last executing test programs: 1m44.831539007s ago: executing program 0 (id=482): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) 1m44.448007797s ago: executing program 0 (id=486): bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) 1m43.685322354s ago: executing program 0 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 1m15.844603278s ago: executing program 0 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 48.161043703s ago: executing program 0 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 14.981377934s ago: executing program 0 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 7.404002653s ago: executing program 2 (id=933): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000240)={{&(0x7f000072d000/0x3000)=nil, 0x3000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.95409828s ago: executing program 3 (id=934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004c00000008000300", @ANYRES32=r3], 0x38}}, 0x0) 6.769663141s ago: executing program 2 (id=936): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_io_uring_setup(0x2ddf, &(0x7f00000006c0)={0x0, 0x2c86, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5c6, &(0x7f00000005c0), &(0x7f0000000300)=0x0, &(0x7f0000000500)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0x381b, 0x0, 0x0, 0x0, 0x0) 6.61081261s ago: executing program 1 (id=937): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)=0x8) 6.167840683s ago: executing program 2 (id=939): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x2c}}, 0x0) 6.03759061s ago: executing program 1 (id=940): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) 5.600915929s ago: executing program 1 (id=942): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010000000000000000000a000000000000030500000008000a00ffffffff7a92"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 5.052266911s ago: executing program 4 (id=945): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 3.821299665s ago: executing program 2 (id=946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x26}, 0x10) 3.733629378s ago: executing program 3 (id=947): r0 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 3.716650395s ago: executing program 4 (id=948): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x8cceb000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x0, 0x0) 3.687107868s ago: executing program 1 (id=949): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0a001800030303030303000024005a8020000480140005"], 0x4c}}, 0x0) 3.393586819s ago: executing program 2 (id=950): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) mremap(&(0x7f00000a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000469000/0x4000)=nil) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 3.303333311s ago: executing program 4 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r2, 0x5, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}}, 0x0) 3.151101416s ago: executing program 3 (id=952): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140), 0x10) 3.112833439s ago: executing program 2 (id=953): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b07, 0x0) 2.830575227s ago: executing program 1 (id=954): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1f2c) 2.783811454s ago: executing program 4 (id=955): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.637362905s ago: executing program 3 (id=956): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000400)=0x13) poll(&(0x7f0000000100)=[{r0, 0xcf9aa395655278ef}], 0x1, 0xe7f1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x7, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 2.169548064s ago: executing program 4 (id=957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) lchown(0x0, 0xee00, 0x0) 2.169183536s ago: executing program 1 (id=958): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 1.441518733s ago: executing program 4 (id=959): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x112, @time={0x14a, 0x5}, 0x0, {0x2}}) 1.428656262s ago: executing program 3 (id=960): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa00180133070000000f0000bd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)='\v', 0x1}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) 0s ago: executing program 3 (id=961): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1a43) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000005c0)={0x0, 0xea60}, 0x10) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) kernel console output (not intermixed with test programs): usefs_t tclass=filesystem permissive=1 [ 154.605618][ T5698] Bluetooth: MGMT ver 1.23 [ 154.618236][ T29] audit: type=1400 audit(1724963007.278:232): avc: denied { write } for pid=5696 comm="syz.1.153" path="socket:[7932]" dev="sockfs" ino=7932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.658772][ T5239] Bluetooth: hci5: command tx timeout [ 154.728967][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.786870][ T29] audit: type=1400 audit(1724963007.328:233): avc: denied { read } for pid=5697 comm="syz.3.154" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.868265][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.950906][ T5668] bridge_slave_0: entered allmulticast mode [ 154.965421][ T5668] bridge_slave_0: entered promiscuous mode [ 155.000750][ T29] audit: type=1400 audit(1724963007.328:234): avc: denied { open } for pid=5697 comm="syz.3.154" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.044750][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.104844][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.159715][ T5668] bridge_slave_1: entered allmulticast mode [ 155.172335][ T1854] usb 3-1: USB disconnect, device number 2 [ 155.215856][ T29] audit: type=1400 audit(1724963007.398:235): avc: denied { map } for pid=5697 comm="syz.3.154" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.313224][ T5668] bridge_slave_1: entered promiscuous mode [ 155.815241][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.936630][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.495752][ T5668] team0: Port device team_slave_0 added [ 156.711374][ T5239] Bluetooth: hci5: command tx timeout [ 156.719117][ T5668] team0: Port device team_slave_1 added [ 157.884404][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.916594][ T1176] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.952587][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.030005][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.129392][ T1176] usb 1-1: Using ep0 maxpacket: 8 [ 158.142810][ T1176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.175910][ T1176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.212816][ T1106] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.272460][ T1176] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.297314][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.319232][ T1176] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 158.363655][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.448369][ T1176] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 158.477281][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.541431][ T1176] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 158.624331][ T1176] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.739192][ T1176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.805275][ T5239] Bluetooth: hci5: command tx timeout [ 158.810994][ T1176] usb 1-1: Product: syz [ 158.812250][ T5740] vxcan1: tx address claim with different name [ 158.815167][ T1176] usb 1-1: Manufacturer: syz [ 158.826071][ T1176] usb 1-1: SerialNumber: syz [ 158.933439][ T1106] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.112036][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.345746][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 159.355731][ T1106] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.435460][ T1176] cdc_ncm 1-1:1.0: bind() failure [ 159.454485][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.476534][ T1176] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 159.508858][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 159.508876][ T29] audit: type=1400 audit(1724963012.178:245): avc: denied { execute } for pid=5745 comm="syz.2.172" path="/35/blkio.bfq.io_queued_recursive" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.535253][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.613569][ T47] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 159.623497][ T1176] cdc_ncm 1-1:1.1: bind() failure [ 159.705021][ T29] audit: type=1400 audit(1724963012.258:246): avc: denied { create } for pid=5745 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.709241][ T1176] usb 1-1: USB disconnect, device number 5 [ 159.766682][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.786556][ T47] usb 2-1: config 0 descriptor?? [ 159.891551][ T29] audit: type=1400 audit(1724963012.278:247): avc: denied { connect } for pid=5745 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.144835][ T5668] hsr_slave_0: entered promiscuous mode [ 160.197336][ T5668] hsr_slave_1: entered promiscuous mode [ 160.207595][ T5668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.231989][ T5668] Cannot create hsr debugfs directory [ 160.311908][ T5742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.379867][ T5742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.395965][ T1106] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.496223][ T47] hid (null): unknown global tag 0xd [ 160.588594][ T47] hid (null): unknown global tag 0xd [ 160.646045][ T47] hid (null): report_id 40203 is invalid [ 160.677890][ T47] hid (null): invalid report_size -1862471209 [ 160.689114][ T47] hid (null): invalid report_size -1217885453 [ 160.834621][ T47] hid (null): unknown global tag 0x36 [ 161.047172][ T47] usb 2-1: string descriptor 0 read error: -71 [ 161.134592][ T47] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 161.148749][ T47] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -32 [ 161.318085][ T47] usb 2-1: USB disconnect, device number 6 [ 161.491611][ T5766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.179'. [ 161.546035][ T5766] netlink: 'syz.2.179': attribute type 7 has an invalid length. [ 161.555758][ T5273] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.590537][ T5766] netlink: 'syz.2.179': attribute type 8 has an invalid length. [ 161.615934][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 161.796126][ T5273] usb 4-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=e4.e6 [ 161.825913][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.838864][ T5273] usb 4-1: Product: syz [ 161.853392][ T5273] usb 4-1: Manufacturer: syz [ 161.858046][ T5273] usb 4-1: SerialNumber: syz [ 161.888382][ T5273] usb 4-1: config 0 descriptor?? [ 162.705888][ T1106] bridge_slave_1: left allmulticast mode [ 162.741509][ T1106] bridge_slave_1: left promiscuous mode [ 162.748961][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.817399][ T5273] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 162.868849][ T5273] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 162.934647][ T1106] bridge_slave_0: left allmulticast mode [ 