last executing test programs: 10.48911441s ago: executing program 4 (id=4434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 10.237001421s ago: executing program 4 (id=4439): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_getnetconf={0x1c, 0x52, 0x921, 0x0, 0x0, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}}, 0x0) 10.097973511s ago: executing program 4 (id=4442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r1, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 9.838671912s ago: executing program 4 (id=4445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r1, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) 9.677147217s ago: executing program 4 (id=4449): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x5) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}], 0x1, 0x0) 9.44960073s ago: executing program 4 (id=4452): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) 4.703130151s ago: executing program 1 (id=4479): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 4.480109525s ago: executing program 0 (id=4480): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x619) 4.12977659s ago: executing program 0 (id=4483): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = dup(r0) write$snapshot(r1, &(0x7f0000002a40)="9e", 0x1) 3.686899919s ago: executing program 1 (id=4486): r0 = fanotify_init(0x40, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) 3.416557583s ago: executing program 0 (id=4488): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 3.240393096s ago: executing program 1 (id=4490): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.75690228s ago: executing program 0 (id=4491): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000500)={0x20, 0xe, 0xd, "da4500d84fb941f26094b17374"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.624548726s ago: executing program 1 (id=4494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454d1, 0x0) 2.302739973s ago: executing program 3 (id=4497): r0 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 2.146100554s ago: executing program 2 (id=4498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000020601ff00000000000000000000000005000100070000000900020073797a300000000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x42844}, 0x4000000) 2.012993858s ago: executing program 1 (id=4499): timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000340)) 1.988491067s ago: executing program 3 (id=4500): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4490}, 0x4000000) 1.789488341s ago: executing program 2 (id=4501): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x78) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_fd={0x1000005, 0x2, 0x4, 0x100000, 0x7, {0x0, 0x2710}, {0x1, 0x8, 0x4, 0x5, 0x8, 0xc, "e0781bc9"}, 0x4, 0x4, {0x0}, 0xff}) 1.465673369s ago: executing program 1 (id=4502): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000001480)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x0, "1a42"}, @local=@item_4={0x3, 0x2, 0xa, "a8d0a4d5"}, @global=@item_012={0x2, 0x1, 0x6, '\x00\x00'}]}}, 0x0}, 0x0) 1.463608754s ago: executing program 3 (id=4503): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) 1.112671136s ago: executing program 2 (id=4504): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) 1.033815911s ago: executing program 3 (id=4505): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001940)={@cgroup=r0, 0x2f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 787.8737ms ago: executing program 2 (id=4506): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) write(r0, &(0x7f0000000300)="240000001a005f0214f9f4070d0903001f000000fe050000000200000800040001000000", 0x24) 775.32055ms ago: executing program 3 (id=4507): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r1 = dup2(r0, r0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "adbdeec74e8e4aea6adda300"}) 481.358916ms ago: executing program 0 (id=4508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 480.974333ms ago: executing program 2 (id=4509): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000000040)=""/112) 414.664931ms ago: executing program 3 (id=4510): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) setpgid(r0, 0x0) 85.475632ms ago: executing program 2 (id=4511): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000012002102000000000000000007000000f942806ad9"], 0x24}}, 0x0) 0s ago: executing program 0 (id=4512): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000080) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x21) kernel console output (not intermixed with test programs): cd, idProduct=0080, bcdDevice=67.fe [ 327.095394][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.103590][ T46] usb 4-1: Product: syz [ 327.107812][ T46] usb 4-1: Manufacturer: syz [ 327.112574][ T46] usb 4-1: SerialNumber: syz [ 327.126788][ T46] usb 4-1: config 0 descriptor?? [ 327.370573][ T46] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 327.379518][ T46] 21 e0 ba fd a7 d3 b2 06 [ 327.384131][ T46] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 327.642202][ T46] usb 4-1: USB disconnect, device number 94 [ 327.926561][T11776] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 327.956572][T11776] syz.4.3067: attempt to access beyond end of device [ 327.956572][T11776] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 328.610863][T11804] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3080'. [ 328.823039][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3086'. [ 328.857677][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3086'. [ 329.031044][T11823] tc_dump_action: action bad kind [ 329.632056][T11850] netlink: 'syz.3.3103': attribute type 1 has an invalid length. [ 329.656205][T11852] tmpfs: Bad value for 'nr_inodes' [ 329.703088][T11850] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3103'. [ 330.565496][T11896] No such timeout policy "syz0" [ 330.696395][ T46] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 330.773641][T11904] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 330.886302][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 330.915439][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.938160][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 330.972257][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 331.023026][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 331.045536][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.059769][T11914] xt_l2tp: v2 doesn't support IP mode [ 331.098610][ T46] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 331.116086][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.146888][ T46] usb 3-1: Product: syz [ 331.151117][ T46] usb 3-1: Manufacturer: syz [ 331.176687][ T46] usb 3-1: SerialNumber: syz [ 331.211571][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 331.211592][ T29] audit: type=1400 audit(1727502097.688:1268): avc: denied { create } for pid=11919 comm="syz.1.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 331.217454][ T46] usb 3-1: config 0 descriptor?? [ 331.258147][ T29] audit: type=1400 audit(1727502097.728:1269): avc: denied { setopt } for pid=11919 comm="syz.1.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 331.373636][ T29] audit: type=1400 audit(1727502097.848:1270): avc: denied { read } for pid=11925 comm="syz.0.3139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.469787][T11930] netlink: 'syz.4.3141': attribute type 32 has an invalid length. [ 331.481056][T11932] ip6t_rpfilter: unknown options [ 331.506206][ T46] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 331.521799][ T46] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 332.099232][ T29] audit: type=1400 audit(1727502098.579:1271): avc: denied { setopt } for pid=11956 comm="syz.0.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 332.285681][ T46] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 332.447282][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.482625][ T46] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 332.522590][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.553864][ T46] usb 5-1: config 0 descriptor?? [ 332.574509][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 332.891372][T11977] netlink: 'syz.1.3164': attribute type 2 has an invalid length. [ 332.907014][T11977] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3164'. [ 332.991795][ T46] pwc: recv_control_msg error -71 req 02 val 2b00 [ 333.009672][ T46] pwc: recv_control_msg error -71 req 02 val 2700 [ 333.024105][ T46] pwc: recv_control_msg error -71 req 02 val 2c00 [ 333.040947][ T46] pwc: recv_control_msg error -71 req 04 val 1000 [ 333.049595][ T29] audit: type=1400 audit(1727502099.519:1272): avc: denied { ioctl } for pid=11981 comm="syz.1.3167" path="socket:[27504]" dev="sockfs" ino=27504 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.077560][ T46] pwc: recv_control_msg error -71 req 04 val 1300 [ 333.091954][ T46] pwc: recv_control_msg error -71 req 04 val 1400 [ 333.112377][ T46] pwc: recv_control_msg error -71 req 02 val 2000 [ 333.132869][ T46] pwc: recv_control_msg error -71 req 02 val 2100 [ 333.145885][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 333.152984][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 333.160271][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 333.168420][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 333.235677][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 333.244404][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 333.251663][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 333.259844][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 333.268045][ T46] pwc: Registered as video71. [ 333.276377][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 333.315137][ T46] usb 5-1: USB disconnect, device number 94 [ 333.320906][ T9] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 333.476228][ T941] usb 3-1: USB disconnect, device number 92 [ 333.495544][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 333.518139][ T9] usb 4-1: config 0 has an invalid interface number: 26 but max is 0 [ 333.545486][ T9] usb 4-1: config 0 has no interface number 0 [ 333.572186][ T9] usb 4-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=a7.1c [ 333.604399][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.635351][ T9] usb 4-1: Product: syz [ 333.640542][ T9] usb 4-1: Manufacturer: syz [ 333.662317][ T9] usb 4-1: SerialNumber: syz [ 333.695587][ T9] usb 4-1: config 0 descriptor?? [ 333.718025][ T9] gspca_main: spca508-2.14.0 probing 0130:0130 [ 333.752627][ T29] audit: type=1400 audit(1727502100.229:1273): avc: denied { mount } for pid=11999 comm="syz.0.3174" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 333.904028][ T29] audit: type=1400 audit(1727502100.380:1274): avc: denied { unmount } for pid=5221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 334.111699][T12007] xt_CT: No such helper "snmp" [ 334.133273][ T9] gspca_spca508: reg_read err -71 [ 334.140340][ T9] gspca_spca508: reg_read err -71 [ 334.147435][ T9] gspca_spca508: reg_read err -71 [ 334.157678][ T9] gspca_spca508: reg_read err -71 [ 334.167801][ T9] gspca_spca508: reg write: error -71 [ 334.177694][ T9] spca508 4-1:0.26: probe with driver spca508 failed with error -71 [ 334.214443][ T9] usb 4-1: USB disconnect, device number 95 [ 334.247263][T12016] QAT: Stopping all acceleration devices. [ 334.376707][T12022] tmpfs: Bad value for 'mpol' [ 334.468927][ T941] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 334.671321][ T941] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 334.674050][ T29] audit: type=1400 audit(1727502101.140:1275): avc: denied { create } for pid=12037 comm="syz.2.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 334.684120][ T941] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 334.764003][ T941] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 334.764079][ T29] audit: type=1400 audit(1727502101.140:1276): avc: denied { getopt } for pid=12037 comm="syz.2.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 334.809835][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.873000][ T29] audit: type=1400 audit(1727502101.340:1277): avc: denied { write } for pid=12041 comm="syz.2.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.001946][T12048] netlink: 'syz.0.3198': attribute type 3 has an invalid length. [ 335.051235][ T941] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 335.087084][ T941] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input41 [ 335.144369][ T941] input: failed to attach handler kbd to device input41, error: -5 [ 335.184784][ T941] usb 2-1: USB disconnect, device number 54 [ 335.915649][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 336.573471][T12121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.674905][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 336.674927][ T29] audit: type=1400 audit(1727502103.161:1286): avc: denied { ioctl } for pid=12124 comm="syz.1.3235" path="socket:[28764]" dev="sockfs" ino=28764 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 336.789870][ T29] audit: type=1400 audit(1727502103.271:1287): avc: denied { sys_module } for pid=12124 comm="syz.1.3235" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 337.063635][ T29] audit: type=1400 audit(1727502103.551:1288): avc: denied { bind } for pid=12140 comm="syz.3.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 337.285467][T12151] netlink: 'syz.2.3247': attribute type 1 has an invalid length. [ 337.581805][ T29] audit: type=1400 audit(1727502104.061:1289): avc: denied { append } for pid=12165 comm="syz.1.3254" name="001" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 337.669275][T12172] x_tables: ip_tables: osf match: only valid for protocol 6 [ 337.732654][ T5270] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 337.774934][T12178] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 337.909166][ T29] audit: type=1400 audit(1727502104.391:1290): avc: denied { getopt } for pid=12183 comm="syz.4.