last executing test programs: 1.938619993s ago: executing program 1 (id=3640): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000440)=[@register_looper, @enter_looper], 0x4d, 0x0, &(0x7f00000004c0)="6792ee4ad8b0523ae5466cd5c5b65ba3e49c279a129b25c8ed25bbdb4bd4e651de59462b5667fffb1f9e914ddc162d3ee5ddec7f8017c8b8e013a666e19a5c27005078b23dadd24541b13386c8"}) 1.853018717s ago: executing program 1 (id=3643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000000000000064d564b"]) 1.851782383s ago: executing program 0 (id=3644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x103) 1.732403298s ago: executing program 4 (id=3645): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.732100293s ago: executing program 2 (id=3647): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00') r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.695828128s ago: executing program 0 (id=3648): mkdir(0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) syz_usb_connect(0x6, 0x0, 0x0, 0x0) 1.692395677s ago: executing program 4 (id=3649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000001540)=[@acquire], 0x0, 0x0, 0x0}) 1.596560935s ago: executing program 2 (id=3650): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000500"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f00741d0000080007"], 0x44}}, 0x0) 1.596321914s ago: executing program 1 (id=3651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b042) write$hidraw(r1, &(0x7f0000000bc0), 0xffffffae) ioctl$HIDIOCGRDESC(r1, 0x401c5820, &(0x7f00000005c0)) 1.493949812s ago: executing program 4 (id=3653): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0xebe2c446cd54176c}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) 1.48818334s ago: executing program 2 (id=3654): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000080000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000004b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f00000004c0)=0xff59) 1.296918427s ago: executing program 1 (id=3657): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.236543243s ago: executing program 2 (id=3658): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 1.236360914s ago: executing program 4 (id=3659): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0d, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.18877739s ago: executing program 1 (id=3660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/160, 0xa0}], 0x1, 0x1ef, 0x1000) 1.12921646s ago: executing program 4 (id=3661): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x75) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) writev(r1, &(0x7f0000000880)=[{&(0x7f00000002c0)="0aa5b7800cec416b", 0x8}], 0x1) 980.446598ms ago: executing program 0 (id=3663): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="030000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 980.205467ms ago: executing program 1 (id=3664): unshare(0x8000000) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x75) 980.023321ms ago: executing program 4 (id=3665): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 855.896703ms ago: executing program 0 (id=3667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000103, 0x0, 0x2}]}) 719.816511ms ago: executing program 0 (id=3670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x200, 0x0, 0x4, {[@mss={0x2, 0x4, 0x9}]}}}}}}}}, 0x0) 591.16366ms ago: executing program 2 (id=3672): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x3, "76af7c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 590.98748ms ago: executing program 0 (id=3673): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000040)="987aa1", 0x3}], 0x1) 366.336931ms ago: executing program 3 (id=3674): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x80}, &(0x7f0000000200)=0x8) 303.494188ms ago: executing program 3 (id=3675): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) creat(&(0x7f0000000000)='./bus\x00', 0x0) 231.687938ms ago: executing program 3 (id=3676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24000044}, 0x4000) 152.470125ms ago: executing program 3 (id=3677): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc47"], 0x398}}, 0x0) 152.290703ms ago: executing program 3 (id=3678): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)}], 0x1, 0x0, 0x20, 0x6044}, 0x6) ftruncate(0xffffffffffffffff, 0xf88) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e3, &(0x7f0000000200)) 123.314868ms ago: executing program 3 (id=3679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') clock_settime(0x0, &(0x7f0000000240)={0x77359400}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, [0xd, 0x8, 0x4, 0x2, 0x1, 0xffffffffbfffffff, 0x10001, 0x1, 0xb, 0x10001, 0xfffffffffffffffd, 0x100000000, 0x0, 0x9, 0x4]}, &(0x7f0000000180)=0x100) 0s ago: executing program 2 (id=3680): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x800) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) read$FUSE(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) kernel console output (not intermixed with test programs): =bluetooth_socket permissive=1 [ 176.046015][T11013] netlink: 'syz.0.2257': attribute type 178 has an invalid length. [ 176.067911][ T117] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 176.075251][ T117] ath9k_htc: Failed to initialize the device [ 176.135484][ T117] usb 2-1: ath9k_htc: USB layer deinitialized [ 176.204047][ T5867] usb 2-1: USB disconnect, device number 18 [ 176.273134][T11023] team0: entered promiscuous mode [ 176.278572][T11023] team_slave_0: entered promiscuous mode [ 176.284440][T11023] team_slave_1: entered promiscuous mode [ 176.290470][T11023] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 176.299874][T11023] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 176.322093][T11022] team0: left promiscuous mode [ 176.331443][T11022] team_slave_0: left promiscuous mode [ 176.337404][T11022] team_slave_1: left promiscuous mode [ 176.345611][T11022] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 176.359701][T11022] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 176.388455][ T5870] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 176.452298][T11030] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2266'. [ 176.548452][ T5819] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 176.559678][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.570990][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.581242][ T5870] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 176.590678][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.605128][ T5870] usb 1-1: config 0 descriptor?? [ 176.754136][T11048] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2274'. [ 176.763792][ T29] audit: type=1400 audit(1737658333.768:932): avc: denied { nlmsg_read } for pid=11047 comm="syz.1.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.852792][T11052] input: syz1 as /devices/virtual/input/input25 [ 177.159441][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 177.223791][ T5870] hid-led 0003:1D34:000A.001A: probe with driver hid-led failed with error -71 [ 177.241004][ T5870] usb 1-1: USB disconnect, device number 15 [ 177.248619][ T57] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 177.428233][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 177.440991][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'. [ 177.442600][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 177.462871][ T57] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 177.472782][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.482237][ T57] usb 2-1: Product: syz [ 177.486511][ T57] usb 2-1: Manufacturer: syz [ 177.491661][ T57] usb 2-1: SerialNumber: syz [ 177.499071][ T57] usb 2-1: config 0 descriptor?? [ 177.505800][ T57] hub 2-1:0.0: bad descriptor, ignoring hub [ 177.512900][ T57] hub 2-1:0.0: probe with driver hub failed with error -5 [ 177.523752][ T57] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 177.693447][ T29] audit: type=1400 audit(1737658334.708:933): avc: denied { execmem } for pid=11072 comm="syz.2.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 177.787094][ T29] audit: type=1400 audit(1737658334.798:934): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.857683][ T29] audit: type=1400 audit(1737658334.798:935): avc: denied { open } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.924410][ T29] audit: type=1400 audit(1737658334.798:936): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.000472][ T117] usb 2-1: USB disconnect, device number 19 [ 178.004379][ T29] audit: type=1400 audit(1737658334.848:937): avc: denied { read write } for pid=11059 comm="syz.1.2280" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 178.065673][ T29] audit: type=1400 audit(1737658334.848:938): avc: denied { open } for pid=11059 comm="syz.1.2280" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 178.137427][ T29] audit: type=1400 audit(1737658334.908:939): avc: denied { create } for pid=11075 comm="syz.0.2288" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.201162][ T29] audit: type=1400 audit(1737658334.998:940): avc: denied { create } for pid=11078 comm="syz.3.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 178.202765][T11085] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 178.233762][T11087] ======================================================= [ 178.233762][T11087] WARNING: The mand mount option has been deprecated and [ 178.233762][T11087] and is ignored by this kernel. Remove the mand [ 178.233762][T11087] option from the mount to silence this warning. [ 178.233762][T11087] ======================================================= [ 178.560687][T11100] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 178.574173][T11103] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2300'. [ 178.800513][T11109] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 179.701344][T11173] netlink: 'syz.0.2322': attribute type 2 has an invalid length. [ 179.721556][T11173] netlink: 85376 bytes leftover after parsing attributes in process `syz.0.2322'. [ 179.814058][T11178] tipc: Enabled bearer , priority 10 [ 180.160052][T11192] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2330'. [ 180.263603][T11201] vlan2: entered promiscuous mode [ 180.277238][T11201] vlan2: entered allmulticast mode [ 180.614575][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'. [ 180.778174][ T5130] Bluetooth: hci2: command 0x0406 tx timeout [ 180.781776][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 180.788754][ T5130] Bluetooth: hci3: command 0x0406 tx timeout [ 180.865399][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 180.865416][ T29] audit: type=1400 audit(1737658337.878:1022): avc: denied { create } for pid=11234 comm="syz.3.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.899958][ T117] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 180.908981][ T29] audit: type=1400 audit(1737658337.878:1023): avc: denied { write } for pid=11234 comm="syz.3.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.952600][ T29] audit: type=1400 audit(1737658337.968:1024): avc: denied { watch } for pid=11238 comm="syz.3.2350" path="/473" dev="tmpfs" ino=2412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 181.067843][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 181.078962][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.114390][ T117] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 181.140272][T11244] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 181.144014][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.212319][ T117] usb 2-1: config 0 descriptor?? [ 181.237632][ T29] audit: type=1400 audit(1737658338.248:1025): avc: denied { setopt } for pid=11248 comm="syz.2.2355" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.336598][ T29] audit: type=1400 audit(1737658338.348:1026): avc: denied { mount } for pid=11255 comm="syz.2.2358" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 181.467928][ T5867] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 181.593641][ T29] audit: type=1400 audit(1737658338.608:1027): avc: denied { read } for pid=11270 comm="syz.0.2364" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 181.616993][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.651198][ T117] nzxt-kraken2 0003:1E71:170E.001B: unknown main item tag 0x0 [ 181.669964][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.681933][ T117] nzxt-kraken2 0003:1E71:170E.001B: unknown main item tag 0x0 [ 181.691133][ T5867] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.701114][ T29] audit: type=1400 audit(1737658338.608:1028): avc: denied { open } for pid=11270 comm="syz.0.2364" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 181.730790][ T117] nzxt-kraken2 0003:1E71:170E.001B: unknown main item tag 0x0 [ 181.742408][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.745042][ T29] audit: type=1400 audit(1737658338.608:1029): avc: denied { ioctl } for pid=11270 comm="syz.0.2364" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 181.753480][ T117] nzxt-kraken2 0003:1E71:170E.001B: unknown main item tag 0x0 [ 181.791767][ T29] audit: type=1400 audit(1737658338.748:1030): avc: denied { read write } for pid=11275 comm="syz.0.2366" name="event2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 181.796310][ T5867] usb 5-1: config 0 descriptor?? [ 181.820011][ T29] audit: type=1400 audit(1737658338.748:1031): avc: denied { open } for pid=11275 comm="syz.0.2366" path="/dev/input/event2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 181.835750][ T117] nzxt-kraken2 0003:1E71:170E.001B: unknown main item tag 0x0 [ 181.858624][ T117] nzxt-kraken2 0003:1E71:170E.001B: hidraw0: USB HID v0.05 Device [HID 1e71:170e] on usb-dummy_hcd.1-1/input0 [ 182.004763][ T117] usb 2-1: USB disconnect, device number 20 [ 182.268779][ T5867] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 182.291409][ T5867] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001C/input/input28 [ 182.425834][ T5867] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 182.689395][ T117] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 182.832706][ T5867] usb 5-1: USB disconnect, device number 21 [ 182.858112][ T117] usb 1-1: Using ep0 maxpacket: 8 [ 182.879235][ T117] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 182.896437][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.930994][ T117] usb 1-1: config 0 descriptor?? [ 183.180033][ T117] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 183.229801][T11324] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 183.230759][T11323] IPVS: stopping master sync thread 11324 ... [ 183.462329][T11338] overlayfs: failed to clone upperpath [ 183.567678][ T53] Bluetooth: hci4: link tx timeout [ 183.574456][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 183.585438][ T53] Bluetooth: hci4: link tx timeout [ 183.591696][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.601606][ T53] Bluetooth: hci4: link tx timeout [ 183.606740][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 183.619673][ T53] Bluetooth: hci4: link tx timeout [ 183.625696][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.777834][ T53] Bluetooth: hci4: link tx timeout [ 183.782621][ T117] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 183.783046][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 183.801610][ T53] Bluetooth: hci4: link tx timeout [ 183.806737][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.816721][ T53] Bluetooth: hci4: link tx timeout [ 183.833455][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 183.835696][ T117] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 183.841488][ T53] Bluetooth: hci4: link tx timeout [ 183.841536][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.847586][T11347] ubi: mtd0 is already attached to ubi0 [ 183.921380][ T117] asix 1-1:0.0: probe with driver asix failed with error -71 [ 183.957167][ T117] usb 1-1: USB disconnect, device number 16 [ 184.009027][ T53] Bluetooth: hci4: link tx timeout [ 184.014182][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 184.022919][ T53] Bluetooth: hci4: link tx timeout [ 184.028208][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.093414][T11363] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2396'. [ 184.154167][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 184.566183][ T53] Bluetooth: hci4: link tx timeout [ 184.571930][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 184.582035][ T53] Bluetooth: hci4: link tx timeout [ 184.587177][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.707486][ T53] Bluetooth: hci4: link tx timeout [ 184.713367][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 184.721118][ T53] Bluetooth: hci4: link tx timeout [ 184.726253][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.886300][T11410] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 185.671470][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 185.777880][ T5869] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 185.839445][T11419] orangefs_mount: mount request failed with -4 [ 185.929539][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 185.929554][ T29] audit: type=1400 audit(1737658342.948:1121): avc: denied { listen } for pid=11463 comm="syz.1.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.997384][ T5869] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 186.008670][ T5869] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 186.017390][ T29] audit: type=1400 audit(1737658342.978:1122): avc: denied { getopt } for pid=11463 comm="syz.1.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.037618][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 186.067225][ T5869] usb 1-1: config 1 has no interface number 0 [ 186.084021][ T5869] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 186.097851][ T29] audit: type=1400 audit(1737658343.098:1123): avc: denied { ioctl } for pid=11475 comm="syz.1.2436" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29843 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.132903][ T5869] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 186.147782][ T5869] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 186.156841][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.191773][ T5869] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 186.206430][ T29] audit: type=1326 audit(1737658343.218:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaf78cd29 code=0x7ffc0000 [ 186.229947][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.245121][ T29] audit: type=1326 audit(1737658343.218:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaf78cd29 code=0x7ffc0000 [ 186.316159][ T29] audit: type=1326 audit(1737658343.218:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1eaf78cd29 code=0x7ffc0000 [ 186.408081][ T5869] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 186.411050][ T29] audit: type=1326 audit(1737658343.218:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaf78cd29 code=0x7ffc0000 [ 186.465407][T11494] netlink: 'syz.1.2441': attribute type 29 has an invalid length. [ 186.474058][ T29] audit: type=1326 audit(1737658343.218:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaf78cd29 code=0x7ffc0000 [ 186.486308][T11494] netlink: 'syz.1.2441': attribute type 29 has an invalid length. [ 186.508154][ T29] audit: type=1326 audit(1737658343.218:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1eaf78cd29 code=0x7ffc0000 [ 186.536793][T11494] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2441'. [ 186.538497][ T29] audit: type=1326 audit(1737658343.218:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaf78cd29 code=0x7ffc0000 [ 186.665984][ T5869] usb 1-1: USB disconnect, device number 17 [ 186.675031][ T5869] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 187.518372][ T57] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 187.711854][ T57] usb 2-1: Using ep0 maxpacket: 32 [ 187.734027][ T57] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 12336, setting to 1024 [ 187.745420][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 187.758471][ T57] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 187.787137][ T57] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 187.796935][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.816314][ T57] usb 2-1: Product: syz [ 187.821413][ T57] usb 2-1: Manufacturer: syz [ 187.826203][ T57] usb 2-1: SerialNumber: syz [ 187.838350][T11544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.130155][ T57] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 188.377386][ C0] usblp0: nonzero write bulk status received: -71 [ 188.392887][ T5869] usb 2-1: USB disconnect, device number 21 [ 188.402150][ T5869] usblp0: removed [ 188.853257][T11650] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2480'. [ 189.187908][ T5867] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 189.349489][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.378739][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.402876][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.452709][ T5867] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 189.476914][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.501655][ T5867] usb 5-1: config 0 descriptor?? [ 189.549226][T11694] 9pnet_fd: Insufficient options for proto=fd [ 189.818514][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 189.916236][ T5867] acrux 0003:1A34:0802.001D: unknown main item tag 0x1 [ 189.945339][ T5867] acrux 0003:1A34:0802.001D: item fetching failed at offset 4/5 [ 189.978267][ T5867] acrux 0003:1A34:0802.001D: parse failed [ 189.984285][ T5867] acrux 0003:1A34:0802.001D: probe with driver acrux failed with error -22 [ 190.052903][T11685] IPVS: You probably need to specify IP address on multicast interface. [ 190.080031][T11685] IPVS: Error connecting to the multicast addr [ 190.140920][ T57] usb 5-1: USB disconnect, device number 22 [ 190.498447][ T970] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 190.688437][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 190.695771][ T970] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.708278][ T970] usb 2-1: config 0 has no interface number 0 [ 190.728095][ T970] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.748809][ T970] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.768292][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.800582][ T970] usb 2-1: config 0 descriptor?? [ 190.813712][ T970] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 190.921237][T11745] blktrace: Concurrent blktraces are not allowed on sg0 [ 191.087437][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 191.087453][ T29] audit: type=1400 audit(1737658348.098:1181): avc: denied { sqpoll } for pid=11751 comm="syz.3.2523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 191.144696][ T29] audit: type=1400 audit(1737658348.098:1182): avc: denied { lock } for pid=11751 comm="syz.3.2523" path="socket:[30403]" dev="sockfs" ino=30403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 191.246516][ T29] audit: type=1400 audit(1737658348.238:1183): avc: denied { bind } for pid=11758 comm="syz.3.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 191.282860][ T29] audit: type=1400 audit(1737658348.238:1184): avc: denied { name_bind } for pid=11758 comm="syz.3.2525" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 191.314744][ T29] audit: type=1400 audit(1737658348.238:1185): avc: denied { node_bind } for pid=11758 comm="syz.3.2525" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 191.366450][ T29] audit: type=1400 audit(1737658348.248:1186): avc: denied { listen } for pid=11758 comm="syz.3.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 191.421263][ T29] audit: type=1400 audit(1737658348.248:1187): avc: denied { connect } for pid=11758 comm="syz.3.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 191.465613][ T29] audit: type=1400 audit(1737658348.258:1188): avc: denied { name_connect } for pid=11758 comm="syz.3.2525" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 191.520736][ T29] audit: type=1400 audit(1737658348.358:1189): avc: denied { read } for pid=11760 comm="syz.4.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.567613][ T29] audit: type=1400 audit(1737658348.408:1190): avc: denied { create } for pid=11765 comm="syz.3.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.062074][ T970] usb 2-1: USB disconnect, device number 22 [ 192.315706][T11798] netlink: 'syz.2.2543': attribute type 14 has an invalid length. [ 192.838302][ T970] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 193.001022][ T970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.024654][ T970] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 193.047279][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 193.060719][ T970] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.077584][ T970] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 193.094141][ T970] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 193.110193][ T970] usb 2-1: Manufacturer: syz [ 193.123863][ T970] usb 2-1: config 0 descriptor?? [ 193.132507][ T970] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 193.288073][T11836] bond0: (slave vlan2): Opening slave failed [ 193.379511][ T5870] usb 2-1: USB disconnect, device number 23 [ 193.696987][T11855] vlan2: entered promiscuous mode [ 193.723630][T11855] vlan2: entered allmulticast mode [ 194.061747][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.068103][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.415805][ T970] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 194.598415][ T970] usb 2-1: Using ep0 maxpacket: 32 [ 194.616587][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.648435][ T970] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 194.681922][ T970] usb 2-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 194.708103][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.732509][ T970] usb 2-1: config 0 descriptor?? [ 194.950004][ T970] usbhid 2-1:0.0: can't add hid device: -71 [ 194.967688][ T970] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 194.998381][ T970] usb 2-1: USB disconnect, device number 24 [ 195.826966][T11942] openvswitch: netlink: nsh attr 0 has unexpected len 108 expected 0 [ 195.835468][T11942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.908107][ T970] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 196.088197][ T970] usb 5-1: Using ep0 maxpacket: 32 [ 196.100300][ T970] usb 5-1: config 0 has no interfaces? [ 196.109687][ T970] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 196.131875][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.158101][ T970] usb 5-1: Product: syz [ 196.162299][ T970] usb 5-1: Manufacturer: syz [ 196.166904][ T970] usb 5-1: SerialNumber: syz [ 196.209483][ T970] usb 5-1: config 0 descriptor?? [ 196.441472][ T117] usb 5-1: USB disconnect, device number 23 [ 196.558061][ T5867] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 196.710030][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 196.728402][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.751094][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.767456][ T5867] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 196.776753][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.787312][ T5867] usb 1-1: config 0 descriptor?? [ 197.202678][ T5867] ortek 0003:1223:3F07.001E: unknown main item tag 0x0 [ 197.218547][ T57] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 197.225301][ T5867] ortek 0003:1223:3F07.001E: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.0-1/input0 [ 197.400118][ T57] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 197.415431][ T57] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.425039][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.430656][ T5867] usb 1-1: USB disconnect, device number 18 [ 197.437280][ T57] usb 4-1: SerialNumber: syz [ 197.704569][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 197.704585][ T29] audit: type=1400 audit(1737658354.725:1212): avc: denied { setopt } for pid=12020 comm="syz.1.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 197.894486][ T29] audit: type=1400 audit(1737658354.915:1213): avc: denied { bind } for pid=12031 comm="syz.2.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.098247][ T57] cdc_ether 4-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 198.236546][ T5819] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 198.239211][ T29] audit: type=1400 audit(1737658355.255:1214): avc: denied { write } for pid=12048 comm="syz.1.2650" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.246390][ T5819] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 198.543302][ T5867] usb 4-1: USB disconnect, device number 19 [ 198.554197][ T5867] cdc_ether 4-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 199.273889][ T29] audit: type=1400 audit(1737658356.295:1215): avc: denied { connect } for pid=12098 comm="syz.1.