162.977698][ T1106] bridge_slave_0: left promiscuous mode [ 162.989824][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.529893][ T29] audit: type=1400 audit(1724963016.198:248): avc: denied { accept } for pid=5783 comm="syz.0.187" path="socket:[8979]" dev="sockfs" ino=8979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.135930][ T29] audit: type=1400 audit(1724963016.798:249): avc: denied { connect } for pid=5790 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.204384][ T29] audit: type=1400 audit(1724963016.848:250): avc: denied { create } for pid=5792 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 164.277323][ T29] audit: type=1400 audit(1724963016.868:251): avc: denied { bind } for pid=5792 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 164.311716][ T29] audit: type=1400 audit(1724963016.898:252): avc: denied { setopt } for pid=5790 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.341693][ T29] audit: type=1400 audit(1724963016.978:253): avc: denied { shutdown } for pid=5790 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.655911][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.683572][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.704643][ T1106] bond0 (unregistering): Released all slaves [ 164.745728][ T1176] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 164.935400][ T5273] asix 4-1:0.0 eth4: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 164.985954][ T5273] usb 4-1: USB disconnect, device number 3 [ 165.027665][ T1176] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 165.063068][ T5273] asix 4-1:0.0 eth4: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 165.091886][ T1176] usb 1-1: config 0 has no interface number 0 [ 165.115143][ T1176] usb 1-1: config 0 interface 255 has no altsetting 0 [ 165.126146][ T1176] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 165.158179][ T1176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.226278][ T1176] usb 1-1: config 0 descriptor?? [ 165.258995][ T1176] cp210x 1-1:0.255: cp210x converter detected [ 165.326484][ T29] audit: type=1400 audit(1724963017.998:254): avc: denied { create } for pid=5797 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.718878][ T1176] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 165.942126][ T1176] cp210x 1-1:0.255: GPIO initialisation failed: -19 [ 165.997946][ T1176] usb 1-1: cp210x converter now attached to ttyUSB0 [ 166.246051][ T5807] io-wq is not configured for unbound workers [ 166.312121][ T5239] Bluetooth: hci5: command tx timeout [ 166.489950][ T29] audit: type=1400 audit(1724963019.138:255): avc: denied { create } for pid=5809 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.532383][ T5273] usb 1-1: USB disconnect, device number 6 [ 166.648041][ T5273] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 166.703237][ T5273] cp210x 1-1:0.255: device disconnected [ 166.967147][ T1106] hsr_slave_0: left promiscuous mode [ 167.055177][ T1106] hsr_slave_1: left promiscuous mode [ 167.207965][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.228988][ T29] audit: type=1400 audit(1724963019.898:256): avc: denied { ioctl } for pid=5812 comm="syz.2.200" path="/dev/input/event2" dev="devtmpfs" ino=839 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.246355][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.254851][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.388500][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.416680][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.619742][ T1106] veth1_macvtap: left promiscuous mode [ 167.647266][ T1106] veth0_macvtap: left promiscuous mode [ 167.668678][ T1106] veth1_vlan: left promiscuous mode [ 167.677552][ T1106] veth0_vlan: left promiscuous mode [ 168.295096][ T5823] input: syz0 as /devices/virtual/input/input6 [ 168.344682][ T29] audit: type=1400 audit(1724963021.018:257): avc: denied { read } for pid=4659 comm="acpid" name="event4" dev="devtmpfs" ino=2383 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.367219][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.521175][ T29] audit: type=1400 audit(1724963021.018:258): avc: denied { open } for pid=4659 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2383 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.600717][ T29] audit: type=1400 audit(1724963021.018:259): avc: denied { ioctl } for pid=4659 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2383 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.107205][ T29] audit: type=1400 audit(1724963021.768:260): avc: denied { create } for pid=5833 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 169.139059][ T29] audit: type=1400 audit(1724963021.778:261): avc: denied { listen } for pid=5833 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 169.183088][ T29] audit: type=1400 audit(1724963021.798:262): avc: denied { write } for pid=5833 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 169.221450][ T29] audit: type=1400 audit(1724963021.848:263): avc: denied { nlmsg_read } for pid=5833 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 169.329991][ T5273] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.569246][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 169.630551][ T5273] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.648291][ T5273] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2C, changing to 0xC [ 169.661847][ T5273] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 169.698449][ T5273] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.730051][ T5273] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 