last executing test programs: 24.547302384s ago: executing program 0 (id=2154): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000340)='./file0\x00') open(&(0x7f0000000480)='./file0\x00', 0x80040, 0x3) 24.48352468s ago: executing program 0 (id=2157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x161101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000200)={0xb000000000000000, 0xdddd1000, 0x100000000, 0x0, 0xe}) 24.266134865s ago: executing program 0 (id=2164): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x1c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4, 0x1}]}, 0x1c}], 0x1}, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) 24.166374697s ago: executing program 0 (id=2169): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 24.02376608s ago: executing program 0 (id=2173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) 23.519375106s ago: executing program 0 (id=2185): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 23.317401614s ago: executing program 32 (id=2185): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 3.211245087s ago: executing program 4 (id=2576): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x181000, 0x40) lseek(r0, 0xbfffffffffffffff, 0x1) 3.096094123s ago: executing program 4 (id=2579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r0) 2.946529671s ago: executing program 4 (id=2585): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1e}}], 0x30}, 0x44) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 2.670338219s ago: executing program 4 (id=2592): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x19ee0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.518106102s ago: executing program 4 (id=2597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x6a, &(0x7f0000000080)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x83c0550b, 0x0) 1.928956002s ago: executing program 4 (id=2610): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000002c40)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000002c80)={0x28, 0x0, 0xffffffff}, 0x10) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 1.434399077s ago: executing program 1 (id=2618): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r0, r1, 0x0, 0x8000fb00) 1.308127192s ago: executing program 1 (id=2619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}}, 0x0) 1.307580737s ago: executing program 1 (id=2620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 791.172276ms ago: executing program 3 (id=2626): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x40005, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2040, 0x0) 685.257564ms ago: executing program 5 (id=2628): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000}, 0x20) 626.719323ms ago: executing program 3 (id=2629): getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000), &(0x7f00000000c0)=0x24) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000100)=""/186}, 0x20) 569.581315ms ago: executing program 2 (id=2630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 568.897754ms ago: executing program 5 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}, {0x8, 0x0, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) 480.288305ms ago: executing program 2 (id=2632): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9b04}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r1, @ANYBLOB="f900000000000000240012800c0001006d6163766c616e00140002800800010010000000080003"], 0x4c}}, 0x0) 479.644441ms ago: executing program 5 (id=2633): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0xffffffffffffffc1}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 464.055942ms ago: executing program 3 (id=2634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001000040"]) 366.713811ms ago: executing program 2 (id=2635): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000480)) write$UHID_INPUT(r1, &(0x7f00000009c0)={0x8, {"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", 0x1000}}, 0x1006) 321.257699ms ago: executing program 2 (id=2636): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x7c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xffae, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x20}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x4}, @TCA_PIE_ALPHA={0x8, 0x4, 0x19}, @TCA_PIE_TARGET={0x8, 0x1, 0x728}, @TCA_PIE_BYTEMODE={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xef}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x101}}]}, 0x7c}}, 0x0) 319.400039ms ago: executing program 3 (id=2637): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040), 0xa79ae1e8b44788da}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 296.035375ms ago: executing program 1 (id=2638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x1, &(0x7f0000001480)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000300)=""/4096, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) 248.057973ms ago: executing program 3 (id=2639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48f, 0x0, 0xa}]}) 187.550479ms ago: executing program 1 (id=2640): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x96, @vifc_lcl_ifindex=r2, @rand_addr=0x64010100}, 0x10) 131.187434ms ago: executing program 2 (id=2641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) close(r0) 131.022778ms ago: executing program 5 (id=2642): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=[0x4, 0xf1c1, 0x9], &(0x7f0000000140)=[0x4], &(0x7f0000000180)=[0x2, 0x2, 0x5, 0x5, 0x7, 0x7f, 0x84f3], &(0x7f00000001c0)}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e04046d0c"], 0x7) 109.546765ms ago: executing program 5 (id=2643): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) 74.124503ms ago: executing program 3 (id=2644): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x40, 0xd, 0x5, {0x5, 0x22, "4a20ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 820.741µs ago: executing program 2 (id=2645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000002c0)={0xeeef0000, 0x10000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x1}) 641.207µs ago: executing program 5 (id=2646): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=2647): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) kernel console output (not intermixed with test programs): B device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 128.467036][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.476809][ T5829] usb 1-1: config 0 descriptor?? [ 128.505589][ T5869] psmouse serio2: Failed to enable mouse on [ 128.690168][ T5829] hdpvr 1-1:0.0: firmware version 0x0 dated [ 128.703399][ T5829] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 128.725850][ T29] audit: type=1400 audit(1740707151.213:560): avc: denied { read write } for pid=8547 comm="syz.3.1114" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.752572][ T29] audit: type=1400 audit(1740707151.213:561): avc: denied { open } for pid=8547 comm="syz.3.1114" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.775900][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.785011][ T29] audit: type=1400 audit(1740707151.223:562): avc: denied { map } for pid=8547 comm="syz.3.1114" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.808265][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.844597][ T29] audit: type=1400 audit(1740707151.313:563): avc: denied { read write } for pid=8549 comm="syz.2.1115" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 128.879558][ T29] audit: type=1400 audit(1740707151.313:564): avc: denied { open } for pid=8549 comm="syz.2.1115" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 128.911188][ T29] audit: type=1400 audit(1740707151.323:565): avc: denied { mounton } for pid=8549 comm="syz.2.1115" path="/218/file0" dev="tmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.131039][ T5829] hdpvr 1-1:0.0: Could not setup controls [ 129.141764][ T5829] hdpvr 1-1:0.0: registering videodev failed [ 129.162912][ T5829] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 129.181617][ T8491] Restarting kernel threads ... done. [ 129.189737][ T5829] usb 1-1: USB disconnect, device number 16 [ 130.715763][ T5918] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 130.866963][ T5918] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.880190][ T5918] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 130.898360][ T5918] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.907884][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.916912][ T5918] usb 3-1: Product: syz [ 130.955505][ T5918] usb 3-1: Manufacturer: syz [ 130.960144][ T5918] usb 3-1: SerialNumber: syz [ 130.970305][ T8586] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.214378][ T5918] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 131.236348][ T5918] usb 3-1: USB disconnect, device number 12 [ 131.780561][ T5918] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 131.809221][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'. [ 131.983996][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 132.028877][ T5918] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 132.045221][ T5918] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 132.059726][ T5918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.068445][ T8626] vlan3: entered promiscuous mode [ 132.074594][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.074955][ T8626] vlan3: entered allmulticast mode [ 132.084563][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 132.084591][ T5918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 132.084614][ T5918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26222, setting to 1024 [ 132.153282][ T5918] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.163087][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.227017][ T8586] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.336164][ T8632] netlink: 'syz.1.1153': attribute type 32 has an invalid length. [ 132.365531][ T8632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1153'. [ 132.407025][ T8637] bridge_slave_0: default FDB implementation only supports local addresses [ 132.449730][ T5918] usb 3-1: usb_control_msg returned -71 [ 132.455340][ T5918] usbtmc 3-1:16.0: can't read capabilities [ 132.491348][ T5918] usb 3-1: USB disconnect, device number 13 [ 132.500879][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.816524][ T8652] overlayfs: missing 'workdir' [ 132.986563][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 132.986578][ T29] audit: type=1400 audit(1740707155.483:592): avc: denied { setopt } for pid=8660 comm="syz.4.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.109825][ T29] audit: type=1400 audit(1740707155.603:593): avc: denied { bind } for pid=8664 comm="syz.4.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.196099][ T29] audit: type=1400 audit(1740707155.623:594): avc: denied { name_bind } for pid=8664 comm="syz.4.1170" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 133.271173][ T29] audit: type=1400 audit(1740707155.623:595): avc: denied { node_bind } for pid=8664 comm="syz.4.1170" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 133.355407][ T29] audit: type=1400 audit(1740707155.623:596): avc: denied { write } for pid=8664 comm="syz.4.1170" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.387200][ T29] audit: type=1400 audit(1740707155.623:597): avc: denied { name_connect } for pid=8664 comm="syz.4.1170" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 133.425478][ T29] audit: type=1400 audit(1740707155.853:598): avc: denied { setopt } for pid=8676 comm="syz.1.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.476026][ T29] audit: type=1400 audit(1740707155.943:599): avc: denied { mount } for pid=8679 comm="syz.4.1177" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 133.527325][ T29] audit: type=1400 audit(1740707155.953:600): avc: denied { remount } for pid=8679 comm="syz.4.1177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 133.619927][ T29] audit: type=1400 audit(1740707156.013:601): avc: denied { unmount } for pid=7309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 133.659824][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 133.669132][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 134.678562][ T8733] vlan2: entered promiscuous mode [ 134.684740][ T8733] vlan2: entered allmulticast mode [ 135.479650][ T8772] loop9: detected capacity change from 0 to 8 [ 135.488586][ T8772] Dev loop9: unable to read RDB block 8 [ 135.514344][ T8772] loop9: unable to read partition table [ 135.540968][ T8772] loop9: partition table beyond EOD, truncated [ 135.557919][ T8772] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 135.775252][ T8784] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1238'. [ 136.429462][ T8821] CIFS: VFS: Malformed UNC in devname [ 136.835741][ T9] kernel read not supported for file /vcs (pid: 9 comm: kworker/0:1) [ 138.125251][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 138.525548][ T5918] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 138.659784][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 138.659800][ T29] audit: type=1400 audit(1740707161.153:659): avc: denied { create } for pid=8930 comm="syz.4.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 138.690752][ T29] audit: type=1400 audit(1740707161.183:660): avc: denied { write } for pid=8930 comm="syz.4.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 138.714299][ T5918] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 138.723592][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.734492][ T5918] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 138.743793][ T5918] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 138.755396][ T5918] usb 2-1: Manufacturer: syz [ 138.778554][ T5918] usb 2-1: config 0 descriptor?? [ 138.905527][ T5918] rc_core: IR keymap rc-hauppauge not found [ 138.915438][ T5918] Registered IR keymap rc-empty [ 138.923483][ T5918] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 138.946876][ T29] audit: type=1400 audit(1740707161.433:661): avc: denied { connect } for pid=8947 comm="syz.3.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.967824][ T5918] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 139.116488][ T8958] bridge0: port 3(ipvlan2) entered blocking state [ 139.136070][ T8958] bridge0: port 3(ipvlan2) entered disabled state [ 139.173434][ T8958] ipvlan2: entered allmulticast mode [ 139.183401][ T29] audit: type=1400 audit(1740707161.673:662): avc: denied { create } for pid=8959 comm="syz.2.