last executing test programs: 1m38.081746122s ago: executing program 3 (id=1284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000001200)={'veth0_to_batadv\x00'}) 1m37.90044174s ago: executing program 3 (id=1288): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1m37.702572146s ago: executing program 3 (id=1291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 1m37.449777529s ago: executing program 3 (id=1300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd2d, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 1m37.392186494s ago: executing program 3 (id=1302): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 1m37.30191325s ago: executing program 3 (id=1305): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000100)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x28, 0xfc01, 0x65, 0x2, 0x15, 0x1, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, "764c0c4712904e37"}}}}}, 0x0) 1m22.257585439s ago: executing program 32 (id=1305): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000100)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x28, 0xfc01, 0x65, 0x2, 0x15, 0x1, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, "764c0c4712904e37"}}}}}, 0x0) 26.44013723s ago: executing program 5 (id=2482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 26.335708595s ago: executing program 5 (id=2487): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8"], 0xd8}}, 0x20008004) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0xfffffff9, 0x4, 0x1}, 0x10) 26.253470499s ago: executing program 5 (id=2490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0x0) getpid() sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="e403", 0x2}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000380)) 26.14336256s ago: executing program 5 (id=2493): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 26.047965966s ago: executing program 5 (id=2495): r0 = mq_open(&(0x7f0000000680)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+\xbb \xcb\be\xf4\x87\xedl\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\xb0\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x9avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3M\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xc1m\x17\b\xe4\xb1b\x13\xc74Z#E\x91\xbe\x93\x0f\xaf\xa7\xf9\"\x02\xb2\x12\xc5A\x1e\xe2\xe1\x13\xfey8\xe1\xa8Zu\xf1\x0f\x1dC)T)Z\xec\x1d_)?\xbab\xda\xec\x81\xf7\x97\x1f\xc5\xa1T\xb9\x9e\xa3\xe1\x901[\xfa_Y\xa2\x1f\x1c\x7f\xf0\x0eW(\xdf\xc2\xc0p\xb2\xe4\xe4\xcd\'\x03\xaf\x8d\x1c_\xde\xa6\x9cV\x98\x06\x1e4R\xa0\xc9\xcfC\xf8\xaf\x14P\x15]\xa9#/w\x0elPo\x9c\x8c$\xb2t\b\x9atA1\xa6y\xd0\x19\x9e\x96\xaa\xb5\t\xe6cR~?\xb4T\xc0\xa1\xb2\x8a\xef\xc2|\x18p\x1f\xb7\xf5\xb5\x11{h\x8e\xab\b\x8e)\xc1\x12N\xea\x1a\x9e\xcf\x1f\xe5\xac\x9d\xb0?\xe1*D\xe3\a\x9b\x1el\xa6\xf2.VA\xc5\xef\x8a\xf2R\xd0\x9cu\xdat.U\x8c\xc1m\x14S\x8c%ll\x01\x82\xcc\x88a,n\xf9\xd0F\\', 0x42, 0xa8, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10}) r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) 25.810532718s ago: executing program 5 (id=2501): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 25.61988539s ago: executing program 33 (id=2501): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3.635396486s ago: executing program 1 (id=2846): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) open(&(0x7f0000000000)='.\x00', 0x624502, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0x4}) 3.30976776s ago: executing program 1 (id=2853): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x70, &(0x7f0000000cc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x3, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "a720"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8005, 0x81, 0x66}, {0x6, 0x24, 0x1a, 0x4ab, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xfe, 0x6, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x80, 0xfa, 0x18}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xcd, 0x9b, 0x2}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000680)={0x14, 0x0, 0x0}, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x0, 0x238ef22224d80c8f, 0x5, "c593d7f3cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.057766719s ago: executing program 0 (id=2859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 2.922940503s ago: executing program 0 (id=2862): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.825620529s ago: executing program 0 (id=2865): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2.754644708s ago: executing program 0 (id=2866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.629839978s ago: executing program 0 (id=2868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x68, 0x0, 0xff, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}}, {0x13, 0x1, 0x0, @local}}}, 0x2a) 2.540290908s ago: executing program 0 (id=2871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 2.082754881s ago: executing program 4 (id=2883): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) 1.933768737s ago: executing program 4 (id=2887): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x70, 0x20}, &(0x7f00000000c0)=0xc) 1.673366473s ago: executing program 1 (id=2893): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x18, 0xa, 0x2) getsockname$packet(r1, 0x0, &(0x7f0000000200)) 1.573802697s ago: executing program 6 (id=2895): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000500000008020000d900000000", @ANYRES32], 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16b, @time={0x6fd, 0x7}, 0x0, {0x0, 0xff}, 0x0, 0x0, 0x2}) 1.542069278s ago: executing program 1 (id=2896): r0 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x1e76, 0xf728, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f", 0x18) 1.39012766s ago: executing program 6 (id=2898): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x8) dup3(r1, r0, 0x80000) finit_module(r1, 0x0, 0x0) 1.214037497s ago: executing program 1 (id=2901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010700, 0x0) 1.213869664s ago: executing program 6 (id=2902): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.15610953s ago: executing program 1 (id=2904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1, 0x20, 0x66, 0x0, 0x2, 0x11, 0x0, @rand_addr=0x64010100, @multicast1}, {0x4e20, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x5, 0x0, @void}}}}}, 0x2e) 1.099338437s ago: executing program 6 (id=2905): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) 1.035096299s ago: executing program 4 (id=2907): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) symlinkat(&(0x7f00000004c0)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)={0x90400, 0x0, 0x10}, 0x18) 766.407655ms ago: executing program 6 (id=2908): r0 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 720.19841ms ago: executing program 4 (id=2909): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x29}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) 589.591394ms ago: executing program 4 (id=2912): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 588.90643ms ago: executing program 6 (id=2913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ppoll(&(0x7f0000000400)=[{r0, 0x9008}], 0x1, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) 364.839648ms ago: executing program 4 (id=2916): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 225.951339ms ago: executing program 2 (id=2918): bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf250220"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 174.514979ms ago: executing program 2 (id=2919): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000840)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000001800)=""/200, 0xc8}], 0x1}) io_uring_enter(r1, 0x47ba, 0x636d, 0x0, 0x0, 0x0) 120.208297ms ago: executing program 2 (id=2920): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = inotify_init() dup3(r1, r0, 0x80000) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x641, 0x8000026, r0, 0x0) 53.537822ms ago: executing program 2 (id=2921): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2c, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 52.71747ms ago: executing program 2 (id=2922): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x400}, 0x10) 0s ago: executing program 2 (id=2923): socket(0x200000000000011, 0x4000000000080002, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fchdir(r0) exit(0x0) getcwd(0x0, 0x0) kernel console output (not intermixed with test programs): ed to /dev/usb/adutux1 [ 166.693860][ T974] usb 1-1: USB disconnect, device number 18 [ 166.883790][ T5866] usb 5-1: USB disconnect, device number 22 [ 166.897445][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.935732][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.942596][ T30] audit: type=1400 audit(1764582412.735:473): avc: denied { lock } for pid=9314 comm="syz.1.1519" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 166.970388][ T1100] bond0 (unregistering): Released all slaves [ 167.147343][ T1100] bond1 (unregistering): Released all slaves [ 167.170689][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.188550][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.216326][ T9268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.283763][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.291726][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.318194][ T9268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.418260][ T5819] Bluetooth: hci3: command tx timeout [ 167.477925][ T9268] hsr_slave_0: entered promiscuous mode [ 167.523092][ T9268] hsr_slave_1: entered promiscuous mode [ 167.533209][ T9268] debugfs: 'hsr0' already exists in 'hsr' [ 167.542887][ T9268] Cannot create hsr debugfs directory [ 167.791882][ T1100] hsr_slave_0: left promiscuous mode [ 167.809704][ T1100] hsr_slave_1: left promiscuous mode [ 167.822151][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.833865][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.863424][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.879517][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.932928][ T1100] veth1_macvtap: left promiscuous mode [ 167.949143][ T1100] veth0_macvtap: left promiscuous mode [ 167.961691][ T1100] veth1_vlan: left promiscuous mode [ 167.975653][ T1100] veth0_vlan: left promiscuous mode [ 168.474815][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 168.510437][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 168.626038][ T9364] netlink: 'syz.4.1538': attribute type 2 has an invalid length. [ 168.783699][ T9359] wireguard0: entered promiscuous mode [ 168.789226][ T9359] wireguard0: entered allmulticast mode [ 168.802066][ T9364] !: entered promiscuous mode [ 168.982983][ T9268] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.010038][ T9268] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.021945][ T9268] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.051183][ T9268] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.234253][ T5926] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 169.250561][ T9268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.289190][ T9268] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.301525][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.308680][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.326431][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.333640][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.407661][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 169.419931][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.441913][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.458347][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 169.473303][ T5926] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 169.489271][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.498657][ T5819] Bluetooth: hci3: command tx timeout [ 169.510810][ T5926] usb 5-1: config 0 descriptor?? [ 169.641524][ T9268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.963898][ T5926] cherry 0003:046A:0027.0019: fixing up Cherry Cymotion report descriptor [ 170.000848][ T5926] cherry 0003:046A:0027.0019: unknown main item tag 0x2 [ 170.024767][ T5926] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 170.031753][ T5926] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 170.057614][ T5926] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 170.067062][ T5926] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 170.076106][ T5926] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 170.092771][ T5926] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 170.099357][ T9268] veth0_vlan: entered promiscuous mode [ 170.113809][ T5926] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 170.134525][ T5926] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 170.145425][ T9268] veth1_vlan: entered promiscuous mode [ 170.150717][ T5926] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 170.171180][ T5926] cherry 0003:046A:0027.0019: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.4-1/input0 [ 170.215076][ T5926] usb 5-1: USB disconnect, device number 23 [ 170.230331][ T9268] veth0_macvtap: entered promiscuous mode [ 170.255752][ T9268] veth1_macvtap: entered promiscuous mode [ 170.305364][ T9268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.334644][ T9426] fido_id[9426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 170.336654][ T9268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.419673][ T1100] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.438850][ T1100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.465741][ T1100] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.483490][ T1100] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.632726][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.656091][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.727344][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 170.738837][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.752088][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.906663][ T30] audit: type=1400 audit(1764582416.705:474): avc: denied { execute } for pid=9448 comm="syz.0.1569" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 