="socket:[15662]" dev="sockfs" ino=15662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.249393][ T7200] netlink: 43 bytes leftover after parsing attributes in process `syz.4.646'. [ 94.395958][ T31] audit: type=1400 audit(1791498759.422:454): avc: denied { create } for pid=7212 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.418436][ T31] audit: type=1400 audit(1791498759.432:455): avc: denied { bind } for pid=7212 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.418482][ T31] audit: type=1400 audit(1791498759.442:456): avc: denied { write } for pid=7212 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.513801][ T7217] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input17 [ 94.868170][ T7229] ftl_cs: FTL header not found. [ 94.972368][ T31] audit: type=1400 audit(1791498760.002:457): avc: denied { node_bind } for pid=7243 comm="syz.2.666" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 95.078849][ T7229] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 95.234376][ T7259] ./dev/sda1: Can't open blockdev [ 95.501029][ T31] audit: type=1400 audit(1791498760.532:458): avc: denied { setopt } for pid=7269 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.534646][ T31] audit: type=1400 audit(1791498760.562:459): avc: denied { getopt } for pid=7268 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.633524][ T31] audit: type=1400 audit(1791498760.662:460): avc: denied { listen } for pid=7275 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.159683][ T5724] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.309964][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 96.310575][ T5724] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 96.311439][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.358195][ T5724] usb 4-1: config 0 descriptor?? [ 96.456016][ T9] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0 [ 96.456047][ T9] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0 [ 96.456065][ T9] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0 [ 96.456083][ T9] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0 [ 96.456101][ T9] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0 [ 96.457359][ T9] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0 [ 96.457379][ T9] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0 [ 96.457395][ T9] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0 [ 96.457412][ T9] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0 [ 96.457429][ T9] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0 [ 96.599200][ T5724] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 96.641783][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.644219][ T5724] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 96.644255][ T5724] usb 4-1: media controller created [ 96.696009][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.753810][ T7319] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.819769][ T5724] az6027: usb out operation failed. (-71) [ 96.821198][ T5724] az6027: usb out operation failed. (-71) [ 96.821211][ T5724] stb0899_attach: Driver disabled by Kconfig [ 96.821220][ T5724] az6027: no front-end attached [ 96.821220][ T5724] [ 96.822609][ T5724] az6027: usb out operation failed. (-71) [ 96.822622][ T5724] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 96.824906][ T5724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 96.828042][ T5724] dvb-usb: schedule remote query interval to 400 msecs. [ 96.828058][ T5724] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 96.896629][ T5724] usb 4-1: USB disconnect, device number 4 [ 96.980566][ T5695] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 97.048947][ T5724] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 97.144074][ T5695] usb 3-1: not running at top speed; connect to a high speed hub [ 97.144107][ T5695] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 97.149885][ T5695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.149932][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.183062][ T5695] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 97.579971][ T5695] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 97.582000][ T5695] uvcvideo 3-1:1.1: No frame descriptor found for the default format. [ 97.582016][ T5695] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 97.583568][ T5695] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -22 [ 97.634435][ T9] hid-generic 0005:0B57:4155.0005: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 97.709621][ T7354] fido_id[7354]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 97.785571][ T5695] usb 3-1: USB disconnect, device number 3 [ 98.714595][ T7389] ima: policy update failed [ 98.789068][ T5724] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.939862][ T5724] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 98.940772][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 98.940800][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 98.940831][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.943913][ T5724] usb 2-1: config 0 descriptor?? [ 99.395742][ T5724] hid-steelseries-arctis 0003:1038:12C2.0006: hidraw0: USB HID v0.00 Device [HID 1038:12c2] on usb-dummy_hcd.1-1/input0 [ 99.613386][ T5777] usb 2-1: USB disconnect, device number 5 [ 99.734872][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 99.734891][ T31] audit: type=1400 audit(1791498764.762:467): avc: denied { setopt } for pid=7437 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 99.735565][ T31] audit: type=1400 audit(1791498764.762:468): avc: denied { bind } for pid=7437 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 99.865929][ T7447] RDS: rds_bind could not find a transport for ::1200:0, load rds_tcp or rds_rdma? [ 99.979804][ T5724] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.136142][ T5724] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 100.138370][ T5724] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.138408][ T5724] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.138428][ T5724] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.138448][ T5724] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.138481][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.284573][ T31] audit: type=1400 audit(1791498765.312:469): avc: denied { ioctl } for pid=7461 comm="syz.4.766" path="socket:[16782]" dev="sockfs" ino=16782 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.379323][ T56] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 100.531607][ T56] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 100.536537][ T56] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 100.536561][ T56] usb 1-1: config 0 has no interface number 0 [ 100.536595][ T56] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.536614][ T56] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 100.536655][ T56] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 100.536675][ T56] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 100.536697][ T56] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 100.536717][ T56] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.536749][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.543486][ T56] usb 1-1: config 0 descriptor?? [ 100.544692][ T7460] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.544799][ T7460] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.579437][ T56] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 100.778685][ T5724] gud 3-1:1.0: Failed to add properties (error=-5) [ 100.778714][ T5724] gud 3-1:1.0: probe with driver gud failed with error -5 [ 100.830093][ T25] usb 1-1: USB disconnect, device number 4 [ 100.849740][ T25] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 100.991522][ T5724] usb 3-1: USB disconnect, device number 4 [ 101.047942][ T7489] block2mtd: illegal erase size [ 101.301378][ T31] audit: type=1400 audit(1791498766.332:470): avc: denied { setopt } for pid=7508 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.485246][ T31] audit: type=1400 audit(1791498766.512:471): avc: denied { shutdown } for pid=7518 comm="syz.3.792" laddr=fe80::14 lport=33592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.656966][ T7536] netlink: ct_mark mask cannot be 0 [ 101.656993][ T7536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.658281][ T7536] netlink: ct_mark mask cannot be 0 [ 101.658300][ T7536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.671713][ T31] audit: type=1807 audit(1791498766.692:472): action=appraise func=MO res=0 [ 101.671751][ T31] audit: type=1802 audit(1791498766.692:473): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.3.796" res=0 errno=0 [ 101.692866][ T7531] ima: policy update failed [ 101.693173][ T31] audit: type=1802 audit(1791498766.722:474): pid=7531 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.796" res=0 errno=0 [ 101.761109][ T7539] overlayfs: missing 'lowerdir' [ 101.798929][ T7540] ubi0: attaching mtd1 [ 101.807161][ T7540] ubi0: scanning is finished [ 101.807179][ T7540] ubi0: empty MTD device detected [ 101.807519][ T7540] ubi0 error: ubi_early_get_peb: no free eraseblocks [ 101.855510][ T7546] macvlan0: entered promiscuous mode [ 101.855825][ T7546] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 101.855839][ T7546] netlink: 'syz.3.804': attribute type 2 has an invalid length. [ 101.858055][ T31] audit: type=1400 audit(1791498766.882:475): avc: denied { watch } for pid=7548 comm="syz.1.806" path="/124/file0" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.987964][ T7540] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28 [ 102.041263][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 102.155359][ T31] audit: type=1400 audit(1791498767.182:476): avc: denied { mount } for pid=7567 comm="syz.1.815" name="/" dev="pstore" ino=4190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 102.375312][ T7579] kAFS: bad VL server IP address [ 102.766375][ T7612] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 102.944542][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.840'. [ 102.944579][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.840'. [ 103.040307][ T5695] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.200438][ T5695] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 103.201337][ T5695] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 103.201363][ T5695] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.201382][ T5695] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 103.201414][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.218824][ T7610] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 103.278560][ T5695] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 103.295617][ T5695] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 103.445780][ T25] usb 5-1: USB disconnect, device number 5 [ 103.453709][ T25] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 103.454230][ T25] cyberjack 5-1:1.0: device disconnected [ 103.954118][ T7684] netlink: 'syz.3.868': attribute type 2 has an invalid length. [ 103.970631][ T7686] ip_tables: iptables: counters copy to user failed while replacing table [ 104.129089][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.289132][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 104.299853][ T9] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 104.316136][ T9] usb 2-1: config index 0 descriptor too short (expected 1060, got 36) [ 104.316192][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.316216][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.316236][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.316270][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.327932][ T9] usb 2-1: config 0 descriptor?? [ 104.354663][ T7712] ubi0: attaching mtd1 [ 104.360872][ T7712] ubi0: scanning is finished [ 104.360888][ T7712] ubi0: empty MTD device detected [ 104.361078][ T7712] ubi0 error: ubi_early_get_peb: no free eraseblocks [ 104.432057][ T7712] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28 [ 105.119058][ T5695] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.154291][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 105.154317][ T31] audit: type=1400 audit(1791498770.182:481): avc: denied { write } for pid=7765 comm="syz.2.