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 337.947738][ T29] audit: type=1400 audit(1727502104.431:1291): avc: denied { read } for pid=12185 comm="syz.2.3264" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 337.963897][T12186] binder: 12185:12186 ioctl c018620b 0 returned -14 [ 337.987947][ T29] audit: type=1400 audit(1727502104.431:1292): avc: denied { open } for pid=12185 comm="syz.2.3264" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 337.994121][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.024272][ T29] audit: type=1400 audit(1727502104.452:1293): avc: denied { ioctl } for pid=12185 comm="syz.2.3264" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 338.032970][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.081425][ T5270] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 338.102029][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.128990][ T5270] usb 4-1: config 0 descriptor?? [ 338.564817][ T5270] appletouch 4-1:0.0: Failed to request geyser raw mode [ 338.585157][ T5270] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 338.610558][ T5270] usb 4-1: USB disconnect, device number 96 [ 338.629535][T12206] netlink: 'syz.4.3274': attribute type 6 has an invalid length. [ 338.829543][T12215] IPVS: length: 52 != 24 [ 338.877248][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3280'. [ 339.019954][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'. [ 339.250752][ T29] audit: type=1400 audit(1727502105.732:1294): avc: denied { ioctl } for pid=12235 comm="syz.4.3289" path="socket:[28926]" dev="sockfs" ino=28926 ioctlcmd=0x8930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 339.417600][ T29] audit: type=1400 audit(1727502105.872:1295): avc: denied { connect } for pid=12241 comm="syz.0.3292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 339.464885][T12245] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3293'. [ 339.474787][T12245] openvswitch: netlink: Flow key attribute not present in set flow. [ 339.487418][T12248] openvswitch: netlink: Flow actions attr not present in new flow. [ 340.489382][T12301] netlink: 'syz.4.3321': attribute type 2 has an invalid length. [ 340.505121][T12301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3321'. [ 341.155974][T12340] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3339'. [ 341.671170][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 341.865119][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 341.882160][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 341.892695][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 341.903054][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 341.915332][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 341.924956][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.941981][ T9] usb 4-1: config 0 descriptor?? [ 342.025443][T12374] syz.2.3354: attempt to access beyond end of device [ 342.025443][T12374] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 342.039651][T12375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.182964][ T9] hdpvr 4-1:0.0: firmware version 0x1e dated q|RC@22[7BD^jvi0 [ 342.182964][ T9] pY [ 342.391577][ T9] hdpvr 4-1:0.0: device init failed [ 342.397431][ T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 342.431538][ T9] usb 4-1: USB disconnect, device number 97 [ 342.437625][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 342.437648][ T29] audit: type=1400 audit(1727502108.913:1307): avc: denied { read } for pid=12390 comm="syz.2.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 342.443116][T12389] netlink: 'syz.4.3361': attribute type 2 has an invalid length. [ 342.473554][T12389] netlink: 'syz.4.3361': attribute type 11 has an invalid length. [ 342.481539][T12389] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3361'. [ 343.524195][ T5271] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 343.616762][ T29] audit: type=1400 audit(1727502110.103:1308): avc: denied { write } for pid=12446 comm="syz.2.3391" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.686661][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3393'. [ 343.722105][ T5271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.754851][ T5271] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 343.771109][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.793533][ T5271] usb 5-1: config 0 descriptor?? [ 344.035694][ T5270] usb 5-1: USB disconnect, device number 95 [ 344.190383][ T46] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 344.266604][ T29] audit: type=1400 audit(1727502110.754:1309): avc: denied { view } for pid=12476 comm="syz.0.3406" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 344.370402][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 344.379697][ T46] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 344.391271][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.399324][ T46] usb 4-1: Product: syz [ 344.409201][ T46] usb 4-1: Manufacturer: syz [ 344.415477][ T46] usb 4-1: SerialNumber: syz [ 344.431205][ T46] usb 4-1: config 0 descriptor?? [ 344.486880][ T29] audit: type=1400 audit(1727502110.964:1310): avc: denied { read write } for pid=12484 comm="syz.0.3410" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 344.510962][ T29] audit: type=1400 audit(1727502110.964:1311): avc: denied { open } for pid=12484 comm="syz.0.3410" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 344.534966][ T29] audit: type=1400 audit(1727502111.004:1312): avc: denied { append } for pid=12486 comm="syz.2.3411" name="video7" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 344.620441][T12489] dvmrp0: entered allmulticast mode [ 344.668265][ T46] usb 4-1: ignoring: not an USB2CAN converter [ 344.783997][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3416'. [ 344.914404][ T5302] usb 4-1: USB disconnect, device number 98 [ 345.029808][ T29] audit: type=1400 audit(1727502111.514:1313): avc: denied { map } for pid=12508 comm="syz.4.3422" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 345.075316][ T29] audit: type=1400 audit(1727502111.514:1314): avc: denied { read write } for pid=12508 comm="syz.4.3422" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 345.166804][T12515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3424'. [ 345.227889][ T29] audit: type=1400 audit(1727502111.714:1315): avc: denied { setopt } for pid=12516 comm="syz.2.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.540206][T12531] netlink: 'syz.2.3433': attribute type 1 has an invalid length. [ 345.549982][ T29] audit: type=1400 audit(1727502112.034:1316): avc: denied { ioctl } for pid=12532 comm="syz.3.3434" path="socket:[30032]" dev="sockfs" ino=30032 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 345.755383][T12541] syz.2.3437: attempt to access beyond end of device [ 345.755383][T12541] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 345.758144][T12545] : renamed from vlan0 (while UP) [ 345.844528][T12550] syz.0.3438: attempt to access beyond end of device [ 345.844528][T12550] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 345.869194][T12550] XFS (nbd0): SB validate failed with error -5. [ 345.905784][T12559] netlink: 'syz.3.3442': attribute type 11 has an invalid length. [ 346.113503][T12567] openvswitch: netlink: Actions may not be safe on all matching packets [ 346.272965][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 346.292905][ T941] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 346.403682][T12582] bond0: (slave caif0): Error: Device type is different from other slaves [ 346.450099][ T941] usb 3-1: Using ep0 maxpacket: 32 [ 346.463360][ T941] usb 3-1: config 0 has an invalid interface number: 141 but max is 0 [ 346.473436][ T941] usb 3-1: config 0 has no interface number 0 [ 346.482786][ T941] usb 3-1: config 0 interface 141 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 346.496851][ T941] usb 3-1: config 0 interface 141 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 346.510571][ T941] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 346.523465][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.539829][ T941] usb 3-1: Product: syz [ 346.544137][ T941] usb 3-1: Manufacturer: syz [ 346.554263][ T941] usb 3-1: SerialNumber: syz [ 346.569151][ T941] usb 3-1: config 0 descriptor?? [ 346.837540][ T941] usb 3-1: USB disconnect, device number 93 [ 347.310179][T12624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3473'. [ 347.402389][T12628] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 347.845182][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 347.845206][ T29] audit: type=1400 audit(1727502114.315:1325): avc: denied { read write } for pid=12645 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 347.988531][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.007015][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.017263][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.031006][ T29] audit: type=1400 audit(1727502114.335:1326): avc: denied { open } for pid=12645 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 348.056413][ T29] audit: type=1400 audit(1727502114.475:1327): avc: denied { getopt } for pid=12650 comm="syz.3.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.078568][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.130720][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 348.142988][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.154356][T12655] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3487'. [ 348.369354][ T29] audit: type=1400 audit(1727502114.795:1328): avc: denied { mounton } for pid=12645 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 348.523590][ T29] audit: type=1400 audit(1727502115.015:1329): avc: denied { write } for pid=12674 comm="syz.3.3497" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 348.655438][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'. [ 348.699341][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'. [ 348.728371][T12645] chnl_net:caif_netlink_parms(): no params data found [ 348.857837][ T29] audit: type=1400 audit(1727502115.345:1330): avc: denied { getopt } for pid=12691 comm="syz.2.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.985583][ T29] audit: type=1400 audit(1727502115.475:1331): avc: denied { read } for pid=12702 comm="syz.2.3507" name="event0" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 349.069501][T12645] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.095743][ T29] audit: type=1400 audit(1727502115.475:1332): avc: denied { open } for pid=12702 comm="syz.2.3507" path="/dev/input/event0" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 349.096204][T12645] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.120015][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.140572][T12645] bridge_slave_0: entered allmulticast mode [ 349.147984][T12645] bridge_slave_0: entered promiscuous mode [ 349.215420][T12645] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.229561][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 349.259318][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.286956][T12645] bridge_slave_1: entered allmulticast mode [ 349.300933][T12645] bridge_slave_1: entered promiscuous mode [ 349.423115][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 349.435920][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 349.466262][ T9] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 349.475630][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.484815][T12719] tmpfs: User quota inode hardlimit too large. [ 349.509550][ T9] usb 3-1: config 0 descriptor?? [ 349.517879][T12703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 349.547001][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 349.561327][T12645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.597808][T12645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.670411][T12645] team0: Port device team_slave_0 added [ 349.686404][T12645] team0: Port device team_slave_1 added [ 349.736452][ T9] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 349.748265][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.762592][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 349.781166][T12645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.788395][T12645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.814351][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.838857][T12645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.863419][T12734] netlink: 'syz.3.3522': attribute type 21 has an invalid length. [ 349.875208][T12645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.901294][T12645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.928625][T12645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.950500][ T5271] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 349.974611][ T9] usb 3-1: USB disconnect, device number 94 [ 350.057116][ T29] audit: type=1400 audit(1727502116.545:1333): avc: denied { mounton } for pid=12737 comm="syz.3.3524" path="/702/file0" dev="tmpfs" ino=3531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 350.085342][T12738] ISOFS: Unable to identify CD-ROM format. [ 350.141715][ T5271] usb 5-1: Using ep0 maxpacket: 32 [ 350.164907][ T5271] usb 5-1: config 0 has an invalid interface number: 129 but max is 0 [ 350.181765][ T5271] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 350.191196][ T5271] usb 5-1: config 0 has no interface number 1 [ 350.197575][ T5271] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.210678][ T5271] usb 5-1: too many endpoints for config 0 interface 129 altsetting 107: 79, using maximum allowed: 30 [ 350.222020][ T5271] usb 5-1: config 0 interface 129 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 350.235506][ T5271] usb 5-1: config 0 interface 129 has no altsetting 0 [ 350.242651][ T5271] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.249479][T12645] hsr_slave_0: entered promiscuous mode [ 350.252029][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.265752][T12645] hsr_slave_1: entered promiscuous mode [ 350.279256][T12645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.282648][ T5271] usb 5-1: config 0 descriptor?? [ 350.308834][T12645] Cannot create hsr debugfs directory [ 350.320217][ T5271] hub 5-1:0.0: bad descriptor, ignoring hub [ 350.326176][ T5271] hub 5-1:0.0: probe with driver hub failed with error -5 [ 350.342724][ T5233] Bluetooth: hci5: command tx timeout [ 350.351210][ T5271] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 350.360116][ T5271] hub 5-1:0.129: bad descriptor, ignoring hub [ 350.366255][ T5271] hub 5-1:0.129: probe with driver hub failed with error -5 [ 350.443970][ T29] audit: type=1400 audit(1727502116.935:1334): avc: denied { getopt } for pid=12745 comm="syz.2.