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.328618][ T57] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 199.364177][T12106] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 199.498290][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 199.516613][ T57] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 199.530027][ T57] usb 5-1: config 0 has no interface number 0 [ 199.536729][ T57] usb 5-1: config 0 interface 12 has no altsetting 0 [ 199.548840][ T57] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 199.561435][T12113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2666'. [ 199.572259][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.584823][T12113] netlink: 'syz.2.2666': attribute type 7 has an invalid length. [ 199.593867][ T57] usb 5-1: Product: syz [ 199.602793][ T57] usb 5-1: Manufacturer: syz [ 199.604311][ T29] audit: type=1400 audit(1737658356.625:1216): avc: denied { create } for pid=12116 comm="syz.3.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.607473][ T57] usb 5-1: SerialNumber: syz [ 199.608162][T12113] netlink: 'syz.2.2666': attribute type 8 has an invalid length. [ 199.648818][ T57] usb 5-1: config 0 descriptor?? [ 199.656526][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2666'. [ 199.685637][ T29] audit: type=1400 audit(1737658356.625:1217): avc: denied { connect } for pid=12116 comm="syz.3.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.711627][ T29] audit: type=1400 audit(1737658356.625:1218): avc: denied { write } for pid=12116 comm="syz.3.2668" laddr=172.20.20.170 lport=6 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.761503][ T29] audit: type=1400 audit(1737658356.735:1219): avc: denied { setopt } for pid=12120 comm="syz.3.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.777868][ T5867] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 199.912792][T12129] input: syz1 as /devices/virtual/input/input30 [ 199.957887][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 199.974529][ T5867] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.987840][ T5867] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 200.007908][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.038650][ T5867] usb 2-1: config 0 descriptor?? [ 200.119422][ T29] audit: type=1400 audit(1737658357.145:1220): avc: denied { ioctl } for pid=12135 comm="syz.3.2676" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.367827][ T5869] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 200.456583][T12132] IPVS: You probably need to specify IP address on multicast interface. [ 200.465461][T12132] IPVS: Error connecting to the multicast addr [ 200.477369][ T5867] hid (null): global environment stack underflow [ 200.512370][ T5867] asus 0003:0B05:19B6.001F: unexpected long global item [ 200.519736][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 200.538984][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 200.558220][ T5867] asus 0003:0B05:19B6.001F: Asus hid parse failed: -22 [ 200.572916][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 200.584850][ T5867] asus 0003:0B05:19B6.001F: probe with driver asus failed with error -22 [ 200.596298][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 200.614786][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 200.626998][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.642069][ T5869] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 200.659903][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.668252][ T5869] usb 1-1: Product: syz [ 200.672575][ T5869] usb 1-1: Manufacturer: syz [ 200.677296][ T5869] usb 1-1: SerialNumber: syz [ 200.685988][ T5869] usb 1-1: config 0 descriptor?? [ 200.695793][T12138] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 200.700565][ T57] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 200.727773][ T29] audit: type=1400 audit(1737658357.735:1221): avc: denied { watch watch_reads } for pid=12147 comm="syz.2.2680" path="/647/file1" dev="tmpfs" ino=3312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 200.734280][ T57] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 200.764785][ T5869] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 200.789209][ T57] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 200.798082][ T970] usb 2-1: USB disconnect, device number 25 [ 200.819088][ T57] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 200.841127][ T57] usb 5-1: USB disconnect, device number 24 [ 200.976106][ T5869] usb 1-1: USB disconnect, device number 19 [ 201.546942][T12179] overlayfs: failed to clone upperpath [ 201.611003][T12185] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 201.623000][T12185] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 201.631298][T12185] gretap1: entered promiscuous mode [ 201.636773][T12185] gretap1: entered allmulticast mode [ 201.948100][ T57] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 202.078537][ T25] kernel write not supported for file /dsp1 (pid: 25 comm: kworker/1:0) [ 202.128045][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 202.159394][ T57] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.167522][ T57] usb 4-1: config 0 has no interface number 0 [ 202.179776][ T57] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.192834][ T57] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 202.202945][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.216135][T12213] smc: net device caif0 applied user defined pnetid SYZ2 [ 202.218585][ T57] usb 4-1: config 0 descriptor?? [ 202.269277][ T57] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 202.300628][ T5819] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 202.311224][ T5819] Bluetooth: hci3: Injecting HCI hardware error event [ 202.321405][ T5819] Bluetooth: hci3: hardware error 0x00 [ 203.042964][T12257] bridge0: entered allmulticast mode [ 203.240936][T12269] netlink: 'syz.1.2733': attribute type 29 has an invalid length. [ 203.275239][T12269] netlink: 'syz.1.2733': attribute type 29 has an invalid length. [ 203.308378][ T970] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 203.316662][T12269] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2733'. [ 203.479610][ T970] usb 5-1: config 0 has no interfaces? [ 203.486161][ T970] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 203.497182][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.508784][ T970] usb 5-1: config 0 descriptor?? [ 203.532683][T12287] vivid-003: disconnect [ 203.540253][T12286] vivid-003: reconnect [ 203.582438][ T5869] usb 4-1: USB disconnect, device number 20 [ 203.725093][T12260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.733878][T12260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.762385][T12260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.775451][T12260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.792732][ T970] usb 5-1: USB disconnect, device number 25 [ 203.831900][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 203.942329][T12296] team0 (unregistering): Port device team_slave_0 removed [ 203.954337][T12296] team0 (unregistering): Port device team_slave_1 removed [ 203.973650][T12296] team0 (unregistering): Port device wlan1 removed [ 204.215003][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 204.215018][ T29] audit: type=1326 audit(1737658361.235:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.2.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16acf8cd29 code=0x7fc00000 [ 204.258130][ T57] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 204.319261][ T29] audit: type=1400 audit(1737658361.345:1243): avc: denied { setopt } for pid=12304 comm="syz.2.2748" lport=58184 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 204.379924][ T5819] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 204.398014][ T29] audit: type=1400 audit(1737658361.415:1244): avc: denied { create } for pid=12310 comm="syz.2.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.432524][ T29] audit: type=1400 audit(1737658361.425:1245): avc: denied { bind } for pid=12310 comm="syz.2.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.463144][ T57] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 204.478264][ T57] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.502405][ T57] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.513845][ T57] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.529779][ T57] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 204.539319][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.547647][ T57] usb 5-1: Product: syz [ 204.557760][ T57] usb 5-1: Manufacturer: syz [ 204.562387][ T57] usb 5-1: SerialNumber: syz [ 204.648605][T12321] syzkaller1: entered promiscuous mode [ 204.654117][T12321] syzkaller1: entered allmulticast mode [ 204.799588][ T57] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 204.833239][ T57] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 204.869478][T12329] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 204.936886][ T57] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 204.953172][ T5869] kernel read not supported for file /video7 (pid: 5869 comm: kworker/0:7) [ 204.963270][ T57] usb 5-1: USB disconnect, device number 26 [ 205.158895][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.417856][ T5819] Bluetooth: hci4: command 0x0405 tx timeout [ 205.687970][ T29] audit: type=1400 audit(1737658362.715:1246): avc: denied { write } for pid=12359 comm="syz.4.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 206.132153][ T29] audit: type=1400 audit(1737658363.145:1247): avc: denied { unlink } for pid=12376 comm="syz.3.2776" name="#5" dev="tmpfs" ino=2873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 206.176309][ T29] audit: type=1400 audit(1737658363.155:1248): avc: denied { mount } for pid=12376 comm="syz.3.2776" name="/" dev="overlay" ino=2868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 206.224659][ T29] audit: type=1400 audit(1737658363.155:1249): avc: denied { execute } for pid=12380 comm="syz.4.2778" dev="hugetlbfs" ino=32646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 206.257864][ T5867] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 206.319669][ T29] audit: type=1400 audit(1737658363.155:1250): avc: denied { execute_no_trans } for pid=12380 comm="syz.4.2778" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=32646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 206.419503][ T29] audit: type=1400 audit(1737658363.165:1251): avc: denied { mount } for pid=12380 comm="syz.4.2778" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 206.441989][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 206.463558][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 206.500901][ T5867] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 206.520574][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.545848][ T5867] usb 1-1: Product: syz [ 206.557329][ T5867] usb 1-1: Manufacturer: syz [ 206.587959][ T5867] usb 1-1: SerialNumber: syz [ 206.609447][ T5867] usb 1-1: config 0 descriptor?? [ 206.636653][ T5867] hub 1-1:0.0: bad descriptor, ignoring hub [ 206.653198][ T5867] hub 1-1:0.0: probe with driver hub failed with error -5 [ 206.680136][ T5867] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31 [ 207.058309][ T5867] usb 1-1: USB disconnect, device number 20 [ 207.307474][T12408] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2788'. [ 207.408593][T12415] overlayfs: failed to clone lowerpath [ 207.619900][T12429] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2796'. [ 207.647296][T12431] syzkaller1: entered promiscuous mode [ 207.661317][T12431] syzkaller1: entered allmulticast mode [ 208.220160][T12471] binder: 12470:12471 ioctl c0306201 20000280 returned -14 [ 208.362037][T12480] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 208.584157][T12489] loop5: detected capacity change from 0 to 8 [ 208.599512][ C1] blk_print_req_error: 28 callbacks suppressed [ 208.599531][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.614814][ C1] buffer_io_error: 26 callbacks suppressed [ 208.614822][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.630860][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.640137][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.652684][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.661868][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.676415][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.685604][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.695210][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.704407][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.715862][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.725054][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.733685][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.742929][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.750960][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.760136][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.768078][T12489] ldm_validate_partition_table(): Disk read failed. [ 208.775538][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.784784][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.798494][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.807738][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.819587][T12489] Dev loop5: unable to read RDB block 0 [ 208.826063][T12489] loop5: unable to read partition table [ 208.832628][T12489] loop5: partition table beyond EOD, truncated [ 208.839034][T12489] loop_reread_partitions: partition scan of loop5 (3Ÿ ¾‚³˜) failed (rc=-5) [ 208.932221][T12494] pim6reg: entered allmulticast mode [ 208.958655][T12494] pim6reg: left allmulticast mode [ 209.015335][T12503] overlayfs: failed to clone upperpath [ 209.378396][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 209.378418][ T29] audit: type=1400 audit(1737658366.405:1274): avc: denied { read } for pid=12522 comm="syz.4.2840" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 209.458073][ T29] audit: type=1400 audit(1737658366.425:1275): avc: denied { open } for pid=12522 comm="syz.4.2840" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 209.508890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.776510][ T29] audit: type=1400 audit(1737658366.795:1276): avc: denied { connect } for pid=12530 comm="syz.0.2843" lport=35071 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 209.800788][ T29] audit: type=1400 audit(1737658366.795:1277): avc: denied { name_connect } for pid=12530 comm="syz.0.2843" dest=20004 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 209.831463][ T5869] IPVS: starting estimator thread 0... [ 209.831528][T12529] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 209.848163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.856889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.927841][T12534] IPVS: using max 30 ests per chain, 72000 per kthread [ 210.043319][ T29] audit: type=1400 audit(1737658367.055:1278): avc: denied { bind } for pid=12540 comm="syz.4.