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.221814][ T8952] rc rc0: two consecutive events of type space [ 139.228935][ T8958] bridge0: entered allmulticast mode [ 139.260659][ T8958] ipvlan2: left allmulticast mode [ 139.269395][ T29] audit: type=1400 audit(1740707161.673:663): avc: denied { connect } for pid=8959 comm="syz.2.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.309356][ T8958] bridge0: left allmulticast mode [ 139.327852][ T29] audit: type=1400 audit(1740707161.683:664): avc: denied { write } for pid=8959 comm="syz.2.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.426719][ T5918] usb 2-1: USB disconnect, device number 16 [ 139.472586][ T29] audit: type=1400 audit(1740707161.843:665): avc: denied { mount } for pid=8963 comm="syz.2.1309" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 139.500474][ T29] audit: type=1400 audit(1740707161.923:666): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 139.527312][ T29] audit: type=1400 audit(1740707161.993:667): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 139.549921][ T29] audit: type=1400 audit(1740707161.993:668): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.880787][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 140.111191][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 140.371036][ T9001] loop8: detected capacity change from 0 to 1 [ 140.394171][ T9001] Dev loop8: unable to read RDB block 1 [ 140.405479][ T9001] loop8: unable to read partition table [ 140.411869][ T9001] loop8: partition table beyond EOD, truncated [ 140.423341][ T9001] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 141.689297][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 141.855725][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 141.862765][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 141.874852][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 141.884368][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.885494][ T5918] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 141.892670][ T9] usb 3-1: Product: syz [ 141.904301][ T9] usb 3-1: Manufacturer: syz [ 141.909026][ T9] usb 3-1: SerialNumber: syz [ 141.928593][ T9] usb 3-1: config 0 descriptor?? [ 141.939058][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 141.954547][ T9] usb 3-1: Detected FT232R [ 142.065553][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 142.082985][ T5918] usb 5-1: config index 0 descriptor too short (expected 17170, got 18) [ 142.115400][ T5918] usb 5-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 142.124032][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 142.150975][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 142.154251][ T5918] usb 5-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 142.195469][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.214044][ T5918] usb 5-1: Product: syz [ 142.225406][ T5918] usb 5-1: Manufacturer: syz [ 142.230100][ T5918] usb 5-1: SerialNumber: syz [ 142.246326][ T5918] usb 5-1: config 0 descriptor?? [ 142.262556][ T5918] ums-freecom 5-1:0.0: USB Mass Storage device detected [ 142.380870][ T9082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9082 comm=syz.3.1361 [ 142.393679][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 142.490545][ T9] usb 5-1: USB disconnect, device number 14 [ 142.554589][ T9092] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1366'. [ 142.627806][ T8] usb 3-1: USB disconnect, device number 14 [ 142.671878][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 142.681544][ T8] ftdi_sio 3-1:0.0: device disconnected [ 143.276829][ T9121] Attempt to restore checkpoint with obsolete wellknown handles [ 143.435501][ T5917] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 143.539097][ T9137] loop8: detected capacity change from 0 to 1 [ 143.546171][ T9137] Dev loop8: unable to read RDB block 1 [ 143.551968][ T9137] loop8: unable to read partition table [ 143.558711][ T9137] loop8: partition table beyond EOD, truncated [ 143.564941][ T9137] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 143.616872][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 143.628822][ T5917] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 143.639362][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.648001][ T5917] usb 5-1: Product: syz [ 143.652369][ T5917] usb 5-1: Manufacturer: syz [ 143.657078][ T5917] usb 5-1: SerialNumber: syz [ 143.664386][ T5917] usb 5-1: config 0 descriptor?? [ 143.733228][ T9145] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 143.880907][ T5917] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 143.887360][ T9155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1394'. [ 143.966366][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 143.966401][ T29] audit: type=1400 audit(1740707166.463:688): avc: denied { bind } for pid=9158 comm="syz.3.1395" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.019706][ T29] audit: type=1400 audit(1740707166.463:689): avc: denied { node_bind } for pid=9158 comm="syz.3.1395" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 144.049791][ T29] audit: type=1400 audit(1740707166.473:690): avc: denied { getopt } for pid=9158 comm="syz.3.1395" laddr=172.20.20.170 lport=255 faddr=224.0.0.2 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.107569][ T29] audit: type=1400 audit(1740707166.593:691): avc: denied { name_connect } for pid=9162 comm="syz.0.1397" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 144.275942][ T5917] usb write operation failed. (-71) [ 144.284752][ T5917] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 144.297866][ T5917] dvbdev: DVB: registering new adapter (Terratec H7) [ 144.319664][ T5917] usb 5-1: media controller created [ 144.326014][ T5917] usb read operation failed. (-71) [ 144.335650][ T5917] usb write operation failed. (-71) [ 144.346223][ T5917] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 144.357711][ T5917] usb 5-1: USB disconnect, device number 15 [ 144.375047][ T9176] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1414'. [ 144.705607][ T5918] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 144.878828][ T9193] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2584 sclass=netlink_xfrm_socket pid=9193 comm=syz.4.1412 [ 144.902289][ T5918] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.924575][ T5918] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.937752][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.944621][ T5918] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 144.954632][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.964162][ T5918] usb 4-1: config 0 descriptor?? [ 145.025498][ T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 145.196648][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 145.216259][ T9] usb 3-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 145.225471][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.236890][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 145.248431][ T9] usb 3-1: config 0 descriptor?? [ 145.253925][ T9189] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 145.265524][ T9198] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 145.323135][ T9200] tipc: Started in network mode [ 145.328413][ T9200] tipc: Node identity ac141441, cluster identity 4711 [ 145.339588][ T9200] tipc: Enabled bearer , priority 10 [ 145.384795][ T5918] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 145.392669][ T5918] magicmouse 0003:05AC:0265.0014: unknown main item tag 0x0 [ 145.404603][ T5918] magicmouse 0003:05AC:0265.0014: item fetching failed at offset 2/5 [ 145.413465][ T5918] magicmouse 0003:05AC:0265.0014: magicmouse hid parse failed [ 145.439235][ T5918] magicmouse 0003:05AC:0265.0014: probe with driver magicmouse failed with error -22 [ 145.629595][ T5829] usb 4-1: USB disconnect, device number 14 [ 145.666001][ T29] audit: type=1400 audit(1740707168.163:692): avc: denied { read } for pid=9218 comm="syz.0.1425" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 145.713131][ T9] a4tech 0003:09DA:0006.0015: hidraw0: USB HID v20.00 Device [HID 09da:0006] on usb-dummy_hcd.2-1/input0 [ 145.726112][ T29] audit: type=1400 audit(1740707168.163:693): avc: denied { open } for pid=9218 comm="syz.0.1425" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 145.749556][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.830157][ T9229] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1430'. [ 145.912708][ T5918] usb 3-1: USB disconnect, device number 15 [ 146.458082][ T5829] tipc: Node number set to 2886997057 [ 146.499759][ T29] audit: type=1400 audit(1740707168.993:694): avc: denied { create } for pid=9250 comm="syz.2.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.015554][ T5918] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 147.179266][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.190546][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 147.202308][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 147.213404][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 144, setting to 64 [ 147.224422][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.238992][ T5918] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 147.248207][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.256245][ T5918] usb 5-1: Product: syz [ 147.260426][ T5918] usb 5-1: Manufacturer: syz [ 147.265021][ T5918] usb 5-1: SerialNumber: syz [ 147.270657][ T5918] usb 5-1: config 0 descriptor?? [ 147.276334][ T9272] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 147.288788][ T5918] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 147.494394][ T29] audit: type=1400 audit(1740707169.983:695): avc: denied { bind } for pid=9278 comm="syz.3.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.517880][ T5918] imon:send_packet: packet tx failed (-71) [ 147.538025][ T5918] imon 5-1:0.0: panel buttons/knobs setup failed [ 147.595603][ T5918] rc_core: IR keymap rc-imon-pad not found [ 147.596032][ T8] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 147.601446][ T5918] Registered IR keymap rc-empty [ 147.601511][ T5918] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 147.601527][ T5918] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 147.601996][ T5918] imon:send_packet: packet tx failed (-71) [ 147.625740][ T5918] imon 5-1:0.0: remote input dev register failed [ 147.652688][ T5918] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 147.684102][ T5918] imon 5-1:0.0: unable to initialize intf0, err 0 [ 147.691549][ T5918] imon:imon_probe: failed to initialize context! [ 147.702336][ T5918] imon 5-1:0.0: unable to register, err -19 [ 147.711478][ T5918] usb 5-1: USB disconnect, device number 16 [ 147.778495][ T29] audit: type=1400 audit(1740707170.273:696): avc: denied { map } for pid=9288 comm="syz.1.1457" path="socket:[22702]" dev="sockfs" ino=22702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 147.801447][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.823369][ T8] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 147.831955][ T8] usb 3-1: config 0 has no interface number 0 [ 147.841054][ T8] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=f6.9e [ 147.850396][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.881074][ T8] usb 3-1: Product: syz [ 147.885265][ T8] usb 3-1: Manufacturer: syz [ 147.890078][ T8] usb 3-1: SerialNumber: syz [ 147.898453][ T8] usb 3-1: config 0 descriptor?? [ 148.120193][ T8] usb 3-1: USB disconnect, device number 16 [ 148.158440][ T29] audit: type=1400 audit(1740707170.653:697): avc: denied { write } for pid=9297 comm="syz.4.1461" name="ip_tables_matches" dev="proc" ino=4026534005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 148.185117][ T9298] overlay: Unknown parameter 'ime [ 148.185117][ T9298] string [ 148.185117][ T9298] statistic [ 148.185117][ T9298] state [ 148.185117][ T9298] realm [ 148.185117][ T9298] rateest [ 148.185117][ T9298] quota [ 148.185117][ T9298] pkttype [ 148.185117][ T9298] physdev [ 148.185117][ T9298] cgroup [ 148.185117][ T9298] cgroup [ 148.185117][ T9298] cgroup [ 148.185117][ T9298] owner [ 148.185117][ T9298] nfacct [ 148.185117][ T9298] nfacct [ 148.185117][ T9298] mac [ 148.185117][ T9298] limit [ 148.185117][ T9298] ipvs [ 148.185117][ T9298] helper [ 148.185117][ T9298] devgroup [ 148.185117][ T9298] cpu [ 148.185117][ T9298] conntrack [ 148.185117][ T9298] conntrack [ 148.185117][ T9298] conntrack [ 148.185117][ T9298] connlabel [ 148.185117][ T9298] connbytes [ 148.185117][ T9298] comment [ 148.185117][ T9298] bpf [ 148.185117][ T9298] bpf [ 148.185117][ T9298] connmark [ 148.185117][ T9298] mark [ 148.185117][ T9298] rpfilter [ 148.185117][ T9298] ah [ 148.185117][ T9298] tcpmss [ 148.185117][ T9298] socket [ 148.185117][ T9298] socket [ 148.185117][ T9298] socket [ 148.185117][ T9298] socket [ 148.185117][ T9298] sctp [ 148.185117][ T9298] recent [ 148.185117][ T9298] recent [ 148.185117][ T9298] policy [ 148.185117][ T9298] osf [ 148.185117][ T9298] multiport [ 148.185117][ T9298] length [ 148.185117][ T9298] l2tp [ 148.185117][ T9298] iprange [ 148.185117][ T9298] ipcomp [ 148.185117][ T9298] ttl [ 148.185117][ T9298] hashlimit [ 148.185117][ T9298] hashlimit [ 148.185117][ T9298] hashlimit [ 148.185117][ T9298] esp [ 148.185117][ T9298] ecn [ 148.185117][ T9298] tos [ 148.185117][ T9298] dscp [ 148.185117][ T9298] dccp [ 148.185117][ T9298] connlimit [ 148.185117][ T9298] cluster [ 148.185117][ T9298] addrtype [ 148.185117][ T9298] addrtype [ 148.185117][ T9298] set [ 148.185117][ T9298] set [ 148.185117][ T9298] set [ 148.185117][ T9298] set [ 148.185117][ T9298] set [ 148.185117][ T9298] icmp [ 148.488689][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1465'. [ 148.786409][ T9324] tipc: Started in network mode [ 148.796241][ T9324] tipc: Node identity ac141441, cluster identity 4711 [ 148.808113][ T9324] tipc: Enabled bearer , priority 10 [ 148.992645][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 148.992662][ T29] audit: type=1400 audit(1740707171.483:700): avc: denied { read } for pid=9335 comm="syz.2.1479" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.085434][ T29] audit: type=1400 audit(1740707171.483:701): avc: denied { open } for pid=9335 comm="syz.2.1479" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.195978][ T29] audit: type=1400 audit(1740707171.663:702): avc: denied { bind } for pid=9345 comm="syz.3.