last executing test programs: 22.141320164s ago: executing program 3 (id=1995): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 21.973769962s ago: executing program 3 (id=1998): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 21.455893404s ago: executing program 3 (id=2005): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 21.354427186s ago: executing program 3 (id=2007): r0 = getpid() io_setup(0x7, &(0x7f0000000000)=0x0) r2 = syz_pidfd_open(r0, 0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 21.071552138s ago: executing program 3 (id=2012): syz_open_dev$media(&(0x7f0000000100), 0x8000, 0x20000) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 20.806420906s ago: executing program 3 (id=2016): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 8.793381392s ago: executing program 4 (id=2105): syz_open_dev$video4linux(&(0x7f0000000000), 0xd6, 0x0) r0 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x8f87, 0x10100, 0x5, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 8.405259287s ago: executing program 4 (id=2109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 8.055915704s ago: executing program 4 (id=2111): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'bond0\x00', 0xff}) 7.335806422s ago: executing program 4 (id=2118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 6.867566429s ago: executing program 4 (id=2122): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$VT_RESIZE(r1, 0x5609, 0x0) 6.749040119s ago: executing program 2 (id=2124): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) madvise(&(0x7f00003f3000/0x400000)=nil, 0x400000, 0x16) 6.328545485s ago: executing program 0 (id=2126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xca, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) 5.912000454s ago: executing program 4 (id=2128): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='\f'], 0xaf) 5.872624101s ago: executing program 0 (id=2130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x20, r1, 0x607, 0x0, 0x0, {0x27}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 5.676744631s ago: executing program 2 (id=2131): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @remote}, 0x10) 5.522531149s ago: executing program 1 (id=2132): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x101702, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40) 5.521072203s ago: executing program 0 (id=2133): r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r0, 0x409, 0xd) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 5.223969946s ago: executing program 0 (id=2134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 5.121937598s ago: executing program 1 (id=2135): r0 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r0, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) setgroups(0x0, 0x0) 4.975866132s ago: executing program 2 (id=2136): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) 4.793189264s ago: executing program 2 (id=2137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002540)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301"], 0x20}}, 0x0) 4.723650293s ago: executing program 1 (id=2138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}}, 0x4004010) 4.682623837s ago: executing program 0 (id=2139): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_gettime(0x0, &(0x7f0000000040)) 2.652012123s ago: executing program 0 (id=2140): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'bond0\x00', 0xff}) 2.651898314s ago: executing program 1 (id=2141): r0 = io_uring_setup(0xfc8, &(0x7f0000000400)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r1, &(0x7f0000000240)=""/81, 0x51, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.651813416s ago: executing program 2 (id=2142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000280)=""/219) 2.060597903s ago: executing program 2 (id=2143): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.449981777s ago: executing program 1 (id=2144): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x4080) 0s ago: executing program 1 (id=2145): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0xfffffffd, 0x1}}) kernel console output (not intermixed with test programs): : denied { remount } for pid=6974 comm="syz.4.679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 203.362611][ T6975] option changes via remount are deprecated (pid=6974 comm=syz.4.679) [ 203.523744][ T30] audit: type=1400 audit(1727245887.989:385): avc: denied { unmount } for pid=5236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 203.608688][ T5297] usb 4-1: USB disconnect, device number 10 [ 203.641374][ T5297] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 204.081370][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.136826][ T30] audit: type=1400 audit(1727245888.579:386): avc: denied { mount } for pid=6988 comm="syz.0.696" name="/" dev="hugetlbfs" ino=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 204.285629][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 204.321902][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.347605][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.360005][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 204.368777][ T6991] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 204.383845][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.415560][ T9] usb 5-1: config 0 descriptor?? [ 204.660759][ T6997] netlink: 4056 bytes leftover after parsing attributes in process `syz.3.689'. [ 204.697113][ T6997] openvswitch: netlink: Actions may not be safe on all matching packets [ 204.881636][ T9] nzxt-smart2 0003:1E71:200F.000B: item fetching failed at offset 1/5 [ 204.912799][ T9] nzxt-smart2 0003:1E71:200F.000B: probe with driver nzxt-smart2 failed with error -22 [ 205.212846][ T5297] usb 5-1: USB disconnect, device number 9 [ 205.251671][ T5230] Bluetooth: hci5: command 0x1003 tx timeout [ 205.260160][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.260461][ T5239] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 205.268419][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.533780][ T30] audit: type=1400 audit(1727245889.989:387): avc: denied { name_bind } for pid=7013 comm="syz.2.698" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 205.648419][ T7018] gfs2: gfs2 mount does not exist [ 206.107600][ T7036] team0: entered allmulticast mode [ 206.121046][ T7036] team_slave_0: entered allmulticast mode [ 206.146121][ T7036] team_slave_1: entered allmulticast mode [ 206.173176][ T7036] team0: Cannot enslave team device to itself [ 206.383737][ T30] audit: type=1400 audit(1727245890.819:388): avc: denied { ioctl } for pid=7038 comm="syz.1.718" path="socket:[12922]" dev="sockfs" ino=12922 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.927363][ T30] audit: type=1400 audit(1727245891.379:389): avc: denied { mount } for pid=7055 comm="syz.2.716" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 207.263470][ T7065] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 207.271447][ T25] IPVS: starting estimator thread 0... [ 207.286771][ T30] audit: type=1400 audit(1727245891.739:390): avc: denied { read write } for pid=7062 comm="syz.2.719" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 207.336076][ T30] audit: type=1400 audit(1727245891.739:391): avc: denied { open } for pid=7062 comm="syz.2.719" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 207.421359][ T7068] IPVS: using max 14 ests per chain, 33600 per kthread [ 208.259163][ T30] audit: type=1400 audit(1727245892.709:392): avc: denied { write } for pid=7091 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.311769][ T30] audit: type=1400 audit(1727245892.709:393): avc: denied { nlmsg_write } for pid=7091 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.578563][ T7098] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 208.850752][ T7106] option changes via remount are deprecated (pid=7105 comm=syz.1.739) [ 208.902389][ T30] audit: type=1400 audit(1727245893.349:394): avc: denied { setopt } for pid=7109 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.103007][ T30] audit: type=1400 audit(1727245893.539:395): avc: denied { bind } for pid=7113 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.184022][ T30] audit: type=1400 audit(1727245893.589:396): avc: denied { getopt } for pid=7113 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.366520][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 209.385464][ T7129] netlink: 2060 bytes leftover after parsing attributes in process `syz.1.751'. [ 209.396949][ T7129] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 209.411536][ T7129] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.751'. [ 210.281509][ T1172] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 210.498968][ T1172] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 210.511341][ T1172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.543475][ T1172] usb 1-1: config 0 descriptor?? [ 210.579241][ T1172] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 210.624551][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 210.624572][ T30] audit: type=1400 audit(1727245895.089:400): avc: denied { sqpoll } for pid=7171 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 210.934924][ T7181] netlink: 'syz.4.773': attribute type 11 has an invalid length. [ 211.033908][ T1172] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 211.412177][ T46] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 211.445812][ T1172] gspca_cpia1: usb_control_msg 02, error -71 [ 211.456115][ T1172] gspca_cpia1: usb_control_msg 05, error -71 [ 211.472212][ T1172] cpia1 1-1:0.0: unexpected systemstate: 00 [ 211.499450][ T1172] usb 1-1: USB disconnect, device number 8 [ 211.614436][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.637836][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.648176][ T46] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 211.659210][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.677545][ T46] usb 4-1: config 0 descriptor?? [ 212.125091][ T46] uclogic 0003:5543:0042.000C: No inputs registered, leaving [ 212.132933][ T30] audit: type=1400 audit(1727245896.579:401): avc: denied { mount } for pid=7207 comm="syz.2.785" name="/" dev="rpc_pipefs" ino=13162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 212.168281][ T46] uclogic 0003:5543:0042.000C: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 212.344733][ T5274] usb 4-1: USB disconnect, device number 11 [ 213.433370][ T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 213.553138][ T30] audit: type=1400 audit(1727245898.009:402): avc: denied { setopt } for pid=7249 comm="syz.3.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.644768][ T46] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.669332][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.720901][ T46] usb 2-1: config 0 descriptor?? [ 213.739261][ T46] cp210x 2-1:0.0: cp210x converter detected [ 213.868456][ T7250] ebtables: ebtables: counters copy to user failed while replacing table [ 214.099092][ T7260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.810'. [ 214.321540][ T7268] kernel read not supported for file /cpuset.effective_cpus (pid: 7268 comm: syz.0.815) [ 214.363293][ T46] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 214.371103][ T30] audit: type=1800 audit(1727245898.809:403): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.815" name="cpuset.effective_cpus" dev="mqueue" ino=13284 res=0 errno=0 [ 214.375108][ T46] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 214.462718][ T46] usb 2-1: cp210x converter now attached to ttyUSB0 [ 214.517042][ T46] usb 2-1: USB disconnect, device number 7 [ 214.531903][ T5230] Bluetooth: hci1: command 0x0405 tx timeout [ 214.587932][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 214.642423][ T46] cp210x 2-1:0.0: device disconnected [ 214.698045][ T30] audit: type=1400 audit(1727245899.159:404): avc: denied { write } for pid=5274 comm="kworker/0:4" path="socket:[13307]" dev="sockfs" ino=13307 scontext=system_u:system_r:kernel_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 214.949547][ T30] audit: type=1400 audit(1727245899.399:405): avc: denied { read } for pid=7285 comm="syz.3.823" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 215.025974][ T30] audit: type=1400 audit(1727245899.399:406): avc: denied { open } for pid=7285 comm="syz.3.823" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 215.090393][ T30] audit: type=1400 audit(1727245899.409:407): avc: denied { ioctl } for pid=7285 comm="syz.3.823" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 215.281386][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 215.291203][ T7299] wireguard0: entered promiscuous mode [ 215.299520][ T7299] wireguard0: entered allmulticast mode [ 215.490586][ T30] audit: type=1400 audit(1727245899.939:408): avc: denied { read } for pid=7306 comm="syz.2.833" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 215.531348][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 215.579605][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 215.602020][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 215.635913][ T30] audit: type=1400 audit(1727245899.939:409): avc: denied { open } for pid=7306 comm="syz.2.833" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 215.690322][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 215.713641][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.750102][ T30] audit: type=1400 audit(1727245899.999:410): avc: denied { map } for pid=7306 comm="syz.2.833" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 215.786375][ T46] usb 5-1: Product: syz [ 215.790725][ T46] usb 5-1: Manufacturer: syz [ 215.804654][ T46] usb 5-1: SerialNumber: syz [ 215.853135][ T46] usb 5-1: config 0 descriptor?? [ 215.858936][ T30] audit: type=1400 audit(1727245900.309:411): avc: denied { map } for pid=7310 comm="syz.1.836" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 215.922505][ T7316] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 215.936609][ T46] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 215.949354][ T30] audit: type=1400 audit(1727245900.309:412): avc: denied { execute } for pid=7310 comm="syz.1.836" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 215.973818][ T46] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 216.598337][ T46] em28xx 5-1:0.0: chip ID is em2870 [ 216.598576][ T5274] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 