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 210.079650][T12541] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 210.086667][T12541] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.100569][T12541] vhci_hcd vhci_hcd.0: Device attached [ 210.277941][ T9] vhci_hcd: vhci_device speed not set [ 210.297961][ T5867] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 210.304087][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2852'. [ 210.335393][ T57] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 210.337844][ T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 210.457908][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 210.470655][ T5867] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 210.481488][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.492474][ T5867] usb 1-1: config 0 descriptor?? [ 210.499690][ T5867] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 210.500449][ T57] usb 4-1: config index 0 descriptor too short (expected 8240, got 27) [ 210.518702][ T57] usb 4-1: config 66 has too many interfaces: 107, using maximum allowed: 32 [ 210.531561][ T57] usb 4-1: config 66 has an invalid descriptor of length 115, skipping remainder of the config [ 210.546351][ T57] usb 4-1: config 66 has 0 interfaces, different from the descriptor's value: 107 [ 210.555872][ T57] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.565470][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.795580][T12543] usb 39-1: recv xbuf, 0 [ 210.801007][ T57] usb 4-1: string descriptor 0 read error: -71 [ 210.816717][ T68] vhci_hcd: stop threads [ 210.825216][ T57] usb 4-1: USB disconnect, device number 21 [ 210.837439][ T68] vhci_hcd: release socket [ 210.847562][ T68] vhci_hcd: disconnect device [ 210.877869][ T9] vhci_hcd: vhci_device speed not set [ 211.449529][T12588] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 211.496740][T12594] misc userio: Begin command sent, but we're already running [ 211.516652][ T5867] gspca_nw80x: reg_w err -71 [ 211.522193][ T5867] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 211.531148][ T5867] usb 1-1: USB disconnect, device number 21 [ 211.667826][ T117] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 211.817977][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 211.824933][ T117] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 211.840128][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 211.853550][ T117] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 211.862827][ T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.870943][ T117] usb 2-1: Product: syz [ 211.875100][ T117] usb 2-1: Manufacturer: syz [ 211.879797][ T117] usb 2-1: SerialNumber: syz [ 211.885472][ T117] usb 2-1: config 0 descriptor?? [ 211.892688][ T117] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 211.902208][ T117] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 212.098673][ T29] audit: type=1400 audit(1737658369.125:1279): avc: denied { read write } for pid=12597 comm="syz.0.2869" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 212.123518][ T29] audit: type=1400 audit(1737658369.145:1280): avc: denied { open } for pid=12597 comm="syz.0.2869" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 212.599496][ T117] em28xx 2-1:0.0: chip ID is em2800 [ 212.800021][ T117] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 212.808800][ T117] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 212.816206][ T117] em28xx 2-1:0.0: No AC97 audio processor [ 212.848761][ T117] usb 2-1: USB disconnect, device number 26 [ 212.855317][ T117] em28xx 2-1:0.0: Disconnecting em28xx [ 212.881576][ T117] em28xx 2-1:0.0: Freeing device [ 213.498059][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 213.498380][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 213.519066][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 213.699659][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.728859][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.758384][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.782367][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.802119][T12671] sctp: [Deprecated]: syz.0.2901 (pid 12671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.802119][T12671] Use struct sctp_sack_info instead [ 213.807996][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.879376][ T25] usb 5-1: config 0 descriptor?? [ 214.233243][T12692] io-wq is not configured for unbound workers [ 214.319060][ T25] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 214.335879][ T29] audit: type=1400 audit(1737658371.355:1281): avc: denied { setopt } for pid=12698 comm="syz.0.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.347485][ T25] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 214.439272][ T25] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 214.523802][ T68] tipc: Subscription rejected, illegal request [ 214.614966][ T29] audit: type=1400 audit(1737658371.625:1282): avc: denied { append } for pid=12708 comm="syz.1.2917" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 215.028112][ T25] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 215.191004][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 215.212008][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.242995][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.278701][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 215.323357][ T25] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 215.342442][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.373813][ T25] usb 2-1: config 0 descriptor?? [ 215.628895][T12740] syzkaller1: entered promiscuous mode [ 215.663782][T12740] syzkaller1: entered allmulticast mode [ 215.701766][ T29] audit: type=1400 audit(1737658372.715:1283): avc: denied { read } for pid=12742 comm="syz.0.2931" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 215.754458][ T29] audit: type=1400 audit(1737658372.715:1284): avc: denied { open } for pid=12742 comm="syz.0.2931" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 215.793672][ T29] audit: type=1400 audit(1737658372.745:1285): avc: denied { ioctl } for pid=12742 comm="syz.0.2931" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 215.818719][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.838884][ T25] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 215.909457][ T25] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 215.917550][ T25] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 215.970217][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2934'. [ 216.121255][ T25] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 216.135189][ T5870] usb 2-1: USB disconnect, device number 27 [ 216.175047][ T25] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 216.204822][ T25] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 216.257769][ T25] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 216.345600][T12738] geneve0: entered promiscuous mode [ 216.352597][T12738] geneve0: entered allmulticast mode [ 216.500798][ T57] usb 5-1: USB disconnect, device number 27 [ 216.614089][T12770] vlan0: entered promiscuous mode [ 216.623504][T12770] vlan0: entered allmulticast mode [ 216.633059][T12770] bridge0: entered allmulticast mode [ 216.642840][T12770] bridge0: entered promiscuous mode [ 216.672224][T12770] team0: Port device vlan0 added [ 216.825914][T12781] vivid-000: disconnect [ 216.881646][T12780] vivid-000: reconnect [ 217.046429][ T29] audit: type=1400 audit(1737658374.065:1286): avc: denied { ioctl } for pid=12791 comm="syz.4.2953" path="socket:[34569]" dev="sockfs" ino=34569 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.092617][ T29] audit: type=1800 audit(1737658374.085:1287): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2955" name="nullb0" dev="tmpfs" ino=3627 res=0 errno=0 [ 217.114554][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.189353][T12800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.235999][T12803] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2958'. [ 217.879980][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 218.107845][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 218.143862][ T9] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 218.157358][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.171092][ T9] usb 5-1: Product: syz [ 218.175809][ T9] usb 5-1: Manufacturer: syz [ 218.180912][ T9] usb 5-1: SerialNumber: syz [ 218.189778][ T9] usb 5-1: config 0 descriptor?? [ 218.212836][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 218.625329][ T9] gspca_se401: ExtraFeatures: 79 [ 218.637971][ T9] gspca_se401: Frame size: 0x0 1/16th janggu [ 218.664933][T12856] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 218.702612][ T29] audit: type=1400 audit(1737658375.725:1288): avc: denied { read } for pid=12852 comm="syz.2.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 218.748997][ T1030] Bluetooth: hci5: Frame reassembly failed (-84) [ 218.831063][ T9] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 218.867793][ T9] usb 5-1: USB disconnect, device number 28 [ 219.203400][ T29] audit: type=1400 audit(1737658376.225:1289): avc: denied { read } for pid=12872 comm="syz.0.2982" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 219.232824][ T29] audit: type=1400 audit(1737658376.225:1290): avc: denied { open } for pid=12872 comm="syz.0.2982" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 219.264775][ T29] audit: type=1400 audit(1737658376.225:1291): avc: denied { ioctl } for pid=12872 comm="syz.0.2982" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 219.409318][T12880] loop2: detected capacity change from 0 to 7 [ 219.423018][T12880] Dev loop2: unable to read RDB block 7 [ 219.429072][T12880] loop2: unable to read partition table [ 219.435002][T12880] loop2: partition table beyond EOD, truncated [ 219.441779][T12880] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.495942][T12885] sock: sock_set_timeout: `syz.2.2987' (pid 12885) tries to set negative timeout [ 219.744988][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 219.745003][ T29] audit: type=1400 audit(1737658376.765:1294): avc: denied { read } for pid=12898 comm="syz.3.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.117220][T12914] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 220.124205][ T117] IPVS: starting estimator thread 0... [ 220.243035][T12918] IPVS: using max 32 ests per chain, 76800 per kthread [ 220.257401][ T29] audit: type=1400 audit(1737658377.275:1295): avc: denied { connect } for pid=12922 comm="syz.3.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.306849][ T29] audit: type=1400 audit(1737658377.285:1296): avc: denied { write } for pid=12922 comm="syz.3.3002" path="socket:[34762]" dev="sockfs" ino=34762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.330551][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.393751][T12927] tipc: Resetting bearer [ 220.398948][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3003'. [ 220.402015][T12927] erspan0: left allmulticast mode [ 220.417370][T12927] vlan0: entered promiscuous mode [ 220.426518][T12927] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 220.650426][T12941] vcan0: tx address claim with different name [ 220.699228][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 220.872560][ T29] audit: type=1400 audit(1737658377.895:1297): avc: denied { setopt } for pid=12952 comm="syz.0.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.901462][ T29] audit: type=1400 audit(1737658377.915:1298): avc: denied { write } for pid=12952 comm="syz.0.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.962749][ T29] audit: type=1400 audit(1737658377.985:1299): avc: denied { getopt } for pid=12959 comm="syz.1.