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.216321][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.261717][ T29] audit: type=1800 audit(1740707171.753:703): pid=9350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1486" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 149.283183][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.409068][ T29] audit: type=1400 audit(1740707171.903:704): avc: denied { create } for pid=9358 comm="syz.2.1491" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.451950][ T9359] overlay: Unknown parameter '//file0' [ 149.506118][ T29] audit: type=1400 audit(1740707171.943:705): avc: denied { mounton } for pid=9358 comm="syz.2.1491" path="/281/file0" dev="tmpfs" ino=1438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.586179][ T29] audit: type=1400 audit(1740707172.053:706): avc: denied { unlink } for pid=5821 comm="syz-executor" name="file0" dev="tmpfs" ino=1438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.631698][ T29] audit: type=1400 audit(1740707172.103:707): avc: denied { name_bind } for pid=9367 comm="syz.3.1495" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 149.705164][ T29] audit: type=1400 audit(1740707172.193:708): avc: denied { append } for pid=9372 comm="syz.1.1497" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 149.806853][ T5917] tipc: Node number set to 2886997057 [ 149.827331][ T29] audit: type=1400 audit(1740707172.323:709): avc: denied { getopt } for pid=9379 comm="syz.3.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 149.928246][ T9382] misc userio: Begin command sent, but we're already running [ 150.031437][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 150.345769][ T5918] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 150.484965][ T9412] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.494126][ T9412] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.503608][ T9412] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.513288][ T9412] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.515778][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 150.556906][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 150.566388][ T5918] usb 2-1: config 1 interface 0 has no altsetting 0 [ 150.603473][ T5918] usb 2-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.40 [ 150.613350][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.638018][ T5918] usb 2-1: Product: syz [ 150.655440][ T5918] usb 2-1: Manufacturer: syz [ 150.672961][ T5918] usb 2-1: SerialNumber: syz [ 150.842827][ T9428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.916919][ T9432] veth3: entered allmulticast mode [ 151.527544][ T5918] usbhid 2-1:1.0: can't add hid device: -71 [ 151.546007][ T5918] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 151.560104][ T5918] usb 2-1: USB disconnect, device number 17 [ 151.605522][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 151.786468][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 151.796987][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 151.806395][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 151.815037][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 151.839930][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.850401][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.882022][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.942465][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 151.985703][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.996242][ T9] usb 4-1: config 0 descriptor?? [ 152.217728][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 152.415147][ T5917] usb 4-1: USB disconnect, device number 15 [ 152.423262][ T5917] usblp0: removed [ 152.465464][ T5918] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 152.545674][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 152.627038][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 152.633319][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 152.644562][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 152.654430][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 152.666021][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 152.677036][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 152.688291][ T5918] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 152.697340][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.697824][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.707501][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.707522][ T5918] usb 3-1: Product: syz [ 152.707535][ T5918] usb 3-1: Manufacturer: syz [ 152.707548][ T5918] usb 3-1: SerialNumber: syz [ 152.721630][ T5918] usb 3-1: config 0 descriptor?? [ 152.727873][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.757264][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 152.766837][ T9] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 152.774964][ T9] usb 2-1: Product: syz [ 152.780153][ T9] usb 2-1: config 0 descriptor?? [ 152.992198][ T5918] usb 3-1: USB disconnect, device number 17 [ 153.197241][ T9] hid (null): nested delimiters [ 153.210636][ T9] wacom 0003:056A:010E.0016: nested delimiters [ 153.218841][ T9] wacom 0003:056A:010E.0016: item 0 2 2 10 parsing failed [ 153.229872][ T9] wacom 0003:056A:010E.0016: parse failed [ 153.237942][ T9] wacom 0003:056A:010E.0016: probe with driver wacom failed with error -22 [ 153.421193][ T9] usb 2-1: USB disconnect, device number 18 [ 154.116314][ T9553] block nbd1: NBD_DISCONNECT [ 154.127066][ T9552] block nbd1: Disconnected due to user request. [ 154.133331][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 154.133343][ T29] audit: type=1400 audit(1740707176.623:727): avc: denied { write } for pid=9556 comm="syz.4.1580" path="socket:[23324]" dev="sockfs" ino=23324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.133647][ T9552] block nbd1: shutting down sockets [ 154.242460][ T9562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1582'. [ 154.390267][ T29] audit: type=1400 audit(1740707176.883:728): avc: denied { ioctl } for pid=9569 comm="syz.0.1587" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.432408][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1588'. [ 154.500389][ T29] audit: type=1400 audit(1740707176.923:729): avc: denied { mounton } for pid=9570 comm="syz.1.1586" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 154.541710][ T29] audit: type=1400 audit(1740707176.983:730): avc: denied { append } for pid=9569 comm="syz.0.1587" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.753232][ T29] audit: type=1400 audit(1740707177.243:731): avc: denied { write } for pid=9596 comm="syz.2.1598" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.793215][ T29] audit: type=1400 audit(1740707177.263:732): avc: denied { ioctl } for pid=9596 comm="syz.2.1598" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.866163][ T9604] block nbd3: shutting down sockets [ 154.915746][ T901] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 155.007236][ T9610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.085677][ T901] usb 2-1: Using ep0 maxpacket: 32 [ 155.093685][ T901] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 155.109750][ T901] usb 2-1: config 0 has no interface number 0 [ 155.134345][ T901] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 155.147177][ T901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.155263][ T901] usb 2-1: Product: syz [ 155.162073][ T901] usb 2-1: Manufacturer: syz [ 155.170267][ T901] usb 2-1: SerialNumber: syz [ 155.195600][ T901] usb 2-1: config 0 descriptor?? [ 155.212197][ T901] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 155.422128][ T901] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 155.456275][ T901] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 155.619699][ T9593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.648238][ T9593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.769822][ T9639] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 155.867466][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 155.867912][ T9] usb 2-1: USB disconnect, device number 19 [ 155.882877][ T29] audit: type=1400 audit(1740707178.373:733): avc: denied { create } for pid=9640 comm="syz.3.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.895729][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 155.929357][ T29] audit: type=1400 audit(1740707178.373:734): avc: denied { write } for pid=9640 comm="syz.3.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.938809][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 156.009911][ T29] audit: type=1400 audit(1740707178.503:735): avc: denied { create } for pid=9643 comm="syz.3.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.011667][ T9] quatech2 2-1:0.51: device disconnected [ 156.029645][ T9644] @: renamed from vlan0 (while UP) [ 156.065570][ T29] audit: type=1400 audit(1740707178.523:736): avc: denied { ioctl } for pid=9643 comm="syz.3.1619" path="socket:[24470]" dev="sockfs" ino=24470 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.425658][ T901] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 156.599470][ T901] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 156.612599][ T901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.632793][ T901] usb 3-1: config 0 descriptor?? [ 156.641124][ T901] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 157.280973][ T9688] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1638'. [ 157.413162][ T9695] program syz.3.1641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.455040][ T9697] netlink: 'syz.4.1642': attribute type 1 has an invalid length. [ 157.456827][ T901] usb 3-1: USB disconnect, device number 18 [ 158.175659][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 158.198459][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'. [ 158.549772][ T9754] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 158.785842][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 158.956730][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.982901][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.017290][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 159.040107][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.079458][ T8] usb 4-1: config 0 descriptor?? [ 159.284818][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 159.284833][ T29] audit: type=1400 audit(1740707181.773:744): avc: denied { ioctl } for pid=9786 comm="syz.0.1685" path="socket:[24974]" dev="sockfs" ino=24974 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 159.288832][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 159.315608][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.333520][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 159.343327][ T8] usb 4-1: USB disconnect, device number 16 [ 159.355706][ T5918] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 159.374593][ T29] audit: type=1400 audit(1740707181.863:745): avc: denied { bind } for pid=9788 comm="syz.1.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.468498][ T29] audit: type=1326 audit(1740707181.963:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.2.1690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5698f8d169 code=0x0 [ 159.526911][ T5918] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 159.536268][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.546145][ T5918] usb 5-1: config 0 descriptor?? [ 159.772517][ T5918] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 159.790831][ T5918] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 159.993293][ T5918] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 160.008253][ T5918] [drm] Initialized udl on minor 2 [ 160.186136][ T5918] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 160.203374][ T5918] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 160.215328][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'. [ 160.394059][ T5917] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 160.406723][ T5918] usb 5-1: USB disconnect, device number 17 [ 160.417686][ T5917] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 160.437693][ T5917] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 160.556766][ T9842] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1709'. [ 160.666371][ T9845] bridge0: port 3(batadv1) entered blocking state [ 160.685211][ T9845] bridge0: port 3(batadv1) entered disabled state [ 160.725267][ T9845] batadv1: entered allmulticast mode [ 160.750901][ T9845] batadv1: entered promiscuous mode [ 160.921264][ T9849] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1712'. [ 161.163383][ T52] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 161.173195][ T52] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 161.183054][ T9862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1718'. [ 161.545206][ T29] audit: type=1400 audit(1740707184.033:747): avc: denied { map } for pid=9878 comm="syz.4.1725" path="socket:[25159]" dev="sockfs" ino=25159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.605092][ T29] audit: type=1400 audit(1740707184.033:748): avc: denied { read accept } for pid=9878 comm="syz.4.1725" path="socket:[25159]" dev="sockfs" ino=25159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.335520][ T29] audit: type=1400 audit(1740707184.823:749): avc: denied { audit_read } for pid=9897 comm="syz.4.1735" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.964881][ T9840] Set syz1 is full, maxelem 65536 reached [ 163.235011][ T29] audit: type=1400 audit(1740707185.723:750): avc: denied { connect } for pid=9927 comm="syz.4.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.419939][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 163.513353][ T29] audit: type=1400 audit(1740707186.003:751): avc: denied { read } for pid=9938 comm="syz.4.1752" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 163.571084][ T29] audit: type=1400 audit(1740707186.003:752): avc: denied { open } for pid=9938 comm="syz.4.1752" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 163.660628][ T29] audit: type=1400 audit(1740707186.153:753): avc: denied { bind } for pid=9944 comm="syz.2.