last executing test programs: 54.242390852s ago: executing program 4 (id=6421): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) 53.157139084s ago: executing program 4 (id=6442): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x20, 0xfb, 0x6}]}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 52.182113159s ago: executing program 4 (id=6452): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 52.039982735s ago: executing program 4 (id=6455): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fsopen(&(0x7f00000001c0)='romfs\x00', 0x0) 50.718614382s ago: executing program 4 (id=6464): openat$cuse(0xffffffffffffff9c, &(0x7f0000001d40), 0x2842, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 50.608986178s ago: executing program 4 (id=6466): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='1', 0x1) 37.456234208s ago: executing program 2 (id=6643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)="31303017", 0x4) 37.161998269s ago: executing program 2 (id=6646): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001451cced3f65a52000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38) 37.022088334s ago: executing program 2 (id=6648): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000240)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 36.966135136s ago: executing program 2 (id=6649): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000020c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002180)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}]}, 0x1c}}, 0x0) 36.89785574s ago: executing program 2 (id=6651): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd/exports\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 36.790539677s ago: executing program 2 (id=6653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 35.497404318s ago: executing program 32 (id=6466): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='1', 0x1) 21.782906857s ago: executing program 33 (id=6653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 14.839369999s ago: executing program 1 (id=6905): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x8084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 14.600208684s ago: executing program 1 (id=6908): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1, 0x1f5}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) 13.813235238s ago: executing program 1 (id=6910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(0x3) 13.629038596s ago: executing program 1 (id=6911): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 13.41363938s ago: executing program 1 (id=6913): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / -4\n', 0xe) 13.121511861s ago: executing program 1 (id=6915): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0xfffffffd, 0x25dfdbff, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.660813855s ago: executing program 0 (id=7084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x40, 0x8}}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x64}}, 0x0) 1.434429376s ago: executing program 0 (id=7087): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000540), 0xfffffecc) splice(r1, 0x0, r0, 0x0, 0x4ffe2, 0x3) 888.254995ms ago: executing program 3 (id=7093): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffc, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 798.882113ms ago: executing program 3 (id=7096): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001800010400000000000000000a000000fe03000100000000080004000100000008000600640000000600150007000000140016800800010006000000080004"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 751.324422ms ago: executing program 5 (id=7097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d10300000c000440000000002df31abd240000800c00044000000000000000050800034000000002"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 687.592675ms ago: executing program 3 (id=7099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050027bd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80080000000000000004"], 0x30}}, 0x0) 650.583912ms ago: executing program 3 (id=7100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000106, 0x0, 0xfffffffffffffff5}]}) 608.662285ms ago: executing program 6 (id=7101): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r0, 0x400c4d02, &(0x7f00000001c0)) 535.600966ms ago: executing program 5 (id=7102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='select pid=1\nuse_group 0\nnetwork inet stream bind @grp1 0-65535\nnetwork inet dgram bind @grp1 0-65535\nselect pid=2\n', 0x73) 518.301293ms ago: executing program 0 (id=7103): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6d276b17) 502.783399ms ago: executing program 3 (id=7104): openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x1, &(0x7f0000000400)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 478.325927ms ago: executing program 6 (id=7105): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0xfffffffffffffffc]}}) 375.278324ms ago: executing program 5 (id=7106): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 356.583878ms ago: executing program 6 (id=7107): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x27b, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r0, &(0x7f0000000140)="89", 0xfd36) 355.254151ms ago: executing program 3 (id=7108): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='\b', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0xff, 0x4d, 0x1, 0xff}}], 0x20, 0x4048000}, 0x20000050) 293.205986ms ago: executing program 0 (id=7109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x101000, 0x0) preadv(r0, &(0x7f0000003e80)=[{&(0x7f0000001c80)=""/4111, 0x100f}], 0x1, 0xfffffffc, 0x10) 258.106411ms ago: executing program 5 (id=7110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd04, &(0x7f0000000800)="040000000000000000000000380100") 204.76966ms ago: executing program 6 (id=7111): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0xc884) 203.823956ms ago: executing program 0 (id=7112): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x2, 0x0, 0x5, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @random="3cdc119848ac", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1d, 0x34, 0x64, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0xfdfc, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x7, 0x0, 0x8, {[@timestamp={0x8, 0xa, 0x1, 0x464}]}}}}}}}, 0x0) 99.780899ms ago: executing program 5 (id=7113): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x62181) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000380)={0x1f, 0x1, 0x0, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0) 99.476921ms ago: executing program 6 (id=7114): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x25) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 74.762148ms ago: executing program 0 (id=7115): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 26.049355ms ago: executing program 6 (id=7116): mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') socket$kcm(0x11, 0x3, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) 0s ago: executing program 5 (id=7117): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000ffff"}, 0x0, 0x2, {&(0x7f00000001c0)}, 0x400000}) kernel console output (not intermixed with test programs): ][T18320] Bluetooth: hci5: Frame reassembly failed (-84) [ 400.735640][T15751] usb 3-1: Using ep0 maxpacket: 32 [ 400.737237][T15751] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 400.739762][T15751] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 400.739824][T15751] usb 3-1: config 0 has no interface number 0 [ 400.741969][T15751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.741996][T15751] usb 3-1: Product: syz [ 400.742014][T15751] usb 3-1: Manufacturer: syz [ 400.742030][T15751] usb 3-1: SerialNumber: syz [ 400.749022][T15751] usb 3-1: config 0 descriptor?? [ 400.763213][T15751] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 400.899904][ T30] audit: type=1326 audit(1792315182.181:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18324 comm="syz.4.5574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5acbf9e559 code=0x0 [ 400.977015][T15751] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 400.986471][T15751] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 401.009236][T18330] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5576'. [ 401.220313][T18340] netlink: 'syz.0.5581': attribute type 7 has an invalid length. [ 401.220339][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5581'. [ 401.220367][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5581'. [ 401.403360][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 401.403801][T15751] usb 3-1: USB disconnect, device number 73 [ 401.454756][T15751] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 401.463139][T15751] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 401.463776][T15751] quatech2 3-1:0.51: device disconnected [ 401.488631][T15735] kernel read not supported for file /fail_usercopy/probability (pid: 15735 comm: kworker/1:8) [ 401.581932][ T30] audit: type=1400 audit(1792315182.861:1719): avc: denied { mounton } for pid=18356 comm="syz.0.5588" path="/1199/file0" dev="tmpfs" ino=6101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 401.589942][ T30] audit: type=1400 audit(1792315182.871:1720): avc: denied { mount } for pid=18356 comm="syz.0.5588" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 401.591675][ T30] audit: type=1400 audit(1792315182.871:1721): avc: denied { mounton } for pid=18356 comm="syz.0.5588" path="/1199/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 401.658981][ T30] audit: type=1400 audit(1792315182.941:1722): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 402.392996][T18397] netlink: 'syz.4.5607': attribute type 6 has an invalid length. [ 402.465915][T15735] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 402.616452][T15735] usb 1-1: Using ep0 maxpacket: 8 [ 402.618539][T15735] usb 1-1: unable to get BOS descriptor or descriptor too short [ 402.618589][T15735] usb 1-1: New USB device found, idVendor=1164, idProduct=1e8c, bcdDevice=8a.b2 [ 402.619518][T15735] usb 1-1: config 206 has an invalid interface number: 205 but max is 0 [ 402.619546][T15735] usb 1-1: config 206 has no interface number 0 [ 402.619575][T15735] usb 1-1: config 206 interface 205 has no altsetting 0 [ 402.621661][T15735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.621688][T15735] usb 1-1: Product: syz [ 402.621704][T15735] usb 1-1: Manufacturer: syz [ 402.621722][T15735] usb 1-1: SerialNumber: syz [ 402.666950][ T5607] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 403.103575][T15737] kernel write not supported for file /midi2 (pid: 15737 comm: kworker/1:10) [ 403.280412][T15735] dvb-usb: found a 'YUAN High-Tech DiBcom STK7700D' in warm state. [ 403.284159][T15735] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 403.284765][T15735] dvbdev: DVB: registering new adapter (YUAN High-Tech DiBcom STK7700D) [ 403.284813][T15735] usb 1-1: media controller created [ 403.322821][T18438] sctp: [Deprecated]: syz.2.5626 (pid 18438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.322821][T18438] Use struct sctp_sack_info instead [ 403.339113][T15735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 403.395552][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.435788][T15735] DVB: Unable to find symbol dib7000p_attach() [ 403.435806][T15735] dvb-usb: no frontend was attached by 'YUAN High-Tech DiBcom STK7700D' [ 403.435821][T15735] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 403.436409][T15735] dvbdev: DVB: registering new adapter (YUAN High-Tech DiBcom STK7700D) [ 403.436456][T15735] usb 1-1: media controller created [ 403.453272][T15735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 403.550680][T15735] DVB: Unable to find symbol dib7000p_attach() [ 403.550693][T15735] dvb-usb: no frontend was attached by 'YUAN High-Tech DiBcom STK7700D' [ 403.629180][T15735] rc_core: IR keymap rc-dib0700-rc5 not found [ 403.629196][T15735] Registered IR keymap rc-empty [ 403.629349][T15735] dvb-usb: could not initialize remote control. [ 403.629355][T15735] dvb-usb: YUAN High-Tech DiBcom STK7700D successfully initialized and connected. [ 403.641080][T15735] usb 1-1: USB disconnect, device number 74 [ 403.672117][T18450] bonding: unable to delete non-existent P [ 403.774159][T15735] dvb-usb: YUAN High-Tech DiBcom STK7700D successfully deinitialized and disconnected. [ 404.158542][T18470] netlink: 'syz.3.5640': attribute type 2 has an invalid length. [ 405.006512][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 405.006531][ T30] audit: type=1400 audit(1792315186.291:1728): avc: denied { create } for pid=18507 comm="syz.0.5658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 405.012015][ T30] audit: type=1400 audit(1792315186.291:1729): avc: denied { read } for pid=18507 comm="syz.0.5658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 405.063591][ T30] audit: type=1400 audit(1792315186.341:1730): avc: denied { setopt } for pid=18507 comm="syz.0.5658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 405.066143][ T30] audit: type=1400 audit(1792315186.351:1731): avc: denied { write } for pid=18507 comm="syz.0.5658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 405.497552][T18520] netlink: 'syz.1.5663': attribute type 10 has an invalid length. [ 405.959302][T18530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5668'. [ 406.340494][T18557] batadv_slave_1: entered promiscuous mode [ 406.400632][T18555] batadv_slave_1: left promiscuous mode [ 406.582608][ T30] audit: type=1400 audit(1792315187.861:1732): avc: denied { read } for pid=18572 comm="syz.2.5687" name="features" dev="configfs" ino=59999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 406.584313][ T30] audit: type=1400 audit(1792315187.861:1733): avc: denied { open } for pid=18572 comm="syz.2.5687" path="/1165/config/nullb/features" dev="configfs" ino=59999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 406.601700][T18574] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 406.839755][T18586] sd 0:0:1:0: PR command failed: 1026 [ 406.839814][T18586] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 406.839856][T18586] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 406.839896][ T138] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 406.999789][T18574] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 407.231198][T18603] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 407.769061][ T30] audit: type=1400 audit(1792315189.051:1734): avc: denied { accept } for pid=18623 comm="syz.4.5711" lport=39825 faddr=fc00::fd fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 408.157217][T18647] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5719'. [ 408.161146][ T30] audit: type=1326 audit(1792315189.441:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18643 comm="syz.0.5720" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc59e559 code=0x7ffc0000 [ 408.161278][ T30] audit: type=1326 audit(1792315189.441:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18643 comm="syz.0.5720" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc59e559 code=0x7ffc0000 [ 408.168552][ T30] audit: type=1326 audit(1792315189.451:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18643 comm="syz.0.5720" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc59e559 code=0x7ffc0000 [ 408.726309][T18675] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 408.892400][T18687] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 408.921954][T18686] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 408.948426][T15749] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 408.948639][T15749] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 