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 105.156627][ T9] sony 0003:1345:3008.0007: can't set operational mode: step 1 [ 105.156667][ T9] sony 0003:1345:3008.0007: Failed to set controller into operational mode [ 105.200148][ T5777] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 105.221124][ T9] sony 0003:1345:3008.0007: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.1-1/input0 [ 105.221153][ T9] sony 0003:1345:3008.0007: failed to claim input [ 105.258288][ T9] usb 2-1: USB disconnect, device number 6 [ 105.288087][ T7769] fido_id[7769]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 105.304204][ T5695] usb 1-1: Using ep0 maxpacket: 8 [ 105.304775][ T5695] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 105.320594][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.339348][ T5695] pvrusb2: Hardware description: Terratec Grabster AV400 [ 105.339364][ T5695] pvrusb2: ********** [ 105.339369][ T5695] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 105.339379][ T5695] pvrusb2: Important functionality might not be entirely working. [ 105.339386][ T5695] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 105.339395][ T5695] pvrusb2: ********** [ 105.352587][ T5777] usb 4-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 105.354251][ T5777] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.354277][ T5777] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.354297][ T5777] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.354320][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.358750][ T5777] usb 4-1: config 0 descriptor?? [ 105.499731][ T5724] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.531284][ T2345] pvrusb2: Invalid write control endpoint [ 105.566396][ T2345] pvrusb2: Invalid write control endpoint [ 105.566409][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 105.566417][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 105.566423][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 105.566430][ T2345] pvrusb2: Device being rendered inoperable [ 105.566503][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 105.566536][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 105.568800][ T2345] pvrusb2: Attached sub-driver cx25840 [ 105.568812][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 105.568819][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 105.649111][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 105.649810][ T5724] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 105.650884][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.650907][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.650923][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 105.650967][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.653926][ T5724] usb 3-1: config 0 descriptor?? [ 105.740479][ T5695] usb 1-1: USB disconnect, device number 5 [ 105.794710][ T5777] hid_parser_main: 65294 callbacks suppressed [ 105.794734][ T5777] asus 0003:0B05:1807.0008: unknown main item tag 0x0 [ 105.794773][ T5777] asus 0003:0B05:1807.0008: unknown main item tag 0x0 [ 105.794793][ T5777] asus 0003:0B05:1807.0008: unknown main item tag 0x0 [ 105.794811][ T5777] asus 0003:0B05:1807.0008: unknown main item tag 0x0 [ 105.794830][ T5777] asus 0003:0B05:1807.0008: unknown main item tag 0x0 [ 105.794848][ T5777] asus 0003:0B05:1807.0008: unknown main item tag 0x0 [ 105.794867][ T5777] asus 0003:0B05:1807.0008: unknown main item tag 0x0 [ 105.794903][ T5777] asus 0003:0B05:1807.0008: unknown main item tag 0x0 [ 105.794922][ T5777] asus 0003:0B05:1807.0008: unknown main item tag 0x0 [ 105.794941][ T5777] asus 0003:0B05:1807.0008: unknown main item tag 0x0 [ 105.794986][ T5777] asus 0003:0B05:1807.0008: item fetching failed at offset 22/24 [ 105.797310][ T5777] asus 0003:0B05:1807.0008: Asus hid parse failed: -22 [ 105.797411][ T5777] asus 0003:0B05:1807.0008: probe with driver asus failed with error -22 [ 105.982575][ T25] usb 4-1: USB disconnect, device number 5 [ 106.068004][ T5724] hid (null): unknown global tag 0xc [ 106.068030][ T5724] hid (null): unknown global tag 0xc [ 106.068043][ T5724] hid (null): report_id 0 is invalid [ 106.068056][ T5724] hid (null): report_id 0 is invalid [ 106.068070][ T5724] hid (null): unknown global tag 0x50 [ 106.098133][ T5724] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0009/input/input21 [ 106.202009][ T5724] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0009/input/input22 [ 106.282667][ T5724] kye 0003:0458:5011.0009: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 106.284591][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 106.322871][ T5724] usb 3-1: USB disconnect, device number 5 [ 106.453894][ T7787] fido_id[7787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 106.506840][ T7791] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.508143][ T31] audit: type=1400 audit(1791498771.532:482): avc: denied { create } for pid=7790 comm="syz.0.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.508184][ T31] audit: type=1400 audit(1791498771.532:483): avc: denied { write } for pid=7790 comm="syz.0.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.914040][ T7805] netlink: 'syz.4.924': attribute type 1 has an invalid length. [ 106.914062][ T7805] netlink: 84 bytes leftover after parsing attributes in process `syz.4.924'. [ 106.914075][ T7805] netlink: 40 bytes leftover after parsing attributes in process `syz.4.924'. [ 107.077911][ T7816] netlink: 480 bytes leftover after parsing attributes in process `syz.0.931'. [ 107.077971][ T7816] netlink: 480 bytes leftover after parsing attributes in process `syz.0.931'. [ 107.137953][ T7820] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.296441][ T7831] netlink: 256 bytes leftover after parsing attributes in process `syz.4.935'. [ 107.296483][ T7831] netlink: 32 bytes leftover after parsing attributes in process `syz.4.935'. [ 107.350803][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 107.368836][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 107.526244][ T31] audit: type=1400 audit(1791498772.552:484): avc: denied { ioctl } for pid=7846 comm="syz.4.947" path="socket:[19613]" dev="sockfs" ino=19613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.882515][ T7875] usbcore.quirks: string doesn't fit in 127 chars. [ 108.231509][ T31] audit: type=1400 audit(1791498773.262:485): avc: denied { bind } for pid=7905 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.231789][ T31] audit: type=1400 audit(1791498773.262:486): avc: denied { name_bind } for pid=7905 comm="syz.3.973" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 108.232030][ T31] audit: type=1400 audit(1791498773.262:487): avc: denied { node_bind } for pid=7905 comm="syz.3.973" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 108.372836][ T31] audit: type=1400 audit(1791498773.402:488): avc: denied { bind } for pid=7913 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.473549][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 108.500147][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.501253][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.533663][ T31] audit: type=1400 audit(1791498773.562:489): avc: denied { ioctl } for pid=7921 comm="syz.3.981" path="socket:[19875]" dev="sockfs" ino=19875 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.879243][ T56] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 108.901597][ T31] audit: type=1326 audit(1791498773.932:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.1.991" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f310fb9e1d9 code=0x0 [ 109.029204][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 109.030552][ T56] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 109.031425][ T56] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 109.031450][ T56] usb 1-1: config 0 has no interface number 0 [ 109.031482][ T56] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.031505][ T56] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.032783][ T56] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 109.032805][ T56] usb 1-1: Product: syz [ 109.032818][ T56] usb 1-1: SerialNumber: syz [ 109.034991][ T56] usb 1-1: config 0 descriptor?? [ 109.042970][ T56] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 109.045602][ T56] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input23 [ 109.079084][ T5724] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.230298][ T5724] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 109.231537][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.242768][ T5724] usb 3-1: config 0 descriptor?? [ 109.254779][ T5724] cp210x 3-1:0.0: cp210x converter detected [ 109.307504][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.309276][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.309591][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.309786][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.309979][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.310156][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.310335][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.310513][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.310686][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.310861][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.317067][ T5777] usb 1-1: USB disconnect, device number 6 [ 109.317164][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 109.342010][ T5777] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 109.499219][ T7970] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 109.790477][ T7977] serial 00:02: in use; can't configure [ 109.809214][ T5777] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 109.856810][ T5724] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 109.856852][ T5724] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 109.875984][ T5724] usb 3-1: cp210x converter now attached to ttyUSB0 [ 109.882331][ T5724] usb 3-1: USB disconnect, device number 6 [ 109.889848][ T5724] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.890226][ T5724] cp210x 3-1:0.0: device disconnected [ 109.962268][ T5777] usb 5-1: not running at top speed; connect to a high speed hub [ 109.962298][ T5777] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 109.963163][ T5777] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 109.963186][ T5777] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.963202][ T5777] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 109.963248][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.973213][ T5777] usb 5-1: config 0 descriptor?? [ 109.982554][ T5777] uvcvideo 5-1:0.0: Found UVC 9.00 device (046d:0825) [ 110.187418][ T7994] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 110.301417][ T8001] netlink: 'syz.1.1017': attribute type 9 has an invalid length. [ 110.387773][ T5777] uvcvideo 5-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 110.414305][ T5777] videodev: could not get a free minor [ 110.414322][ T5777] uvcvideo 5-1:0.1: Failed to register meta-cap device (-23). [ 110.465205][ T5777] kernel read not supported for file /media1 (pid: 5777 comm: kworker/1:9) [ 110.601462][ T5777] usb 5-1: USB disconnect, device number 6 [ 110.639933][ T4919] Bluetooth: hci4: link tx timeout [ 110.639951][ T4919] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642478][ T52] Bluetooth: hci4: link tx timeout [ 110.642494][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642517][ T52] Bluetooth: hci4: link tx timeout [ 110.642525][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642544][ T52] Bluetooth: hci4: link tx timeout [ 110.642553][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642572][ T52] Bluetooth: hci4: link tx timeout [ 110.642580][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642599][ T52] Bluetooth: hci4: link tx timeout [ 110.642614][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642634][ T52] Bluetooth: hci4: link tx timeout [ 110.642642][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642661][ T52] Bluetooth: hci4: link tx timeout [ 110.642668][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642687][ T52] Bluetooth: hci4: link tx timeout [ 110.642695][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642739][ T52] Bluetooth: hci4: link tx timeout [ 110.642748][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642767][ T52] Bluetooth: hci4: link tx timeout [ 110.642775][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642815][ T52] Bluetooth: hci4: link tx timeout [ 110.642824][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642843][ T52] Bluetooth: hci4: link tx timeout [ 110.642851][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.642938][ T52] Bluetooth: hci4: link tx timeout [ 110.644584][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.644611][ T52] Bluetooth: hci4: link tx timeout [ 110.644620][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.644670][ T52] Bluetooth: hci4: link tx timeout [ 110.644679][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.644698][ T52] Bluetooth: hci4: link tx timeout [ 110.644707][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.644743][ T52] Bluetooth: hci4: link tx timeout [ 110.644752][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.644771][ T52] Bluetooth: hci4: link tx timeout [ 110.644780][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.644816][ T52] Bluetooth: hci4: link tx timeout [ 110.644825][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.644882][ T52] Bluetooth: hci4: link tx timeout [ 110.644891][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.644928][ T52] Bluetooth: hci4: link tx timeout [ 110.644937][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.644956][ T52] Bluetooth: hci4: link tx timeout [ 110.644964][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.644983][ T52] Bluetooth: hci4: link tx timeout [ 110.644991][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645010][ T52] Bluetooth: hci4: link tx timeout [ 110.645019][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645038][ T52] Bluetooth: hci4: link tx timeout [ 110.645046][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645064][ T52] Bluetooth: hci4: link tx timeout [ 110.645073][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645114][ T52] Bluetooth: hci4: link tx timeout [ 110.645123][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645168][ T52] Bluetooth: hci4: link tx timeout [ 110.645177][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645196][ T52] Bluetooth: hci4: link tx timeout [ 110.645204][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645240][ T52] Bluetooth: hci4: link tx timeout [ 110.645249][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645268][ T52] Bluetooth: hci4: link tx timeout [ 110.645277][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645313][ T52] Bluetooth: hci4: link tx timeout [ 110.645322][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645341][ T52] Bluetooth: hci4: link tx timeout [ 110.645349][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645385][ T52] Bluetooth: hci4: link tx timeout [ 110.645394][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645431][ T52] Bluetooth: hci4: link tx timeout [ 110.645439][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645459][ T52] Bluetooth: hci4: link tx timeout [ 110.645467][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645521][ T52] Bluetooth: hci4: link tx timeout [ 110.645530][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645550][ T52] Bluetooth: hci4: link tx timeout [ 110.645558][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645577][ T52] Bluetooth: hci4: link tx timeout [ 110.645585][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645604][ T52] Bluetooth: hci4: link tx timeout [ 110.645613][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645631][ T52] Bluetooth: hci4: link tx timeout [ 110.645640][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645675][ T52] Bluetooth: hci4: link tx timeout [ 110.645684][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645703][ T52] Bluetooth: hci4: link tx timeout [ 110.645713][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645757][ T52] Bluetooth: hci4: link tx timeout [ 110.645766][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.645786][ T52] Bluetooth: hci4: link tx timeout [ 110.646259][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646283][ T52] Bluetooth: hci4: link tx timeout [ 110.646292][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646348][ T52] Bluetooth: hci4: link tx timeout [ 110.646357][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646376][ T52] Bluetooth: hci4: link tx timeout [ 110.646385][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646403][ T52] Bluetooth: hci4: link tx timeout [ 110.646411][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646456][ T52] Bluetooth: hci4: link tx timeout [ 110.646465][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646484][ T52] Bluetooth: hci4: link tx timeout [ 110.646493][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646537][ T52] Bluetooth: hci4: link tx timeout [ 110.646546][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646566][ T52] Bluetooth: hci4: link tx timeout [ 110.646574][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646594][ T52] Bluetooth: hci4: link tx timeout [ 110.646602][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646622][ T52] Bluetooth: hci4: link tx timeout [ 110.646630][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646674][ T52] Bluetooth: hci4: link tx timeout [ 110.646683][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646703][ T52] Bluetooth: hci4: link tx timeout [ 110.646711][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646731][ T52] Bluetooth: hci4: link tx timeout [ 110.646739][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646759][ T52] Bluetooth: hci4: link tx timeout [ 110.646767][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646811][ T52] Bluetooth: hci4: link tx timeout [ 110.646820][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646839][ T52] Bluetooth: hci4: link tx timeout [ 110.646847][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646942][ T52] Bluetooth: hci4: link tx timeout [ 110.646952][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.646972][ T52] Bluetooth: hci4: link tx timeout [ 110.646981][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647004][ T52] Bluetooth: hci4: link tx timeout [ 110.647013][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647033][ T52] Bluetooth: hci4: link tx timeout [ 110.647041][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647060][ T52] Bluetooth: hci4: link tx timeout [ 110.647068][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647099][ T52] Bluetooth: hci4: link tx timeout [ 110.647108][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647127][ T52] Bluetooth: hci4: link tx timeout [ 110.647136][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647155][ T52] Bluetooth: hci4: link tx timeout [ 110.647163][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647208][ T52] Bluetooth: hci4: link tx timeout [ 110.647217][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647236][ T52] Bluetooth: hci4: link tx timeout [ 110.647245][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647289][ T52] Bluetooth: hci4: link tx timeout [ 110.647298][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647318][ T52] Bluetooth: hci4: link tx timeout [ 110.647326][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647345][ T52] Bluetooth: hci4: link tx timeout [ 110.647354][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647374][ T52] Bluetooth: hci4: link tx timeout [ 110.647382][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647425][ T52] Bluetooth: hci4: link tx timeout [ 110.647433][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647483][ T52] Bluetooth: hci4: link tx timeout [ 110.647493][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647512][ T52] Bluetooth: hci4: link tx timeout [ 110.647520][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647541][ T52] Bluetooth: hci4: link tx timeout [ 110.647549][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647594][ T52] Bluetooth: hci4: link tx timeout [ 110.647603][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647623][ T52] Bluetooth: hci4: link tx timeout [ 110.647631][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647650][ T52] Bluetooth: hci4: link tx timeout [ 110.647659][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647678][ T52] Bluetooth: hci4: link tx timeout [ 110.647687][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647730][ T52] Bluetooth: hci4: link tx timeout [ 110.647739][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647759][ T52] Bluetooth: hci4: link tx timeout [ 110.647767][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647786][ T52] Bluetooth: hci4: link tx timeout [ 110.647794][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647824][ T52] Bluetooth: hci4: link tx timeout [ 110.647833][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647853][ T52] Bluetooth: hci4: link tx timeout [ 110.647861][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647880][ T52] Bluetooth: hci4: link tx timeout [ 110.647889][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647947][ T52] Bluetooth: hci4: link tx timeout [ 110.647956][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.647976][ T52] Bluetooth: hci4: link tx timeout [ 110.647984][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648004][ T52] Bluetooth: hci4: link tx timeout [ 110.648013][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648037][ T52] Bluetooth: hci4: link tx timeout [ 110.648045][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648065][ T52] Bluetooth: hci4: link tx timeout [ 110.648074][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648118][ T52] Bluetooth: hci4: link tx timeout [ 110.648127][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648147][ T52] Bluetooth: hci4: link tx timeout [ 110.648155][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648175][ T52] Bluetooth: hci4: link tx timeout [ 110.648183][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648248][ T52] Bluetooth: hci4: link tx timeout [ 110.648257][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648277][ T52] Bluetooth: hci4: link tx timeout [ 110.648285][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648304][ T52] Bluetooth: hci4: link tx timeout [ 110.648313][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648355][ T52] Bluetooth: hci4: link tx timeout [ 110.648364][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648383][ T52] Bluetooth: hci4: link tx timeout [ 110.648392][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648436][ T52] Bluetooth: hci4: link tx timeout [ 110.648445][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648465][ T52] Bluetooth: hci4: link tx timeout [ 110.648474][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648493][ T52] Bluetooth: hci4: link tx timeout [ 110.648502][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648521][ T52] Bluetooth: hci4: link tx timeout [ 110.648529][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648573][ T52] Bluetooth: hci4: link tx timeout [ 110.648582][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648602][ T52] Bluetooth: hci4: link tx timeout [ 110.648610][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648628][ T52] Bluetooth: hci4: link tx timeout [ 110.648636][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648680][ T52] Bluetooth: hci4: link tx timeout [ 110.648689][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648765][ T52] Bluetooth: hci4: link tx timeout [ 110.648774][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648793][ T52] Bluetooth: hci4: link tx timeout [ 110.648801][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648820][ T52] Bluetooth: hci4: link tx timeout [ 110.648829][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648849][ T52] Bluetooth: hci4: link tx timeout [ 110.648857][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.648894][ T52] Bluetooth: hci4: link tx timeout [ 110.648940][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.650860][ T52] Bluetooth: hci4: link tx timeout [ 110.650871][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.695663][ T52] Bluetooth: hci4: link tx timeout [ 110.695680][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.695705][ T52] Bluetooth: hci4: link tx timeout [ 110.695714][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.695733][ T52] Bluetooth: hci4: link tx timeout [ 110.695742][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.695800][ T52] Bluetooth: hci4: link tx timeout [ 110.695809][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.695829][ T52] Bluetooth: hci4: link tx timeout [ 110.695837][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.695856][ T52] Bluetooth: hci4: link tx timeout [ 110.695864][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.695884][ T52] Bluetooth: hci4: link tx timeout [ 110.695892][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.695919][ T52] Bluetooth: hci4: link tx timeout [ 110.695927][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.695947][ T52] Bluetooth: hci4: link tx timeout [ 110.695955][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.695974][ T52] Bluetooth: hci4: link tx timeout [ 110.695983][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.696002][ T52] Bluetooth: hci4: link tx timeout [ 110.696010][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.696066][ T52] Bluetooth: hci4: link tx timeout [ 110.696075][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.696093][ T52] Bluetooth: hci4: link tx timeout [ 110.696101][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.317925][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 111.317941][ T31] audit: type=1400 audit(1791498776.342:493): avc: denied { name_bind } for pid=8043 comm="syz.4.1038" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 111.598577][ T8054] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 111.635192][ T8054] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 111.635345][ T8054] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 112.181837][ T31] audit: type=1400 audit(1791498777.212:494): avc: denied { accept } for pid=8069 comm="syz.4.1048" path=2F3231372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 112.406594][ T31] audit: type=1400 audit(1791498777.432:495): avc: denied { append } for pid=8079 comm="syz.3.1053" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.414299][ T5777] kernel write not supported for file /media4 (pid: 5777 comm: kworker/1:9) [ 112.517754][ T31] audit: type=1400 audit(1791498777.542:496): avc: denied { append } for pid=8085 comm="syz.4.1057" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 112.588738][ T31] audit: type=1400 audit(1791498777.612:497): avc: denied { mount } for pid=8087 comm="syz.0.1056" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 112.649741][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 112.706052][ T8100] input: syz1 as /devices/virtual/input/input25 [ 112.712941][ T270] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.714724][ T270] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.714775][ T270] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.714819][ T270] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.714862][ T270] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.854925][ T31] audit: type=1400 audit(1791498777.882:498): avc: denied { create } for pid=8109 comm="syz.1.