last executing test programs: 2m4.444963445s ago: executing program 0 (id=2746): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"}) 2m4.351475226s ago: executing program 0 (id=2747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 2m4.28825814s ago: executing program 0 (id=2748): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001bc0)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x56}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x52}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xb2cc6a28d09863a4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xe}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 2m4.287554469s ago: executing program 0 (id=2749): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$KDSIGACCEPT(r0, 0x541b, 0x100000001ffffffd) 2m4.2502759s ago: executing program 0 (id=2750): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x7) 2m4.161524646s ago: executing program 0 (id=2752): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) 1m49.064689283s ago: executing program 32 (id=2752): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) 52.393595884s ago: executing program 4 (id=4110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x74, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x74}}, 0x0) 52.331652909s ago: executing program 4 (id=4111): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000000)=0x9}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000000"]) 52.086475136s ago: executing program 4 (id=4114): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800009, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030c65d66402000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 51.873403227s ago: executing program 4 (id=4120): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 51.096916498s ago: executing program 4 (id=4135): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f00000005c0)='./file0\x00', 0xc9028ba210c11f8b) unlink(&(0x7f0000000540)='./file0\x00') 51.027224836s ago: executing program 4 (id=4136): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000102000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 35.893840166s ago: executing program 33 (id=4136): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000102000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.626527782s ago: executing program 6 (id=4977): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x10025, 0x0, 0x0}) 1.49218781s ago: executing program 6 (id=4981): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000140)={0xffffffffffffffc0, 0x100000, 0x6, 0x5, 0xfffffffc, 0x5}) 1.436050888s ago: executing program 6 (id=4985): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000000000)=[{r0, 0x2003}, {r1, 0x240}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x68000005}) 1.255808467s ago: executing program 6 (id=4992): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x6, 0x6, 0x6, 0x0, 0x1d, "47cb8991b0af252e6f41c5410503b8273639df"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 1.196778425s ago: executing program 1 (id=4995): creat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) 1.085283474s ago: executing program 6 (id=4998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040)) 1.085105069s ago: executing program 1 (id=5007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 970.98652ms ago: executing program 2 (id=4999): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 896.351255ms ago: executing program 1 (id=5001): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x210, 0x9e46, &(0x7f00000006c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmget(0x2, 0x3000, 0x54000000, &(0x7f0000a95000/0x3000)=nil) 871.927108ms ago: executing program 6 (id=5002): syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write(r0, 0x8d, 0xa9, &(0x7f0000000100)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054e5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acf") 642.384891ms ago: executing program 3 (id=5008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x10}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 641.69095ms ago: executing program 5 (id=5009): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)={0x24, r2, 0x21, 0x70bd29, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x400c800) 548.68473ms ago: executing program 5 (id=5011): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 548.538709ms ago: executing program 3 (id=5012): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x0, 0x0}) 473.951669ms ago: executing program 1 (id=5014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon]}, 0x54}}, 0x0) 405.554502ms ago: executing program 1 (id=5015): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 405.284302ms ago: executing program 3 (id=5016): syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r0, 0x0, &(0x7f0000000240)) 395.597997ms ago: executing program 1 (id=5017): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7fc, @dev={0xfe, 0x80, '\x00', 0x10}, 0xb}, 0x1c) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @local, 0x10000}, 0x1b) 377.238625ms ago: executing program 5 (id=5018): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) 376.369534ms ago: executing program 2 (id=5019): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 276.453393ms ago: executing program 2 (id=5020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) time(0xffffffffffffffff) 276.008995ms ago: executing program 3 (id=5021): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 218.786073ms ago: executing program 5 (id=5022): mkdir(0x0, 0x0) chdir(0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 188.507608ms ago: executing program 3 (id=5023): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 158.649184ms ago: executing program 2 (id=5024): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)={0x24, r2, 0x21, 0x70bd29, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x400c800) 79.768206ms ago: executing program 2 (id=5025): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xe, 0x1, {0xfffffeff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x64}}, 0x0) 79.425467ms ago: executing program 5 (id=5026): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x181480, 0x0) readahead(r1, 0x0, 0x0) 78.726545ms ago: executing program 3 (id=5027): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000380), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f0000000440), &(0x7f0000000480)=""/7}, 0x20) 690.37µs ago: executing program 5 (id=5028): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 0s ago: executing program 2 (id=5029): r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x2010}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) kernel console output (not intermixed with test programs): ms_vblank_simulate: vblank timer overrun [ 235.094197][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3538'. [ 235.334626][ T29] audit: type=1400 audit(1739920987.561:951): avc: denied { setopt } for pid=13437 comm="syz.1.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 235.372710][ T5871] gspca_sunplus: reg_w_riv err -71 [ 235.377931][ T5871] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 235.388410][ T29] audit: type=1400 audit(1739920987.581:952): avc: denied { getopt } for pid=13437 comm="syz.1.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 235.414754][ T5871] usb 3-1: USB disconnect, device number 34 [ 235.518764][T13445] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.3548'. [ 235.565818][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3549'. [ 235.735137][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3555'. [ 235.772656][ T25] kernel write not supported for file /1479/attr/keycreate (pid: 25 comm: kworker/1:0) [ 235.871427][ T5871] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 235.930132][T13472] veth3: entered allmulticast mode [ 235.945778][ T29] audit: type=1400 audit(1739920988.171:953): avc: denied { execute } for pid=13473 comm="syz.4.3561" dev="hugetlbfs" ino=40026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 235.967260][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.010021][ T29] audit: type=1400 audit(1739920988.211:954): avc: denied { execute_no_trans } for pid=13473 comm="syz.4.3561" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=40026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 236.035809][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.091679][ T5871] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 236.100775][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.135785][ T5871] usb 4-1: config 0 descriptor?? [ 236.142144][ T29] audit: type=1400 audit(1739920988.211:955): avc: denied { mount } for pid=13473 comm="syz.4.3561" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 236.316582][ T29] audit: type=1400 audit(1739920988.531:956): avc: denied { mounton } for pid=13483 comm="syz.1.3566" path="/696/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 236.339100][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.358472][ T5871] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 236.383063][ T5871] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 236.580348][ T5871] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 236.594179][ T5871] [drm] Initialized udl on minor 2 [ 236.701597][ T971] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 236.775961][ T5871] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 236.788868][ T5871] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 236.821851][ T5869] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 236.864565][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 236.871045][ T971] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.891429][ T971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.923151][ T971] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.941382][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.949458][ T971] usb 3-1: Product: syz [ 236.971780][ T971] usb 3-1: Manufacturer: syz [ 236.976417][ T971] usb 3-1: SerialNumber: syz [ 236.986622][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.009635][ T5903] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 237.010332][ T971] usb 3-1: selecting invalid altsetting 1 [ 237.032827][ T5903] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 237.040593][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.052967][ T5871] usb 4-1: USB disconnect, device number 42 [ 237.060105][ T5869] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 237.071468][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.084364][ T5869] usb 2-1: config 0 descriptor?? [ 237.708919][ T5869] hid-led 0003:27B8:01ED.0044: probe with driver hid-led failed with error -71 [ 237.732745][ T5869] usb 2-1: USB disconnect, device number 35 [ 237.831509][ T971] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 237.862160][ T971] usb 3-1: selecting invalid altsetting 1 [ 237.872145][ T971] cdc_ncm 3-1:1.0: bind() failure [ 237.902963][ T971] usb 3-1: USB disconnect, device number 35 [ 238.148650][T13548] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2584 sclass=netlink_xfrm_socket pid=13548 comm=syz.5.3597 [ 238.222785][ T29] audit: type=1400 audit(1739920990.431:957): avc: denied { mount } for pid=13551 comm="syz.5.3599" name="/" dev="rpc_pipefs" ino=41111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 238.681825][ T5869] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 238.832897][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.844347][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.861490][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.876464][ T5869] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 238.891725][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.902723][ T5869] usb 2-1: config 0 descriptor?? [ 238.921048][ T29] audit: type=1400 audit(1739920991.141:958): avc: denied { bind } for pid=13589 comm="syz.5.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.163503][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 239.163519][ T29] audit: type=1400 audit(1739920991.391:960): avc: denied { write } for pid=13599 comm="syz.5.3622" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 239.318866][ T5869] aureal 0003:0755:2626.0045: unknown main item tag 0x0 [ 239.325760][T13606] netlink: 'syz.5.3625': attribute type 3 has an invalid length. [ 239.334153][ T5869] aureal 0003:0755:2626.0045: unknown main item tag 0x0 [ 239.344337][ T5869] aureal 0003:0755:2626.0045: unknown main item tag 0x0 [ 239.353363][ T5869] aureal 0003:0755:2626.0045: unknown main item tag 0x0 [ 239.360547][ T5869] aureal 0003:0755:2626.0045: unknown main item tag 0x0 [ 239.374308][ T5869] aureal 0003:0755:2626.0045: hidraw0: USB HID v0.0b Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 239.512415][ T29] audit: type=1400 audit(1739920991.731:961): avc: denied { map } for pid=13611 comm="syz.3.3628" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 239.536511][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.575442][ T5869] usb 2-1: USB disconnect, device number 36 [ 240.212512][T13626] veth1_to_hsr: default FDB implementation only supports local addresses [ 240.344550][ T29] audit: type=1400 audit(1739920992.561:962): avc: denied { append } for pid=13629 comm="syz.4.3636" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 240.476490][ T29] audit: type=1400 audit(1739920992.701:963): avc: denied { read } for pid=13638 comm="syz.5.