216.707903][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 216.821437][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 216.837896][ T5274] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 216.851383][ T5274] usb 3-1: config 0 has no interface number 0 [ 216.857590][ T5274] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 216.898815][ T5274] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 216.929954][ T5274] usb 3-1: config 0 interface 126 has no altsetting 0 [ 216.990978][ T46] usb 5-1: USB disconnect, device number 10 [ 216.990978][ T5274] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 216.991022][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.008925][ T46] em28xx 5-1:0.0: Disconnecting em28xx [ 217.039679][ T5274] usb 3-1: Product: syz [ 217.047451][ T7332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.058744][ T46] em28xx 5-1:0.0: Freeing device [ 217.080359][ T5274] usb 3-1: Manufacturer: syz [ 217.088167][ T5274] usb 3-1: SerialNumber: syz [ 217.112709][ T5274] usb 3-1: config 0 descriptor?? [ 217.133125][ T7321] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 217.141916][ T7321] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 217.552629][ T46] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 217.597952][ T5274] ir_usb 3-1:0.126: IR Dongle converter detected [ 217.752142][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 217.772811][ T46] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 217.802355][ T5274] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 217.807684][ T46] usb 4-1: config 0 has no interface number 0 [ 217.831349][ T46] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 217.861816][ T46] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 217.900968][ T46] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 217.932137][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.940262][ T46] usb 4-1: Product: syz [ 217.970176][ T46] usb 4-1: Manufacturer: syz [ 217.986766][ T46] usb 4-1: SerialNumber: syz [ 218.007841][ T46] usb 4-1: config 0 descriptor?? [ 218.023810][ T7339] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.044582][ T7339] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.065985][ T1172] usb 3-1: USB disconnect, device number 5 [ 218.110691][ T1172] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 218.142259][ T1172] ir_usb 3-1:0.126: device disconnected [ 218.323688][ T7339] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.331342][ T7339] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.564778][ T7373] netlink: 'syz.1.861': attribute type 1 has an invalid length. [ 218.573942][ T7373] netlink: 224 bytes leftover after parsing attributes in process `syz.1.861'. [ 218.769482][ T46] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 218.806704][ T46] asix 4-1:0.251: probe with driver asix failed with error -524 [ 218.988035][ T25] usb 4-1: USB disconnect, device number 12 [ 219.166605][ T7390] usb usb8: usbfs: process 7390 (syz.0.868) did not claim interface 0 before use [ 219.481760][ T30] audit: type=1326 audit(1727245903.929:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.4.873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f134137def9 code=0x0 [ 219.517669][ T7401] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 219.777069][ T7411] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 220.671382][ T30] audit: type=1400 audit(1727245905.109:414): avc: denied { bind } for pid=7436 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.052240][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 221.272846][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 221.280996][ T46] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 221.289700][ T46] usb 1-1: config 0 has no interface number 1 [ 221.304452][ T46] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.325389][ T46] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 221.355695][ T46] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 221.375829][ T46] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 221.405112][ T46] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.469133][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 221.503424][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.537537][ T46] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 221.553196][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.585025][ T46] usb 1-1: Product: syz [ 221.599004][ T7464] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 221.599781][ T46] usb 1-1: Manufacturer: syz [ 221.636844][ T46] usb 1-1: SerialNumber: syz [ 221.665779][ T46] usb 1-1: config 0 descriptor?? [ 221.685131][ T7441] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 221.740555][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.795197][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.822086][ T46] usb 1-1: invalid MIDI in EP 0 [ 221.977152][ T46] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 222.009700][ T30] audit: type=1400 audit(1727245906.459:415): avc: denied { mount } for pid=7472 comm="syz.2.908" name="/" dev="ramfs" ino=14240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 222.052447][ T46] usb 1-1: USB disconnect, device number 9 [ 222.099252][ T30] audit: type=1400 audit(1727245906.549:416): avc: denied { create } for pid=7472 comm="syz.2.908" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 222.252439][ T30] audit: type=1400 audit(1727245906.709:417): avc: denied { unmount } for pid=5233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 222.691625][ T1172] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 222.701878][ T5273] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 222.731337][ T5274] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 222.742195][ T5297] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 222.876007][ T1172] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.888653][ T1172] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 222.898054][ T1172] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 222.916787][ T1172] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 222.922814][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.926719][ T5274] usb 5-1: Using ep0 maxpacket: 8 [ 222.945221][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.951366][ T1172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.959942][ T5273] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 222.974937][ T5297] usb 2-1: Using ep0 maxpacket: 8 [ 222.981530][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.981561][ T1172] usb 3-1: Product: syz [ 222.996639][ T5297] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.011173][ T5273] usb 4-1: config 0 descriptor?? [ 223.013303][ T5274] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 223.016636][ T5297] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.032069][ T1172] usb 3-1: Manufacturer: syz [ 223.041469][ T1172] usb 3-1: SerialNumber: syz [ 223.053517][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.060235][ T5297] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.063460][ T1172] usb 3-1: config 0 descriptor?? [ 223.081912][ T5274] usb 5-1: Product: syz [ 223.092605][ T5274] usb 5-1: Manufacturer: syz [ 223.093806][ T5297] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.097263][ T5274] usb 5-1: SerialNumber: syz [ 223.113359][ T1172] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 223.129591][ T5274] usb 5-1: config 0 descriptor?? [ 223.136245][ T1172] usb 3-1: No valid video chain found. [ 223.142226][ T5297] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.148663][ T5274] gspca_main: sq930x-2.14.0 probing 2770:930c [ 223.167077][ T5297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.294094][ T30] audit: type=1400 audit(1727245907.739:418): avc: denied { write } for pid=7493 comm="syz.0.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 223.453083][ T5297] usb 2-1: GET_CAPABILITIES returned 0 [ 223.458996][ T5297] usbtmc 2-1:16.0: can't read capabilities [ 223.599065][ T30] audit: type=1400 audit(1727245908.049:419): avc: denied { connect } for pid=7497 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 223.783986][ T5297] usb 2-1: USB disconnect, device number 8 [ 223.904689][ T1172] usb 3-1: USB disconnect, device number 6 [ 224.003316][ T5274] gspca_sq930x: ucbus_write failed -71 [ 224.241334][ T5274] gspca_sq930x: Sensor ov9630 not yet treated [ 224.251181][ T5274] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 224.277743][ T5274] usb 5-1: USB disconnect, device number 11 [ 225.123930][ T30] audit: type=1400 audit(1727245909.569:420): avc: denied { attach_queue } for pid=7530 comm="syz.0.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 225.143884][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.366059][ T30] audit: type=1400 audit(1727245909.809:421): avc: denied { mount } for pid=7535 comm="syz.4.938" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 225.490826][ T5273] usbhid 4-1:0.0: can't add hid device: -71 [ 225.519510][ T5273] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 225.561541][ T7542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.939'. [ 225.575404][ T5273] usb 4-1: USB disconnect, device number 13 [ 225.593288][ T30] audit: type=1400 audit(1727245910.039:422): avc: denied { unmount } for pid=5236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 225.830913][ T30] audit: type=1400 audit(1727245910.279:423): avc: denied { listen } for pid=7548 comm="syz.4.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.017518][ T30] audit: type=1400 audit(1727245910.469:424): avc: denied { shutdown } for pid=7554 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.152763][ T5297] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 226.372188][ T5297] usb 3-1: Using ep0 maxpacket: 8 [ 226.391597][ T5297] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 226.399132][ T5297] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 226.440970][ T5297] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.468205][ T5297] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.488979][ T7568] netlink: 48 bytes leftover after parsing attributes in process `syz.4.952'. [ 226.519463][ T5297] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.545947][ T5297] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 226.571423][ T5297] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 226.594688][ T5297] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.631268][ T5297] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.673219][ T5297] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.715331][ T5297] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 226.733435][ T5297] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 226.771971][ T5297] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.804960][ T5297] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.829772][ T5297] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.857004][ T5297] usb 3-1: string descriptor 0 read error: -22 [ 226.867212][ T5297] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 226.887584][ T5297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.918447][ T5297] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 227.101691][ T25] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 227.345410][ T25] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 227.368335][ T25] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 227.383743][ T5297] usb 3-1: USB disconnect, device number 7 [ 227.410683][ T25] usb 5-1: config 0 has no interface number 0 [ 227.441467][ T25] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 227.462477][ T25] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 227.485360][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.512791][ T25] usb 5-1: config 0 descriptor?? [ 227.524749][ T7574] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 228.172913][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 228.181726][ T25] usb 5-1: USB disconnect, device number 12 [ 228.387974][ T46] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 228.407793][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.437255][ T46] usb 1-1: Product: syz [ 228.440881][ T7596] Illegal XDP return value 4294967274 on prog (id 111) dev N/A, expect packet loss! [ 228.457047][ T46] usb 1-1: Manufacturer: syz [ 228.463532][ T46] usb 1-1: SerialNumber: syz [ 228.481989][ T46] usb 1-1: config 0 descriptor?? [ 228.567952][ T30] audit: type=1400 audit(1727245913.019:425): avc: denied { unmount } for pid=5233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 228.754415][ T7606] netlink: 830 bytes leftover after parsing attributes in process `syz.2.966'. [ 229.314101][ T46] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 229.341999][ T46] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 229.362354][ T46] asix 1-1:0.0: probe with driver asix failed with error -71 [ 229.391763][ T46] usb 1-1: USB disconnect, device number 10 [ 229.696071][ T30] audit: type=1400 audit(1727245914.149:426): avc: denied { mount } for pid=7625 comm="syz.2.977" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 230.049453][ T7632] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.978'. [ 230.801431][ T1172] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 231.001361][ T1172] usb 1-1: Using ep0 maxpacket: 16 [ 231.021380][ T1172] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 231.029756][ T1172] usb 1-1: config 0 has no interface number 0 [ 231.036162][ T1172] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 231.058348][ T1172] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 231.071268][ T1172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.088534][ T1172] usb 1-1: Product: syz [ 231.097581][ T1172] usb 1-1: Manufacturer: syz [ 231.107834][ T1172] usb 1-1: SerialNumber: syz [ 231.124269][ T1172] usb 1-1: config 0 descriptor?? [ 231.729131][ T30] audit: type=1400 audit(1727245916.179:427): avc: denied { read } for pid=7653 comm="syz.1.988" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 231.812248][ T1172] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input15 [ 231.826382][ T30] audit: type=1400 audit(1727245916.179:428): avc: denied { open } for pid=7653 comm="syz.1.988" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 232.145477][ T25] usb 1-1: USB disconnect, device number 11 [ 232.199978][ T7661] input: syz0 as /devices/virtual/input/input16 [ 232.935431][ T7645] Bluetooth: hci0: command 0x0406 tx timeout [ 232.941932][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 232.948097][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 232.954286][ T7645] Bluetooth: hci3: command 0x0406 tx timeout [ 233.322063][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 233.503996][ T7691] netlink: 'syz.4.1003': attribute type 12 has an invalid length. [ 233.522756][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 233.541304][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 233.555416][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.596112][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.656435][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 233.666291][ T25] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 233.675922][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.719445][ T7695] vlan2: entered promiscuous mode [ 233.730599][ T25] usb 1-1: config 0 descriptor?? [ 234.393629][ T30] audit: type=1400 audit(1727245918.849:429): avc: denied { listen } for pid=7710 comm="syz.2.