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.968629][T12953] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-11) [ 221.078217][T12953] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-11) [ 221.186739][ T29] audit: type=1400 audit(1737658378.205:1300): avc: denied { name_bind } for pid=12971 comm="syz.4.3024" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 221.498339][ T970] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 221.647010][T12988] loop6: detected capacity change from 0 to 64 [ 221.669585][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.681293][ T29] audit: type=1400 audit(1737658378.705:1301): avc: denied { map } for pid=12987 comm="syz.0.3031" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.690336][ C0] blk_print_req_error: 6 callbacks suppressed [ 221.690354][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 221.705828][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.712876][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.734371][ T970] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 221.740087][ C0] buffer_io_error: 6 callbacks suppressed [ 221.740101][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.749411][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.753164][ T29] audit: type=1400 audit(1737658378.705:1302): avc: denied { execute } for pid=12987 comm="syz.0.3031" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.755455][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.774726][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.796780][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.835145][ T970] usb 5-1: config 0 descriptor?? [ 222.268704][ T5870] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 222.429889][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.441072][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.451254][ T5870] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 222.463916][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.473491][ T5870] usb 1-1: config 0 descriptor?? [ 222.662158][ T970] hid-led 0003:27B8:01ED.0022: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 222.679188][ T970] hid-led 0003:27B8:01ED.0022: ThingM blink(1) initialized [ 222.853780][ T9] IPVS: starting estimator thread 0... [ 222.892605][ T5870] cypress 0003:04B4:DE61.0023: collection stack underflow [ 222.916269][ T5870] cypress 0003:04B4:DE61.0023: item 0 0 0 12 parsing failed [ 222.937417][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 222.967967][T13015] IPVS: using max 32 ests per chain, 76800 per kthread [ 222.988196][ T5870] cypress 0003:04B4:DE61.0023: parse failed [ 222.994165][ T5870] cypress 0003:04B4:DE61.0023: probe with driver cypress failed with error -22 [ 223.021306][ T970] usb 5-1: USB disconnect, device number 29 [ 223.134169][ T5870] usb 1-1: USB disconnect, device number 22 [ 223.377955][ T117] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 223.504404][ T29] audit: type=1400 audit(1737658380.525:1303): avc: denied { relabelfrom } for pid=13043 comm="syz.2.3056" name="" dev="pipefs" ino=35495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 223.583218][ T117] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 223.594764][ T117] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 223.610917][ T117] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 223.622829][ T117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.645494][ T117] usb 4-1: Product: syz [ 223.654706][ T117] usb 4-1: Manufacturer: syz [ 223.664833][ T117] usb 4-1: SerialNumber: syz [ 223.677073][ T117] usb 4-1: config 0 descriptor?? [ 223.691642][T13026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.701221][T13026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.816684][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3065'. [ 223.827405][T13060] bridge_slave_1: left promiscuous mode [ 223.838343][T13060] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.854560][T13060] bridge_slave_0: left allmulticast mode [ 223.860576][T13060] bridge_slave_0: left promiscuous mode [ 223.866500][T13060] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.934311][T13026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.942447][T13026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.979548][ T5870] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 224.149770][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.179375][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.207476][ T5870] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 224.223294][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.235720][ T5870] usb 2-1: config 0 descriptor?? [ 224.672237][ T5870] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 224.689909][ T5870] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 224.720019][ T5870] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0024/input/input36 [ 224.759248][ T5870] cm6533_jd 0003:0D8C:0022.0024: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 224.787856][ T117] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 224.836524][ T117] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 8e:75:bc:b6:ad:45 [ 224.864537][ T117] usb 4-1: USB disconnect, device number 22 [ 224.880350][ T117] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 224.937158][ T5869] usb 2-1: USB disconnect, device number 28 [ 224.971750][ T29] audit: type=1400 audit(1737658381.995:1304): avc: denied { open } for pid=13105 comm="syz.4.3084" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 225.274133][ T29] audit: type=1400 audit(1737658382.295:1305): avc: denied { append } for pid=13120 comm="syz.4.3089" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 225.595117][ T29] audit: type=1400 audit(1737658382.615:1306): avc: denied { create } for pid=13134 comm="syz.1.3097" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 225.657187][ T29] audit: type=1400 audit(1737658382.645:1307): avc: denied { read } for pid=13134 comm="syz.1.3097" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 225.710869][ T29] audit: type=1400 audit(1737658382.645:1308): avc: denied { open } for pid=13134 comm="syz.1.3097" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 225.736618][ T29] audit: type=1400 audit(1737658382.645:1309): avc: denied { ioctl } for pid=13134 comm="syz.1.3097" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 225.808634][ T29] audit: type=1400 audit(1737658382.675:1310): avc: denied { unlink } for pid=5816 comm="syz-executor" name="file0" dev="tmpfs" ino=2864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 225.944203][ T29] audit: type=1400 audit(1737658382.965:1311): avc: denied { read } for pid=13149 comm="syz.3.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 226.007905][ T29] audit: type=1400 audit(1737658383.015:1312): avc: denied { getopt } for pid=13146 comm="syz.0.3102" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.340917][T13172] kvm: kvm [13171]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000002d) [ 226.370367][ T29] audit: type=1400 audit(1737658383.395:1313): avc: denied { bind } for pid=13176 comm="syz.4.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.382362][T13175] vlan0: entered promiscuous mode [ 226.434132][T13175] vlan0: entered allmulticast mode [ 226.443033][T13175] veth0_vlan: entered allmulticast mode [ 226.464914][T13175] team0: Port device vlan0 added [ 226.748383][ T5869] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 226.921403][ T5869] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.945260][ T5869] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 226.972377][ T5869] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.985195][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.031228][ T5869] usb 2-1: Product: syz [ 227.036463][ T5869] usb 2-1: Manufacturer: syz [ 227.043099][ T5869] usb 2-1: SerialNumber: syz [ 227.288369][ T5870] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 227.444608][ T5870] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.472446][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.503097][ T5870] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 227.548129][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.566342][ T5870] usb 4-1: SerialNumber: syz [ 227.804095][ T5870] usb 4-1: 0:2 : does not exist [ 227.840083][ T5870] usb 4-1: USB disconnect, device number 23 [ 228.039414][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.092899][ T5869] cdc_ncm 2-1:1.0: bind() failure [ 228.110820][ T5869] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 228.155875][ T5869] usb 2-1: USB disconnect, device number 29 [ 228.433216][T13226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3135'. [ 228.442790][ T5870] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 228.458389][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3135'. [ 228.640768][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.663578][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 228.683589][ T5870] usb 5-1: config 1 has no interface number 0 [ 228.691418][ T5870] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.731377][ T5870] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 228.744617][ T5870] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.764299][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.797557][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.839213][ T5870] usb 5-1: Product: syz [ 228.843419][ T5870] usb 5-1: Manufacturer: syz [ 228.866501][T13253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13253 comm=syz.3.3146 [ 228.877727][ T5870] usb 5-1: SerialNumber: syz [ 228.992680][T13257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3148'. [ 229.290641][T13279] tipc: Started in network mode [ 229.295656][T13279] tipc: Node identity 2, cluster identity 4711 [ 229.302513][T13279] tipc: Node number set to 2 [ 229.327810][ T117] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 229.489570][ T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.505206][ T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.515782][ T117] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.529029][ T117] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.538133][ T117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.547499][ T117] usb 4-1: config 0 descriptor?? [ 229.637931][ T5869] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 229.752396][ T5870] cdc_ncm 5-1:1.1: bind() failure [ 229.799182][ T5869] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 229.811592][ T5869] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 229.824634][ T5869] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 229.834610][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.842741][ T5869] usb 2-1: Product: syz [ 229.846914][ T5869] usb 2-1: Manufacturer: syz [ 229.851558][ T5869] usb 2-1: SerialNumber: syz [ 229.857528][ T5869] usb 2-1: config 0 descriptor?? [ 229.863411][T13285] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 229.870801][T13285] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 229.969473][ T117] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 229.986908][ T9] usb 5-1: USB disconnect, device number 30 [ 230.002488][ T117] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 230.094516][T13285] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 230.106092][T13285] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 230.241346][ T117] usb 4-1: USB disconnect, device number 24 [ 230.518709][ T5869] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 230.730436][ T5869] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 230.764543][ T5869] usb 2-1: USB disconnect, device number 30 [ 230.937664][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 230.938196][ T5819] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 230.949150][ T29] audit: type=1400 audit(1737658387.955:1322): avc: denied { accept } for pid=13314 comm="syz.0.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.954554][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: kworker/u9:2 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 230.954576][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 230.954587][ T5819] Workqueue: hci1 hci_rx_work [ 230.954614][ T5819] Call Trace: [ 230.954620][ T5819] [ 230.954627][ T5819] dump_stack_lvl+0x16c/0x1f0 [ 230.954649][ T5819] sysfs_warn_dup+0x7f/0xa0 [ 230.954667][ T5819] sysfs_create_dir_ns+0x24d/0x2b0 [ 230.954682][ T5819] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 230.954699][ T5819] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 230.954729][ T5819] ? kobject_add_internal+0x12d/0x990 [ 230.954750][ T5819] ? do_raw_spin_unlock+0x172/0x230 [ 230.954773][ T5819] kobject_add_internal+0x2c8/0x990 [ 230.954797][ T5819] kobject_add+0x16f/0x240 [ 230.954817][ T5819] ? __pfx_kobject_add+0x10/0x10 [ 230.954837][ T5819] ? class_to_subsys+0x3e/0x160 [ 230.954863][ T5819] ? do_raw_spin_unlock+0x172/0x230 [ 230.954887][ T5819] ? kobject_put+0xab/0x5a0 [ 230.954912][ T5819] device_add+0x289/0x1a70 [ 230.954933][ T5819] ? __pfx_dev_set_name+0x10/0x10 [ 230.954956][ T5819] ? __pfx_device_add+0x10/0x10 [ 230.954978][ T5819] ? mgmt_send_event_skb+0x2f2/0x460 [ 230.955004][ T5819] hci_conn_add_sysfs+0x17e/0x230 [ 230.955028][ T5819] le_conn_complete_evt+0x107f/0x1da0 [ 230.955052][ T5819] ? __pfx_lock_release+0x10/0x10 [ 230.955070][ T5819] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 230.955090][ T5819] ? __mutex_lock+0x1cc/0xb10 [ 230.955116][ T5819] hci_le_conn_complete_evt+0x23c/0x370 [ 230.955142][ T5819] hci_le_meta_evt+0x2e2/0x5d0 [ 230.955162][ T5819] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 230.955185][ T5819] hci_event_packet+0x666/0x1180 [ 230.955204][ T5819] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 230.955225][ T5819] ? __pfx_hci_event_packet+0x10/0x10 [ 230.955243][ T5819] ? mark_held_locks+0x9f/0xe0 [ 230.955262][ T5819] ? kcov_remote_start+0x3cf/0x6e0 [ 230.955282][ T5819] ? lockdep_hardirqs_on+0x7c/0x110 [ 230.955305][ T5819] hci_rx_work+0x2c5/0x16b0 [ 230.955327][ T5819] ? process_one_work+0x921/0x1ba0 [ 230.955348][ T5819] process_one_work+0x9c5/0x1ba0 [ 230.955374][ T5819] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 230.955392][ T5819] ? __pfx_process_one_work+0x10/0x10 [ 230.955408][ T5819] ? rcu_is_watching+0x12/0xc0 [ 230.955429][ T5819] ? assign_work+0x1a0/0x250 [ 230.955448][ T5819] worker_thread+0x6c8/0xf00 [ 230.955473][ T5819] ? __kthread_parkme+0x148/0x220 [ 230.955495][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 230.955514][ T5819] kthread+0x3af/0x750 [ 230.955530][ T5819] ? __pfx_kthread+0x10/0x10 [ 230.955544][ T5819] ? lock_acquire+0x2f/0xb0 [ 230.955566][ T5819] ? __pfx_kthread+0x10/0x10 [ 230.955582][ T5819] ret_from_fork+0x45/0x80 [ 230.955597][ T5819] ? __pfx_kthread+0x10/0x10 [ 230.955613][ T5819] ret_from_fork_asm+0x1a/0x30 [ 230.955648][ T5819] [ 230.955667][ T5819] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 231.263605][ T5819] Bluetooth: hci1: failed to register connection device [ 231.580152][ T29] audit: type=1400 audit(1737658388.605:1323): avc: denied { mounton } for pid=13326 comm="syz.1.3183" path="/573/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 231.967339][ T29] audit: type=1400 audit(1737658388.985:1324): avc: denied { load_policy } for pid=13348 comm="syz.1.3191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 231.988679][T13349] SELinux: security policydb version 18 (MLS) not backwards compatible [ 232.018096][T13349] SELinux: failed to load policy [ 232.312872][T13364] loop9: detected capacity change from 0 to 7 [ 232.334267][T13364] Dev loop9: unable to read RDB block 7 [ 232.347791][T13364] loop9: unable to read partition table [ 232.353635][T13364] loop9: partition table beyond EOD, truncated [ 232.369150][T13364] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.477260][ T29] audit: type=1400 audit(1737658389.495:1325): avc: denied { create } for pid=13370 comm="syz.0.