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.598676][ T29] audit: type=1400 audit(1739920992.821:964): avc: denied { connect } for pid=13647 comm="syz.1.3644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 240.771203][ T29] audit: type=1326 audit(1739920992.991:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a18cde9 code=0x7ffc0000 [ 240.825062][ T29] audit: type=1326 audit(1739920993.021:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a18cde9 code=0x7ffc0000 [ 240.912718][ T29] audit: type=1326 audit(1739920993.031:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff14a18cde9 code=0x7ffc0000 [ 240.975596][ T29] audit: type=1326 audit(1739920993.031:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a18cde9 code=0x7ffc0000 [ 241.071528][ T29] audit: type=1326 audit(1739920993.031:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a18cde9 code=0x7ffc0000 [ 241.236839][T13687] IPv6: Can't replace route, no match found [ 241.246348][T13682] serio: Serial port ptm0 [ 241.254584][T13689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3663'. [ 241.513919][T13709] sch_fq: defrate 511 ignored. [ 241.791693][ T5871] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 241.893409][T13731] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3684'. [ 241.906366][T13731] netlink: 'syz.5.3684': attribute type 1 has an invalid length. [ 241.961767][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 241.981828][ T5871] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 242.000041][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.018412][ T5871] usb 5-1: Product: syz [ 242.023562][ T5871] usb 5-1: Manufacturer: syz [ 242.029108][ T5871] usb 5-1: SerialNumber: syz [ 242.043495][ T5871] usb 5-1: config 0 descriptor?? [ 242.060375][ T5871] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 242.253003][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3692'. [ 242.470402][ T5871] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 242.562937][T13754] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.569073][T13754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 242.581475][T13754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.587839][T13754] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 242.597728][T13754] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 242.620556][T13766] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3700'. [ 242.638707][T13754] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 242.688624][ T5903] usb 5-1: USB disconnect, device number 38 [ 242.697169][ T5903] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 242.707335][ T5903] visor 5-1:0.0: device disconnected [ 242.784911][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3704'. [ 243.419141][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'. [ 243.430094][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'. [ 243.541423][ T5903] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 243.691698][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 243.698524][ T5903] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 243.710421][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.719700][ T5903] usb 5-1: config 0 descriptor?? [ 243.930668][ T5903] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 243.941047][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.953272][ T5903] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 243.960387][ T5903] usb 5-1: media controller created [ 243.970790][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.492766][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 244.498881][T13753] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 244.541890][ T5903] az6027: usb out operation failed. (-71) [ 244.550331][ T5903] stb0899_attach: Driver disabled by Kconfig [ 244.557587][ T5903] az6027: no front-end attached [ 244.557587][ T5903] [ 244.568309][ T5903] az6027: usb out operation failed. (-71) [ 244.575098][ T5903] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 244.582682][ T5871] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 244.593141][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48 [ 244.616238][ T5903] dvb-usb: schedule remote query interval to 400 msecs. [ 244.623343][ T5903] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 244.645009][ T5826] Bluetooth: hci5: command 0x0405 tx timeout [ 244.651073][ T5826] Bluetooth: hci3: command 0x0405 tx timeout [ 244.657478][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 244.666413][ T5903] usb 5-1: USB disconnect, device number 39 [ 244.742031][ T5903] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 244.751930][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 244.766126][ T5871] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 244.780447][ T5871] usb 3-1: config 179 has no interface number 0 [ 244.787468][ T5871] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 244.798872][ T5871] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 244.811122][ T5871] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.823234][ T5871] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 244.836070][ T5871] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 244.865764][ T5871] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 244.875689][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.892858][T13819] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 245.153710][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3736'. [ 245.263543][ T5903] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input49 [ 245.377330][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3740'. [ 245.474813][ T25] usb 3-1: USB disconnect, device number 36 [ 245.474814][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 245.474944][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 245.497692][ T25] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 245.545434][T13863] netlink: 'syz.5.3745': attribute type 1 has an invalid length. [ 245.619431][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 245.619447][ T29] audit: type=1400 audit(1739920997.841:982): avc: denied { write } for pid=13860 comm="syz.4.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.098458][T13884] tipc: Started in network mode [ 246.104030][T13884] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 246.117336][T13884] tipc: Enabling of bearer rejected, failed to enable media [ 246.312338][ T5903] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 246.487460][ T5903] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 246.519951][T13901] netlink: 'syz.5.3764': attribute type 11 has an invalid length. [ 246.522704][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.549439][ T5903] usb 4-1: config 0 descriptor?? [ 246.561512][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 246.570330][ T5903] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 246.670228][T13909] loop6: detected capacity change from 0 to 524287999 [ 246.682171][ C1] blk_print_req_error: 41 callbacks suppressed [ 246.682188][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.697536][ C1] buffer_io_error: 41 callbacks suppressed [ 246.697549][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.714802][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.729620][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.729880][ T5826] Bluetooth: hci5: command 0x0405 tx timeout [ 246.730660][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.730684][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.739491][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.739518][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.741101][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.741126][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.741290][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.741334][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.741531][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.741553][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.779649][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.779681][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.779716][T13909] ldm_validate_partition_table(): Disk read failed. [ 246.779823][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.779844][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.781028][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.888449][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.896792][T13909] Dev loop6: unable to read RDB block 0 [ 246.915894][T13909] loop6: unable to read partition table [ 246.925688][T13909] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 246.950386][T13912] ldm_validate_partition_table(): Disk read failed. [ 246.966108][T13912] Dev loop6: unable to read RDB block 0 [ 247.000481][T13912] loop6: unable to read partition table [ 247.009826][T13912] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 247.197752][T13926] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.212996][T13926] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.343505][T13926] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.364862][T13926] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.383367][ T5903] usb 4-1: USB disconnect, device number 43 [ 247.478077][T13926] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.501616][T13926] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.612871][T13926] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.631651][T13926] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.767994][T13926] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.780402][T13926] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.816319][T13926] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.845197][T13926] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.879967][T13926] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.892740][T13926] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.916621][T13926] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.928460][T13926] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.938593][T13953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.074830][T13960] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 248.423209][ T29] audit: type=1326 audit(1739921000.651:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3802" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48e778cde9 code=0x0 [ 248.442072][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3801'. [ 248.551473][T13993] netlink: 'syz.1.3806': attribute type 64 has an invalid length. [ 248.559436][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3806'. [ 248.646717][T13997] tipc: Enabled bearer , priority 10 [ 248.801643][ T5826] Bluetooth: hci5: command 0x0405 tx timeout [ 248.910944][T14014] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 249.090426][T14023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3820'. [ 249.136199][T14027] netlink: 'syz.2.3821': attribute type 10 has an invalid length. [ 249.164909][T14027] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.187974][T14027] bond0: (slave team0): Enslaving as an active interface with an up link [ 249.320791][T14031] vivid-008: disconnect [ 249.342456][T14030] vivid-008: reconnect [ 249.546772][T14042] kvm: kvm [14041]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x98b5 [ 249.624533][ T29] audit: type=1326 audit(1739921001.851:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.5.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e778cde9 code=0x7ffc0000 [ 249.669450][ T29] audit: type=1326 audit(1739921001.851:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.5.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e778cde9 code=0x7ffc0000 [ 249.702407][ T29] audit: type=1326 audit(1739921001.881:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.5.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f48e778cde9 code=0x7ffc0000 [ 249.774413][ T29] audit: type=1326 audit(1739921001.881:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.5.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e778cde9 code=0x7ffc0000 [ 249.840991][ T29] audit: type=1326 audit(1739921001.881:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.5.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e778cde9 code=0x7ffc0000 [ 249.904315][ T29] audit: type=1326 audit(1739921001.891:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.5.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f48e778cde9 code=0x7ffc0000 [ 249.999998][ T29] audit: type=1326 audit(1739921001.891:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.5.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e778cde9 code=0x7ffc0000 [ 250.038906][ T29] audit: type=1326 audit(1739921001.891:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.5.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e778cde9 code=0x7ffc0000 [ 250.425203][T14093] loop6: detected capacity change from 0 to 524287999 [ 250.444909][T14093] ldm_validate_partition_table(): Disk read failed. [ 250.460892][T14093] Dev loop6: unable to read RDB block 0 [ 250.469489][T14093] loop6: unable to read partition table [ 250.478709][T14093] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 250.585085][T14096] ldm_validate_partition_table(): Disk read failed. [ 250.599305][T14096] Dev loop6: unable to read RDB block 0 [ 250.606956][T14096] loop6: unable to read partition table [ 250.617915][T14096] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 250.668235][T14102] input: syz0 as /devices/virtual/input/input50 [ 250.687499][T14102] input: failed to attach handler leds to device input50, error: -6 [ 251.046540][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3867'. [ 251.940676][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 251.940690][ T29] audit: type=1400 audit(1739921004.161:996): avc: denied { setopt } for pid=14172 comm="syz.3.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 252.047590][ T29] audit: type=1400 audit(1739921004.271:997): avc: denied { write } for pid=14177 comm="syz.2.3893" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.133019][ T29] audit: type=1400 audit(1739921005.361:998): avc: denied { bind } for pid=14229 comm="syz.3.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.351720][ T5871] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 253.511535][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 253.533008][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 253.551529][ T5867] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 253.560271][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 253.583213][ T5871] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 253.601921][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.610108][ T5871] usb 3-1: Product: syz [ 253.619632][ T5871] usb 3-1: Manufacturer: syz [ 253.624691][ T5871] usb 3-1: SerialNumber: syz [ 253.631234][ T5871] usb 3-1: config 0 descriptor?? [ 253.649378][ T5871] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 253.666432][ T5871] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 253.705977][ T29] audit: type=1326 audit(1739921005.931:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eafd8cde9 code=0x7ffc0000 [ 253.749272][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 253.771632][ T29] audit: type=1326 audit(1739921005.931:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eafd8cde9 code=0x7ffc0000 [ 253.817763][ T5867] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 253.820295][T14276] lo: left promiscuous mode [ 253.831379][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.831940][T14276] lo: left allmulticast mode [ 253.839362][ T5867] usb 5-1: Product: syz [ 253.839379][ T5867] usb 5-1: Manufacturer: syz [ 253.839392][ T5867] usb 5-1: SerialNumber: syz [ 253.860477][ T29] audit: type=1326 audit(1739921005.931:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3eafd8cde9 code=0x7ffc0000 [ 253.919036][ T5867] r8152-cfgselector 5-1: Unknown version 0x0000 [ 253.925950][ T5867] r8152-cfgselector 5-1: config 0 descriptor?? [ 253.932546][ T29] audit: type=1326 audit(1739921005.931:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eafd8cde9 code=0x7ffc0000 [ 254.008565][ T29] audit: type=1326 audit(1739921005.931:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eafd8cde9 code=0x7ffc0000 [ 254.078524][ T29] audit: type=1326 audit(1739921005.951:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3eafd8cde9 code=0x7ffc0000 [ 254.103139][ T29] audit: type=1326 audit(1739921005.951:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eafd8cde9 code=0x7ffc0000 [ 254.264409][ T5871] em28xx 3-1:0.0: chip ID is em2874 [ 254.382261][ T5867] r8152-cfgselector 5-1: USB disconnect, device number 40 [ 254.477271][ T5903] usb 3-1: USB disconnect, device number 37 [ 254.501248][ T5903] em28xx 3-1:0.0: Disconnecting em28xx [ 254.528126][ T5903] em28xx 3-1:0.0: Freeing device [ 254.751893][ T971] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 254.922648][ T971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.933862][ T971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.952120][ T971] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 254.972187][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.011363][ T971] usb 6-1: config 0 descriptor?? [ 255.211496][ T5903] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 255.363577][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.398929][ T5903] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 255.408574][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.423676][ T5903] usb 4-1: Product: syz [ 255.430848][ T971] pyra 0003:1E7D:2CF6.0046: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 255.451406][ T5903] usb 4-1: Manufacturer: syz [ 255.457247][ T5903] usb 4-1: SerialNumber: syz [ 255.472381][ T5903] usb 4-1: config 0 descriptor?? [ 255.701807][ T25] usb 4-1: USB disconnect, device number 44 [ 255.711233][T14350] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 255.741991][ T5867] IPVS: starting estimator thread 0... [ 255.769175][ T5903] kernel read not supported for file /dsp (pid: 5903 comm: kworker/0:6) [ 255.838941][ T971] pyra 0003:1E7D:2CF6.0046: couldn't init struct pyra_device [ 255.841825][T14351] IPVS: using max 33 ests per chain, 79200 per kthread [ 255.862032][ T971] pyra 0003:1E7D:2CF6.0046: couldn't install mouse [ 255.883759][ T971] pyra 0003:1E7D:2CF6.0046: probe with driver pyra failed with error -71 [ 255.919341][ T971] usb 6-1: USB disconnect, device number 5 [ 256.511497][ T5903] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 256.694933][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 256.723321][ T5903] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.738519][ T5903] usb 2-1: config 0 has no interface number 0 [ 256.771809][ T5903] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.790248][T14400] veth1_macvtap: left promiscuous mode [ 256.800351][ T5903] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.820959][ T5903] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 256.830704][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.852835][ T5903] usb 2-1: config 0 descriptor?? [ 257.163948][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 257.163964][ T29] audit: type=1400 audit(1739921009.391:1013): avc: denied { write } for pid=14421 comm="syz.3.4003" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 257.255704][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4006'. [ 257.291468][T14428] netlink: 'syz.5.4006': attribute type 30 has an invalid length. [ 257.309894][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4006'. [ 257.405487][ T29] audit: type=1400 audit(1739921009.631:1014): avc: denied { accept } for pid=14433 comm="syz.5.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 257.480220][ T5903] uclogic 0003:28BD:0071.0047: pen parameters not found [ 257.492834][ T5903] uclogic 0003:28BD:0071.0047: interface is invalid, ignoring [ 257.593687][T14442] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4013'. [ 257.607373][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4013'. [ 257.651476][ T971] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 257.692266][ T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 257.717134][ T5871] usb 2-1: USB disconnect, device number 37 [ 257.812829][ T971] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.824567][ T971] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.835648][ T971] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.850985][ T971] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.860356][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.868482][ T971] usb 4-1: Product: syz [ 257.872809][ T971] usb 4-1: Manufacturer: syz [ 257.877394][ T971] usb 4-1: SerialNumber: syz [ 257.883683][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 257.896310][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 257.905439][ T25] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 257.918596][ T25] usb 3-1: config 1 interface 0 has no altsetting 1 [ 257.927139][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 257.936410][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.944503][ T25] usb 3-1: Product: syz [ 257.948707][ T25] usb 3-1: Manufacturer: syz [ 257.953350][ T25] usb 3-1: SerialNumber: syz [ 257.961871][ T25] smsusb:smsusb_probe: board id=8, interface number 0 [ 258.051578][ T5903] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 258.166731][ T25] smsusb:smsusb_probe: Device initialized with return code -19 [ 258.211760][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 258.220970][ T5903] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 258.229955][ T5903] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 258.242797][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 258.260131][ T5903] usb 5-1: config 1 has no interface number 0 [ 258.266743][ T5903] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.283719][ T5903] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 258.304925][ T5903] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 258.325482][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.338730][ T29] audit: type=1400 audit(1739921010.561:1015): avc: denied { ioctl } for pid=14453 comm="syz.1.4018" path="socket:[45217]" dev="sockfs" ino=45217 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.345218][ T5903] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 258.409871][ T5871] usb 3-1: USB disconnect, device number 38 [ 258.547635][T14451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.560571][T14451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.578258][ T5903] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 258.707172][ T971] cdc_mbim 4-1:1.0: bind() failure [ 258.715892][ T971] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 258.731500][ T971] cdc_ncm 4-1:1.1: bind() failure [ 258.748967][ T971] usb 4-1: USB disconnect, device number 45 [ 259.057661][ T971] usb 5-1: USB disconnect, device number 41 [ 259.069469][ T971] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 259.246847][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4034'. [ 259.268346][T14488] netlink: 'syz.5.4034': attribute type 1 has an invalid length. [ 259.276258][T14488] netlink: 'syz.5.4034': attribute type 2 has an invalid length. [ 259.371864][ T29] audit: type=1400 audit(1739921011.601:1016): avc: denied { read } for pid=14493 comm="syz.3.4037" path="socket:[44483]" dev="sockfs" ino=44483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 259.446674][T14498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=14498 comm=syz.3.4040 [ 259.465404][T14500] netlink: 'syz.2.4039': attribute type 1 has an invalid length. [ 259.473424][T14500] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4039'. [ 259.479579][T14498] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.491649][T14498] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.500375][T14498] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.509887][T14498] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.520923][T14498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=14498 comm=syz.3.4040 [ 259.571737][ T971] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 259.656392][T14510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4044'. [ 259.748658][ T971] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 259.752397][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4047'. [ 259.761348][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.768990][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4047'. [ 259.799704][ T971] usb 6-1: Product: syz [ 259.830756][ T971] usb 6-1: Manufacturer: syz [ 259.840848][ T971] usb 6-1: SerialNumber: syz [ 259.853508][ T971] usb 6-1: config 0 descriptor?? [ 259.880370][ T971] usb 6-1: interface 1 not found [ 259.933315][ T29] audit: type=1400 audit(1739921012.161:1017): avc: denied { map } for pid=14525 comm="syz.2.4052" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 259.961027][ T29] audit: type=1400 audit(1739921012.161:1018): avc: denied { execute } for pid=14525 comm="syz.2.4052" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 260.091696][ T5903] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 260.105113][ T5867] usb 6-1: USB disconnect, device number 6 [ 260.252123][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 260.267605][ T5903] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 260.278062][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.290696][ T5903] usb 2-1: Product: syz [ 260.296477][ T5903] usb 2-1: Manufacturer: syz [ 260.305758][ T5903] usb 2-1: SerialNumber: syz [ 260.333980][ T5903] usb 2-1: config 0 descriptor?? [ 260.346294][ T5903] gspca_main: se401-2.14.0 probing 047d:5003 [ 260.487872][T14558] loop5: detected capacity change from 0 to 7 [ 260.501928][T14558] buffer_io_error: 58 callbacks suppressed [ 260.501944][T14558] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.518993][T14558] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.527109][T14558] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.535630][T14558] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.543852][T14558] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.551858][T14558] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.559981][T14558] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.570082][T14558] ldm_validate_partition_table(): Disk read failed. [ 260.577433][T14558] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.586475][T14558] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.595126][T14558] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.603399][T14558] Dev loop5: unable to read RDB block 0 [ 260.609483][T14558] loop5: unable to read partition table [ 260.616936][T14558] loop5: partition table beyond EOD, truncated [ 260.623422][T14558] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 260.623422][T14558] ) failed (rc=-5) [ 260.742731][ T5869] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 260.909688][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 260.934250][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 260.957726][T14581] bridge_slave_0: invalid flags given to default FDB implementation [ 260.963624][ T5903] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input52 [ 260.984832][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 261.021649][ T5903] usb 2-1: USB disconnect, device number 38 [ 261.030212][ T5869] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 261.071726][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.079749][ T5869] usb 4-1: Product: syz [ 261.101418][ T5869] usb 4-1: Manufacturer: syz [ 261.116904][ T5869] usb 4-1: SerialNumber: syz [ 261.135916][ T5869] usb 4-1: config 0 descriptor?? [ 261.153568][T14560] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 261.160831][T14560] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 261.173260][ T5869] usb 4-1: ucan: probing device on interface #0 [ 261.621235][T14605] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 261.946865][T14627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4097'. [ 261.986909][ T5869] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 262.022213][ T5869] usb 4-1: USB disconnect, device number 46 [ 262.423286][T14653] netlink: 'syz.4.4110': attribute type 1 has an invalid length. [ 262.909281][ T29] audit: type=1400 audit(1739921015.131:1019): avc: denied { accept } for pid=14668 comm="syz.2.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 263.069729][ T29] audit: type=1400 audit(1739921015.291:1020): avc: denied { create } for pid=14680 comm="syz.2.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 263.139291][ T29] audit: type=1400 audit(1739921015.291:1021): avc: denied { bind } for pid=14680 comm="syz.2.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 263.593128][T14702] overlay: Unknown parameter 'reiser\s\' [ 263.680414][ T5869] kernel read not supported for file /usbmon0 (pid: 5869 comm: kworker/0:4) [ 263.912086][ T5903] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 264.072567][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 264.088416][ T5903] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 264.111958][ T5903] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 264.120628][ T5903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 264.152081][ T5903] usb 2-1: config 1 has no interface number 0 [ 264.158206][ T5903] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.198146][ T5903] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 264.231694][ T5903] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 264.240868][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.264653][ T5903] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 264.381503][ T5867] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 264.470474][ T5903] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 264.542306][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 264.563448][ T5867] usb 4-1: config 0 has no interfaces? [ 264.570768][ T5867] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 264.591602][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.599706][ T5867] usb 4-1: Product: syz [ 264.611356][ T5867] usb 4-1: Manufacturer: syz [ 264.615962][ T5867] usb 4-1: SerialNumber: syz [ 264.632232][ T5867] usb 4-1: config 0 descriptor?? [ 264.858971][ T5903] usb 4-1: USB disconnect, device number 47 [ 264.915256][ T5867] usb 2-1: USB disconnect, device number 39 [ 264.921999][ T5867] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 265.204603][ T29] audit: type=1326 audit(1739921017.421:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14731 comm="syz.2.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff14a183da7 code=0x7ffc0000 [ 265.260860][ T29] audit: type=1326 audit(1739921017.421:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14731 comm="syz.2.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff14a128fb9 code=0x7ffc0000 [ 265.284275][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.342868][ T29] audit: type=1326 audit(1739921017.421:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14731 comm="syz.2.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff14a183da7 code=0x7ffc0000 [ 265.366385][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.429511][ T29] audit: type=1326 audit(1739921017.421:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14731 comm="syz.2.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff14a128fb9 code=0x7ffc0000 [ 265.452926][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.510392][ T29] audit: type=1326 audit(1739921017.421:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14731 comm="syz.2.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff14a183da7 code=0x7ffc0000 [ 265.533829][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.578286][ T29] audit: type=1326 audit(1739921017.421:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14731 comm="syz.2.