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.422659][ T25] razer 0003:1532:011B.000D: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.0-1/input0 [ 234.436815][ T7709] tap0: tun_chr_ioctl cmd 1074025672 [ 234.450503][ T30] audit: type=1400 audit(1727245918.879:430): avc: denied { read } for pid=7710 comm="syz.2.1012" path="socket:[15656]" dev="sockfs" ino=15656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.477422][ T7709] tap0: ignored: set checksum enabled [ 234.655740][ T5280] IPVS: starting estimator thread 0... [ 234.665006][ T25] usb 1-1: USB disconnect, device number 12 [ 234.761826][ T7721] IPVS: using max 16 ests per chain, 38400 per kthread [ 235.661428][ T7750] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1030'. [ 235.701642][ T7750] netlink: 'syz.2.1030': attribute type 1 has an invalid length. [ 235.991592][ T30] audit: type=1400 audit(1727245920.429:431): avc: denied { map } for pid=7758 comm="syz.3.1033" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 236.082399][ T30] audit: type=1400 audit(1727245920.439:432): avc: denied { setopt } for pid=7758 comm="syz.3.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 236.392944][ T5280] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 236.456663][ T7774] netlink: 'syz.3.1041': attribute type 29 has an invalid length. [ 236.499682][ T7774] netlink: 'syz.3.1041': attribute type 29 has an invalid length. [ 236.601343][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 236.691678][ T5280] usb 1-1: unable to get BOS descriptor or descriptor too short [ 236.699500][ T5280] usb 1-1: no configurations [ 236.730730][ T5280] usb 1-1: can't read configurations, error -22 [ 237.349238][ T7793] input: syz1 as /devices/virtual/input/input17 [ 237.674283][ T30] audit: type=1400 audit(1727245922.129:433): avc: denied { setopt } for pid=7805 comm="syz.1.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.028754][ T7813] Process accounting resumed [ 238.049313][ T7813] kernel write not supported for file /472/clear_refs (pid: 7813 comm: syz.1.1059) [ 238.131534][ T46] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 238.321449][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 238.324449][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.324502][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.324574][ T46] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 238.324620][ T46] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.324659][ T46] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 238.328957][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.329005][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.329041][ T46] usb 4-1: Product: syz [ 238.329068][ T46] usb 4-1: Manufacturer: syz [ 238.329095][ T46] usb 4-1: SerialNumber: syz [ 238.339252][ T7822] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 238.623340][ T46] cdc_ncm 4-1:1.0: bind() failure [ 238.631091][ T46] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 238.631167][ T46] cdc_ncm 4-1:1.1: bind() failure [ 238.660524][ T46] usb 4-1: USB disconnect, device number 14 [ 238.788927][ T30] audit: type=1400 audit(1727245923.239:434): avc: denied { unmount } for pid=5236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 239.005936][ T7834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.243419][ T30] audit: type=1326 audit(1727245923.699:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7839 comm="syz.4.1072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f134137def9 code=0x0 [ 239.328294][ T7844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1074'. [ 239.557736][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1076'. [ 239.810386][ T30] audit: type=1400 audit(1727245924.259:436): avc: denied { map } for pid=7851 comm="syz.2.1077" path="socket:[15883]" dev="sockfs" ino=15883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.951685][ T30] audit: type=1326 audit(1727245924.349:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.3.1078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e157def9 code=0x0 [ 240.552042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 242.447613][ T7914] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1104'. [ 242.493927][ T7916] netlink: 'syz.4.1103': attribute type 3 has an invalid length. [ 242.529982][ T7916] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1103'. [ 244.552983][ T7961] GUP no longer grows the stack in syz.1.1126 (7961): 20004000-2000a000 (20002000) [ 244.584283][ T7961] CPU: 0 UID: 0 PID: 7961 Comm: syz.1.1126 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 244.594745][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 244.604877][ T7961] Call Trace: [ 244.608205][ T7961] [ 244.611175][ T7961] dump_stack_lvl+0x16c/0x1f0 [ 244.615932][ T7961] gup_vma_lookup+0x1d2/0x220 [ 244.620715][ T7961] __get_user_pages+0x261/0x15c0 [ 244.625753][ T7961] ? __pfx___get_user_pages+0x10/0x10 [ 244.631191][ T7961] ? down_read_killable+0xcc/0x380 [ 244.636372][ T7961] ? __pfx_down_read_killable+0x10/0x10 [ 244.642002][ T7961] ? __pfx_mark_lock+0x10/0x10 [ 244.646857][ T7961] __gup_longterm_locked+0x22e/0x1b30 [ 244.652311][ T7961] ? __pfx_lock_release+0x10/0x10 [ 244.657421][ T7961] ? __pfx___gup_longterm_locked+0x10/0x10 [ 244.663307][ T7961] ? mark_held_locks+0x9f/0xe0 [ 244.668163][ T7961] gup_fast_fallback+0x153d/0x24e0 [ 244.673381][ T7961] ? __pfx_gup_fast_fallback+0x10/0x10 [ 244.678926][ T7961] ? __lock_acquire+0xbdd/0x3cb0 [ 244.683963][ T7961] get_user_pages_fast+0xa8/0x100 [ 244.689065][ T7961] ? __pfx_get_user_pages_fast+0x10/0x10 [ 244.694795][ T7961] __iov_iter_get_pages_alloc+0x8f6/0x2240 [ 244.700701][ T7961] ? rcu_is_watching+0x12/0xc0 [ 244.705546][ T7961] ? trace_contention_end+0xea/0x140 [ 244.710929][ T7961] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 244.717257][ T7961] ? __fget_files+0x23a/0x3f0 [ 244.722006][ T7961] ? __pfx_lock_release+0x10/0x10 [ 244.727112][ T7961] ? pipe_lock+0x64/0x80 [ 244.731422][ T7961] ? __pfx___mutex_lock+0x10/0x10 [ 244.736507][ T7961] iov_iter_get_pages2+0xa4/0x100 [ 244.742126][ T7961] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 244.747835][ T7961] ? wait_for_space+0x224/0x2d0 [ 244.752791][ T7961] __do_sys_vmsplice+0x7c6/0x1230 [ 244.757912][ T7961] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 244.763455][ T7961] ? wake_up_q+0x9e/0x140 [ 244.767896][ T7961] ? find_held_lock+0x2d/0x110 [ 244.772810][ T7961] ? do_syscall_64+0xcd/0x250 [ 244.777552][ T7961] do_syscall_64+0xcd/0x250 [ 244.782116][ T7961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.788091][ T7961] RIP: 0033:0x7fb09697def9 [ 244.792575][ T7961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.812256][ T7961] RSP: 002b:00007fb0976de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 244.820738][ T7961] RAX: ffffffffffffffda RBX: 00007fb096b35f80 RCX: 00007fb09697def9 [ 244.828765][ T7961] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 244.836791][ T7961] RBP: 00007fb0969f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 244.844823][ T7961] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 244.852844][ T7961] R13: 0000000000000000 R14: 00007fb096b35f80 R15: 00007ffc8d020fe8 [ 244.860892][ T7961] [ 244.908765][ T7967] capability: warning: `syz.2.1129' uses 32-bit capabilities (legacy support in use) [ 245.016385][ T30] audit: type=1326 audit(1727245929.459:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e157def9 code=0x7ffc0000 [ 245.091706][ T30] audit: type=1326 audit(1727245929.459:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e157def9 code=0x7ffc0000 [ 245.192289][ T30] audit: type=1326 audit(1727245929.489:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3e157def9 code=0x7ffc0000 [ 245.267394][ T30] audit: type=1326 audit(1727245929.499:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e157def9 code=0x7ffc0000 [ 245.361366][ T30] audit: type=1326 audit(1727245929.499:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e157def9 code=0x7ffc0000 [ 245.407548][ T30] audit: type=1326 audit(1727245929.539:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fa3e157def9 code=0x7ffc0000 [ 245.475209][ T30] audit: type=1326 audit(1727245929.539:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e157def9 code=0x7ffc0000 [ 245.486773][ T5273] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 245.506670][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 245.564491][ T30] audit: type=1326 audit(1727245929.539:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e157def9 code=0x7ffc0000 [ 245.667124][ T30] audit: type=1326 audit(1727245929.569:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fa3e157def9 code=0x7ffc0000 [ 245.763339][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.795839][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.801338][ T30] audit: type=1326 audit(1727245929.569:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e157def9 code=0x7ffc0000 [ 245.835825][ T5273] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 245.854173][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.899540][ T5273] usb 1-1: config 0 descriptor?? [ 246.429642][ T5273] nti 0003:0757:0A00.000E: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.0-1/input0 [ 246.897675][ T5273] usb 1-1: USB disconnect, device number 15 [ 246.971655][ T5274] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 247.194396][ T5274] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 247.223953][ T5274] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 247.258563][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.306320][ T5274] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 247.555655][ T8021] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1153'. [ 247.611559][ T8021] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1153'. [ 248.082319][ T5273] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 248.162779][ T8042] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 248.272067][ T5273] usb 1-1: Using ep0 maxpacket: 32 [ 248.297696][ T5273] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 248.326353][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.367458][ T5273] usb 1-1: Product: syz [ 248.380901][ T5273] usb 1-1: Manufacturer: syz [ 248.386263][ T5274] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 248.386297][ T5274] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 248.387185][ T5274] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 248.404220][ T5273] usb 1-1: SerialNumber: syz [ 248.427388][ T5273] usb 1-1: config 0 descriptor?? [ 248.447928][ T8048] netlink: 'syz.3.1165': attribute type 64 has an invalid length. [ 248.470732][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'. [ 248.625325][ T1172] usb 5-1: USB disconnect, device number 13 [ 249.091829][ T46] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 249.191579][ T5273] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 249.391329][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.418334][ T46] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 249.435566][ T46] usb 2-1: can't read configurations, error -71 [ 249.500520][ T5274] usb 1-1: USB disconnect, device number 16 [ 249.504013][ T8074] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 249.533989][ T8074] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 250.069702][ T8090] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1183'. [ 250.087924][ T8090] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 250.246376][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 251.027330][ T8110] netlink: 'syz.4.1193': attribute type 10 has an invalid length. [ 251.112323][ T8110] veth1_macvtap: left promiscuous mode [ 251.322645][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 251.383286][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.417223][ T8114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.443134][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.463111][ T8114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.092201][ T4615] Bluetooth: hci3: unexpected event for opcode 0x201c [ 252.846335][ T8154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1212'. [ 253.050075][ T8161] trusted_key: encrypted_key: keyword 'wpdate' not recognized [ 253.694469][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 253.694492][ T30] audit: type=1400 audit(1727245938.149:457): avc: denied { bind } for pid=8179 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 253.745336][ T30] audit: type=1400 audit(1727245938.149:458): avc: denied { name_bind } for pid=8179 comm="syz.4.1224" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 253.773549][ T30] audit: type=1400 audit(1727245938.149:459): avc: denied { node_bind } for pid=8179 comm="syz.4.1224" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 253.843946][ T30] audit: type=1400 audit(1727245938.169:460): avc: denied { listen } for pid=8179 comm="syz.4.1224" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 253.952244][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 254.168371][ T25] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 254.182251][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.209891][ T25] usb 1-1: Product: syz [ 254.218679][ T25] usb 1-1: Manufacturer: syz [ 254.231303][ T25] usb 1-1: SerialNumber: syz [ 254.253962][ T25] usb 1-1: config 0 