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.859053][ T31] audit: type=1400 audit(1791498777.882:499): avc: denied { getopt } for pid=8109 comm="syz.1.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.861091][ T8112] netlink: 'syz.3.1066': attribute type 3 has an invalid length. [ 112.861106][ T8112] netlink: 'syz.3.1066': attribute type 2 has an invalid length. [ 112.948766][ T31] audit: type=1400 audit(1791498777.972:500): avc: denied { connect } for pid=8113 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 113.134677][ T31] audit: type=1400 audit(1791498778.162:501): avc: denied { execute } for pid=8125 comm="syz.1.1073" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 113.249073][ T5695] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.250515][ T31] audit: type=1400 audit(1791498778.282:502): avc: denied { read append } for pid=8129 comm="syz.1.1075" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 113.322178][ T8130] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.322251][ T8130] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.327917][ T8130] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.345078][ T8130] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.345131][ T8130] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.354280][ T8130] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.369483][ T8130] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.369539][ T8130] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.372938][ T8130] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.375398][ T8130] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 113.375685][ T8130] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 113.409422][ T5695] usb 4-1: Using ep0 maxpacket: 32 [ 113.411582][ T5695] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 113.428044][ T5695] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 113.428061][ T5695] usb 4-1: config 0 has no interface number 0 [ 113.428082][ T5695] usb 4-1: config 0 interface 12 has no altsetting 0 [ 113.459109][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.459134][ T5695] usb 4-1: Product: syz [ 113.459148][ T5695] usb 4-1: Manufacturer: syz [ 113.459161][ T5695] usb 4-1: SerialNumber: syz [ 113.468608][ T5695] usb 4-1: config 0 descriptor?? [ 113.570115][ T8135] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1077'. [ 113.959059][ T5724] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.109047][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 114.109681][ T5724] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 114.110540][ T5724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.110559][ T5724] usb 1-1: config 0 has no interfaces? [ 114.110582][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.116068][ T5724] usb 1-1: config 0 descriptor?? [ 114.144543][ T8166] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1092'. [ 114.291202][ T5695] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 114.291251][ T5695] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 114.291266][ T5695] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 114.291327][ T5695] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 114.303690][ T5695] usb 4-1: USB disconnect, device number 6 [ 114.347123][ T5723] usb 1-1: USB disconnect, device number 7 [ 114.453952][ T8184] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 114.730357][ T4919] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 114.855983][ T8206] nfsd: exp_rootfh path not found \ [ 115.003485][ T5723] hid_parser_main: 5 callbacks suppressed [ 115.003506][ T5723] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.018830][ T5723] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.115279][ T8226] netlink: 804 bytes leftover after parsing attributes in process `syz.3.1113'. [ 115.219063][ T5724] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 115.228527][ T8230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.371851][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.371863][ T4919] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.373976][ T5724] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.374836][ T5724] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.374865][ T5724] usb 1-1: config 0 has no interface number 0 [ 115.374895][ T5724] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 115.374916][ T5724] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 115.374947][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.446539][ T5724] usb 1-1: config 0 descriptor?? [ 115.458693][ T8219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.459291][ T4919] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.486585][ T5724] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 115.745366][ T5695] usb 1-1: USB disconnect, device number 8 [ 116.007502][ T8270] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1133'. [ 116.324423][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 116.324441][ T31] audit: type=1400 audit(1791498781.352:527): avc: denied { map } for pid=8284 comm="syz.3.1140" path="socket:[21682]" dev="sockfs" ino=21682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.324554][ T31] audit: type=1400 audit(1791498781.352:528): avc: denied { read } for pid=8284 comm="syz.3.1140" path="socket:[21682]" dev="sockfs" ino=21682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.328171][ T31] audit: type=1400 audit(1791498781.352:529): avc: denied { setopt } for pid=8284 comm="syz.3.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.469165][ T5695] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.508361][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1145'. [ 116.524267][ T8298] jffs2: notice: (8298) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 116.527535][ T31] audit: type=1400 audit(1791498781.552:530): avc: denied { setattr } for pid=8297 comm="syz.0.1146" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.622618][ T8303] pimreg: tun_chr_ioctl cmd 1074025672 [ 116.622633][ T8303] pimreg: ignored: set checksum enabled [ 116.633963][ T5695] usb 2-1: Using ep0 maxpacket: 8 [ 116.634896][ T5695] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.635938][ T5695] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.635961][ T5695] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.635980][ T5695] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.635999][ T5695] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.636029][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.642947][ T5723] kernel write not supported for file /516/attr/prev (pid: 5723 comm: kworker/0:4) [ 116.819666][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1151'. [ 116.864605][ T5695] usb 2-1: GET_CAPABILITIES returned 0 [ 116.864644][ T5695] usbtmc 2-1:16.0: can't read capabilities [ 117.117170][ T8279] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 117.119257][ T5695] usb 2-1: USB disconnect, device number 7 [ 117.130750][ T31] audit: type=1400 audit(1791498782.152:531): avc: denied { append } for pid=8322 comm="syz.4.1157" name="uprobe_events" dev="tracefs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 117.169626][ T31] audit: type=1326 audit(1791498782.192:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.0.1158" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a5e99e1d9 code=0x0 [ 117.260691][ T31] audit: type=1400 audit(1791498782.292:533): avc: denied { connect } for pid=8329 comm="syz.4.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.324764][ T31] audit: type=1400 audit(1791498782.352:534): avc: denied { create } for pid=8332 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.328498][ T31] audit: type=1400 audit(1791498782.352:535): avc: denied { read } for pid=8332 comm="syz.3.1162" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.383193][ T31] audit: type=1400 audit(1791498782.412:536): avc: denied { write } for pid=8332 comm="syz.3.1162" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.449186][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.449647][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.453230][ T8340] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1164'. [ 117.530742][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.623753][ T8352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.704712][ T8356] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 117.950424][ T8372] usb usb7: usbfs: process 8372 (syz.2.1179) did not claim interface 0 before use [ 118.068844][ T8378] bond1 (unregistering): Released all slaves [ 118.158251][ T8385] netlink: 'syz.0.1184': attribute type 27 has an invalid length. [ 118.158266][ T8385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1184'. [ 118.182787][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.262948][ T8394] binder: BC_ATTEMPT_ACQUIRE not supported [ 118.262962][ T8394] binder: 8393:8394 ioctl c0306201 200000000640 returned -22 [ 118.301494][ T8392] input: syz0 as /devices/virtual/input/input27 [ 118.806087][ T8424] netlink: 'syz.3.1203': attribute type 4 has an invalid length. [ 118.806110][ T8424] netlink: 'syz.3.1203': attribute type 8 has an invalid length. [ 118.806122][ T8424] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1203'. [ 118.921534][ T50] IPVS: starting estimator thread 0... [ 118.940354][ T8435] sock: sock_set_timeout: `syz.3.1207' (pid 8435) tries to set negative timeout [ 118.980758][ T5723] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 119.009044][ T8433] IPVS: using max 37 ests per chain, 88800 per kthread [ 119.133361][ T5723] usb 1-1: not running at top speed; connect to a high speed hub [ 119.133391][ T5723] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 119.134472][ T5723] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 119.134494][ T5723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.134511][ T5723] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 119.134555][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.136798][ T5723] usb 1-1: config 0 descriptor?? [ 119.151103][ T5723] uvcvideo 1-1:0.0: Found UVC 9.00 device (046d:0825) [ 119.227361][ T8454] tmpfs: Using encoding : utf8-12.1.0 [ 119.439456][ T5695] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.529118][ T4919] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.529166][ T4919] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.599089][ T5695] usb 2-1: Using ep0 maxpacket: 16 [ 119.599743][ T5695] usb 2-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 119.600830][ T5695] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.600859][ T5695] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.600887][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.605178][ T5695] usb 2-1: config 0 descriptor?? [ 119.613970][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.810959][ T8477] tipc: Started in network mode [ 119.810988][ T8477] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 119.811214][ T8477] tipc: Enabled bearer , priority 0 [ 119.816336][ T8479] ip_tables: iptables: counters copy to user failed while replacing table [ 119.944359][ T8486] netlink: 'syz.3.1232': attribute type 10 has an invalid length. [ 119.958523][ T5723] uvcvideo 1-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 119.958566][ T5723] uvcvideo 1-1:0.1: Failed to initialize the device (-71). [ 119.971693][ T5723] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -71 [ 119.988904][ T5723] usb 1-1: USB disconnect, device number 9 [ 119.998921][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.082813][ T5695] input: HID 320f:5041 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:320F:5041.000B/input/input28 [ 120.190090][ T5695] evision 0003:320F:5041.000B: input,hiddev0,hidraw0: USB HID v0.04 Device [HID 320f:5041] on usb-dummy_hcd.1-1/input0 [ 120.322838][ T5695] usb 2-1: USB disconnect, device number 8 [ 120.598547][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 120.811224][ T10] tipc: Node number set to 43690 [ 121.120794][ T8538] openvswitch: netlink: Unknown key attributes 1 [ 121.788748][ T8582] Invalid/unusable pipe [ 121.945295][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 121.945312][ T31] audit: type=1400 audit(1791498786.972:568): avc: denied { create } for pid=8594 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 121.957633][ T31] audit: type=1400 audit(1791498786.982:569): avc: denied { connect } for pid=8594 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.231952][ T8622] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1294'. [ 122.233670][ T8622] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1294'. [ 122.388922][ T31] audit: type=1400 audit(1791498787.412:570): avc: denied { mount } for pid=8634 comm="syz.4.1301" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 122.403609][ T31] audit: type=1400 audit(1791498787.422:571): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 122.453478][ T8639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.493355][ T31] audit: type=1400 audit(1791498787.522:572): avc: denied { create } for pid=8642 comm="syz.4.