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.761901][ T9949] input: syz1 as /devices/virtual/input/input31 [ 164.005482][ T5917] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 164.013274][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 164.201378][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.214206][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.239431][ T5917] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.274058][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.283314][ T5917] usb 5-1: SerialNumber: syz [ 164.315693][ T9980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.406205][ T9991] [U]  [ 164.412046][ T9980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.522697][ T9980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.529618][ T5917] usb 5-1: 0:2 : does not exist [ 164.562635][ T5917] usb 5-1: USB disconnect, device number 18 [ 164.610606][ T9980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.621277][ T901] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 164.708562][ T9980] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.724053][ T9980] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.739070][ T9980] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.756543][ T9980] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.809748][ T901] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.845505][ T901] usb 3-1: config 0 has no interface number 0 [ 164.851690][ T901] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.867760][ T901] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.878266][ T901] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 164.887698][ T901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.900852][ T901] usb 3-1: config 0 descriptor?? [ 165.320550][ T901] uclogic 0003:5543:0522.0017: item fetching failed at offset 4/5 [ 165.345024][ T901] uclogic 0003:5543:0522.0017: parse failed [ 165.371345][ T901] uclogic 0003:5543:0522.0017: probe with driver uclogic failed with error -22 [ 165.556317][ T901] usb 3-1: USB disconnect, device number 19 [ 165.618941][ T9] kernel write not supported for file /uhid (pid: 9 comm: kworker/0:1) [ 165.871729][T10055] mkiss: ax0: crc mode is auto. [ 165.929622][ T29] audit: type=1400 audit(1740707188.423:754): avc: denied { create } for pid=10057 comm="syz.3.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.962282][T10055] mkiss: ax0: crc mode is auto. [ 166.151118][T10066] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1812'. [ 166.174705][T10066] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 166.184740][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1813'. [ 166.323327][T10068] team0 (unregistering): Port device team_slave_0 removed [ 166.365145][T10068] team0 (unregistering): Port device team_slave_1 removed [ 166.400720][T10078] input: syz0 as /devices/virtual/input/input32 [ 166.443756][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1819'. [ 166.482210][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1821'. [ 166.573212][T10090] overlayfs: workdir and upperdir must be separate subtrees [ 166.782811][T10102] vivid-002: ================= START STATUS ================= [ 166.792880][T10102] vivid-002: Radio HW Seek Mode: Bounded [ 166.798742][T10102] vivid-002: Radio Programmable HW Seek: false [ 166.808637][T10102] vivid-002: RDS Rx I/O Mode: Block I/O [ 166.814331][T10102] vivid-002: Generate RBDS Instead of RDS: false [ 166.814358][T10102] vivid-002: RDS Reception: true [ 166.827935][T10102] vivid-002: RDS Program Type: 0 inactive [ 166.833745][T10102] vivid-002: RDS PS Name: inactive [ 166.860225][T10102] vivid-002: RDS Radio Text: inactive [ 166.865864][T10102] vivid-002: RDS Traffic Announcement: false inactive [ 166.872668][T10102] vivid-002: RDS Traffic Program: false inactive [ 166.879492][T10102] vivid-002: RDS Music: false inactive [ 166.884961][T10102] vivid-002: ================== END STATUS ================== [ 167.480674][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1838'. [ 167.950080][ T29] audit: type=1400 audit(1740707190.443:755): avc: denied { listen } for pid=10151 comm="syz.3.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.011593][ T29] audit: type=1400 audit(1740707190.493:756): avc: denied { read write } for pid=10157 comm="syz.2.1851" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.069371][ T29] audit: type=1400 audit(1740707190.493:757): avc: denied { open } for pid=10157 comm="syz.2.1851" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.123492][ T29] audit: type=1400 audit(1740707190.503:758): avc: denied { map } for pid=10157 comm="syz.2.1851" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.151729][ T29] audit: type=1400 audit(1740707190.503:759): avc: denied { execute } for pid=10157 comm="syz.2.1851" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.185519][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 168.221686][ T29] audit: type=1400 audit(1740707190.713:760): avc: denied { shutdown } for pid=10161 comm="syz.2.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.350293][ T9] usb 2-1: config 7 has an invalid interface number: 34 but max is 0 [ 168.363334][ T9] usb 2-1: config 7 has no interface number 0 [ 168.374608][ T9] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35 [ 168.384850][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.398656][ T9] usb 2-1: Product: syz [ 168.402900][ T9] usb 2-1: Manufacturer: syz [ 168.409178][ T9] usb 2-1: SerialNumber: syz [ 168.525465][ T901] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 168.695508][ T901] usb 4-1: Using ep0 maxpacket: 8 [ 168.710338][ T901] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 168.726190][ T901] usb 4-1: config 179 has no interface number 0 [ 168.732474][ T901] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 168.750800][ T901] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 168.762598][ T901] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.773887][ T29] audit: type=1400 audit(1740707191.263:761): avc: denied { setopt } for pid=10168 comm="syz.4.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.774148][ T901] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 168.804997][ T29] audit: type=1400 audit(1740707191.293:762): avc: denied { listen } for pid=10168 comm="syz.4.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.805196][ T901] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 168.843929][ T901] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 168.853373][ T901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.867289][T10167] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 169.082970][ T29] audit: type=1400 audit(1740707191.573:763): avc: denied { remount } for pid=10178 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 169.104997][ T116] kernel write not supported for file /uhid (pid: 116 comm: kworker/0:2) [ 169.125893][ T5918] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input33 [ 169.194370][ T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 169.233172][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 169.261855][ T9] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 169.299948][ T9] dvb_usb_cxusb 2-1:7.34: probe with driver dvb_usb_cxusb failed with error -22 [ 169.328921][ T8] usb 4-1: USB disconnect, device number 17 [ 169.328920][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 169.329051][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 169.351751][ T8] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 169.362531][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.412038][ T901] usb 2-1: USB disconnect, device number 20 [ 169.768753][T10201] netlink: 'syz.4.1871': attribute type 25 has an invalid length. [ 169.781392][T10201] netlink: 'syz.4.1871': attribute type 6 has an invalid length. [ 169.966097][ T8] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 169.982024][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1875'. [ 170.088416][T10219] vlan2: entered allmulticast mode [ 170.136728][ T8] usb 3-1: config 0 has an invalid interface number: 176 but max is 0 [ 170.148612][ T8] usb 3-1: config 0 has no interface number 0 [ 170.155532][ T8] usb 3-1: config 0 interface 176 has no altsetting 0 [ 170.189411][ T8] usb 3-1: New USB device found, idVendor=0c52, idProduct=2443, bcdDevice=e2.d7 [ 170.214239][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.225740][ T8] usb 3-1: Product: syz [ 170.230785][ T8] usb 3-1: Manufacturer: syz [ 170.253368][ T8] usb 3-1: SerialNumber: syz [ 170.260560][ T8] usb 3-1: config 0 descriptor?? [ 170.474512][ T8] hub 3-1:0.176: bad descriptor, ignoring hub [ 170.481385][ T8] hub 3-1:0.176: probe with driver hub failed with error -5 [ 170.503795][ T8] ftdi_sio 3-1:0.176: FTDI USB Serial Device converter detected [ 170.550631][ T8] ftdi_sio ttyUSB0: unknown device type: 0xe2d7 [ 170.591085][ T8] usb 3-1: USB disconnect, device number 20 [ 170.615964][ T8] ftdi_sio 3-1:0.176: device disconnected [ 170.943588][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 170.943601][ T29] audit: type=1400 audit(1740707193.433:770): avc: denied { mount } for pid=10268 comm="syz.0.1905" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 170.975521][ T901] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 170.985503][ T116] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 171.136848][ T116] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.147847][ T116] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.151926][ T901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.159258][ T116] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.172733][ T901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.184404][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 171.194813][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.207803][ T901] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 171.208129][ T116] usb 2-1: Product: syz [ 171.218123][ T901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.221955][ T116] usb 2-1: Manufacturer: syz [ 171.236368][ T116] usb 2-1: SerialNumber: syz [ 171.242768][ T29] audit: type=1400 audit(1740707193.733:771): avc: denied { create } for pid=10281 comm="syz.2.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 171.266967][ T29] audit: type=1400 audit(1740707193.733:772): avc: denied { ioctl } for pid=10281 comm="syz.2.1911" path="socket:[27403]" dev="sockfs" ino=27403 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 171.270669][ T901] usb 4-1: config 0 descriptor?? [ 171.365538][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 171.372775][ T8] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 171.386978][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.402228][ T8] usb 5-1: config 0 descriptor?? [ 171.410320][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 171.501036][ T116] usb 2-1: 0:2 : does not exist [ 171.511260][ T116] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 171.519711][ T29] audit: type=1400 audit(1740707194.013:773): avc: denied { getopt } for pid=10288 comm="syz.2.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.528025][ T116] usb 2-1: USB disconnect, device number 21 [ 171.601685][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 171.759532][ T901] hid-led 0003:1D34:000A.0018: unknown main item tag 0x0 [ 171.915867][ T5917] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 171.974039][ T901] hid-led 0003:1D34:000A.0018: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 171.987840][ T901] hid-led 0003:1D34:000A.0018: Dream Cheeky Webmail Notifier initialized [ 172.077303][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.088085][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 172.099693][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 172.110766][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 144, setting to 64 [ 172.121627][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.140088][ T5917] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 172.152351][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.163076][ T5917] usb 3-1: Product: syz [ 172.182114][ T5917] usb 3-1: Manufacturer: syz [ 172.191190][ T5917] usb 3-1: SerialNumber: syz [ 172.193343][ T116] usb 4-1: USB disconnect, device number 18 [ 172.204130][ T5917] usb 3-1: config 0 descriptor?? [ 172.227880][T10293] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 172.246774][ T5917] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 172.259360][ T8] gspca_nw80x: reg_r err -71 [ 172.267021][ T8] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 172.291582][ T8] usb 5-1: USB disconnect, device number 19 [ 172.509201][ T5917] imon:send_packet: packet tx failed (-71) [ 172.535978][ T5917] imon 3-1:0.0: panel buttons/knobs setup failed [ 172.606200][ T5917] rc_core: IR keymap rc-imon-pad not found [ 172.614744][ T5917] Registered IR keymap rc-empty [ 172.624175][ T5917] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 172.644661][ T5917] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 172.672699][ T5917] imon:send_packet: packet tx failed (-71) [ 172.715693][ T5917] imon 3-1:0.0: remote input dev register failed [ 172.732461][ T5917] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 172.771573][ T5917] imon 3-1:0.0: unable to initialize intf0, err 0 [ 172.798559][ T5917] imon:imon_probe: failed to initialize context! [ 172.825395][ T5917] imon 3-1:0.0: unable to register, err -19 [ 172.845601][ T5917] usb 3-1: USB disconnect, device number 21 [ 172.887593][T10305] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.026682][T10314] capability: warning: `syz.0.1923' uses 32-bit capabilities (legacy support in use) [ 173.166092][ T5869] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 173.358207][ T5869] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.374457][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.392256][ T5869] usb 4-1: Product: syz [ 173.400187][ T5869] usb 4-1: Manufacturer: syz [ 173.414111][ T5869] usb 4-1: SerialNumber: syz [ 173.428565][ T5869] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.446596][ T901] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 173.675159][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'. [ 173.693697][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'. [ 173.877660][T10351] netlink: 'syz.1.1940': attribute type 16 has an invalid length. [ 173.899780][T10351] netlink: 'syz.1.1940': attribute type 17 has an invalid length. [ 173.935765][ T5869] usb 4-1: USB disconnect, device number 19 [ 173.968318][T10351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.230207][ T116] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 174.395647][ T116] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 174.419968][ T116] usb 3-1: config 0 has no interface number 0 [ 174.446457][ T116] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 174.465427][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.492254][ T116] usb 3-1: Product: syz [ 174.509579][ T116] usb 3-1: Manufacturer: syz [ 174.509599][ T901] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 174.527526][ T116] usb 3-1: SerialNumber: syz [ 174.545262][ T901] ath9k_htc: Failed to initialize the device [ 174.545853][ T116] usb 3-1: config 0 descriptor?? [ 174.571377][ T5869] usb 4-1: ath9k_htc: USB layer deinitialized [ 174.801332][ T116] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 174.826475][ T116] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 174.854714][ T116] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 174.880342][ T116] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 174.904357][ T116] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 174.972407][T10404] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 174.972407][T10404] The task syz.4.1963 (10404) triggered the difference, watch for misbehavior. [ 175.206695][ T116] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 175.207965][ T901] usb 3-1: USB disconnect, device number 22 [ 175.222930][ T901] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 175.232862][ T901] keyspan 3-1:0.133: device disconnected [ 175.335452][ T5822] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 175.355427][ T116] usb 4-1: Using ep0 maxpacket: 8 [ 175.361681][ T116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.371953][ T116] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 175.383711][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.393456][ T116] usb 4-1: config 0 descriptor?? [ 175.400827][ T116] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 175.485454][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 175.491814][ T5822] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.502424][ T5822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.509102][ T5822] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 175.518298][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.529472][ T5822] usb 2-1: config 0 descriptor?? [ 175.975137][ T5822] cougar 0003:060B:500A.0019: unexpected long global item [ 175.993448][ T5822] cougar 0003:060B:500A.0019: parse failed [ 176.005266][ T5822] cougar 0003:060B:500A.0019: probe with driver cougar failed with error -22 [ 176.205297][ T901] usb 2-1: USB disconnect, device number 22 [ 176.212160][ T116] gspca_vc032x: reg_w err -71 [ 176.225636][ T116] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 176.242792][ T116] usb 4-1: USB disconnect, device number 20 [ 176.561884][ T29] audit: type=1400 audit(1740707199.053:774): avc: denied { remount } for pid=10440 comm="syz.2.1983" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 176.679315][ T29] audit: type=1400 audit(1740707199.173:775): avc: denied { read } for pid=10448 comm="syz.4.1987" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 176.736714][ T29] audit: type=1400 audit(1740707199.203:776): avc: denied { open } for pid=10448 comm="syz.4.1987" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 177.293022][T10494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.304087][T10494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.380212][T10494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.392522][T10494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.409792][T10499] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 177.452667][ T29] audit: type=1400 audit(1740707199.943:777): avc: denied { mount } for pid=10500 comm="syz.4.2009" name="/" dev="hugetlbfs" ino=30037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 177.489718][T10494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.494243][ T29] audit: type=1400 audit(1740707199.983:778): avc: denied { unmount } for pid=7309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 177.501083][T10494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.625966][ T901] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 177.634847][T10494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.650473][T10494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.694234][T10507] mkiss: ax0: crc mode is auto. [ 177.785034][T10494] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.793796][T10494] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.796682][ T901] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.830755][ T901] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.831546][T10494] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.848884][ T901] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.864406][T10494] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.873779][ T901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.880035][T10494] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.891275][T10494] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.906809][T10497] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.918765][ T901] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.958468][T10494] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.976308][ T116] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 177.994551][T10494] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.135455][ T116] usb 3-1: Using ep0 maxpacket: 16 [ 178.151941][ T116] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.153994][ T29] audit: type=1400 audit(1740707200.643:779): avc: denied { setopt } for pid=10519 comm="syz.3.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.182059][ T116] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 178.213642][ T116] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.226467][ T29] audit: type=1400 audit(1740707200.673:780): avc: denied { accept } for pid=10519 comm="syz.3.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.255061][ T116] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 178.271167][T10527] GUP no longer grows the stack in syz.3.2021 (10527): 400000009000-40000000a000 (400000005000) [ 178.282633][ T9] usb 2-1: USB disconnect, device number 23 [ 178.283671][T10527] CPU: 1 UID: 0 PID: 10527 Comm: syz.3.2021 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 178.283691][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.283700][T10527] Call Trace: [ 178.283705][T10527] [ 178.283712][T10527] dump_stack_lvl+0x16c/0x1f0 [ 178.283735][T10527] gup_vma_lookup+0x1d2/0x220 [ 178.283760][T10527] __get_user_pages+0x236/0x36f0 [ 178.283776][T10527] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 178.283801][T10527] ? __gup_longterm_locked+0x124/0x1870 [ 178.283815][T10527] ? __gup_longterm_locked+0x124/0x1870 [ 178.283833][T10527] ? __pfx___get_user_pages+0x10/0x10 [ 178.283845][T10527] ? down_read_killable+0xcc/0x380 [ 178.283868][T10527] ? __pfx_down_read_killable+0x10/0x10 [ 178.283889][T10527] ? mark_lock+0xb5/0xc60 [ 178.283909][T10527] ? find_held_lock+0x2d/0x110 [ 178.283926][T10527] __gup_longterm_locked+0x212/0x1870 [ 178.283947][T10527] ? __pfx_lock_release+0x10/0x10 [ 178.283966][T10527] ? trace_lock_acquire+0x14e/0x1f0 [ 178.283987][T10527] ? __pfx___gup_longterm_locked+0x10/0x10 [ 178.284001][T10527] ? gup_fast_fallback+0x84c/0x2690 [ 178.284015][T10527] ? __pfx_lock_release+0x10/0x10 [ 178.284041][T10527] ? mark_held_locks+0x9f/0xe0 [ 178.284066][T10527] gup_fast_fallback+0x1802/0x2690 [ 178.284096][T10527] ? __pfx_gup_fast_fallback+0x10/0x10 [ 178.284116][T10527] ? hlock_class+0x4e/0x130 [ 178.284139][T10527] get_user_pages_fast+0xa8/0x100 [ 178.284154][T10527] ? __pfx_get_user_pages_fast+0x10/0x10 [ 178.284171][T10527] ? iov_iter_advance+0x1e3/0x6c0 [ 178.284191][T10527] __iov_iter_get_pages_alloc+0x8ed/0x2280 [ 178.284208][T10527] ? trace_contention_end+0xee/0x140 [ 178.284230][T10527] ? __mutex_lock+0x1cc/0xb10 [ 178.284248][T10527] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 178.284264][T10527] ? pipe_lock+0x64/0x80 [ 178.284280][T10527] ? __pfx___mutex_lock+0x10/0x10 [ 178.284296][T10527] ? iovec_from_user.part.0+0x7e/0x130 [ 178.284316][T10527] iov_iter_get_pages2+0xa4/0x100 [ 178.284330][T10527] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 178.284345][T10527] ? wait_for_space+0x224/0x2d0 [ 178.284367][T10527] ? add_to_pipe+0x1c0/0x3c0 [ 178.284390][T10527] __do_sys_vmsplice+0xa13/0xef0 [ 178.284418][T10527] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 178.284446][T10527] ? __pfx_futex_wait+0x10/0x10 [ 178.284472][T10527] ? lock_acquire.part.0+0x11b/0x380 [ 178.284491][T10527] ? find_held_lock+0x2d/0x110 [ 178.284529][T10527] ? rcu_is_watching+0x12/0xc0 [ 178.284551][T10527] ? do_syscall_64+0xcd/0x250 [ 178.284568][T10527] do_syscall_64+0xcd/0x250 [ 178.284587][T10527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.284607][T10527] RIP: 0033:0x7f1bc4b8d169 [ 178.284620][T10527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.284634][T10527] RSP: 002b:00007f1bc59bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 178.284648][T10527] RAX: ffffffffffffffda RBX: 00007f1bc4da5fa0 RCX: 00007f1bc4b8d169 [ 178.284658][T10527] RDX: 0000000000000002 RSI: 0000400000000280 RDI: 0000000000000004 [ 178.284666][T10527] RBP: 00007f1bc4c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.284675][T10527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.284683][T10527] R13: 0000000000000000 R14: 00007f1bc4da5fa0 R15: 00007ffff5157088 [ 178.284703][T10527] [ 178.580662][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.667345][ T116] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.677055][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.685144][ T116] usb 3-1: Product: syz [ 178.693869][ T116] usb 3-1: Manufacturer: syz [ 178.698575][ T116] usb 3-1: SerialNumber: syz [ 179.049458][ T29] audit: type=1400 audit(1740707201.543:781): avc: denied { ioctl } for pid=10556 comm="syz.4.2035" path="socket:[29459]" dev="sockfs" ino=29459 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.065282][T10557] : renamed from bond0 (while UP) [ 179.214395][ T29] audit: type=1400 audit(1740707201.703:782): avc: denied { create } for pid=10566 comm="syz.4.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 179.281431][ T29] audit: type=1400 audit(1740707201.773:783): avc: denied { watch } for pid=10568 comm="syz.0.2041" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 179.532465][T10588] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 179.554027][T10588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.576340][T10590] loop9: detected capacity change from 0 to 7 [ 179.589701][T10590] Dev loop9: unable to read RDB block 7 [ 179.595321][T10590] loop9: unable to read partition table [ 179.601113][T10590] loop9: partition table beyond EOD, truncated [ 179.608052][T10590] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 179.811449][T10605] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2058'. [ 180.305506][ T5829] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 180.401814][ T116] usb 3-1: USB disconnect, device number 23 [ 180.460141][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 180.468402][ T5829] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.488892][ T5829] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.525540][ T5829] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 180.534638][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.552243][ T5829] usb 5-1: config 0 descriptor?? [ 180.640329][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 180.684280][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 180.985027][ T5829] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 181.009940][ T5829] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 181.023841][ T5829] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 181.033773][ T5829] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 181.068352][ T5829] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 181.082253][ T5829] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 181.181648][ C0] usb 5-1: input irq status -75 received [ 181.193841][T10675] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 181.414215][ T901] usb 5-1: USB disconnect, device number 20 [ 181.454028][T10687] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2096'. [ 181.473624][T10687] netlink: 'syz.2.2096': attribute type 1 has an invalid length. [ 181.588040][T10693] bond_slave_1: entered promiscuous mode [ 181.594310][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 181.594324][ T29] audit: type=1400 audit(1740707204.083:854): avc: denied { ioctl } for pid=10692 comm="syz.2.2098" path="socket:[30816]" dev="sockfs" ino=30816 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.641668][T10693] bond0: (slave bond_slave_1): Releasing backup interface [ 181.653184][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2109'. [ 181.663608][T10693] netlink: 'syz.2.2098': attribute type 2 has an invalid length. [ 181.671572][T10693] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 181.687902][ T29] audit: type=1400 audit(1740707204.173:855): avc: denied { execmem } for pid=10698 comm="syz.3.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 181.715182][T10697] bridge_slave_1: left allmulticast mode [ 181.721023][T10697] bridge_slave_1: left promiscuous mode [ 181.726753][T10697] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.742645][T10697] bridge_slave_0: left allmulticast mode [ 181.755479][T10697] bridge_slave_0: left promiscuous mode [ 181.761213][T10697] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.806877][ T29] audit: type=1400 audit(1740707204.303:856): avc: denied { write } for pid=10700 comm="syz.2.2101" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 182.032577][ T29] audit: type=1400 audit(1740707204.523:857): avc: denied { create } for pid=10706 comm="syz.4.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.054058][ T29] audit: type=1400 audit(1740707204.543:858): avc: denied { ioctl } for pid=10706 comm="syz.4.2102" path="socket:[30829]" dev="sockfs" ino=30829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.079835][ T29] audit: type=1400 audit(1740707204.553:859): avc: denied { setopt } for pid=10706 comm="syz.4.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.159992][ T29] audit: type=1400 audit(1740707204.553:860): avc: denied { write } for pid=10706 comm="syz.4.