descriptor?? [ 254.751942][ T25] usb 1-1: Firmware: major: 152, minor: 239, hardware type: HULUSB (4) [ 254.963679][ T25] usb 1-1: failed to fetch extended address, random address set [ 255.096070][ T25] usb 1-1: USB disconnect, device number 17 [ 255.275353][ T30] audit: type=1400 audit(1727245939.729:461): avc: denied { create } for pid=8221 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.372359][ T30] audit: type=1400 audit(1727245939.809:462): avc: denied { bind } for pid=8221 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.609557][ T8233] tap0: tun_chr_ioctl cmd 1074025678 [ 255.619984][ T8233] tap0: group set to 0 [ 255.760132][ T5273] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 255.900836][ T30] audit: type=1400 audit(1727245940.349:463): avc: denied { ioctl } for pid=8239 comm="syz.1.1245" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 255.917992][ T8244] PKCS7: Unknown OID: [5] 0.0 [ 255.938547][ T8244] PKCS7: Only support pkcs7_signedData type [ 255.962722][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 255.971572][ T5273] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 255.989615][ T5273] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 256.012152][ T5273] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.035427][ T5273] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.053327][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.061995][ T5273] usb 3-1: Product: syz [ 256.067736][ T5273] usb 3-1: Manufacturer: syz [ 256.106588][ T5273] usb 3-1: SerialNumber: syz [ 256.241469][ T8251] use of bytesused == 0 is deprecated and will be removed in the future, [ 256.252342][ T8251] use the actual size instead. [ 256.326552][ T30] audit: type=1400 audit(1727245940.779:464): avc: denied { bind } for pid=8252 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.832022][ T5273] usb 3-1: 0:2 : does not exist [ 257.114986][ T30] audit: type=1326 audit(1727245941.569:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09697def9 code=0x7ffc0000 [ 257.154477][ T30] audit: type=1326 audit(1727245941.569:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09697def9 code=0x7ffc0000 [ 257.202121][ T5273] usb 3-1: USB disconnect, device number 8 [ 257.205000][ T8277] netlink: 201400 bytes leftover after parsing attributes in process `syz.4.1263'. [ 257.301405][ T5274] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 257.505118][ T5274] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.517729][ T5274] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.537331][ T5274] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.548458][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.568758][ T5274] usb 1-1: Product: syz [ 257.584438][ T5274] usb 1-1: Manufacturer: syz [ 257.596549][ T5274] usb 1-1: SerialNumber: syz [ 257.651447][ T8289] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 257.658099][ T8289] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 257.669500][ T8289] vhci_hcd vhci_hcd.0: Device attached [ 257.687888][ T8289] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 257.694477][ T8289] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 257.712586][ T8289] vhci_hcd vhci_hcd.0: Device attached [ 257.727366][ T8292] vhci_hcd: connection closed [ 257.729209][ T8290] vhci_hcd: connection closed [ 257.730784][ T29] vhci_hcd: stop threads [ 257.752178][ T29] vhci_hcd: release socket [ 257.757066][ T29] vhci_hcd: disconnect device [ 257.769472][ T29] vhci_hcd: stop threads [ 257.776309][ T29] vhci_hcd: release socket [ 257.781156][ T29] vhci_hcd: disconnect device [ 258.101434][ T5297] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 258.302031][ T5297] usb 5-1: Using ep0 maxpacket: 8 [ 258.302964][ T8311] tipc: Started in network mode [ 258.315078][ T8311] tipc: Node identity ac14140f, cluster identity 4711 [ 258.327082][ T8311] tipc: New replicast peer: 255.255.255.255 [ 258.333964][ T5297] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 258.355988][ T8311] tipc: Enabled bearer , priority 10 [ 258.358385][ T5297] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 258.385094][ T5297] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.398032][ T5297] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.411808][ T5297] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.422996][ T5297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.476592][ T5274] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 258.488815][ T5274] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 258.524177][ T5274] cdc_ncm 1-1:1.0: bind() failure [ 258.549636][ T5274] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 258.567043][ T5274] cdc_ncm 1-1:1.1: bind() failure [ 258.599047][ T5274] usb 1-1: USB disconnect, device number 18 [ 258.690312][ T5297] usb 5-1: GET_CAPABILITIES returned 0 [ 258.717796][ T5297] usbtmc 5-1:16.0: can't read capabilities [ 259.002165][ T5274] usb 5-1: USB disconnect, device number 14 [ 259.354479][ T5280] tipc: Node number set to 2886997007 [ 259.485547][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 259.496945][ T8343] (unnamed net_device) (uninitialized): peer notification delay (2) is not a multiple of miimon (129), value rounded to 0 ms [ 259.510976][ T8343] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 259.546754][ T8343] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 259.934158][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 259.934183][ T30] audit: type=1400 audit(1727245944.389:469): avc: denied { read write } for pid=8354 comm="syz.2.1299" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 259.983491][ T30] audit: type=1400 audit(1727245944.419:470): avc: denied { open } for pid=8354 comm="syz.2.1299" path="/296/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 260.081518][ T5280] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 260.171995][ T5274] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 260.199910][ T30] audit: type=1400 audit(1727245944.649:471): avc: denied { append } for pid=8366 comm="syz.1.1304" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 260.302450][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 260.317522][ T5280] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 260.327150][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.351334][ T5280] usb 1-1: Product: syz [ 260.355602][ T5280] usb 1-1: Manufacturer: syz [ 260.360311][ T5280] usb 1-1: SerialNumber: syz [ 260.381410][ T5274] usb 4-1: Using ep0 maxpacket: 32 [ 260.392986][ T5274] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 260.401148][ T5274] usb 4-1: config 0 has no interface number 0 [ 260.408438][ T5280] usb 1-1: config 0 descriptor?? [ 260.425904][ T5280] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 260.436518][ T5274] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 260.448437][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.458555][ T5274] usb 4-1: Product: syz [ 260.483369][ T5274] usb 4-1: Manufacturer: syz [ 260.488125][ T5274] usb 4-1: SerialNumber: syz [ 260.533618][ T5274] usb 4-1: config 0 descriptor?? [ 260.554074][ T5274] smsc95xx v2.0.0 [ 260.871488][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 261.083150][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.105798][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.116791][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 261.126463][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.147529][ T9] usb 5-1: config 0 descriptor?? [ 261.211239][ C0] hrtimer: interrupt took 117964 ns [ 261.282652][ T5280] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 261.308653][ T5280] usb 1-1: USB disconnect, device number 19 [ 261.424598][ T5274] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 261.435843][ T5274] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 261.453145][ T5274] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 261.474969][ T5274] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 261.504189][ T5274] usb 4-1: USB disconnect, device number 15 [ 261.642193][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.673928][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.762989][ T9] sony 0003:054C:024B.000F: unknown main item tag 0x0 [ 261.769884][ T9] sony 0003:054C:024B.000F: unknown main item tag 0x0 [ 261.787138][ T9] sony 0003:054C:024B.000F: unexpected long global item [ 261.795552][ T9] sony 0003:054C:024B.000F: parse failed [ 261.807438][ T9] sony 0003:054C:024B.000F: probe with driver sony failed with error -22 [ 262.082678][ T9] usb 5-1: USB disconnect, device number 15 [ 262.167001][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.175525][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.331751][ T8396] bridge0: port 3(erspan0) entered blocking state [ 262.338447][ T8396] bridge0: port 3(erspan0) entered disabled state [ 262.361645][ T8396] erspan0: entered allmulticast mode [ 262.369509][ T8396] erspan0: entered promiscuous mode [ 263.705523][ T30] audit: type=1400 audit(1727245948.149:472): avc: denied { listen } for pid=8426 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 263.766934][ T30] audit: type=1400 audit(1727245948.159:473): avc: denied { accept } for pid=8426 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 264.182706][ T8438] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 264.227532][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.235998][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.264561][ T8438] bridge0: entered allmulticast mode [ 264.473761][ T8446] xt_NFQUEUE: number of total queues is 0 [ 264.880506][ T30] audit: type=1326 audit(1727245949.329:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.3.1348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e157def9 code=0x0 [ 265.331609][ T5297] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 265.541415][ T5297] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 265.557228][ T5297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.566210][ T5297] usb 2-1: Product: syz [ 265.570593][ T5297] usb 2-1: Manufacturer: syz [ 265.580726][ T5297] usb 2-1: SerialNumber: syz [ 265.599580][ T5297] usb 2-1: config 0 descriptor?? [ 265.625134][ T5297] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 265.635649][ T5297] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 265.654804][ T5297] usb-storage 2-1:0.0: USB Mass Storage device detected [ 265.687206][ T5297] usb-storage 2-1:0.0: device ignored [ 265.826328][ T30] audit: type=1400 audit(1727245950.279:475): avc: denied { connect } for pid=8490 comm="syz.3.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.876106][ T30] audit: type=1400 audit(1727245950.319:476): avc: denied { write } for pid=8490 comm="syz.3.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.089099][ T5274] usb 2-1: USB disconnect, device number 11 [ 266.404740][ T30] audit: type=1326 audit(1727245950.849:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fd57def9 code=0x7ffc0000 [ 266.428116][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.444087][ T30] audit: type=1326 audit(1727245950.859:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fd57def9 code=0x7ffc0000 [ 266.468498][ T30] audit: type=1326 audit(1727245950.859:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f79fd57def9 code=0x7ffc0000 [ 266.492451][ T5275] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 266.511663][ T30] audit: type=1326 audit(1727245950.859:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.2.1366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79fd57def9 code=0x0 [ 266.699232][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.709742][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.729723][ T5275] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 266.760852][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.783843][ T5275] usb 1-1: config 0 descriptor?? [ 266.804764][ T5275] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 266.959512][ T30] audit: type=1400 audit(1727245951.409:481): avc: denied { setopt } for pid=8520 comm="syz.1.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 267.238643][ T5275] cpia1 1-1:0.0: unexpected state after lo power cmd: 99 [ 267.470403][ T8535] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.516775][ T8537] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1379'. [ 267.531554][ T8537] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 267.648133][ T5275] gspca_cpia1: usb_control_msg 02, error -71 [ 267.661801][ T5274] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 267.678629][ T5275] gspca_cpia1: usb_control_msg 05, error -71 [ 267.685280][ T5275] cpia1 1-1:0.0: unexpected systemstate: 99 [ 267.700968][ T5275] usb 1-1: USB disconnect, device number 20 [ 267.883547][ T5274] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 267.892953][ T5274] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 267.914517][ T5274] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 267.951347][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.989154][ T5274] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 268.131342][ T30] audit: type=1400 audit(1727245952.579:482): avc: denied { write } for pid=8554 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 268.191475][ T30] audit: type=1326 audit(1727245952.639:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.1.1387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb09697def9 code=0x0 [ 268.225108][ T5274] gspca_sn9c2028: read1 error -32 [ 268.241045][ T8559] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8559 comm=syz.3.1390 [ 268.255803][ T5274] gspca_sn9c2028: read1 error -32 [ 268.256403][ T30] audit: type=1400 audit(1727245952.679:484): avc: denied { create } for pid=8558 comm="syz.3.