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 350.463582][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.709364][ T5271] usb 5-1: USB disconnect, device number 96 [ 350.792293][T12645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.956561][T12645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.158125][T12645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.304141][T12645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.314850][ T5302] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 351.468594][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3548'. [ 351.487781][ T5302] usb 4-1: Using ep0 maxpacket: 8 [ 351.511742][ T5302] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.539880][ T5302] usb 4-1: config 0 has no interface number 0 [ 351.546088][ T5302] usb 4-1: config 0 interface 1 has no altsetting 0 [ 351.580528][ T5302] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 351.620969][ T5302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.642417][T12645] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.650217][ T5302] usb 4-1: Product: syz [ 351.654437][ T5302] usb 4-1: Manufacturer: syz [ 351.663561][ T5302] usb 4-1: SerialNumber: syz [ 351.687829][ T5302] usb 4-1: config 0 descriptor?? [ 351.701969][T12645] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.728307][T12645] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.749314][T12645] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.855655][T12645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.877599][T12645] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.894350][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.901537][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.949449][ T5302] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 351.991897][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.999083][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.101114][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3558'. [ 352.136657][T12645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.178060][ T5302] usb 4-1: USB disconnect, device number 99 [ 352.419355][ T5233] Bluetooth: hci5: command tx timeout [ 352.502304][T12645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.540542][T12645] veth0_vlan: entered promiscuous mode [ 352.552694][T12645] veth1_vlan: entered promiscuous mode [ 352.656337][T12645] veth0_macvtap: entered promiscuous mode [ 352.687361][T12645] veth1_macvtap: entered promiscuous mode [ 352.736677][T12645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.762334][T12645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.780326][T12645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.796045][T12645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.809321][T12645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.834747][T12645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.844884][T12645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.855804][T12645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.882255][T12837] openvswitch: netlink: Actions may not be safe on all matching packets [ 352.883712][T12645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.918356][T12645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.946912][T12645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.955985][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 352.966559][T12834] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3570'. [ 353.027365][T12645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.065480][T12645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.095830][T12645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.122815][T12645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.150434][T12645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.167749][T12645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.190541][T12645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.218731][T12645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.243126][T12645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.264253][T12645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.279823][T12645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.320017][T12645] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.348320][T12645] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.357848][T12645] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.386457][T12645] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.608244][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 353.608266][ T29] audit: type=1400 audit(1727502120.086:1341): avc: denied { write } for pid=12860 comm="syz.3.3584" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 353.637742][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.675561][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.698987][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.811813][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.849575][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.863937][ T29] audit: type=1400 audit(1727502120.356:1342): avc: denied { mounton } for pid=12645 comm="syz-executor" path="/root/syzkaller.4aRVgs/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 353.918364][ T29] audit: type=1400 audit(1727502120.386:1343): avc: denied { mount } for pid=12645 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 353.986548][ T29] audit: type=1400 audit(1727502120.386:1344): avc: denied { mounton } for pid=12645 comm="syz-executor" path="/root/syzkaller.4aRVgs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 354.078053][ T29] audit: type=1400 audit(1727502120.386:1345): avc: denied { mounton } for pid=12645 comm="syz-executor" path="/root/syzkaller.4aRVgs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=31915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 354.129990][ T29] audit: type=1400 audit(1727502120.396:1346): avc: denied { unmount } for pid=12645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 354.219199][ T29] audit: type=1400 audit(1727502120.436:1347): avc: denied { mounton } for pid=12645 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 354.304335][ T29] audit: type=1400 audit(1727502120.436:1348): avc: denied { mount } for pid=12645 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 354.399118][T12894] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 354.407909][ T29] audit: type=1400 audit(1727502120.436:1349): avc: denied { mounton } for pid=12645 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 354.441584][T12895] kAFS: unable to lookup cell '/yz1' [ 354.488302][ T29] audit: type=1400 audit(1727502120.436:1350): avc: denied { mount } for pid=12645 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 354.498334][ T5233] Bluetooth: hci5: command tx timeout [ 355.540223][T12952] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 355.943882][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3635'. [ 355.965157][T12972] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3635'. [ 356.067841][ T5275] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 356.232484][ T5275] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 356.242273][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.265485][ T5275] usb 5-1: Product: syz [ 356.280171][ T5275] usb 5-1: Manufacturer: syz [ 356.284837][ T5275] usb 5-1: SerialNumber: syz [ 356.317615][ T5275] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 356.373245][ T5271] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 356.522027][T12995] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.3645'. [ 356.608081][ T5233] Bluetooth: hci5: command tx timeout [ 356.930666][ T5302] usb 5-1: USB disconnect, device number 97 [ 356.968533][ T5270] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 357.017209][T13015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.029760][T13015] team0: Port device bond0 added [ 357.138123][ T5270] usb 4-1: Using ep0 maxpacket: 16 [ 357.145134][ T5270] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 357.157910][ T5270] usb 4-1: config 0 has no interface number 0 [ 357.169900][ T5270] usb 4-1: config 0 interface 199 has no altsetting 0 [ 357.184061][ T5270] usb 4-1: New USB device found, idVendor=045e, idProduct=02d5, bcdDevice=f5.78 [ 357.194600][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.194750][T13019] bridge0: port 3(netdevsim0) entered blocking state [ 357.203041][ T5270] usb 4-1: Product: syz [ 357.214233][ T5270] usb 4-1: Manufacturer: syz [ 357.219175][ T5270] usb 4-1: SerialNumber: syz [ 357.224420][T13019] bridge0: port 3(netdevsim0) entered disabled state [ 357.236088][ T5270] usb 4-1: config 0 descriptor?? [ 357.236173][T13019] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 357.253119][T13019] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 357.261913][T13019] bridge0: port 3(netdevsim0) entered blocking state [ 357.269171][T13019] bridge0: port 3(netdevsim0) entered forwarding state [ 357.464141][ T5270] dvb-usb: found a 'Microsoft Xbox One Digital TV Tuner' in warm state. [ 357.485937][ T5270] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 357.504679][ T5270] dvbdev: DVB: registering new adapter (Microsoft Xbox One Digital TV Tuner) [ 357.515574][ T5270] usb 4-1: media controller created [ 357.577375][ T5270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.783415][ T5271] usb 5-1: Service connection timeout for: 256 [ 357.803340][ T5271] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 357.832761][ T5271] ath9k_htc: Failed to initialize the device [ 357.849497][ T5302] usb 5-1: ath9k_htc: USB layer deinitialized [ 357.915852][ T5270] dvb-usb: no frontend was attached by 'Microsoft Xbox One Digital TV Tuner' [ 357.932856][ T5270] dvb-usb: Microsoft Xbox One Digital TV Tuner successfully initialized and connected. [ 357.967337][ T5270] usb 4-1: USB disconnect, device number 100 [ 358.038175][ T46] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 358.088022][ T5270] dvb-usb: Microsoft Xbox One Digital TV Tuner successfully deinitialized and disconnected. [ 358.220161][ T46] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 358.241654][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.261852][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.275806][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 358.295652][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 358.326023][ T46] usb 2-1: New USB device found, idVendor=0008, idProduct=7600, bcdDevice= 0.00 [ 358.344772][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.366136][ T46] usb 2-1: config 0 descriptor?? [ 358.400525][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3674'. [ 358.697848][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 358.697872][ T29] audit: type=1400 audit(1727502125.176:1369): avc: denied { search } for pid=13061 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.726306][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.746752][ T29] audit: type=1400 audit(1727502125.226:1370): avc: denied { read } for pid=13066 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.827120][ T46] hid-generic 0003:0008:7600.0001: hidraw0: USB HID v4.00 Device [HID 0008:7600] on usb-dummy_hcd.1-1/input0 [ 358.828011][ T29] audit: type=1400 audit(1727502125.226:1371): avc: denied { open } for pid=13066 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.864007][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.933765][ T29] audit: type=1400 audit(1727502125.226:1372): avc: denied { getattr } for pid=13066 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.959302][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.974135][ T46] kernel write not supported for file /sysvipc/shm (pid: 46 comm: kworker/1:1) [ 358.976247][ T29] audit: type=1400 audit(1727502125.246:1373): avc: denied { getattr } for pid=13066 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1446 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 359.001937][ T5299] usb 2-1: USB disconnect, device number 55 [ 359.010019][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.023435][ T29] audit: type=1400 audit(1727502125.416:1374): avc: denied { read } for pid=13069 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1446 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 359.077418][ T29] audit: type=1400 audit(1727502125.416:1375): avc: denied { open } for pid=13069 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1446 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 359.157809][ T5271] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 359.165681][ T29] audit: type=1400 audit(1727502125.646:1376): avc: denied { bind } for pid=13078 comm="syz.2.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 359.229822][ T29] audit: type=1400 audit(1727502125.716:1377): avc: denied { write } for pid=13061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.280220][ T29] audit: type=1400 audit(1727502125.716:1378): avc: denied { add_name } for pid=13061 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.351521][ T5271] usb 5-1: Using ep0 maxpacket: 8 [ 359.359756][ T5271] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 359.374941][ T5271] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 359.393955][ T5271] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 359.443441][T13060] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 359.454558][ T5271] usb 5-1: Product: syz [ 359.471276][ T5271] usb 5-1: Manufacturer: syz [ 359.476083][T13060] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 359.496489][ T5271] usb 5-1: SerialNumber: syz [ 359.528532][T13060] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.656563][T13060] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 359.857580][ T5271] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 359.865987][ T5271] usb 5-1: Handspring Visor / Palm OS: port 158, is for unknown use [ 359.884958][ T5271] usb 5-1: Handspring Visor / Palm OS: port 15, is for unknown use [ 359.926683][ T5271] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 360.109240][ T5271] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 360.169404][ T5271] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 360.202384][ T5271] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 360.315428][ T5271] usb 5-1: USB disconnect, device number 98 [ 360.342992][ T5271] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 360.424642][ T5271] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 360.467344][ T5271] visor 5-1:1.0: device disconnected [ 360.723017][T13140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3700'. [ 360.919604][T13060] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 360.925571][T13060] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 361.128123][T13155] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 361.290084][T13160] Zero length message leads to an empty skb [ 362.117122][ T5302] IPVS: starting estimator thread 0... [ 362.237571][T13211] IPVS: using max 15 ests per chain, 36000 per kthread [ 362.838373][ T5302] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 363.007602][ T5302] usb 4-1: Using ep0 maxpacket: 32 [ 363.019674][ T5302] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 363.048686][ T5302] usb 4-1: config 0 has no interface number 0 [ 363.085435][ T5302] usb 4-1: config 0 interface 182 has no altsetting 0 [ 363.115029][ T5302] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8d.fa [ 363.144747][ T5302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.166996][ T5302] usb 4-1: Product: syz [ 363.173229][ T5302] usb 4-1: Manufacturer: syz [ 363.178050][ T5302] usb 4-1: SerialNumber: syz [ 363.187009][ T5302] usb 4-1: config 0 descriptor?? [ 363.206647][ T5302] usb-storage 4-1:0.182: USB Mass Storage device detected [ 363.226006][ T5302] usb-storage 4-1:0.182: Quirks match for vid 07cf pid 1001: a [ 363.348906][ T5271] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 363.444216][ T9] usb 4-1: USB disconnect, device number 101 [ 363.509660][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.531240][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.564627][ T5271] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 363.583891][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.635984][ T5271] usb 5-1: config 0 descriptor?? [ 364.103072][ T5271] magicmouse 0003:05AC:0269.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 364.386402][ T5275] usb 5-1: USB disconnect, device number 99 [ 364.739280][ T5299] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 364.759295][T13331] CIFS: VFS: Malformed UNC in devname [ 364.930673][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 364.930695][ T29] audit: type=1400 audit(1727502131.417:1401): avc: denied { create } for pid=13340 comm="syz.3.3769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 364.995366][ T5299] usb 2-1: Using ep0 maxpacket: 16 [ 365.014521][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.059504][ T5299] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 365.079103][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.117508][ T5299] usb 2-1: config 0 descriptor?? [ 365.173541][ T29] audit: type=1400 audit(1727502131.657:1402): avc: denied { bind } for pid=13347 comm="syz.3.