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.236169][ T29] audit: type=1400 audit(1740707204.573:861): avc: denied { mounton } for pid=10704 comm="syz.1.2103" path=2F70726F632F3937372F7461736B2F393738202864656C6574656429 dev="proc" ino=30627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 182.283517][ T29] audit: type=1400 audit(1740707204.643:862): avc: denied { mount } for pid=10704 comm="syz.1.2103" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 182.349314][ T29] audit: type=1400 audit(1740707204.843:863): avc: denied { map } for pid=10714 comm="syz.2.2106" path="socket:[30644]" dev="sockfs" ino=30644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.855525][ T901] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 182.924973][T10739] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2118'. [ 182.940940][T10741] delete_channel: no stack [ 183.023335][T10743] netlink: 'syz.1.2121': attribute type 1 has an invalid length. [ 183.036110][ T901] usb 5-1: Using ep0 maxpacket: 16 [ 183.042610][ T901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.053946][ T901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.069044][ T901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.103368][ T901] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 183.118756][ T901] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.133201][ T901] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 183.145421][ T901] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 183.163597][ T901] usb 5-1: Manufacturer: syz [ 183.169911][ T901] usb 5-1: config 0 descriptor?? [ 183.185236][T10749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2123'. [ 183.282755][T10753] openvswitch: netlink: IP tunnel TTL not specified. [ 183.445508][ T901] rc_core: IR keymap rc-hauppauge not found [ 183.455456][ T901] Registered IR keymap rc-empty [ 183.461841][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.505522][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.543772][ T901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 183.566200][ T901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 183.588822][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.616070][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.635645][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.675520][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.699449][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.725524][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.751345][T10781] veth1_macvtap: left promiscuous mode [ 183.765659][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.795527][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.816983][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.840361][ T901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.877035][ T901] mceusb 5-1:0.0: Registered Е with mce emulator interface version 1 [ 183.885229][ T901] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 183.919628][ T901] usb 5-1: USB disconnect, device number 21 [ 184.031738][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 184.040883][T10793] bridge_slave_1: left allmulticast mode [ 184.057541][T10793] bridge_slave_1: left promiscuous mode [ 184.063259][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.088551][T10793] bridge_slave_0: left allmulticast mode [ 184.094806][T10793] bridge_slave_0: left promiscuous mode [ 184.100879][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.224859][T10804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.240178][T10804] batadv_slave_0: entered promiscuous mode [ 185.508722][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.617552][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.754152][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.891271][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.142975][ T52] batadv1: left allmulticast mode [ 186.165542][ T52] batadv1: left promiscuous mode [ 186.170625][ T52] bridge0: port 3(batadv1) entered disabled state [ 186.276992][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.287293][ T52] bridge_slave_1: left promiscuous mode [ 186.292927][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.301509][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.312114][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.320454][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.336106][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 186.343360][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.354894][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.362233][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.370055][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.383062][ T52] bridge_slave_0: left allmulticast mode [ 186.388963][ T52] bridge_slave_0: left promiscuous mode [ 186.397488][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.404856][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.413887][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 186.421275][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.874979][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.891109][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.903949][ T52] bond0 (unregistering): Released all slaves [ 187.031635][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 187.031652][ T29] audit: type=1400 audit(1740707209.523:924): avc: denied { read write } for pid=10931 comm="syz.2.2204" name="mouse0" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 187.061517][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.146059][ T29] audit: type=1400 audit(1740707209.523:925): avc: denied { open } for pid=10931 comm="syz.2.2204" path="/dev/input/mouse0" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 187.205844][T10903] chnl_net:caif_netlink_parms(): no params data found [ 187.321841][T10942] mkiss: ax0: crc mode is auto. [ 187.377230][ T52] hsr_slave_0: left promiscuous mode [ 187.403563][ T52] hsr_slave_1: left promiscuous mode [ 187.415031][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.425128][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.439067][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.447891][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.476555][ T52] veth1_macvtap: left promiscuous mode [ 187.482112][ T52] veth0_macvtap: left promiscuous mode [ 187.488661][ T52] veth1_vlan: left promiscuous mode [ 187.493956][ T52] veth0_vlan: left promiscuous mode [ 187.751901][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'. [ 187.770940][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'. [ 187.870014][ T29] audit: type=1400 audit(1740707210.363:926): avc: denied { accept } for pid=10975 comm="syz.1.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 187.942876][ T29] audit: type=1400 audit(1740707210.363:927): avc: denied { write } for pid=10975 comm="syz.1.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 188.282539][ T29] audit: type=1400 audit(1740707210.763:928): avc: denied { map } for pid=10988 comm="syz.4.2225" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 188.326787][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2226'. [ 188.365416][T10992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2226'. [ 188.495649][ T5831] Bluetooth: hci1: command tx timeout [ 188.741403][ T52] team0 (unregistering): Port device team_slave_1 removed [ 188.801487][T11007] block device autoloading is deprecated and will be removed. [ 188.888171][ T52] team0 (unregistering): Port device team_slave_0 removed [ 189.038541][ T29] audit: type=1400 audit(1740707211.533:929): avc: denied { setopt } for pid=11011 comm="syz.3.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.120306][ T29] audit: type=1400 audit(1740707211.613:930): avc: denied { ioctl } for pid=11013 comm="syz.1.2235" path="socket:[32797]" dev="sockfs" ino=32797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.193402][T11016] block nbd3: NBD_DISCONNECT [ 189.212229][ T29] audit: type=1400 audit(1740707211.613:931): avc: denied { setopt } for pid=11013 comm="syz.1.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.481994][ T29] audit: type=1400 audit(1740707211.963:932): avc: denied { create } for pid=11025 comm="syz.2.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.512570][ T29] audit: type=1400 audit(1740707212.003:933): avc: denied { bind } for pid=11025 comm="syz.2.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.087212][T10903] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.133101][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.151017][T10903] bridge_slave_0: entered allmulticast mode [ 190.170777][T10903] bridge_slave_0: entered promiscuous mode [ 190.190744][T10903] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.217608][T11056] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2251'. [ 190.218620][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.240916][T10903] bridge_slave_1: entered allmulticast mode [ 190.250685][T10903] bridge_slave_1: entered promiscuous mode [ 190.403102][T10903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.452324][T10903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.571033][T10903] team0: Port device team_slave_0 added [ 190.585754][ T5831] Bluetooth: hci1: command tx timeout [ 190.619196][T10903] team0: Port device team_slave_1 added [ 190.759449][T10903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.771442][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.797341][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.833450][T10903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.873921][T10903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.897953][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.937496][T10903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.979610][T11101] netem: incorrect ge model size [ 190.996636][T11101] netem: change failed [ 191.089757][T10903] hsr_slave_0: entered promiscuous mode [ 191.104936][T10903] hsr_slave_1: entered promiscuous mode [ 191.113082][T10903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.124004][T10903] Cannot create hsr debugfs directory [ 191.235444][ T116] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 191.337607][T10903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.367576][T10903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.387328][T10903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.400563][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.407005][T10903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.437265][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.469995][ T116] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 191.497492][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.524846][ T116] usb 5-1: config 0 descriptor?? [ 191.583985][T10903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.634721][T10903] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.648602][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.655728][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.678870][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.686006][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.962043][ T116] pyra 0003:1E7D:2CF6.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 192.084029][T10903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.153684][ T116] pyra 0003:1E7D:2CF6.001B: couldn't init struct pyra_device [ 192.181749][ T116] pyra 0003:1E7D:2CF6.001B: couldn't install mouse [ 192.204332][ T116] pyra 0003:1E7D:2CF6.001B: probe with driver pyra failed with error -32 [ 192.217986][ T116] usb 5-1: USB disconnect, device number 22 [ 192.370031][T10903] veth0_vlan: entered promiscuous mode [ 192.387309][T10903] veth1_vlan: entered promiscuous mode [ 192.412975][T10903] veth0_macvtap: entered promiscuous mode [ 192.422826][T10903] veth1_macvtap: entered promiscuous mode [ 192.434014][T11139] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 192.454027][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.482473][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.492765][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.503777][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.513650][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.545550][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.563180][T10903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.572527][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.586380][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.596372][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.637818][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 192.637834][ T29] audit: type=1400 audit(1740707215.133:962): avc: denied { connect } for pid=11176 comm="syz.1.2287" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.664341][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.665990][ T5831] Bluetooth: hci1: command tx timeout [ 192.672024][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.687426][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.698036][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.707880][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.723006][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.738064][T10903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.780406][T10903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.789412][T10903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.800874][T10903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.810751][T10903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.933424][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.954607][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.986052][ T116] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 193.033194][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.048935][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.070217][ T29] audit: type=1400 audit(1740707215.563:963): avc: denied { mounton } for pid=10903 comm="syz-executor" path="/root/syzkaller.6dhSJE/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 193.094605][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.125432][ T29] audit: type=1400 audit(1740707215.603:964): avc: denied { mount } for pid=10903 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 193.147326][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.181226][ T29] audit: type=1400 audit(1740707215.603:965): avc: denied { mounton } for pid=10903 comm="syz-executor" path="/root/syzkaller.6dhSJE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 193.195496][ T116] usb 4-1: Using ep0 maxpacket: 16 [ 193.213872][ T29] audit: type=1400 audit(1740707215.603:966): avc: denied { mounton } for pid=10903 comm="syz-executor" path="/root/syzkaller.6dhSJE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 193.242417][ T29] audit: type=1400 audit(1740707215.603:967): avc: denied { unmount } for pid=10903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 193.270381][ T116] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.310641][ T116] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.325112][ T116] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 193.344346][ T29] audit: type=1400 audit(1740707215.613:968): avc: denied { mounton } for pid=10903 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 193.345408][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.424208][ T29] audit: type=1400 audit(1740707215.613:969): avc: denied { mount } for pid=10903 comm="syz-executor" name="/" dev="gadgetfs" ino=6629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 193.469967][ T116] usb 4-1: config 0 descriptor?? [ 193.519424][ T29] audit: type=1400 audit(1740707215.673:970): avc: denied { mounton } for pid=10903 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 193.594309][ T29] audit: type=1326 audit(1740707215.873:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.5.