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.509292][ T46] usb 5-1: USB disconnect, device number 16 [ 269.244269][ T5231] Bluetooth: hci5: sending frame failed (-49) [ 269.253297][ T4615] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 269.280739][ T1106] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 269.859243][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1415'. [ 269.869287][ T8614] netlink: 'syz.3.1415': attribute type 9 has an invalid length. [ 269.951342][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 270.145097][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.157601][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.169794][ T46] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 270.180024][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.192722][ T46] usb 2-1: config 0 descriptor?? [ 270.387509][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 270.421378][ T5273] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 270.611614][ T5273] usb 4-1: Using ep0 maxpacket: 32 [ 270.625965][ T5273] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 270.656027][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.704016][ T5273] usb 4-1: config 0 descriptor?? [ 270.734243][ T5273] gspca_main: sq930x-2.14.0 probing 041e:403c [ 271.055509][ T46] hid-led 0003:27B8:01ED.0010: probe with driver hid-led failed with error -71 [ 271.098214][ T46] usb 2-1: USB disconnect, device number 12 [ 271.282181][ T8652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1432'. [ 271.348481][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 271.348504][ T30] audit: type=1400 audit(1727245955.799:488): avc: denied { listen } for pid=8651 comm="syz.2.1433" lport=38386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.672007][ T5273] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 271.752310][ T5273] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 271.784612][ T5273] usb 4-1: USB disconnect, device number 16 [ 272.417536][ T8673] bridge_slave_0: default FDB implementation only supports local addresses [ 272.671085][ T30] audit: type=1400 audit(1727245957.119:489): avc: denied { mount } for pid=8681 comm="syz.4.1446" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 272.776929][ T8684] netlink: 'syz.1.1447': attribute type 3 has an invalid length. [ 272.814922][ T8684] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1447'. [ 273.317908][ T30] audit: type=1400 audit(1727245957.769:490): avc: denied { load_policy } for pid=8689 comm="syz.1.1450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 273.536461][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 273.564628][ T8692] team_slave_0: Device is already in use. [ 274.140527][ T8707] can0: slcan on ttyS3. [ 274.273664][ T8707] can0 (unregistered): slcan off ttyS3. [ 274.317488][ T30] audit: type=1400 audit(1727245958.769:491): avc: denied { mounton } for pid=8712 comm="syz.3.1461" path="/263/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 274.553407][ T30] audit: type=1400 audit(1727245959.009:492): avc: denied { unmount } for pid=5570 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 274.801483][ T5274] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 275.001313][ T5274] usb 2-1: Using ep0 maxpacket: 32 [ 275.032479][ T5274] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 275.048583][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.113100][ T5274] usb 2-1: config 0 descriptor?? [ 275.127121][ T5274] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 275.988834][ T5274] gspca_sunplus: reg_w_riv err -71 [ 276.021345][ T5274] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 276.040016][ T5274] usb 2-1: USB disconnect, device number 13 [ 276.855320][ T30] audit: type=1400 audit(1727245961.309:493): avc: denied { bind } for pid=8759 comm="syz.4.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.609532][ T8777] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 277.646448][ T30] audit: type=1400 audit(1727245962.089:494): avc: denied { create } for pid=8778 comm="syz.2.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 277.807751][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 278.465496][ T30] audit: type=1400 audit(1727245962.919:495): avc: denied { connect } for pid=8796 comm="syz.1.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 280.048355][ T8831] Bluetooth: MGMT ver 1.23 [ 280.312692][ T30] audit: type=1400 audit(1727245964.759:496): avc: denied { ioctl } for pid=8836 comm="syz.4.1513" path="socket:[19158]" dev="sockfs" ino=19158 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.975463][ T8858] bond_slave_0: entered promiscuous mode [ 281.290957][ T30] audit: type=1400 audit(1727245965.739:497): avc: denied { getopt } for pid=8868 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 281.431357][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 281.468132][ T8876] loop4: detected capacity change from 0 to 7 [ 281.499639][ T8876] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.531462][ T8876] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.557195][ T8876] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.581377][ T8876] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.598579][ T8876] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.606836][ T8876] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.621306][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 281.627381][ T8876] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.637777][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.651481][ T8876] ldm_validate_partition_table(): Disk read failed. [ 281.658203][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.670422][ T8876] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.680090][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 281.693363][ T8876] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.707060][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.715475][ T8876] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.734417][ T8876] Dev loop4: unable to read RDB block 0 [ 281.741593][ T9] usb 1-1: config 0 descriptor?? [ 281.757449][ T8876] loop4: unable to read partition table [ 281.785204][ T8876] loop4: partition table beyond EOD, truncated [ 281.816302][ T8876] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 281.816302][ T8876] ) failed (rc=-5) [ 282.000418][ T8891] mmap: syz.1.1538 (8891): VmData 54239232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 282.208687][ T9] elecom 0003:056E:00E6.0011: item fetching failed at offset 2/5 [ 282.242727][ T9] elecom 0003:056E:00E6.0011: probe with driver elecom failed with error -22 [ 282.430497][ T25] usb 1-1: USB disconnect, device number 21 [ 282.462277][ T8905] netlink: 'syz.1.1545': attribute type 7 has an invalid length. [ 282.503470][ T8905] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.513315][ T8905] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.522163][ T8905] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.530956][ T8905] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.771572][ T4615] Bluetooth: hci0: command 0x0406 tx timeout [ 283.197625][ T30] audit: type=1400 audit(1727245967.649:498): avc: denied { read } for pid=8930 comm="syz.4.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.046982][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 284.086819][ T46] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 284.289297][ T46] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.307959][ T46] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.335065][ T46] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.364254][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 284.379174][ T46] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 284.399033][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.437644][ T46] usb 4-1: config 0 descriptor?? [ 284.878565][ T30] audit: type=1400 audit(1727245969.329:499): avc: denied { write } for pid=8983 comm="syz.1.1582" name="usbmon4" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 284.902096][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.939932][ T46] hid (null): report_id 0 is invalid [ 284.968591][ T46] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 284.984766][ T46] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 284.999267][ T46] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 285.020930][ T46] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 285.041065][ T46] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 285.057745][ T46] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 285.072990][ T46] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 285.089031][ T46] asus 0003:0B05:1ABE.0012: report_id 0 is invalid [ 285.116264][ T46] asus 0003:0B05:1ABE.0012: item 0 1 1 8 parsing failed [ 285.143217][ T46] asus 0003:0B05:1ABE.0012: Asus hid parse failed: -22 [ 285.159528][ T46] asus 0003:0B05:1ABE.0012: probe with driver asus failed with error -22 [ 285.193457][ T46] usb 4-1: USB disconnect, device number 17 [ 286.347478][ T30] audit: type=1400 audit(1727245970.789:500): avc: denied { view } for pid=9025 comm="syz.0.1600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 286.414666][ T9022] ptrace attach of "./syz-executor exec"[9027] was attempted by ""[9022] [ 286.588398][ T9035] overlayfs: disabling nfs_export due to verity=require [ 287.052390][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 287.282004][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 287.302412][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 287.329067][ T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 287.359916][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.377549][ T9] usb 2-1: Product: syz [ 287.389001][ T9] usb 2-1: Manufacturer: syz [ 287.404850][ T9] usb 2-1: SerialNumber: syz [ 287.429981][ T9] usb 2-1: config 0 descriptor?? [ 287.445936][ T9040] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 287.456474][ T9040] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 287.685798][ T9040] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 287.715850][ T9040] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 287.847037][ T5275] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 288.068962][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 288.078415][ T5275] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 288.088177][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.101770][ T5275] usb 3-1: config 0 descriptor?? [ 288.114258][ T5275] gspca_main: sunplus-2.14.0 probing 041e:400b [ 288.140289][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 288.343669][ T9] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 288.390219][ T9] usb 2-1: USB disconnect, device number 14 [ 288.990644][ T5275] gspca_sunplus: reg_r err -71 [ 289.011544][ T5275] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 289.014001][ T9094] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 289.042005][ T5275] usb 3-1: USB disconnect, device number 9 [ 289.084095][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'. [ 289.108428][ T9092] IPVS: stopping backup sync thread 9094 ... [ 289.541115][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.549716][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.002565][ T30] audit: type=1400 audit(1727245974.459:501): avc: denied { create } for pid=9118 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 290.049387][ T30] audit: type=1400 audit(1727245974.489:502): avc: denied { ioctl } for pid=9118 comm="syz.3.1644" path="socket:[20790]" dev="sockfs" ino=20790 ioctlcmd=0x8b26 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 290.224588][ T4615] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 290.234926][ T4615] Bluetooth: hci2: Injecting HCI hardware error event [ 290.247252][ T4615] Bluetooth: hci2: hardware error 0x00 [ 290.433966][ T46] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 290.631419][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 290.640552][ T46] usb 1-1: config index 0 descriptor too short (expected 65324, got 44) [ 290.661417][ T46] usb 1-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 290.695952][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.717103][ T46] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 290.730635][ T46] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 290.746757][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.758157][ T46] usb 1-1: Product: syz [ 290.774624][ T46] usb 1-1: Manufacturer: syz [ 290.804798][ T46] usb 1-1: SerialNumber: syz [ 290.844041][ T46] usb 1-1: config 0 descriptor?? [ 291.131459][ T30] audit: type=1400 audit(1727245975.579:503): avc: denied { mount } for pid=9148 comm="syz.1.1659" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 291.204849][ T46] usb 1-1: USB disconnect, device number 22 [ 291.223130][ T30] audit: type=1400 audit(1727245975.659:504): avc: denied { unmount } for pid=5234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 291.271959][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 291.489020][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.516830][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.553789][ T9] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 291.569700][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.589152][ T9] usb 4-1: config 0 descriptor?? [ 291.892827][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 291.918278][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 291.961029][ T9] usb 4-1: USB disconnect, device number 18 [ 292.294642][ T4615] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 292.311426][ T9171] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 292.753736][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 292.786725][ T30] audit: type=1400 audit(1727245977.239:505): avc: denied { checkpoint_restore } for pid=9180 comm="syz.0.1671" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 292.961497][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 292.977353][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 293.002240][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 293.045223][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 293.071596][ T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 293.095485][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 293.112927][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 293.127449][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 293.147384][ T9] usb 2-1: Product: syz [ 293.161703][ T9] usb 2-1: Manufacturer: syz [ 293.171256][ T9] usb 2-1: SerialNumber: syz [ 293.190074][ T9] usb 2-1: config 0 descriptor?? [ 293.211582][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 293.235902][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 293.319383][ T30] audit: type=1400 audit(1727245977.769:506): avc: denied { append } for pid=9194 comm="syz.3.1677" name="media0" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.355544][ T5275] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 293.591455][ T5275] usb 3-1: Using ep0 maxpacket: 16 [ 293.608560][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.623764][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.633975][ T5275] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 293.643230][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.675457][ T5275] usb 3-1: config 0 descriptor?? [ 294.145940][ T9211] syz.0.1685[9211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.150275][ T9211] syz.0.1685[9211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.166648][ T5275] logitech 0003:046D:C29C.0013: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 294.462202][ T9218] netlink: 'syz.0.1688': attribute type 1 has an invalid length. [ 294.482429][ T9218] netlink: 'syz.0.1688': attribute type 4 has an invalid length. [ 294.490440][ T9218] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1688'. [ 294.554062][ T5275] logitech 0003:046D:C29C.0013: no inputs found [ 294.594004][ T5275] usb 3-1: USB disconnect, device number 10 [ 294.907338][ T30] audit: type=1400 audit(1727245979.359:507): avc: denied { getopt } for pid=9224 comm="syz.4.