2.40 [ 169.762078][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.788966][ T5831] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.927992][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 170.006608][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 170.965869][ T5273] cdc_ncm 3-1:1.0: bind() failure [ 171.041541][ T5273] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 171.068692][ T5273] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 171.088837][ T5273] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 171.186734][ T5273] usb 3-1: USB disconnect, device number 3 [ 171.756177][ T5668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.873962][ T5668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.969294][ T5668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.052279][ T5668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.056875][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.306061][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.416388][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.423674][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.604662][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.611989][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.419424][ T29] audit: type=1400 audit(1724963027.078:264): avc: denied { write } for pid=5884 comm="syz.3.228" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.448822][ T5888] random: crng reseeded on system resumption [ 174.555977][ T29] audit: type=1400 audit(1724963027.088:265): avc: denied { map } for pid=5884 comm="syz.3.228" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.713635][ T29] audit: type=1400 audit(1724963027.118:266): avc: denied { write } for pid=5887 comm="syz.0.229" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 174.766883][ T5886] mmap: syz.3.228 (5886) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 174.808812][ T29] audit: type=1400 audit(1724963027.118:267): avc: denied { open } for pid=5887 comm="syz.0.229" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 174.895191][ T5886] binder_alloc: binder_alloc_mmap_handler: 5884 20ffc000-20ffd000 already mapped failed -16 [ 175.359975][ T29] audit: type=1400 audit(1724963028.038:268): avc: denied { create } for pid=5896 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.497673][ T29] audit: type=1400 audit(1724963028.168:269): avc: denied { write } for pid=5896 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.578172][ T29] audit: type=1400 audit(1724963028.168:270): avc: denied { nlmsg_write } for pid=5896 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.964324][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.488530][ T29] audit: type=1400 audit(1724963029.128:271): avc: denied { create } for pid=5902 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 176.561386][ T29] audit: type=1400 audit(1724963029.138:272): avc: denied { write } for pid=5902 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 177.316112][ T29] audit: type=1400 audit(1724963029.978:273): avc: denied { read } for pid=5914 comm="syz.0.235" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.403021][ T5668] veth0_vlan: entered promiscuous mode [ 177.649812][ T5668] veth1_vlan: entered promiscuous mode [ 178.036523][ T5930] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 178.264147][ T5930] overlayfs: conflicting lowerdir path [ 178.695933][ T5668] veth0_macvtap: entered promiscuous mode [ 178.795116][ T5668] veth1_macvtap: entered promiscuous mode [ 178.846476][ T5934] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.241'. [ 178.859551][ T5934] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 178.937209][ T5934] netlink: 113 bytes leftover after parsing attributes in process `syz.1.241'. [ 179.005666][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.077403][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.141044][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.173084][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.245449][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.342177][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.382773][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.440344][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 179.440384][ T29] audit: type=1400 audit(1724963032.108:280): avc: denied { mount } for pid=5940 comm="syz.2.243" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 179.454882][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.614060][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.708729][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.800167][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.908318][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.944153][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.013228][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.084365][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.138973][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.232635][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.294983][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.497503][ T5668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.506762][ T5668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.537959][ T5668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.598161][ T5668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.917201][ T29] audit: type=1400 audit(1724963033.588:281): avc: denied { setopt } for pid=5965 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.250033][ T29] audit: type=1400 