171.283530][ T5926] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.292725][ T5866] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 171.464296][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 171.474680][ T5866] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 171.494745][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.501325][ T5866] usb 1-1: config 1 has no interface number 0 [ 171.515806][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.525792][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.548357][ T5926] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.549959][ T5866] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 171.573044][ T5819] Bluetooth: hci3: command tx timeout [ 171.578964][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.609538][ T5866] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 171.615222][ T5926] usb 6-1: config 0 descriptor?? [ 171.664769][ T5866] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.701876][ T5866] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 171.712059][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.726379][ T5866] usb 1-1: Product: syz [ 171.731010][ T5866] usb 1-1: Manufacturer: syz [ 171.738548][ T5866] usb 1-1: SerialNumber: syz [ 171.751876][ T9461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 171.991637][ T9461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.056776][ T5926] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 172.096455][ T5926] microsoft 0003:045E:07DA.001A: no inputs found [ 172.126749][ T5926] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 172.137342][ T97] block nbd0: Possible stuck request ffff888026237000: control (read@0,1024B). Runtime 90 seconds [ 172.150286][ T97] block nbd0: Possible stuck request ffff8880262371c0: control (read@1024,1024B). Runtime 90 seconds [ 172.161694][ T974] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 172.169526][ T97] block nbd0: Possible stuck request ffff888026237380: control (read@2048,1024B). Runtime 90 seconds [ 172.182266][ T97] block nbd0: Possible stuck request ffff888026237540: control (read@3072,1024B). Runtime 90 seconds [ 172.248181][ T5866] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 172.354454][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 172.386427][ T24] usb 6-1: USB disconnect, device number 2 [ 172.394732][ T974] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 172.407605][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.439144][ T974] pvrusb2: Hardware description: Terratec Grabster AV400 [ 172.460025][ T974] pvrusb2: ********** [ 172.468602][ T974] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 172.491212][ T974] pvrusb2: Important functionality might not be entirely working. [ 172.499691][ T974] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 172.518266][ T974] pvrusb2: ********** [ 172.623232][ T5866] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 172.629874][ T5866] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 172.646629][ T2338] pvrusb2: Invalid write control endpoint [ 172.656291][ T5866] usb 1-1: USB disconnect, device number 19 [ 172.667171][ T5866] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 172.703188][ T2338] pvrusb2: Invalid write control endpoint [ 172.709647][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 172.719666][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 172.727566][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 172.737645][ T2338] pvrusb2: Device being rendered inoperable [ 172.749297][ T5866] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 172.758479][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 172.765687][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 172.774355][ T2338] pvrusb2: Attached sub-driver cx25840 [ 172.780756][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 172.791374][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 172.854676][ T9485] pvrusb2: Killing an I2C write to 1 that is too large (desired=126 limit=61) [ 172.865192][ T24] usb 2-1: USB disconnect, device number 23 [ 173.162554][ T974] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 173.258567][ T30] audit: type=1326 audit(1764582419.055:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 173.322267][ T30] audit: type=1326 audit(1764582419.055:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 173.324410][ T974] usb 6-1: Using ep0 maxpacket: 16 [ 173.367212][ T30] audit: type=1326 audit(1764582419.085:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 173.393764][ T30] audit: type=1326 audit(1764582419.085:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 173.412817][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 173.417199][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.433566][ T30] audit: type=1326 audit(1764582419.085:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 173.456841][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.463621][ T30] audit: type=1326 audit(1764582419.085:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 173.486996][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.506853][ T974] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 173.530006][ T9525] ptrace attach of "./syz-executor exec"[5806] was attempted by "./syz-executor exec"[9525] [ 173.532952][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.541973][ T30] audit: type=1326 audit(1764582419.085:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 173.571557][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.581041][ T30] audit: type=1326 audit(1764582419.085:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 173.604344][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.606804][ T974] usb 6-1: Product: syz [ 173.617297][ T974] usb 6-1: Manufacturer: syz [ 173.619204][ T30] audit: type=1326 audit(1764582419.085:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 173.627532][ T974] usb 6-1: SerialNumber: syz [ 173.657113][ T5819] Bluetooth: hci3: command tx timeout [ 173.719091][ T974] usb 6-1: config 0 descriptor?? [ 173.749872][ T974] hub 6-1:0.0: bad descriptor, ignoring hub [ 173.791752][ T974] hub 6-1:0.0: probe with driver hub failed with error -5 [ 173.815830][ T974] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input29 [ 174.089560][ T9553] input: syz1 as /devices/virtual/input/input30 [ 174.272839][ T5828] usb 6-1: USB disconnect, device number 3 [ 174.354944][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 174.497424][ T9575] syzkaller1: entered promiscuous mode [ 174.503265][ T9575] syzkaller1: entered allmulticast mode [ 174.513023][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 174.524025][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 174.541966][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.587724][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 174.596630][ T24] pvrusb2: ********** [ 174.600661][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 174.613707][ T24] pvrusb2: Important functionality might not be entirely working. [ 174.621583][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 174.643174][ T24] pvrusb2: ********** [ 174.795265][ T2338] pvrusb2: Invalid write control endpoint [ 174.859365][ T2338] pvrusb2: Invalid write control endpoint [ 174.873891][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 174.884970][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 174.892971][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 174.903088][ T2338] pvrusb2: Device being rendered inoperable [ 174.909018][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 174.916266][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 174.936623][ T2338] pvrusb2: Attached sub-driver cx25840 [ 174.942104][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 174.963563][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 175.021894][ T9555] pvrusb2: Attempted to execute control transfer when device not ok [ 175.039282][ T974] usb 1-1: USB disconnect, device number 20 [ 175.072537][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 175.222682][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 175.229672][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 175.239420][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.255571][ T24] usb 5-1: config 0 descriptor?? [ 175.262565][ T5866] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 175.437465][ T5866] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 175.459144][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.468208][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 175.477545][ T5866] usb 6-1: config 0 descriptor?? [ 175.491842][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.516936][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 175.525621][ T24] usb 5-1: media controller created [ 175.548834][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.679292][ T24] az6027: usb out operation failed. (-71) [ 175.690947][ T24] az6027: usb out operation failed. (-71) [ 175.707206][ T24] stb0899_attach: Driver disabled by Kconfig [ 175.723779][ T5866] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 175.731228][ T24] az6027: no front-end attached [ 175.731228][ T24] [ 175.762578][ T24] az6027: usb out operation failed. (-71) [ 175.772541][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 175.795986][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 175.825461][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 175.842625][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 175.873888][ T24] usb 5-1: USB disconnect, device number 24 [ 175.924588][ T5866] [drm:udl_init] *ERROR* Selecting channel failed [ 175.940104][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 175.960686][ T5866] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 175.980077][ T5866] [drm] Initialized udl on minor 2 [ 176.000439][ T5866] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 176.019605][ T5866] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 176.075816][ T5880] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 176.090538][ T5866] usb 6-1: USB disconnect, device number 4 [ 176.097461][ T5880] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 176.171394][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 176.171408][ T30] audit: type=1400 audit(1764582421.965:486): avc: denied { append } for pid=9658 comm="syz.0.1665" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 176.200592][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.294112][ T9667] 9pnet_fd: Insufficient options for proto=fd [ 176.345682][ T9669] input: syz0 as /devices/virtual/input/input32 [ 176.382874][ T5880] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 176.384664][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.398097][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.489708][ T9666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.518865][ T9666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.542789][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 176.550455][ T5880] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 176.562247][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.598835][ T5880] pvrusb2: Hardware description: Terratec Grabster AV400 [ 176.610616][ T5880] pvrusb2: ********** [ 176.617655][ T30] audit: type=1400 audit(1764582422.425:487): avc: denied { create } for pid=9679 comm="syz.5.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 176.621514][ T5880] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 176.673394][ T5880] pvrusb2: Important functionality might not be entirely working. [ 176.681491][ T5880] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 176.701387][ T9685] 9pnet_fd: Insufficient options for proto=fd [ 176.705764][ T5880] pvrusb2: ********** [ 176.748917][ T9670] geneve2: entered promiscuous mode [ 176.762775][ T1100] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.783628][ T1100] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 176.803113][ T1100] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.825623][ T2338] pvrusb2: Invalid write control endpoint [ 176.842309][ T1100] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 176.899501][ T1100] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.927329][ T1100] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 176.945866][ T2338] pvrusb2: Invalid write control endpoint [ 176.957117][ T9695] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1679'. [ 176.965422][ T1100] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.972511][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 176.987230][ T1100] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 177.015709][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 177.032827][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 177.068626][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 177.077522][ T2338] pvrusb2: Device being rendered inoperable [ 177.077584][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 177.130211][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 177.150620][ T2338] pvrusb2: Attached sub-driver cx25840 [ 177.162713][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 177.175890][ T9657] pvrusb2: Attempted to execute control transfer when device not ok [ 177.185616][ T24] usb 2-1: USB disconnect, device number 24 [ 177.200922][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 177.438023][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.445563][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.505996][ T9716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.518856][ T9716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.589219][ T9718] tipc: Started in network mode [ 177.595625][ T9718] tipc: Node identity ac14142f, cluster identity 4711 [ 177.606960][ T9718] tipc: New replicast peer: 0.0.0.0 [ 177.614300][ T9718] tipc: Enabled bearer , priority 10 [ 177.625634][ T9721] geneve2: entered promiscuous mode [ 177.632057][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.641435][ T36] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 