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 122.494561][ T31] audit: type=1400 audit(1791498787.522:573): avc: denied { setopt } for pid=8642 comm="syz.4.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 122.574122][ T31] audit: type=1400 audit(1791498787.602:574): avc: denied { load_policy } for pid=8646 comm="syz.4.1307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.574287][ T8647] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 122.574312][ T8647] SELinux: failed to load policy [ 122.579267][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.697627][ T31] audit: type=1400 audit(1791498787.722:575): avc: denied { read } for pid=8652 comm="syz.4.1310" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.697677][ T31] audit: type=1400 audit(1791498787.722:576): avc: denied { open } for pid=8652 comm="syz.4.1310" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.726316][ T31] audit: type=1400 audit(1791498787.732:577): avc: denied { ioctl } for pid=8652 comm="syz.4.1310" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.760753][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 122.765508][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.765544][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 122.766556][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 122.766576][ T10] usb 1-1: config 1 has no interface number 0 [ 122.766609][ T10] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 122.766639][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 122.768254][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.768278][ T10] usb 1-1: Product: syz [ 122.768290][ T10] usb 1-1: Manufacturer: syz [ 122.768301][ T10] usb 1-1: SerialNumber: syz [ 122.852271][ T8657] tipc: New replicast peer: 255.255.255.255 [ 122.857016][ T8657] tipc: Enabled bearer , priority 10 [ 122.868729][ T5723] kernel read not supported for file /dsp (pid: 5723 comm: kworker/0:4) [ 122.955736][ T8662] bond0: option slaves: interface -b does not exist! [ 123.277780][ T8686] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1326'. [ 123.409827][ T10] usb 1-1: 2:1 : can't get Cluster Descriptor [ 123.509713][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 123.511010][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 123.584498][ T8708] sd 0:0:1:0: PR command failed: 1026 [ 123.584540][ T8708] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 123.584575][ T8708] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 123.631572][ T10] usb 1-1: USB disconnect, device number 10 [ 123.746053][ T5590] udevd[5590]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.029112][ T5723] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.060671][ T8728] smpboot: CPU 1 is now offline [ 124.084262][ T8732] binder: 8731:8732 ioctl c0306201 2000000001c0 returned -14 [ 124.179504][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 124.179909][ T5723] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 124.181094][ T5723] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 124.181108][ T5723] usb 2-1: config 0 has no interface number 0 [ 124.181127][ T5723] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.181138][ T5723] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 124.181152][ T5723] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 11621, setting to 1024 [ 124.181166][ T5723] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 124.181179][ T5723] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.182606][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.182620][ T5723] usb 2-1: Product: syz [ 124.182628][ T5723] usb 2-1: Manufacturer: syz [ 124.182636][ T5723] usb 2-1: SerialNumber: syz [ 124.317079][ T5723] usb 2-1: config 0 descriptor?? [ 124.332350][ T8715] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.361962][ T5723] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input29 [ 124.382724][ T4955] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 124.582658][ T9] usb 2-1: USB disconnect, device number 9 [ 124.784831][ T8747] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1355'. [ 125.014793][ T8756] netlink: 'syz.4.1360': attribute type 10 has an invalid length. [ 125.048778][ T8756] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.082682][ T8761] WARNING! power/level is deprecated; use power/control instead [ 125.350115][ T8770] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.350228][ T8770] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.350293][ T8770] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.350320][ T8770] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.396279][ T8770] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.745990][ T8803] scsi_strcpy_devinfo: vendor string 'b~sb%`Qʮ~G|\D5X2aE' is too long [ 125.796947][ T8806] block2mtd: illegal erase size [ 125.932049][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932081][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.068118][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 126.313090][ T8842] netlink: 'syz.1.1396': attribute type 10 has an invalid length. [ 126.335381][ T8842] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.564173][ T8858] C: renamed from veth1_to_team (while UP) [ 126.565831][ T8858] netlink: 'syz.0.1407': attribute type 3 has an invalid length. [ 126.565842][ T8858] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1407'. [ 126.603163][ T8858] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 126.730616][ T8864] netlink: 'syz.3.1410': attribute type 12 has an invalid length. [ 126.783618][ T8866] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1411'. [ 126.960273][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 126.960286][ T31] audit: type=1400 audit(1791498791.992:594): avc: denied { accept } for pid=8867 comm="syz.1.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.231483][ T43] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.231511][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.231529][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.231546][ T43] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.231563][ T43] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.369144][ T4919] Bluetooth: hci4: command 0x0406 tx timeout [ 127.369181][ T4919] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.369196][ T4919] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.369209][ T4919] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.130910][ T8923] capability: warning: `syz.1.1436' uses 32-bit capabilities (legacy support in use) [ 128.689618][ T5695] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 128.843792][ T5695] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 128.846424][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.846440][ T5695] usb 4-1: Product: syz [ 128.846448][ T5695] usb 4-1: Manufacturer: syz [ 128.846456][ T5695] usb 4-1: SerialNumber: syz [ 128.847694][ T5695] usb 4-1: config 0 descriptor?? [ 128.895349][ T5695] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 129.140380][ T5695] gspca_m5602: Failed to find a sensor [ 129.140389][ T5695] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 129.146009][ T5695] usb 4-1: USB disconnect, device number 7 [ 129.450046][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.450069][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 129.571507][ T8972] blkio.reset_stats is deprecated [ 129.599210][ T5695] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.749068][ T5695] usb 4-1: Using ep0 maxpacket: 8 [ 129.749471][ T5695] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 129.751636][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.751653][ T5695] usb 4-1: Product: syz [ 129.751661][ T5695] usb 4-1: Manufacturer: syz [ 129.751669][ T5695] usb 4-1: SerialNumber: syz [ 129.755792][ T5695] usb 4-1: config 0 descriptor?? [ 129.814021][ T5695] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 130.008059][ T8988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.145899][ T31] audit: type=1400 audit(1791498795.172:595): avc: denied { ioctl } for pid=8997 comm="syz.0.1470" path="socket:[25135]" dev="sockfs" ino=25135 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.202512][ T5695] gspca_m5602: Failed to find a sensor [ 130.202521][ T5695] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 130.243069][ T5695] usb 4-1: USB disconnect, device number 8 [ 130.325800][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 130.412762][ T31] audit: type=1400 audit(1791498795.442:596): avc: denied { bind } for pid=9008 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 130.416871][ T31] audit: type=1400 audit(1791498795.442:597): avc: denied { listen } for pid=9008 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.113553][ T31] audit: type=1400 audit(1791498796.142:598): avc: denied { ioctl } for pid=9032 comm="syz.0.1484" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 131.331725][ T31] audit: type=1400 audit(1791498796.362:599): avc: denied { bind } for pid=9041 comm="syz.4.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.331756][ T31] audit: type=1400 audit(1791498796.362:600): avc: denied { name_bind } for pid=9041 comm="syz.4.1487" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 131.534157][ T4919] Bluetooth: hci4: command 0x0406 tx timeout [ 132.018431][ T9071] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1501'. [ 132.239447][ T8962] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 132.359885][ T9089] kAFS: bad VL server IP address [ 132.390501][ T8962] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.390912][ T8962] usb 2-1: not running at top speed; connect to a high speed hub [ 132.390987][ T8962] usb 2-1: New USB device found, idVendor=1430, idProduct=474a, bcdDevice= 0.40 [ 132.391706][ T8962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 132.391723][ T8962] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.393245][ T8962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.393259][ T8962] usb 2-1: Product: syz [ 132.393267][ T8962] usb 2-1: Manufacturer: syz [ 132.393275][ T8962] usb 2-1: SerialNumber: syz [ 132.397610][ T9069] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.398514][ T9091] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 132.398527][ T9091] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 132.398597][ T9091] overlayfs: failed to get uuid (296/file2, err=-13); falling back to uuid=null. [ 132.454539][ T31] audit: type=1400 audit(1791498797.482:601): avc: denied { mount } for pid=9090 comm="syz.0.1511" name="/" dev="overlay" ino=1550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 132.550233][ T5695] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.567933][ T31] audit: type=1400 audit(1791498797.592:602): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 132.621677][ T8962] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.621705][ T8962] usb 2-1: MIDIStreaming interface descriptor not found [ 132.710176][ T5695] usb 4-1: Using ep0 maxpacket: 16 [ 132.711693][ T5695] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 132.713257][ T5695] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.713274][ T5695] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.713286][ T5695] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 132.713301][ T5695] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.713318][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.717339][ T5695] usb 4-1: config 0 descriptor?? [ 132.813818][ T8962] usb 2-1: USB disconnect, device number 10 [ 132.972176][ T31] audit: type=1400 audit(1791498798.002:603): avc: denied { bind } for pid=9098 comm="syz.4.