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 365.203615][ T29] audit: type=1400 audit(1727502131.687:1403): avc: denied { write } for pid=13347 comm="syz.3.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 365.353455][ T29] audit: type=1400 audit(1727502131.837:1404): avc: denied { watch watch_reads } for pid=13353 comm="syz.3.3775" path="/745" dev="tmpfs" ino=3742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 365.441481][T13358] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3777'. [ 365.450777][T13358] netlink: 'syz.2.3777': attribute type 1 has an invalid length. [ 365.527436][ T5275] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 365.543262][ T5299] glorious 0003:258A:0033.0003: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.1-1/input0 [ 365.601924][ T29] audit: type=1400 audit(1727502132.087:1405): avc: denied { connect } for pid=13363 comm="syz.3.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 365.623534][ T29] audit: type=1400 audit(1727502132.087:1406): avc: denied { name_connect } for pid=13363 comm="syz.3.3780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 365.670044][T13366] Bluetooth: MGMT ver 1.23 [ 365.675235][ T29] audit: type=1400 audit(1727502132.157:1407): avc: denied { write } for pid=13365 comm="syz.3.3781" path="socket:[33094]" dev="sockfs" ino=33094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.716186][ T5275] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 365.730693][ T5275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.745768][ T5275] usb 5-1: config 0 has no interface number 0 [ 365.756473][ T5302] usb 2-1: USB disconnect, device number 56 [ 365.757075][ T5275] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 365.784537][ T5275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.797784][ T5275] usb 5-1: config 0 has no interface number 0 [ 365.805219][ T5275] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 365.822938][ T5275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.837420][ T46] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 365.843342][ T5275] usb 5-1: config 0 has no interface number 0 [ 365.851248][ T5275] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 365.860594][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.872576][T13370] overlayfs: missing 'lowerdir' [ 365.878936][ T5275] usb 5-1: config 0 descriptor?? [ 365.990590][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 366.007386][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.018024][ T46] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 366.027718][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.041464][ T46] usb 3-1: config 0 descriptor?? [ 366.052212][ T5275] usb 5-1: reset high-speed USB device number 100 using dummy_hcd [ 366.481395][ T46] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 366.489446][ T46] hid-steam 0003:28DE:1102.0004: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 366.559516][ T46] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' connected [ 366.569906][ T46] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0004/input/input43 [ 366.598270][ T46] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 366.613374][ T46] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 366.697301][ T5229] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 366.740640][ T5275] usb 5-1: device descriptor read/64, error -71 [ 366.748595][ T5271] usb 3-1: USB disconnect, device number 95 [ 366.778814][ T5271] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' disconnected [ 366.857155][ T5229] usb 2-1: Using ep0 maxpacket: 32 [ 366.865887][ T5229] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 366.880283][ T5229] usb 2-1: config 0 has no interface number 0 [ 366.891947][ T5229] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 366.901180][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.909349][ T5229] usb 2-1: Product: syz [ 366.913554][ T5229] usb 2-1: Manufacturer: syz [ 366.918453][ T5229] usb 2-1: SerialNumber: syz [ 366.925219][ T5229] usb 2-1: config 0 descriptor?? [ 366.938144][ T5229] smsc95xx v2.0.0 [ 367.024081][ T5275] usb 5-1: reset high-speed USB device number 100 using dummy_hcd [ 367.467607][ T46] usb 5-1: USB disconnect, device number 100 [ 367.473907][ T5302] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 367.581184][ T5229] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 367.594245][ T5229] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 367.596118][ T5229] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 367.596285][ T5229] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 367.614382][ T5229] usb 2-1: USB disconnect, device number 57 [ 367.637772][ T5270] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 367.657238][ T5302] usb 4-1: Using ep0 maxpacket: 8 [ 367.666396][ T5302] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 367.681833][ T5302] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 367.693638][ T5302] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 367.727586][ T5302] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 367.733339][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3801'. [ 367.750522][ T5302] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 367.758105][ T5302] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 367.769955][ T5302] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 367.781299][ T5302] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 367.791393][ T5270] usb 3-1: Using ep0 maxpacket: 16 [ 367.799093][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.811691][ T5302] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 367.820817][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.830785][ T5302] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 367.844157][ T5270] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 367.853636][ T5302] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 367.868954][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.881583][ T5302] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 367.894258][ T5270] usb 3-1: config 0 descriptor?? [ 367.915494][ T5302] usb 4-1: string descriptor 0 read error: -22 [ 367.924498][ T5302] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 367.945065][ T5302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.973692][ T5302] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 368.258655][ T29] audit: type=1400 audit(1727502134.747:1408): avc: denied { read } for pid=13419 comm="syz.4.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 368.292598][ T5302] usb 4-1: USB disconnect, device number 102 [ 368.334071][ T5270] samsung 0003:0419:0001.0006: report_id 0 is invalid [ 368.357016][ T5270] samsung 0003:0419:0001.0006: item 0 0 1 8 parsing failed [ 368.364947][ T5270] samsung 0003:0419:0001.0006: parse failed [ 368.383505][ T5270] samsung 0003:0419:0001.0006: probe with driver samsung failed with error -22 [ 368.561650][ T5275] usb 3-1: USB disconnect, device number 96 [ 368.726958][ T5270] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 368.876976][ T5270] usb 2-1: Using ep0 maxpacket: 16 [ 368.884419][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 368.906990][ T5270] usb 2-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 368.916324][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.932987][ T5270] usb 2-1: config 0 descriptor?? [ 369.095316][T13437] Bluetooth: MGMT ver 1.23 [ 369.251513][ T29] audit: type=1400 audit(1727502135.727:1409): avc: denied { setopt } for pid=13441 comm="syz.2.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.362148][ T5270] viewsonic 0003:2133:0018.0007: item fetching failed at offset 5/7 [ 369.382452][ T5270] viewsonic 0003:2133:0018.0007: probe with driver viewsonic failed with error -22 [ 369.576646][ T9] usb 2-1: USB disconnect, device number 58 [ 369.636159][T13461] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3825'. [ 369.656916][ T5302] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 369.813200][ T5302] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 369.827079][ T5302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.835112][ T5302] usb 3-1: Product: syz [ 369.842142][ T5302] usb 3-1: Manufacturer: syz [ 369.846947][ T5302] usb 3-1: SerialNumber: syz [ 369.866404][ T5302] usb 3-1: config 0 descriptor?? [ 370.047080][ T5275] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 370.116941][ T5302] usb 3-1: USB disconnect, device number 97 [ 370.210614][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.241153][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.271645][ T5275] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 370.291806][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.311756][ T5275] usb 5-1: config 0 descriptor?? [ 370.449310][ T29] audit: type=1400 audit(1727502136.937:1410): avc: denied { connect } for pid=13485 comm="syz.3.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 370.532485][ T29] audit: type=1400 audit(1727502137.017:1411): avc: denied { accept } for pid=13485 comm="syz.3.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 370.766596][ T5275] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 370.775857][ T5275] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 370.791460][T13494] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3840'. [ 370.792830][ T5275] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 370.815661][ T5275] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 370.830126][ T5275] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 370.849794][ T5275] logitech 0003:046D:CA04.0008: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0 [ 370.868695][ T5275] logitech 0003:046D:CA04.0008: no inputs found [ 371.001636][ T5270] usb 5-1: USB disconnect, device number 101 [ 371.007841][ T5302] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 371.169222][ T5302] usb 2-1: Using ep0 maxpacket: 8 [ 371.188735][ T5302] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 371.203288][ T5302] usb 2-1: config 179 has no interface number 0 [ 371.210763][ T5302] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 371.223621][ T5302] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 371.235765][ T5302] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.246963][T13506] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3846'. [ 371.256449][ T5302] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 371.267179][ T5302] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 371.287764][ T5302] usb 2-1: config 179 interface 65 has no altsetting 0 [ 371.294826][ T5302] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 371.304714][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.316640][T13492] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 371.343434][ T5302] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input44 [ 371.753939][ T9] usb 2-1: USB disconnect, device number 59 [ 371.753958][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 371.783927][ T9] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 372.155024][ T29] audit: type=1400 audit(1727502138.637:1412): avc: denied { connect } for pid=13533 comm="syz.4.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 372.428980][ T29] audit: type=1400 audit(1727502138.917:1413): avc: denied { write } for pid=13547 comm="syz.2.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.550790][T13554] SELinux: Context is not valid (left unmapped). [ 372.566718][ T29] audit: type=1326 audit(1727502139.047:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13555 comm="syz.2.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b497dff9 code=0x7ffc0000 [ 372.627375][ T29] audit: type=1326 audit(1727502139.047:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13555 comm="syz.2.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b497dff9 code=0x7ffc0000 [ 372.682330][ T29] audit: type=1400 audit(1727502139.077:1416): avc: denied { relabelto } for pid=13553 comm="syz.1.3870" name="rdma.current" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 372.773583][ T29] audit: type=1400 audit(1727502139.077:1417): avc: denied { associate } for pid=13553 comm="syz.1.3870" name="rdma.current" dev="tmpfs" ino=298 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 372.816913][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.857586][ T29] audit: type=1326 audit(1727502139.077:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13555 comm="syz.2.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f60b497dff9 code=0x7ffc0000 [ 372.927301][T13566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3876'. [ 372.941001][ T29] audit: type=1326 audit(1727502139.077:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13555 comm="syz.2.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b497dff9 code=0x7ffc0000 [ 373.004401][T13569] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 373.102662][T13573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3878'. [ 373.133431][T13573] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3878'. [ 373.146968][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3878'. [ 373.683253][T13599] netlink: 'syz.0.3892': attribute type 24 has an invalid length. [ 374.263852][T13628] syz.2.3906 uses obsolete (PF_INET,SOCK_PACKET) [ 374.656706][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 374.843396][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 374.862176][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.891775][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.916082][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 374.925954][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.947061][ T9] hub 2-1:4.0: USB hub found [ 375.153433][ T9] hub 2-1:4.0: 2 ports detected [ 375.166643][ T9] usb 2-1: selecting invalid altsetting 1 [ 375.173937][ T9] hub 2-1:4.0: Using single TT (err -22) [ 375.364156][ T9] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 375.397263][ T9] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 375.498093][ T9] usb 2-1: USB disconnect, device number 60 [ 375.616413][T13687] netlink: 'syz.4.3932': attribute type 1 has an invalid length. [ 375.696454][T13690] mkiss: ax0: crc mode is auto. [ 375.718180][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 375.718203][ T29] audit: type=1400 audit(1727502142.187:1427): avc: denied { read } for pid=4887 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 376.612496][ T29] audit: type=1400 audit(1727502143.097:1428): avc: denied { mount } for pid=13728 comm="syz.1.3952" name="/" dev="ramfs" ino=34914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 376.720209][ T29] audit: type=1400 audit(1727502143.187:1429): avc: denied { unmount } for pid=12645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 376.897115][ T29] audit: type=1400 audit(1727502143.367:1430): avc: denied { listen } for pid=13741 comm="syz.4.