177.650693][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.670595][ T36] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 177.681761][ T9722] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 177.702613][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.711947][ T36] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 177.740115][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.751605][ T36] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 178.052429][ T30] audit: type=1400 audit(1764582423.845:488): avc: denied { write } for pid=9745 comm="syz.1.1705" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 178.333145][ T30] audit: type=1400 audit(1764582424.125:489): avc: denied { read } for pid=9758 comm="syz.4.1711" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 178.724536][ T24] tipc: Node number set to 2886997039 [ 179.331438][ T30] audit: type=1326 audit(1764582425.125:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 179.358770][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 179.387294][ T30] audit: type=1326 audit(1764582425.125:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 179.439032][ T30] audit: type=1326 audit(1764582425.125:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 179.503514][ T30] audit: type=1326 audit(1764582425.125:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 179.530965][ T30] audit: type=1326 audit(1764582425.125:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 179.556071][ T30] audit: type=1326 audit(1764582425.125:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 179.579655][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 179.587905][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.596352][ T24] usb 1-1: config 0 has no interface number 0 [ 179.611867][ T24] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 179.621263][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.630273][ T24] usb 1-1: Product: syz [ 179.637707][ T24] usb 1-1: Manufacturer: syz [ 179.656685][ T24] usb 1-1: SerialNumber: syz [ 179.676164][ T24] usb 1-1: config 0 descriptor?? [ 179.703788][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 179.728018][ T1554] libceph: connect (1)[c::]:6789 error -101 [ 179.735154][ T1554] libceph: mon0 (1)[c::]:6789 connect error [ 179.742298][ T1554] libceph: connect (1)[c::]:6789 error -101 [ 179.752718][ T1554] libceph: mon0 (1)[c::]:6789 connect error [ 179.761248][ T9828] ceph: No mds server is up or the cluster is laggy [ 180.103374][ T5880] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 180.263903][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 180.287673][ T5880] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 180.312334][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.329058][ T5880] usb 6-1: Product: syz [ 180.334697][ T5880] usb 6-1: Manufacturer: syz [ 180.339334][ T5880] usb 6-1: SerialNumber: syz [ 180.350363][ T5880] usb 6-1: config 0 descriptor?? [ 180.358350][ T5880] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 180.375938][ T5880] usb 6-1: Detected FT-X [ 180.502179][ T24] gspca_spca1528: reg_w err -71 [ 180.523380][ T24] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 180.537361][ T24] usb 1-1: USB disconnect, device number 21 [ 180.563149][ T5880] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 180.665080][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 180.676508][ T9893] chnl_net:caif_netlink_parms(): no params data found [ 180.986575][ T5880] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 181.062570][ T1554] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 181.187522][ T5926] usb 6-1: USB disconnect, device number 5 [ 181.204194][ T5926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 181.229935][ T5926] ftdi_sio 6-1:0.0: device disconnected [ 181.233712][ C1] hrtimer: interrupt took 18058 ns [ 181.235658][ T1554] usb 2-1: Using ep0 maxpacket: 32 [ 181.257623][ T1554] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 181.270207][ T1554] usb 2-1: config 0 has no interface number 0 [ 181.278924][ T1554] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 181.295282][ T1554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.310879][ T1554] usb 2-1: Product: syz [ 181.315203][ T1554] usb 2-1: Manufacturer: syz [ 181.319825][ T1554] usb 2-1: SerialNumber: syz [ 181.340858][ T1554] usb 2-1: config 0 descriptor?? [ 181.368335][ T1554] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 181.386646][ T5819] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 181.584698][ T1554] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 181.600391][ T1554] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 181.691876][ T9932] fuse: Bad value for 'fd' [ 182.003911][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 182.004770][ T24] usb 2-1: USB disconnect, device number 25 [ 182.037165][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 182.085833][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 182.110180][ T24] quatech2 2-1:0.51: device disconnected [ 182.312604][ T1554] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 182.475813][ T1554] usb 6-1: Using ep0 maxpacket: 32 [ 182.508620][ T1554] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 182.520110][ T1554] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.572779][ T1554] usb 6-1: config 0 has no interface number 0 [ 182.578910][ T1554] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.647516][ T1554] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 182.662752][ T1554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.692565][ T1554] usb 6-1: Product: syz [ 182.696745][ T1554] usb 6-1: Manufacturer: syz [ 182.701355][ T1554] usb 6-1: SerialNumber: syz [ 182.723848][ T1554] usb 6-1: config 0 descriptor?? [ 182.731847][ T1554] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 182.764051][ T1554] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 182.785359][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 182.785375][ T30] audit: type=1400 audit(1764582428.585:506): avc: denied { map } for pid=9981 comm="syz.0.1811" path="socket:[29002]" dev="sockfs" ino=29002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 182.935834][ T1554] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 183.153939][ T1554] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 183.182343][ T1554] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 183.196059][ T1554] usb 6-1: USB disconnect, device number 6 [ 183.244225][ T1554] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 183.376736][ T30] audit: type=1326 audit(1764582429.175:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10010 comm="syz.1.1821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0e1d8f749 code=0x0 [ 183.528716][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.536433][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.661938][T10013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.701345][T10013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.162955][ T1100] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.172093][ T1100] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.229583][ T1100] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.247971][ T1100] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.762801][ T5880] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 185.773062][T10104] syzkaller1: entered promiscuous mode [ 185.778542][T10104] syzkaller1: entered allmulticast mode [ 185.954636][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.971576][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.987709][ T5880] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.000637][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.052583][ T5880] usb 2-1: SerialNumber: syz [ 186.269307][ T5880] usb 2-1: 0:2 : does not exist [ 186.302711][ T5880] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 186.341777][ T5880] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 186.365882][ T5880] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.398596][ T5880] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.438776][ T5880] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.463024][ T5880] usb 2-1: USB disconnect, device number 26 [ 186.526929][ T8849] udevd[8849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.560137][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 186.569398][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 186.608444][T10141] ceph: No mds server is up or the cluster is laggy [ 186.828858][T10159] pim6reg1: entered allmulticast mode [ 187.142537][ T5880] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 187.266649][T10176] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 187.317594][ T5880] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 187.338390][ T5880] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 187.370357][ T5880] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 187.392549][ T5880] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 187.422864][ T5880] usb 2-1: config 168 interface 0 has no altsetting 0 [ 187.443062][T10182] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1895'. [ 187.456322][ T5880] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 187.472554][ T5880] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 187.502571][ T5880] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 187.518528][ T5880] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 187.534187][ T5880] usb 2-1: config 168 interface 0 has no altsetting 0 [ 187.543817][ T5880] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 187.556223][ T5880] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 187.590856][ T5880] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 187.612593][ T5880] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 187.632542][ T5880] usb 2-1: config 168 interface 0 has no altsetting 0 [ 187.644076][ T5880] usb 2-1: string descriptor 0 read error: -22 [ 187.650513][ T5880] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 187.659912][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.689409][ T5880] adutux 2-1:168.0: interrupt endpoints not found [ 187.955458][ T5880] usb 2-1: USB disconnect, device number 27 [ 188.262686][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 188.318464][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 188.537887][ T30] audit: type=1400 audit(1764582434.335:508): avc: denied { read } for pid=10222 comm="syz.4.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.871812][ T30] audit: type=1400 audit(1764582434.665:509): avc: denied { bind } for pid=10237 comm="syz.0.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.963398][T10242] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1920'. [ 189.012404][T10242] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1920'. [ 189.232532][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 189.420588][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 189.430988][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.440888][ T24] usb 1-1: Product: syz [ 189.446195][ T24] usb 1-1: Manufacturer: syz [ 189.455892][ T24] usb 1-1: SerialNumber: syz [ 189.567499][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1933'. [ 189.582042][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1933'. [ 189.675522][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 189.685069][T10276] sctp: [Deprecated]: syz.2.1935 (pid 10276) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.685069][T10276] Use struct sctp_sack_info instead [ 189.710569][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 189.734338][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 189.785540][ T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 189.827415][ T24] usb 1-1: USB disconnect, device number 22 [ 189.919131][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1942'. [ 190.016067][ T30] audit: type=1326 audit(1764582435.815:510): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.5.1944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fbc38f749 code=0x0 [ 190.047944][T10297] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.1945'. [ 190.081555][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.148656][T10303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.388232][ T30] audit: type=1400 audit(1764582436.185:511): avc: denied { ioctl } for pid=10312 comm="syz.1.1953" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 190.412950][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.632635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 190.666995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 190.714626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 190.782823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 190.795059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 190.804280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 190.828427][T10323] syzkaller1: entered promiscuous mode [ 190.840507][T10323] syzkaller1: entered allmulticast mode [ 190.868473][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 191.039434][T10334] netlink: 'syz.5.1961': attribute type 11 has an invalid length. [ 191.889414][T10362] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1971'. [ 192.162533][ T30] audit: type=1400 audit(1764582437.945:512): avc: denied { write } for pid=10370 comm="syz.4.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.337242][ T30] audit: type=1400 audit(1764582438.135:513): avc: denied { ioctl } for pid=10379 comm="syz.0.1979" path="socket:[30139]" dev="sockfs" ino=30139 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.382760][T10375] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 192.408217][ T974] IPVS: starting estimator thread 0... [ 192.486358][ T30] audit: type=1400 audit(1764582438.285:514): avc: denied { append } for pid=10387 comm="syz.4.1981" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 192.502812][T10383] IPVS: using max 45 ests per chain, 108000 per kthread [ 192.778919][ T30] audit: type=1400 audit(1764582438.565:515): avc: denied { watch_mount } for pid=10404 comm="syz.4.1989" path="/424" dev="tmpfs" ino=2174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 192.836715][T10411] __nla_validate_parse: 1 callbacks suppressed [ 192.836731][T10411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1991'. [ 192.948567][T10414] netlink: 'syz.4.1992': attribute type 10 has an invalid length. [ 192.995040][T10414] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 193.034092][T10413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.525238][ T30] audit: type=1400 audit(1764582439.315:516): avc: denied { connect } for pid=10445 comm="syz.0.