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff14a128fb9 code=0x7ffc0000 [ 265.601719][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.655527][ T29] audit: type=1326 audit(1739921017.421:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14731 comm="syz.2.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff14a183da7 code=0x7ffc0000 [ 266.905566][T14797] __nla_validate_parse: 1 callbacks suppressed [ 266.905583][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4176'. [ 266.979667][T14800] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.018639][T14800] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 267.075447][T14800] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.110263][T14800] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 267.145354][T14803] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.167529][T14803] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 267.192054][T14803] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.200154][T14803] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 267.601529][ T5869] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 267.741658][ T5903] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 267.773393][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.791776][ T5869] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.822285][ T5869] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 267.842254][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.857143][ T5869] usb 6-1: config 0 descriptor?? [ 267.921801][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 267.928725][ T5903] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 267.947824][ T5903] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 267.968181][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 267.987917][ T5903] usb 4-1: config 1 has no interface number 0 [ 268.008207][ T5903] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.040513][ T5903] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 268.061886][ T5903] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 268.092055][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.116750][ T5903] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 268.290384][ T5869] megaworld 0003:07B5:0312.0048: item fetching failed at offset 0/5 [ 268.312062][ T5869] megaworld 0003:07B5:0312.0048: parse failed [ 268.318254][ T5869] megaworld 0003:07B5:0312.0048: probe with driver megaworld failed with error -22 [ 268.333228][ T5903] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 268.528037][ T5869] usb 6-1: USB disconnect, device number 7 [ 268.747035][ T5869] usb 4-1: USB disconnect, device number 48 [ 268.759851][ T5869] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 269.352417][ T5869] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 269.370392][ T9] kernel write not supported for file /video8 (pid: 9 comm: kworker/0:1) [ 269.550781][ T5869] usb 2-1: No LPM exit latency info found, disabling LPM. [ 269.572804][ T5869] usb 2-1: config 1 interface 0 altsetting 129 endpoint 0x1 is Bulk; changing to Interrupt [ 269.591618][ T5869] usb 2-1: config 1 interface 0 altsetting 129 endpoint 0x82 is Bulk; changing to Interrupt [ 269.635548][ T5869] usb 2-1: config 1 interface 0 has no altsetting 0 [ 269.662869][ T5869] usb 2-1: string descriptor 0 read error: -22 [ 269.669172][ T5869] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 269.701833][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.741702][T14861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.751041][T14861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.048938][ T5869] usb 2-1: USB disconnect, device number 40 [ 271.319437][ T35] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.356727][ T35] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.438016][ T35] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.478892][ T35] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.546657][ T35] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.571748][ T35] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.717703][ T35] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.744704][ T35] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.045250][ T35] bridge_slave_1: left allmulticast mode [ 272.070464][ T35] bridge_slave_1: left promiscuous mode [ 272.091664][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.101097][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.109314][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.122188][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.134702][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.142282][ T5822] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.149618][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.179338][ T35] bridge_slave_0: left allmulticast mode [ 272.185651][ T35] bridge_slave_0: left promiscuous mode [ 272.191370][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.629832][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.640621][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.652391][ T35] bond0 (unregistering): Released all slaves [ 273.118633][ T35] hsr_slave_0: left promiscuous mode [ 273.127525][ T35] hsr_slave_1: left promiscuous mode [ 273.141783][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.157306][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.201132][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.229636][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.330491][ T35] veth1_macvtap: left promiscuous mode [ 273.336959][ T35] veth0_macvtap: left promiscuous mode [ 273.346277][ T35] veth1_vlan: left promiscuous mode [ 273.356878][ T35] veth0_vlan: left promiscuous mode [ 274.032616][T14956] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input54 [ 274.251825][ T5826] Bluetooth: hci2: command tx timeout [ 274.396221][ T35] team0 (unregistering): Port device team_slave_1 removed [ 274.475768][ T35] team0 (unregistering): Port device team_slave_0 removed [ 274.501792][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 274.661489][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 274.669712][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.684744][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 274.699344][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 274.710541][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 274.725022][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.736544][ T9] usb 2-1: config 0 descriptor?? [ 274.963018][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 274.971810][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 274.984680][ T9] usb 2-1: USB disconnect, device number 41 [ 274.996451][T14914] chnl_net:caif_netlink_parms(): no params data found [ 275.018767][T14951] vlan2: entered promiscuous mode [ 275.039097][T14951] syz_tun: entered promiscuous mode [ 275.050802][T14951] vlan2: entered allmulticast mode [ 275.057362][T14951] syz_tun: entered allmulticast mode [ 275.069380][T14951] team0: Device vlan2 is up. Set it down before adding it as a team port [ 275.080567][T14951] syz_tun: left allmulticast mode [ 275.089082][T14951] syz_tun: left promiscuous mode [ 275.262926][T14914] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.280085][T14914] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.322010][T14914] bridge_slave_0: entered allmulticast mode [ 275.328734][T14914] bridge_slave_0: entered promiscuous mode [ 275.358640][T14914] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.372105][T14914] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.379302][T14914] bridge_slave_1: entered allmulticast mode [ 275.402920][T14914] bridge_slave_1: entered promiscuous mode [ 275.473074][T14914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.508126][T14914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.685263][T14914] team0: Port device team_slave_0 added [ 275.706597][T14914] team0: Port device team_slave_1 added [ 275.772581][T14914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.779552][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.805478][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.008679][T14914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.066322][T14914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.081703][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.116979][T14914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.190371][T14914] hsr_slave_0: entered promiscuous mode [ 276.197387][T14914] hsr_slave_1: entered promiscuous mode [ 276.212623][T14914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.230433][T14914] Cannot create hsr debugfs directory [ 276.329428][ T5822] Bluetooth: hci2: command tx timeout [ 276.615318][T15007] netlink: 45 bytes leftover after parsing attributes in process `syz.3.4266'. [ 276.615551][T15009] netlink: 'syz.2.4267': attribute type 10 has an invalid length. [ 276.676433][T15009] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4267'. [ 276.853144][T14914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.875196][T14914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.894629][T14914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.910357][T14914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.092943][T14914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.118399][T14914] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.196056][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.203180][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.271004][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.278131][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.487929][T14914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.681685][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.682958][ T5826] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 277.897645][T14914] veth0_vlan: entered promiscuous mode [ 277.918936][T14914] veth1_vlan: entered promiscuous mode [ 277.945553][T15068] can0: slcan on ttyS3. [ 277.985202][T14914] veth0_macvtap: entered promiscuous mode [ 278.077046][T14914] veth1_macvtap: entered promiscuous mode [ 278.111845][T15070] can0 (unregistered): slcan off ttyS3. [ 278.117778][T15070] Falling back ldisc for ttyS3. [ 278.132271][T14914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.153306][T14914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.182213][T14914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.213085][T14914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.238314][T14914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.282914][T14914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.300139][T14914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.313971][T14914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.335368][T14914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.347288][T14914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.375449][T15083] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 278.411116][ T5826] Bluetooth: hci2: command tx timeout [ 278.460000][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 278.460016][ T29] audit: type=1400 audit(1739921030.681:1073): avc: denied { read } for pid=15085 comm="syz.2.4299" name="/" dev="configfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.490014][ T29] audit: type=1400 audit(1739921030.681:1074): avc: denied { open } for pid=15085 comm="syz.2.4299" path="/905/file0" dev="configfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.596344][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.615585][ T80] Bluetooth: hci5: Frame reassembly failed (-84) [ 278.622035][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.633500][T15089] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 278.678865][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.687741][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.901715][ T5903] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 279.001381][ T29] audit: type=1400 audit(1739921031.211:1075): avc: denied { shutdown } for pid=15098 comm="syz.5.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.054521][ T5903] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 279.071371][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 279.090064][ T5903] usb 3-1: Product: syz [ 279.094496][ T5903] usb 3-1: Manufacturer: syz [ 279.099116][ T5903] usb 3-1: SerialNumber: syz [ 279.129045][ T5903] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 279.328811][ T5903] vp7045: USB control message 'out' went wrong. [ 279.341646][ T5903] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 279.365928][ T5903] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 279.387920][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.397627][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.406946][ T5903] usb 3-1: USB disconnect, device number 39 [ 279.413961][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.427445][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.438532][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.451224][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.491856][ T29] audit: type=1400 audit(1739921031.721:1076): avc: denied { read } for pid=15112 comm="syz.5.4308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.540490][ T1161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.647629][ T1161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.770858][ T1161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.888843][ T1161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.928853][T15110] chnl_net:caif_netlink_parms(): no params data found [ 280.182055][T15110] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.199435][T15110] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.227497][T15110] bridge_slave_0: entered allmulticast mode [ 280.244666][T15110] bridge_slave_0: entered promiscuous mode [ 280.263953][T15110] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.283930][T15110] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.299477][T15110] bridge_slave_1: entered allmulticast mode [ 280.313092][T15110] bridge_slave_1: entered promiscuous mode [ 280.413304][T15110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.488246][ T5832] Bluetooth: hci2: command 0x0419 tx timeout [ 280.633339][T15158] tmpfs: Invalid uid '0x00000000ffffffff' [ 280.641487][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 281.204451][ T25] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 281.385567][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.414479][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 281.424116][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 281.432826][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.40 [ 281.443027][ T1161]  (unregistering): Released all slaves [ 281.451353][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.460605][ T25] usb 4-1: Product: syz [ 281.465297][ T25] usb 4-1: SerialNumber: syz [ 281.476836][T15110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.521914][ T5826] Bluetooth: hci1: command tx timeout [ 281.629308][ T1161] tipc: Disabling bearer [ 281.647070][ T1161] tipc: Disabling bearer [ 281.659392][ T1161] tipc: Left network mode [ 281.663199][T15110] team0: Port device team_slave_0 added [ 281.674046][T15110] team0: Port device team_slave_1 added [ 281.728147][ T25] usbhid 4-1:1.0: can't add hid device: -71 [ 281.739576][ T25] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 281.782387][ T25] usb 4-1: USB disconnect, device number 49 [ 281.812816][T15110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.819811][T15110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.913962][T15110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.931374][ T29] audit: type=1400 audit(1739921034.141:1077): avc: denied { map } for pid=15195 comm="syz.2.4344" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 282.001497][ T29] audit: type=1400 audit(1739921034.141:1078): avc: denied { execute } for pid=15195 comm="syz.2.4344" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 282.038325][T15110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.053078][T15110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.081717][ T29] audit: type=1400 audit(1739921034.141:1079): avc: denied { setopt } for pid=15195 comm="syz.2.