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.224118][ T5695] hid (null): unknown global tag 0xd [ 133.250028][ T31] audit: type=1400 audit(1791498798.282:604): avc: denied { mounton } for pid=9104 comm="syz.2.1517" path="/" dev="tmpfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 133.445255][ T5695] usb 4-1: USB disconnect, device number 9 [ 133.570883][ T31] audit: type=1400 audit(1791498798.602:605): avc: denied { watch_reads } for pid=9113 comm="syz.0.1521" path="/298/file5" dev="tmpfs" ino=1561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.649448][ T31] audit: type=1400 audit(1791498798.682:606): avc: denied { watch } for pid=9115 comm="syz.1.1522" path="/253/file0" dev="tmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.649477][ T31] audit: type=1400 audit(1791498798.682:607): avc: denied { watch_sb } for pid=9115 comm="syz.1.1522" path="/253/file0" dev="tmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.776367][ T9120] netlink: 'syz.1.1524': attribute type 1 has an invalid length. [ 133.776380][ T9120] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1524'. [ 133.776389][ T9120] netlink: 'syz.1.1524': attribute type 2 has an invalid length. [ 133.776395][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 133.994394][ T31] audit: type=1400 audit(1791498799.022:608): avc: denied { ioctl } for pid=9127 comm="syz.1.1528" path="socket:[25630]" dev="sockfs" ino=25630 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.056276][ T31] audit: type=1400 audit(1791498799.082:609): avc: denied { associate } for pid=9134 comm="syz.0.1529" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 134.310916][ T31] audit: type=1400 audit(1791498799.342:610): avc: denied { append } for pid=9148 comm="syz.1.1538" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 134.402051][ T9153] openvswitch: netlink: IP tunnel dst address not specified [ 134.402069][ T9153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.605367][ T9167] fuse: Invalid rootmode [ 135.696536][ T9192] jffs2: notice: (9192) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 135.850534][ T9204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1562'. [ 135.850548][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1562'. [ 136.212005][ T9224] netlink: 'syz.4.1570': attribute type 8 has an invalid length. [ 136.617575][ T9238] netdevsim netdevsim10 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.617599][ T9238] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.849727][ T5695] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 136.999161][ T5695] usb 2-1: Using ep0 maxpacket: 16 [ 137.005023][ T5695] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 137.006029][ T5695] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 137.006050][ T5695] usb 2-1: config 0 has no interface number 0 [ 137.006069][ T5695] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 137.006083][ T5695] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 137.007636][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.007649][ T5695] usb 2-1: Product: syz [ 137.007658][ T5695] usb 2-1: Manufacturer: syz [ 137.007666][ T5695] usb 2-1: SerialNumber: syz [ 137.075535][ T5695] usb 2-1: config 0 descriptor?? [ 137.080590][ T9246] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.080661][ T9246] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.309482][ T9246] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.309556][ T9246] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.521843][ T5695] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 137.725273][ T5695] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 241 [ 137.874116][ T9280] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1596'. [ 137.971587][ T5695] usb 2-1: USB disconnect, device number 11 [ 138.616278][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 138.616290][ T31] audit: type=1400 audit(1791498803.642:613): avc: denied { read } for pid=9308 comm="syz.2.1611" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 138.652963][ T31] audit: type=1400 audit(1791498803.682:614): avc: denied { open } for pid=9308 comm="syz.2.1611" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 139.188889][ T43] IPVS: starting estimator thread 0... [ 139.207730][ T9333] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 139.234683][ T31] audit: type=1400 audit(1791498804.262:615): avc: denied { getopt } for pid=9337 comm="syz.3.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.267870][ T9336] block2mtd: Using custom MTD label '& [ 139.267870][ T9336] ' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-%#!$([)^)} [ 139.268487][ T9336] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-%#!$([)^)} [ 139.284208][ T9335] IPVS: using max 75 ests per chain, 180000 per kthread [ 139.408908][ T9343] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1625'. [ 139.466705][ T9346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1627'. [ 139.466772][ T9346] nbd: couldn't find a device at index 458764 [ 139.554981][ T31] audit: type=1400 audit(1791498804.582:616): avc: denied { write } for pid=9351 comm="syz.1.1630" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 139.555011][ T31] audit: type=1400 audit(1791498804.582:617): avc: denied { open } for pid=9351 comm="syz.1.1630" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 139.624682][ T31] audit: type=1400 audit(1791498804.652:618): avc: denied { ioctl } for pid=9351 comm="syz.1.1630" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 139.627841][ T31] audit: type=1400 audit(1791498804.652:619): avc: denied { read write } for pid=9355 comm="syz.2.1633" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 139.655164][ T31] audit: type=1400 audit(1791498804.682:620): avc: denied { open } for pid=9355 comm="syz.2.1633" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 139.799272][ T31] audit: type=1400 audit(1791498804.822:621): avc: denied { write } for pid=9360 comm="syz.1.1634" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 139.803804][ T9364] binder: 9360:9364 ioctl c0306201 200000000640 returned -22 [ 139.875483][ T31] audit: type=1400 audit(1791498804.902:622): avc: denied { firmware_load } for pid=9349 comm="syz.4.1629" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 140.064351][ T9376] kAFS: unable to lookup cell '(G' [ 140.064655][ T9376] kAFS: unable to lookup cell '(G' [ 140.349705][ T9350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.349804][ T9350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.349867][ T9350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.349930][ T9350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.395553][ T9356] syz.4.1629 (9356) used greatest stack depth: 19152 bytes left [ 140.479429][ T1671] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 140.551898][ T1671] corsair-cpro 0003:1B1C:0C10.000D: probe with driver corsair-cpro failed with error -71 [ 140.683807][ T9387] fido_id[9387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.186432][ T9417] autofs4:pid:9417:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(10.3), cmd(0xc018937a) [ 141.186450][ T9417] autofs4:pid:9417:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937a) [ 141.256119][ T9422] netlink: 'syz.0.1659': attribute type 5 has an invalid length. [ 141.610002][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.774585][ T9444] netlink: 'syz.4.1669': attribute type 12 has an invalid length. [ 142.409304][ T4919] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.409331][ T4919] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.409359][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 142.558228][ T9478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1686'. [ 142.912133][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1693'. [ 143.035317][ T9498] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 143.059392][ T9500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1697'. [ 143.066057][ T9500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1697'. [ 143.089117][ T5695] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 143.249168][ T5695] usb 1-1: Using ep0 maxpacket: 16 [ 143.249707][ T5695] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.250422][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.250437][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.250455][ T5695] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.250475][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.251694][ T5695] usb 1-1: config 0 descriptor?? [ 143.493749][ T8962] kernel read not supported for file /mdstat (pid: 8962 comm: kworker/0:5) [ 143.581855][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 143.642326][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 143.642337][ T31] audit: type=1400 audit(1791498808.672:630): avc: denied { ioctl } for pid=9526 comm="syz.4.1710" path="socket:[27314]" dev="sockfs" ino=27314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.697222][ T5695] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 143.697241][ T5695] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 143.697254][ T5695] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 143.697267][ T5695] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 143.697280][ T5695] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 143.697293][ T5695] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 143.697306][ T5695] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 143.697318][ T5695] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 143.769630][ T5695] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 143.816634][ T5695] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input30 [ 143.869691][ T5695] input input30: event field not found [ 143.987464][ T5695] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 144.017662][ T5695] usb 1-1: USB disconnect, device number 11 [ 144.165475][ T9537] fido_id[9537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 144.526699][ T31] audit: type=1400 audit(1791498809.552:631): avc: denied { create } for pid=9561 comm="syz.0.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.561920][ T31] audit: type=1400 audit(1791498809.592:632): avc: denied { read write } for pid=9560 comm="syz.4.1726" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 144.562137][ T31] audit: type=1400 audit(1791498809.592:633): avc: denied { open } for pid=9560 comm="syz.4.1726" path="/338/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 144.562912][ T31] audit: type=1400 audit(1791498809.592:634): avc: denied { write } for pid=9561 comm="syz.0.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.565729][ T31] audit: type=1400 audit(1791498809.592:635): avc: denied { ioctl } for pid=9560 comm="syz.4.1726" path="/338/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 144.566005][ T9562] zero sized request [ 144.873278][ T9577] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 144.873458][ T9577] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 144.948741][ T9577] CIFS: VFS: Error connecting to socket. Aborting operation. [ 144.948804][ T9577] CIFS: VFS: cifs_mount failed w/return code = -111 [ 145.137351][ T9585] loop6: detected capacity change from 0 to 8 [ 145.161051][ T9585] loop6: detected capacity change from 8 to 7 [ 145.177118][ T9587] xt_limit: Overflow, try lower: 0/0 [ 145.196198][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 145.214724][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.214878][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.216756][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.216788][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.217274][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.217304][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.251980][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.252065][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.307917][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.307960][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.321382][ T5695] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 145.492357][ T5695] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 145.498182][ T5695] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 145.498212][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.516970][ T5695] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 145.516986][ T5695] usb 2-1: Manufacturer: syz [ 145.542224][ T5695] usb 2-1: config 0 descriptor?? [ 145.660181][ T5695] rc_core: IR keymap rc-hauppauge not found [ 145.660193][ T5695] Registered IR keymap rc-empty [ 145.661038][ T5695] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 145.667089][ T5695] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 