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 193.544800][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.912939][ T1554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.913209][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.928154][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.938041][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.948345][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.958116][ T1554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.001859][T10475] sp0: Synchronizing with TNC [ 194.292034][ T30] audit: type=1400 audit(1764582440.085:517): avc: denied { bind } for pid=10493 comm="syz.0.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.311385][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.320577][ T30] audit: type=1400 audit(1764582440.115:518): avc: denied { name_bind } for pid=10493 comm="syz.0.2029" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 194.343571][ T30] audit: type=1400 audit(1764582440.115:519): avc: denied { node_bind } for pid=10493 comm="syz.0.2029" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 194.653451][ T30] audit: type=1326 audit(1764582440.445:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.0.2037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa34418f749 code=0x0 [ 194.706583][ T30] audit: type=1326 audit(1764582440.505:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.0.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34418f749 code=0x7ffc0000 [ 194.729978][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.765967][ T30] audit: type=1326 audit(1764582440.505:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.0.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34418f749 code=0x7ffc0000 [ 194.791572][ T30] audit: type=1326 audit(1764582440.505:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.0.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3441c2005 code=0x7ffc0000 [ 194.827571][ T30] audit: type=1326 audit(1764582440.545:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.0.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3441c2005 code=0x7ffc0000 [ 194.859322][ T30] audit: type=1326 audit(1764582440.545:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.0.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3441c2005 code=0x7ffc0000 [ 194.884831][ T30] audit: type=1326 audit(1764582440.545:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.0.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3441c2005 code=0x7ffc0000 [ 195.279302][ T5182] udevd[5182]: worker [8849] terminated by signal 33 (Unknown signal 33) [ 195.288100][ T5182] udevd[5182]: worker [8849] failed while handling '/devices/virtual/block/loop5' [ 195.492798][ T1100] wlan1: Trigger new scan to find an IBSS to join [ 195.592569][ T1554] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 195.632534][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 195.762534][ T1554] usb 6-1: Using ep0 maxpacket: 8 [ 195.775729][ T1554] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 195.792741][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 195.794198][ T1554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.803504][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.818055][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.828922][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.832483][ T1554] usb 6-1: Product: syz [ 195.839449][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.857005][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.864768][ T1554] usb 6-1: Manufacturer: syz [ 195.870628][ T1554] usb 6-1: SerialNumber: syz [ 195.876014][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.920899][ T1554] usb 6-1: config 0 descriptor?? [ 195.934002][ T1554] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 195.948902][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 196.099643][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 196.105641][ T24] usbtmc 5-1:16.0: can't read capabilities [ 196.272708][ T974] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 196.292701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.308836][ T24] usb 5-1: USB disconnect, device number 25 [ 196.398011][T10590] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 196.432494][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 196.446702][ T974] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 196.457248][ T974] usb 1-1: config 0 has no interface number 0 [ 196.465789][ T974] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 196.502546][ T974] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 196.515571][ T974] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 196.526841][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.536081][ T974] usb 1-1: Product: syz [ 196.540332][ T974] usb 1-1: Manufacturer: syz [ 196.546346][ T974] usb 1-1: SerialNumber: syz [ 196.561577][ T974] usb 1-1: config 0 descriptor?? [ 196.568193][T10572] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 196.575934][T10572] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 196.578176][T10600] tipc: Started in network mode [ 196.588423][T10600] tipc: Node identity 7f000001, cluster identity 4711 [ 196.596388][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.605333][T10600] tipc: Enabled bearer , priority 10 [ 196.622813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.732970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.794943][T10572] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 196.802255][T10572] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 196.872623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.947603][ T1554] usb 6-1: USB disconnect, device number 7 [ 197.012822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.052632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.152585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.239935][T10616] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2084'. [ 197.282097][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'. [ 197.291229][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'. [ 197.302610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.415162][ T974] asix 1-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x20 [ 197.452576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.593949][ T1554] tipc: Node number set to 2130706433 [ 197.666272][T10633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2091'. [ 197.682528][ T1554] usb 1-1: USB disconnect, device number 23 [ 197.966315][T10652] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2100'. [ 198.046007][T10656] syzkaller1: entered promiscuous mode [ 198.051621][T10656] syzkaller1: entered allmulticast mode [ 198.453483][ T1100] wlan1: Trigger new scan to find an IBSS to join [ 198.627206][T10678] input: syz1 as /devices/virtual/input/input33 [ 198.658466][T10678] input: failed to attach handler leds to device input33, error: -6 [ 198.873921][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2118'. [ 199.422535][ T1554] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 199.610926][ T1554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.626282][ T1554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.639561][ T1554] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.653751][ T1554] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.663052][ T1554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.671133][ T30] kauditd_printk_skb: 548 callbacks suppressed [ 199.671150][ T30] audit: type=1400 audit(1764582445.465:1075): avc: denied { create } for pid=10736 comm="syz.0.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.697624][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.736826][ T1554] usb 2-1: config 0 descriptor?? [ 199.763259][ T30] audit: type=1400 audit(1764582445.475:1076): avc: denied { setopt } for pid=10736 comm="syz.0.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.794502][ T30] audit: type=1400 audit(1764582445.475:1077): avc: denied { write } for pid=10736 comm="syz.0.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.814688][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.822273][ T30] audit: type=1400 audit(1764582445.475:1078): avc: denied { nlmsg_write } for pid=10736 comm="syz.0.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.074936][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2146'. [ 200.086827][ T30] audit: type=1400 audit(1764582445.885:1079): avc: denied { read } for pid=10748 comm="syz.2.2145" path="socket:[32006]" dev="sockfs" ino=32006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.172241][ T1554] plantronics 0003:047F:FFFF.001B: reserved main item tag 0xe [ 200.184339][ T1554] hid_parser_main: 43 callbacks suppressed [ 200.184361][ T1554] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 200.223094][ T1554] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 200.324721][ T974] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 200.445710][ T24] usb 2-1: USB disconnect, device number 28 [ 200.485789][ T974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.497430][ T974] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 200.509200][ T974] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.518277][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.526416][ T974] usb 5-1: Product: syz [ 200.530574][ T974] usb 5-1: Manufacturer: syz [ 200.535390][ T974] usb 5-1: SerialNumber: syz [ 200.544317][ T974] cdc_mbim 5-1:1.0: skipping garbage [ 200.661852][T10767] overlayfs: invalid origin (000000ca387fe0fb3738702bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f0000000000000000) [ 200.756107][T10754] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.306215][T10798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2167'. [ 201.376891][T10754] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.387419][ T974] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 201.402705][ T974] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 201.590073][ T974] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 201.615932][ T974] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 201.648469][ T974] wwan wwan0: port wwan0mbim0 attached [ 201.662579][ C0] net_ratelimit: 9 callbacks suppressed [ 201.662597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.665993][ T974] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 52:70:ee:be:a6:16 [ 201.694828][ T974] usb 5-1: USB disconnect, device number 26 [ 201.703469][ T974] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 201.805787][ T974] wwan wwan0: port wwan0mbim0 disconnected [ 202.150374][ T30] audit: type=1400 audit(1764582447.935:1080): avc: denied { accept } for pid=10815 comm="syz.0.2174" path="socket:[32135]" dev="sockfs" ino=32135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.222560][ T97] block nbd0: Possible stuck request ffff888026237000: control (read@0,1024B). Runtime 120 seconds [ 202.233339][ T97] block nbd0: Possible stuck request ffff8880262371c0: control (read@1024,1024B). Runtime 120 seconds [ 202.244403][ T97] block nbd0: Possible stuck request ffff888026237380: control (read@2048,1024B). Runtime 120 seconds [ 202.255499][ T97] block nbd0: Possible stuck request ffff888026237540: control (read@3072,1024B). Runtime 120 seconds [ 202.702582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.871044][T10846] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.015970][T10853] loop5: detected capacity change from 0 to 2647 [ 203.072639][ T974] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 203.105514][T10853] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 203.237798][ T8850] buffer_io_error: 39 callbacks suppressed [ 203.237814][ T8850] Buffer I/O error on dev loop5, logical block 330, async page read [ 203.252251][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 203.294885][ T974] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 203.338346][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.379728][ T974] usb 2-1: config 0 descriptor?? [ 203.421019][ T8850] Buffer I/O error on dev loop5, logical block 330, async page read [ 203.511513][ T5182] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 203.646371][ T8850] Buffer I/O error on dev loop5, logical block 330, async page read [ 203.682847][ T974] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 203.722780][ T974] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.732641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.767075][ T974] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 203.797280][ T8850] Buffer I/O error on dev loop5, logical block 330, async page read [ 203.805498][ T974] usb 2-1: media controller created [ 203.860227][ T974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.917109][ T8850] Buffer I/O error on dev loop5, logical block 330, async page read [ 203.942050][ T974] az6027: usb out operation failed. (-71) [ 203.955344][ T974] az6027: usb out operation failed. (-71) [ 203.976516][ T974] stb0899_attach: Driver disabled by Kconfig [ 203.998300][ T974] az6027: no front-end attached [ 203.998300][ T974] [ 204.024187][ T974] az6027: usb out operation failed. (-71) [ 204.032586][ T5880] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 204.046684][ T974] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 204.056290][ T974] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 204.070055][ T974] dvb-usb: schedule remote query interval to 400 msecs. [ 204.086871][ T974] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 204.117752][ T974] usb 2-1: USB disconnect, device number 29 [ 204.133356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.148181][T10874] syzkaller1: entered promiscuous mode [ 204.183331][T10874] syzkaller1: entered allmulticast mode [ 204.193191][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 204.204649][ T974] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 204.226785][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.254347][ T5880] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 204.271452][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.283512][ T5880] usb 6-1: Product: syz [ 204.287694][ T5880] usb 6-1: Manufacturer: syz [ 204.292296][ T5880] usb 6-1: SerialNumber: syz [ 204.316829][ T5880] usb 6-1: config 0 descriptor?? [ 204.738876][ T5880] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 204.772693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.988103][ T30] audit: type=1326 audit(1764582450.785:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.1.2212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x0 [ 205.358970][ T5880] usb 6-1: USB disconnect, device number 8 [ 205.393131][ T30] audit: type=1400 audit(1764582451.195:1082): avc: denied { mounton } for pid=10923 comm="syz.4.2223" path="/462/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 205.447842][T10924] ./file0: Can't open blockdev [ 205.812599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.197004][ T30] audit: type=1400 audit(1764582451.995:1083): avc: denied { mount } for pid=10946 comm="syz.5.2232" name="/" dev="hugetlbfs" ino=32394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 206.310096][ T30] audit: type=1400 audit(1764582452.095:1084): avc: denied { unmount } for pid=9268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 206.330365][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.644017][ T974] hid-generic 0005:00FF:5508.001C: unknown main item tag 0x0 [ 206.703091][ T974] hid-generic 0005:00FF:5508.001C: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 206.830425][T10973] netlink: 'syz.2.2244': attribute type 29 has an invalid length. [ 206.840194][T10966] fido_id[10966]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 206.852610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.858438][T10973] netlink: 'syz.2.2244': attribute type 29 has an invalid length. [ 206.876126][T10974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2241'. [ 206.920088][T10973] netlink: 508 bytes leftover after parsing attributes in process `syz.2.2244'. [ 207.497070][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2256'. [ 207.537230][ T5819] block nbd1: Receive control failed (result -107) [ 207.591727][ T1554] IPVS: starting estimator thread 0... [ 207.692528][T11006] IPVS: using max 46 ests per chain, 110400 per kthread [ 207.743813][ T30] audit: type=1326 audit(1764582453.545:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11010 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 207.767295][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.812418][ T30] audit: type=1326 audit(1764582453.575:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11010 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 207.889126][ T30] audit: type=1326 audit(1764582453.575:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11010 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 207.893141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.998098][ T30] audit: type=1326 audit(1764582453.575:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11010 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 208.048586][ T30] audit: type=1326 audit(1764582453.575:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11010 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 208.052194][T11030] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2269'. [ 208.089494][T11030] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2269'. [ 208.092348][ T30] audit: type=1400 audit(1764582453.785:1090): avc: denied { map } for pid=11025 comm="syz.5.2267" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.114545][T11030] netlink: 'syz.4.2269': attribute type 6 has an invalid length. [ 208.130786][T11030] netlink: 'syz.4.2269': attribute type 5 has an invalid length. [ 208.139604][T11030] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2269'. [ 208.198984][ T1554] IPVS: starting estimator thread 0... [ 208.294030][T11039] IPVS: using max 48 ests per chain, 115200 per kthread [ 208.418390][T11051] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2278'. [ 208.615527][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.657897][T11066] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2284'. [ 208.661217][T11061] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 208.782518][ T1554] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 208.932648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.943269][ T1554] usb 5-1: Using ep0 maxpacket: 32 [ 208.951005][ T1554] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 208.961112][ T1554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.993269][ T1554] usb 5-1: config 0 descriptor?? [ 209.015126][ T1554] gspca_main: sq930x-2.14.0 probing 041e:403c [ 209.032520][ T5880] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 209.067064][T11086] [U] ¹ [ 209.168197][T11097] IPVS: rr: FWM 3 0x00000003 - no destination available [ 209.187659][ T5880] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 209.198320][ T5880] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 209.213089][ T5880] usb 6-1: Product: syz [ 209.223161][ T5880] usb 6-1: Manufacturer: syz [ 209.227818][ T5880] usb 6-1: SerialNumber: syz [ 209.239080][ T5880] usb 6-1: config 0 descriptor?? [ 209.247660][ T5880] ch341 6-1:0.0: ch341-uart converter detected [ 209.254557][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.782558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 209.852747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.861688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.872081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.972693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.024347][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 210.024360][ T30] audit: type=1400 audit(1764582455.815:1093): avc: denied { write } for pid=11113 comm="syz.0.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.030366][ T1554] gspca_sq930x: ucbus_write failed -71 [ 210.030430][ T1554] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 210.078506][ T1554] usb 5-1: USB disconnect, device number 27 [ 210.176246][T11116] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.2309'. [ 210.248842][T11119] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2311'. [ 210.267180][ T5880] usb 6-1: failed to send control message: -71 [ 210.278899][ T5880] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 210.302712][ T5880] usb 6-1: USB disconnect, device number 9 [ 210.314180][ T5880] ch341 6-1:0.0: device disconnected [ 210.532783][ T1554] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 210.682563][ T1554] usb 2-1: Using ep0 maxpacket: 8 [ 210.689557][ T1554] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 210.697974][ T1554] usb 2-1: config 0 has no interface number 0 [ 210.704357][ T1554] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.715924][ T1554] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 210.727857][ T1554] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.739125][ T1554] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 210.752588][ T1554] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 210.761717][ T1554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.772781][ T1554] usb 2-1: config 0 descriptor?? [ 210.788196][ T1554] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 210.992027][T11137] kvm: MONITOR instruction emulated as NOP! [ 211.019887][ T1554] usb 2-1: USB disconnect, device number 30 [ 211.026078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.040195][ T1554] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 211.593127][ T5880] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 211.623320][T11152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11152 comm=syz.1.2326 [ 211.642543][ T974] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 211.742524][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 211.749400][ T5880] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 211.757872][ T5880] usb 5-1: config 0 has no interface number 0 [ 211.764282][ T5880] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 211.774378][ T5880] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 211.790401][ T5880] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 211.799614][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.807737][ T5880] usb 5-1: Product: syz [ 211.812043][ T5880] usb 5-1: Manufacturer: syz [ 211.817024][ T5880] usb 5-1: SerialNumber: syz [ 211.822284][ T974] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 211.842931][ T5880] usb 5-1: config 0 descriptor?? [ 211.847965][ T974] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.873391][T11148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.880671][T11148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.889557][ T974] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 211.899962][ T974] usb 1-1: config 1 has no interface number 1 [ 211.911153][ T974] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 211.924288][ T974] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 211.956467][ T974] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.966053][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.974127][ T974] usb 1-1: Product: syz [ 211.978390][ T974] usb 1-1: Manufacturer: syz [ 211.984324][ T974] usb 1-1: SerialNumber: syz [ 212.052691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.119385][T11148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.126901][T11148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.182580][ T1554] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 212.197452][ T974] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 212.207309][ T974] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 212.215360][ T974] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 212.245290][ T974] usb 1-1: USB disconnect, device number 24 [ 212.274062][ T8850] udevd[8850]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.334082][ T1554] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 212.345402][ T1554] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 212.358250][ T1554] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 212.367470][ T1554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.377441][ T1554] usb 6-1: config 0 descriptor?? [ 212.383273][T11158] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 212.474748][T11170] netlink: 'syz.1.2334': attribute type 4 has an invalid length. [ 212.498998][T11170] lo speed is unknown, defaulting to 1000 [ 212.507092][T11170] lo speed is unknown, defaulting to 1000 [ 212.515604][T11170] lo speed is unknown, defaulting to 1000 [ 212.603468][ T1554] usbhid 6-1:0.0: can't add hid device: -71 [ 212.609492][ T1554] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 212.621284][ T1554] usb 6-1: USB disconnect, device number 10 [ 212.665309][T11170] infiniband syz0: set down [ 212.665487][ T974] lo speed is unknown, defaulting to 1000 [ 212.670298][T11170] infiniband syz0: added lo [ 212.707327][T11170] RDS/IB: syz0: added [ 212.714331][T11170] smc: adding ib device syz0 with port count 1 [ 212.720669][T11170] smc: ib device syz0 port 1 has no pnetid [ 212.729033][ T5828] lo speed is unknown, defaulting to 1000 [ 212.736635][T11170] lo speed is unknown, defaulting to 1000 [ 212.744709][ T5880] asix 5-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x20 [ 212.981319][ T5880] usb 5-1: USB disconnect, device number 28 [ 213.091262][T11170] lo speed is unknown, defaulting to 1000 [ 213.093995][ T1554] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 213.142954][ T5828] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 213.256514][ T1554] usb 6-1: Using ep0 maxpacket: 32 [ 213.267634][ T1554] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 213.288042][T11170] lo speed is unknown, defaulting to 1000 [ 213.294117][ T1554] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 213.313479][ T1554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.319314][T11191] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.322598][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 213.355341][ T5828] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 213.364481][ T1554] usb 6-1: config 0 descriptor?? [ 213.369573][ T5828] usb 1-1: config 0 has no interface number 0 [ 213.379201][ T5828] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 213.399111][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.413098][ T5828] usb 1-1: Product: syz [ 213.417309][ T5828] usb 1-1: Manufacturer: syz [ 213.422089][ T5828] usb 1-1: SerialNumber: syz [ 213.435156][ T5828] usb 1-1: config 0 descriptor?? [ 213.444354][ T5828] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 213.505368][T11170] lo speed is unknown, defaulting to 1000 [ 213.694692][T11170] lo speed is unknown, defaulting to 1000 [ 213.789426][ T1554] hid-rmi 0003:06CB:81A7.001D: item fetching failed at offset 2/5 [ 213.799060][ T1554] hid-rmi 0003:06CB:81A7.001D: parse failed [ 213.805805][ T1554] hid-rmi 0003:06CB:81A7.001D: probe with driver hid-rmi failed with error -22 [ 213.899730][ T1554] kernel write not supported for file bpf-prog (pid: 1554 comm: kworker/0:2) [ 214.003357][ T5828] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 214.026392][ T974] usb 6-1: USB disconnect, device number 11 [ 214.027098][ T5828] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 214.232715][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 214.240625][ T5828] usb 1-1: USB disconnect, device number 25 [ 214.262846][ T5828] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 214.284443][ T5828] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 214.305610][ T5828] quatech2 1-1:0.51: device disconnected [ 214.378278][T11217] lo speed is unknown, defaulting to 1000 [ 214.722260][ T30] audit: type=1400 audit(1764582460.515:1094): avc: denied { read } for pid=11224 comm="syz.1.