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 377.062783][T13750] loop4: detected capacity change from 0 to 524287999 [ 377.092524][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.101963][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.119586][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.128916][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.137357][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.146586][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.154984][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.164255][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.174867][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.184170][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.192320][ T5302] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 377.192766][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.209274][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.228292][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.237555][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.245998][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.255229][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.263365][T13750] ldm_validate_partition_table(): Disk read failed. [ 377.278686][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.288056][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.296610][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.305827][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.321623][T13750] Dev loop4: unable to read RDB block 0 [ 377.349536][T13750] loop4: unable to read partition table [ 377.364776][T13750] loop_reread_partitions: partition scan of loop4 (3 xC) failed (rc=-5) [ 377.375547][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.403825][ T5302] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 377.441727][ T5302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.496213][ T5302] usb 4-1: config 0 descriptor?? [ 377.638694][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3969'. [ 377.959558][ T5302] logitech 0003:046D:C626.0009: hidraw0: USB HID v10.00 Device [HID 046d:c626] on usb-dummy_hcd.3-1/input0 [ 378.117768][ T5270] usb 4-1: USB disconnect, device number 103 [ 378.173657][ T29] audit: type=1400 audit(1727502144.657:1431): avc: denied { read } for pid=13785 comm="syz.1.3978" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 378.196973][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.256761][ T29] audit: type=1400 audit(1727502144.657:1432): avc: denied { open } for pid=13785 comm="syz.1.3978" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 378.280447][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.305787][ T5302] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 378.306485][ T29] audit: type=1400 audit(1727502144.677:1433): avc: denied { ioctl } for pid=13785 comm="syz.1.3978" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 378.404903][ T29] audit: type=1400 audit(1727502144.887:1434): avc: denied { ioctl } for pid=13793 comm="syz.1.3981" path="/dev/nullb0" dev="devtmpfs" ino=680 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 378.429579][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.456738][ T5302] usb 5-1: Using ep0 maxpacket: 8 [ 378.508791][ T5302] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 378.524276][ T5302] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 378.525890][T13796] can0: slcan on ptm0. [ 378.532808][ T5302] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 378.532852][ T5302] usb 5-1: config 250 has no interface number 0 [ 378.532908][ T5302] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 378.572089][ T5302] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 378.594442][ T5302] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12592, setting to 1024 [ 378.606355][ T5302] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 378.617276][ T5302] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 378.631364][ T5302] usb 5-1: config 250 interface 228 has no altsetting 0 [ 378.649489][ T5302] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 378.665193][ T5302] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 378.694247][ T5302] usb 5-1: Product: syz [ 378.701228][ T5302] usb 5-1: SerialNumber: syz [ 378.729458][T13795] can0 (unregistered): slcan off ptm0. [ 378.767167][ T5302] hub 5-1:250.228: bad descriptor, ignoring hub [ 378.773504][ T5302] hub 5-1:250.228: probe with driver hub failed with error -5 [ 378.991945][ T5302] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 102 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 379.233430][T13824] netlink: 4088 bytes leftover after parsing attributes in process `syz.2.3993'. [ 379.256612][T13824] openvswitch: netlink: Actions may not be safe on all matching packets [ 379.269925][ T29] audit: type=1400 audit(1727502145.747:1435): avc: denied { read write } for pid=13781 comm="syz.4.3976" name="lp0" dev="devtmpfs" ino=3982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 379.339518][ T29] audit: type=1400 audit(1727502145.747:1436): avc: denied { open } for pid=13781 comm="syz.4.3976" path="/dev/usb/lp0" dev="devtmpfs" ino=3982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 379.363528][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.412252][ C1] usblp0: nonzero read bulk status received: -71 [ 379.543493][ T5271] usb 5-1: USB disconnect, device number 102 [ 379.586790][ T5271] usblp0: removed [ 379.903320][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4000'. [ 379.977107][T13856] Process accounting resumed [ 380.111988][T13856] Process accounting resumed [ 380.768973][T13897] openvswitch: netlink: Key type 8892 is out of range max 32 [ 381.367961][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 381.367985][ T29] audit: type=1326 audit(1727502147.848:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13914 comm="syz.3.4029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d8a57dff9 code=0x0 [ 381.397066][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.843875][T13926] xt_CT: No such helper "syz1" [ 382.196557][ T5271] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 382.436417][ T5271] usb 3-1: Using ep0 maxpacket: 8 [ 382.443930][ T5271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.490612][ T5271] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 382.538705][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 382.574930][ T5271] usb 3-1: SerialNumber: syz [ 382.600560][ T5271] usb 3-1: config 0 descriptor?? [ 382.672363][ T5271] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 382.693218][ T5271] usb 3-1: No streaming interface found for terminal 36. [ 382.706559][T13969] netlink: 624 bytes leftover after parsing attributes in process `syz.1.4052'. [ 382.902070][ T5271] usb 3-1: USB disconnect, device number 98 [ 383.061235][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.062702][T11414] cxacru 1-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 383.068422][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.951006][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4076'. [ 384.142817][ T82] bridge_slave_1: left allmulticast mode [ 384.149903][ T82] bridge_slave_1: left promiscuous mode [ 384.157433][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.220707][ T82] bridge_slave_0: left allmulticast mode [ 384.246434][ T82] bridge_slave_0: left promiscuous mode [ 384.276731][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.373815][ T29] audit: type=1400 audit(1727502150.858:1442): avc: denied { create } for pid=14035 comm="syz.0.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 384.423265][ T29] audit: type=1400 audit(1727502150.898:1443): avc: denied { write } for pid=14035 comm="syz.0.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 384.812750][T14050] netlink: 4072 bytes leftover after parsing attributes in process `syz.4.4092'. [ 384.822710][T14050] openvswitch: netlink: Actions may not be safe on all matching packets [ 384.936586][ T29] audit: type=1400 audit(1727502151.428:1444): avc: denied { execute } for pid=14052 comm="syz.0.4093" path="/dev/dsp" dev="devtmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 384.971235][T14026] Falling back ldisc for ttynull. [ 385.471217][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.483985][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.497708][ T82] bond0 (unregistering): Released all slaves [ 385.591186][ T938] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 385.787870][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 385.821158][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.854915][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.880532][ T938] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 385.917012][ T938] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 385.962527][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.979776][ T938] usb 1-1: config 0 descriptor?? [ 386.133717][ T29] audit: type=1400 audit(1727502152.608:1445): avc: denied { map } for pid=14084 comm="syz.3.4110" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 386.419661][ T938] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 386.445456][ T938] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 386.468380][ T82] hsr_slave_0: left promiscuous mode [ 386.488221][ T82] hsr_slave_1: left promiscuous mode [ 386.494515][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.513400][ T938] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 386.525315][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.541369][ T938] microsoft 0003:045E:07DA.000A: no inputs found [ 386.553325][ T938] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 386.564201][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.585148][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.636479][ T5273] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 386.650082][ T82] veth0_macvtap: left promiscuous mode [ 386.669055][ T5302] usb 1-1: USB disconnect, device number 100 [ 386.677182][ T82] veth1_vlan: left promiscuous mode [ 386.699270][ T82] veth0_vlan: left promiscuous mode [ 386.796369][ T5271] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 386.796567][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 386.832167][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.859072][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.895594][ T5273] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 386.917362][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.929800][ T5273] usb 2-1: config 0 descriptor?? [ 386.966478][T14107] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4119'. [ 386.980832][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.002093][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.027903][ T5271] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 387.057624][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.088351][ T5271] usb 5-1: config 0 descriptor?? [ 387.303954][T14113] [U] V3Fپ"S/4:XTZWTLW= [ 387.332285][T14112] [U] J"E:" [ 387.373389][ T5273] logitech 0003:046D:C24F.000B: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.1-1/input0 [ 387.413554][ T5273] logitech 0003:046D:C24F.000B: no inputs found [ 387.427641][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 387.541966][ T5271] kye 0003:0458:0138.000C: unknown main item tag 0x0 [ 387.555840][ T5271] kye 0003:0458:0138.000C: unknown main item tag 0x0 [ 387.576910][ T5275] usb 2-1: USB disconnect, device number 61 [ 387.588326][ T5271] kye 0003:0458:0138.000C: unknown main item tag 0x0 [ 387.595589][ T5271] kye 0003:0458:0138.000C: unknown main item tag 0x0 [ 387.602827][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 387.625630][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 387.642213][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.662299][ T9] usb 4-1: config 0 descriptor?? [ 387.667698][ T5271] kye 0003:0458:0138.000C: unknown main item tag 0x0 [ 387.699747][ T5271] kye 0003:0458:0138.000C: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.4-1/input0 [ 387.782828][ T5275] usb 5-1: USB disconnect, device number 103 [ 387.885393][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 387.905436][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.923032][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 387.930527][ T9] usb 4-1: media controller created [ 387.972594][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.218241][ T82] team0 (unregistering): Port device team_slave_1 removed [ 388.314889][ T82] team0 (unregistering): Port device team_slave_0 removed [ 388.320219][ T9] az6027: usb out operation failed. (-71) [ 388.338083][ T9] stb0899_attach: Driver disabled by Kconfig [ 388.344304][ T9] az6027: no front-end attached [ 388.344304][ T9] [ 388.358448][ T9] az6027: usb out operation failed. (-71) [ 388.364225][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 388.388859][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 388.453771][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 388.471291][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 388.497174][ T9] usb 4-1: USB disconnect, device number 104 [ 388.593389][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 388.717445][ T29] audit: type=1400 audit(1727502155.198:1446): avc: denied { read write } for pid=14138 comm="syz.4.4131" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 388.742122][ T29] audit: type=1400 audit(1727502155.228:1447): avc: denied { open } for pid=14138 comm="syz.4.4131" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 388.770530][ T29] audit: type=1400 audit(1727502155.258:1448): avc: denied { watch } for pid=14138 comm="syz.4.4131" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 388.801567][ T29] audit: type=1400 audit(1727502155.258:1449): avc: denied { watch_sb watch_reads } for pid=14138 comm="syz.4.4131" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 389.253901][ T82] team0 (unregistering): Port device batadv0 removed [ 389.387176][ T5270] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 389.606604][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.618208][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.628217][ T5270] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 389.637345][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.663746][ T5270] usb 4-1: config 0 descriptor?? [ 389.908913][T14169] tipc: Enabling of bearer rejected, failed to enable media [ 390.013696][ T29] audit: type=1400 audit(1727502156.498:1450): avc: denied { bind } for pid=14170 comm="syz.4.4146" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 390.119741][ T29] audit: type=1400 audit(1727502156.498:1451): avc: denied { name_bind } for pid=14170 comm="syz.4.4146" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 390.138081][ T5270] dragonrise 0003:0079:0006.000D: unknown main item tag 0x0 [ 390.160044][ T5270] dragonrise 0003:0079:0006.000D: unknown main item tag 0x0 [ 390.176610][ T5270] dragonrise 0003:0079:0006.000D: unknown main item tag 0x0 [ 390.188875][ T5270] dragonrise 0003:0079:0006.000D: unknown main item tag 0x0 [ 390.195538][ T29] audit: type=1400 audit(1727502156.498:1452): avc: denied { node_bind } for pid=14170 comm="syz.4.4146" saddr=172.20.20.170 src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 390.197415][ T5270] dragonrise 0003:0079:0006.000D: unknown main item tag 0x0 [ 390.255073][ T5270] dragonrise 0003:0079:0006.000D: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 390.273332][ T5270] dragonrise 0003:0079:0006.000D: no inputs found [ 390.280538][ T5270] dragonrise 0003:0079:0006.000D: force feedback init failed [ 390.297396][ T29] audit: type=1400 audit(1727502156.778:1453): avc: denied { setcurrent } for pid=14176 comm="syz.0.