408.948847][T15749] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 408.949045][T15749] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 408.949063][T15749] rtc rtc0: __rtc_set_alarm: err=-22 [ 409.021966][T18691] netlink: zone id is out of range [ 409.022093][T18691] netlink: set zone limit has 4 unknown bytes [ 409.514801][T18708] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5747'. [ 409.518824][T18708] tipc: Disabling bearer [ 410.100657][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5759'. [ 410.100985][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5759'. [ 410.234931][T18741] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5762'. [ 410.439106][T18753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5768'. [ 410.492890][T18756] loop5: detected capacity change from 0 to 7 [ 410.504598][T18756] Dev loop5: unable to read RDB block 7 [ 410.504630][T18756] loop5: AHDI p1 [ 410.504650][T18756] loop5: partition table partially beyond EOD, truncated [ 410.605160][T15735] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 410.662120][T18762] netlink: 'syz.1.5771': attribute type 2 has an invalid length. [ 410.729362][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 410.729382][ T30] audit: type=1400 audit(1792315192.011:1757): avc: denied { append } for pid=18764 comm="syz.0.5773" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.758656][T15735] usb 3-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 410.759591][T15735] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.759623][T15735] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.759648][T15735] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.759676][T15735] usb 3-1: config 0 interface 0 has no altsetting 0 [ 410.759707][T15735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.770515][T15735] usb 3-1: config 0 descriptor?? [ 411.212412][T15735] input: HID 1b96:0011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B96:0011.007E/input/input108 [ 411.261396][ T30] audit: type=1400 audit(1792315192.541:1758): avc: denied { read } for pid=18780 comm="syz.0.5779" name="nfsv4gracetime" dev="nfsd" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 411.266214][T15735] ntrig 0003:1B96:0011.007E: offset (1) exceeds report_count (1) [ 411.266243][T15735] ntrig 0003:1B96:0011.007E: offset (2) exceeds report_count (1) [ 411.266260][T15735] ntrig 0003:1B96:0011.007E: offset (3) exceeds report_count (1) [ 411.266286][T15735] ntrig 0003:1B96:0011.007E: offset (4) exceeds report_count (1) [ 411.266306][T15735] ntrig 0003:1B96:0011.007E: offset (5) exceeds report_count (1) [ 411.266328][T15735] ntrig 0003:1B96:0011.007E: offset (39) exceeds report_count (1) [ 411.266351][T15735] ntrig 0003:1B96:0011.007E: offset (9) exceeds report_count (1) [ 411.266371][T15735] ntrig 0003:1B96:0011.007E: offset (25) exceeds report_count (1) [ 411.461664][T18785] scsi_dev_info_list_add_str: bad dev info string 'I' '' '' [ 411.477092][T15735] ntrig 0003:1B96:0011.007E: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0011] on usb-dummy_hcd.2-1/input0 [ 411.506891][T15735] usb 3-1: USB disconnect, device number 74 [ 411.569771][T18788] fido_id[18788]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 411.754096][T18796] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 411.754135][T18796] head: order:7 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 411.754155][T18796] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 411.754181][T18796] page_type: f8(unknown) [ 411.754202][T18796] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 411.754226][T18796] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 411.754250][T18796] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 411.754272][T18796] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 411.754294][T18796] head: 00fff00000000007 ffffffffffffe001 00000000ffffffff 00000000ffffffff [ 411.754314][T18796] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000080 [ 411.754329][T18796] page dumped because: unmovable page [ 411.754343][T18796] page_owner tracks the page as allocated [ 411.754351][T18796] page last allocated via order 7, migratetype Unmovable, gfp_mask 0x429c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_ZERO|__GFP_COMP), pid 9733, tgid 9731 (syz.0.1736), ts 183706336982 [ 411.754390][T18796] post_alloc_hook+0xfd/0x120 [ 411.754419][T18796] get_page_from_freelist+0x110d/0x35d0 [ 411.754446][T18796] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 411.754474][T18796] alloc_pages_mpol+0x201/0x550 [ 411.754507][T18796] ___kmalloc_large_node+0xe8/0x130 [ 411.754540][T18796] __kmalloc_large_node_noprof+0x1c/0x70 [ 411.754580][T18796] __kvmalloc_node_noprof+0x5d9/0x9b0 [ 411.754607][T18796] ieee80211_txq_setup_flows+0x1a6/0xdf0 [ 411.754640][T18796] ieee80211_register_hw+0x23ea/0x45c0 [ 411.754672][T18796] mac80211_hwsim_new_radio+0x2b08/0x6510 [ 411.754696][T18796] hwsim_new_radio_nl+0xc6b/0x13f0 [ 411.754720][T18796] genl_family_rcv_msg_doit+0x214/0x300 [ 411.754746][T18796] genl_rcv_msg+0x560/0x800 [ 411.754766][T18796] netlink_rcv_skb+0x159/0x420 [ 411.754786][T18796] genl_rcv+0x28/0x40 [ 411.754805][T18796] netlink_unicast+0x65f/0x950 [ 411.754825][T18796] page last free pid 8129 tgid 8129 ts 144591891245 stack trace: [ 411.754841][T18796] __free_frozen_pages+0x79f/0x10f0 [ 411.754865][T18796] free_pg_vec+0xff/0x180 [ 411.754899][T18796] packet_set_ring+0x70c/0x1f00 [ 411.754924][T18796] packet_release+0x5f0/0xd70 [ 411.754947][T18796] __sock_release+0xb3/0x260 [ 411.786548][ T30] audit: type=1400 audit(1792315193.061:1759): avc: denied { read } for pid=4955 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 411.786599][ T30] audit: type=1400 audit(1792315193.061:1760): avc: denied { search } for pid=4955 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.786641][ T30] audit: type=1400 audit(1792315193.061:1761): avc: denied { write search } for pid=4955 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.787612][ T30] audit: type=1400 audit(1792315193.061:1762): avc: denied { add_name } for pid=4955 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.787654][ T30] audit: type=1400 audit(1792315193.061:1763): avc: denied { create } for pid=4955 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 411.787695][ T30] audit: type=1400 audit(1792315193.061:1764): avc: denied { append open } for pid=4955 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 411.787737][ T30] audit: type=1400 audit(1792315193.061:1765): avc: denied { getattr } for pid=4955 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 411.819319][T18796] sock_close+0x1c/0x30 [ 411.819356][T18796] __fput+0x400/0xb60 [ 411.819391][T18796] task_work_run+0x150/0x240 [ 411.819425][T18796] exit_to_user_mode_loop+0x1d8/0x700 [ 411.819455][T18796] do_syscall_64+0x661/0x790 [ 411.819488][T18796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.283667][ T30] audit: type=1400 audit(1792315193.561:1766): avc: denied { write } for pid=18808 comm="syz.2.5791" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 412.318048][T18812] random: crng reseeded on system resumption [ 412.658152][T18828] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5800'. [ 413.499408][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5812'. [ 413.503759][T18861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.905436][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5823'. [ 413.930021][T18879] veth0_virt_wifi: entered promiscuous mode [ 413.931253][T18879] batadv_slave_0: entered promiscuous mode [ 413.931432][T18879] batadv_slave_0: left promiscuous mode [ 413.964517][T18879] veth0_virt_wifi: left promiscuous mode [ 413.983729][T18882] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 413.984034][T18882] SELinux: failed to load policy [ 414.423071][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5835'. [ 414.646112][T18919] i2c i2c-0: delete_device: Extra parameters [ 416.209125][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 416.209145][ T30] audit: type=1400 audit(1792315197.491:1773): avc: denied { setattr } for pid=18972 comm="syz.2.5865" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 416.372401][T18983] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 416.372494][T18983] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 416.372572][T18983] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 416.372645][T18983] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 416.372718][T18983] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 416.372792][T18983] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 416.372867][T18983] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 416.372942][T18983] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 416.373015][T18983] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 416.373114][T18983] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 416.525239][T15735] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 416.578552][ T30] audit: type=1400 audit(1792315197.861:1774): avc: denied { getopt } for pid=18988 comm="syz.3.5873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 416.676078][T15735] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 416.676993][T15735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.678846][T15735] usb 3-1: config 0 descriptor?? [ 416.684594][T15735] cp210x 3-1:0.0: cp210x converter detected [ 416.832190][ T30] audit: type=1400 audit(1792315198.111:1775): avc: denied { getopt } for pid=18996 comm="syz.0.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 416.944769][ T30] audit: type=1400 audit(1792315198.221:1776): avc: denied { getopt } for pid=18998 comm="syz.0.5878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 417.028370][T19001] binder: 19000:19001 ioctl 4018620d 0 returned -22 [ 417.052098][T19003] MTRR 1 not used [ 417.289144][ T30] audit: type=1400 audit(1792315198.571:1777): avc: denied { map } for pid=19009 comm="syz.1.5883" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 417.299781][T15735] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 417.299835][T15735] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 417.323488][T15735] usb 3-1: cp210x converter now attached to ttyUSB0 [ 417.331692][T15735] usb 3-1: USB disconnect, device number 75 [ 417.347822][T15735] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 417.348309][T15735] cp210x 3-1:0.0: device disconnected [ 417.671754][ T30] audit: type=1400 audit(1792315198.951:1778): avc: denied { ioctl } for pid=19016 comm="syz.4.5886" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=62435 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 419.025757][T15737] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 419.176361][T15737] usb 3-1: Using ep0 maxpacket: 16 [ 419.177035][T15737] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 419.181697][T15737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.181739][T15737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.181765][T15737] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 419.181807][T15737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.188584][T15737] usb 3-1: config 0 descriptor?? [ 419.385257][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.521402][ T30] audit: type=1400 audit(1792315200.801:1779): avc: denied { connect } for pid=19067 comm="syz.3.5905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 419.574079][ T30] audit: type=1400 audit(1792315200.851:1780): avc: denied { accept } for pid=19067 comm="syz.3.5905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 419.611667][T15737] thrustmaster 0003:044F:B654.007F: unknown main item tag 0x0 [ 419.621078][T15737] thrustmaster 0003:044F:B654.007F: force feedback for ThrustMaster devices by Zinx Verituse [ 419.629533][T15737] input: HID 044f:b654 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:044F:B654.007F/input/input109 [ 419.690631][ T30] audit: type=1400 audit(1792315200.971:1781): avc: denied { execute } for pid=19071 comm="syz.1.5907" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 419.732855][T15737] thrustmaster 0003:044F:B654.007F: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b654] on usb-dummy_hcd.2-1/input0 [ 419.838910][T15737] usb 3-1: USB disconnect, device number 76 [ 419.908891][T19073] fido_id[19073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 420.471212][ T30] audit: type=1400 audit(1792315201.751:1782): avc: denied { setopt } for pid=19085 comm="syz.3.5912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 420.505927][T19087] rnbd_client L127: Can't parse path i: -93 [ 420.875424][T15749] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 421.045111][T15749] usb 4-1: Using ep0 maxpacket: 32 [ 421.045885][T15749] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 421.046973][T15749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.049597][T15749] usb 4-1: config 0 descriptor?? [ 421.116231][T15749] as10x_usb: device has been detected [ 421.116903][T15749] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 421.143063][T15749] usb 4-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 421.170287][T15749] as10x_usb: error during firmware upload part1 [ 421.170725][T15749] Registered device nBox DVB-T Dongle [ 421.305930][T15749] usb 4-1: USB disconnect, device number 73 [ 421.425332][T19127] smpboot: CPU 1 is now offline [ 421.533768][T15749] Unregistered device nBox DVB-T Dongle [ 421.538228][T15749] as10x_usb: device has been disconnected [ 422.314445][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 422.314459][ T30] audit: type=1400 audit(1792315203.591:1784): avc: denied { accept } for pid=19164 comm="syz.0.5949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 422.959961][ T30] audit: type=1400 audit(1792315204.241:1785): avc: denied { watch } for pid=19190 comm="syz.2.5961" path="/1209/file0" dev="tmpfs" ino=6152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 422.959995][ T30] audit: type=1400 audit(1792315204.241:1786): avc: denied { watch_sb } for pid=19190 comm="syz.2.5961" path="/1209/file0" dev="tmpfs" ino=6152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 423.198378][T19202] netlink: 'syz.3.5966': attribute type 2 has an invalid length. [ 423.537637][T19207] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 423.588500][ T30] audit: type=1400 audit(1792315204.871:1787): avc: denied { read append } for pid=19217 comm="syz.1.5974" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 423.656734][T19207] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 423.775870][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5976'. [ 424.213392][T19244] netlink: 'syz.2.5985': attribute type 14 has an invalid length. [ 424.409711][T19248] MTRR 1 not used [ 424.515480][T19251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5988'. [ 424.515503][T19251] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5988'. [ 424.616278][T15750] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 424.768808][T15750] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 424.769641][T15750] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.769669][T15750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.232912][T15750] wacom 0003:056A:033B.0080: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 425.241915][T15750] wacom 0003:056A:033B.0080: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 425.278371][T15750] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0080/input/input110 [ 425.440418][ C0] usb 2-1: input irq status -75 received [ 425.636238][ T30] audit: type=1400 audit(1792315206.911:1788): avc: denied { write } for pid=19270 comm="syz.4.5997" name="core" dev="configfs" ino=3573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 425.643923][T15750] usb 2-1: USB disconnect, device number 74 [ 425.687800][ T30] audit: type=1400 audit(1792315206.971:1789): avc: denied { create } for pid=19272 comm="syz.0.5998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 425.736571][ T30] audit: type=1400 audit(1792315207.011:1790): avc: denied { write } for pid=19272 comm="syz.0.5998" path="socket:[63878]" dev="sockfs" ino=63878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 425.792294][ T30] audit: type=1400 audit(1792315207.071:1791): avc: denied { add_name } for pid=19270 comm="syz.4.5997" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 425.794075][ T30] audit: type=1400 audit(1792315207.071:1792): avc: denied { create } for pid=19270 comm="syz.4.5997" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 425.921874][T19271] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 426.423815][ T30] audit: type=1400 audit(1792315207.701:1793): avc: denied { ioctl } for pid=19296 comm="syz.1.6008" path="socket:[64032]" dev="sockfs" ino=64032 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 427.005556][T15749] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 427.157997][T15749] usb 1-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 427.158750][T15749] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.158766][T15749] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 427.160577][T15749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.160593][T15749] usb 1-1: Product: syz [ 427.160603][T15749] usb 1-1: Manufacturer: syz [ 427.160612][T15749] usb 1-1: SerialNumber: syz [ 427.373795][T19328] net_ratelimit: 44 callbacks suppressed [ 427.373811][T19328] netlink: ct_mark mask cannot be 0 [ 427.373830][T19328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.424695][T19328] netlink: ct_mark mask cannot be 0 [ 427.424730][T19328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.722921][ T5607] Bluetooth: hci5: CSR: Local version failed (-71) [ 427.739116][T15749] usb 1-1: USB disconnect, device number 75 [ 427.807031][T19341] tap0: tun_chr_ioctl cmd 1074025676 [ 427.807049][T19341] tap0: owner set to 0 [ 427.921379][ T30] audit: type=1400 audit(1792315209.201:1794): avc: denied { bind } for pid=19344 comm="syz.4.6030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 428.478585][T19374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6044'. [ 428.769395][T19383] loop6: detected capacity change from 0 to 2640 [ 428.769939][T19383] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.769966][T19383] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.769984][T19383] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.770001][T19383] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.770018][T19383] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.770044][T19383] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.770069][T19383] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.770085][T19383] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.770094][T19383] ldm_validate_partition_table(): Disk read failed. [ 428.770110][T19383] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.770127][T19383] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.770153][T19383] Dev loop6: unable to read RDB block 0 [ 428.770333][T19383] loop6: unable to read partition table [ 428.770446][T19383] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 428.945452][T19383] loop6: detected capacity change from 2640 to 524288000 [ 429.464302][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6057'. [ 430.238915][ T1484] Bluetooth: hci5: Frame reassembly failed (-84) [ 430.261824][T19434] Bluetooth: hci5: Frame reassembly failed (-84) [ 430.305337][T15751] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 430.455115][T15751] usb 4-1: Using ep0 maxpacket: 32 [ 430.455605][T15751] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 430.456401][T15751] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 430.457880][T15751] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 430.457895][T15751] usb 4-1: Product: syz [ 430.457905][T15751] usb 4-1: Manufacturer: syz [ 430.457914][T15751] usb 4-1: SerialNumber: syz [ 430.460150][T15751] usb 4-1: config 0 descriptor?? [ 430.481698][T19428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 430.483014][T15751] hub 4-1:0.0: bad descriptor, ignoring hub [ 430.483031][T15751] hub 4-1:0.0: probe with driver hub failed with error -5 [ 430.646142][ T30] audit: type=1400 audit(1792315211.921:1795): avc: denied { read } for pid=19449 comm="syz.1.6079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 430.743024][T19453] scsi_dev_info_list_add_str: bad dev info string 'M' '' '' [ 430.865594][T15751] usb 4-1: USB disconnect, device number 74 [ 430.900293][ T30] audit: type=1326 audit(1792315212.181:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19456 comm="syz.0.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc59e559 code=0x7ffc0000 [ 430.900432][ T30] audit: type=1326 audit(1792315212.181:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19456 comm="syz.0.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc59e559 code=0x7ffc0000 [ 430.901032][ T30] audit: type=1326 audit(1792315212.181:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19456 comm="syz.0.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc59e559 code=0x7ffc0000 [ 430.901672][ T30] audit: type=1326 audit(1792315212.181:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19456 comm="syz.0.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc59e559 code=0x7ffc0000 [ 430.901812][ T30] audit: type=1326 audit(1792315212.181:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19456 comm="syz.0.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbfc55ed8e code=0x7ffc0000 [ 430.902264][ T30] audit: type=1326 audit(1792315212.181:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19456 comm="syz.0.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbfc55ed8e code=0x7ffc0000 [ 430.905687][ T30] audit: type=1326 audit(1792315212.181:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19456 comm="syz.0.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc59e559 code=0x7ffc0000 [ 430.905721][ T30] audit: type=1326 audit(1792315212.191:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19456 comm="syz.0.6083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc59e559 code=0x7ffc0000 [ 431.158214][T19460] overlayfs: overlapping lowerdir path [ 431.161870][T19459] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 432.263659][T19505] serial 00:03: in use; can't configure [ 432.266493][ T5607] Bluetooth: hci5: command 0x1003 tx timeout [ 432.266565][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 432.940839][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 432.940853][ T30] audit: type=1400 audit(1792315214.221:1817): avc: denied { write } for pid=19524 comm="syz.1.6111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 433.123005][T19529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.267122][T19532] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 433.735766][ T30] audit: type=1400 audit(1792315215.021:1818): avc: denied { getopt } for pid=19547 comm="syz.0.6121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 433.787430][T15750] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 433.935550][T15750] usb 2-1: Using ep0 maxpacket: 16 [ 433.936062][T15750] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 433.936862][T15750] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 433.936879][T15750] usb 2-1: config 0 has no interface number 0 [ 433.936901][T15750] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 433.936916][T15750] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 433.936931][T15750] usb 2-1: config 0 interface 41 has no altsetting 0 [ 433.938418][T15750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.938434][T15750] usb 2-1: Product: syz [ 433.938443][T15750] usb 2-1: Manufacturer: syz [ 433.938452][T15750] usb 2-1: SerialNumber: syz [ 434.039804][T15750] usb 2-1: config 0 descriptor?? [ 434.040484][T19540] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 434.040563][T19540] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 434.253841][T19540] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 434.253941][T19540] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 434.348986][ T30] audit: type=1400 audit(1792315215.631:1819): avc: denied { write } for pid=19565 comm="syz.2.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 434.476827][ T30] audit: type=1400 audit(1792315215.761:1820): avc: denied { validate_trans } for pid=19571 comm="syz.2.6133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 434.828307][ T30] audit: type=1400 audit(1792315216.111:1821): avc: denied { shutdown } for pid=19584 comm="syz.0.6139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 434.942154][T15750] sr9700 2-1:0.41 eth2: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, 6a:e3:57:46:bb:6f [ 434.964100][T15750] usb 2-1: USB disconnect, device number 75 [ 434.976412][T15750] sr9700 2-1:0.41 eth2: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 435.214901][ T30] audit: type=1400 audit(1792315216.491:1822): avc: denied { write } for pid=19591 comm="syz.2.6142" name="target" dev="configfs" ino=3572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 435.585929][T15750] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 435.740748][T15750] usb 3-1: unable to get BOS descriptor or descriptor too short [ 435.744895][T15750] usb 3-1: not running at top speed; connect to a high speed hub [ 435.744920][T15750] usb 3-1: New USB device found, idVendor=1430, idProduct=474a, bcdDevice= 0.40 [ 435.774537][T15750] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 435.774560][T15750] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.808962][T15750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.808981][T15750] usb 3-1: Product: syz [ 435.808990][T15750] usb 3-1: Manufacturer: syz [ 435.808999][T15750] usb 3-1: SerialNumber: syz [ 435.811014][T19595] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 435.880282][ T30] audit: type=1400 audit(1792315217.161:1823): avc: denied { mount } for pid=19606 comm="syz.4.6149" name="/" dev="ramfs" ino=65620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 435.979478][ T30] audit: type=1400 audit(1792315217.261:1824): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 436.042375][T15750] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.042407][T15750] usb 3-1: MIDIStreaming interface descriptor not found [ 436.193072][T19617] sctp: [Deprecated]: syz.3.6152 (pid 19617) Use of int in max_burst socket option deprecated. [ 436.193072][T19617] Use struct sctp_assoc_value instead [ 436.212017][T15750] usb 3-1: USB disconnect, device number 77 [ 436.300408][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.509728][ T30] audit: type=1400 audit(1792315217.791:1825): avc: denied { watch } for pid=19627 comm="syz.0.6158" path="/1338/file0" dev="tmpfs" ino=6829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 436.544268][ T30] audit: type=1400 audit(1792315217.831:1826): avc: denied { watch_reads } for pid=19627 comm="syz.0.6158" path="/1338/file0" dev="tmpfs" ino=6829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 437.134166][T19654] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 437.134490][T19654] batman_adv: batadv0: Adding interface: gretap1 [ 437.134498][T19654] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.134517][T19654] batman_adv: batadv0: Interface activated: gretap1 [ 437.717080][T15750] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 437.721939][T19680] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 437.867849][T15750] usb 1-1: Using ep0 maxpacket: 32 [ 437.868275][T15750] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 437.869397][T15750] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 437.869413][T15750] usb 1-1: config 0 has no interface number 0 [ 437.869436][T15750] usb 1-1: config 0 interface 184 has no altsetting 0 [ 437.917722][T15750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.917739][T15750] usb 1-1: Product: syz [ 437.917749][T15750] usb 1-1: Manufacturer: syz [ 437.917758][T15750] usb 1-1: SerialNumber: syz [ 437.919412][T15750] usb 1-1: config 0 descriptor?? [ 438.242844][T19700] ip_tables: iptables: counters copy to user failed while replacing table [ 438.493225][T19708] netlink: 'syz.1.6195': attribute type 1 has an invalid length. [ 438.493242][T19708] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6195'. [ 438.493252][T19708] netlink: 'syz.1.6195': attribute type 1 has an invalid length. [ 438.493260][T19708] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.6195'. [ 438.587885][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.808491][T15750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 438.808515][T15750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 438.810528][T15750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 438.810549][T15750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 438.810573][T15750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 438.810588][T15750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 438.810717][T15750] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 438.903118][T15750] usb 1-1: USB disconnect, device number 76 [ 439.307551][T19736] netlink: 1056 bytes leftover after parsing attributes in process `syz.4.6207'. [ 439.312606][T19738] WARNING! power/level is deprecated; use power/control instead [ 439.344118][T19740] jffs2: notice: (19740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 439.392555][ T30] audit: type=1400 audit(1792315220.651:1827): avc: denied { write } for pid=19737 comm="syz.2.6210" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.451335][ T30] audit: type=1400 audit(1792315220.731:1828): avc: denied { add_name } for pid=19737 comm="syz.2.6210" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.451376][ T30] audit: type=1400 audit(1792315220.731:1829): avc: denied { create } for pid=19737 comm="syz.2.6210" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 439.696900][T19750] tmpfs: Using encoding : utf8-12.1.0 [ 439.731901][T19750] overlayfs: missing 'lowerdir' [ 439.798290][T19754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6217'. [ 440.630593][ T30] audit: type=1400 audit(1792315221.911:1830): avc: denied { getopt } for pid=19787 comm="syz.2.6233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 440.706535][ T30] audit: type=1400 audit(1792315221.991:1831): avc: denied { setopt } for pid=19795 comm="syz.0.6237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 441.135166][T15750] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 441.252547][T19823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6249'. [ 441.252569][T19823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6249'. [ 441.286551][T15750] usb 4-1: Using ep0 maxpacket: 8 [ 441.288243][T15750] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.294335][T15750] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.294355][T15750] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.294370][T15750] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 441.294385][T15750] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.294409][T15750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.466628][T19821] input: syz0 as /devices/virtual/input/input113 [ 441.663215][T15750] usb 4-1: GET_CAPABILITIES returned 0 [ 441.663243][T15750] usbtmc 4-1:16.0: can't read capabilities [ 441.940155][T15750] usb 4-1: USB disconnect, device number 75 [ 442.659440][T19849] cpuidle: using governor haltpoll [ 443.142392][ T30] audit: type=1400 audit(1792315224.421:1832): avc: denied { ioctl } for pid=19879 comm="syz.2.6276" path="socket:[66747]" dev="sockfs" ino=66747 