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 232.518311][ T117] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 232.566517][ C1] sd 0:0:1:0: [sda] tag#2267 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 232.577061][ C1] sd 0:0:1:0: [sda] tag#2267 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 232.645935][ T29] audit: type=1400 audit(1737658389.665:1326): avc: denied { read } for pid=13372 comm="syz.4.3201" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 232.671445][ T29] audit: type=1400 audit(1737658389.665:1327): avc: denied { open } for pid=13372 comm="syz.4.3201" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 232.695041][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.704443][ T117] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.732754][ T117] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.763688][ T117] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.776514][T13378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.784562][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.802946][T13378] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 232.809453][ T117] usb 2-1: SerialNumber: syz [ 232.847279][T13378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.867979][T13378] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 232.884838][T13378] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 232.913711][T13378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.924663][T13378] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 232.961033][T13378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 233.030884][ T117] usb 2-1: 0:2 : does not exist [ 233.048922][ T117] usb 2-1: USB disconnect, device number 31 [ 233.161062][T13396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3210'. [ 233.310184][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.369072][ T29] audit: type=1400 audit(1737658390.385:1328): avc: denied { accept } for pid=13404 comm="syz.2.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 233.503842][ T29] audit: type=1400 audit(1737658390.525:1329): avc: denied { read } for pid=13411 comm="syz.3.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.868211][ T57] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 234.071147][ T57] usb 4-1: config 0 interface 0 has no altsetting 0 [ 234.082410][ T57] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 234.092023][T13435] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.105377][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.113899][T13435] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.125090][ T57] usb 4-1: config 0 descriptor?? [ 234.131346][T13435] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.150753][T13435] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 234.161581][T13435] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 234.173515][T13435] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 234.183554][T13435] geneve2: entered promiscuous mode [ 234.189185][T13435] geneve2: entered allmulticast mode [ 234.411924][ T29] audit: type=1400 audit(1737658391.435:1330): avc: denied { read } for pid=13444 comm="syz.2.3230" lport=57979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.600006][T13454] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3233'. [ 234.629736][ T29] audit: type=1400 audit(1737658391.645:1331): avc: denied { mount } for pid=13456 comm="syz.1.3235" name="/" dev="ocfs2_dlmfs" ino=38032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 234.653280][T13454] 0ªX¹¦À: renamed from caif0 [ 234.656946][T13457] (syz.1.3235,13457,0):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 234.669838][T13454] 0ªX¹¦À: entered allmulticast mode [ 234.675310][T13454] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 234.777804][ T53] Bluetooth: hci0: command 0x0401 tx timeout [ 234.842869][T13465] tipc: Enabled bearer , priority 10 [ 234.858051][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 234.937824][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 235.017939][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 235.027838][ T117] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 235.178146][ T117] usb 2-1: Using ep0 maxpacket: 32 [ 235.185006][ T117] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 235.193618][ T117] usb 2-1: config 0 has no interface number 0 [ 235.201430][ T117] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 235.210722][ T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.211302][ T57] video4linux radio48: keene_cmd_set failed (-71) [ 235.218914][ T117] usb 2-1: Product: syz [ 235.218933][ T117] usb 2-1: Manufacturer: syz [ 235.218948][ T117] usb 2-1: SerialNumber: syz [ 235.238844][ T117] usb 2-1: config 0 descriptor?? [ 235.246556][ T57] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 235.256217][ T117] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 235.263413][ T57] usb 4-1: USB disconnect, device number 25 [ 235.473681][ T117] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 235.486204][ T117] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 235.900720][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 235.909095][ T5869] usb 2-1: USB disconnect, device number 32 [ 235.921744][ T5869] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 235.966398][ T5869] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 235.981625][ T5869] quatech2 2-1:0.51: device disconnected [ 236.014347][T13504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.426258][T13522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.708329][ T57] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 236.757085][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 236.757100][ T29] audit: type=1400 audit(1737658393.775:1340): avc: denied { accept } for pid=13544 comm="syz.4.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.857823][ T5819] Bluetooth: hci0: command 0x0401 tx timeout [ 236.865679][ T29] audit: type=1400 audit(1737658393.885:1341): avc: denied { create } for pid=13549 comm="syz.2.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 236.898760][T13550] netlink: 'syz.2.3275': attribute type 10 has an invalid length. [ 236.939589][ T57] usb 1-1: Using ep0 maxpacket: 8 [ 236.939848][ T5869] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 236.952427][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 236.956998][T13550] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.982449][ T57] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 236.997436][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.017864][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 237.019511][T13551] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 237.038673][ T29] audit: type=1400 audit(1737658394.045:1342): avc: denied { write } for pid=13549 comm="syz.2.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 237.058835][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.069288][ T57] usb 1-1: Product: syz [ 237.073511][ T57] usb 1-1: Manufacturer: syz [ 237.087493][T13550] bond0: (slave team0): Enslaving as an active interface with an up link [ 237.098002][ T5819] Bluetooth: hci4: command 0x0405 tx timeout [ 237.106526][ T57] usb 1-1: SerialNumber: syz [ 237.144681][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.145156][ T57] usb 1-1: config 0 descriptor?? [ 237.157796][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.180910][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.204161][ T5869] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.223827][ T57] gspca_main: sq930x-2.14.0 probing 2770:930c [ 237.244205][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.292106][ T5869] usb 2-1: config 0 descriptor?? [ 237.746206][ T5869] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 237.765479][ T5869] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 237.791081][ T5869] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 237.900939][T13583] syzkaller1: entered promiscuous mode [ 237.906782][T13583] syzkaller1: entered allmulticast mode [ 238.003842][T13585] input: syz0 as /devices/virtual/input/input37 [ 238.052538][ T5870] usb 2-1: USB disconnect, device number 33 [ 238.268640][ T57] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 238.337252][ T29] audit: type=1800 audit(1737658395.355:1343): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3293" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 238.485651][ T29] audit: type=1400 audit(1737658395.495:1344): avc: denied { ioctl } for pid=13606 comm="syz.2.3295" path="socket:[38961]" dev="sockfs" ino=38961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 238.532850][ T57] gspca_sq930x: Sensor ov9630 not yet treated [ 238.549653][ T57] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 238.579566][ T57] usb 1-1: USB disconnect, device number 23 [ 238.643351][T13611] tipc: Started in network mode [ 238.666362][T13611] tipc: Node identity ac1414aa, cluster identity 4711 [ 238.699536][T13611] tipc: Enabling of bearer rejected, failed to enable media [ 239.016819][ T29] audit: type=1400 audit(1737658396.035:1345): avc: denied { mount } for pid=13628 comm="syz.0.3301" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 239.019277][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 239.188057][ T29] audit: type=1400 audit(1737658396.195:1346): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 239.295690][ T29] audit: type=1400 audit(1737658396.315:1347): avc: denied { wake_alarm } for pid=13645 comm="syz.2.3306" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.717900][ T29] audit: type=1400 audit(1737658396.715:1348): avc: denied { watch } for pid=13667 comm="syz.2.3311" path="/795/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=4079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 239.853745][ T29] audit: type=1400 audit(1737658396.715:1349): avc: denied { watch_sb } for pid=13667 comm="syz.2.3311" path="/795/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=4079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 240.140112][T13682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3315'. [ 240.195283][T13680] random: crng reseeded on system resumption [ 240.218284][ T5819] Bluetooth: hci0: command 0x0401 tx timeout [ 240.224504][ T117] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 240.240729][ T117] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 241.708056][ T5867] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 241.763987][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 241.764000][ T29] audit: type=1400 audit(1737658398.785:1352): avc: denied { ioctl } for pid=13750 comm="syz.3.3332" path="/dev/ttyqb" dev="devtmpfs" ino=386 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 241.858224][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 241.864715][ T5867] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.876016][ T5867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.904126][ T5867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.913708][T13760] input: syz0 as /devices/virtual/input/input38 [ 241.945834][ T5867] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.978029][ T5867] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 241.998391][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.245910][ T5867] usb 5-1: GET_CAPABILITIES returned 0 [ 242.262611][ T5867] usbtmc 5-1:16.0: can't read capabilities [ 242.297907][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 242.304179][ T117] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 242.325407][ T117] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 242.378440][T13654] Set syz1 is full, maxelem 65536 reached [ 242.486690][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.514109][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.523260][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.563896][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.573031][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.582133][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.591242][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.600352][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.609448][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.618600][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.649214][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.658342][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.667459][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.676507][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.685558][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.694608][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.703673][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.719290][ T29] audit: type=1400 audit(1737658399.675:1353): avc: denied { write } for pid=13781 comm="syz.0.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 242.739326][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.769045][ T5867] usb 5-1: USB disconnect, device number 31 [ 243.184651][T13808] input: syz0 as /devices/virtual/input/input39 [ 243.434617][ T29] audit: type=1400 audit(1737658400.455:1354): avc: denied { set_context_mgr } for pid=13823 comm="syz.1.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 243.454619][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.819179][ T29] audit: type=1400 audit(1737658400.845:1355): avc: denied { ioctl } for pid=13850 comm="syz.4.3374" path="socket:[39345]" dev="sockfs" ino=39345 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 244.155607][T13868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3381'. [ 244.377993][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 244.384524][ T117] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 244.395682][ T117] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 244.700585][ T29] audit: type=1400 audit(1737658401.715:1356): avc: denied { write } for pid=13900 comm="syz.4.3397" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 244.723819][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.827558][ T29] audit: type=1400 audit(1737658401.845:1357): avc: denied { watch_sb } for pid=13906 comm="syz.3.3399" path="/667" dev="tmpfs" ino=3416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 244.881131][ T29] audit: type=1400 audit(1737658401.905:1358): avc: denied { create } for pid=13910 comm="syz.0.3402" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 244.943368][ T29] audit: type=1400 audit(1737658401.935:1359): avc: denied { read } for pid=13910 comm="syz.0.3402" name="file0" dev="tmpfs" ino=3615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 244.995764][ T29] audit: type=1400 audit(1737658401.935:1360): avc: denied { open } for pid=13910 comm="syz.0.3402" path="/704/file0" dev="tmpfs" ino=3615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 245.018713][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.150071][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'. [ 245.171705][T13928] netlink: 'syz.3.3407': attribute type 10 has an invalid length. [ 245.182114][T13926] nbd: socks must be embedded in a SOCK_ITEM attr [ 245.475508][ T29] audit: type=1400 audit(1737658402.495:1361): avc: denied { create } for pid=13945 comm="syz.3.