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.916393][T11237] __nla_validate_parse: 1 callbacks suppressed [ 214.916407][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'. [ 215.024144][ T30] audit: type=1326 audit(1764582460.815:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34418f749 code=0x7ffc0000 [ 215.087272][ T30] audit: type=1326 audit(1764582460.815:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34418f749 code=0x7ffc0000 [ 215.111708][ T30] audit: type=1326 audit(1764582460.815:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fa34418f749 code=0x7ffc0000 [ 215.135373][ T30] audit: type=1326 audit(1764582460.815:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34418f749 code=0x7ffc0000 [ 215.142853][ T974] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 215.357431][T11251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.364345][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 215.385357][T11253] netlink: 'syz.5.2370': attribute type 1 has an invalid length. [ 215.393012][ T974] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.393398][T11253] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2370'. [ 215.402146][ T974] usb 2-1: config 0 has no interface number 0 [ 215.421338][ T974] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 215.431004][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.465151][ T974] usb 2-1: Product: syz [ 215.469340][ T974] usb 2-1: Manufacturer: syz [ 215.475576][ T974] usb 2-1: SerialNumber: syz [ 215.515983][ T974] usb 2-1: config 0 descriptor?? [ 215.548089][ T974] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 215.754972][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2376'. [ 215.771489][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2376'. [ 216.552142][ T974] gspca_spca1528: reg_w err -71 [ 216.560639][ T974] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 216.579588][ T974] usb 2-1: USB disconnect, device number 31 [ 216.782503][ T1554] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 216.804819][T11310] bridge0: entered allmulticast mode [ 216.943892][ T1554] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 216.952560][ T1554] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 216.961538][ T1554] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 216.972388][ T1554] usb 6-1: config 220 has no interface number 2 [ 216.979836][ T1554] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 216.993470][ T1554] usb 6-1: config 220 interface 0 has no altsetting 0 [ 217.000304][ T1554] usb 6-1: config 220 interface 76 has no altsetting 0 [ 217.007995][ T1554] usb 6-1: config 220 interface 1 has no altsetting 0 [ 217.018348][ T1554] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 217.027690][ T1554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.036098][ T1554] usb 6-1: Product: syz [ 217.040309][ T1554] usb 6-1: Manufacturer: syz [ 217.048009][ T1554] usb 6-1: SerialNumber: syz [ 217.132578][ T30] audit: type=1400 audit(1764582462.925:1099): avc: denied { read } for pid=11327 comm="syz.4.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.277975][ T1554] usb 6-1: selecting invalid altsetting 0 [ 217.295348][ T1554] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 217.315471][ T1554] uvcvideo 6-1:220.0: No valid video chain found. [ 217.329402][ T1554] usb 6-1: selecting invalid altsetting 0 [ 217.345967][ T1554] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 217.363616][ T1554] usb 6-1: USB disconnect, device number 12 [ 217.373611][T11338] Process accounting resumed [ 217.447212][ T30] audit: type=1400 audit(1764582463.245:1100): avc: denied { ioctl } for pid=11323 comm="syz.2.2404" path="socket:[34397]" dev="sockfs" ino=34397 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.639264][ T30] audit: type=1400 audit(1764582463.435:1101): avc: denied { execute } for pid=11354 comm="syz.2.2418" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=34983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 217.671024][ T5828] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 217.822527][ T974] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 217.823985][ T5828] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 217.883121][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.897964][ T5828] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.912633][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.920856][ T5828] usb 2-1: Product: syz [ 217.938994][ T5828] usb 2-1: Manufacturer: syz [ 217.947172][ T5828] usb 2-1: SerialNumber: syz [ 217.970598][ T5828] usb 2-1: config 0 descriptor?? [ 217.979725][ T5828] usb 2-1: selecting invalid altsetting 0 [ 217.992507][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 218.005691][ T974] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 218.017363][ T974] usb 5-1: config 1 has an invalid interface number: 132 but max is 2 [ 218.045018][ T974] usb 5-1: config 1 has an invalid interface number: 209 but max is 2 [ 218.063903][ T974] usb 5-1: config 1 has no interface number 0 [ 218.072517][ T974] usb 5-1: config 1 has no interface number 1 [ 218.111622][ T974] usb 5-1: config 1 has no interface number 2 [ 218.128529][ T974] usb 5-1: config 1 interface 132 has no altsetting 0 [ 218.141339][ T974] usb 5-1: config 1 interface 209 has no altsetting 0 [ 218.164395][ T974] usb 5-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb [ 218.189158][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.206233][ T24] usb 2-1: USB disconnect, device number 32 [ 218.227528][ T974] usb 5-1: Product: syz [ 218.231714][ T974] usb 5-1: Manufacturer: syz [ 218.249255][ T974] usb 5-1: SerialNumber: syz [ 218.320356][ T30] audit: type=1400 audit(1764582464.115:1102): avc: denied { bind } for pid=11374 comm="syz.0.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 218.619927][ T974] usb 5-1: USB disconnect, device number 29 [ 219.050132][ T30] audit: type=1400 audit(1764582464.835:1103): avc: denied { mounton } for pid=11405 comm="syz.5.2442" path="/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 219.189305][T11414] bond1: entered allmulticast mode [ 219.195331][T11414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.372063][T11431] pim6reg: entered allmulticast mode [ 219.432298][ T30] audit: type=1326 audit(1764582465.225:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7018f749 code=0x7fc00000 [ 219.516056][T11441] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 219.891430][T11452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.021141][ T30] audit: type=1326 audit(1764582465.815:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e7012b829 code=0x7fc00000 [ 220.189120][ T30] audit: type=1400 audit(1764582465.985:1106): avc: denied { write } for pid=11473 comm="syz.1.2472" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 220.332980][T11477] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2473'. [ 220.361933][T11472] syz.4.2471 (11472) used greatest stack depth: 17720 bytes left [ 220.692702][ T974] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 220.852873][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 220.863921][ T974] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 220.890887][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.909552][ T974] usb 1-1: Product: syz [ 220.922132][ T974] usb 1-1: Manufacturer: syz [ 220.927371][ T974] usb 1-1: SerialNumber: syz [ 220.941136][ T974] usb 1-1: config 0 descriptor?? [ 220.950525][ T974] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 221.185124][ T974] gspca_topro: reg_w err -71 [ 221.222551][ T974] gspca_topro: Sensor soi763a [ 221.247398][ T974] usb 1-1: USB disconnect, device number 26 [ 221.327461][T11535] overlayfs: failed to clone lowerpath [ 221.447718][ T5880] kernel write not supported for file bpf-map (pid: 5880 comm: kworker/1:5) [ 221.797226][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.808703][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.818511][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.826415][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.834506][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.927109][T11562] lo speed is unknown, defaulting to 1000 [ 222.012602][ T1554] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 222.189676][ T1554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.219280][ T1554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.244114][ T1554] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.277335][ T1554] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.297010][ T1554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.332991][ T1554] usb 5-1: config 0 descriptor?? [ 222.411775][T11584] SELinux: ebitmap: truncated map [ 222.425610][T11584] SELinux: failed to load policy [ 222.554590][T11562] chnl_net:caif_netlink_parms(): no params data found [ 222.653394][T11594] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.803924][ T1554] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 222.824754][ T1554] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 222.832229][ T1554] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 222.862540][ T1554] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 222.874477][ T1554] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 222.881925][ T1554] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 222.904019][T11562] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.925092][T11562] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.942344][ T1554] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 222.952207][T11562] bridge_slave_0: entered allmulticast mode [ 222.978613][ T1554] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 222.991960][T11562] bridge_slave_0: entered promiscuous mode [ 223.010431][T11562] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.029784][ T1554] usb 5-1: USB disconnect, device number 30 [ 223.038256][T11562] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.054788][T11562] bridge_slave_1: entered allmulticast mode [ 223.093994][T11562] bridge_slave_1: entered promiscuous mode [ 223.143096][T11629] fido_id[11629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 223.168114][T11562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.186036][T11562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.276405][T11562] team0: Port device team_slave_0 added [ 223.295279][T11562] team0: Port device team_slave_1 added [ 223.350913][T11562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.362542][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.388435][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.401592][T11562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.423225][T11562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.435116][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.465420][T11562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.689789][T11562] hsr_slave_0: entered promiscuous mode [ 223.706408][T11562] hsr_slave_1: entered promiscuous mode [ 223.713515][T11562] debugfs: 'hsr0' already exists in 'hsr' [ 223.719247][T11562] Cannot create hsr debugfs directory [ 223.760382][ T30] audit: type=1400 audit(1764582469.555:1107): avc: denied { name_bind } for pid=11651 comm="syz.4.2542" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 223.892962][ T5819] Bluetooth: hci3: command tx timeout [ 223.952275][ T30] audit: type=1400 audit(1764582469.745:1108): avc: denied { setopt } for pid=11666 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.137707][T11677] netlink: 'syz.2.2553': attribute type 4 has an invalid length. [ 224.202120][T11677] netlink: 'syz.2.2553': attribute type 4 has an invalid length. [ 224.203901][T11562] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 224.240596][T11562] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 224.257495][T11562] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 224.274160][T11682] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 224.411575][T11562] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.695078][T11562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.813093][T11562] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.856892][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.864088][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.908490][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.915673][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.993242][T11724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2570'. [ 225.383366][T11562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.771611][T11761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2583'. [ 225.840484][T11761] bond1: option ad_select: invalid value (20) [ 225.855047][T11761] bond1 (unregistering): Released all slaves [ 225.955637][T11562] veth0_vlan: entered promiscuous mode [ 225.973346][ T5819] Bluetooth: hci3: command tx timeout [ 225.991742][T11562] veth1_vlan: entered promiscuous mode [ 226.019714][T11562] veth0_macvtap: entered promiscuous mode [ 226.042541][ T5926] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 226.061603][T11562] veth1_macvtap: entered promiscuous mode [ 226.201579][T11774] batman_adv: batadv0: Removing interface: vlan2 [ 226.242336][ T5926] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 226.255137][T11774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.258746][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 226.298117][ T5926] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 226.307423][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 226.318085][ T5926] usb 5-1: Product: syz [ 226.322343][ T5926] usb 5-1: Manufacturer: syz [ 226.336175][ T5926] usb 5-1: SerialNumber: syz [ 226.353340][T11562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.363183][ T5926] usb 5-1: config 0 descriptor?? [ 226.385431][T11562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.385484][ T5926] usb 5-1: selecting invalid altsetting 0 [ 226.465224][ T1163] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.484119][ T1163] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.541050][ T1163] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.554254][ T1163] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.604718][ T24] usb 5-1: USB disconnect, device number 31 [ 226.749008][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.767192][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.842628][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.866644][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.918622][ T30] audit: type=1400 audit(1764582472.715:1109): avc: denied { mounton } for pid=11562 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 228.052857][ T5819] Bluetooth: hci3: command tx timeout [ 228.075386][ T30] audit: type=1400 audit(1764582473.865:1110): avc: denied { read write } for pid=11824 comm="syz.0.2609" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 228.100088][T11825] loop3: detected capacity change from 0 to 2560 [ 228.108726][T11825] Buffer I/O error on dev loop3, logical block 0, async page read [ 228.127358][T11825] Buffer I/O error on dev loop3, logical block 0, async page read [ 228.138287][ T30] audit: type=1400 audit(1764582473.865:1111): avc: denied { open } for pid=11824 comm="syz.0.2609" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 228.166656][T11825] loop3: unable to read partition table [ 228.188659][T11828] Buffer I/O error on dev loop3, logical block 0, lost async page write [ 228.232594][T11825] loop_reread_partitions: partition scan of loop3 (3Ÿ ¾‚³˜) failed (rc=-5) [ 228.233056][T11828] Buffer I/O error on dev loop3, logical block 1, lost async page write [ 228.307409][T11828] Buffer I/O error on dev loop3, logical block 2, lost async page write [ 228.332019][T11828] Buffer I/O error on dev loop3, logical block 3, lost async page write [ 228.341008][T11828] Buffer I/O error on dev loop3, logical block 4, lost async page write [ 228.350635][T11828] Buffer I/O error on dev loop3, logical block 5, lost async page write [ 228.360019][T11828] Buffer I/O error on dev loop3, logical block 6, lost async page write [ 228.374418][T11828] Buffer I/O error on dev loop3, logical block 7, lost async page write [ 228.524062][ T5182] ldm_validate_partition_table(): Disk read failed. [ 228.541490][ T5182] Dev loop3: unable to read RDB block 0 [ 228.547841][ T5182] loop3: unable to read partition table [ 228.713716][T11847] netlink: 'syz.2.2620': attribute type 4 has an invalid length. [ 228.747568][T11847] rdma_rxe: rxe_newlink: failed to add lo [ 228.952538][ T5866] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 229.086611][ T30] audit: type=1400 audit(1764582474.875:1112): avc: denied { override_creds } for pid=11862 comm="syz.4.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 229.122584][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 229.225841][ T5866] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 229.242526][ T5866] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 229.252415][ T5866] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 229.275803][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.302531][ T5866] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.312196][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 229.361355][ T5866] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 229.393776][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.431971][ T5866] usb 7-1: config 0 descriptor?? [ 229.580552][T11883] netlink: 'syz.0.2634': attribute type 4 has an invalid length. [ 229.606146][ T5880] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 229.608108][T11883] rdma_rxe: rxe_newlink: failed to add lo [ 229.724902][ T5866] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 229.750565][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 229.812377][ T10] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.847428][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.859657][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.932555][ T5880] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 229.951960][ T5880] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 229.963465][ T30] audit: type=1400 audit(1764582475.765:1113): avc: denied { read write } for pid=11843 comm="syz.6.2617" name="lp0" dev="devtmpfs" ino=4242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 229.995038][ T5880] usb 5-1: Manufacturer: syz [ 230.001081][ T974] usb 7-1: USB disconnect, device number 2 [ 230.045828][ T974] usblp0: removed [ 230.051760][ T5880] usb 5-1: config 0 descriptor?? [ 230.058388][ T30] audit: type=1400 audit(1764582475.765:1114): avc: denied { open } for pid=11843 comm="syz.6.2617" path="/dev/usb/lp0" dev="devtmpfs" ino=4242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 230.132799][ T5819] Bluetooth: hci3: command tx timeout [ 230.641121][T11769] Set syz1 is full, maxelem 65536 reached [ 230.665515][ T30] audit: type=1400 audit(1764582476.465:1115): avc: denied { shutdown } for pid=11897 comm="syz.2.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 230.892505][ T974] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 231.055107][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 231.093619][ T974] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 231.102655][ T974] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.113697][ T5880] uclogic 0003:256C:006D.0020: failed retrieving string descriptor #100: -71 [ 231.123627][ T5880] uclogic 0003:256C:006D.0020: failed retrieving pen parameters: -71 [ 231.131704][ T5880] uclogic 0003:256C:006D.0020: failed probing pen v1 parameters: -71 [ 231.153689][ T974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.162911][ T5880] uclogic 0003:256C:006D.0020: failed probing parameters: -71 [ 231.170466][ T5880] uclogic 0003:256C:006D.0020: probe with driver uclogic failed with error -71 [ 231.182028][ T974] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.192331][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.204595][ T5880] usb 5-1: USB disconnect, device number 32 [ 231.218758][ T974] usb 1-1: Product: syz [ 231.260106][ T974] usb 1-1: Manufacturer: syz [ 231.266090][ T974] usb 1-1: SerialNumber: syz [ 231.284670][T11929] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 231.701155][ T974] usb 1-1: 0:2 : does not exist [ 231.930620][T11949] tipc: Started in network mode [ 231.936675][T11949] tipc: Node identity ff75, cluster identity 4711 [ 231.943299][T11949] tipc: Enabling of bearer rejected, failed to enable media [ 231.995921][ T30] audit: type=1400 audit(1764582477.795:1116): avc: denied { create } for pid=11950 comm="syz.6.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 232.017288][ T30] audit: type=1400 audit(1764582477.815:1117): avc: denied { sys_admin } for pid=11950 comm="syz.6.2663" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 232.036674][T11951] lo speed is unknown, defaulting to 1000 [ 232.294558][ T97] block nbd0: Possible stuck request ffff888026237000: control (read@0,1024B). Runtime 150 seconds [ 232.305867][ T97] block nbd0: Possible stuck request ffff8880262371c0: control (read@1024,1024B). Runtime 150 seconds [ 232.317887][ T97] block nbd0: Possible stuck request ffff888026237380: control (read@2048,1024B). Runtime 150 seconds [ 232.329604][ T97] block nbd0: Possible stuck request ffff888026237540: control (read@3072,1024B). Runtime 150 seconds [ 232.356661][ T974] usb 1-1: USB disconnect, device number 27 [ 232.394053][ T8850] udevd[8850]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.529907][ T10] kernel write not supported for file [eventfd] (pid: 10 comm: kworker/0:1) [ 232.532941][ T30] audit: type=1400 audit(1764582478.325:1118): avc: denied { mounton } for pid=11959 comm="syz.2.2666" path="/603/file0" dev="tmpfs" ino=3101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 232.831055][T11972] 9p: Unknown uid 00000000004294967295 [ 232.873166][T11974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2672'. [ 232.981795][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 232.994051][ T30] audit: type=1400 audit(1764582478.795:1119): avc: denied { remount } for pid=11975 comm="syz.0.2673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 233.034080][ T30] audit: type=1400 audit(1764582478.835:1120): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 233.155338][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.181704][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.205338][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.219342][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.228539][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.244330][ T10] usb 5-1: config 0 descriptor?? [ 233.295830][ T30] audit: type=1400 audit(1764582479.095:1121): avc: denied { map } for pid=11985 comm="syz.6.2679" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.686541][ T10] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 233.945593][T12013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2691'. [ 233.962235][T12013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2691'. [ 233.975933][ T974] usb 5-1: USB disconnect, device number 33 [ 234.045120][T12016] vcan0: tx address claim with different name [ 234.102519][ T30] audit: type=1400 audit(1764582479.895:1122): avc: denied { ioctl } for pid=12019 comm="syz.0.2702" path="socket:[37812]" dev="sockfs" ino=37812 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.335102][T12033] binder: 12032:12033 ioctl 4018620d 0 returned -22 [ 234.836388][T12063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.850640][T12064] syz_tun: entered promiscuous mode [ 235.020678][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 236.414234][ T30] audit: type=1326 audit(1764582482.215:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12129 comm="syz.1.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 236.484577][ T30] audit: type=1326 audit(1764582482.215:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12129 comm="syz.1.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 236.537497][ T30] audit: type=1326 audit(1764582482.245:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12129 comm="syz.1.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 236.952657][ T1554] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 237.092746][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 237.093146][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 237.125146][ T1554] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.156768][ T1554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.220857][ T1554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 237.255520][ T1554] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.278725][ T1554] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.295868][ T1554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.325284][ T1554] usb 5-1: config 0 descriptor?? [ 237.512702][ T974] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 237.674181][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.692514][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.731745][ T974] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.750306][ T1554] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 237.758871][ T974] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.776684][ T1554] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 237.782136][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.802924][ T1554] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 237.825129][ T974] usb 1-1: config 0 descriptor?? [ 237.830693][ T1554] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 237.847440][ T1554] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 237.865115][ T1554] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 237.892495][ T1554] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 237.914124][ T1554] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 237.922813][ T1554] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 237.931543][ T1554] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 237.973966][ T1554] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 238.022765][ T1554] usb 5-1: USB disconnect, device number 34 [ 238.129411][T12188] fido_id[12188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 238.174914][T12192] lo speed is unknown, defaulting to 1000 [ 238.250983][ T974] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 238.300624][ T974] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 238.585695][ T974] usb 1-1: USB disconnect, device number 28 [ 238.646022][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2771'. [ 238.676990][T12205] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 238.685431][T12193] lo speed is unknown, defaulting to 1000 [ 239.558101][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 239.558117][ T30] audit: type=1400 audit(1764582485.355:1128): avc: denied { create } for pid=12237 comm="syz.4.2783" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 239.727857][ T5926] kernel read not supported for file 1348/task/1349/pagemap (pid: 5926 comm: kworker/0:5) [ 240.281495][ T30] audit: type=1400 audit(1764582486.075:1129): avc: denied { connect } for pid=12267 comm="syz.4.