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f78d169 code=0x7ffc0000 [ 193.685569][ T901] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 193.855960][ T901] usb 2-1: Using ep0 maxpacket: 8 [ 193.869274][ T901] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 193.880327][ T901] usb 2-1: config 179 has no interface number 0 [ 193.892141][ T901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 193.905837][ T901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 193.916540][ T116] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 193.952971][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.975822][ T5822] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 193.980648][ T901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.005538][ T901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 194.027295][ T901] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.065459][ T901] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 194.084692][ T901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.107664][T11212] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 194.141771][ T5822] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.162853][ T5822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.193225][ T5822] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 194.204539][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 194.218258][ T5822] usb 6-1: SerialNumber: syz [ 194.231102][ T5822] usb 6-1: 0:2 : does not exist [ 194.315515][ T51] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 194.389229][ T901] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input37 [ 194.435911][ T901] usb 4-1: USB disconnect, device number 21 [ 194.475884][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 194.482457][ T51] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 194.497162][ T51] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 194.507071][ T51] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 194.517403][ T51] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 194.526845][ T51] usb 3-1: config 250 has no interface number 0 [ 194.533126][ T51] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.543344][ T51] usb 3-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 194.556971][ T51] usb 3-1: config 250 interface 228 has no altsetting 0 [ 194.565494][ T51] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 194.574580][ T51] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 194.583222][ T51] usb 3-1: Product: syz [ 194.587571][ T51] usb 3-1: SerialNumber: syz [ 194.596074][ T51] hub 3-1:250.228: bad descriptor, ignoring hub [ 194.603215][ T51] hub 3-1:250.228: probe with driver hub failed with error -5 [ 194.604308][ T5822] usb 2-1: USB disconnect, device number 24 [ 194.610778][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 194.610819][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 194.634633][ T5822] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 194.664654][ T116] usb 6-1: USB disconnect, device number 2 [ 194.735582][ T5831] Bluetooth: hci1: command 0x0419 tx timeout [ 195.117642][ T51] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 195.247740][T11258] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.2315'. [ 195.275475][T11258] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 195.547086][ T51] usb 3-1: failed to restore interface 228 altsetting 255 (error=-71) [ 195.573315][ T51] usb 3-1: USB disconnect, device number 24 [ 195.655464][ T5917] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 195.825547][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 195.833465][ T5917] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 195.841988][ T5917] usb 5-1: config 179 has no interface number 0 [ 195.863068][ T5917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 195.885481][ T5917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 195.908687][ T5917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.920511][T11300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.940815][ T5917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 195.974792][ T5917] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 195.988406][ T5917] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 195.998135][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.027444][T11267] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 196.171724][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2342'. [ 196.356601][ T51] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input38 [ 196.587754][ T5822] usb 5-1: USB disconnect, device number 23 [ 196.587818][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 196.602413][ T5822] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 196.602639][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 196.816787][ T5831] Bluetooth: hci1: command 0x0419 tx timeout [ 196.832090][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2363'. [ 196.955668][ T51] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 197.116639][ T51] usb 6-1: Using ep0 maxpacket: 8 [ 197.123072][ T51] usb 6-1: config 6 has an invalid interface number: 221 but max is 0 [ 197.154199][ T51] usb 6-1: config 6 has no interface number 0 [ 197.165868][ T51] usb 6-1: config 6 interface 221 has no altsetting 0 [ 197.174503][ T51] usb 6-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=5e.87 [ 197.189495][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.198136][ T51] usb 6-1: Product: syz [ 197.202574][ T51] usb 6-1: Manufacturer: syz [ 197.212696][ T51] usb 6-1: SerialNumber: syz [ 197.430748][ T51] usb-storage 6-1:6.221: USB Mass Storage device detected [ 197.496763][ T51] usb 6-1: USB disconnect, device number 3 [ 197.651178][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 197.651194][ T29] audit: type=1400 audit(1740707220.143:1001): avc: denied { read } for pid=11401 comm="syz.2.2384" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 197.680754][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.680836][ T5869] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 197.718323][ T29] audit: type=1400 audit(1740707220.173:1002): avc: denied { open } for pid=11401 comm="syz.2.2384" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 197.744069][ T29] audit: type=1400 audit(1740707220.173:1003): avc: denied { ioctl } for pid=11401 comm="syz.2.2384" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 197.748965][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2386'. [ 197.783885][T11410] netlink: 'syz.3.2386': attribute type 6 has an invalid length. [ 197.789506][ T29] audit: type=1400 audit(1740707220.243:1004): avc: denied { sqpoll } for pid=11406 comm="syz.1.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 197.810872][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.833026][ T29] audit: type=1400 audit(1740707220.323:1005): avc: denied { getopt } for pid=11411 comm="syz.3.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.903276][ T5869] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 197.912561][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.935770][ T5869] usb 5-1: Product: syz [ 197.939966][ T5869] usb 5-1: Manufacturer: syz [ 197.950256][ T5869] usb 5-1: SerialNumber: syz [ 197.962404][ T5869] usb 5-1: config 0 descriptor?? [ 197.969843][ T5869] usb 5-1: selecting invalid altsetting 1 [ 197.980393][ T5869] technisat-usb2: could not set alternate setting to 0 [ 198.045425][ T29] audit: type=1400 audit(1740707220.533:1006): avc: denied { read write } for pid=11421 comm="syz.5.2391" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 198.077567][ T29] audit: type=1400 audit(1740707220.533:1007): avc: denied { open } for pid=11421 comm="syz.5.2391" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 198.079369][T11422] input: syz0 as /devices/virtual/input/input39 [ 198.112736][ T29] audit: type=1400 audit(1740707220.563:1008): avc: denied { ioctl } for pid=11421 comm="syz.5.2391" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 198.185157][ T5869] technisat-usb2: firmware version: 0.0 [ 198.191344][ T29] audit: type=1400 audit(1740707220.633:1009): avc: denied { getopt } for pid=11420 comm="syz.2.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.211179][ T5869] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 198.340913][T11436] ntfs3(nullb0): Primary boot signature is not NTFS. [ 198.352178][T11436] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 198.391225][ T5869] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 198.414376][ T5869] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 198.445442][ T5869] usb 5-1: USB disconnect, device number 24 [ 198.451380][ T29] audit: type=1400 audit(1740707220.943:1010): avc: denied { mount } for pid=11438 comm="syz.5.2399" name="/" dev="ramfs" ino=34746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 198.485516][ T5822] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 198.646046][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 198.662720][ T5822] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 198.679215][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.700696][ T5822] usb 2-1: config 0 descriptor?? [ 198.704343][T11453] input: syz1 as /devices/virtual/input/input40 [ 198.718480][ T5822] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 199.525790][ T5822] gspca_sonixj: reg_r err -71 [ 199.530569][ T5822] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 199.557819][ T5822] usb 2-1: USB disconnect, device number 25 [ 200.206066][ T5822] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 200.375452][ T5822] usb 6-1: Using ep0 maxpacket: 16 [ 200.382083][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.398341][ T5822] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 200.433830][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.460559][ T5822] usb 6-1: config 0 descriptor?? [ 200.892065][ T5822] mcp2221 0003:04D8:00DD.001D: item fetching failed at offset 3/5 [ 200.906086][ T5822] mcp2221 0003:04D8:00DD.001D: can't parse reports [ 200.926184][ T5822] mcp2221 0003:04D8:00DD.001D: probe with driver mcp2221 failed with error -22 [ 200.935413][ T116] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 201.096649][ T116] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 201.120385][ T116] usb 5-1: config 0 has no interface number 0 [ 201.127028][ T5822] usb 6-1: USB disconnect, device number 4 [ 201.136756][ T116] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 201.161022][ T116] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.194585][ T116] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 201.204557][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.224609][ T116] usb 5-1: Product: syz [ 201.232820][ T116] usb 5-1: Manufacturer: syz [ 201.245389][ T116] usb 5-1: SerialNumber: syz [ 201.259306][ T116] usb 5-1: config 0 descriptor?? [ 201.275046][T11563] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.286280][ T116] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 201.298339][ T51] kernel read not supported for file /dsp1 (pid: 51 comm: kworker/1:1) [ 201.306552][ T116] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 201.556290][T11603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.734503][ T51] usb 5-1: USB disconnect, device number 25 [ 201.754102][ T51] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 201.776960][ T51] cyberjack 5-1:0.69: device disconnected [ 201.990773][T11635] pim6reg: entered allmulticast mode [ 202.127887][T11641] block device autoloading is deprecated and will be removed. [ 202.138315][T11641] syz.1.2491: attempt to access beyond end of device [ 202.138315][T11641] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 202.468838][T11656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.480933][T11656] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 202.536295][ T5869] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 202.606349][ T5822] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 202.673990][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 202.674006][ T29] audit: type=1400 audit(1740707225.163:1032): avc: denied { setopt } for pid=11664 comm="syz.4.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 202.701839][T11664] delete_channel: no stack [ 202.727119][ T5869] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.739062][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.745738][ T5869] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 202.754915][ T29] audit: type=1400 audit(1740707225.243:1033): avc: denied { write } for pid=11668 comm="syz.4.