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.001842][T13975] syzkaller1: entered promiscuous mode [ 246.007504][T13975] syzkaller1: entered allmulticast mode [ 246.060850][T13978] syz.2.3428[13978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.060937][T13978] syz.2.3428[13978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.073757][T13978] syz.2.3428[13978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.197173][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3432'. [ 246.238081][T13985] team0: entered promiscuous mode [ 246.243216][T13985] team_slave_0: entered promiscuous mode [ 246.249570][T13985] team_slave_1: entered promiscuous mode [ 246.255407][T13985] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 246.269239][T13985] batadv_slave_1: entered promiscuous mode [ 246.420044][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3438'. [ 246.467866][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 246.477784][ T117] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 246.485741][ T117] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 246.728101][ T5870] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 246.819102][ T9] kernel write not supported for file /input/mice (pid: 9 comm: kworker/0:1) [ 246.922587][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.950241][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.985633][ T5870] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 247.003814][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.043430][ T5870] usb 1-1: config 0 descriptor?? [ 247.187877][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 247.349807][ T9] usb 4-1: config 0 has no interfaces? [ 247.364150][ T9] usb 4-1: New USB device found, idVendor=0c86, idProduct=5e04, bcdDevice=7b.23 [ 247.381977][ T9] usb 4-1: New USB device strings: Mfr=157, Product=99, SerialNumber=161 [ 247.403350][ T9] usb 4-1: Product: syz [ 247.409818][ T9] usb 4-1: Manufacturer: syz [ 247.414620][ T9] usb 4-1: SerialNumber: syz [ 247.436417][ T9] usb 4-1: config 0 descriptor?? [ 247.466405][ T5870] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 247.474818][ T5870] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 247.490211][ T5870] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0027/input/input40 [ 247.523129][ T5870] cm6533_jd 0003:0D8C:0022.0027: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 247.652916][ T9] usb 4-1: USB disconnect, device number 26 [ 247.674366][ T5867] usb 1-1: USB disconnect, device number 24 [ 248.083916][ T5870] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 248.094717][ T5870] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.405206][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 248.405222][ T29] audit: type=1400 audit(1737658405.425:1363): avc: denied { create } for pid=14073 comm="syz.0.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 248.467013][ T29] audit: type=1400 audit(1737658405.455:1364): avc: denied { setopt } for pid=14073 comm="syz.0.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 248.504714][ T29] audit: type=1400 audit(1737658405.465:1365): avc: denied { write } for pid=14073 comm="syz.0.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 248.538135][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 248.679173][ T5870] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 248.723162][T14086] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3477'. [ 248.858112][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 248.879937][ T5870] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 248.894154][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.903968][ T5870] usb 5-1: Product: syz [ 248.912230][ T5870] usb 5-1: Manufacturer: syz [ 248.917028][ T5870] usb 5-1: SerialNumber: syz [ 248.925990][ T5870] usb 5-1: config 0 descriptor?? [ 249.144243][ T5870] usb 5-1: USB disconnect, device number 32 [ 249.167943][ T117] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 249.560647][ T117] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 249.569985][ T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.586471][ T117] usb 2-1: Product: syz [ 249.598394][ T117] usb 2-1: Manufacturer: syz [ 249.603176][ T117] usb 2-1: SerialNumber: syz [ 249.629417][ T117] usb 2-1: config 0 descriptor?? [ 249.779397][ T29] audit: type=1400 audit(1737658406.795:1366): avc: denied { read } for pid=14112 comm="syz.4.3491" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 249.802786][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.872773][ T29] audit: type=1400 audit(1737658406.795:1367): avc: denied { open } for pid=14112 comm="syz.4.3491" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 249.937763][ T29] audit: type=1326 audit(1737658406.835:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.4.3491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9becb8cd29 code=0x0 [ 250.002242][ T29] audit: type=1400 audit(1737658407.025:1369): avc: denied { create } for pid=14123 comm="syz.3.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 250.004999][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 250.053189][ T29] audit: type=1400 audit(1737658407.025:1370): avc: denied { write } for pid=14123 comm="syz.3.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 250.077807][ T117] usb 2-1: Firmware: major: 0, minor: 0, hardware type: RZUSB (3) [ 250.095947][ T117] usb 2-1: Firmware version (0.0) predates our first public release. [ 250.114479][ T117] usb 2-1: Please update to version 0.2 or newer [ 250.314679][ T117] usb 2-1: USB disconnect, device number 34 [ 250.528816][ T29] audit: type=1400 audit(1737658407.555:1371): avc: denied { listen } for pid=14141 comm="syz.3.3502" lport=36940 faddr=fe80::bb fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 250.552397][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.884634][ T29] audit: type=1400 audit(1737658407.905:1372): avc: denied { create } for pid=14159 comm="syz.4.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 250.892791][T14160] syzkaller1: entered promiscuous mode [ 250.928059][T14160] syzkaller1: entered allmulticast mode [ 251.527939][ T5869] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 251.698987][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.717975][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.738003][ T5869] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 251.747161][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.755469][T14192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3525'. [ 251.778632][ T5869] usb 5-1: config 0 descriptor?? [ 251.827841][ T117] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 251.992259][ T117] usb 4-1: Using ep0 maxpacket: 16 [ 251.999302][ T117] usb 4-1: config 0 has no interfaces? [ 252.004834][ T117] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 252.024331][ T117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.046362][ T117] usb 4-1: config 0 descriptor?? [ 252.200225][ T5869] cp2112 0003:10C4:EA90.0029: item fetching failed at offset 5/7 [ 252.208556][ T5869] cp2112 0003:10C4:EA90.0029: parse failed [ 252.214447][ T5869] cp2112 0003:10C4:EA90.0029: probe with driver cp2112 failed with error -22 [ 252.415831][ T5869] usb 5-1: USB disconnect, device number 33 [ 252.442781][T14217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.456166][T14217] batadv_slave_1: entered promiscuous mode [ 252.507172][T14188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.525425][T14188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.549748][ T117] usb 4-1: USB disconnect, device number 27 [ 252.884707][T14242] 9pnet_fd: Insufficient options for proto=fd [ 252.891256][ T57] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 253.048268][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 253.069122][ T57] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.100778][ T57] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 253.136355][ T57] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 253.168062][ T57] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.202737][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.221246][ T57] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 253.247795][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.255827][ T57] usb 1-1: Product: syz [ 253.264454][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3558'. [ 253.294811][ T57] usb 1-1: Manufacturer: syz [ 253.299806][ T57] usb 1-1: SerialNumber: syz [ 253.323066][ T57] usb 1-1: config 0 descriptor?? [ 253.444962][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 253.444977][ T29] audit: type=1400 audit(1737658410.465:1379): avc: denied { ioctl } for pid=14277 comm="syz.3.3563" path="socket:[40744]" dev="sockfs" ino=40744 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 253.532441][ T29] audit: type=1400 audit(1737658410.555:1380): avc: denied { create } for pid=14280 comm="syz.3.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 253.559686][T14280] delete_channel: no stack [ 253.611571][ T29] audit: type=1400 audit(1737658410.585:1381): avc: denied { bind } for pid=14280 comm="syz.3.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 253.661711][ T29] audit: type=1400 audit(1737658410.635:1382): avc: denied { read } for pid=14282 comm="syz.2.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.710184][ T29] audit: type=1400 audit(1737658410.635:1383): avc: denied { getopt } for pid=14284 comm="syz.4.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.767576][ T57] usb 1-1: USB disconnect, device number 25 [ 253.914290][ T29] audit: type=1400 audit(1737658410.935:1384): avc: denied { append } for pid=14296 comm="syz.3.3572" name="media2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.339826][T14320] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3582'. [ 254.347521][T14324] netlink: 2980 bytes leftover after parsing attributes in process `syz.4.3583'. [ 254.605427][ T29] audit: type=1400 audit(1737658411.625:1385): avc: denied { setopt } for pid=14338 comm="syz.4.3591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.720924][ T29] audit: type=1400 audit(1737658411.745:1386): avc: denied { bind } for pid=14348 comm="syz.3.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.805318][T14349] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.878220][ T5869] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 254.922481][T14349] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.937869][ T117] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 255.005440][T14349] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.027870][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 255.036544][ T5869] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 255.045939][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.054742][ T5869] usb 2-1: Product: syz [ 255.059919][ T5869] usb 2-1: Manufacturer: syz [ 255.064582][ T5869] usb 2-1: SerialNumber: syz [ 255.090044][ T5869] usb 2-1: config 0 descriptor?? [ 255.097788][ T117] usb 5-1: Using ep0 maxpacket: 16 [ 255.113722][ T117] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 255.119947][T14349] team0: Port device netdevsim0 removed [ 255.123885][ T5869] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 255.134159][T14349] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.137536][ T117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.158413][ T117] usb 5-1: config 0 descriptor?? [ 255.166558][ T117] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 255.217625][ T29] audit: type=1400 audit(1737658412.235:1387): avc: denied { append } for pid=14358 comm="syz.0.3600" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 255.338426][T14349] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.357236][T14349] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.372887][T14349] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.387600][T14349] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.499669][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.505976][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.508129][ T5869] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 255.536438][ T5869] usb 2-1: USB disconnect, device number 35 [ 255.688121][ T5870] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 255.849706][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.863527][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.874160][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 255.884259][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.895621][ T5870] usb 4-1: config 0 descriptor?? [ 256.124105][T14379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3609'. [ 256.176518][ T117] gspca_sonixj: reg_w1 err -71 [ 256.197889][ T117] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 256.221187][ T117] usb 5-1: USB disconnect, device number 34 [ 256.275304][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3609'. [ 256.326885][ T5870] logitech 0003:046D:C294.002A: unbalanced collection at end of report description [ 256.352855][ T5870] logitech 0003:046D:C294.002A: parse failed [ 256.362515][ T5870] logitech 0003:046D:C294.002A: probe with driver logitech failed with error -22 [ 256.523391][ T5870] usb 4-1: USB disconnect, device number 28 [ 256.618049][ T5867] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 256.769866][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.781712][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.791722][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.805141][ T5867] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.814282][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.825084][ T5867] usb 1-1: config 0 descriptor?? [ 257.072658][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x4 [ 257.081776][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x2 [ 257.089829][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.097600][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.105520][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.113389][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.121408][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.129241][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.136933][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.144800][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.152534][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.162088][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.169769][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.177409][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.185404][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.193220][ T117] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 257.202437][ T117] hid-generic 0000:3000000:0000.002B: hidraw0: HID v0.00 Device [sy] on syz0 [ 257.249639][ T5867] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 257.258033][ T57] page_pool_release_retry() stalled pool shutdown: id 40, 1 inflight 60 sec [ 257.265356][ T5867] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 257.528496][ T29] audit: type=1400 audit(1737658414.555:1388): avc: denied { listen } for pid=14422 comm="syz.1.