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 443.965171][T15751] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 444.117030][T15751] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 444.121363][T15751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.121387][T15751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.121409][T15751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.122978][T15751] usb 2-1: config 0 descriptor?? [ 444.455735][T15750] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 444.557059][T15751] cm6533_jd 0003:0D8C:0022.0081: unknown main item tag 0x0 [ 444.557087][T15751] cm6533_jd 0003:0D8C:0022.0081: item fetching failed at offset 4/5 [ 444.557429][T15751] cm6533_jd 0003:0D8C:0022.0081: parse failed [ 444.557481][T15751] cm6533_jd 0003:0D8C:0022.0081: probe with driver cm6533_jd failed with error -22 [ 444.607471][T15750] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 444.609989][T15750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 444.610019][T15750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.612440][T15750] usb 4-1: config 0 descriptor?? [ 444.612935][T19924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 444.778182][T15751] usb 2-1: USB disconnect, device number 76 [ 445.030901][T15750] hid (null): unknown global tag 0xba [ 445.030925][T15750] hid (null): unknown global tag 0xe [ 445.049883][T15750] asus 0003:0B05:1ABE.0082: unknown main item tag 0x0 [ 445.049905][T15750] asus 0003:0B05:1ABE.0082: unknown main item tag 0x0 [ 445.049922][T15750] asus 0003:0B05:1ABE.0082: unknown main item tag 0x0 [ 445.049937][T15750] asus 0003:0B05:1ABE.0082: unknown main item tag 0x0 [ 445.049952][T15750] asus 0003:0B05:1ABE.0082: unknown main item tag 0x0 [ 445.049967][T15750] asus 0003:0B05:1ABE.0082: unknown main item tag 0x0 [ 445.049981][T15750] asus 0003:0B05:1ABE.0082: unknown main item tag 0x0 [ 445.049996][T15750] asus 0003:0B05:1ABE.0082: unknown main item tag 0x0 [ 445.050011][T15750] asus 0003:0B05:1ABE.0082: unknown main item tag 0x0 [ 445.088455][T15750] asus 0003:0B05:1ABE.0082: unexpected long global item [ 445.088856][T15750] asus 0003:0B05:1ABE.0082: Asus hid parse failed: -22 [ 445.088912][T15750] asus 0003:0B05:1ABE.0082: probe with driver asus failed with error -22 [ 445.257258][T15750] usb 4-1: USB disconnect, device number 76 [ 445.426139][T19947] Bluetooth: hci0: unsupported parameter 5135 [ 445.426172][T19947] Bluetooth: hci0: unsupported parameter 8192 [ 445.426181][T19947] Bluetooth: hci0: unsupported parameter 5135 [ 445.426189][T19947] Bluetooth: hci0: unsupported parameter 8192 [ 445.608537][ T30] audit: type=1400 audit(1792315226.891:1833): avc: denied { map } for pid=19953 comm="syz.1.6311" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.740427][T19962] irq 7: Affinity broken due to vector space exhaustion. [ 445.878622][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6317'. [ 445.878681][T19967] bridge_slave_1: left allmulticast mode [ 445.878823][T19967] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.037544][T19967] bridge_slave_0: left allmulticast mode [ 446.037574][T19967] bridge_slave_0: left promiscuous mode [ 446.037725][T19967] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.429465][T19982] sctp: [Deprecated]: syz.2.6324 (pid 19982) Use of int in max_burst socket option deprecated. [ 446.429465][T19982] Use struct sctp_assoc_value instead [ 446.788112][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6329'. [ 446.788129][T19994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6329'. [ 446.910369][T19958] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input115 [ 446.941507][T19996] netlink: 'syz.1.6330': attribute type 1 has an invalid length. [ 446.941524][T19996] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6330'. [ 447.238839][T20009] ip_tables: iptables: counters copy to user failed while replacing table [ 447.425461][T15751] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 447.551266][ T30] audit: type=1400 audit(1792315228.831:1834): avc: denied { append } for pid=20020 comm="syz.3.6343" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 447.595129][T15751] usb 3-1: Using ep0 maxpacket: 32 [ 447.596675][T15751] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 447.597550][T15751] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 447.597567][T15751] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 447.597579][T15751] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 447.597592][T15751] usb 3-1: config 1 has no interface number 0 [ 447.597617][T15751] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 447.597632][T15751] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 447.597656][T15751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.602530][T15751] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 447.788544][T20027] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 447.823841][T15751] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 447.937837][T20031] phram: not enough arguments [ 448.272911][T20047] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 448.297396][T15751] usb 3-1: USB disconnect, device number 78 [ 448.298302][T15751] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 448.575851][T15750] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 448.725904][T15750] usb 1-1: Using ep0 maxpacket: 16 [ 448.727035][T15750] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 448.730756][T15750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.730774][T15750] usb 1-1: Product: syz [ 448.730784][T15750] usb 1-1: Manufacturer: syz [ 448.730793][T15750] usb 1-1: SerialNumber: syz [ 448.977972][ T191] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 448.980233][T15750] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 449.005559][T15750] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 449.005748][T15750] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 449.005789][T15750] usb 1-1: media controller created [ 449.059454][T15750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.133346][ T191] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 449.147733][ T191] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 449.147759][ T191] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 449.147775][ T191] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 449.147792][ T191] usb 4-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 130 [ 449.147808][ T191] usb 4-1: config 0 interface 0 has no altsetting 0 [ 449.147829][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.153519][ T191] usb 4-1: config 0 descriptor?? [ 449.154287][T20067] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 449.283418][T15750] zl10353_read_register: readreg error (reg=127, ret==-71) [ 449.379836][T15750] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 449.410425][T15750] usb 1-1: USB disconnect, device number 77 [ 449.618220][ T191] hid_parser_main: 368 callbacks suppressed [ 449.618239][ T191] logitech 0003:046D:C298.0083: unknown main item tag 0x2 [ 449.618256][ T191] logitech 0003:046D:C298.0083: unknown main item tag 0x0 [ 449.618272][ T191] logitech 0003:046D:C298.0083: unknown main item tag 0x0 [ 449.657069][ T191] input: HID 046d:c298 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C298.0083/input/input116 [ 449.717798][ T191] logitech 0003:046D:C298.0083: offset (39) exceeds report_count (19) [ 449.717864][ T191] logitech 0003:046D:C298.0083: offset (25) exceeds report_count (19) [ 449.881158][ T191] logitech 0003:046D:C298.0083: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.3-1/input0 [ 449.881285][ T191] logitech 0003:046D:C298.0083: implement() called with too large value 245 (n: 0)! (kworker/0:2) [ 449.881384][ T191] logitech 0003:046D:C298.0083: implement() called with too large value 248 (n: 0)! (kworker/0:2) [ 449.881398][ T191] logitech 0003:046D:C298.0083: implement() called with too large value 3 (n: 0)! (kworker/0:2) [ 449.881425][ T191] logitech 0003:046D:C298.0083: implement() called with too large value 129 (n: 0)! (kworker/0:2) [ 449.881438][ T191] logitech 0003:046D:C298.0083: implement() called with too large value 11 (n: 0)! (kworker/0:2) [ 449.881452][ T191] logitech 0003:046D:C298.0083: Force feedback support for Logitech Gaming Wheels [ 450.463953][T20094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6376'. [ 450.634521][T20098] tipc: Enabling of bearer rejected, already enabled [ 450.644623][T20098] tipc: Disabling bearer [ 450.789610][ C0] logitech 0003:046D:C298.0083: usb_submit_urb(out) failed: -1 [ 450.834120][T20106] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 450.834120][T20106] The task syz.4.6379 (20106) triggered the difference, watch for misbehavior. [ 451.497526][T20130] loop7: detected capacity change from 0 to 7 [ 451.556658][T20130] Dev loop7: unable to read RDB block 7 [ 451.556688][T20130] loop7: unable to read partition table [ 451.556797][T20130] loop7: partition table beyond EOD, truncated [ 451.578184][T20130] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 451.621695][ C0] blk_print_req_error: 10 callbacks suppressed [ 451.621714][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 451.621829][ C0] buffer_io_error: 11 callbacks suppressed [ 451.621837][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 451.813623][ T191] usb 4-1: USB disconnect, device number 77 [ 452.872347][T20177] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.872388][T20177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.023497][T20184] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 453.880919][ T30] audit: type=1400 audit(1792315235.161:1835): avc: denied { connect } for pid=20225 comm="syz.1.6436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 453.994320][ T30] audit: type=1400 audit(1792315235.271:1836): avc: denied { mounton } for pid=20228 comm="syz.3.6437" path="/1316/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.045753][ T191] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 454.197616][ T191] usb 3-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 454.198383][ T191] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.199529][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 454.199545][ T191] usb 3-1: Product: syz [ 454.199555][ T191] usb 3-1: Manufacturer: syz [ 454.249966][ T191] navman 3-1:1.0: navman converter detected [ 454.269583][ T191] usb 3-1: navman converter now attached to ttyUSB0 [ 454.299879][ T30] audit: type=1326 audit(1792315235.581:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20236 comm="syz.4.6442" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5acbf9e559 code=0x0 [ 454.502983][ T191] usb 3-1: USB disconnect, device number 79 [ 454.524164][ T191] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 454.535935][ T191] navman 3-1:1.0: device disconnected [ 454.695106][T15751] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 454.845112][T15751] usb 1-1: Using ep0 maxpacket: 32 [ 454.845566][T15751] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 454.846385][T15751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.846403][T15751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.846439][T15751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.849087][T15751] usb 1-1: config 0 descriptor?? [ 455.224813][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6453'. [ 455.297244][T15751] koneplus 0003:1E7D:2D51.0084: unknown main item tag 0x0 [ 455.297283][T15751] koneplus 0003:1E7D:2D51.0084: unknown main item tag 0x0 [ 455.297299][T15751] koneplus 0003:1E7D:2D51.0084: unknown main item tag 0x0 [ 455.297314][T15751] koneplus 0003:1E7D:2D51.0084: unknown main item tag 0x0 [ 455.297329][T15751] koneplus 0003:1E7D:2D51.0084: unknown main item tag 0x0 [ 455.300168][T15751] koneplus 0003:1E7D:2D51.0084: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 455.385508][ T191] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 455.507906][T20272] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [210] [ 455.507929][T20272] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 455.507945][T20272] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 455.507952][T20272] One or more global auth toks could not properly register; rc = [-22] [ 455.507981][T20272] Error validating options; rc = [-22] [ 455.553667][ T191] usb 3-1: Using ep0 maxpacket: 8 [ 455.576100][ T191] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 455.593961][ T191] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 455.593980][ T191] usb 3-1: config 0 has no interface number 0 [ 455.594002][ T191] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 455.594018][ T191] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 455.594033][ T191] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 455.594047][ T191] usb 3-1: config 0 interface 200 has no altsetting 0 [ 455.647291][T15749] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 455.655132][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.655150][ T191] usb 3-1: Product: syz [ 455.655159][ T191] usb 3-1: Manufacturer: syz [ 455.655168][ T191] usb 3-1: SerialNumber: syz [ 455.697741][ T191] usb 3-1: config 0 descriptor?? [ 455.805937][T15749] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 455.808886][T15749] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.808915][T15749] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 455.808929][T15749] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 455.808943][T15749] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.808968][T15749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.881933][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6457'. [ 455.977014][T15751] usb 1-1: USB disconnect, device number 78 [ 455.977208][ T191] usb 3-1: USB disconnect, device number 80 [ 456.391577][T15749] gud 4-1:1.0: probe with driver gud failed with error -121 [ 456.595626][T15751] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 456.625310][T15749] usb 4-1: USB disconnect, device number 78 [ 456.747845][T15751] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 456.749179][T15751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 456.749200][T15751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 456.749222][T15751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.095089][T15749] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 457.177439][T15751] qmi_wwan 1-1:1.0: probe with driver qmi_wwan failed with error -22 [ 457.184820][T15751] usb 1-1: USB disconnect, device number 79 [ 457.246494][T15749] usb 3-1: not running at top speed; connect to a high speed hub [ 457.246517][T15749] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 457.248842][T15749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.248860][T15749] usb 3-1: Product: syz [ 457.248870][T15749] usb 3-1: Manufacturer: syz [ 457.248879][T15749] usb 3-1: SerialNumber: syz [ 457.254601][T15749] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 457.310637][T15749] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 457.314685][T15749] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 457.347679][T15749] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 457.350713][T15749] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 457.466384][ T191] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 457.615666][ T191] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 457.616461][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.620448][ T191] usb 4-1: config 0 descriptor?? [ 457.828229][ T191] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 458.045817][T15751] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 458.091522][ T191] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 