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.322709][ T30] audit: type=1400 audit(1764582486.075:1130): avc: denied { getopt } for pid=12267 comm="syz.4.2796" laddr=fe80::a8aa:aaff:feaa:aaaa lport=8747 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.464983][ T5819] Bluetooth: latency 26624 > 499 [ 240.913378][ T974] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 241.063843][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.074995][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.091527][ T974] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.106103][ T974] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.116472][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.142303][ T974] usb 7-1: config 0 descriptor?? [ 241.254478][T12325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2820'. [ 241.263719][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2820'. [ 241.553142][ T1554] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 241.573281][ T974] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 241.725096][ T1554] usb 2-1: Using ep0 maxpacket: 32 [ 241.738163][ T1554] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 241.746547][ T1554] usb 2-1: config 0 has no interface number 0 [ 241.758970][T12341] smc: net device bond0 applied user defined pnetid SYZ0 [ 241.759472][ T1554] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 241.775747][ T1554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.788440][ T1554] usb 2-1: Product: syz [ 241.794555][ T1554] usb 2-1: Manufacturer: syz [ 241.799275][ T1554] usb 2-1: SerialNumber: syz [ 241.807647][ T1554] usb 2-1: config 0 descriptor?? [ 241.818712][ T1554] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 242.030258][ T1554] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 242.048957][ T1554] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 242.092609][ T5866] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 242.152933][ T5926] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 242.274397][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.285554][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.295929][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.310015][ T5866] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.314472][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.319169][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.342019][ T5866] usb 1-1: config 0 descriptor?? [ 242.347201][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.359909][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.377806][ T5926] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.399008][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.410474][ T5926] usb 5-1: config 0 descriptor?? [ 242.462181][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 242.472475][ T1554] usb 2-1: USB disconnect, device number 33 [ 242.495407][ T1554] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 242.520819][ T1554] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 242.533422][ T5819] Bluetooth: hci4: command 0x0405 tx timeout [ 242.539731][ T1554] quatech2 2-1:0.51: device disconnected [ 242.778103][ T5866] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 242.788794][ T5866] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 242.796429][ T5866] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 242.804256][ T5866] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 242.811792][ T5866] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 242.819821][ T5866] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 242.828894][ T5866] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 242.833698][ T5926] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x6 [ 242.857237][ T5866] plantronics 0003:047F:FFFF.0025: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 242.859535][ T5926] plantronics 0003:047F:FFFF.0026: hiddev2,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 243.106431][T12345] usb 7-1: string descriptor 0 read error: -71 [ 243.127007][ T5866] usb 1-1: USB disconnect, device number 29 [ 243.135987][ T5926] usb 5-1: USB disconnect, device number 35 [ 243.332133][ T30] audit: type=1326 audit(1764582489.125:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12385 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 243.356454][ T30] audit: type=1326 audit(1764582489.125:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12385 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 243.382553][ T30] audit: type=1326 audit(1764582489.125:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12385 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 243.418977][ T30] audit: type=1326 audit(1764582489.185:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12385 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f195af8f783 code=0x7ffc0000 [ 243.444374][ T30] audit: type=1326 audit(1764582489.185:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12385 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f195af8f783 code=0x7ffc0000 [ 243.472904][ T30] audit: type=1326 audit(1764582489.185:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12385 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 243.498057][ T30] audit: type=1326 audit(1764582489.185:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12385 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195af8f749 code=0x7ffc0000 [ 243.677825][ T1554] usb 7-1: USB disconnect, device number 3 [ 244.022718][ T5926] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 244.059778][T12421] netlink: 'syz.0.2859': attribute type 11 has an invalid length. [ 244.197933][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 244.213318][ T5926] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 244.225416][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 244.235906][ T5926] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 244.249708][ T5926] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 244.259201][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.270609][ T5926] usb 2-1: Product: syz [ 244.274907][ T5926] usb 2-1: Manufacturer: syz [ 244.279632][ T5926] usb 2-1: SerialNumber: syz [ 244.286535][ T5926] usb 2-1: config 0 descriptor?? [ 244.295856][ T5926] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 244.408434][T12439] syzkaller1: entered promiscuous mode [ 244.414673][T12439] syzkaller1: entered allmulticast mode [ 244.541611][ T5926] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 244.724640][ T5926] usb 2-1: USB disconnect, device number 34 [ 245.010060][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2883'. [ 245.019855][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 245.019869][ T30] audit: type=1400 audit(1764582490.805:1160): avc: denied { nlmsg_read } for pid=12471 comm="syz.4.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.376027][ T30] audit: type=1326 audit(1764582491.175:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 245.378552][T12496] netlink: 'syz.2.2894': attribute type 5 has an invalid length. [ 245.415883][ T30] audit: type=1326 audit(1764582491.205:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 245.457852][ T30] audit: type=1326 audit(1764582491.205:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 245.511208][ T30] audit: type=1326 audit(1764582491.205:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 245.557805][ T30] audit: type=1326 audit(1764582491.205:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 245.599327][ T30] audit: type=1326 audit(1764582491.205:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 245.623335][ T30] audit: type=1326 audit(1764582491.215:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 245.648186][ T30] audit: type=1326 audit(1764582491.215:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 245.789433][T12511] Invalid ELF header len 8 [ 245.875574][T12521] overlayfs: failed to clone lowerpath [ 245.883965][ T30] audit: type=1326 audit(1764582491.215:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0e1d8f749 code=0x7ffc0000 [ 245.970717][T12528] GUP no longer grows the stack in syz.6.2905 (12528): 200000004000-20000000a000 (200000002000) [ 245.998867][T12528] CPU: 0 UID: 0 PID: 12528 Comm: syz.6.2905 Not tainted syzkaller #0 PREEMPT(full) [ 245.998896][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.998908][T12528] Call Trace: [ 245.998915][T12528] [ 245.998923][T12528] dump_stack_lvl+0x16c/0x1f0 [ 245.998945][T12528] gup_vma_lookup+0x1d2/0x220 [ 245.998969][T12528] __get_user_pages+0x241/0x3530 [ 245.999000][T12528] ? find_held_lock+0x2b/0x80 [ 245.999024][T12528] ? __pfx___get_user_pages+0x10/0x10 [ 245.999053][T12528] get_user_pages_remote+0x243/0xab0 [ 245.999074][T12528] ? mast_spanning_rebalance.isra.0+0x2060/0x2060 [ 245.999097][T12528] ? __pfx_get_user_pages_remote+0x10/0x10 [ 245.999123][T12528] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.999152][T12528] __access_remote_vm+0x250/0xaa0 [ 245.999177][T12528] ? do_raw_spin_lock+0x12c/0x2b0 [ 245.999198][T12528] ? __pfx___access_remote_vm+0x10/0x10 [ 245.999225][T12528] proc_pid_cmdline_read+0x4de/0x8e0 [ 245.999251][T12528] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 245.999276][T12528] ? rw_verify_area+0xcf/0x6c0 [ 245.999305][T12528] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 245.999325][T12528] vfs_readv+0x5c1/0x8b0 [ 245.999358][T12528] ? __pfx_vfs_readv+0x10/0x10 [ 245.999395][T12528] ? kmem_cache_free+0x2d4/0x6c0 [ 245.999428][T12528] ? __fget_files+0x20e/0x3c0 [ 245.999454][T12528] ? do_preadv+0x1a6/0x270 [ 245.999478][T12528] do_preadv+0x1a6/0x270 [ 245.999504][T12528] ? __pfx_do_preadv+0x10/0x10 [ 245.999538][T12528] do_syscall_64+0xcd/0xfa0 [ 245.999558][T12528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.999576][T12528] RIP: 0033:0x7f115f58f749 [ 245.999591][T12528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.999609][T12528] RSP: 002b:00007f1160511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 245.999626][T12528] RAX: ffffffffffffffda RBX: 00007f115f7e5fa0 RCX: 00007f115f58f749 [ 245.999637][T12528] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 245.999647][T12528] RBP: 00007f115f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 245.999658][T12528] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 245.999667][T12528] R13: 00007f115f7e6038 R14: 00007f115f7e5fa0 R15: 00007ffc40b5caa8 [ 245.999693][T12528] [ 246.444020][T12543] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2911'. [ 246.612646][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 246.618796][T12446] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 246.801917][T12561] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2918'. [ 247.512117][T12446] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 247.523252][T12446] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 247.530309][T12446] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 247.546257][ T8984] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 247.548548][T12446] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 247.558332][ T8984] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 247.558352][ T8984] CPU: 0 UID: 0 PID: 8984 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 247.558371][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.558381][ T8984] RIP: 0010:klist_put+0x4d/0x1b0 [ 247.558399][ T8984] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c f2 0c [ 247.558414][ T8984] RSP: 0018:ffffc9001b5b79a0 EFLAGS: 00010202 [ 247.558428][ T8984] RAX: dffffc0000000000 RBX: ffff888054c61460 RCX: ffffffff8265398d [ 247.558438][ T8984] RDX: 000000000000000b RSI: ffffffff8b56a2f5 RDI: 0000000000000058 [ 247.558449][ T8984] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 247.558459][ T8984] R10: 0000000000000000 R11: ffffffff81a2f565 R12: 0000000000000000 [ 247.558470][ T8984] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 247.558480][ T8984] FS: 0000000000000000(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 247.558498][ T8984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.558510][ T8984] CR2: 00007f682c52a3a3 CR3: 000000002368a000 CR4: 00000000003526f0 [ 247.558521][ T8984] Call Trace: [ 247.558527][ T8984] [ 247.558535][ T8984] device_del+0x1d8/0x9f0 [ 247.696276][ T8984] ? __pfx_device_del+0x10/0x10 [ 247.701144][ T8984] ? netdev_unregister_kobject+0x2da/0x540 [ 247.706938][ T8984] unregister_netdevice_many_notify+0x14d6/0x25c0 [ 247.713351][ T8984] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 247.720096][ T8984] ? __pfx___mutex_lock+0x10/0x10 [ 247.725102][ T8984] unregister_netdevice_queue+0x305/0x3f0 [ 247.730805][ T8984] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 247.737032][ T8984] ? rtnl_net_dev_lock+0x28/0x360 [ 247.742036][ T8984] ? rtnl_net_dev_lock+0x146/0x360 [ 247.747126][ T8984] ? rtnl_lock+0x9/0x20 [ 247.751258][ T8984] ? rtnl_net_dev_lock+0x146/0x360 [ 247.756357][ T8984] unregister_netdev+0x1f/0x60 [ 247.761105][ T8984] bnep_session+0x224e/0x2d80 [ 247.765768][ T8984] ? __pfx_bnep_session+0x10/0x10 [ 247.770771][ T8984] ? do_raw_spin_lock+0x12c/0x2b0 [ 247.775774][ T8984] ? __pfx_woken_wake_function+0x10/0x10 [ 247.781388][ T8984] ? rcu_is_watching+0x12/0xc0 [ 247.786133][ T8984] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 247.791924][ T8984] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.797099][ T8984] ? __kthread_parkme+0x19e/0x250 [ 247.802109][ T8984] ? __pfx_bnep_session+0x10/0x10 [ 247.807129][ T8984] kthread+0x3c5/0x780 [ 247.811194][ T8984] ? __pfx_kthread+0x10/0x10 [ 247.815767][ T8984] ? rcu_is_watching+0x12/0xc0 [ 247.820519][ T8984] ? __pfx_kthread+0x10/0x10 [ 247.825089][ T8984] ret_from_fork+0x675/0x7d0 [ 247.829657][ T8984] ? __pfx_kthread+0x10/0x10 [ 247.834235][ T8984] ret_from_fork_asm+0x1a/0x30 [ 247.838992][ T8984] [ 247.841989][ T8984] Modules linked in: [ 247.846319][ T8984] ---[ end trace 0000000000000000 ]--- [ 247.856496][ T8984] RIP: 0010:klist_put+0x4d/0x1b0 [ 247.861478][ T8984] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c f2 0c [ 247.881415][ T8984] RSP: 0018:ffffc9001b5b79a0 EFLAGS: 00010202 [ 247.887580][ T8984] RAX: dffffc0000000000 RBX: ffff888054c61460 RCX: ffffffff8265398d [ 247.895609][ T8984] RDX: 000000000000000b RSI: ffffffff8b56a2f5 RDI: 0000000000000058 [ 247.903999][ T8984] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 247.905503][T12446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.911967][ T8984] R10: 0000000000000000 R11: ffffffff81a2f565 R12: 0000000000000000 [ 247.911981][ T8984] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 247.911991][ T8984] FS: 0000000000000000(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 247.912007][ T8984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.923708][T12446] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 247.925961][ T8984] CR2: 00007f682c52a3a3 CR3: 0000000075742000 CR4: 00000000003526f0 [ 247.963332][ T8984] Kernel panic - not syncing: Fatal exception [ 247.969664][ T8984] Kernel Offset: disabled [ 247.973974][ T8984] Rebooting in 86400 seconds..