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 257.540698][T14425] netlink: 'syz.2.3630': attribute type 3 has an invalid length. [ 257.560772][ T57] usb 1-1: USB disconnect, device number 26 [ 257.578018][T14425] netlink: 'syz.2.3630': attribute type 4 has an invalid length. [ 257.585764][T14425] netlink: 'syz.2.3630': attribute type 7 has an invalid length. [ 257.605468][T14425] netlink: 'syz.2.3630': attribute type 8 has an invalid length. [ 257.616003][T14425] netlink: 'syz.2.3630': attribute type 7 has an invalid length. [ 257.631370][T14425] netlink: 206628 bytes leftover after parsing attributes in process `syz.2.3630'. [ 257.800945][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.814012][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.823077][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.842525][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.857983][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.875690][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.888890][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.904366][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.915059][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.923141][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.930874][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.938593][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.946346][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.954016][ T5867] hid-generic 0000:0003:0000.002D: unknown main item tag 0x0 [ 257.972162][ T5867] hid-generic 0000:0003:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 258.113329][T14452] vcan0: tx drop: invalid sa for name 0x0400000000000000 [ 258.390821][T14466] binder: 14465:14466 unknown command 0 [ 258.397505][T14471] bond0: option arp_interval: invalid value (18446744073709551615) [ 258.405803][T14466] binder: 14465:14466 ioctl c0306201 20000480 returned -22 [ 258.414015][T14471] bond0: option arp_interval: allowed values 0 - 2147483647 [ 258.586490][T14483] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3653'. [ 259.006330][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3663'. [ 259.079511][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 259.079525][ T29] audit: type=1400 audit(1737658416.105:1391): avc: denied { map } for pid=14507 comm="syz.3.3666" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 259.218385][ T57] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 259.268096][ T5870] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 259.309661][T14520] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 259.378654][ T57] usb 2-1: Using ep0 maxpacket: 8 [ 259.392880][ T57] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 259.402478][ T57] usb 2-1: config 179 has no interface number 0 [ 259.409880][ T57] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 259.468722][ T970] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 259.477628][ T5870] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 259.503925][ T57] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 259.517208][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.528833][ T970] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.538868][ T57] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 259.550479][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.560390][ T57] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 259.571014][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 259.584103][ T57] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 259.599084][ T57] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 259.609029][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.617524][ T5870] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 259.626836][ T5870] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 259.635901][ T5870] usb 5-1: Manufacturer: syz [ 259.642748][T14502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.652025][ T57] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 259.661921][ T5870] usb 5-1: config 0 descriptor?? [ 259.708498][ T5867] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 259.781292][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3677'. [ 364.907593][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 364.914565][ C1] rcu: 0-...!: (0 ticks this GP) idle=f3ac/1/0x4000000000000000 softirq=56062/56062 fqs=0 [ 364.925887][ C1] rcu: (detected by 1, t=10506 jiffies, g=45017, q=253 ncpus=2) [ 364.933609][ C1] Sending NMI from CPU 1 to CPUs 0: [ 364.933635][ C0] NMI backtrace for cpu 0 [ 364.933644][ C0] CPU: 0 UID: 0 PID: 14539 Comm: syz.3.3679 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 364.933658][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 364.933666][ C0] RIP: 0010:timerqueue_del+0x67/0x150 [ 364.933688][ C0] Code: 06 69 f6 49 39 dc 0f 84 af 00 00 00 e8 c2 0b 69 f6 4c 8d 65 08 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 00 <0f> 85 a3 00 00 00 48 39 5d 08 74 58 e8 98 0b 69 f6 48 89 ee 48 89 [ 364.933700][ C0] RSP: 0018:ffffc90000007dd0 EFLAGS: 00000046 [ 364.933711][ C0] RAX: dffffc0000000000 RBX: ffff888034be7340 RCX: ffffffff8b30ee50 [ 364.933719][ C0] RDX: 1ffff110170c591b RSI: ffffffff8b30ee5e RDI: 0000000000000006 [ 364.933727][ C0] RBP: ffff8880b862c8d0 R08: 0000000000000006 R09: 0000000000000001 [ 364.933734][ C0] R10: ffff888034be7340 R11: 0000000000000005 R12: ffff8880b862c8d8 [ 364.933742][ C0] R13: 0000000000000000 R14: ffff8880b862c680 R15: 0000000000000000 [ 364.933750][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 364.933763][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.933771][ C0] CR2: 0000000020000240 CR3: 000000000df80000 CR4: 00000000003526f0 [ 364.933779][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 364.933786][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 364.933793][ C0] Call Trace: [ 364.933799][ C0] [ 364.933805][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 364.933824][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 364.933838][ C0] ? nmi_handle+0x1ac/0x5d0 [ 364.933853][ C0] ? timerqueue_del+0x67/0x150 [ 364.933869][ C0] ? default_do_nmi+0x6a/0x160 [ 364.933886][ C0] ? exc_nmi+0x170/0x1e0 [ 364.933902][ C0] ? end_repeat_nmi+0xf/0x53 [ 364.933921][ C0] ? timerqueue_del+0x40/0x150 [ 364.933936][ C0] ? timerqueue_del+0x4e/0x150 [ 364.933951][ C0] ? timerqueue_del+0x67/0x150 [ 364.933967][ C0] ? timerqueue_del+0x67/0x150 [ 364.933983][ C0] ? timerqueue_del+0x67/0x150 [ 364.933999][ C0] [ 364.934002][ C0] [ 364.934007][ C0] __remove_hrtimer+0x99/0x290 [ 364.934025][ C0] ? __pfx_advance_sched+0x10/0x10 [ 364.934043][ C0] __hrtimer_run_queues+0x50b/0xae0 [ 364.934063][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 364.934079][ C0] ? read_tsc+0x9/0x20 [ 364.934098][ C0] hrtimer_interrupt+0x392/0x8e0 [ 364.934119][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 364.934135][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 364.934148][ C0] [ 364.934152][ C0] [ 364.934156][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.934172][ C0] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 364.934189][ C0] Code: b8 ff ff ff ff 65 0f c1 05 00 98 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 364.934200][ C0] RSP: 0018:ffffc90004f274f0 EFLAGS: 00000206 [ 364.934209][ C0] RAX: 0000000000000046 RBX: 1ffff920009e4e9f RCX: 00000000c6e55b1b [ 364.934217][ C0] RDX: 0000000000000001 RSI: ffffffff8b6cdcc0 RDI: ffffffff8bd2c780 [ 364.934225][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd5b98 [ 364.934232][ C0] R10: ffffffff96eadcc7 R11: 0000000000000003 R12: 0000000000000000 [ 364.934239][ C0] R13: ffffffff8e1be380 R14: 0000000000000000 R15: 0000000000000000 [ 364.934252][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 364.934266][ C0] ? rcu_is_watching+0x12/0xc0 [ 364.934277][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 364.934289][ C0] ? __page_table_check_pte_clear+0x1ba/0x580 [ 364.934307][ C0] ? lock_acquire+0x2f/0xb0 [ 364.934321][ C0] ? __page_table_check_pte_clear+0x1ba/0x580 [ 364.934338][ C0] __page_table_check_pte_clear+0x1c0/0x580 [ 364.934360][ C0] ? __page_table_check_pte_clear+0x1ba/0x580 [ 364.934377][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 364.934394][ C0] ? const_folio_flags+0x5b/0x100 [ 364.934409][ C0] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 364.934428][ C0] unmap_page_range+0x22f6/0x3d60 [ 364.934449][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 364.934462][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 364.934477][ C0] ? uprobe_munmap+0x20/0x5c0 [ 364.934494][ C0] unmap_single_vma+0x194/0x2b0 [ 364.934509][ C0] unmap_vmas+0x22f/0x490 [ 364.934523][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 364.934538][ C0] ? __pfx_lock_release+0x10/0x10 [ 364.934552][ C0] ? lock_acquire+0x2f/0xb0 [ 364.934566][ C0] ? mlock_drain_local+0x6f/0x4f0 [ 364.934585][ C0] exit_mmap+0x1c6/0xba0 [ 364.934600][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 364.934616][ C0] ? __pfx_mark_lock+0x10/0x10 [ 364.934636][ C0] __mmput+0x12a/0x4c0 [ 364.934652][ C0] mmput+0x62/0x70 [ 364.934666][ C0] do_exit+0x9ba/0x2d70 [ 364.934678][ C0] ? get_signal+0x8f7/0x26c0 [ 364.934693][ C0] ? __pfx_do_exit+0x10/0x10 [ 364.934704][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 364.934720][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 364.934737][ C0] do_group_exit+0xd3/0x2a0 [ 364.934749][ C0] get_signal+0x24ed/0x26c0 [ 364.934767][ C0] ? __pfx_get_signal+0x10/0x10 [ 364.934783][ C0] ? __pfx_do_futex+0x10/0x10 [ 364.934795][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 364.934814][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 364.934832][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 364.934852][ C0] ? __sys_getsockopt+0x15d/0x260 [ 364.934868][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 364.934882][ C0] do_syscall_64+0xda/0x250 [ 364.934896][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.934911][ C0] RIP: 0033:0x7f1eaf78cd29 [ 364.934920][ C0] Code: Unable to access opcode bytes at 0x7f1eaf78ccff. [ 364.934926][ C0] RSP: 002b:00007f1eb05620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 364.934936][ C0] RAX: fffffffffffffe00 RBX: 00007f1eaf9a5fa8 RCX: 00007f1eaf78cd29 [ 364.934944][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1eaf9a5fa8 [ 364.934951][ C0] RBP: 00007f1eaf9a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 364.934958][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1eaf9a5fac [ 364.934966][ C0] R13: 0000000000000000 R14: 00007ffc896b2f60 R15: 00007ffc896b3048 [ 364.934977][ C0] [ 364.935629][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g45017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 365.556938][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=22011 [ 365.564821][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g45017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 365.576180][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 365.586139][ C1] rcu: RCU grace-period kthread stack dump: [ 365.592019][ C1] task:rcu_preempt state:I stack:27392 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 365.602209][ C1] Call Trace: [ 365.605485][ C1] [ 365.608414][ C1] __schedule+0x1142/0x5b60 [ 365.612916][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 365.618129][ C1] ? __pfx___schedule+0x10/0x10 [ 365.622976][ C1] ? schedule+0x298/0x350 [ 365.627302][ C1] ? __pfx_lock_release+0x10/0x10 [ 365.632333][ C1] ? lock_acquire+0x2f/0xb0 [ 365.636834][ C1] ? schedule+0x1fd/0x350 [ 365.641165][ C1] schedule+0xe7/0x350 [ 365.645233][ C1] schedule_timeout+0x124/0x280 [ 365.650087][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 365.655470][ C1] ? __pfx_process_timeout+0x10/0x10 [ 365.660767][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 365.666576][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 365.672083][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 365.676859][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 365.682144][ C1] ? rcu_gp_init+0xc82/0x1630 [ 365.686830][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 365.692078][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 365.697889][ C1] rcu_gp_kthread+0x271/0x380 [ 365.702566][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 365.707765][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 365.712963][ C1] ? __kthread_parkme+0x148/0x220 [ 365.717991][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 365.723193][ C1] kthread+0x3af/0x750 [ 365.727261][ C1] ? __pfx_kthread+0x10/0x10 [ 365.731853][ C1] ? __pfx_kthread+0x10/0x10 [ 365.736443][ C1] ret_from_fork+0x45/0x80 [ 365.740857][ C1] ? __pfx_kthread+0x10/0x10 [ 365.745445][ C1] ret_from_fork_asm+0x1a/0x30 [ 365.750225][ C1]