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 295.526748][ T46] usb 2-1: USB disconnect, device number 15 [ 295.562463][ T46] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 295.612384][ T5273] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 295.832574][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 295.856940][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.882641][ T5273] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 295.903653][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.921719][ T9254] misc userio: Invalid payload size [ 295.937136][ T5273] usb 4-1: config 0 descriptor?? [ 296.230520][ T9267] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1712'. [ 296.302118][ T9267] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 296.436535][ T5273] logitech-djreceiver 0003:046D:C52B.0014: unknown main item tag 0x0 [ 296.464540][ T5273] logitech-djreceiver 0003:046D:C52B.0014: unknown main item tag 0x0 [ 296.493117][ T5273] logitech-djreceiver 0003:046D:C52B.0014: unknown main item tag 0x0 [ 296.527003][ T5273] logitech-djreceiver 0003:046D:C52B.0014: unknown main item tag 0x0 [ 296.775762][ T9] usb 4-1: USB disconnect, device number 19 [ 296.991982][ T9282] batadv_slave_1: entered promiscuous mode [ 297.015100][ T9281] batadv_slave_1: left promiscuous mode [ 297.089696][ T9284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.292120][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1723'. [ 297.754601][ T9304] IPVS: persistence engine module ip_vs_pe_À not found [ 298.342682][ T9327] binder: 9326:9327 ioctl 400c620e 20000140 returned -22 [ 298.501956][ T9332] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 298.772298][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 298.988343][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.009831][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.033116][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 299.051410][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.067110][ T9] usb 3-1: config 0 descriptor?? [ 299.233473][ T30] audit: type=1400 audit(1727245983.689:508): avc: denied { connect } for pid=9343 comm="syz.1.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 299.488023][ T9354] netlink: zone id is out of range [ 299.504474][ T9354] netlink: zone id is out of range [ 299.514247][ T9333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.541704][ T9354] netlink: zone id is out of range [ 299.547552][ T9333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.565837][ T9] hid (null): report_id 0 is invalid [ 299.599227][ T9] uclogic 0003:5543:0003.0015: unknown main item tag 0x0 [ 299.611252][ T9354] netlink: set zone limit has 4 unknown bytes [ 299.617553][ T9] uclogic 0003:5543:0003.0015: unknown main item tag 0x4 [ 299.625970][ T9] uclogic 0003:5543:0003.0015: report_id 0 is invalid [ 299.650879][ T9] uclogic 0003:5543:0003.0015: item 0 2 1 8 parsing failed [ 299.670040][ T9] uclogic 0003:5543:0003.0015: parse failed [ 299.687466][ T9] uclogic 0003:5543:0003.0015: probe with driver uclogic failed with error -22 [ 299.795669][ T46] usb 3-1: USB disconnect, device number 11 [ 300.232672][ T9377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1765'. [ 300.257623][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 300.415852][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1767'. [ 301.695188][ T30] audit: type=1400 audit(1727245986.159:509): avc: denied { create } for pid=9416 comm="syz.3.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 301.714652][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.786459][ T30] audit: type=1400 audit(1727245986.239:510): avc: denied { setopt } for pid=9416 comm="syz.3.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 302.028347][ T9423] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 302.156147][ T9423] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 302.192359][ T9423] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 302.230861][ T9423] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 302.289575][ T9426] wlan1: mtu less than device minimum [ 302.326694][ T9430] netlink: 'syz.4.1788': attribute type 58 has an invalid length. [ 302.335318][ T9430] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1788'. [ 302.881336][ T30] audit: type=1400 audit(1727245987.319:511): avc: denied { watch watch_reads } for pid=9448 comm="syz.1.1798" path="/proc/790/task/791/pagemap" dev="proc" ino=21334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 303.845017][ T9464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1804'. [ 303.893132][ T9464] hsr_slave_0: entered allmulticast mode [ 304.288088][ T9479] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.421582][ T46] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 304.611724][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 304.642290][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 304.664615][ T46] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 304.674213][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.688166][ T46] usb 5-1: Product: syz [ 304.692652][ T46] usb 5-1: Manufacturer: syz [ 304.701401][ T5273] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 304.710304][ T46] usb 5-1: SerialNumber: syz [ 304.722638][ T46] usb 5-1: config 0 descriptor?? [ 304.733472][ T46] hub 5-1:0.0: bad descriptor, ignoring hub [ 304.742844][ T46] hub 5-1:0.0: probe with driver hub failed with error -5 [ 304.760056][ T46] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 304.784878][ T46] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 304.863961][ T46] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 304.906650][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.925126][ T5273] usb 2-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 304.944856][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.983261][ T5273] usb 2-1: config 0 descriptor?? [ 305.203074][ T25] usb 5-1: USB disconnect, device number 17 [ 305.218495][ T5273] usbhid 2-1:0.0: can't add hid device: -71 [ 305.245144][ T5273] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 305.266953][ T5273] usb 2-1: USB disconnect, device number 16 [ 305.657741][ T9518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1830'. [ 305.854997][ T9525] netlink: 'syz.3.1833': attribute type 10 has an invalid length. [ 305.863398][ T9525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1833'. [ 305.894613][ T9525] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.902667][ T9525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.910579][ T9525] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.918043][ T9525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.994669][ T9525] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 306.236337][ T9536] sctp: [Deprecated]: syz.0.1837 (pid 9536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.236337][ T9536] Use struct sctp_sack_info instead [ 306.774128][ T30] audit: type=1400 audit(1727245991.229:512): avc: denied { write } for pid=9552 comm="syz.2.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 307.095631][ T30] audit: type=1400 audit(1727245991.549:513): avc: denied { mount } for pid=9560 comm="syz.2.1851" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 307.117669][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.199074][ T30] audit: type=1400 audit(1727245991.649:514): avc: denied { unmount } for pid=5233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 308.712118][ T5273] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 308.777103][ T9610] netlink: 2548 bytes leftover after parsing attributes in process `syz.3.1872'. [ 308.787004][ T9610] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1872'. [ 308.919230][ T5273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.964515][ T5273] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 308.984219][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.015288][ T5273] usb 3-1: config 0 descriptor?? [ 309.312588][ T5273] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 309.359233][ T25] usb 3-1: USB disconnect, device number 12 [ 309.524785][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 309.535177][ T5273] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 309.559448][ T5273] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 309.589402][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.620265][ T5273] usb 1-1: Product: syz [ 309.642095][ T5273] usb 1-1: Manufacturer: syz [ 309.662629][ T5273] usb 1-1: SerialNumber: syz [ 309.683930][ T5273] usb 1-1: config 0 descriptor?? [ 309.734019][ T5273] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 309.755707][ T5273] usb 1-1: Detected FT232R [ 309.931654][ T5273] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 310.175555][ T5273] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 310.377612][ T5273] usb 1-1: USB disconnect, device number 23 [ 310.453061][ T5273] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 310.471869][ T5273] ftdi_sio 1-1:0.0: device disconnected [ 310.576012][ T30] audit: type=1400 audit(1727245995.029:515): avc: denied { append } for pid=9645 comm="syz.3.1889" name="event3" dev="devtmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 310.902410][ T5274] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 311.091386][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 311.123283][ T5274] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 311.141237][ T5274] usb 3-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 311.173505][ T5274] usb 3-1: config 0 has no interface number 0 [ 311.179726][ T5274] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 205, changing to 11 [ 311.221781][ T5274] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.263152][ T5274] usb 3-1: config 0 interface 52 has no altsetting 0 [ 311.302849][ T5274] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 311.312250][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 311.320569][ T5274] usb 3-1: Product: syz [ 311.356390][ T5274] usb 3-1: SerialNumber: syz [ 311.366705][ T5274] usb 3-1: config 0 descriptor?? [ 311.599570][ T5274] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input19 [ 311.833818][ T5274] usb 3-1: USB disconnect, device number 13 [ 312.318641][ T30] audit: type=1400 audit(1727245996.769:516): avc: denied { create } for pid=9703 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 312.414267][ T30] audit: type=1400 audit(1727245996.819:517): avc: denied { write } for pid=9703 comm="syz.1.1914" path="socket:[22122]" dev="sockfs" ino=22122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 312.496255][ T30] audit: type=1400 audit(1727245996.819:518): avc: denied { read } for pid=9703 comm="syz.1.1914" path="socket:[22122]" dev="sockfs" ino=22122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 312.764923][ T30] audit: type=1326 audit(1727245997.219:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.0.1922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x0 [ 313.092810][ T9729] team0: entered promiscuous mode [ 313.114153][ T9729] team_slave_0: entered promiscuous mode [ 313.136750][ T9729] team_slave_1: entered promiscuous mode [ 313.162226][ T9729] team0: left promiscuous mode [ 313.171468][ T9729] team_slave_0: left promiscuous mode [ 313.177355][ T9729] team_slave_1: left promiscuous mode [ 313.351324][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 313.529533][ T30] audit: type=1400 audit(1727245997.979:520): avc: denied { ioctl } for pid=9740 comm="syz.4.1931" path="socket:[22865]" dev="sockfs" ino=22865 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 313.619620][ T25] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 313.631398][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.691445][ T25] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 313.702424][ T25] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 313.710493][ T25] usb 3-1: Manufacturer: syz [ 313.743765][ T25] usb 3-1: config 0 descriptor?? [ 313.931470][ T25] rc_core: IR keymap rc-hauppauge not found [ 313.945080][ T25] Registered IR keymap rc-empty [ 313.960387][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 314.010373][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 314.057441][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 314.249553][ T25] usb 3-1: USB disconnect, device number 14 [ 314.330565][ T5273] kernel write not supported for file /amidi2 (pid: 5273 comm: kworker/1:4) [ 315.932089][ T30] audit: type=1400 audit(1727246000.379:521): avc: denied { connect } for pid=9799 comm="syz.4.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 316.250313][ T9808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.359879][ T30] audit: type=1400 audit(1727246000.809:522): avc: denied { setopt } for pid=9812 comm="syz.0.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.428868][ T30] audit: type=1400 audit(1727246000.839:523): avc: denied { read } for pid=9812 comm="syz.0.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.653162][ T9823] @: renamed from vlan0 (while UP) [ 317.657573][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1978'. [ 317.762098][ T5273] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 317.953307][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 317.973403][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.995942][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.019419][ T5273] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.058968][ T5273] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 318.087826][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.119819][ T5273] usb 1-1: config 0 descriptor?? [ 318.625151][ T5273] koneplus 0003:1E7D:2E22.0016: unknown main item tag 0x0 [ 318.653484][ T5273] koneplus 0003:1E7D:2E22.