audit(1724963033.918:282): avc: denied { read } for pid=5970 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.417328][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.475599][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.617118][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.639999][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.769734][ T29] audit: type=1400 audit(1724963034.438:283): avc: denied { setopt } for pid=5975 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.015091][ T29] audit: type=1400 audit(1724963034.688:284): avc: denied { mounton } for pid=5979 comm="syz.1.256" path="/56/file0" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.219220][ T29] audit: type=1400 audit(1724963034.698:285): avc: denied { unmount } for pid=5233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 182.335168][ T5987] capability: warning: `syz.2.258' uses deprecated v2 capabilities in a way that may be insecure [ 182.394346][ T29] audit: type=1400 audit(1724963035.048:286): avc: denied { mounton } for pid=5981 comm="syz.0.257" path="/65/file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 182.632228][ T29] audit: type=1400 audit(1724963035.288:287): avc: denied { write } for pid=5985 comm="syz.2.258" name="route" dev="proc" ino=4026533336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 182.803289][ T29] audit: type=1400 audit(1724963035.308:288): avc: denied { watch watch_reads } for pid=5994 comm="syz.4.261" path="/1/file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.169656][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 183.444380][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 183.516600][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.585720][ T8] usb 4-1: config 0 descriptor?? [ 183.744183][ T6009] netlink: 566 bytes leftover after parsing attributes in process `syz.4.268'. [ 184.185948][ T8] apple 0003:05AC:022B.0005: unknown main item tag 0x0 [ 184.255470][ T8] apple 0003:05AC:022B.0005: unknown main item tag 0x0 [ 184.339273][ T8] apple 0003:05AC:022B.0005: unknown main item tag 0x0 [ 184.367945][ T8] apple 0003:05AC:022B.0005: unknown main item tag 0x0 [ 184.419875][ T8] apple 0003:05AC:022B.0005: unknown main item tag 0x0 [ 184.426784][ T8] apple 0003:05AC:022B.0005: unknown main item tag 0x0 [ 184.522222][ T8] apple 0003:05AC:022B.0005: unknown main item tag 0x0 [ 184.601885][ T8] apple 0003:05AC:022B.0005: hidraw0: USB HID v0.00 Device [HID 05ac:022b] on usb-dummy_hcd.3-1/input0 [ 184.737417][ T8] usb 4-1: USB disconnect, device number 4 [ 184.925297][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.986983][ T29] audit: type=1400 audit(1724963293.653:289): avc: denied { connect } for pid=6025 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.143648][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 185.164387][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 185.207396][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.297637][ T9] usb 2-1: config 0 descriptor?? [ 185.333648][ T9] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 185.368619][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 185.591094][ T6034] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 186.487083][ T9] gspca_sunplus: reg_w_riv err -71 [ 186.492434][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 186.526629][ T9] usb 2-1: USB disconnect, device number 7 [ 186.687486][ T5287] kernel write not supported for file /uinput (pid: 5287 comm: kworker/1:4) [ 187.216200][ T29] audit: type=1400 audit(1724963295.863:290): avc: denied { name_bind } for pid=6052 comm="syz.0.289" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 187.614945][ T29] audit: type=1400 audit(1724963296.283:291): avc: denied { read } for pid=6059 comm="syz.1.292" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 187.746366][ T29] audit: type=1400 audit(1724963296.313:292): avc: denied { open } for pid=6059 comm="syz.1.292" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 187.918114][ T29] audit: type=1400 audit(1724963296.333:293): avc: denied { ioctl } for pid=6059 comm="syz.1.292" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 188.028609][ T29] audit: type=1400 audit(1724963296.543:294): avc: denied { watch watch_reads } for pid=6063 comm="syz.2.291" path="/proc/152/net/unix" dev="proc" ino=4026533353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 188.149843][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 188.366682][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 188.419253][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 188.461800][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'. [ 188.462210][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 188.518163][ T29] audit: type=1400 audit(1724963297.183:295): avc: denied { read } for pid=6074 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.525826][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.664728][ T8] usb 4-1: config 0 descriptor?? [ 188.737244][ T8] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 189.868164][ T8] gspca_sonixj: reg_w1 err -71 [ 189.926514][ T8] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 189.993378][ T8] usb 4-1: USB disconnect, device number 5 [ 190.158501][ T29] audit: type=1400 audit(1724963298.823:296): avc: denied { wake_alarm } for pid=6097 comm="syz.1.306" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.596488][ T29] audit: type=1400 audit(1724963299.263:297): avc: denied { unmount } for pid=6106 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 190.639760][ T6105] netlink: 188 bytes leftover after