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 282.106431][T15110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.384336][T15110] hsr_slave_0: entered promiscuous mode [ 282.392508][T15110] hsr_slave_1: entered promiscuous mode [ 282.399102][T15110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.409815][T15110] Cannot create hsr debugfs directory [ 282.416606][T15213] netlink: 'syz.3.4352': attribute type 14 has an invalid length. [ 282.501026][ T1161] hsr_slave_0: left promiscuous mode [ 282.517193][ T1161] hsr_slave_1: left promiscuous mode [ 282.554804][ T1161] veth0_macvtap: left promiscuous mode [ 282.562375][ T5826] Bluetooth: hci2: command 0x0419 tx timeout [ 282.581890][ T1161] veth1_vlan: left promiscuous mode [ 282.587165][ T1161] veth0_vlan: left promiscuous mode [ 282.669718][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4358'. [ 283.131509][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 283.291479][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 283.300013][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.315251][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.326714][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.341789][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 283.351762][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.366065][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.375373][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.383909][ T9] usb 3-1: Manufacturer: syz [ 283.397520][ T9] usb 3-1: config 0 descriptor?? [ 283.614464][ T5826] Bluetooth: hci1: command tx timeout [ 283.709870][T15110] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.741679][ T9] rc_core: IR keymap rc-hauppauge not found [ 283.751212][T15110] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.764157][ T9] Registered IR keymap rc-empty [ 283.774172][T15110] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.796204][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.807481][T15110] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.822823][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.862383][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 283.896117][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input55 [ 283.955090][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.988154][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.992151][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4371'. [ 283.998086][T15110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.046777][ T1161] IPVS: stop unused estimator thread 0... [ 284.050386][T15110] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.060188][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 284.073648][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.080738][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.088514][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 284.119803][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.126944][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.136863][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 284.165790][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 284.196485][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 284.252439][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 284.272011][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 284.291998][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 284.352616][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 284.390189][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 284.413103][T15110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.427999][ T9] usb 3-1: USB disconnect, device number 40 [ 284.694027][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4380'. [ 284.705756][T15287] bridge0: port 2(bridge_slave_1) entered learning state [ 284.706122][ T29] audit: type=1326 audit(1739921036.931:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54a78cde9 code=0x7ffc0000 [ 284.718570][T15287] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.736609][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.759961][ T29] audit: type=1326 audit(1739921036.971:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54a78cde9 code=0x7ffc0000 [ 284.798279][ T29] audit: type=1326 audit(1739921036.981:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54a78cde9 code=0x7ffc0000 [ 284.832330][T15110] veth0_vlan: entered promiscuous mode [ 284.843797][T15110] veth1_vlan: entered promiscuous mode [ 284.877594][T15110] veth0_macvtap: entered promiscuous mode [ 284.887032][ T29] audit: type=1326 audit(1739921036.981:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54a78cde9 code=0x7ffc0000 [ 284.927718][T15110] veth1_macvtap: entered promiscuous mode [ 284.954694][ T29] audit: type=1326 audit(1739921036.981:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54a78cde9 code=0x7ffc0000 [ 285.035990][T15110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.060987][T15110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.063935][ T29] audit: type=1326 audit(1739921036.981:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54a78cde9 code=0x7ffc0000 [ 285.087407][T15110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.098771][ T29] audit: type=1326 audit(1739921037.081:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54a78cde9 code=0x7ffc0000 [ 285.130000][ T29] audit: type=1326 audit(1739921037.091:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc54a783da7 code=0x7ffc0000 [ 285.155151][ T29] audit: type=1326 audit(1739921037.091:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc54a728fb9 code=0x7ffc0000 [ 285.157315][T15110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.217991][ T29] audit: type=1326 audit(1739921037.091:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc54a783da7 code=0x7ffc0000 [ 285.256323][T15110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.280738][T15110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.297130][T15110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.310097][T15110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.321225][T15110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.332392][T15110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.342511][T15110] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.351267][T15110] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.360129][T15110] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.419228][T15110] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.552763][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.565576][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.625354][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.645884][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.683095][ T5826] Bluetooth: hci1: command tx timeout [ 285.901485][ T5949] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 286.065231][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 286.072811][ T5949] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.084210][ T971] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 286.099557][ T5949] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 286.109897][ T5949] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 286.119837][ T5949] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 286.134759][ T5949] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.144078][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 286.152235][ T5949] usb 3-1: SerialNumber: syz [ 286.159047][T15316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.167526][T15316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.175623][ T5949] hub 3-1:1.0: bad descriptor, ignoring hub [ 286.181801][ T5949] hub 3-1:1.0: probe with driver hub failed with error -5 [ 286.251559][ T971] usb 4-1: Using ep0 maxpacket: 8 [ 286.259755][ T971] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 286.270621][ T971] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 286.279697][ T971] usb 4-1: Product: syz [ 286.284021][ T971] usb 4-1: Manufacturer: syz [ 286.288622][ T971] usb 4-1: SerialNumber: syz [ 286.300434][ T971] usb 4-1: config 0 descriptor?? [ 286.308479][ T971] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 286.389397][T15359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.394721][T15316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.417688][T15316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.847978][ T5949] cdc_ether 3-1:1.0 eth9: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 286.918567][ T971] gspca_zc3xx: reg_w_i err -71 [ 286.928815][ T971] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 286.945949][ T971] usb 4-1: USB disconnect, device number 50 [ 287.058982][T15386] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.161639][ T5949] usb 3-1: USB disconnect, device number 41 [ 287.168948][ T5949] cdc_ether 3-1:1.0 eth9: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 287.577888][T15416] netlink: 'syz.5.4439': attribute type 10 has an invalid length. [ 287.609166][T15416] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 287.771839][ T5826] Bluetooth: hci1: command tx timeout [ 288.061530][T15447] netlink: 'syz.5.4454': attribute type 30 has an invalid length. [ 288.197316][T15386] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.323927][T15386] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.423812][T15386] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.484389][T15421] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 288.569679][T15386] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.595308][T15386] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.683509][T15386] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.709445][T15386] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.922537][ T5949] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 289.092876][ T5949] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.105377][ T5949] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 289.105478][T15508] vivid-000: disconnect [ 289.119870][ T5949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.132276][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.134716][T15506] vivid-000: reconnect [ 289.140260][ T5949] usb 2-1: Product: syz [ 289.140278][ T5949] usb 2-1: Manufacturer: syz [ 289.140292][ T5949] usb 2-1: SerialNumber: syz [ 289.142129][T15477] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 289.372220][ T5949] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 289.385318][ T5949] usb 2-1: USB disconnect, device number 42 [ 289.516803][T15481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.523730][T15481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.530711][T15481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.536807][T15481] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 289.545162][T15481] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 289.555379][T15481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.561966][T15481] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 289.569665][T15481] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 289.748843][T15521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.821431][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 289.971727][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 289.977931][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 289.988498][ T9] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 289.999653][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.009999][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.034395][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 290.052883][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 290.052897][ T29] audit: type=1400 audit(1739921042.281:1162): avc: denied { mount } for pid=15540 comm="syz.6.4496" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 290.052961][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 290.093208][T15541] overlay: filesystem on ./file0 is read-only [ 290.099855][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26222, setting to 1024 [ 290.112161][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.121243][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.125812][ T29] audit: type=1400 audit(1739921042.341:1163): avc: denied { unmount } for pid=15110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 290.133061][T15477] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 290.362069][ T9] usb 2-1: usb_control_msg returned -71 [ 290.367743][ T9] usbtmc 2-1:16.0: can't read capabilities [ 290.376689][ T9] usb 2-1: USB disconnect, device number 43 [ 290.421548][ T971] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 290.496185][T15549] bad cache= option: no%e [ 290.496185][T15549] [ 290.504051][T15549] CIFS: VFS: bad cache= option: no%e [ 290.591615][ T971] usb 7-1: Using ep0 maxpacket: 16 [ 290.602161][ T971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 290.619190][ T971] usb 7-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 290.628543][ T971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.640954][ T971] usb 7-1: Product: syz [ 290.646477][ T971] usb 7-1: Manufacturer: syz [ 290.651206][ T971] usb 7-1: SerialNumber: syz [ 290.660817][ T971] usb 7-1: config 0 descriptor?? [ 290.874307][ T9] usb 7-1: USB disconnect, device number 2 [ 291.457417][T15581] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4514'. [ 291.604460][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 291.604593][ T5832] Bluetooth: hci2: command 0x0419 tx timeout [ 291.611712][T15481] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 291.616771][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 291.836758][ T29] audit: type=1400 audit(1739921044.051:1164): avc: denied { getopt } for pid=15594 comm="syz.2.4521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 291.993784][ T29] audit: type=1400 audit(1739921044.221:1165): avc: denied { setattr } for pid=15608 comm="syz.1.4528" name="net" dev="proc" ino=47546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=dir permissive=1 [ 292.112829][ T971] kernel write not supported for file bpf-map (pid: 971 comm: kworker/1:2) [ 292.469121][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4537'. [ 292.622203][T15639] gretap0: entered promiscuous mode [ 292.639085][T15638] gretap0: left promiscuous mode [ 292.907001][ T29] audit: type=1400 audit(1739921045.131:1166): avc: denied { mount } for pid=15656 comm="syz.5.4549" name="/" dev="pstore" ino=2676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 292.912165][T15657] Invalid source name [ 292.970318][ T29] audit: type=1400 audit(1739921045.131:1167): avc: denied { mounton } for pid=15656 comm="syz.5.4549" path="/68/file0" dev="pstore" ino=2676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 293.031729][ T29] audit: type=1400 audit(1739921045.261:1168): avc: denied { unmount } for pid=14914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 293.192965][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 293.215650][ T5823] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 293.267175][T15670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.284565][T15670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.353753][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 293.367208][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 293.385293][T15670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.393347][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 293.396093][T15670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.416102][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.424309][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.438927][ T5823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.459808][ T5823] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.469101][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.483449][T15658] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 293.491144][ T5823] usb 2-1: Product: syz [ 293.498247][ T5823] usb 2-1: Manufacturer: syz [ 293.504765][ T5823] usb 2-1: SerialNumber: syz [ 293.506626][T15670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.514695][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.537510][T15670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.673554][T15670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.683973][ T5832] Bluetooth: hci2: command 0x0419 tx timeout [ 293.684009][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.701520][T15670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.808653][ T5949] usb 7-1: USB disconnect, device number 3 [ 293.817940][T15670] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.826772][T15670] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.840778][T15670] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.850941][T15670] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.866214][T15670] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.874575][T15670] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.888682][T15670] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.896904][T15670] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.130109][ T29] audit: type=1326 audit(1739921046.351:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a18cde9 code=0x7fc00000 [ 294.192495][ T5903] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 294.278731][T15697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4566'. [ 294.333606][ T5823] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 294.345657][ T5823] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 294.355723][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 294.361718][T15699] Invalid logical block size (-1) [ 294.368810][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 294.380934][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 294.397400][ T5823] cdc_ncm 2-1:1.0: bind() failure [ 294.409250][ T5903] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 294.430490][ T5823] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 294.439819][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.452198][ T5823] cdc_ncm 2-1:1.1: bind() failure [ 294.459744][ T5903] usb 6-1: Product: syz [ 294.464180][ T5823] usb 2-1: USB disconnect, device number 44 [ 294.471856][ T5903] usb 6-1: Manufacturer: syz [ 294.476467][ T5903] usb 6-1: SerialNumber: syz [ 294.487263][ T5903] usb 6-1: config 0 descriptor?? [ 294.500486][ T5903] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 294.510583][ T5903] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 294.738321][T15716] netlink: 'syz.3.4576': attribute type 13 has an invalid length. [ 294.786672][T15716] gretap0: refused to change device tx_queue_len [ 294.796261][T15716] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 295.127818][ T5903] em28xx 6-1:0.0: chip ID is em2874 [ 295.236610][ T29] audit: type=1400 audit(1739921047.461:1170): avc: denied { append } for pid=15742 comm="syz.2.4588" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 295.282334][ T29] audit: type=1400 audit(1739921047.501:1171): avc: denied { ioctl } for pid=15743 comm="syz.6.4589" path="socket:[51910]" dev="sockfs" ino=51910 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 295.366600][ T5823] usb 6-1: USB disconnect, device number 8 [ 295.380399][ T5823] em28xx 6-1:0.0: Disconnecting em28xx [ 295.404442][ T5823] em28xx 6-1:0.0: Freeing device [ 295.761473][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 295.761781][ T5832] Bluetooth: hci2: command 0x0419 tx timeout [ 295.978943][T15775] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 295.988583][ T5823] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 296.001815][T15775] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 296.022768][T15775] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 296.036106][T15775] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 296.057969][T15778] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.069643][T15779] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 296.077682][T15778] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.090181][ T5869] kernel write not supported for file /video8 (pid: 5869 comm: kworker/0:4) [ 296.090967][T15779] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 296.110056][T15779] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 296.123059][T15779] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 296.159528][T15778] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.163174][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.173158][T15778] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.204137][ T5823] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 296.216951][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.230169][ T5823] usb 7-1: config 0 descriptor?? [ 296.254730][T15778] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.268674][T15778] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.336352][T15778] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.357497][T15778] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.646018][ T5823] logitech 0003:046D:C20E.0049: rdesc size test failed for formula gp [ 296.656105][ T5823] logitech 0003:046D:C20E.0049: hidraw0: USB HID v0.09 Device [HID 046d:c20e] on usb-dummy_hcd.6-1/input0 [ 296.858473][ T5949] usb 7-1: USB disconnect, device number 4 [ 297.295227][T15804] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4615'. [ 297.429605][T15812] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4620'. [ 297.444624][ T29] audit: type=1326 audit(1739921049.671:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15814 comm="syz.2.4619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff14a18cde9 code=0x0 [ 297.541872][ T5949] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 297.599464][T15825] netlink: 'syz.5.4625': attribute type 12 has an invalid length. [ 297.612000][T15825] netlink: 'syz.5.4625': attribute type 29 has an invalid length. [ 297.619901][T15825] netlink: 'syz.5.4625': attribute type 2 has an invalid length. [ 297.628639][T15825] netlink: 'syz.5.4625': attribute type 2 has an invalid length. [ 297.636526][T15825] netlink: 'syz.5.4625': attribute type 1 has an invalid length. [ 297.644442][T15825] netlink: 'syz.5.4625': attribute type 37 has an invalid length. [ 297.652372][T15825] netlink: 'syz.5.4625': attribute type 2 has an invalid length. [ 297.660152][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.684387][T15828] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 297.705338][T15828] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 297.721559][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 297.729666][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 297.745726][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 297.759773][ T5949] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 297.770607][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.779649][ T5949] usb 2-1: Product: syz [ 297.787783][ T5949] usb 2-1: Manufacturer: syz [ 297.792607][ T5949] usb 2-1: SerialNumber: syz [ 297.798928][ T5949] usb 2-1: config 0 descriptor?? [ 297.811372][ T5949] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 297.821395][ T5949] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 298.049425][T15843] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4633'. [ 298.436210][ T5949] em28xx 2-1:0.0: chip ID is em2874 [ 298.448677][T15778] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.465687][T15778] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.482208][T15778] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.494668][T15778] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.515400][T15778] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.528182][T15778] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.546319][T15778] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.555021][T15778] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.577173][T15865] veth1_to_team: entered promiscuous mode [ 298.605078][T15865] veth1_to_team: left promiscuous mode [ 298.667215][ T5949] usb 2-1: USB disconnect, device number 45 [ 298.674156][ T5949] em28xx 2-1:0.0: Disconnecting em28xx [ 298.691283][T15872] delete_channel: no stack [ 298.696120][ T29] audit: type=1400 audit(1739921050.911:1173): avc: denied { setopt } for pid=15872 comm="syz.6.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 298.727638][ T5949] em28xx 2-1:0.0: Freeing device [ 298.888743][T15885] netlink: 'syz.6.4653': attribute type 1 has an invalid length. [ 298.908199][ T29] audit: type=1400 audit(1739921051.131:1174): avc: denied { watch } for pid=15889 comm="syz.3.4654" path="/969/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=4925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 298.952872][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.960527][ T29] audit: type=1400 audit(1739921051.131:1175): avc: denied { watch_sb } for pid=15889 comm="syz.3.4654" path="/969/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=4925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 299.005027][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.545731][T15917] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 300.091548][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 300.251470][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 300.257891][ T25] usb 6-1: config 0 has no interfaces? [ 300.265852][ T25] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 300.281368][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.289379][ T25] usb 6-1: Product: syz [ 300.301685][ T25] usb 6-1: Manufacturer: syz [ 300.306311][ T25] usb 6-1: SerialNumber: syz [ 300.322808][ T25] usb 6-1: config 0 descriptor?? [ 300.403897][T15944] bridge0: port 3(wlan0) entered blocking state [ 300.410444][T15944] bridge0: port 3(wlan0) entered disabled state [ 300.416861][ T5903] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 300.427824][T15944] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 300.437648][T15944] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 300.448271][T15946] mkiss: ax0: crc mode is auto. [ 300.557011][ T25] usb 6-1: USB disconnect, device number 9 [ 300.572120][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 300.578791][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 300.601622][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 300.614214][ T5903] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.623581][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.632307][ T5903] usb 7-1: Product: syz [ 300.636763][ T5903] usb 7-1: Manufacturer: syz [ 300.643993][ T5903] usb 7-1: SerialNumber: syz [ 300.649318][T15954] netlink: 280 bytes leftover after parsing attributes in process `syz.1.4685'. [ 300.659552][ T5903] usb 7-1: config 0 descriptor?? [ 300.668071][ T5903] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 300.677576][ T5903] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 300.791404][ T5869] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 300.799110][ T5823] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 300.951371][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 300.951442][ T971] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 300.956617][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 300.970530][ T5869] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.980617][ T5869] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 300.993980][ T5869] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.000643][ T5869] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 301.010097][ T5823] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 301.018730][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.026807][ T5823] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 301.036086][ T5823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 301.045610][ T5869] usb 4-1: config 0 descriptor?? [ 301.050614][ T5823] usb 3-1: config 1 has no interface number 0 [ 301.057260][ T5823] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.069650][ T5823] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 301.082985][ T5823] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 301.092300][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.106933][ T5823] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 301.118248][ T29] audit: type=1326 audit(1739921053.341:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15957 comm="syz.5.4687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbff6f8cde9 code=0x0 [ 301.143082][ T971] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 301.159477][ T971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 301.173079][ T971] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 301.182166][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.191349][ T971] usb 2-1: config 0 descriptor?? [ 301.273079][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 301.279373][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 301.293209][ T5903] em28xx 7-1:0.0: chip ID is em2874 [ 301.299010][ T5869] usb 4-1: USB disconnect, device number 51 [ 301.317871][ T5823] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 301.509932][ T5869] usb 7-1: USB disconnect, device number 5 [ 301.516843][ T5869] em28xx 7-1:0.0: Disconnecting em28xx [ 301.536265][ T5869] em28xx 7-1:0.0: Freeing device [ 301.602260][ T971] kye 0003:0458:0138.004A: item fetching failed at offset 0/1 [ 301.610014][ T971] kye 0003:0458:0138.004A: parse failed [ 301.615857][ T971] kye 0003:0458:0138.004A: probe with driver kye failed with error -22 [ 301.757845][ T971] usb 3-1: USB disconnect, device number 42 [ 301.764607][ T971] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 301.807978][ T5949] usb 2-1: USB disconnect, device number 46 [ 301.893939][T15965] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.4690'. [ 302.182367][T15981] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4698'. [ 302.531397][ T29] audit: type=1400 audit(1739921054.751:1177): avc: denied { setopt } for pid=16001 comm="syz.1.