145.771961][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.772178][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.813278][ T5695] usb 2-1: USB disconnect, device number 12 [ 145.982837][ T31] audit: type=1400 audit(1791498811.012:636): avc: denied { read } for pid=9616 comm="syz.3.1750" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 145.982867][ T31] audit: type=1400 audit(1791498811.012:637): avc: denied { open } for pid=9616 comm="syz.3.1750" path="/364/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 146.313642][ T9633] fsa4480 0-0042: error -ENODEV: FSA4480 not found [ 146.313842][ T9633] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42 [ 146.529159][ T5695] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 146.679626][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 146.680323][ T5695] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 146.681195][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.685217][ T5695] usb 1-1: config 0 descriptor?? [ 146.914494][ T5695] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 146.926299][ T5695] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.952355][ T5695] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 146.952381][ T5695] usb 1-1: media controller created [ 147.007267][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.141599][ T5695] az6027: usb out operation failed. (-71) [ 147.142899][ T5695] az6027: usb out operation failed. (-71) [ 147.142908][ T5695] stb0899_attach: Driver disabled by Kconfig [ 147.142914][ T5695] az6027: no front-end attached [ 147.142914][ T5695] [ 147.145063][ T5695] az6027: usb out operation failed. (-71) [ 147.145073][ T5695] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 147.145951][ T5695] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 147.208860][ T5695] dvb-usb: schedule remote query interval to 400 msecs. [ 147.208874][ T5695] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 147.247998][ T5695] usb 1-1: USB disconnect, device number 12 [ 147.376216][ T5695] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 147.774791][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1778'. [ 148.286625][ T9700] usb usb8: usbfs: process 9700 (syz.1.1788) did not claim interface 0 before use [ 148.667255][ T9717] Attempt to restore checkpoint with obsolete wellknown handles [ 149.195802][ T9738] nbd: nbd1 already in use [ 149.888229][ T9762] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 150.024206][ T31] audit: type=1400 audit(1791498815.052:638): avc: denied { listen } for pid=9768 comm="syz.3.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 150.246508][ T31] audit: type=1400 audit(1791498815.272:639): avc: denied { bind } for pid=9776 comm="syz.1.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.329612][ T31] audit: type=1400 audit(1791498815.352:640): avc: denied { setopt } for pid=9781 comm="syz.3.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 150.380989][ T9779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1824'. [ 150.689494][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 150.840608][ T10] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 150.861212][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.861229][ T10] usb 2-1: Product: syz [ 150.861237][ T10] usb 2-1: Manufacturer: syz [ 150.861245][ T10] usb 2-1: SerialNumber: syz [ 150.862539][ T10] usb 2-1: config 0 descriptor?? [ 150.899669][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 150.907871][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.908771][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 150.908795][ T10] usb 2-1: media controller created [ 150.963532][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.989064][ T9821] kAFS: Invalid Command on /proc/fs/afs/cells file [ 151.094909][ T10] DVB: Unable to find symbol mt352_attach() [ 151.123369][ T9786] dvb-usb: bulk message failed: -22 (7/0) [ 151.198075][ T10] DVB: Unable to find symbol nxt6000_attach() [ 151.198086][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 151.219432][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 151.226186][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 151.226920][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 151.226932][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 151.226941][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 151.285060][ T10] usb 2-1: USB disconnect, device number 13 [ 151.350891][ T9836] syz_tun: entered promiscuous mode [ 151.354634][ T9836] macvtap1: entered promiscuous mode [ 151.354730][ T9836] macvtap1: entered allmulticast mode [ 151.357010][ T9836] syz_tun: entered allmulticast mode [ 151.395255][ T9836] syz_tun: left allmulticast mode [ 151.395353][ T9836] syz_tun: left promiscuous mode [ 151.422251][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 151.555241][ T31] audit: type=1400 audit(1791498816.582:641): avc: denied { mounton } for pid=9843 comm="syz.3.1852" path="/386/file0" dev="tmpfs" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 151.645621][ T9850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1855'. [ 152.871297][ T5695] kernel write not supported for file /input/event2 (pid: 5695 comm: kworker/0:3) [ 153.033557][ T31] audit: type=1400 audit(1791498818.062:642): avc: denied { mounton } for pid=9890 comm="syz.2.1874" path="/proc/906/net/netfilter" dev="proc" ino=4026533223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 153.090064][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.185873][ T31] audit: type=1400 audit(1791498818.212:643): avc: denied { listen } for pid=9895 comm="syz.1.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.212632][ T31] audit: type=1400 audit(1791498818.242:644): avc: denied { accept } for pid=9895 comm="syz.1.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.259287][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 153.259698][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 153.262073][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.262089][ T10] usb 4-1: config 179 has no interface number 0 [ 153.262109][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 153.262123][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 153.262137][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.262257][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 153.262297][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.262325][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.266845][ T9881] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.492450][ T31] audit: type=1400 audit(1791498818.522:645): avc: denied { mount } for pid=9898 comm="syz.4.1878" name="/" dev="ramfs" ino=28726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 153.495647][ T9901] bridge_slave_1: invalid flags given to default FDB implementation [ 153.608678][ T31] audit: type=1400 audit(1791498818.632:646): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 153.694007][ T1671] usb 4-1: USB disconnect, device number 10 [ 153.694040][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 153.694063][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 154.265429][ T9927] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1890'. [ 154.267574][ T9927] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1890'. [ 154.417841][ T31] audit: type=1400 audit(1791498819.442:647): avc: denied { bind } for pid=9936 comm="syz.2.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.437544][ T9978] netlink: 'syz.0.1912': attribute type 2 has an invalid length. [ 155.542659][ T9981] jffs2: notice: (9981) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 155.583715][ T31] audit: type=1400 audit(1791498820.612:648): avc: denied { write } for pid=9979 comm="syz.3.1913" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.908105][ T31] audit: type=1400 audit(1791498820.932:649): avc: denied { wake_alarm } for pid=9994 comm="syz.2.1919" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 h[ 161.148204][ C0] sched: DL replenish lagged too much [ 188.842809][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.203718][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.068915][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 290.075868][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10005/1:b..l P5590/1:b..l [ 290.084963][ C0] rcu: (detected by 0, t=10502 jiffies, g=38045, q=1547888 ncpus=1) [ 290.092992][ C0] task:udevd state:R running task stack:24568 pid:5590 tgid:5590 ppid:4970 task_flags:0x40014c flags:0x00080000 [ 290.106425][ C0] Call Trace: [ 290.109675][ C0] [ 290.112590][ C0] __schedule+0x1259/0x6920 [ 290.117075][ C0] ? __pfx___schedule+0x10/0x10 [ 290.121898][ C0] ? mark_held_locks+0x40/0x70 [ 290.126633][ C0] preempt_schedule_irq+0x4e/0x90 [ 290.131632][ C0] irqentry_exit+0x205/0xa10 [ 290.136193][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 290.142143][ C0] RIP: 0010:unwind_next_frame+0xf9a/0x2090 [ 290.147924][ C0] Code: 8d 78 20 e8 88 e8 ff ff 49 8d 7d 40 48 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 0d 00 00 <49> 89 6d 40 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 0f [ 290.167500][ C0] RSP: 0018:ffffc90003f473b0 EFLAGS: 00000246 [ 290.173532][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91e8bfc2 [ 290.181471][ C0] RDX: 1ffff920007e8e8c RSI: ffffc90003f47dd8 RDI: ffffc90003f47460 [ 290.189415][ C0] RBP: ffff8880226e9880 R08: 0000000000000001 R09: 0000000000000007 [ 290.197354][ C0] R10: 0000000000000200 R11: 000000000000c783 R12: ffffc90003f47470 [ 290.205300][ C0] R13: ffffc90003f47420 R14: ffffc90003f47de8 R15: ffffc90003f47454 [ 290.213248][ C0] ? mmput+0x67/0x80 [ 290.217116][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 290.223237][ C0] arch_stack_walk+0x94/0xf0 [ 290.227801][ C0] ? do_exit+0x83b/0x2a50 [ 290.232104][ C0] stack_trace_save+0x8e/0xc0 [ 290.236757][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 290.242097][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 290.247004][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 290.252778][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 290.257951][ C0] save_stack+0x162/0x1e0 [ 290.262254][ C0] ? __pfx_save_stack+0x10/0x10 [ 290.267081][ C0] ? free_unref_folios+0xa4a/0x1790 [ 290.272247][ C0] ? folios_put_refs+0x585/0xaa0 [ 290.277163][ C0] ? free_pages_and_swap_cache+0x22d/0x3b0 [ 290.282937][ C0] ? __tlb_batch_free_encoded_pages+0xe9/0x280 [ 290.289061][ C0] ? tlb_finish_mmu+0x1b0/0x810 [ 290.293891][ C0] ? exit_mmap+0x454/0xa00 [ 290.298286][ C0] ? __mmput+0x12a/0x410 [ 290.302505][ C0] ? mmput+0x67/0x80 [ 290.306373][ C0] ? page_ext_put+0x3e/0xd0 [ 290.310853][ C0] __reset_page_owner+0x84/0x190 [ 290.315773][ C0] free_unref_folios+0xa4a/0x1790 [ 290.320770][ C0] ? folios_put_refs+0x51d/0xaa0 [ 290.325678][ C0] ? folios_put_refs+0x51d/0xaa0 [ 290.330590][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 290.336366][ C0] folios_put_refs+0x585/0xaa0 [ 290.341104][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 290.346364][ C0] ? mark_held_locks+0x40/0x70 [ 290.351103][ C0] free_pages_and_swap_cache+0x22d/0x3b0 [ 290.356713][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 290.362859][ C0] ? __pfx___might_resched+0x10/0x10 [ 290.368116][ C0] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 290.374070][ C0] tlb_finish_mmu+0x1b0/0x810 [ 290.378722][ C0] exit_mmap+0x454/0xa00 [ 290.382939][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 290.387682][ C0] ? rcu_is_watching+0x13/0xc0 [ 290.392432][ C0] ? uprobe_clear_state+0x49/0x250 [ 290.397518][ C0] ? find_held_lock+0x2b/0x80 [ 290.402166][ C0] ? uprobe_clear_state+0x5f/0x250 [ 290.407253][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 290.412871][ C0] __mmput+0x12a/0x410 [ 290.416911][ C0] mmput+0x67/0x80 [ 290.420603][ C0] do_exit+0x83b/0x2a50 [ 290.424734][ C0] ? do_raw_spin_lock+0x128/0x260 [ 290.429729][ C0] ? __pfx_do_exit+0x10/0x10 [ 290.434296][ C0] ? do_group_exit+0x1bd/0x2a0 [ 290.439033][ C0] ? rcu_is_watching+0x13/0xc0 [ 290.443772][ C0] do_group_exit+0xd5/0x2a0 [ 290.448251][ C0] __x64_sys_exit_group+0x3e/0x50 [ 290.453253][ C0] x64_sys_call+0x1567/0x1570 [ 290.457898][ C0] do_syscall_64+0x123/0x790 [ 290.462466][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.468338][ C0] RIP: 0033:0x7f8f984f16c5 [ 290.472737][ C0] RSP: 002b:00007fff0f726a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 290.481143][ C0] RAX: ffffffffffffffda RBX: 0000555dc4908f80 RCX: 00007f8f984f16c5 [ 290.489097][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 290.497037][ C0] RBP: 0000555dc44772c0 R08: 0000000000000000 R09: 0000000000000000 [ 290.504977][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.512923][ C0] R13: 00007fff0f726a50 R14: 0000000000000000 R15: 0000000000000000 [ 290.520879][ C0] [ 290.523869][ C0] task:syz.3.1922 state:R running task stack:27160 pid:10005 tgid:10002 ppid:5598 task_flags:0x40054c flags:0x00080002 [ 290.537316][ C0] Call Trace: [ 290.540565][ C0] [ 290.543467][ C0] __schedule+0x1259/0x6920 [ 290.547949][ C0] ? page_table_check_clear+0x119/0x540 [ 290.553469][ C0] ? __pfx___schedule+0x10/0x10 [ 290.558289][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 290.563652][ C0] preempt_schedule_common+0x3c/0xb0 [ 290.568942][ C0] preempt_schedule_thunk+0x16/0x40 [ 290.574131][ C0] _raw_spin_unlock+0x3e/0x50 [ 290.578787][ C0] __zap_vma_range+0x16b0/0x48e0 [ 290.583709][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 290.588968][ C0] ? mas_next_slot+0xc05/0x13a0 [ 290.593798][ C0] unmap_vmas+0x299/0x5f0 [ 290.598112][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 290.602937][ C0] ? mas_next_slot+0xc05/0x13a0 [ 290.607765][ C0] exit_mmap+0x1ef/0xa00 [ 290.611981][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 290.616715][ C0] ? rcu_is_watching+0x13/0xc0 [ 290.621455][ C0] ? find_held_lock+0x2b/0x80 [ 290.626106][ C0] ? uprobe_clear_state+0x5f/0x250 [ 290.631193][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 290.636805][ C0] __mmput+0x12a/0x410 [ 290.640844][ C0] mmput+0x67/0x80 [ 290.644535][ C0] do_exit+0x83b/0x2a50 [ 290.648666][ C0] ? __pfx_do_exit+0x10/0x10 [ 290.653229][ C0] ? do_raw_spin_lock+0x128/0x260 [ 290.658224][ C0] ? find_held_lock+0x2b/0x80 [ 290.662876][ C0] ? get_signal+0x7e0/0x21e0 [ 290.667446][ C0] do_group_exit+0xd5/0x2a0 [ 290.671923][ C0] get_signal+0x1ec7/0x21e0 [ 290.676403][ C0] ? __pfx_get_signal+0x10/0x10 [ 290.681224][ C0] ? do_futex+0x190/0x440 [ 290.685529][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 290.691049][ C0] ? fd_install+0x223/0x580 [ 290.695525][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 290.701653][ C0] ? __sys_socket+0xac/0x260 [ 290.706224][ C0] exit_to_user_mode_loop+0x139/0x700 [ 290.711574][ C0] ? rcu_is_watching+0x13/0xc0 [ 290.716312][ C0] do_syscall_64+0x661/0x790 [ 290.720885][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.726754][ C0] RIP: 0033:0x7f916cd9e1d9 [ 290.731136][ C0] RSP: 002b:00007f916dbf80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 290.739516][ C0] RAX: 0000000000000000 RBX: 00007f916d025fa8 RCX: 00007f916cd9e1d9 [ 290.747456][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f916d025fa8 [ 290.755400][ C0] RBP: 00007f916d025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 290.763348][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.771287][ C0] R13: 00007f916d026038 R14: 00007ffea7d652d0 R15: 00007ffea7d653b8 [ 290.779235][ C0] [ 290.782227][ C0] rcu: rcu_preempt kthread starved for 869 jiffies! g38045 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 290.793042][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 290.802982][ C0] rcu: RCU grace-period kthread stack dump: [ 290.808836][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 290.822274][ C0] Call Trace: [ 290.825524][ C0] [ 290.828430][ C0] __schedule+0x1259/0x6920 [ 290.832908][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 290.837830][ C0] ? lock_acquire+0x1d1/0x380 [ 290.842475][ C0] ? __pfx___schedule+0x10/0x10 [ 290.847303][ C0] ? find_held_lock+0x2b/0x80 [ 290.851952][ C0] ? schedule+0x225/0x2c0 [ 290.856250][ C0] schedule+0xdd/0x2c0 [ 290.860290][ C0] schedule_timeout+0x127/0x280 [ 290.865112][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 290.870457][ C0] ? __pfx_process_timeout+0x10/0x10 [ 290.875712][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 290.881487][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 290.886917][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 290.891653][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 290.896914][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 290.901840][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 290.907026][ C0] ? rcu_is_watching+0x13/0xc0 [ 290.911783][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 290.917567][ C0] rcu_gp_kthread+0x17a/0x220 [ 290.922221][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 290.927397][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 290.933178][ C0] ? __kthread_parkme+0x18f/0x230 [ 290.938185][ C0] ? kthread+0x13a/0x450 [ 290.942399][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 290.947567][ C0] kthread+0x373/0x450 [ 290.951617][ C0] ? __pfx_kthread+0x10/0x10 [ 290.956180][ C0] ret_from_fork+0x730/0xd60 [ 290.960742][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 290.965828][ C0] ? __switch_to+0x800/0x10f0 [ 290.970480][ C0] ? __pfx_kthread+0x10/0x10 [ 290.975045][ C0] ret_from_fork_asm+0x1a/0x30 [ 290.979785][ C0] [ 290.982774][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 290.989072][ C0] CPU: 0 UID: 0 PID: 268 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 290.998411][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 291.008440][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 291.014655][ C0] RIP: 0010:unwind_next_frame+0x4ec/0x2090 [ 291.020433][ C0] Code: 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 4c 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 51 15 00 00 0f b6 41 05 <83> e0 07 0f 84 53 fe ff ff 3c 01 0f 84 7b fe ff ff 4c 8d 41 04 4c [ 291.040008][ C0] RSP: 0018:ffffc90000006f30 EFLAGS: 00000246 [ 291.046051][ C0] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff9297cf2a [ 291.053999][ C0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffffffff91d351a0 [ 291.061946][ C0] RBP: ffffc90000006fe8 R08: ffffffff9297cf30 R09: 0000000000000007 [ 291.069885][ C0] R10: 0000000000000200 R11: 00000000000a45cd R12: ffffc90000006ff0 [ 291.077825][ C0] R13: ffffc90000006fa0 R14: ffffc90000006fd5 R15: ffffffff9297cf2f [ 291.085763][ C0] FS: 0000000000000000(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 291.094662][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.101216][ C0] CR2: 00005555622bea48 CR3: 000000005ec6f000 CR4: 00000000003526f0 [ 291.109164][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.117111][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 291.125051][ C0] Call Trace: [ 291.128310][ C0] [ 291.131126][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf22/0x1c70 [ 291.137340][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.143463][ C0] arch_stack_walk+0x94/0xf0 [ 291.148033][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf22/0x1c70 [ 291.154255][ C0] stack_trace_save+0x8e/0xc0 [ 291.158902][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 291.164244][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 291.169154][ C0] kasan_save_stack+0x30/0x50 [ 291.173801][ C0] ? kasan_save_stack+0x30/0x50 [ 291.178631][ C0] ? kasan_save_track+0x14/0x30 [ 291.183453][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 291.188448][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 291.194058][ C0] ? kmem_alloc_batch+0x49/0x170 [ 291.198968][ C0] ? debug_objects_fill_pool+0x24d/0x590 [ 291.204572][ C0] ? debug_object_activate+0x103/0x4b0 [ 291.210001][ C0] ? __call_rcu_common.constprop.0+0x35/0x9b0 [ 291.216038][ C0] ? dst_release+0x25a/0x330 [ 291.220606][ C0] ? skb_release_head_state+0x293/0x400 [ 291.226121][ C0] ? consume_skb+0x8a/0x110 [ 291.230600][ C0] ? nft_synproxy_do_eval+0xa72/0xd30 [ 291.235946][ C0] ? nft_do_chain+0x2e5/0x19d0 [ 291.240677][ C0] ? nft_do_chain_ipv4+0x1d0/0x250 [ 291.245762][ C0] ? nf_hook_slow+0xbf/0x220 [ 291.250321][ C0] ? nf_hook.constprop.0+0x2a6/0x750 [ 291.255587][ C0] ? ip_local_deliver+0x163/0x1f0 [ 291.260581][ C0] ? ip_rcv+0x33a/0x3c0 [ 291.264708][ C0] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 291.270743][ C0] ? __netif_receive_skb+0x1f/0x120 [ 291.275912][ C0] ? process_backlog+0x487/0x1600 [ 291.280906][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 291.286429][ C0] ? net_rx_action+0xa40/0xf20 [ 291.291163][ C0] ? handle_softirqs+0x1e6/0x9d0 [ 291.296075][ C0] ? do_softirq+0xaf/0xf0 [ 291.300372][ C0] ? __local_bh_enable_ip+0xff/0x120 [ 291.305627][ C0] ? cfg80211_put_bss+0x1b4/0x280 [ 291.310626][ C0] ? ieee80211_rx_bss_put+0x43/0x60 [ 291.315800][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf22/0x1c70 [ 291.322021][ C0] kasan_save_track+0x14/0x30 [ 291.326670][ C0] __kasan_slab_alloc+0x89/0x90 [ 291.331495][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 291.336939][ C0] ? kmem_alloc_batch+0x49/0x170 [ 291.341849][ C0] kmem_alloc_batch+0x49/0x170 [ 291.346585][ C0] debug_objects_fill_pool+0x24d/0x590 [ 291.352020][ C0] ? ip_output+0x3d7/0xc10 [ 291.356407][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 291.362371][ C0] ? __pfx_ip_output+0x10/0x10 [ 291.367109][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 291.372540][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 291.377799][ C0] debug_object_activate+0x103/0x4b0 [ 291.383059][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 291.388851][ C0] ? synproxy_send_tcp.isra.0+0x4cb/0x6e0 [ 291.394545][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 291.399816][ C0] __call_rcu_common.constprop.0+0x35/0x9b0 [ 291.405684][ C0] dst_release+0x25a/0x330 [ 291.410083][ C0] skb_release_head_state+0x293/0x400 [ 291.415432][ C0] consume_skb+0x8a/0x110 [ 291.419732][ C0] nft_synproxy_do_eval+0xa72/0xd30 [ 291.424917][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 291.430615][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 291.436653][ C0] ? __pfx_nft_objref_eval+0x10/0x10 [ 291.441913][ C0] nft_do_chain+0x2e5/0x19d0 [ 291.446485][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 291.451483][ C0] ? ipt_do_table+0xd4f/0x1b00 [ 291.456227][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 291.461483][ C0] ? ipt_do_table+0xd7f/0x1b00 [ 291.466226][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 291.471232][ C0] nft_do_chain_ipv4+0x1d0/0x250 [ 291.476142][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 291.481585][ C0] ? iptable_mangle_hook+0x71/0x4b0 [ 291.486841][ C0] ? nf_hook.constprop.0+0x98/0x750 [ 291.492013][ C0] nf_hook_slow+0xbf/0x220 [ 291.496405][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 291.501492][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 291.507443][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 291.513047][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 291.518132][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 291.524088][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 291.529347][ C0] ip_local_deliver+0x163/0x1f0 [ 291.534169][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 291.539514][ C0] ip_rcv+0x33a/0x3c0 [ 291.543469][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 291.547944][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 291.553820][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 291.560215][ C0] ? lock_acquire+0x1d1/0x380 [ 291.564866][ C0] ? process_backlog+0x437/0x1600 [ 291.569868][ C0] ? process_backlog+0x437/0x1600 [ 291.574873][ C0] __netif_receive_skb+0x1f/0x120 [ 291.579870][ C0] process_backlog+0x487/0x1600 [ 291.584709][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 291.590055][ C0] net_rx_action+0xa40/0xf20 [ 291.594622][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 291.599711][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 291.605485][ C0] ? try_to_wake_up+0x158/0x1c90 [ 291.610405][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 291.615598][ C0] ? sched_clock+0x3a/0x60 [ 291.619992][ C0] ? sched_clock_cpu+0x6c/0x570 [ 291.624823][ C0] ? tmigr_handle_remote+0x132/0x380 [ 291.630093][ C0] ? mark_held_locks+0x40/0x70 [ 291.634843][ C0] handle_softirqs+0x1e6/0x9d0 [ 291.639583][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 291.644848][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 291.650104][ C0] ? cfg80211_put_bss+0x1b4/0x280 [ 291.655102][ C0] do_softirq+0xaf/0xf0 [ 291.659243][ C0] [ 291.662153][ C0] [ 291.665056][ C0] __local_bh_enable_ip+0xff/0x120 [ 291.670137][ C0] cfg80211_put_bss+0x1b4/0x280 [ 291.674969][ C0] ieee80211_rx_bss_put+0x43/0x60 [ 291.679981][ C0] ieee80211_ibss_rx_queued_mgmt+0xf22/0x1c70 [ 291.686049][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 291.692558][ C0] ? kcov_remote_start+0x3bf/0x6d0 [ 291.697656][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 291.702835][ C0] ieee80211_iface_work+0xa9a/0x1070 [ 291.708103][ C0] cfg80211_wiphy_work+0x2b7/0x550 [ 291.713192][ C0] process_one_work+0xac7/0x1b10 [ 291.718113][ C0] ? __pfx_process_one_work+0x10/0x10 [ 291.723458][ C0] ? lock_acquire+0x1d1/0x380 [ 291.728111][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 291.733728][ C0] worker_thread+0x5ef/0xe50 [ 291.738292][ C0] ? kthread+0x13a/0x450 [ 291.742510][ C0] ? __pfx_worker_thread+0x10/0x10 [ 291.747589][ C0] kthread+0x373/0x450 [ 291.751632][ C0] ? __pfx_kthread+0x10/0x10 [ 291.756198][ C0] ret_from_fork+0x730/0xd60 [ 291.760761][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 291.765853][ C0] ? __switch_to+0x800/0x10f0 [ 291.770503][ C0] ? __pfx_kthread+0x10/0x10 [ 291.775068][ C0] ret_from_fork_asm+0x1a/0x30 [ 291.779820][ C0]