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 319.172334][ T5300] usb 1-1: USB disconnect, device number 24 [ 319.740564][ T9891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1997'. [ 319.794508][ T5231] Bluetooth: hci5: sending frame failed (-49) [ 319.803486][ T4615] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 319.825853][ T9892] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 320.363139][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 320.562116][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 320.570476][ T25] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.589993][ T25] usb 3-1: config 0 has no interface number 0 [ 320.607611][ T25] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.641626][ T25] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.670576][ T25] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 320.687110][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.705815][ T25] usb 3-1: config 0 descriptor?? [ 321.391308][ T5275] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 321.407752][ T25] uclogic 0003:28BD:0094.0017: pen parameters not found [ 321.422441][ T25] uclogic 0003:28BD:0094.0017: interface is invalid, ignoring [ 321.448623][ T25] usb 3-1: USB disconnect, device number 15 [ 321.596776][ T5275] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 321.621358][ T5300] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 321.624846][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.667417][ T5275] usb 1-1: Product: syz [ 321.677863][ T5275] usb 1-1: Manufacturer: syz [ 321.695793][ T5275] usb 1-1: SerialNumber: syz [ 321.729113][ T5275] usb 1-1: config 0 descriptor?? [ 321.837816][ T5300] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=51.d4 [ 321.857340][ T5300] usb 2-1: New USB device strings: Mfr=231, Product=37, SerialNumber=191 [ 321.877501][ T5300] usb 2-1: Product: syz [ 321.886710][ T5300] usb 2-1: Manufacturer: syz [ 321.897745][ T5300] usb 2-1: SerialNumber: syz [ 321.924148][ T5300] usb 2-1: config 0 descriptor?? [ 322.131929][ T5275] usb 1-1: USB disconnect, device number 25 [ 322.365096][ T5300] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 322.469536][ T9944] wg2: entered promiscuous mode [ 322.493203][ T9944] wg2: entered allmulticast mode [ 322.566521][ T5300] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 322.592771][ T5300] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 322.643523][ T5300] usb 2-1: USB disconnect, device number 17 [ 324.878699][ T30] audit: type=1400 audit(1727246009.329:524): avc: denied { read } for pid=9987 comm="syz.4.2044" laddr=fe80::13 lport=44480 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.440362][T10008] mmap: syz.2.2053 (10008) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 325.790629][T10015] @: renamed from vlan0 (while UP) [ 326.301743][ T5300] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 326.491579][ T5300] usb 2-1: Using ep0 maxpacket: 16 [ 326.501078][ T5300] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 326.532567][ T5300] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 326.565889][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 326.600527][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 326.642305][ T5300] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.684990][ T5300] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 326.707137][ T5300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.736566][ T5300] usb 2-1: Product: syz [ 326.748503][ T5300] usb 2-1: Manufacturer: syz [ 326.764862][ T5300] usb 2-1: SerialNumber: syz [ 326.814310][ T5300] usb 2-1: config 0 descriptor?? [ 327.202501][ T5300] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 327.205623][ T5300] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 327.370473][ T30] audit: type=1326 audit(1727246011.819:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 327.462672][ T30] audit: type=1326 audit(1727246011.819:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 327.541308][ T30] audit: type=1326 audit(1727246011.849:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 327.559228][ T25] usb 2-1: USB disconnect, device number 18 [ 327.637317][ T30] audit: type=1326 audit(1727246011.849:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 327.707840][ T30] audit: type=1326 audit(1727246011.849:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 327.784350][ T30] audit: type=1326 audit(1727246011.859:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 327.847456][ T30] audit: type=1326 audit(1727246011.859:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 327.906353][ T30] audit: type=1326 audit(1727246011.869:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 327.971332][ T30] audit: type=1326 audit(1727246011.869:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 328.138312][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.148085][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.672559][ T5300] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 328.767499][T10058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2075'. [ 328.882188][ T5300] usb 5-1: Using ep0 maxpacket: 16 [ 328.894661][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.926758][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.950733][ T5300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.985444][ T5300] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 328.998549][T10063] netlink: 'syz.1.2078': attribute type 10 has an invalid length. [ 329.008502][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.038538][ T5300] usb 5-1: config 0 descriptor?? [ 329.089948][T10063] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 329.137432][T10067] wlan1: mtu less than device minimum [ 329.359000][T10070] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 329.508761][ T5300] uclogic 0003:5543:0064.0018: item fetching failed at offset 10/11 [ 329.542859][ T5300] uclogic 0003:5543:0064.0018: parse failed [ 329.560335][ T5300] uclogic 0003:5543:0064.0018: probe with driver uclogic failed with error -22 [ 329.611505][ T5275] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 329.728748][ T5300] usb 5-1: USB disconnect, device number 18 [ 329.824769][ T5275] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 329.849574][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.869425][ T5275] usb 3-1: Product: syz [ 329.880150][ T5275] usb 3-1: Manufacturer: syz [ 329.895488][ T5275] usb 3-1: SerialNumber: syz [ 329.924325][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 329.924346][ T30] audit: type=1400 audit(1727246014.379:546): avc: denied { name_bind } for pid=10083 comm="syz.0.2087" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 329.924477][ T5275] usb 3-1: config 0 descriptor?? [ 330.507918][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2092'. [ 330.708483][T10097] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.784974][ T30] audit: type=1400 audit(1727246015.229:547): avc: denied { mount } for pid=10099 comm="syz.1.2093" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 330.989905][T10097] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.239168][T10097] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.349471][T10106] syz.0.2096: attempt to access beyond end of device [ 331.349471][T10106] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 331.366471][ T25] usb 3-1: USB disconnect, device number 16 [ 331.381381][T10106] F2FS-fs (loop1): Unable to read 1th superblock [ 331.389314][T10106] syz.0.2096: attempt to access beyond end of device [ 331.389314][T10106] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 331.405236][T10107] netdevsim netdevsim1 netdevsim0: Caught tx_queue_len zero misconfig [ 331.435651][T10106] F2FS-fs (loop1): Unable to read 2th superblock [ 331.477250][T10109] syz.0.2096: attempt to access beyond end of device [ 331.477250][T10109] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 331.550611][T10097] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.563284][T10109] F2FS-fs (loop1): Unable to read 1th superblock [ 331.569764][T10109] syz.0.2096: attempt to access beyond end of device [ 331.569764][T10109] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 331.617907][T10109] F2FS-fs (loop1): Unable to read 2th superblock [ 332.140063][T10097] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.416504][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.430174][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.434280][T10097] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.455095][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.466266][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.480109][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.488560][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.605905][T10097] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.688273][T10097] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.306704][ T30] audit: type=1400 audit(1727246017.759:548): avc: denied { ioctl } for pid=10141 comm="syz.1.2110" path="socket:[24675]" dev="sockfs" ino=24675 ioctlcmd=0x8b27 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 333.694436][T10118] chnl_net:caif_netlink_parms(): no params data found [ 333.753886][T10145] netlink: 'syz.4.2111': attribute type 10 has an invalid length. [ 334.003317][T10145] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 334.129996][T10150] wlan1: mtu less than device minimum [ 334.244336][T10154] CUSE: info not properly terminated [ 334.408868][T10158] netlink: 'syz.1.2116': attribute type 33 has an invalid length. [ 334.463782][T10158] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2116'. [ 334.535174][ T4615] Bluetooth: hci5: command tx timeout [ 334.669011][ T30] audit: type=1326 audit(1727246019.119:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 334.749755][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.778241][ T30] audit: type=1326 audit(1727246019.119:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 334.811922][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.819893][T10118] bridge_slave_0: entered allmulticast mode [ 334.842829][T10118] bridge_slave_0: entered promiscuous mode [ 334.850485][ T30] audit: type=1326 audit(1727246019.129:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 334.894953][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.919043][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.919319][T10118] bridge_slave_1: entered allmulticast mode [ 334.929878][T10118] bridge_slave_1: entered promiscuous mode [ 334.964363][ T30] audit: type=1326 audit(1727246019.129:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 334.964466][ T30] audit: type=1326 audit(1727246019.139:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 334.964553][ T30] audit: type=1326 audit(1727246019.139:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 334.964638][ T30] audit: type=1326 audit(1727246019.139:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 334.964725][ T30] audit: type=1326 audit(1727246019.149:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 334.964811][ T30] audit: type=1326 audit(1727246019.149:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 334.964897][ T30] audit: type=1326 audit(1727246019.149:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453177def9 code=0x7ffc0000 [ 335.225132][T10118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.230678][T10118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.511836][T10118] team0: Port device team_slave_0 added [ 335.544582][T10118] team0: Port device team_slave_1 added [ 335.607987][T10180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2126'. [ 335.871075][ T5274] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 335.888243][T10118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.911230][ T5274] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 335.931322][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.940511][ T5274] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 336.039124][ T5274] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 336.047013][T10118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.054337][ T5274] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 336.092656][ T5274] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 336.098330][T10118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.125707][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.130718][ T5274] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 336.162644][ T5275] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 336.208814][ T5274] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 336.210594][T10118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.225372][ T5274] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 336.260043][ T5274] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 336.277053][ T30] audit: type=1400 audit(1727246020.729:559): avc: denied { execute } for pid=10193 comm="syz.1.2132" path="/dev/dsp" dev="devtmpfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 336.285638][ T5274] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 336.315779][T10190] team0: entered promiscuous mode [ 336.333123][T10190] team_slave_0: entered promiscuous mode [ 336.349529][T10190] team_slave_1: entered promiscuous mode [ 336.367947][T10189] team0: left promiscuous mode [ 336.388139][ T5275] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 336.416566][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.422185][T10189] team_slave_0: left promiscuous mode [ 336.433645][T10189] team_slave_1: left promiscuous mode [ 336.441285][ T5275] usb 5-1: Product: syz [ 336.446342][ T5274] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 336.469871][ T5275] usb 5-1: Manufacturer: syz [ 336.482856][ T5275] usb 5-1: SerialNumber: syz [ 336.502879][ T5275] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 336.609200][ T5274] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 336.618499][ T4615] Bluetooth: hci5: command tx timeout [ 336.717700][T10197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2134'. [ 336.739573][ T30] audit: type=1400 audit(1727246021.189:560): avc: denied { read } for pid=10200 comm="syz.2.