458.091545][ T191] [drm] Initialized udl on minor 1 [ 458.196446][T15751] usb 1-1: Using ep0 maxpacket: 32 [ 458.202511][T15751] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 458.203555][T15751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.229040][T15751] usb 1-1: config 0 descriptor?? [ 458.233034][ T191] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 458.233339][ T191] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 458.442840][T15751] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 458.455495][T15751] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 458.458309][T15751] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 458.458339][T15751] usb 1-1: media controller created [ 458.493082][T15749] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 458.528398][T15751] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.562220][ T191] usb 4-1: USB disconnect, device number 79 [ 458.588484][ T5607] Bluetooth: hci5: command 0x1003 tx timeout [ 458.588573][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 458.664667][T15751] az6027: usb out operation failed. (-71) [ 458.681955][T15751] az6027: usb out operation failed. (-71) [ 458.681969][T15751] stb0899_attach: Driver disabled by Kconfig [ 458.681976][T15751] az6027: no front-end attached [ 458.681976][T15751] [ 458.682405][T15751] az6027: usb out operation failed. (-71) [ 458.682415][T15751] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 458.683694][T15751] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input117 [ 458.751336][T15751] dvb-usb: schedule remote query interval to 400 msecs. [ 458.751352][T15751] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 458.782252][T15751] usb 1-1: USB disconnect, device number 80 [ 458.888727][T15751] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 459.584427][T20330] netlink: 'syz.3.6482': attribute type 4 has an invalid length. [ 459.644428][T15751] lo speed is unknown, defaulting to 1000 [ 459.883273][T15751] usb 3-1: USB disconnect, device number 81 [ 459.908798][T15751] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 459.932489][T15751] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 459.954064][T15751] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 459.978627][T15751] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 459.997769][T15751] keyspan 3-1:1.0: device disconnected [ 460.167467][T20346] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 460.167583][T20346] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 460.300808][T20350] tipc: New replicast peer: 127.0.0.1 [ 460.312858][T20350] tipc: Enabled bearer , priority 10 [ 460.471793][ T30] audit: type=1400 audit(1792315241.751:1838): avc: denied { setopt } for pid=20353 comm="syz.0.6494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 460.970259][ T30] audit: type=1400 audit(1792315242.251:1839): avc: denied { connect } for pid=20377 comm="syz.1.6505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 461.279303][T20391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6510'. [ 461.279332][T20391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6510'. [ 461.966613][ T191] kernel write not supported for file /ppp (pid: 191 comm: kworker/0:2) [ 462.206078][ T191] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 462.365051][ T191] usb 3-1: Using ep0 maxpacket: 16 [ 462.365528][ T191] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 462.367689][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.367706][ T191] usb 3-1: Product: syz [ 462.367716][ T191] usb 3-1: Manufacturer: syz [ 462.367732][ T191] usb 3-1: SerialNumber: syz [ 462.371948][ T191] usb 3-1: config 0 descriptor?? [ 462.826656][ T191] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 462.830284][ T191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 462.830831][ T191] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 462.830861][ T191] usb 3-1: media controller created [ 462.894487][ T191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.033695][ T191] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 463.033709][ T191] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 463.244266][ T191] usb 3-1: USB disconnect, device number 82 [ 463.304246][ T191] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 463.629900][ T30] audit: type=1400 audit(1792315244.911:1840): avc: denied { map } for pid=20454 comm="syz.1.6539" path="socket:[69997]" dev="sockfs" ino=69997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 463.630317][ T30] audit: type=1400 audit(1792315244.911:1841): avc: denied { read } for pid=20454 comm="syz.1.6539" path="socket:[69997]" dev="sockfs" ino=69997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 464.145384][T20471] MTRR 1 not used [ 464.260720][T20475] syz.3.6547: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 464.260905][T20475] CPU: 0 UID: 0 PID: 20475 Comm: syz.3.6547 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.260924][T20475] Tainted: [L]=SOFTLOCKUP [ 464.260930][T20475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 464.260942][T20475] Call Trace: [ 464.260947][T20475] [ 464.260952][T20475] dump_stack_lvl+0x100/0x190 [ 464.260980][T20475] warn_alloc.cold+0x9e/0xb2 [ 464.260995][T20475] ? __pfx_warn_alloc+0x10/0x10 [ 464.261025][T20475] __vmalloc_node_range_noprof+0x123b/0x1420 [ 464.261047][T20475] ? __lock_acquire+0xe8b/0x1f40 [ 464.261068][T20475] ? disksize_store+0x14d/0x4a0 [ 464.261087][T20475] ? lock_acquire+0x1d1/0x380 [ 464.261101][T20475] ? disksize_store+0xab/0x4a0 [ 464.261119][T20475] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 464.261139][T20475] ? __pfx___might_resched+0x10/0x10 [ 464.261152][T20475] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 464.261173][T20475] ? disksize_store+0x14d/0x4a0 [ 464.261189][T20475] __vmalloc_node_noprof+0xad/0xf0 [ 464.261208][T20475] ? disksize_store+0x14d/0x4a0 [ 464.261229][T20475] disksize_store+0x14d/0x4a0 [ 464.261246][T20475] ? sysfs_file_kobj+0xe4/0x290 [ 464.261265][T20475] ? sysfs_file_kobj+0xe4/0x290 [ 464.261284][T20475] ? __pfx_disksize_store+0x10/0x10 [ 464.261301][T20475] dev_attr_store+0x58/0x80 [ 464.261315][T20475] ? __pfx_dev_attr_store+0x10/0x10 [ 464.261329][T20475] sysfs_kf_write+0xf2/0x150 [ 464.261348][T20475] kernfs_fop_write_iter+0x3e0/0x5f0 [ 464.261364][T20475] ? __pfx_sysfs_kf_write+0x10/0x10 [ 464.261384][T20475] vfs_write+0x6af/0x1050 [ 464.261401][T20475] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 464.261427][T20475] ? __pfx_vfs_write+0x10/0x10 [ 464.261442][T20475] ? find_held_lock+0x2b/0x80 [ 464.261476][T20475] ksys_write+0x12a/0x250 [ 464.261492][T20475] ? __pfx_ksys_write+0x10/0x10 [ 464.261515][T20475] do_syscall_64+0x123/0x790 [ 464.261535][T20475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.261550][T20475] RIP: 0033:0x7f40f3b9e559 [ 464.261562][T20475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.261574][T20475] RSP: 002b:00007f40f4b4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 464.261590][T20475] RAX: ffffffffffffffda RBX: 00007f40f3e25fa0 RCX: 00007f40f3b9e559 [ 464.261598][T20475] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 464.261606][T20475] RBP: 00007f40f3c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 464.261614][T20475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.261621][T20475] R13: 00007f40f3e26038 R14: 00007f40f3e25fa0 R15: 00007ffec7901b38 [ 464.261641][T20475] [ 464.600741][T20475] Mem-Info: [ 464.600771][T20475] active_anon:13331 inactive_anon:2203 isolated_anon:0 [ 464.600771][T20475] active_file:14673 inactive_file:48174 isolated_file:0 [ 464.600771][T20475] unevictable:0 dirty:509 writeback:0 [ 464.600771][T20475] slab_reclaimable:10827 slab_unreclaimable:106964 [ 464.600771][T20475] mapped:33409 shmem:3230 pagetables:2300 [ 464.600771][T20475] sec_pagetables:0 bounce:0 [ 464.600771][T20475] kernel_misc_reclaimable:0 [ 464.600771][T20475] free:1269498 free_pcp:7120 free_cma:0 [ 464.600811][T20475] Node 0 active_anon:53324kB inactive_anon:8812kB active_file:58692kB inactive_file:192508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133580kB dirty:2036kB writeback:0kB shmem:12920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13952kB pagetables:9072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 464.600843][T20475] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 464.600873][T20475] Node 0 DMA free:15344kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.600908][T20475] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 464.600929][T20475] Node 0 DMA32 free:1115280kB boost:0kB min:3856kB low:6364kB high:8872kB reserved_highatomic:0kB free_highatomic:0kB active_anon:53324kB inactive_anon:8812kB active_file:58692kB inactive_file:192508kB unevictable:0kB writepending:2036kB zspages:840kB present:3129332kB managed:2510920kB mlocked:0kB bounce:0kB free_pcp:28480kB local_pcp:28480kB free_cma:0kB [ 464.600963][T20475] lowmem_reserve[]: 0 0 0 0 0 [ 464.600982][T20475] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.601013][T20475] lowmem_reserve[]: 0 0 0 0 0 [ 464.601033][T20475] Node 1 Normal free:3947368kB boost:0kB min:6312kB low:10420kB high:14528kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.601065][T20475] lowmem_reserve[]: 0 0 0 0 0 [ 464.601085][T20475] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 464.601196][T20475] Node 0 DMA32: 22*4kB (ME) 61*8kB (UE) 206*16kB (UME) 463*32kB (UME) 198*64kB (UME) 122*128kB (ME) 35*256kB (UME) 41*512kB (UME) 38*1024kB (UME) 16*2048kB (UME) 236*4096kB (UM) = 1115264kB [ 464.601298][T20475] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 464.944411][T20475] Node 1 Normal: 10*4kB (UM) 12*8kB (UM) 12*16kB (UM) 13*32kB (UM) 14*64kB (UM) 10*128kB (UM) 8*256kB (UM) 10*512kB (UM) 1*1024kB (M) 4*2048kB (UM) 959*4096kB (UM) = 3947368kB [ 464.944517][T20475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.944527][T20475] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 464.944539][T20475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.944549][T20475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 464.944557][T20475] 66253 total pagecache pages [ 464.944562][T20475] 16 pages in swap cache [ 464.944567][T20475] Free swap = 123552kB [ 464.944571][T20475] Total swap = 124996kB [ 464.944576][T20475] 2097051 pages RAM [ 464.944580][T20475] 0 pages HighMem/MovableOnly [ 464.944585][T20475] 437690 pages reserved [ 464.944589][T20475] 0 pages cma reserved [ 465.424821][ T30] audit: type=1400 audit(1792315246.701:1842): avc: denied { ioctl } for pid=20493 comm="syz.1.6556" path="socket:[70208]" dev="sockfs" ino=70208 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 466.212924][T20528] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 467.083439][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6588'. [ 467.083463][T20566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6588'. [ 467.540478][T20587] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6598'. [ 467.574759][T20587] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6598'. [ 467.710862][T20593] tmpfs: Bad value for 'mpol' [ 467.856719][ T30] audit: type=1400 audit(1792315249.141:1843): avc: denied { mount } for pid=20598 comm="syz.0.6604" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 467.922081][ T30] audit: type=1400 audit(1792315249.201:1844): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 468.046783][T20606] block2mtd: illegal erase size [ 468.342572][T20621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.389003][T20624] : renamed from vlan0 (while UP) [ 469.246263][T15751] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 469.397312][T15751] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 469.398623][T15751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.398643][T15751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.398665][T15751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.455149][T15751] usb 4-1: config 0 descriptor?? [ 469.556620][T20672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.892664][T15751] savu 0003:1E7D:2D5A.0085: unknown main item tag 0x0 [ 469.892701][T15751] savu 0003:1E7D:2D5A.0085: unknown main item tag 0x0 [ 469.892716][T15751] savu 0003:1E7D:2D5A.0085: unknown main item tag 0x0 [ 469.892731][T15751] savu 0003:1E7D:2D5A.0085: unknown main item tag 0x0 [ 469.892752][T15751] savu 0003:1E7D:2D5A.0085: unknown main item tag 0x0 [ 469.892769][T15751] savu 0003:1E7D:2D5A.0085: unknown main item tag 0x0 [ 469.892784][T15751] savu 0003:1E7D:2D5A.0085: unknown main item tag 0x0 [ 469.892799][T15751] savu 0003:1E7D:2D5A.0085: unknown main item tag 0x0 [ 469.892815][T15751] savu 0003:1E7D:2D5A.0085: unknown main item tag 0x0 [ 469.892831][T15751] savu 0003:1E7D:2D5A.0085: unknown main item tag 0x0 [ 469.975785][T15751] savu 0003:1E7D:2D5A.0085: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 470.098402][T15751] usb 4-1: USB disconnect, device number 80 [ 470.168730][T20686] fido_id[20686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 470.842826][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6659'. [ 471.305836][ T191] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 471.406072][ T30] audit: type=1400 audit(1792315252.691:1845): avc: denied { append } for pid=20739 comm="syz.0.6671" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 471.455515][ T191] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 471.456278][ T191] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.456297][ T191] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.456314][ T191] usb 4-1: config 0 interface 0 has no altsetting 0 [ 471.456332][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.457873][ T191] usb 4-1: config 0 descriptor?? [ 471.507550][T15751] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 471.685794][T15751] usb 2-1: Using ep0 maxpacket: 32 [ 471.686396][T15751] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 471.688249][T15751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.689977][T15751] usb 2-1: config 0 descriptor?? [ 471.888306][ T191] logitech 0003:046D:C293.0086: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0 [ 471.888330][ T191] logitech 0003:046D:C293.0086: no inputs found [ 471.918619][T15751] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 471.960591][T15751] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.976371][T15751] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 471.976405][T15751] usb 2-1: media controller created [ 472.027191][T15751] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.087894][ T191] usb 4-1: USB disconnect, device number 81 [ 472.130915][T15751] az6027: usb out operation failed. (-71) [ 472.132866][T15751] az6027: usb out operation failed. (-71) [ 472.132879][T15751] stb0899_attach: Driver disabled by Kconfig [ 472.132885][T15751] az6027: no front-end attached [ 472.132885][T15751] [ 472.162370][T15751] az6027: usb out operation failed. (-71) [ 472.162382][T15751] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 472.163465][T15751] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input118 [ 472.199350][T15751] dvb-usb: schedule remote query interval to 400 msecs. [ 472.199366][T15751] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 472.228360][T15751] usb 2-1: USB disconnect, device number 77 [ 472.269223][T20755] fido_id[20755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 472.328594][T15751] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 472.437589][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 472.444877][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 472.474071][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 472.474708][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 472.482717][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 