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 302.531660][ T5949] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 302.659986][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4711'. [ 302.687071][T16015] macvlan0: left promiscuous mode [ 302.701537][T16015] macvlan0: left allmulticast mode [ 302.776606][ T5949] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.793683][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.798278][ T29] audit: type=1400 audit(1739921055.021:1178): avc: denied { ioctl } for pid=16018 comm="syz.1.4713" path="socket:[53490]" dev="sockfs" ino=53490 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 302.809027][ T5949] usb 7-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 302.867861][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.879725][T16021] IPVS: lc: FWM 4 0x00000004 - no destination available [ 302.889420][ T25] IPVS: starting estimator thread 0... [ 302.889709][ T29] audit: type=1400 audit(1739921055.021:1179): avc: denied { accept } for pid=16018 comm="syz.1.4713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 302.899501][ T5949] usb 7-1: config 0 descriptor?? [ 303.012910][T16022] IPVS: using max 37 ests per chain, 88800 per kthread [ 303.355452][ T5949] thrustmaster 0003:044F:B65A.004B: hidraw0: USB HID v0.09 Device [HID 044f:b65a] on usb-dummy_hcd.6-1/input0 [ 303.380910][ T5949] thrustmaster 0003:044F:B65A.004B: no inputs found [ 303.613664][ T5823] usb 7-1: USB disconnect, device number 6 [ 303.683371][T16056] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4728'. [ 303.698967][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4730'. [ 303.715317][T16058] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4730'. [ 304.033869][T16069] IPVS: stopping backup sync thread 16070 ... [ 304.211611][ T5949] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 304.371703][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 304.400454][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 304.411841][ T5832] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 304.419451][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.430820][ T5949] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.439855][T16092] hugetlbfs: syz.6.4746 (16092): Using mlock ulimits for SHM_HUGETLB is obsolete [ 304.440945][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 304.458151][T16094] netlink: 'syz.2.4747': attribute type 2 has an invalid length. [ 304.461692][ T5949] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 304.469919][T16094] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4747'. [ 304.479208][ T5949] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 304.479235][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.480566][ T5949] usb 4-1: config 0 descriptor?? [ 304.512785][T16065] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.521000][ T29] audit: type=1326 audit(1739921056.741:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eafd8cde9 code=0x7fc00000 [ 304.822589][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.835738][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.842896][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.849703][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.858137][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.865051][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.871978][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.878805][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.886017][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.892913][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.901669][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.910049][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.917187][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.924045][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.930844][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.937695][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.945021][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.951849][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.958669][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.965573][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.973582][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.980415][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.987265][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 304.994120][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.000938][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.008057][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.014913][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.021744][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.028552][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.035697][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.044167][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.051188][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.058055][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.065149][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.071998][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.072916][ T9] usb 4-1: USB disconnect, device number 52 [ 305.078859][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.091850][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.098892][ T5826] Bluetooth: hci5: unexpected event 0x01 length: 8 > 1 [ 305.100789][ T5832] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 305.225586][ T29] audit: type=1326 audit(1739921057.441:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3eafd8cde9 code=0x7fc00000 [ 305.327287][T16135] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4768'. [ 305.881626][ T5949] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 306.003828][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4784'. [ 306.019777][T16174] tipc: Started in network mode [ 306.029941][T16174] tipc: Node identity ac14140f, cluster identity 4711 [ 306.037677][T16174] tipc: New replicast peer: 255.255.255.255 [ 306.048401][T16174] tipc: Enabled bearer , priority 10 [ 306.054795][ T5949] usb 7-1: Using ep0 maxpacket: 32 [ 306.076387][ T5949] usb 7-1: config 0 has an invalid interface number: 74 but max is 1 [ 306.093392][ T5949] usb 7-1: config 0 has no interface number 1 [ 306.124387][ T5949] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 306.144394][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.171475][ T5949] usb 7-1: Product: syz [ 306.175887][ T5949] usb 7-1: Manufacturer: syz [ 306.180492][ T5949] usb 7-1: SerialNumber: syz [ 306.223829][ T5949] usb 7-1: config 0 descriptor?? [ 306.248837][ T5949] snd-usb-audio 7-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 306.498923][ T5949] usb 7-1: USB disconnect, device number 7 [ 306.531811][ T29] audit: type=1400 audit(1739921058.761:1182): avc: denied { map } for pid=16203 comm="syz.3.4801" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 306.555727][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.586458][ T29] audit: type=1400 audit(1739921058.761:1183): avc: denied { execute } for pid=16203 comm="syz.3.4801" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 306.638146][T16213] xt_hashlimit: size too large, truncated to 1048576 [ 307.008900][T16237] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 307.008952][ T29] audit: type=1400 audit(1739921059.231:1184): avc: denied { read } for pid=16236 comm="syz.3.4812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 307.035913][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.051560][ T5949] tipc: Node number set to 2886997007 [ 307.098277][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4815'. [ 307.130346][T16240] bond1 (unregistering): Released all slaves [ 307.701832][T16276] IPVS: persistence engine module ip_vs_pe_ not found [ 307.733762][T16281] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.4831'. [ 307.902444][T16293] tmpfs: Invalid uid '0x00000000ffffffff' [ 308.002371][ T5826] Bluetooth: hci5: sending frame failed (-49) [ 308.009582][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 308.025865][T16295] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 308.091923][ T29] audit: type=1400 audit(1739921060.311:1185): avc: denied { write } for pid=16304 comm="syz.1.4842" name="mdstat" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 308.251119][T16317] netlink: 'syz.6.4849': attribute type 25 has an invalid length. [ 308.271778][T16317] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4849'. [ 308.347172][T16320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.496911][T16332] can0: slcan on ttyS3. [ 308.553300][T16332] can0 (unregistered): slcan off ttyS3. [ 308.568854][T16332] Falling back ldisc for ttyS3. [ 308.750336][ T29] audit: type=1400 audit(1739921060.971:1186): avc: denied { write } for pid=16350 comm="syz.5.4865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 308.769804][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.843179][T16357] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 308.856799][T16357] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 309.237601][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4876'. [ 309.241763][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 309.448281][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 309.493678][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.545664][ T9] usb 2-1: Product: syz [ 309.569370][ T9] usb 2-1: Manufacturer: syz [ 309.586941][T16418] bond0: (slave bond_slave_0): interface is now down [ 309.588778][ T9] usb 2-1: SerialNumber: syz [ 309.603607][T16418] bond0: (slave bond_slave_1): interface is now down [ 309.628900][ T9] usb 2-1: config 0 descriptor?? [ 309.662935][T16412] bond0: (slave bond_slave_0): interface is now down [ 309.674433][T16412] bond0: (slave bond_slave_1): interface is now down [ 309.738806][T16412] bond0: now running without any active interface! [ 309.914295][ T5949] usb 2-1: USB disconnect, device number 47 [ 310.132495][ T29] audit: type=1400 audit(1739921062.361:1187): avc: denied { map } for pid=16378 comm="syz.1.4871" path=2F6465762F736E642F636F6E74726F6C4333202864656C6574656429 dev="devtmpfs" ino=3550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.159350][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.207216][ T29] audit: type=1400 audit(1739921062.411:1188): avc: denied { accept } for pid=16443 comm="syz.5.4891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 310.265129][ T29] audit: type=1400 audit(1739921062.421:1189): avc: denied { ioctl } for pid=16443 comm="syz.5.4891" path="socket:[55576]" dev="sockfs" ino=55576 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 310.289905][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.947395][T16493] tipc: Started in network mode [ 310.960835][T16493] tipc: Node identity ac14140f, cluster identity 4711 [ 310.972369][T16493] tipc: New replicast peer: 255.255.255.255 [ 310.997471][T16493] tipc: Enabled bearer , priority 10 [ 311.322081][ T5949] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 311.395661][T16526] netlink: 'syz.6.4927': attribute type 10 has an invalid length. [ 311.409066][T16526] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 311.505256][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 311.530186][ T5949] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 311.570508][ T5949] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 311.585714][ T5949] usb 2-1: Product: syz [ 311.589918][ T5949] usb 2-1: Manufacturer: syz [ 311.608889][ T5949] usb 2-1: SerialNumber: syz [ 311.624601][ T5949] usb 2-1: config 0 descriptor?? [ 311.633361][ T5949] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 311.991819][ T25] tipc: Node number set to 2886997007 [ 312.047231][ T29] audit: type=1400 audit(1739921064.271:1190): avc: denied { rename } for pid=16555 comm="syz.5.4952" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 312.239753][ T5949] gspca_zc3xx: reg_w_i err -71 [ 312.245397][ T5949] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 312.268822][ T5949] usb 2-1: USB disconnect, device number 48 [ 312.424863][T16582] tipc: Started in network mode [ 312.429888][T16582] tipc: Node identity ac14140f, cluster identity 4711 [ 312.440137][T16582] tipc: New replicast peer: 255.255.255.255 [ 312.449671][T16582] tipc: Enabled bearer , priority 10 [ 312.555081][T16589] netlink: 'syz.3.4958': attribute type 1 has an invalid length. [ 312.568508][T16589] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.4958'. [ 312.640460][T16595] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4960'. [ 313.050901][ T29] audit: type=1400 audit(1739921065.271:1191): avc: denied { ioctl } for pid=16626 comm="syz.2.4973" path="socket:[55930]" dev="sockfs" ino=55930 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 313.058871][T16628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.091531][T16628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.131386][T16628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.161598][T16628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.191368][T16628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.202627][T16628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.307224][T16642] netlink: 'syz.1.4979': attribute type 30 has an invalid length. [ 313.561398][ T5823] tipc: Node number set to 2886997007 [ 314.242040][ T5949] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 314.314412][T16707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.416040][ T5949] usb 7-1: Using ep0 maxpacket: 8 [ 314.446990][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 314.468222][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.496697][ T5949] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.512433][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 314.536711][ T5949] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 314.547228][ T5949] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 314.556339][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.570318][ T5949] usb 7-1: config 0 descriptor?? [ 314.580991][T16694] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 