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 390.545226][T14188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.552982][T14188] IPv6: NLM_F_CREATE should be set when creating new route [ 390.581586][ T5270] usb 4-1: USB disconnect, device number 105 [ 390.667441][T14192] netlink: 'syz.2.4157': attribute type 1 has an invalid length. [ 390.685825][T14192] NCSI netlink: No device for ifindex 0 [ 390.820819][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'. [ 390.903363][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4161'. [ 390.926599][ T29] audit: type=1326 audit(1727502157.418:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14203 comm="syz.2.4162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60b497dff9 code=0x0 [ 390.929813][T14202] batman_adv: batadv0: Removing interface: ipvlan1 [ 390.966279][ T5275] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 391.128680][ T5275] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 391.143568][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.196017][ T5275] usb 2-1: config 0 descriptor?? [ 391.422429][ T29] audit: type=1326 audit(1727502157.908:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.3.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8a57dff9 code=0x7ffc0000 [ 391.462651][ T5275] [drm] vendor descriptor length:6 data:06 5f 01 00 04 03 00 00 00 00 00 [ 391.526330][ T938] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 391.673631][ T5275] [drm:udl_init] *ERROR* Selecting channel failed [ 391.678073][ T938] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 391.690116][ T938] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 391.706632][ T938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 391.714911][ T5275] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 391.726629][ T938] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 391.738591][ T5275] [drm] Initialized udl on minor 2 [ 391.752086][ T5275] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 391.771163][ T5275] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 391.772378][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 391.788267][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 391.801803][ T5275] usb 2-1: USB disconnect, device number 62 [ 391.817200][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 391.818448][ T938] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 391.853835][ T938] usb 5-1: string descriptor 0 read error: -22 [ 391.861452][ T938] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 391.878709][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.904986][ T938] usb 5-1: config 0 descriptor?? [ 391.915737][T14213] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 391.934106][ T938] hub 5-1:0.0: bad descriptor, ignoring hub [ 391.945965][ T938] hub 5-1:0.0: probe with driver hub failed with error -5 [ 391.999083][ T938] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input47 [ 392.095833][T14235] ALSA: mixer_oss: invalid index 100000 [ 392.173891][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 392.186897][ T938] usb 5-1: USB disconnect, device number 104 [ 392.369030][T14246] openvswitch: netlink: Actions may not be safe on all matching packets [ 392.549755][T14255] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 392.585751][T14253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4185'. [ 393.136414][ T941] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 393.316317][ T941] usb 2-1: Using ep0 maxpacket: 8 [ 393.337866][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 393.386441][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.416343][ T941] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 393.444314][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.475125][ T941] usb 2-1: config 0 descriptor?? [ 393.739596][T14284] trusted_key: encrypted_key: key trusted:syz not found [ 393.930226][ T941] hid-alps 0003:044E:1215.000E: item fetching failed at offset 2/5 [ 393.966791][ T941] hid-alps 0003:044E:1215.000E: parse failed [ 393.972925][ T941] hid-alps 0003:044E:1215.000E: probe with driver hid-alps failed with error -22 [ 394.054833][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 394.054857][ T29] audit: type=1400 audit(1727502160.538:1472): avc: denied { create } for pid=14289 comm="syz.2.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 394.166581][ T941] usb 2-1: USB disconnect, device number 63 [ 394.364467][T14303] hfsplus: unable to parse mount options [ 394.912600][T14323] openvswitch: netlink: Actions may not be safe on all matching packets [ 395.044766][T14329] tmpfs: Cannot change global quota limit on remount [ 395.066867][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4218'. [ 395.100193][ T29] audit: type=1400 audit(1727502161.528:1473): avc: denied { remount } for pid=14319 comm="syz.2.4214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 395.287227][T14338] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4224'. [ 395.336977][T14338] openvswitch: netlink: Duplicate key (type 0). [ 395.498183][T14348] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4229'. [ 395.534045][T14348] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 396.121203][ T29] audit: type=1400 audit(1727502162.608:1474): avc: denied { mount } for pid=14368 comm="syz.4.4240" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 396.302976][ T29] audit: type=1400 audit(1727502162.778:1475): avc: denied { unmount } for pid=5226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 396.363102][T14379] veth1_macvtap: left promiscuous mode [ 396.378212][T14379] macsec0: entered promiscuous mode [ 396.404704][T14379] macsec0: entered allmulticast mode [ 396.458055][T14380] veth1_macvtap: entered promiscuous mode [ 396.463931][T14380] veth1_macvtap: entered allmulticast mode [ 396.508333][T14380] macsec0: left promiscuous mode [ 396.513447][T14380] macsec0: left allmulticast mode [ 396.521953][T14380] veth1_macvtap: left allmulticast mode [ 396.676969][T14390] netlink: 284 bytes leftover after parsing attributes in process `syz.4.4249'. [ 396.746668][ T5270] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 396.886626][ T938] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 396.916456][ T5270] usb 2-1: Using ep0 maxpacket: 16 [ 396.920813][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4254'. [ 396.923808][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.953660][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.999146][ T5270] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 397.008426][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.019915][ T5270] usb 2-1: config 0 descriptor?? [ 397.070306][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.087190][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.106251][ T938] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 397.115400][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.147040][ T938] usb 4-1: config 0 descriptor?? [ 397.478104][ T5270] microsoft 0003:045E:00F9.000F: hidraw0: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0 [ 397.490042][ T5270] microsoft 0003:045E:00F9.000F: no inputs found [ 397.496278][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 397.496769][ T5270] microsoft 0003:045E:00F9.000F: could not initialize ff, continuing anyway [ 397.569286][ T938] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 397.576621][ T938] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 397.583379][ T938] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 397.603165][ T938] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 397.619016][ T938] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 397.645528][ T938] kye 0003:0458:0138.0010: hidraw1: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 397.667417][ T5270] usb 2-1: USB disconnect, device number 64 [ 397.668279][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.719269][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.747172][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.788561][ T9] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 397.805088][ T5273] usb 4-1: USB disconnect, device number 106 [ 397.824457][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.872373][ T9] usb 3-1: config 0 descriptor?? [ 398.226497][ T941] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 398.312118][ T9] macally 0003:060B:0001.0011: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.2-1/input0 [ 398.409359][ T941] usb 1-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 398.435204][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.457667][ T941] usb 1-1: config 0 descriptor?? [ 398.516674][ T9] usb 3-1: USB disconnect, device number 99 [ 398.895593][ T941] hid-alps 0003:044E:121E.0012: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.0-1/input0 [ 399.094842][ T941] usb 1-1: USB disconnect, device number 101 [ 399.579758][T14487] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 399.617165][ T5271] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 399.788494][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.799927][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.812462][ T5271] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 399.845235][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.864557][ T5271] usb 3-1: config 0 descriptor?? [ 399.968651][ T938] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 400.019646][T14503] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 400.110600][T14505] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 400.123214][T14505] CUSE: unknown device info "3ܟ,̘" [ 400.129273][ T5270] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 400.137880][ T938] usb 2-1: Using ep0 maxpacket: 32 [ 400.143280][T14505] CUSE: DEVNAME unspecified [ 400.151979][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.175943][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.196670][ T938] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 400.205786][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.220926][ T938] usb 2-1: config 0 descriptor?? [ 400.228444][ T938] hub 2-1:0.0: USB hub found [ 400.289448][ T5271] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 400.296877][ T5271] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 400.313889][ T5271] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 400.328313][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.330707][ T5271] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 400.339725][ T5270] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 400.344854][ T5271] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 400.376755][ T5271] kye 0003:0458:0138.0013: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 400.378301][ T5270] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 400.446140][ T938] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 400.461990][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.499697][ T5270] usb 1-1: config 0 descriptor?? [ 400.548526][ T5229] usb 3-1: USB disconnect, device number 100 [ 400.622045][ T29] audit: type=1400 audit(1727502167.098:1476): avc: denied { ioctl } for pid=14514 comm="syz.4.4308" path="socket:[37402]" dev="sockfs" ino=37402 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 400.656300][ T938] usbhid 2-1:0.0: can't add hid device: -71 [ 400.662537][ T938] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 400.707499][ T938] usb 2-1: USB disconnect, device number 65 [ 400.733390][T14519] hugetlbfs: Bad value '%' for mount option 'size' [ 400.733390][T14519] [ 400.734277][ T29] audit: type=1400 audit(1727502167.218:1477): avc: denied { remount } for pid=14518 comm="syz.3.4310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 400.826383][ T29] audit: type=1400 audit(1727502167.308:1478): avc: denied { unmount } for pid=5220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 400.937259][ T5270] kovaplus 0003:1E7D:2D50.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 400.959706][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4313'. [ 401.134169][ T5270] kovaplus 0003:1E7D:2D50.0014: couldn't init struct kovaplus_device [ 401.146223][ T5270] kovaplus 0003:1E7D:2D50.0014: couldn't install mouse [ 401.209269][ T5270] kovaplus 0003:1E7D:2D50.0014: probe with driver kovaplus failed with error -71 [ 401.266488][ T5270] usb 1-1: USB disconnect, device number 102 [ 401.495928][T14546] overlayfs: lower data-only dirs require metacopy support. [ 401.760979][T14559] openvswitch: netlink: nsh attr 13569 is out of range max 3 [ 401.960581][T14565] Process accounting resumed [ 402.041073][T14565] Process accounting resumed [ 402.156303][ T941] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 402.266184][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 402.313801][ T941] usb 5-1: Using ep0 maxpacket: 16 [ 402.324560][ T941] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.337852][ T941] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.348236][ T941] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.371469][ T941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 402.379529][ T941] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 402.389252][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.424081][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 402.430484][ T941] usb 5-1: config 0 descriptor?? [ 402.440514][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.451968][ T5275] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 402.466160][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 402.475285][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.486325][ T9] usb 4-1: config 0 descriptor?? [ 402.636180][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 402.651058][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.678011][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.695713][ T5275] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 402.705369][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.718969][ T5275] usb 1-1: config 0 descriptor?? [ 402.856543][ T941] a4tech 0003:09DA:022B.0015: unknown main item tag 0x0 [ 402.871818][ T941] a4tech 0003:09DA:022B.0015: unknown main item tag 0x0 [ 402.880881][ T941] a4tech 0003:09DA:022B.0015: unknown main item tag 0x0 [ 402.895229][ T941] a4tech 0003:09DA:022B.0015: unknown main item tag 0x0 [ 402.911792][ T9] uclogic 0003:5543:0004.0016: No inputs registered, leaving [ 402.928653][ T941] a4tech 0003:09DA:022B.0015: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.4-1/input0 [ 402.950869][ T9] uclogic 0003:5543:0004.0016: hidraw1: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 403.062095][ T9] usb 5-1: USB disconnect, device number 105 [ 403.073369][ T29] audit: type=1400 audit(1727502169.558:1479): avc: denied { map } for pid=14601 comm="syz.2.4349" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 403.093804][T14602] binder_alloc: binder_alloc_mmap_handler: 14601 20ffc000-20ffe000 already mapped failed -16 [ 403.118045][ T5229] usb 4-1: USB disconnect, device number 107 [ 403.173438][ T5275] steelseries 0003:1038:1410.0017: unknown main item tag 0xd [ 403.216211][ T5275] steelseries 