472.514404][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 472.534587][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 472.534792][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 472.579300][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 472.579618][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 472.598494][ T30] audit: type=1400 audit(1792315253.861:1846): avc: denied { mounton } for pid=20759 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 472.973694][T20774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6683'. [ 473.316736][ T30] audit: type=1400 audit(1792315254.601:1847): avc: denied { create } for pid=20793 comm="syz.0.6690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 473.352727][ T30] audit: type=1400 audit(1792315254.601:1848): avc: denied { write } for pid=20793 comm="syz.0.6690" path="socket:[71891]" dev="sockfs" ino=71891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 473.390078][T20759] lo speed is unknown, defaulting to 1000 [ 474.276551][T20759] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.278884][T20759] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.279102][T20759] bridge_slave_0: entered allmulticast mode [ 474.282316][T20759] bridge_slave_0: entered promiscuous mode [ 474.313997][T20759] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.314578][T20759] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.314683][T20759] bridge_slave_1: entered allmulticast mode [ 474.343677][T20759] bridge_slave_1: entered promiscuous mode [ 474.384920][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6699'. [ 474.422018][T20759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.445795][T20759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.531987][T20759] team0: Port device team_slave_0 added [ 474.545986][T20759] team0: Port device team_slave_1 added [ 474.615442][T20759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.615455][T20759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.615470][T20759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.616630][T20759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.616640][T20759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.621045][T20759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.673918][ T5618] Bluetooth: hci5: command tx timeout [ 474.928238][T20759] hsr_slave_0: entered promiscuous mode [ 474.936874][T20759] hsr_slave_1: entered promiscuous mode [ 474.937286][T20759] debugfs: 'hsr0' already exists in 'hsr' [ 474.937299][T20759] Cannot create hsr debugfs directory [ 476.092186][T20759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 476.118097][T20759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.120384][T20759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 476.124851][T20759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.154137][T20759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 476.167935][T20759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.168642][T20759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 476.206918][T20759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.386915][T20759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.432980][T20759] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.448112][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.448170][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.488107][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.488163][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.745870][ T5607] Bluetooth: hci5: command tx timeout [ 477.153354][T20759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.175945][T15751] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 477.326517][T15751] usb 4-1: Using ep0 maxpacket: 16 [ 477.331509][T15751] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 477.332382][T15751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.332403][T15751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.332417][T15751] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 477.332441][T15751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.334013][T15751] usb 4-1: config 0 descriptor?? [ 477.618015][T20759] veth0_vlan: entered promiscuous mode [ 477.660081][T20759] veth1_vlan: entered promiscuous mode [ 477.728110][T20759] veth0_macvtap: entered promiscuous mode [ 477.746977][T20759] veth1_macvtap: entered promiscuous mode [ 477.792778][T20759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.809939][T20759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.843489][T15751] hid_parser_main: 48 callbacks suppressed [ 477.843507][T15751] microsoft 0003:045E:07DA.0087: unknown main item tag 0x0 [ 477.843525][T15751] microsoft 0003:045E:07DA.0087: unknown main item tag 0x0 [ 477.843540][T15751] microsoft 0003:045E:07DA.0087: unknown main item tag 0x0 [ 477.843556][T15751] microsoft 0003:045E:07DA.0087: unknown main item tag 0x0 [ 477.843571][T15751] microsoft 0003:045E:07DA.0087: unknown main item tag 0x0 [ 477.843587][T15751] microsoft 0003:045E:07DA.0087: unknown main item tag 0x0 [ 477.843608][T15751] microsoft 0003:045E:07DA.0087: unknown main item tag 0x0 [ 477.843623][T15751] microsoft 0003:045E:07DA.0087: unknown main item tag 0x0 [ 477.843639][T15751] microsoft 0003:045E:07DA.0087: unknown main item tag 0x0 [ 477.843654][T15751] microsoft 0003:045E:07DA.0087: unknown main item tag 0x0 [ 477.952832][T15751] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0087/input/input119 [ 477.987692][ T1106] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.012235][T15751] microsoft 0003:045E:07DA.0087: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 478.030851][ T5607] Bluetooth: hci6: command 0x1003 tx timeout [ 478.030920][ T5618] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 478.052519][ T1106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.193877][ T1106] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.193972][ T1106] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.363162][ T10] usb 4-1: USB disconnect, device number 82 [ 478.462306][T20924] fido_id[20924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 478.571575][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.571587][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.744244][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.744259][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.787259][ T30] audit: type=1400 audit(1792315260.061:1849): avc: denied { mounton } for pid=20759 comm="syz-executor" path="/root/syzkaller.wwijUC/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 478.827563][ T5618] Bluetooth: hci5: command tx timeout [ 478.871646][ T30] audit: type=1400 audit(1792315260.151:1850): avc: denied { mounton } for pid=20759 comm="syz-executor" path="/root/syzkaller.wwijUC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 478.906307][ T30] audit: type=1400 audit(1792315260.191:1851): avc: denied { mounton } for pid=20759 comm="syz-executor" path="/root/syzkaller.wwijUC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=73267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 478.947880][ T30] audit: type=1400 audit(1792315260.231:1852): avc: denied { mounton } for pid=20759 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 478.999768][ T30] audit: type=1400 audit(1792315260.281:1853): avc: denied { mount } for pid=20759 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 479.002263][ T30] audit: type=1400 audit(1792315260.281:1854): avc: denied { mounton } for pid=20759 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 479.506028][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 479.567174][T20947] SELinux: invalid class [ 479.653378][T20947] SELinux: failed to load policy [ 479.655858][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 479.661399][ T10] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 479.682233][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.682251][ T10] usb 2-1: Product: syz [ 479.682260][ T10] usb 2-1: Manufacturer: syz [ 479.682268][ T10] usb 2-1: SerialNumber: syz [ 479.908047][ T10] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 479.913407][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 479.939524][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 479.939563][ T10] usb 2-1: media controller created [ 479.969129][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.062445][ T30] audit: type=1400 audit(1792315261.341:1855): avc: denied { create } for pid=20972 comm="syz.3.6755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 480.092702][ T30] audit: type=1400 audit(1792315261.371:1856): avc: denied { bind } for pid=20972 comm="syz.3.6755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 480.127475][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 480.198008][ T10] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 480.220424][ T10] usb 2-1: USB disconnect, device number 78 [ 480.263752][ T30] audit: type=1400 audit(1792315261.541:1857): avc: denied { append } for pid=20976 comm="syz.3.6757" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 480.496118][T15751] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 480.565759][ T191] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 480.645060][T15751] usb 1-1: Using ep0 maxpacket: 8 [ 480.645506][T15751] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 480.645909][T15751] usb 1-1: config 0 has no interfaces? [ 480.645928][T15751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.647438][T15751] usb 1-1: config 0 descriptor?? [ 480.716299][ T191] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 480.718901][ T191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.718919][ T191] usb 6-1: Product: syz [ 480.718928][ T191] usb 6-1: Manufacturer: syz [ 480.718937][ T191] usb 6-1: SerialNumber: syz [ 480.720552][ T191] usb 6-1: config 0 descriptor?? [ 480.825123][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 480.856137][T15751] usb 1-1: USB disconnect, device number 81 [ 480.906261][ T5618] Bluetooth: hci5: command tx timeout [ 480.946726][ T191] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 002 [ 481.089293][ T191] kernel read not supported for file /video9 (pid: 191 comm: kworker/0:2) [ 481.162832][ T191] usb 6-1: USB disconnect, device number 2 [ 481.550907][T21023] netlink: 'syz.1.6778': attribute type 1 has an invalid length. [ 481.677041][ T191] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 481.753071][T21030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.826474][ T191] usb 4-1: Using ep0 maxpacket: 16 [ 481.826899][ T191] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 481.829136][ T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.829153][ T191] usb 4-1: Product: syz [ 481.829162][ T191] usb 4-1: Manufacturer: syz [ 481.829171][ T191] usb 4-1: SerialNumber: syz [ 482.063469][ T191] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 482.080629][ T191] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 482.081256][ T191] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 482.081285][ T191] usb 4-1: media controller created [ 482.128717][ T191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 482.264812][ T191] zl10353_read_register: readreg error (reg=127, ret==-71) [ 482.339668][ T191] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 482.362854][ T191] usb 4-1: USB disconnect, device number 83 [ 483.064019][T21068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.331440][T21077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6802'. [ 483.525378][T15751] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 483.612855][T21089] overlayfs: conflicting options: nfs_export=on,index=off [ 483.663028][T21091] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6809'. [ 483.676313][T15751] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 483.689041][T15751] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 483.689071][T15751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.980596][ T1484] Bluetooth: hci6: Frame reassembly failed (-84) [ 484.139031][T15751] lg-g15 0003:046D:C222.0088: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 484.338116][T15751] lg-g15 0003:046D:C222.0088: Error getting LED brightness: -71 [ 484.339424][T15751] lg-g15 0003:046D:C222.0088: probe with driver lg-g15 failed with error -71 [ 484.372534][T15751] usb 6-1: USB disconnect, device number 3 [ 485.316514][ T30] audit: type=1400 audit(1792315266.601:1858): avc: denied { write } for pid=21136 comm="syz.3.6828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 485.938757][T17682] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 485.944217][T17682] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 485.956904][T17682] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 485.973914][T17682] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 485.974216][T17682] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 486.025283][T17682] Bluetooth: hci6: command 0x1003 tx timeout [ 486.026996][ T5618] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 486.093891][T15751] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 486.278993][T15751] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 486.279615][T15751] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 486.279636][T15751] usb 1-1: can't read configurations, error -71 [ 486.325868][T21163] netlink: 'syz.3.6840': attribute type 1 has an invalid length. [ 486.655552][T15749] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 486.771322][T21153] lo speed is unknown, defaulting to 1000 [ 486.806673][T15749] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 486.807430][T15749] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 486.807446][T15749] usb 6-1: config 0 has no interface number 0 [ 486.807468][T15749] usb 6-1: config 0 interface 41 has no altsetting 0 [ 486.808970][T15749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.808986][T15749] usb 6-1: Product: syz [ 486.808995][T15749] usb 6-1: Manufacturer: syz [ 486.809005][T15749] usb 6-1: SerialNumber: syz [ 486.810517][T15749] usb 6-1: config 0 descriptor?? [ 487.008391][ T191] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 487.155193][ T191] usb 2-1: Using ep0 maxpacket: 32 [ 487.155711][ T191] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 487.158105][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.158122][ T191] usb 2-1: Product: syz [ 487.158131][ T191] usb 2-1: Manufacturer: syz [ 487.158140][ T191] usb 2-1: SerialNumber: syz [ 487.164111][ T191] empeg 2-1:1.0: empeg converter detected [ 487.380545][ T191] usb 2-1: empeg converter now attached to ttyUSB0 [ 487.554759][ T1106] Bluetooth: hci6: Frame reassembly failed (-84) [ 487.567000][T21200] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 487.591241][T15751] usb 2-1: USB disconnect, device number 79 [ 487.605288][T15751] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 487.605611][T15751] empeg 2-1:1.0: device disconnected [ 487.661438][T15749] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 487.661830][T15749] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 487.700043][T15749] usb 6-1: USB disconnect, device number 4 [ 487.811667][T21153] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.811759][T21153] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.811989][T21153] bridge_slave_0: entered allmulticast mode [ 487.839142][T21153] bridge_slave_0: entered promiscuous mode [ 487.859633][T21153] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.860345][T21153] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.860474][T21153] bridge_slave_1: entered allmulticast mode [ 487.862054][T21153] bridge_slave_1: entered promiscuous mode [ 