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.769502][ T5822] usb 6-1: Using ep0 maxpacket: 16 [ 202.777207][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.789634][ T5869] usb 2-1: config 0 descriptor?? [ 202.798764][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 202.817179][ T5822] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 202.830468][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.838626][ T5822] usb 6-1: Product: syz [ 202.842795][ T5822] usb 6-1: Manufacturer: syz [ 202.852474][ T5822] usb 6-1: SerialNumber: syz [ 202.859009][ T5822] usb 6-1: config 0 descriptor?? [ 202.869900][ T5822] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 202.879825][ T5822] usb 6-1: Detected FT232R [ 202.945647][ T51] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 203.075423][ T5822] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 203.082765][T11677] team0: Device ipvlan2 failed to register rx_handler [ 203.101547][ T51] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 203.115447][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.123537][ T51] usb 3-1: Product: syz [ 203.143610][ T51] usb 3-1: Manufacturer: syz [ 203.154571][ T51] usb 3-1: SerialNumber: syz [ 203.162023][ T51] usb 3-1: config 0 descriptor?? [ 203.181230][ T51] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 203.207781][ T5869] lenovo 0003:17EF:6062.001E: unknown main item tag 0x1 [ 203.216853][ T5869] lenovo 0003:17EF:6062.001E: unknown main item tag 0x0 [ 203.246172][ T5869] lenovo 0003:17EF:6062.001E: hidraw0: USB HID v1.ff Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 203.294122][ T5822] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 203.453704][ T5822] usb 2-1: USB disconnect, device number 26 [ 203.521268][ T9] usb 6-1: USB disconnect, device number 5 [ 203.534786][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 203.552902][ T9] ftdi_sio 6-1:0.0: device disconnected [ 203.600818][ T51] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 203.765858][ T116] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 203.828473][ T51] usb 3-1: USB disconnect, device number 25 [ 203.936691][ T116] usb 4-1: config index 0 descriptor too short (expected 63524, got 36) [ 203.945112][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 188, changing to 4 [ 203.957189][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 21322, setting to 1023 [ 203.971040][ T116] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.980595][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.988953][ T116] usb 4-1: Product: syz [ 203.993125][ T116] usb 4-1: Manufacturer: syz [ 203.999805][ T116] usb 4-1: SerialNumber: syz [ 204.007902][ T116] usb 4-1: config 0 descriptor?? [ 204.031603][ T116] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 99, bLength 9, bSynchAddress 3d [ 204.139779][T11723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.237876][ T29] audit: type=1400 audit(1740707226.733:1034): avc: denied { listen } for pid=11727 comm="syz.5.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.279103][ T29] audit: type=1400 audit(1740707226.733:1035): avc: denied { accept } for pid=11727 comm="syz.5.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.296033][ T116] usb 4-1: USB disconnect, device number 22 [ 204.311522][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2534'. [ 204.331670][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2534'. [ 204.360021][T11733] erspan0: entered promiscuous mode [ 204.388312][T11733] erspan0: left promiscuous mode [ 204.529283][ T29] audit: type=1400 audit(1740707227.023:1036): avc: denied { name_bind } for pid=11747 comm="syz.2.2541" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 204.552234][T11749] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 204.571042][T11749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.699778][T11760] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2545'. [ 204.895749][ T29] audit: type=1400 audit(1740707227.393:1037): avc: denied { write } for pid=11773 comm="syz.3.2553" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 204.944447][ T29] audit: type=1400 audit(1740707227.413:1038): avc: denied { read } for pid=11773 comm="syz.3.2553" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 204.990343][ T29] audit: type=1400 audit(1740707227.413:1039): avc: denied { open } for pid=11773 comm="syz.3.2553" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 205.014009][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.022731][ T29] audit: type=1400 audit(1740707227.413:1040): avc: denied { ioctl } for pid=11773 comm="syz.3.2553" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 205.047869][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.055770][ T29] audit: type=1400 audit(1740707227.513:1041): avc: denied { write } for pid=11781 comm="syz.5.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.169825][T11788] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 206.705498][ T51] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 206.887073][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 7278, setting to 64 [ 206.899377][ T51] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 206.908959][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.923687][ T51] usb 4-1: config 0 descriptor?? [ 206.929893][T11874] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.944290][ T51] hub 4-1:0.0: USB hub found [ 207.145689][ T51] hub 4-1:0.0: 1 port detected [ 207.429563][T11920] netlink: 'syz.2.2615': attribute type 1 has an invalid length. [ 207.437593][T11920] netlink: 'syz.2.2615': attribute type 4 has an invalid length. [ 207.446720][T11920] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2615'. [ 207.550659][ T51] usb 4-1: USB disconnect, device number 23 [ 207.747181][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 207.747196][ T29] audit: type=1326 audit(1740707230.243:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f78d169 code=0x7fc00000 [ 207.776722][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.218458][ T29] audit: type=1400 audit(1740707230.713:1051): avc: denied { setopt } for pid=11943 comm="syz.3.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.270030][ T29] audit: type=1400 audit(1740707230.743:1052): avc: denied { read } for pid=11943 comm="syz.3.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.523754][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2633'. [ 208.532406][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 208.631858][T11956] bond1 (unregistering): Released all slaves [ 208.683057][T11965] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2636'. [ 208.807835][T11973] dvmrp0: entered allmulticast mode [ 208.820349][ T29] audit: type=1400 audit(1740707231.313:1053): avc: denied { ioctl } for pid=11974 comm="syz.5.2642" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 208.845487][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.853120][ T5831] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 313.995303][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 314.002273][ C0] rcu: (detected by 0, t=10502 jiffies, g=34285, q=351 ncpus=2) [ 314.009979][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294968550-4294958048), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 314.023376][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g34285 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 314.034567][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 314.044527][ C0] rcu: RCU grace-period kthread stack dump: [ 314.050404][ C0] task:rcu_preempt state:R running task stack:28344 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 314.063896][ C0] Call Trace: [ 314.067168][ C0] [ 314.070096][ C0] __schedule+0xf43/0x5890 [ 314.074511][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 314.079719][ C0] ? __pfx___schedule+0x10/0x10 [ 314.084562][ C0] ? schedule+0x298/0x350 [ 314.088887][ C0] ? __pfx_lock_release+0x10/0x10 [ 314.093913][ C0] ? lock_acquire+0x2f/0xb0 [ 314.098412][ C0] ? schedule+0x1fd/0x350 [ 314.102738][ C0] schedule+0xe7/0x350 [ 314.106805][ C0] schedule_timeout+0x124/0x280 [ 314.111657][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 314.117029][ C0] ? __pfx_process_timeout+0x10/0x10 [ 314.122315][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 314.128113][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 314.133577][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 314.138342][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 314.143624][ C0] ? rcu_gp_init+0xc82/0x1630 [ 314.148302][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 314.153499][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 314.159305][ C0] rcu_gp_kthread+0x271/0x380 [ 314.163999][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 314.169198][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 314.174396][ C0] ? __kthread_parkme+0x148/0x220 [ 314.179419][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 314.184627][ C0] kthread+0x3af/0x750 [ 314.188695][ C0] ? __pfx_kthread+0x10/0x10 [ 314.193289][ C0] ? __pfx_kthread+0x10/0x10 [ 314.197877][ C0] ret_from_fork+0x45/0x80 [ 314.202295][ C0] ? __pfx_kthread+0x10/0x10 [ 314.206884][ C0] ret_from_fork_asm+0x1a/0x30 [ 314.211669][ C0] [ 314.214682][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 314.220993][ C0] Sending NMI from CPU 0 to CPUs 1: [ 314.226193][ C1] NMI backtrace for cpu 1 [ 314.226203][ C1] CPU: 1 UID: 0 PID: 10903 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 314.226217][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.226224][ C1] RIP: 0010:__kasan_check_read+0x0/0x20 [ 314.226245][ C1] Code: c3 cc cc cc cc 48 83 c4 60 48 c7 c7 68 e9 7f 8d 5b 5d 41 5c e9 11 37 7c ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f6 31 d2 e9 7f f0 ff ff 66 66 2e 0f 1f [ 314.226256][ C1] RSP: 0018:ffffc90000a18ad8 EFLAGS: 00000046 [ 314.226267][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 314.226275][ C1] RDX: 1ffff11006552a7c RSI: 0000000000000008 RDI: ffffffff96ec2cc0 [ 314.226283][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 314.226290][ C1] R10: 000000000000000a R11: 0000000000000002 R12: 0000000000000002 [ 314.226298][ C1] R13: ffff888032a94880 R14: 0000000000000000 R15: ffff888032a953c0 [ 314.226306][ C1] FS: 0000555590667500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 314.226320][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.226328][ C1] CR2: 0000001b2f718ff8 CR3: 0000000024b5e000 CR4: 00000000003526f0 [ 314.226336][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 314.226343][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 314.226350][ C1] Call Trace: [ 314.226355][ C1] [ 314.226359][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 314.226379][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 314.226394][ C1] ? nmi_handle+0x1ac/0x5d0 [ 314.226411][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 314.226428][ C1] ? default_do_nmi+0x6a/0x160 [ 314.226446][ C1] ? exc_nmi+0x170/0x1e0 [ 314.226463][ C1] ? end_repeat_nmi+0xf/0x53 [ 314.226484][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 314.226501][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 314.226518][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 314.226535][ C1] [ 314.226539][ C1] [ 314.226543][ C1] hlock_class+0x4e/0x130 [ 314.226561][ C1] __lock_acquire+0x410/0x3c40 [ 314.226578][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 314.226595][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 314.226611][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 314.226629][ C1] lock_acquire.part.0+0x11b/0x380 [ 314.226645][ C1] ? debug_object_deactivate+0x13b/0x370 [ 314.226660][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 314.226676][ C1] ? rcu_is_watching+0x12/0xc0 [ 314.226688][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 314.226701][ C1] ? debug_object_activate+0x149/0x4a0 [ 314.226715][ C1] ? debug_object_deactivate+0x13b/0x370 [ 314.226729][ C1] ? lock_acquire+0x2f/0xb0 [ 314.226743][ C1] ? debug_object_deactivate+0x13b/0x370 [ 314.226758][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 314.226770][ C1] ? debug_object_deactivate+0x13b/0x370 [ 314.226783][ C1] debug_object_deactivate+0x13b/0x370 [ 314.226797][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 314.226812][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 314.226826][ C1] ? __pfx_advance_sched+0x10/0x10 [ 314.226845][ C1] __hrtimer_run_queues+0x47c/0xae0 [ 314.226859][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 314.226871][ C1] ? read_tsc+0x9/0x20 [ 314.226885][ C1] hrtimer_interrupt+0x392/0x8e0 [ 314.226901][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 314.226921][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 314.226935][ C1] [ 314.226938][ C1] [ 314.226943][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.226959][ C1] RIP: 0010:write_comp_data+0x11/0x90 [ 314.226977][ C1] Code: cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 8f ff 49 7e <65> 8b 05 90 ff 49 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 314.226988][ C1] RSP: 0018:ffffc9000dd8faf8 EFLAGS: 00000246 [ 314.226997][ C1] RAX: 0000000000000003 RBX: ffffc9000dd8fce8 RCX: ffffffff817b314d [ 314.227005][ C1] RDX: ffff888032a94880 RSI: 0000000000000010 RDI: 0000000000000005 [ 314.227013][ C1] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000010 [ 314.227020][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 314.227027][ C1] R13: ffff888061272440 R14: 1ffff92001bb1f9d R15: ffff8880612729b0 [ 314.227038][ C1] ? wait_consider_task+0xbd/0x4100 [ 314.227053][ C1] wait_consider_task+0xbd/0x4100 [ 314.227066][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 314.227083][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 314.227099][ C1] ? rcu_is_watching+0x12/0xc0 [ 314.227111][ C1] ? __pfx_wait_consider_task+0x10/0x10 [ 314.227125][ C1] ? __do_wait+0x105/0x890 [ 314.227137][ C1] ? lock_acquire+0x2f/0xb0 [ 314.227152][ C1] ? __do_wait+0x105/0x890 [ 314.227166][ C1] __do_wait+0x1e2/0x890 [ 314.227180][ C1] ? do_wait+0x1e7/0x570 [ 314.227192][ C1] do_wait+0x217/0x570 [ 314.227205][ C1] kernel_wait4+0x16c/0x280 [ 314.227219][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 314.227234][ C1] ? __pfx_child_wait_callback+0x10/0x10 [ 314.227248][ C1] ? bpf_trace_run2+0x266/0x590 [ 314.227263][ C1] ? __pfx_lock_release+0x10/0x10 [ 314.227280][ C1] __do_sys_wait4+0x15f/0x170 [ 314.227294][ C1] ? __pfx___do_sys_wait4+0x10/0x10 [ 314.227308][ C1] ? find_held_lock+0x2d/0x110 [ 314.227325][ C1] ? rcu_is_watching+0x12/0xc0 [ 314.227338][ C1] do_syscall_64+0xcd/0x250 [ 314.227353][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.227369][ C1] RIP: 0033:0x7fc09f7833d7 [ 314.227380][ C1] Code: 89 7c 24 10 48 89 4c 24 18 e8 45 1b 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 95 1b 03 00 8b 44 [ 314.227391][ C1] RSP: 002b:00007ffdefa554a0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 314.227402][ C1] RAX: ffffffffffffffda RBX: 00000000000000a8 RCX: 00007fc09f7833d7 [ 314.227410][ C1] RDX: 0000000040000001 RSI: 00007ffdefa5550c RDI: 00000000ffffffff [ 314.227418][ C1] RBP: 00007ffdefa5550c R08: 0000000000000000 R09: 00007fc0a057d000 [ 314.227426][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000004f [ 314.227434][ C1] R13: 00000000000927c0 R14: 0000000000033021 R15: 00007ffdefa55560 [ 314.227446][ C1] [ 314.831943][ C0] vkms_vblank_simulate: vblank timer overrun