0003:1038:1410.0017: item fetching failed at offset 6/7 [ 403.227231][ T5275] steelseries 0003:1038:1410.0017: parse failed [ 403.244863][ T5275] steelseries 0003:1038:1410.0017: probe with driver steelseries failed with error -22 [ 403.403255][ T5275] usb 1-1: USB disconnect, device number 103 [ 404.536135][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 404.689040][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.710849][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.731121][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 404.742901][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.769300][ T9] usb 5-1: config 0 descriptor?? [ 405.201698][ T9] wacom 0003:056A:033D.0018: Unknown device_type for 'HID 056a:033d'. Assuming pen. [ 405.213096][ T9] wacom 0003:056A:033D.0018: hidraw0: USB HID v0.00 Device [HID 056a:033d] on usb-dummy_hcd.4-1/input0 [ 405.230831][ T9] input: Wacom Intuos P M 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:033D.0018/input/input48 [ 405.402270][ T9] usb 5-1: USB disconnect, device number 106 [ 406.660535][ T29] audit: type=1400 audit(1727502173.148:1480): avc: denied { listen } for pid=14706 comm="syz.0.4401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 407.302208][T14739] rtc_cmos 00:00: Alarms can be up to one day in the future [ 407.428587][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'. [ 407.826125][ T5270] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 407.986367][ T5270] usb 3-1: Using ep0 maxpacket: 8 [ 408.005755][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.032603][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.056451][ T5270] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 408.076637][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.097789][ T5270] usb 3-1: config 0 descriptor?? [ 408.261052][ T29] audit: type=1400 audit(1727502174.698:1481): avc: denied { listen } for pid=14778 comm="syz.0.4436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 408.296384][T14783] futex_wake_op: syz.3.4435 tries to shift op by -1; fix this program [ 408.325903][ T29] audit: type=1400 audit(1727502174.698:1482): avc: denied { ioctl } for pid=14778 comm="syz.0.4436" path="socket:[38175]" dev="sockfs" ino=38175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 408.430687][ T29] audit: type=1400 audit(1727502174.808:1483): avc: denied { write } for pid=14786 comm="syz.1.4438" name="event2" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 408.550468][ T5270] stadia 0003:18D1:9400.0019: unknown main item tag 0x0 [ 408.558113][ T5270] stadia 0003:18D1:9400.0019: unknown main item tag 0x0 [ 408.565130][ T5270] stadia 0003:18D1:9400.0019: unknown main item tag 0x0 [ 408.580088][ T5270] stadia 0003:18D1:9400.0019: unknown main item tag 0x0 [ 408.606340][ T5270] stadia 0003:18D1:9400.0019: unknown main item tag 0x0 [ 408.614237][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4441'. [ 408.630266][ T5270] stadia 0003:18D1:9400.0019: unknown main item tag 0x0 [ 408.638821][ T5270] stadia 0003:18D1:9400.0019: unknown main item tag 0x0 [ 408.672046][ T5270] stadia 0003:18D1:9400.0019: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 408.697251][ T5270] stadia 0003:18D1:9400.0019: no inputs found [ 408.703389][ T5270] stadia 0003:18D1:9400.0019: force feedback init failed [ 408.764786][ T9] usb 3-1: USB disconnect, device number 101 [ 409.136275][T14785] orangefs_mount: mount request failed with -4 [ 409.426090][ T941] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 409.616150][ T941] usb 2-1: Using ep0 maxpacket: 8 [ 409.637390][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.670049][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.713443][ T941] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 409.743960][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.796176][ T5275] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 409.837541][ T941] usb 2-1: config 0 descriptor?? [ 410.016481][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 410.041262][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 232, changing to 11 [ 410.091712][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.160111][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 410.234439][ T29] audit: type=1400 audit(1727502176.628:1484): avc: denied { connect } for pid=14828 comm="syz.0.4457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 410.254066][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.270578][ T5275] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 410.342650][ T941] saitek 0003:06A3:0621.001A: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 410.356091][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.416906][ T5275] usb 3-1: config 0 descriptor?? [ 410.452553][ T29] audit: type=1400 audit(1727502176.638:1485): avc: denied { write } for pid=14828 comm="syz.0.4457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 410.526361][ T941] usb 2-1: USB disconnect, device number 66 [ 410.724555][T14834] mkiss: ax0: crc mode is auto. [ 410.944921][ T5275] smartjoyplus 0003:0B43:0003.001B: hidraw0: USB HID vff.f7 Device [HID 0b43:0003] on usb-dummy_hcd.2-1/input0 [ 411.008491][ T5275] smartjoyplus 0003:0B43:0003.001B: no output reports found [ 411.061182][T14837] [U]  [ 411.125931][ T5275] usb 3-1: USB disconnect, device number 102 [ 411.616158][ T5275] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 411.787586][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 411.836307][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.886109][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.948089][ T5275] usb 1-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 411.978856][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.013102][ T5275] usb 1-1: config 0 descriptor?? [ 412.474417][ T5275] input: HID 05ac:8240 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8240.001C/input/input51 [ 412.740830][ T5275] appleir 0003:05AC:8240.001C: input,hiddev0,hidraw0: USB HID v0.20 Device [HID 05ac:8240] on usb-dummy_hcd.0-1/input0 [ 412.850704][ T5275] usb 1-1: USB disconnect, device number 104 [ 413.667834][T14863] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 414.995995][ C1] sched: DL replenish lagged too much [ 415.292514][T14820] syz.4.4452: vmalloc error: size 3932160, failed to allocated page array size 7680, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 415.403124][T14820] CPU: 0 UID: 0 PID: 14820 Comm: syz.4.4452 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 415.413627][T14820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 415.423736][T14820] Call Trace: [ 415.427087][T14820] [ 415.430057][T14820] dump_stack_lvl+0x16c/0x1f0 [ 415.434796][T14820] warn_alloc+0x24d/0x3a0 [ 415.439188][T14820] ? __pfx_warn_alloc+0x10/0x10 [ 415.444111][T14820] ? __get_vm_area_node+0x190/0x2d0 [ 415.449372][T14820] ? __get_vm_area_node+0x1bc/0x2d0 [ 415.454642][T14820] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 415.460683][T14820] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 415.466895][T14820] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 415.473290][T14820] ? __get_vm_area_node+0x190/0x2d0 [ 415.478559][T14820] ? __get_vm_area_node+0x1bc/0x2d0 [ 415.483836][T14820] __vmalloc_node_range_noprof+0xd85/0x15a0 [ 415.489782][T14820] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 415.496000][T14820] ? __mutex_trylock_common+0xea/0x250 [ 415.501525][T14820] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 415.507742][T14820] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 415.514134][T14820] ? rcu_is_watching+0x12/0xc0 [ 415.518978][T14820] ? rcu_is_watching+0x12/0xc0 [ 415.523819][T14820] ? trace_kmalloc+0x2d/0xe0 [ 415.528470][T14820] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 415.534253][T14820] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 415.540469][T14820] __kvmalloc_node_noprof+0x14f/0x1a0 [ 415.545902][T14820] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 415.552107][T14820] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 415.558142][T14820] vivid_update_format_cap+0x127b/0x2530 [ 415.563844][T14820] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 415.569887][T14820] ? v4l2_match_dv_timings+0x1df/0x1010 [ 415.575501][T14820] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 415.581307][T14820] vidioc_s_dv_timings+0xa5/0xc0 [ 415.586308][T14820] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 415.591666][T14820] __video_do_ioctl+0xaf0/0xf00 [ 415.596588][T14820] ? __pfx___video_do_ioctl+0x10/0x10 [ 415.602036][T14820] video_usercopy+0x4ce/0x1600 [ 415.606864][T14820] ? __pfx___video_do_ioctl+0x10/0x10 [ 415.612310][T14820] ? __pfx_video_usercopy+0x10/0x10 [ 415.617603][T14820] v4l2_ioctl+0x1ba/0x250 [ 415.621990][T14820] ? __pfx_v4l2_ioctl+0x10/0x10 [ 415.626900][T14820] __x64_sys_ioctl+0x18f/0x220 [ 415.631726][T14820] do_syscall_64+0xcd/0x250 [ 415.636289][T14820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.642292][T14820] RIP: 0033:0x7f8b3cd7dff9 [ 415.646762][T14820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.666419][T14820] RSP: 002b:00007f8b3dbb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.674885][T14820] RAX: ffffffffffffffda RBX: 00007f8b3cf35f80 RCX: 00007f8b3cd7dff9 [ 415.682900][T14820] RDX: 0000000020000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 415.690915][T14820] RBP: 00007f8b3cdf0296 R08: 0000000000000000 R09: 0000000000000000 [ 415.698924][T14820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.706935][T14820] R13: 0000000000000000 R14: 00007f8b3cf35f80 R15: 00007ffc285e5878 [ 415.714977][T14820] [ 416.356174][ T941] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 416.376117][T14820] Mem-Info: [ 416.379278][T14820] active_anon:4366 inactive_anon:0 isolated_anon:0 [ 416.379278][T14820] active_file:11469 inactive_file:38702 isolated_file:0 [ 416.379278][T14820] unevictable:768 dirty:438 writeback:0 [ 416.379278][T14820] slab_reclaimable:9981 slab_unreclaimable:101217 [ 416.379278][T14820] mapped:21916 shmem:1236 pagetables:875 [ 416.379278][T14820] sec_pagetables:0 bounce:0 [ 416.379278][T14820] kernel_misc_reclaimable:0 [ 416.379278][T14820] free:1281496 free_pcp:4090 free_cma:0 [ 416.567197][ T941] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 416.596101][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.660621][ T941] usb 1-1: config 0 descriptor?? [ 416.690945][ T941] cp210x 1-1:0.0: cp210x converter detected [ 416.706545][T14820] Node 0 active_anon:17264kB inactive_anon:0kB active_file:45820kB inactive_file:154732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87508kB dirty:1752kB writeback:0kB shmem:3408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10040kB pagetables:3300kB sec_pagetables:0kB all_unreclaimable? no [ 416.921323][T14820] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 417.116418][ T941] usb 1-1: cp210x converter now attached to ttyUSB0 [ 417.134968][T14820] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.376371][ T941] usb 1-1: USB disconnect, device number 105 [ 417.384513][T14820] lowmem_reserve[]: 0 2461 2461 0 0 [ 417.416112][T14820] Node 0 DMA32 free:1195928kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:17416kB inactive_anon:0kB active_file:45820kB inactive_file:154412kB unevictable:1536kB writepending:1756kB present:3129332kB managed:2549168kB mlocked:0kB bounce:0kB free_pcp:4160kB local_pcp:836kB free_cma:0kB [ 417.486984][ T941] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 417.569785][ T941] cp210x 1-1:0.0: device disconnected [ 417.623313][T14820] lowmem_reserve[]: 0 0 0 0 0 [ 417.648471][T14820] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.763098][T14820] lowmem_reserve[]: 0 0 0 0 0 [ 417.786164][T14820] Node 1 Normal free:3915508kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12844kB local_pcp:0kB free_cma:0kB [ 417.817873][T14583] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 417.926106][T14820] lowmem_reserve[]: 0 0 0 0 0 [ 417.946102][T14820] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 418.006150][T14583] usb 2-1: Using ep0 maxpacket: 8 [ 418.028572][T14583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.046593][T14820] Node 0 DMA32: 8*4kB (UME) 137*8kB (ME) 466*16kB (UME) 432*32kB (UME) 335*64kB (UME) 102*128kB (UME) 16*256kB (UM) 95*512kB (UM) 192*1024kB (UM) 10*2048kB (UME) 212*4096kB (UM) = 1195080kB [ 418.098721][T14583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.156622][T14583] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 418.165735][T14583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.180958][T14820] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 418.248830][T14820] Node 1 Normal: 3*4kB (UME) 33*8kB (UME) 30*16kB (UME) 152*32kB (UME) 92*64kB (UE) 32*128kB (UME) 14*256kB (UE) 6*512kB (U) 4*1024kB (UME) 3*2048kB (UME) 948*4096kB (M) = 3915508kB [ 418.300746][T14583] usb 2-1: config 0 descriptor?? [ 418.396850][T14820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.456106][T14820] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 418.520261][T14820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.586041][T14820] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.654938][T14820] 51408 total pagecache pages [ 418.673709][T14820] 0 pages in swap cache [ 418.696251][T14820] Free swap = 124480kB [ 418.700487][T14820] Total swap = 124996kB [ 418.733678][T14583] logitech 0003:046D:C20E.001D: rdesc size test failed for formula gp [ 418.764034][T14820] 2097051 pages RAM [ 418.786181][T14583] logitech 0003:046D:C20E.001D: unbalanced delimiter at end of report description [ 418.796145][T14820] 0 pages HighMem/MovableOnly [ 418.832808][T14820] 428037 pages reserved [ 418.842938][T14820] 0 pages cma reserved [ 418.861405][T14583] logitech 0003:046D:C20E.001D: parse failed [ 419.347391][T14583] logitech 0003:046D:C20E.001D: probe with driver logitech failed with error -22 [ 446.613500][T14583] usb 2-1: USB disconnect, device number 67 [ 447.216429][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.233585][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 490.578039][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.925909][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 523.932927][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14940/1:b..l P14946/2:b..l [ 523.942812][ C1] rcu: (detected by 1, t=10503 jiffies, g=62173, q=667408 ncpus=2) [ 523.950841][ C1] task:syz.0.4512 state:R running task stack:25904 pid:14946 tgid:14945 ppid:5221 flags:0x00000000 [ 523.963979][ C1] Call Trace: [ 523.967298][ C1] [ 523.970270][ C1] __schedule+0xef5/0x5750 [ 523.974742][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 523.980599][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.985850][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 523.991705][ C1] ? hlock_class+0x4e/0x130 [ 523.996278][ C1] ? __pfx___schedule+0x10/0x10 [ 524.001183][ C1] ? __pfx_netif_rx_internal+0x10/0x10 [ 524.006705][ C1] ? eth_type_trans+0x2f7/0x740 [ 524.011616][ C1] ? find_held_lock+0x2d/0x110 [ 524.016464][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 524.021903][ C1] preempt_schedule_common+0x44/0xc0 [ 524.027249][ C1] preempt_schedule_thunk+0x1a/0x30 [ 524.032516][ C1] ? __dev_queue_xmit+0x872/0x4400 [ 524.037682][ C1] __local_bh_enable_ip+0x107/0x120 [ 524.042932][ C1] ? __dev_queue_xmit+0x872/0x4400 [ 524.048105][ C1] __dev_queue_xmit+0x887/0x4400 [ 524.053111][ C1] ? hlock_class+0x4e/0x130 [ 524.057675][ C1] ? __lock_acquire+0x163e/0x3ce0 [ 524.062772][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 524.068208][ C1] ? hlock_class+0x4e/0x130 [ 524.072768][ C1] ? mark_lock+0xb5/0xc60 [ 524.077165][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 524.082425][ C1] ? __nf_conntrack_confirm+0x989/0x1120 [ 524.088197][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 524.093531][ C1] ? __pfx_mark_lock+0x10/0x10 [ 524.098370][ C1] ? find_held_lock+0x2d/0x110 [ 524.103201][ C1] ? __ip_finish_output+0x49e/0x950 [ 524.108456][ C1] ? __pfx_lock_release+0x10/0x10 [ 524.113564][ C1] ? mark_held_locks+0x9f/0xe0 [ 524.118405][ C1] ip_finish_output2+0x16d7/0x2530 [ 524.123584][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 524.129092][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 524.133995][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 524.139250][ C1] __ip_finish_output+0x49e/0x950 [ 524.144334][ C1] ip_finish_output+0x31/0x310 [ 524.149153][ C1] ip_output+0x13b/0x2a0 [ 524.153451][ C1] ? __pfx_ip_output+0x10/0x10 [ 524.158286][ C1] ip_local_out+0x33e/0x4a0 [ 524.162847][ C1] __ip_queue_xmit+0x747/0x1940 [ 524.167769][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 524.172949][ C1] __tcp_transmit_skb+0x2a4c/0x3dc0 [ 524.178247][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 524.183862][ C1] ? __pfx_lock_release+0x10/0x10 [ 524.188989][ C1] ? tcp_fastopen_no_cookie+0x158/0x1a0 [ 524.194588][ C1] tcp_connect+0x2471/0x5480 [ 524.199262][ C1] ? mark_held_locks+0x9f/0xe0 [ 524.204104][ C1] ? __pfx_tcp_connect+0x10/0x10 [ 524.209116][ C1] ? get_random_u16+0x588/0x7e0 [ 524.214017][ C1] ? tcp_fastopen_cookie_check+0x287/0x310 [ 524.219879][ C1] ? xfrm_lookup_route+0x6a/0x200 [ 524.224961][ C1] tcp_v4_connect+0x14f7/0x1b80 [ 524.229875][ C1] ? __pfx_tcp_v4_connect+0x10/0x10 [ 524.235232][ C1] __inet_stream_connect+0x3c7/0x1020 [ 524.240679][ C1] ? __pfx___inet_stream_connect+0x10/0x10 [ 524.246552][ C1] tcp_sendmsg_fastopen+0x3d7/0x700 [ 524.251816][ C1] tcp_sendmsg_locked+0x2016/0x3750 [ 524.257079][ C1] ? mark_lock+0xb5/0xc60 [ 524.261468][ C1] ? smc_switch_to_fallback+0x5a6/0xa00 [ 524.267062][ C1] ? __pfx_lock_release+0x10/0x10 [ 524.272154][ C1] ? __pfx_mark_lock+0x10/0x10 [ 524.277052][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 524.282396][ C1] ? find_held_lock+0x2d/0x110 [ 524.287218][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 524.292830][ C1] ? tcp_sendmsg+0x20/0x50 [ 524.297341][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 524.302779][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 524.308127][ C1] tcp_sendmsg+0x2e/0x50 [ 524.312427][ C1] ? __pfx_tcp_sendmsg+0x10/0x10 [ 524.317422][ C1] inet_sendmsg+0xb9/0x140 [ 524.321974][ C1] smc_sendmsg+0x221/0x520 [ 524.326439][ C1] ____sys_sendmsg+0xaaf/0xc90 [ 524.331258][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.336603][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 524.341863][ C1] ___sys_sendmsg+0x135/0x1e0 [ 524.346595][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.351868][ C1] ? lock_acquire+0x2f/0xb0 [ 524.356409][ C1] ? __fget_files+0x40/0x3f0 [ 524.361068][ C1] ? fdget+0x176/0x210 [ 524.365197][ C1] __sys_sendmsg+0x117/0x1f0 [ 524.369854][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 524.375037][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 524.380054][ C1] do_syscall_64+0xcd/0x250 [ 524.384621][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.390563][ C1] RIP: 0033:0x7f6f3fd7dff9 [ 524.395018][ C1] RSP: 002b:00007f6f40b49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.403478][ C1] RAX: ffffffffffffffda RBX: 00007f6f3ff35f80 RCX: 00007f6f3fd7dff9 [ 524.411494][ C1] RDX: 0000000020000080 RSI: 0000000020000840 RDI: 0000000000000003 [ 524.419502][ C1] RBP: 00007f6f3fdf0296 R08: 0000000000000000 R09: 0000000000000000 [ 524.427507][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.435512][ C1] R13: 0000000000000000 R14: 00007f6f3ff35f80 R15: 00007ffe1b8723b8 [ 524.443631][ C1] [ 524.446685][ C1] task:syz.3.4510 state:R running task stack:27536 pid:14940 tgid:14937 ppid:5220 flags:0x00004000 [ 524.458610][ C1] Call Trace: [ 524.461923][ C1] [ 524.464902][ C1] __schedule+0xef5/0x5750 [ 524.469374][ C1] ? hlock_class+0x4e/0x130 [ 524.473941][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 524.479215][ C1] ? __pfx_mark_lock+0x10/0x10 [ 524.484068][ C1] ? __pfx___schedule+0x10/0x10 [ 524.488978][ C1] ? find_held_lock+0x2d/0x110 [ 524.493818][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 524.499264][ C1] preempt_schedule_common+0x44/0xc0 [ 524.504622][ C1] preempt_schedule_thunk+0x1a/0x30 [ 524.509891][ C1] _raw_spin_unlock+0x3e/0x50 [ 524.514608][ C1] unmap_page_range+0xb01/0x3cf0 [ 524.519619][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 524.525049][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 524.530041][ C1] ? uprobe_munmap+0x20/0x5c0 [ 524.534776][ C1] unmap_single_vma+0x194/0x2b0 [ 524.539674][ C1] unmap_vmas+0x22f/0x490 [ 524.544054][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 524.548954][ C1] ? __pfx_lock_release+0x10/0x10 [ 524.554047][ C1] ? lock_acquire+0x2f/0xb0 [ 524.558594][ C1] ? mlock_drain_local+0x6f/0x4f0 [ 524.563696][ C1] exit_mmap+0x1c6/0xb30 [ 524.568004][ C1] ? trace_contention_end+0xea/0x140 [ 524.573339][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 524.578239][ C1] ? __mutex_lock+0x1a6/0x9c0 [ 524.583031][ C1] __mmput+0x12a/0x480 [ 524.587158][ C1] mmput+0x62/0x70 [ 524.590945][ C1] do_exit+0x9bf/0x2d70 [ 524.595157][ C1] ? get_signal+0x8f2/0x2770 [ 524.599807][ C1] ? __pfx_do_exit+0x10/0x10 [ 524.604468][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 524.609544][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 524.614973][ C1] do_group_exit+0xd3/0x2a0 [ 524.619535][ C1] get_signal+0x25fb/0x2770 [ 524.624094][ C1] ? __pfx_get_signal+0x10/0x10 [ 524.628989][ C1] ? __pfx_do_futex+0x10/0x10 [ 524.633720][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 524.639382][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 524.645611][ C1] ? __do_sys_rt_sigreturn+0x161/0x230 [ 524.651133][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 524.656998][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 524.662683][ C1] do_syscall_64+0xda/0x250 [ 524.667333][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.673281][ C1] RIP: 0033:0x7f2d8a57dff9 [ 524.677756][ C1] RSP: 002b:00007f2d8b3b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 524.686222][ C1] RAX: fffffffffffffe00 RBX: 00007f2d8a735f88 RCX: 00007f2d8a57dff9 [ 524.694239][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2d8a735f88 [ 524.702249][ C1] RBP: 00007f2d8a735f80 R08: 0000000000000000 R09: 0000000000000000 [ 524.710258][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d8a735f8c [ 524.718272][ C1] R13: 0000000000000000 R14: 00007ffca68d3050 R15: 00007ffca68d3138 [ 524.726314][ C1] [ 524.729369][ C1] rcu: rcu_preempt kthread starved for 10576 jiffies! g62173 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 524.740718][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 524.750722][ C1] rcu: RCU grace-period kthread stack dump: [ 524.756646][ C1] task:rcu_preempt state:R running task stack:27408 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 524.768505][ C1] Call Trace: [ 524.771818][ C1] [ 524.774785][ C1] __schedule+0xef5/0x5750 [ 524.779270][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 524.784541][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 524.789973][ C1] ? __pfx___schedule+0x10/0x10 [ 524.794869][ C1] ? schedule+0x298/0x350 [ 524.799242][ C1] ? __pfx_lock_release+0x10/0x10 [ 524.804333][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 524.809593][ C1] ? lock_acquire+0x2f/0xb0 [ 524.814133][ C1] ? schedule+0x1fd/0x350 [ 524.818521][ C1] schedule+0xe7/0x350 [ 524.822688][ C1] schedule_timeout+0x136/0x2a0 [ 524.827605][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 524.833034][ C1] ? __pfx_process_timeout+0x10/0x10 [ 524.838480][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 524.844426][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 524.849938][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 524.854770][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 524.860121][ C1] ? rcu_gp_init+0xc82/0x1630 [ 524.864892][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 524.870154][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 524.876024][ C1] rcu_gp_kthread+0x271/0x380 [ 524.880754][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 524.885998][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 524.891252][ C1] ? __kthread_parkme+0x148/0x220 [ 524.896339][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 524.901584][ C1] kthread+0x2c1/0x3a0 [ 524.905699][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.910944][ C1] ? __pfx_kthread+0x10/0x10 [ 524.915589][ C1] ret_from_fork+0x45/0x80 [ 524.920044][ C1] ? __pfx_kthread+0x10/0x10 [ 524.924687][ C1] ret_from_fork_asm+0x1a/0x30 [ 524.929525][ C1] [ 524.932608][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 524.938992][ C1] Sending NMI from CPU 1 to CPUs 0: [ 524.944240][ C0] NMI backtrace for cpu 0 [ 524.944263][ C0] CPU: 0 UID: 0 PID: 941 Comm: kworker/0:2 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 524.944294][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.944317][ C0] Workqueue: events_power_efficient gc_worker [ 524.944349][ C0] RIP: 0010:__lock_acquire+0xbc2/0x3ce0 [ 524.944391][ C0] Code: ff df 48 c1 ea 03 0f b6 14 02 48 c7 c0 54 5a 5f 90 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 d3 30 00 00 44 8b 1d 52 5b f5 0e <45> 85 db 75 40 44 8b 54 24 08 45 85 d2 0f 85 65 08 00 00 4c 89 ef [ 524.944415][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00000046 [ 524.944434][ C0] RAX: 0000000000000007 RBX: e3a7f52acf58201d RCX: ffffffff816a0198 [ 524.944452][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000003a7f52ae [ 524.944468][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2dc4588 [ 524.944484][ C0] R10: ffffffff96e22c47 R11: 0000000000000000 R12: dffffc0000000000 [ 524.944501][ C0] R13: ffff888025fb4780 R14: 0000000000000002 R15: ffff888025fb3c00 [ 524.944518][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 524.944542][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.944560][ C0] CR2: 0000001b31f16ff8 CR3: 000000000df7c000 CR4: 00000000003506f0 [ 524.944577][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 524.944592][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 524.944608][ C0] Call Trace: [ 524.944615][ C0] [ 524.944624][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 524.944650][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 524.944688][ C0] ? nmi_handle+0x1a9/0x5c0 [ 524.944713][ C0] ? __lock_acquire+0xbc2/0x3ce0 [ 524.944751][ C0] ? default_do_nmi+0x6a/0x160 [ 524.944787][ C0] ? exc_nmi+0x170/0x1e0 [ 524.944823][ C0] ? end_repeat_nmi+0xf/0x53 [ 524.944855][ C0] ? __lock_acquire+0xe58/0x3ce0 [ 524.944893][ C0] ? __lock_acquire+0xbc2/0x3ce0 [ 524.944932][ C0] ? __lock_acquire+0xbc2/0x3ce0 [ 524.944969][ C0] ? __lock_acquire+0xbc2/0x3ce0 [ 524.945007][ C0] [ 524.945015][ C0] [ 524.945029][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 524.945071][ C0] lock_acquire.part.0+0x11b/0x380 [ 524.945095][ C0] ? nf_hook.constprop.0+0xa4/0x750 [ 524.945133][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 524.945156][ C0] ? rcu_is_watching+0x12/0xc0 [ 524.945186][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 524.945221][ C0] ? nf_hook.constprop.0+0x45d/0x750 [ 524.945255][ C0] ? nf_hook.constprop.0+0xa4/0x750 [ 524.945292][ C0] ? lock_acquire+0x2f/0xb0 [ 524.945312][ C0] ? nf_hook.constprop.0+0xa4/0x750 [ 524.945349][ C0] nf_hook.constprop.0+0xaa/0x750 [ 524.945383][ C0] ? nf_hook.constprop.0+0xa4/0x750 [ 524.945418][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 524.945458][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 524.945494][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 524.945536][ C0] ip_local_deliver+0x169/0x1f0 [ 524.945572][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 524.945608][ C0] ip_rcv+0x2c3/0x5d0 [ 524.945643][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 524.945677][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 524.945710][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 524.945743][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 524.945773][ C0] ? process_backlog+0x3f1/0x15f0 [ 524.945804][ C0] ? process_backlog+0x3f1/0x15f0 [ 524.945833][ C0] __netif_receive_skb+0x1d/0x160 [ 524.945866][ C0] process_backlog+0x443/0x15f0 [ 524.945899][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 524.945932][ C0] net_rx_action+0xa92/0x1010 [ 524.945963][ C0] ? tmigr_handle_remote+0x153/0xdd0 [ 524.945991][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 524.946021][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 524.946046][ C0] ? run_timer_base+0x119/0x190 [ 524.946086][ C0] ? run_timer_base+0x11e/0x190 [ 524.946118][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 524.946153][ C0] handle_softirqs+0x213/0x8f0 [ 524.946183][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 524.946217][ C0] irq_exit_rcu+0xbb/0x120 [ 524.946243][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 524.946271][ C0] [ 524.946279][ C0] [ 524.946287][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.946317][ C0] RIP: 0010:gc_worker+0x2e1/0x1760 [ 524.946346][ C0] Code: 00 00 48 c7 c7 08 d1 5f 90 e8 6b 96 28 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 59 79 4b f8 48 85 db 58 0f 85 3d 10 00 00 da 76 4b f8 eb 07 e8 d3 76 4b f8 f3 90 44 8b 35 3a 32 1e 07 44 [ 524.946369][ C0] RSP: 0018:ffffc90004107bc8 EFLAGS: 00000293 [ 524.946387][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8941aa6a [ 524.946404][ C0] RDX: ffff888025fb3c00 RSI: ffffffff8941aa79 RDI: 0000000000000007 [ 524.946420][ C0] RBP: ffff88802e200000 R08: 0000000000000007 R09: 0000000000000000 [ 524.946437][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000d85a [ 524.946452][ C0] R13: dffffc0000000000 R14: 000000000001b0b3 R15: 0000000000040000 [ 524.946472][ C0] ? gc_worker+0xe9a/0x1760 [ 524.946500][ C0] ? gc_worker+0xea9/0x1760 [ 524.946528][ C0] ? gc_worker+0xea9/0x1760 [ 524.946556][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 524.946582][ C0] ? __pfx_gc_worker+0x10/0x10 [ 524.946610][ C0] ? lock_acquire+0x2f/0xb0 [ 524.946631][ C0] ? process_one_work+0x921/0x1ba0 [ 524.946656][ C0] process_one_work+0x9c5/0x1ba0 [ 524.946682][ C0] ? __pfx_defense_work_handler+0x10/0x10 [ 524.946708][ C0] ? __pfx_process_one_work+0x10/0x10 [ 524.946735][ C0] ? assign_work+0x1a0/0x250 [ 524.946773][ C0] worker_thread+0x6c8/0xf00 [ 524.946818][ C0] ? __kthread_parkme+0x148/0x220 [ 524.946851][ C0] ? __pfx_worker_thread+0x10/0x10 [ 524.946876][ C0] kthread+0x2c1/0x3a0 [ 524.946904][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.946931][ C0] ? __pfx_kthread+0x10/0x10 [ 524.946963][ C0] ret_from_fork+0x45/0x80 [ 524.946985][ C0] ? __pfx_kthread+0x10/0x10 [ 524.947016][ C0] ret_from_fork_asm+0x1a/0x30 [ 524.947061][ C0]