487.934597][T21153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.948914][T21153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.009405][T21153] team0: Port device team_slave_0 added [ 488.012644][T21153] team0: Port device team_slave_1 added [ 488.073720][T21153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.073733][T21153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.073747][T21153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.109965][ T5607] Bluetooth: hci7: command tx timeout [ 488.134176][T21153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.134188][T21153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.134203][T21153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.267023][T21153] hsr_slave_0: entered promiscuous mode [ 488.267639][T21153] hsr_slave_1: entered promiscuous mode [ 488.268108][T21153] debugfs: 'hsr0' already exists in 'hsr' [ 488.268121][T21153] Cannot create hsr debugfs directory [ 488.882076][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6865'. [ 489.406093][T21246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6872'. [ 489.547873][ T5607] Bluetooth: hci6: command 0x1003 tx timeout [ 489.551410][ T5618] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 489.627103][T21153] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 489.671358][T21153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.671883][T21153] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 489.704933][T21153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.739719][T21153] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 489.755769][T21153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.756292][T21153] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 489.793168][T21153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.837764][ T191] kernel write not supported for file /snd/seq (pid: 191 comm: kworker/0:2) [ 490.090914][ T30] audit: type=1400 audit(1792315271.371:1859): avc: denied { cmd } for pid=21265 comm="syz.0.6878" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 490.150743][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6877'. [ 490.187318][ T5618] Bluetooth: hci7: command tx timeout [ 490.241842][T21153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.294642][T21153] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.354874][ T1484] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.354933][ T1484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.379877][ T1484] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.379933][ T1484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.327489][T21304] kvm_intel: kvm [21303]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x19b6 [ 491.720510][T21153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.271211][ T5618] Bluetooth: hci7: command tx timeout [ 492.606401][T21153] veth0_vlan: entered promiscuous mode [ 492.613590][T21347] netlink: 'syz.1.6905': attribute type 1 has an invalid length. [ 492.613606][T21347] netlink: 212 bytes leftover after parsing attributes in process `syz.1.6905'. [ 492.662971][T21153] veth1_vlan: entered promiscuous mode [ 492.768998][T21153] veth0_macvtap: entered promiscuous mode [ 492.787041][T21153] veth1_macvtap: entered promiscuous mode [ 492.837975][T21153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.863888][T21153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.877811][ T191] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 492.901544][ T159] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.901603][ T159] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.901635][ T159] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.918772][ T1106] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.027009][ T191] usb 6-1: Using ep0 maxpacket: 8 [ 493.028137][ T191] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 493.078817][ T191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.078837][ T191] usb 6-1: Product: syz [ 493.078847][ T191] usb 6-1: Manufacturer: syz [ 493.078856][ T191] usb 6-1: SerialNumber: syz [ 493.120612][ T191] usb 6-1: config 0 descriptor?? [ 493.124031][ T191] gspca_main: se401-2.14.0 probing 047d:5003 [ 493.312977][ T1484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.313007][ T1484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.504650][ T1555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.504667][ T1555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.782254][ T191] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input123 [ 494.037629][ T191] usb 6-1: USB disconnect, device number 5 [ 494.059824][T21365] netlink: 'syz.0.6912': attribute type 10 has an invalid length. [ 494.345994][ T5618] Bluetooth: hci7: command tx timeout [ 494.526544][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6918'. [ 494.526563][T21379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6918'. [ 494.572339][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6918'. [ 494.572358][T21379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6918'. [ 495.766567][ T30] audit: type=1400 audit(1792315277.051:1860): avc: denied { map } for pid=21404 comm="syz.0.6930" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 496.057231][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6935'. [ 496.061320][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6935'. [ 496.547739][T21436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6943'. [ 496.547763][T21436] block nbd0: Unsupported socket: should be TCP or UNIX. [ 496.712877][T21442] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 496.839787][ T30] audit: type=1400 audit(1792315278.121:1861): avc: denied { getopt } for pid=21443 comm="syz.6.6947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 497.446074][ T30] audit: type=1400 audit(1792315278.721:1862): avc: denied { bind } for pid=21459 comm="syz.6.6954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 497.488051][ T30] audit: type=1400 audit(1792315278.771:1863): avc: denied { listen } for pid=21459 comm="syz.6.6954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 497.630660][T21462] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 497.701151][T21469] xt_hashlimit: size too large, truncated to 1048576 [ 498.278266][T15749] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 498.426251][T15749] usb 1-1: Using ep0 maxpacket: 16 [ 498.427755][T15749] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 498.428878][T15749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.428897][T15749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.428911][T15749] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 498.428935][T15749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.430282][T21494] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6967'. [ 498.437361][T15749] usb 1-1: config 0 descriptor?? [ 498.838175][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6972'. [ 498.976757][T15749] microsoft 0003:045E:07DA.0089: ignoring exceeding usage max [ 498.977705][T15749] microsoft 0003:045E:07DA.0089: unsupported Resolution Multiplier 0 [ 499.034764][T21513] macvlan0: entered promiscuous mode [ 499.041574][T21513] netlink: 'syz.5.6974': attribute type 1 has an invalid length. [ 499.041590][T21513] netlink: 'syz.5.6974': attribute type 2 has an invalid length. [ 499.178018][T15749] microsoft 0003:045E:07DA.0089: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 499.203674][T15749] usb 1-1: USB disconnect, device number 84 [ 499.381260][T21522] fido_id[21522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 499.973655][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6986'. [ 500.008835][ T1124] IPVS: stopping estimator thread 0... [ 500.029004][T21543] kAFS: Invalid Command on /proc/fs/afs/cells file [ 500.260493][ T30] audit: type=1400 audit(1792315281.541:1864): avc: denied { map } for pid=21549 comm="syz.3.6990" path="/dev/video3" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 500.388565][T21559] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6992'. [ 500.588917][ T30] audit: type=1400 audit(1792315281.871:1865): avc: denied { map } for pid=21567 comm="syz.0.6997" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 500.693312][T21570] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6998'. [ 500.693347][T21570] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6998'. [ 500.693356][T21570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6998'. [ 500.723613][T15749] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 500.877460][T15749] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 500.878230][T15749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 500.878250][T15749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 500.878264][T15749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 500.878280][T15749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 500.879825][T15749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.879840][T15749] usb 4-1: Product: syz [ 500.879849][T15749] usb 4-1: Manufacturer: syz [ 500.879858][T15749] usb 4-1: SerialNumber: syz [ 500.970948][T15749] usb 4-1: config 0 descriptor?? [ 501.025771][ T30] audit: type=1400 audit(1792315282.311:1866): avc: denied { write } for pid=21575 comm="syz.5.7001" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 501.025821][ T30] audit: type=1400 audit(1792315282.311:1867): avc: denied { open } for pid=21575 comm="syz.5.7001" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 501.201074][T15749] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 501.258196][T21580] SELinux: ebitmap: truncated map [ 501.263676][T21580] SELinux: invalid class [ 501.290044][T21580] SELinux: failed to load policy [ 501.309234][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.333159][T21586] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 501.333386][T21586] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 501.333566][T21586] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 501.333711][T21586] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 501.335056][T21586] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 501.335221][T21586] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 501.429532][T21563] usb 4-1: Couldn't submit interrupt_out_urb -90 [ 501.430294][ T191] usb 4-1: USB disconnect, device number 84 [ 501.702867][T21601] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7013'. [ 501.793316][T21597] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 502.069830][T21616] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7019'. [ 502.069857][T21616] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7019'. [ 502.342379][T21636] loop5: detected capacity change from 0 to 7 [ 502.629619][T21636] Dev loop5: unable to read RDB block 7 [ 502.629661][T21636] loop5: unable to read partition table [ 502.629846][T21636] loop5: partition table beyond EOD, truncated [ 502.629890][T21636] loop_reread_partitions: partition scan of loop5 (كWý* 4FLQk݊5) failed (rc=-5) [ 503.005141][T15735] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 503.149639][ T30] audit: type=1400 audit(1792315284.431:1868): avc: denied { watch } for pid=21655 comm="syz.5.7038" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 503.179536][T15735] usb 1-1: Using ep0 maxpacket: 16 [ 503.180136][T15735] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 503.195656][T15735] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.195692][T15735] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.195724][T15735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.199271][T15735] usb 1-1: config 0 descriptor?? [ 503.305073][T15737] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 503.393654][ T30] audit: type=1400 audit(1792315284.681:1869): avc: denied { shutdown } for pid=21662 comm="syz.6.7041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 503.478895][T15737] usb 4-1: Using ep0 maxpacket: 8 [ 503.480557][T15737] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 503.482869][T15737] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 503.482917][T15737] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 503.482947][T15737] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 503.482997][T15737] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 503.483028][T15737] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.483073][T15737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.597551][ T30] audit: type=1326 audit(1792315284.891:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21666 comm="syz.6.7043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33879e559 code=0x7ffc0000 [ 503.597634][ T30] audit: type=1326 audit(1792315284.891:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21666 comm="syz.6.7043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33879e559 code=0x7ffc0000 [ 503.600977][ T30] audit: type=1326 audit(1792315284.891:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21666 comm="syz.6.7043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33879e559 code=0x7ffc0000 [ 503.601112][ T30] audit: type=1326 audit(1792315284.891:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21666 comm="syz.6.7043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33879e559 code=0x7ffc0000 [ 503.601539][ T30] audit: type=1326 audit(1792315284.891:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21666 comm="syz.6.7043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb33879e559 code=0x7ffc0000 [ 503.601979][ T30] audit: type=1326 audit(1792315284.891:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21666 comm="syz.6.7043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33879e559 code=0x7ffc0000 [ 503.779653][T15735] mcp2221 0003:04D8:00DD.008A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 503.803158][T15737] usb 4-1: GET_CAPABILITIES returned 0 [ 503.803206][T15737] usbtmc 4-1:16.0: can't read capabilities [ 504.031135][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.032451][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.032512][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.032565][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.032617][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.032858][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.032912][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.032962][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.033182][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.033234][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.033281][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.033332][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.034645][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.034707][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.073669][T15749] usb 1-1: USB disconnect, device number 85 [ 504.173306][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.173354][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.221278][ T191] usb 4-1: USB disconnect, device number 85 [ 504.998785][T21716] netlink: 'syz.5.7065': attribute type 23 has an invalid length. [ 505.287419][T21734] syz_tun: entered promiscuous mode [ 505.288173][T21733] syz_tun: left promiscuous mode [ 506.629188][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7097'. [ 506.629323][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7097'. [ 506.655763][T21791] team0: No ports can be present during mode change [ 506.744419][T21795] MTRR 1 not used [ 506.863530][T21803] loop9: detected capacity change from 0 to 7 [ 506.864476][T21803] Dev loop9: unable to read RDB block 7 [ 506.864513][T21803] loop9: unable to read partition table [ 506.864710][T21803] loop9: partition table beyond EOD, truncated [ 506.864740][T21803] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 