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.836802][T10118] hsr_slave_0: entered promiscuous mode [ 336.884906][T10118] hsr_slave_1: entered promiscuous mode [ 336.924951][T10118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.963597][T10118] Cannot create hsr debugfs directory [ 337.122435][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2137'. [ 339.062715][ T4615] Bluetooth: hci5: command tx timeout [ 339.248316][ T30] audit: type=1400 audit(1727246023.699:561): avc: denied { create } for pid=10210 comm="syz.1.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 340.082184][ T5300] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 340.297259][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 340.330863][ T5300] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 340.357523][ T5300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.403089][ T5300] usb 3-1: Product: syz [ 340.417751][ T5300] usb 3-1: Manufacturer: syz [ 340.436968][ T5300] usb 3-1: SerialNumber: syz [ 340.516069][ T5300] usb 3-1: config 0 descriptor?? [ 340.575432][ T5300] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.023361][ T5300] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 341.091559][ T4615] Bluetooth: hci5: command tx timeout [ 341.338747][ T5300] usb 3-1: USB disconnect, device number 17 [ 348.064061][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.075481][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.084440][ T5231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.095803][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.106202][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 348.114515][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.218262][ T5231] Bluetooth: hci6: command tx timeout [ 351.402903][ T4615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 351.415833][ T4615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 351.428168][ T4615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 351.437937][ T4615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 351.447589][ T4615] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 351.455989][ T4615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.292067][ T4615] Bluetooth: hci6: command tx timeout [ 353.083102][ T5231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 353.096128][ T5231] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 353.106061][ T5231] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 353.117337][ T5231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 353.128128][ T5231] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 353.136651][ T5231] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 353.498163][ T5231] Bluetooth: hci7: command tx timeout [ 353.943630][ T4615] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 353.963413][ T4615] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 353.973355][ T4615] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 353.984054][ T4615] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 353.994074][ T4615] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 354.012163][ T4615] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 354.381381][ T4615] Bluetooth: hci6: command tx timeout [ 355.172390][ T4615] Bluetooth: hci8: command tx timeout [ 355.571997][ T4615] Bluetooth: hci7: command tx timeout [ 356.052232][ T4615] Bluetooth: hci9: command tx timeout [ 356.452703][ T4615] Bluetooth: hci6: command tx timeout [ 357.252104][ T4615] Bluetooth: hci8: command tx timeout [ 357.654390][ T4615] Bluetooth: hci7: command tx timeout [ 358.131380][ T4615] Bluetooth: hci9: command tx timeout [ 359.331564][ T4615] Bluetooth: hci8: command tx timeout [ 359.733710][ T4615] Bluetooth: hci7: command tx timeout [ 360.212367][ T4615] Bluetooth: hci9: command tx timeout [ 361.413013][ T4615] Bluetooth: hci8: command tx timeout [ 362.291402][ T4615] Bluetooth: hci9: command tx timeout [ 363.980988][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2683 jiffies s: 8209 root: 0x1/. [ 363.995884][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 364.019540][ T19] Sending NMI from CPU 1 to CPUs 0: [ 364.025779][ C0] NMI backtrace for cpu 0 [ 364.025808][ C0] CPU: 0 UID: 0 PID: 10183 Comm: syz.4.2128 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 364.025840][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 364.025855][ C0] RIP: 0010:stack_trace_consume_entry+0x96/0x170 [ 364.025897][ C0] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 98 00 00 00 8b 43 0c <85> c0 75 57 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 [ 364.025922][ C0] RSP: 0018:ffffc90000006dc0 EFLAGS: 00000046 [ 364.025942][ C0] RAX: 0000000000000000 RBX: ffffc90000006ea8 RCX: ffffffff81341bfe [ 364.025959][ C0] RDX: 0000000000000000 RSI: ffffffff8b180bb7 RDI: ffffc90000006eb4 [ 364.025976][ C0] RBP: 000000000000000f R08: 0000000000000007 R09: 0000000000000000 [ 364.025992][ C0] R10: ffffffff8b180bb7 R11: 0000000000000000 R12: ffffc90000006de8 [ 364.026008][ C0] R13: ffffffff817774c0 R14: ffffc90000006ea8 R15: ffff888032adbc00 [ 364.026026][ C0] FS: 0000555594796500(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 364.026053][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.026071][ C0] CR2: 0000001b32a05ff8 CR3: 0000000048744000 CR4: 00000000003506f0 [ 364.026088][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 364.026104][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 364.026120][ C0] Call Trace: [ 364.026128][ C0] [ 364.026137][ C0] ? show_regs+0x8c/0xa0 [ 364.026177][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 364.026216][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 364.026254][ C0] ? nmi_handle+0x1a9/0x5c0 [ 364.026278][ C0] ? stack_trace_consume_entry+0x96/0x170 [ 364.026313][ C0] ? default_do_nmi+0x6a/0x160 [ 364.026352][ C0] ? exc_nmi+0x170/0x1e0 [ 364.026383][ C0] ? end_repeat_nmi+0xf/0x53 [ 364.026407][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 364.026442][ C0] ? lock_is_held_type+0x107/0x150 [ 364.026482][ C0] ? arch_stack_walk+0xce/0x170 [ 364.026509][ C0] ? lock_is_held_type+0x107/0x150 [ 364.026548][ C0] ? stack_trace_consume_entry+0x96/0x170 [ 364.026583][ C0] ? stack_trace_consume_entry+0x96/0x170 [ 364.026619][ C0] ? stack_trace_consume_entry+0x96/0x170 [ 364.026653][ C0] [ 364.026661][ C0] [ 364.026669][ C0] ? lock_is_held_type+0x107/0x150 [ 364.026708][ C0] arch_stack_walk+0xe1/0x170 [ 364.026739][ C0] ? lock_is_held_type+0x107/0x150 [ 364.026782][ C0] stack_trace_save+0x95/0xd0 [ 364.026815][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 364.026851][ C0] ? lock_acquire+0x1b1/0x560 [ 364.026889][ C0] kasan_save_stack+0x33/0x60 [ 364.026929][ C0] ? kasan_save_stack+0x33/0x60 [ 364.026966][ C0] ? kasan_save_track+0x14/0x30 [ 364.027003][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 364.027041][ C0] ? dummy_urb_enqueue+0x8d/0x8a0 [ 364.027078][ C0] ? usb_hcd_submit_urb+0x2d1/0x2090 [ 364.027119][ C0] ? usb_submit_urb+0x87c/0x1730 [ 364.027146][ C0] ? ath9k_hif_usb_reg_in_cb+0x500/0x720 [ 364.027177][ C0] ? __usb_hcd_giveback_urb+0x389/0x6e0 [ 364.027215][ C0] ? usb_hcd_giveback_urb+0x396/0x450 [ 364.027253][ C0] ? dummy_timer+0x17c3/0x38d0 [ 364.027289][ C0] ? __hrtimer_run_queues+0x20c/0xcc0 [ 364.027317][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 364.027350][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 364.027377][ C0] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 364.027414][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.027479][ C0] kasan_save_track+0x14/0x30 [ 364.027518][ C0] __kasan_kmalloc+0xaa/0xb0 [ 364.027557][ C0] dummy_urb_enqueue+0x8d/0x8a0 [ 364.027595][ C0] ? usb_hcd_map_urb_for_dma+0x39e/0x1190 [ 364.027640][ C0] usb_hcd_submit_urb+0x2d1/0x2090 [ 364.027684][ C0] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 364.027724][ C0] ? lock_acquire+0x1b1/0x560 [ 364.027764][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 364.027802][ C0] ? find_held_lock+0x2d/0x110 [ 364.027834][ C0] ? ath9k_hif_usb_reg_in_cb+0x4f3/0x720 [ 364.027869][ C0] usb_submit_urb+0x87c/0x1730 [ 364.027900][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 364.027928][ C0] ath9k_hif_usb_reg_in_cb+0x500/0x720 [ 364.027963][ C0] __usb_hcd_giveback_urb+0x389/0x6e0 [ 364.028006][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 364.028048][ C0] dummy_timer+0x17c3/0x38d0 [ 364.028089][ C0] ? debug_object_deactivate+0x1f0/0x370 [ 364.028121][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 364.028165][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 364.028193][ C0] ? __pfx_lock_release+0x10/0x10 [ 364.028232][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 364.028270][ C0] ? timerqueue_del+0x83/0x150 [ 364.028308][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 364.028348][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 364.028382][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 364.028412][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 364.028455][ C0] hrtimer_interrupt+0x31b/0x800 [ 364.028493][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 364.028522][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 364.028561][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.028603][ C0] RIP: 0010:lock_is_held_type+0x107/0x150 [ 364.028644][ C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 ec 7f ea 74 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 45 31 ed eb [ 364.028669][ C0] RSP: 0018:ffffc90000007918 EFLAGS: 00000286 [ 364.028687][ C0] RAX: 0000000000000046 RBX: ffff888032adc758 RCX: 0000000000000001 [ 364.028722][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cddc0 RDI: ffffffff8bb118a0 [ 364.028740][ C0] RBP: ffffffff8ddba6a0 R08: 0000000000000005 R09: 0000000000000000 [ 364.028757][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888032adbc00 [ 364.028773][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000003 [ 364.028804][ C0] in6_dev_get+0x153/0x310 [ 364.028838][ C0] icmp6_dst_alloc+0x24/0x490 [ 364.028865][ C0] ndisc_send_skb+0x1279/0x1c30 [ 364.028904][ C0] ? __kmem_obj_info+0x142/0x290 [ 364.028934][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 364.028975][ C0] ? __build_skb_around+0x278/0x3b0 [ 364.029008][ C0] ? __alloc_skb+0x1fe/0x380 [ 364.029049][ C0] ? __asan_memcpy+0x3c/0x60 [ 364.029090][ C0] ndisc_send_rs+0x129/0x670 [ 364.029118][ C0] addrconf_rs_timer+0x407/0x840 [ 364.029160][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 364.029205][ C0] call_timer_fn+0x1a0/0x610 [ 364.029243][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 364.029282][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 364.029321][ C0] ? __pfx_lock_release+0x10/0x10 [ 364.029367][ C0] ? mark_held_locks+0x9f/0xe0 [ 364.029404][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 364.029444][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 364.029483][ C0] __run_timers+0x74b/0xaf0 [ 364.029527][ C0] ? __pfx___run_timers+0x10/0x10 [ 364.029567][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 364.029608][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 364.029657][ C0] run_timer_base+0x111/0x190 [ 364.029696][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 364.029739][ C0] run_timer_softirq+0x1a/0x40 [ 364.029777][ C0] handle_softirqs+0x216/0x8f0 [ 364.029811][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 364.029845][ C0] irq_exit_rcu+0xbb/0x120 [ 364.029873][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 364.029926][ C0] [ 364.029934][ C0] [ 364.029943][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.029984][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 364.030025][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 fd 4e f6 48 89 df e8 4e 7a 4f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 f3 40 f6 65 8b 05 86 0c e9 74 85 c0 74 16 5b [ 364.030049][ C0] RSP: 0018:ffffc90004067b30 EFLAGS: 00000246 [ 364.030067][ C0] RAX: 0000000000000006 RBX: ffffffff8f0b15e0 RCX: 1ffffffff2d46cb7 [ 364.030085][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cdac0 RDI: ffffffff8bb118a0 [ 364.030102][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff2d39b01 [ 364.030124][ C0] R10: ffffffff969cd80f R11: ffff8880b8828a40 R12: 1ffff9200080cf6e [ 364.030142][ C0] R13: ffff88802918a23c R14: ffff8880289ed300 R15: ffff8880289ed318 [ 364.030171][ C0] usb_hcd_poll_rh_status+0x572/0x7f0 [ 364.030215][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 364.030258][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 364.030300][ C0] dummy_pullup+0x212/0x270 [ 364.030337][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 364.030379][ C0] usb_gadget_disconnect_locked+0x13f/0x4e0 [ 364.030408][ C0] gadget_unbind_driver+0xd7/0x4e0 [ 364.030433][ C0] ? kernfs_remove_by_name_ns+0xe8/0x130 [ 364.030461][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 364.030488][ C0] device_remove+0xc8/0x170 [ 364.030526][ C0] device_release_driver_internal+0x44a/0x610 [ 364.030572][ C0] driver_detach+0xd8/0x1b0 [ 364.030613][ C0] ? __pfx_raw_release+0x10/0x10 [ 364.030642][ C0] bus_remove_driver+0x13b/0x2c0 [ 364.030678][ C0] driver_unregister+0x76/0xb0 [ 364.030703][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 364.030742][ C0] raw_release+0x1ae/0x2b0 [ 364.030771][ C0] __fput+0x3f6/0xb60 [ 364.030813][ C0] task_work_run+0x14e/0x250 [ 364.030853][ C0] ? __pfx_task_work_run+0x10/0x10 [ 364.030891][ C0] ? __pkru_allows_pkey+0x21/0xb0 [ 364.030934][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 364.030977][ C0] do_syscall_64+0xda/0x250 [ 364.031005][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.031044][ C0] RIP: 0033:0x7f134137def9 [ 364.031063][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.031087][ C0] RSP: 002b:00007ffdcf76c158 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 364.031110][ C0] RAX: 0000000000000000 RBX: 0000000000051f78 RCX: 00007f134137def9 [ 364.031126][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 364.031144][ C0] RBP: 00007f1341537a80 R08: 0000000000000001 R09: 00007ffdcf76c44f [ 364.031165][ C0] R10: 00007f1341200000 R11: 0000000000000246 R12: 00000000000524e5 [ 364.031185][ C0] R13: 00007ffdcf76c260 R14: 0000000000000032 R15: ffffffffffffffff [ 364.031217][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)