314.691505][T16729] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 314.700568][T16729] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 314.830429][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.839342][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.846233][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.853136][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.859974][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.867426][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.874662][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.883654][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.890486][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.897667][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.904520][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.911370][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.918232][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.925847][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.932772][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.939606][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.946718][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.953559][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.961652][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.968473][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.975287][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.982370][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.989162][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 314.996462][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.003274][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.010067][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.016880][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.023682][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.030471][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.037270][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.044710][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.051541][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.058331][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.065131][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.071933][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.078722][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.085762][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 315.093214][ T5826] Bluetooth: hci5: unexpected event 0x01 length: 8 > 1 [ 420.191264][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 420.205099][ C1] rcu: 0-...!: (3 ticks this GP) idle=8104/1/0x4000000000000000 softirq=60384/60387 fqs=2 [ 420.216325][ C1] rcu: (detected by 1, t=10505 jiffies, g=57101, q=328 ncpus=2) [ 420.224039][ C1] Sending NMI from CPU 1 to CPUs 0: [ 420.224064][ C0] NMI backtrace for cpu 0 [ 420.224073][ C0] CPU: 0 UID: 0 PID: 16741 Comm: syz.5.5028 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 420.224088][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 420.224095][ C0] RIP: 0010:lock_acquire+0x0/0xb0 [ 420.224117][ C0] Code: c7 30 82 62 90 e8 b0 47 86 00 e9 6e ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 4d 89 cf 41 56 45 89 c6 41 55 41 89 cd 41 54 41 [ 420.224129][ C0] RSP: 0018:ffffc90000007e10 EFLAGS: 00000046 [ 420.224140][ C0] RAX: 0000000000010002 RBX: ffff8880b862c680 RCX: 0000000000000000 [ 420.224148][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b862c698 [ 420.224156][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 420.224163][ C0] R10: 0000000000000001 R11: 0000000000000004 R12: ffff888026300340 [ 420.224171][ C0] R13: ffff8880b862c780 R14: ffff8880b862c680 R15: ffffffff896a68c0 [ 420.224180][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 420.224193][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.224201][ C0] CR2: 000000110c33114d CR3: 0000000054d4a000 CR4: 00000000003526f0 [ 420.224209][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 420.224216][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 420.224223][ C0] Call Trace: [ 420.224228][ C0] [ 420.224234][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 420.224254][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 420.224270][ C0] ? nmi_handle+0x1ac/0x5d0 [ 420.224288][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 420.224304][ C0] ? default_do_nmi+0x6a/0x160 [ 420.224321][ C0] ? exc_nmi+0x170/0x1e0 [ 420.224337][ C0] ? end_repeat_nmi+0xf/0x53 [ 420.224354][ C0] ? __pfx_advance_sched+0x10/0x10 [ 420.224375][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 420.224391][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 420.224408][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 420.224424][ C0] [ 420.224428][ C0] [ 420.224432][ C0] _raw_spin_lock_irq+0x36/0x50 [ 420.224449][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 420.224462][ C0] __hrtimer_run_queues+0x2be/0xae0 [ 420.224477][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 420.224489][ C0] ? read_tsc+0x9/0x20 [ 420.224505][ C0] hrtimer_interrupt+0x392/0x8e0 [ 420.224522][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 420.224545][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 420.224558][ C0] [ 420.224562][ C0] [ 420.224567][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.224583][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x70 [ 420.224603][ C0] Code: 49 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 2c 16 00 00 85 c0 74 2b <8b> 82 08 16 00 00 83 f8 02 75 20 48 8b 8a 10 16 00 00 8b 92 0c 16 [ 420.224614][ C0] RSP: 0018:ffffc900040bf548 EFLAGS: 00000246 [ 420.224623][ C0] RAX: 0000000080000001 RBX: ffffea0002d17380 RCX: ffffffff822890c7 [ 420.224632][ C0] RDX: ffff888029cba440 RSI: ffffffff8228912a RDI: ffffea0002d17398 [ 420.224639][ C0] RBP: ffff888020d5d060 R08: 0000000000000007 R09: 0000000000000000 [ 420.224647][ C0] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000000 [ 420.224654][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 420.224664][ C0] ? page_table_check_clear.part.0+0xf7/0x540 [ 420.224678][ C0] ? page_table_check_clear.part.0+0x15a/0x540 [ 420.224693][ C0] page_table_check_clear.part.0+0x15a/0x540 [ 420.224708][ C0] __page_table_check_pte_clear+0x328/0x580 [ 420.224722][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 420.224736][ C0] ? const_folio_flags+0x5b/0x100 [ 420.224753][ C0] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 420.224769][ C0] unmap_page_range+0x23b8/0x43a0 [ 420.224794][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 420.224813][ C0] ? __pfx_lock_release+0x10/0x10 [ 420.224828][ C0] ? uprobe_munmap+0x20/0x5c0 [ 420.224845][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 420.224860][ C0] unmap_single_vma+0x194/0x2b0 [ 420.224878][ C0] unmap_vmas+0x22f/0x490 [ 420.224896][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 420.224913][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 420.224932][ C0] exit_mmap+0x1c1/0xba0 [ 420.224951][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 420.224971][ C0] ? __pfx_mark_lock+0x10/0x10 [ 420.224993][ C0] __mmput+0x12a/0x410 [ 420.225011][ C0] mmput+0x62/0x70 [ 420.225027][ C0] do_exit+0x9ba/0x2d70 [ 420.225041][ C0] ? get_signal+0x8f7/0x26c0 [ 420.225059][ C0] ? __pfx_do_exit+0x10/0x10 [ 420.225072][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 420.225083][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 420.225096][ C0] do_group_exit+0xd3/0x2a0 [ 420.225110][ C0] get_signal+0x24ed/0x26c0 [ 420.225129][ C0] ? do_user_addr_fault+0xdc7/0x13f0 [ 420.225144][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 420.225161][ C0] ? __pfx_get_signal+0x10/0x10 [ 420.225179][ C0] ? __pfx_do_futex+0x10/0x10 [ 420.225193][ C0] ? find_held_lock+0x2d/0x110 [ 420.225206][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 420.225220][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 420.225240][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 420.225254][ C0] do_syscall_64+0xda/0x250 [ 420.225269][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.225284][ C0] RIP: 0033:0x7fbff6f8cde9 [ 420.225294][ C0] Code: Unable to access opcode bytes at 0x7fbff6f8cdbf. [ 420.225299][ C0] RSP: 002b:00007fbff7ec50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 420.225312][ C0] RAX: fffffffffffffe00 RBX: 00007fbff71a5fa8 RCX: 00007fbff6f8cde9 [ 420.225320][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbff71a5fa8 [ 420.225327][ C0] RBP: 00007fbff71a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 420.225335][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbff71a5fac [ 420.225342][ C0] R13: 0000000000000000 R14: 00007ffe7ae7a750 R15: 00007ffe7ae7a838 [ 420.225355][ C0] [ 420.226060][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g57101 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 420.822957][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 420.832916][ C1] rcu: RCU grace-period kthread stack dump: [ 420.838796][ C1] task:rcu_preempt state:R running task stack:28248 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 420.852285][ C1] Call Trace: [ 420.855554][ C1] [ 420.858481][ C1] __schedule+0xf43/0x5890 [ 420.862893][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 420.868100][ C1] ? __pfx___schedule+0x10/0x10 [ 420.872940][ C1] ? schedule+0x298/0x350 [ 420.877260][ C1] ? __pfx_lock_release+0x10/0x10 [ 420.882295][ C1] ? lock_acquire+0x2f/0xb0 [ 420.886794][ C1] ? schedule+0x1fd/0x350 [ 420.891118][ C1] schedule+0xe7/0x350 [ 420.895178][ C1] schedule_timeout+0x124/0x280 [ 420.900027][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 420.905396][ C1] ? __pfx_process_timeout+0x10/0x10 [ 420.910678][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 420.916475][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 420.921936][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 420.926700][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 420.931982][ C1] ? rcu_gp_init+0xc82/0x1630 [ 420.936659][ C1] ? lock_acquire+0x2f/0xb0 [ 420.941158][ C1] ? finish_swait+0xc5/0x280 [ 420.945747][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 420.951547][ C1] rcu_gp_kthread+0x271/0x380 [ 420.956220][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 420.961416][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 420.966609][ C1] ? __kthread_parkme+0x148/0x220 [ 420.971626][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 420.976821][ C1] kthread+0x3af/0x750 [ 420.980887][ C1] ? __pfx_kthread+0x10/0x10 [ 420.985479][ C1] ? __pfx_kthread+0x10/0x10 [ 420.990065][ C1] ret_from_fork+0x45/0x80 [ 420.994480][ C1] ? __pfx_kthread+0x10/0x10 [ 420.999065][ C1] ret_from_fork_asm+0x1a/0x30 [ 421.003834][ C1] [ 421.006843][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 421.013150][ C1] CPU: 1 UID: 0 PID: 16366 Comm: kworker/u8:15 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 421.024157][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 421.034200][ C1] Workqueue: events_unbound toggle_allocation_gate [ 421.040698][ C1] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 421.047363][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 7c 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 421.066961][ C1] RSP: 0018:ffffc9000c357928 EFLAGS: 00000293 [ 421.073018][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81add08a [ 421.080980][ C1] RDX: ffff888034900000 RSI: ffffffff81add064 RDI: 0000000000000005 [ 421.088940][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 421.096899][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d41 [ 421.104858][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 421.112820][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 421.121740][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.128313][ C1] CR2: 00007ff14af33f98 CR3: 000000000df80000 CR4: 00000000003526f0 [ 421.136278][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 421.144239][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 421.152217][ C1] Call Trace: [ 421.155494][ C1] [ 421.158340][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 421.164675][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 421.169879][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 421.175345][ C1] ? timekeeping_advance+0x72e/0xa90 [ 421.180626][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 421.186258][ C1] ? __asan_memcpy+0x3c/0x60 [ 421.190856][ C1] ? rcu_is_watching+0x12/0xc0 [ 421.195615][ C1] ? update_process_times+0x178/0x2d0 [ 421.200990][ C1] ? __pfx_update_process_times+0x10/0x10 [ 421.206708][ C1] ? update_wall_time+0x1c/0x40 [ 421.211555][ C1] ? tick_nohz_handler+0x376/0x530 [ 421.216666][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 421.222115][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 421.227487][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 421.233196][ C1] ? read_tsc+0x9/0x20 [ 421.237267][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 421.242379][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 421.248530][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 421.254327][ C1] [ 421.257248][ C1] [ 421.260170][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.266329][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 421.272387][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 421.278445][ C1] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 421.284504][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 421.290570][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 421.295588][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 421.300695][ C1] text_poke_bp_batch+0x22b/0x760 [ 421.305715][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 421.310734][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 421.316274][ C1] ? text_poke_queue+0xef/0x180 [ 421.321126][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 421.327366][ C1] text_poke_finish+0x30/0x40 [ 421.332033][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 421.338007][ C1] jump_label_update+0x1d7/0x400 [ 421.342945][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 421.348831][ C1] static_key_enable+0x1a/0x20 [ 421.353591][ C1] toggle_allocation_gate+0xfc/0x260 [ 421.358876][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 421.364759][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 421.369951][ C1] ? process_one_work+0x921/0x1ba0 [ 421.375058][ C1] ? lock_acquire+0x2f/0xb0 [ 421.379556][ C1] ? process_one_work+0x921/0x1ba0 [ 421.384668][ C1] process_one_work+0x9c5/0x1ba0 [ 421.389611][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 421.395242][ C1] ? __pfx_process_one_work+0x10/0x10 [ 421.400617][ C1] ? assign_work+0x1a0/0x250 [ 421.405210][ C1] worker_thread+0x6c8/0xf00 [ 421.409807][ C1] ? __pfx_worker_thread+0x10/0x10 [ 421.414913][ C1] kthread+0x3af/0x750 [ 421.418978][ C1] ? __pfx_kthread+0x10/0x10 [ 421.423560][ C1] ? lock_acquire+0x2f/0xb0 [ 421.428063][ C1] ? __pfx_kthread+0x10/0x10 [ 421.432648][ C1] ret_from_fork+0x45/0x80 [ 421.437060][ C1] ? __pfx_kthread+0x10/0x10 [ 421.441649][ C1] ret_from_fork_asm+0x1a/0x30 [ 421.446419][ C1]