507.147961][T21820] ip_tables: iptables: counters copy to user failed while replacing table [ 548.022994][ T5607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 548.223901][ T5607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 548.248103][ T5607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 548.369212][ T5607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 548.462736][ T5607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 550.607943][ T5607] Bluetooth: hci6: command tx timeout [ 552.666183][ T5607] Bluetooth: hci6: command tx timeout [ 554.747857][ T5607] Bluetooth: hci6: command tx timeout [ 556.834093][ T5607] Bluetooth: hci6: command tx timeout [ 562.843822][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.564246][ T5607] Bluetooth: hci5: command 0x0406 tx timeout [ 607.116019][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.152386][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.201708][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.432612][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.457333][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 609.800214][ T5618] Bluetooth: hci5: command tx timeout [ 611.880815][ T5618] Bluetooth: hci5: command tx timeout [ 613.990696][ T5618] Bluetooth: hci5: command tx timeout [ 616.036459][ T5607] Bluetooth: hci5: command tx timeout [ 616.611384][ T138] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.428106][ T32] INFO: task syz-executor:5605 blocked for more than 143 seconds. [ 618.428148][ T32] Tainted: G L syzkaller #0 [ 618.428174][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.428194][ T32] task:syz-executor state:D stack:22120 pid:5605 tgid:5605 ppid:1 task_flags:0x400140 flags:0x00080002 [ 618.428300][ T32] Call Trace: [ 618.428319][ T32] [ 618.428529][ T32] __schedule+0x1259/0x6920 [ 618.428648][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 618.428878][ T32] ? do_raw_spin_lock+0x128/0x260 [ 618.429233][ T32] ? lock_acquire+0x1d1/0x380 [ 618.429324][ T32] ? __pfx___schedule+0x10/0x10 [ 618.429376][ T32] ? find_held_lock+0x2b/0x80 [ 618.429501][ T32] ? schedule+0x225/0x2c0 [ 618.429956][ T32] schedule+0xdd/0x2c0 [ 618.430075][ T32] schedule_preempt_disabled+0x13/0x30 [ 618.430149][ T32] __mutex_lock+0xccb/0x1bd0 [ 618.430287][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 618.430620][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 618.430918][ T32] ? net_generic+0x25/0x2a0 [ 618.431154][ T32] ? net_generic+0xea/0x2a0 [ 618.431208][ T32] ? net_generic+0xea/0x2a0 [ 618.431550][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 618.431629][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 618.431800][ T32] nfsd_umount+0x3b/0x60 [ 618.431881][ T32] deactivate_locked_super+0xbd/0x130 [ 618.431992][ T32] deactivate_super+0xea/0x110 [ 618.432189][ T32] cleanup_mnt+0xb7/0x160 [ 618.432355][ T32] task_work_run+0x150/0x240 [ 618.432526][ T32] ? __pfx_task_work_run+0x10/0x10 [ 618.432944][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 618.433080][ T32] ? rcu_is_watching+0x13/0xc0 [ 618.433224][ T32] do_syscall_64+0x661/0x790 [ 618.433436][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.433518][ T32] RIP: 0033:0x7ff99739f797 [ 618.433649][ T32] RSP: 002b:00007ffd45f4ce48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 618.433707][ T32] RAX: 0000000000000000 RBX: 00007ff997434efb RCX: 00007ff99739f797 [ 618.433741][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd45f4cf00 [ 618.433774][ T32] RBP: 00007ffd45f4cf00 R08: 00007ffd45f4df00 R09: 00000000ffffffff [ 618.433810][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd45f4df90 [ 618.433832][ T32] R13: 00007ff997434efb R14: 0000000000072da5 R15: 00007ffd45f4dfd0 [ 618.434389][ T32] [ 618.434504][ T32] [ 618.434504][ T32] Showing all locks held in the system: [ 618.434524][ T32] locks held by kworker/u8:1/13: 3, last CPU#1: [ 618.434548][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 618.434664][ T32] #1: ffffc90000127d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 618.434800][ T32] #2: ffff888037970258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 618.753929][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 618.753967][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 618.754165][ T32] locks held by kworker/u8:6/138: 9, last CPU#0: [ 618.754198][ T32] #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 618.754336][ T32] #1: ffffc90002defd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 618.754442][ T32] #2: ffffffff91cbd2c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 618.754574][ T32] #3: ffff88807eb06128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 618.754732][ T32] #4: ffff88802d914258 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 618.937286][ T32] #5: ffffffff91cd5e00 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x1a6/0x970 [ 619.047700][ T32] #6: ffff88801e2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 619.047908][ T32] #7: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 619.048066][ T32] #8: ffff88801e2c7210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x183/0xb80 [ 619.048248][ T32] locks held by kworker/u8:7/159: 3, last CPU#1: [ 619.048283][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 619.048462][ T32] #1: ffffc90002e8fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 619.048564][ T32] #2: ffff88802d7d1258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 619.048713][ T32] locks held by kworker/u8:11/1438: 3, last CPU#0: [ 619.048737][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 619.048882][ T32] #1: ffffc90006037d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 619.049051][ T32] #2: ffff88802f0e6258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 619.145532][ T32] locks held by kworker/u8:15/1555: 4, last CPU#1: [ 619.145557][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 619.145659][ T32] #1: ffffc900065a7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 619.145787][ T32] #2: ffff8880555d0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 619.145928][ T32] #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 619.146114][ T32] locks held by syslogd/4955: 2, last CPU#1: [ 619.146146][ T32] #0: ffff88807f824170 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 619.146335][ T32] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 619.146468][ T32] locks held by getty/5364: 2, on CPU#1: [ 619.146490][ T32] #0: ffff88803615c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 619.146608][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 619.146743][ T32] locks held by syz-executor/5605: 2, on CPU#0: [ 619.146777][ T32] #0: ffff88802d4280e8 (&type->s_umount_key#81){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 619.356347][ T32] #1: ffffffff90289d60 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 619.356492][ T32] locks held by syz-executor/5606: 2, on CPU#0: [ 619.356520][ T32] #0: ffff8880532da0e8 (&type->s_umount_key#81){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 619.356699][ T32] #1: ffffffff90289d60 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 619.356885][ T32] locks held by kworker/0:3/5609: 2, last CPU#0: [ 619.356919][ T32] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 619.357057][ T32] #1: ffffc900036ffd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 619.357240][ T32] locks held by syz.4.6466/20294: 3, on CPU#0: [ 619.357266][ T32] #0: ffff88807ffe2630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 619.357405][ T32] #1: ffff88807f1c0460 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 619.357590][ T32] #2: ffffffff90289d60 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 619.631572][ T32] locks held by syz.6.6989/21550: 1, on CPU#1: [ 619.631607][ T32] #0: ffffffff91cd5e00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 619.631791][ T32] locks held by kworker/u8:21/21840: 3, last CPU#1: [ 619.631812][ T32] #0: ffff8880361e4940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 619.631911][ T32] #1: ffffc90006557d08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 619.632030][ T32] #2: ffff88802caf01c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0 [ 619.632206][ T32] locks held by kworker/u8:22/21842: 3, on CPU#1: [ 619.632234][ T32] #0: ffff888035f89140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 619.632392][ T32] #1: ffffc90006537d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 619.632568][ T32] #2: ffffffff91cd5e00 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 619.632699][ T32] locks held by kworker/u8:24/21853: 2, on CPU#1: [ 619.632721][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 619.632829][ T32] #1: ffffc9000411fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 619.668537][ T32] locks held by kworker/u8:25/21854: 3, last CPU#1: [ 619.668562][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 619.668678][ T32] #1: ffffc90006517d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 619.668809][ T32] #2: ffff88802f0e6258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 619.668988][ T32] locks held by kworker/u8:26/21855: 3, on CPU#1: [ 619.669019][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 619.669203][ T32] #1: ffffc9000372fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 619.669319][ T32] #2: ffffffff91cd5e00 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 619.669434][ T32] locks held by kworker/u8:27/21856: 3, last CPU#1: [ 619.669459][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 619.669587][ T32] #1: ffffc900046efd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 619.669735][ T32] #2: ffff888037970258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 619.669927][ T32] locks held by udevd/21879: 2, last CPU#0: [ 619.669959][ T32] #0: ffff888034b18f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 619.670126][ T32] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x7a/0x410 [ 619.670241][ T32] locks held by udevd/21883: 2, last CPU#1: [ 619.670265][ T32] #0: ffff888034b1f180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 619.670394][ T32] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 619.670544][ T32] locks held by modprobe/21884: 1, last CPU#0: [ 619.678894][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 619.679164][ T32] [ 619.679176][ T32] ============================================= [ 619.679176][ T32] [ 619.679222][ T32] NMI backtrace for cpu 1 [ 619.679247][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 619.679285][ T32] Tainted: [L]=SOFTLOCKUP [ 619.679302][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 619.679324][ T32] Call Trace: [ 619.679357][ T32] [ 619.679397][ T32] dump_stack_lvl+0x100/0x190 [ 619.679600][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 619.679818][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 619.679881][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 619.680026][ T32] sys_info+0x141/0x190 [ 619.680139][ T32] watchdog+0xcb1/0x1030 [ 619.680478][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 619.680565][ T32] ? __pfx_watchdog+0x10/0x10 [ 619.680708][ T32] ? __kthread_parkme+0x18f/0x230 [ 619.681024][ T32] ? kthread+0x13a/0x450 [ 619.681066][ T32] ? __pfx_watchdog+0x10/0x10 [ 619.681108][ T32] kthread+0x373/0x450 [ 619.681178][ T32] ? __pfx_kthread+0x10/0x10 [ 619.681340][ T32] ret_from_fork+0x730/0xd60 [ 619.681524][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 619.681715][ T32] ? __switch_to+0x800/0x10f0 [ 619.681807][ T32] ? __pfx_kthread+0x10/0x10 [ 619.681968][ T32] ret_from_fork_asm+0x1a/0x30 [ 619.682560][ T32] [ 619.682716][ T32] Sending NMI from CPU 1 to CPUs 0: [ 619.682770][ C0] NMI backtrace for cpu 0 [ 619.682791][ C0] CPU: 0 UID: 0 PID: 15749 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.682826][ C0] Tainted: [L]=SOFTLOCKUP [ 619.682840][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 619.682864][ C0] Workqueue: events_power_efficient gc_worker [ 619.682919][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x20 [ 619.682971][ C0] Code: 0c 24 89 f2 89 fe bf 05 00 00 00 e9 1a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 48 89 f2 48 89 fe bf 07 00 00 00 e9 e8 fd [ 619.682999][ C0] RSP: 0018:ffffc9000205f940 EFLAGS: 00000246 [ 619.683034][ C0] RAX: 0000000000000000 RBX: 8000000000000001 RCX: 0000000000000001 [ 619.683057][ C0] RDX: ffff888048698000 RSI: 0000000000000000 RDI: 0000000000000000 [ 619.683080][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 619.683103][ C0] R10: 0000000000000000 R11: 746e756f63716573 R12: 0000000000000000 [ 619.683127][ C0] R13: 0000000000000026 R14: ffffffff8fce62c0 R15: ffffffff8bf19b60 [ 619.683152][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 619.683183][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.683209][ C0] CR2: 000055fa062bebe0 CR3: 000000000fb96000 CR4: 00000000003526f0 [ 619.683234][ C0] Call Trace: [ 619.683265][ C0] [ 619.683285][ C0] tracing_gen_ctx_irq_test+0xa3/0x190 [ 619.683491][ C0] trace_event_buffer_reserve+0x172/0x350 [ 619.683668][ C0] trace_event_raw_event_lock_acquire+0x12c/0x330 [ 619.683850][ C0] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 619.684411][ C0] lock_acquire+0xe7/0x380 [ 619.684517][ C0] ? gc_worker+0x21a/0x1a10 [ 619.684652][ C0] ? __pfx___might_resched+0x10/0x10 [ 619.684714][ C0] ? gc_worker+0xc71/0x1a10 [ 619.684891][ C0] gc_worker+0x22b/0x1a10 [ 619.684960][ C0] ? gc_worker+0x21a/0x1a10 [ 619.685349][ C0] ? __pfx_gc_worker+0x10/0x10 [ 619.685433][ C0] ? process_one_work+0x906/0x1b10 [ 619.685504][ C0] ? process_one_work+0x906/0x1b10 [ 619.685836][ C0] process_one_work+0xac7/0x1b10 [ 619.686332][ C0] ? __pfx_process_one_work+0x10/0x10 [ 619.686423][ C0] ? lock_acquire+0x1d1/0x380 [ 619.686814][ C0] ? __pfx_gc_worker+0x10/0x10 [ 619.686979][ C0] worker_thread+0x5ef/0xe50 [ 619.687449][ C0] ? kthread+0x13a/0x450 [ 619.687497][ C0] ? __pfx_worker_thread+0x10/0x10 [ 619.687538][ C0] kthread+0x373/0x450 [ 619.687619][ C0] ? __pfx_kthread+0x10/0x10 [ 619.687807][ C0] ret_from_fork+0x730/0xd60 [ 619.688019][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 619.688075][ C0] ? rcu_is_watching+0x13/0xc0 [ 619.688152][ C0] ? __switch_to+0x800/0x10f0 [ 619.688264][ C0] ? __pfx_kthread+0x10/0x10 [ 619.688456][ C0] ret_from_fork_asm+0x1a/0x30 [ 619.689031][ C0] [ 620.055259][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 620.570683][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 620.581383][ T32] Tainted: [L]=SOFTLOCKUP [ 620.585715][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 620.595777][ T32] Call Trace: [ 620.599091][ T32] [ 620.602061][ T32] dump_stack_lvl+0x100/0x190 [ 620.606978][ T32] vpanic+0x553/0x970 [ 620.611019][ T32] ? __pfx_vpanic+0x10/0x10 [ 620.615905][ T32] panic+0xd1/0xe0 [ 620.619745][ T32] ? __pfx_panic+0x10/0x10 [ 620.624351][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 620.630599][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 620.636802][ T32] ? watchdog.cold+0x1ec/0x234 [ 620.641772][ T32] watchdog.cold+0x1fd/0x234 [ 620.646632][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 620.652560][ T32] ? __pfx_watchdog+0x10/0x10 [ 620.657390][ T32] ? __kthread_parkme+0x18f/0x230 [ 620.662582][ T32] ? kthread+0x13a/0x450 [ 620.666868][ T32] ? __pfx_watchdog+0x10/0x10 [ 620.671589][ T32] kthread+0x373/0x450 [ 620.675756][ T32] ? __pfx_kthread+0x10/0x10 [ 620.680547][ T32] ret_from_fork+0x730/0xd60 [ 620.685219][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 620.690469][ T32] ? __switch_to+0x800/0x10f0 [ 620.695278][ T32] ? __pfx_kthread+0x10/0x10 [ 620.700071][ T32] ret_from_fork_asm+0x1a/0x30 [ 620.705377][ T32] [ 620.708422][ T32] Kernel Offset: disabled [ 620.712793][ T32] Rebooting in 86400 seconds..