parsing attributes in process `syz.4.309'. [ 190.748955][ T29] audit: type=1400 audit(1724963299.263:298): avc: denied { set_context_mgr } for pid=6110 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 192.115553][ T29] audit: type=1400 audit(1724963300.773:299): avc: denied { read } for pid=6139 comm="syz.3.325" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 192.161805][ T29] audit: type=1400 audit(1724963300.773:300): avc: denied { open } for pid=6139 comm="syz.3.325" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 192.217075][ T29] audit: type=1400 audit(1724963300.783:301): avc: denied { bind } for pid=6138 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.249451][ T29] audit: type=1400 audit(1724963300.783:302): avc: denied { node_bind } for pid=6138 comm="syz.0.326" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 192.656248][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.330'. [ 192.709066][ T6153] netlink: 'syz.1.330': attribute type 7 has an invalid length. [ 192.738012][ T6153] netlink: 'syz.1.330': attribute type 8 has an invalid length. [ 192.754345][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 192.840720][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 192.992697][ T5287] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 193.073231][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 193.128729][ T29] audit: type=1400 audit(1724963301.793:303): avc: denied { mount } for pid=6160 comm="syz.1.335" name="/" dev="ramfs" ino=10025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 193.144122][ T8] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 193.179074][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.231730][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.235138][ T8] usb 1-1: Product: syz [ 193.260026][ T8] usb 1-1: Manufacturer: syz [ 193.264758][ T8] usb 1-1: SerialNumber: syz [ 193.268690][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.293226][ T29] audit: type=1400 audit(1724963301.793:304): avc: denied { ioctl } for pid=6149 comm="syz.0.329" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.345896][ T8] usb 1-1: config 0 descriptor?? [ 193.400094][ T8] redrat3 1-1:0.0: Couldn't find all endpoints [ 193.404278][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.537945][ T5287] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.602510][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.681781][ T5287] usb 5-1: config 0 descriptor?? [ 194.094071][ T5273] usb 1-1: USB disconnect, device number 7 [ 194.179096][ T5287] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 194.300934][ T5287] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 194.683843][ T29] audit: type=1400 audit(1724963303.353:305): avc: denied { read write } for pid=6182 comm="syz.2.344" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.758670][ T5287] usb 5-1: USB disconnect, device number 4 [ 195.022200][ T5273] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 195.226022][ T1854] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 195.246595][ T5273] usb 3-1: Using ep0 maxpacket: 16 [ 195.255309][ T5273] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 195.286432][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.320593][ T5273] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 195.342628][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.367987][ T5273] usb 3-1: Product: syz [ 195.375231][ T5273] usb 3-1: Manufacturer: syz [ 195.385338][ T5273] usb 3-1: SerialNumber: syz [ 195.408133][ T5273] usb 3-1: config 0 descriptor?? [ 195.414112][ T1854] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.446009][ T5274] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 195.470575][ T1854] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.484297][ T5273] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 195.486364][ T1854] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.516065][ T1854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.539952][ T5273] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 195.546173][ T6187] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 195.578392][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 195.578433][ T29] audit: type=1400 audit(1724963304.243:308): avc: denied { remount } for pid=6194 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 195.596521][ T1854] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.662698][ T5274] usb 2-1: Using ep0 maxpacket: 16 [ 195.698669][ T5274] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 195.716772][ T29] audit: type=1400 audit(1724963304.373:309): avc: denied { rename } for pid=4656 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.747824][ T5274] usb 2-1: config 0 has no interface number 0 [ 195.747900][ T5274] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.748012][ T5274] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 195.755000][ T5274] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 195.859747][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 195.867883][ T5274] usb 2-1: Product: syz [ 195.895848][ T29] audit: type=1400 audit(1724963304.373:310): avc: denied { unlink } for pid=4656 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.966764][ T5274] usb 2-1: SerialNumber: syz [ 195.991172][ T5274] usb 2-1: config 0 descriptor?? [ 196.049635][ T5274] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 196.078547][ T29] audit: type=1400 audit(1724963304.383:311): avc: denied { create } for pid=4656 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.185962][ T5273] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 196.192912][ T5274] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input8 [ 196.209942][ T1854] usb 4-1: USB disconnect, device number 6 [ 196.225516][ T5273] em28xx 3-1:0.0: Config register raw data: 0x3d [ 196.250996][ T5273] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 196.257195][ T5273] em28xx 3-1:0.0: No AC97 audio processor [ 196.295314][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 196.525749][ T5273] usb 3-1: USB disconnect, device number 4 [ 196.859272][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.860469][ T9] usb 2-1: USB disconnect, device number 8 [ 196.866252][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 196.954969][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 197.234342][ T29] audit: type=1400 audit(1724963305.903:312): avc: denied { setopt } for pid=6207 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.513121][ T29] audit: type=1400 audit(1724963307.183:313): avc: denied { create } for pid=6232 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 198.546778][ T6236] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.639138][ T29] audit: type=1400 audit(1724963307.233:314): avc: denied { sqpoll } for pid=6234 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 198.735507][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 198.957751][ T29] audit: type=1400 audit(1724963307.623:315): avc: denied { create } for pid=6241 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.999442][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 199.007694][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 199.126391][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 199.179560][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.253561][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.309979][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.366446][ T9] usb 5-1: config 0 descriptor?? [ 199.404232][ T6231] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 199.757735][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.777705][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.838759][ T4674] udevd[4674]: worker [5236] terminated by signal 33 (Unknown signal 33) [ 199.855970][ T4674] udevd[4674]: worker [5236] failed while handling '/devices/virtual/block/loop2' [ 199.874697][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 199.938685][ T9] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 199.991817][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 200.175646][ T29] audit: type=1400 audit(1724963308.843:316): avc: denied { relabelfrom } for pid=6257 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 200.287698][ T29] audit: type=1400 audit(1724963308.843:317): avc: denied { relabelto } for pid=6257 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 200.318665][ T9] usb 5-1: USB disconnect, device number 5 [ 200.767964][ T29] audit: type=1400 audit(1724963309.433:318): avc: denied { setopt } for pid=6263 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.106870][ T29] audit: type=1400 audit(1724963309.763:319): avc: denied { create } for pid=6274 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 201.165184][ T6277] fuse: Unknown parameter 'rootmod0000000000000000000000000000000000000000' [ 201.215578][ T6275] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 201.234276][ T5239] Bluetooth: hci5: unexpected event 0x2f length: 763 > 260 [ 201.509527][ T5274] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 201.759270][ T5274] usb 5-1: Using ep0 maxpacket: 8 [ 201.793839][ T5274] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 201.849306][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.985874][ T5274] usb 5-1: config 0 descriptor?? [ 202.033473][ T5274] ums-jumpshot 5-1:0.0: USB Mass Storage device detected [ 202.161983][ T5274] ums-jumpshot 5-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 202.540580][ T5274] usb 5-1: USB disconnect, device number 6 [ 202.847209][ T29] audit: type=1400 audit(1724963311.513:320): avc: denied { mount } for pid=6310 comm="syz.0.395" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 203.352045][ T29] audit: type=1400 audit(1724963312.023:321): avc: denied { ioctl } for pid=6317 comm="syz.0.398" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11134 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 203.477815][ T29] audit: type=1400 audit(1724963312.093:322): avc: denied { bind } for pid=6321 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.659048][ T29] audit: type=1400 audit(1724963312.323:323): avc: denied { write } for pid=6325 comm="syz.2.401" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 203.785992][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 203.808650][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 203.816771][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 203.837747][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 203.845752][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 203.867265][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 203.874815][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 203.907364][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 203.967870][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.021919][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.035477][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.074901][ T5287] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 204.085634][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.142246][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.177314][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.188320][ T6335] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.404'. [ 204.202447][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.202483][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.202515][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.202546][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.202577][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.202608][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.202640][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.202686][ T47] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 204.255762][ T47] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 204.355476][ T5287] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 204.428414][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.491938][ T5287] usb 1-1: Product: syz [ 204.496148][ T5287] usb 1-1: Manufacturer: syz [ 204.528982][ T5287] usb 1-1: SerialNumber: syz [ 204.578534][ T6339] pimreg: entered allmulticast mode [ 204.605137][ T5287] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 204.757378][ T47] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 205.370755][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.411'. [ 205.388768][ T5273] usb 1-1: USB disconnect, device number 8 [ 205.938550][ T47] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 206.027658][ T47] ath9k_htc: Failed to initialize the device [ 206.098293][ T5273] usb 1-1: ath9k_htc: USB layer deinitialized [ 206.542509][ T5287] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 206.906341][ T5287] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 206.947289][ T5287] usb 4-1: config 1 has no interface number 0 [ 207.008157][ T5287] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.063680][ T5287] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 207.123147][ T5287] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 52, changing to 7 [ 207.158257][ T5287] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 9272, setting to 1024 [ 207.224845][ T5287] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.314610][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.354602][ T5287] usb 4-1: Product: syz [ 207.358848][ T5287] usb 4-1: Manufacturer: syz [ 207.394354][ T5287] usb 4-1: SerialNumber: syz [ 208.453288][ T5287] cdc_ncm 4-1:1.1: bind() failure [ 208.824124][ T9] usb 4-1: USB disconnect, device number 7 [ 209.275158][ T29] audit: type=1400 audit(1724963317.923:324): avc: denied { create } for pid=6423 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.401974][ T29] audit: type=1400 audit(1724963318.023:325): avc: denied { setopt } for pid=6423 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.577799][ T29] audit: type=1400 audit(1724963318.023:326): avc: denied { bind } for pid=6423 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.641462][ T29] audit: type=1400 audit(1724963318.053:327): avc: denied { read } for pid=6423 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.748543][ T29] audit: type=1400 audit(1724963318.093:328): avc: denied { search } for pid=4656 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.809855][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 209.934390][ T29] audit: type=1400 audit(1724963318.103:329): avc: denied { write } for pid=6423 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.015912][ T29] audit: type=1400 audit(1724963318.403:330): avc: denied { watch_mount } for pid=6430 comm="syz.0.443" path="/107" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 210.051312][ T29] audit: type=1400 audit(1724963318.643:331): avc: denied { bind } for pid=6433 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.610794][ T5273] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 210.728310][ T29] audit: type=1400 audit(1724963319.393:332): avc: denied { connect } for pid=6450 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 210.799361][ T5273] usb 4-1: Using ep0 maxpacket: 32 [ 210.988037][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.104680][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.131630][ T6458] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 211.149508][ T5273] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 211.168724][ T6458] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.454'. [ 211.189170][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.239303][ T5273] usb 4-1: config 0 descriptor?? [ 211.265338][ T6458] netlink: 1 bytes leftover after parsing attributes in process `syz.1.454'. [ 211.905340][ T5273] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 212.102869][ T5273] ft260 0003:0403:6030.0009: chip code: 5e81 abf2 [ 212.308086][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.318496][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.334870][ T5273] ft260 0003:0403:6030.0009: uart interface is not supported [ 212.355253][ T6479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.463'. [ 212.394842][ T6475] bridge0: entered allmulticast mode [ 212.454474][ T6477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'. [ 212.481938][ T6477] netlink: 'syz.1.464': attribute type 7 has an invalid length. [ 212.504855][ T6477] netlink: 'syz.1.464': attribute type 8 has an invalid length. [ 212.529246][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 212.594837][ T6477] gretap0: entered promiscuous mode [ 212.650985][ T6477] batadv_slave_1: entered promiscuous mode [ 213.307526][ T1854] usb 4-1: USB disconnect, device number 8 [ 213.488046][ T29] audit: type=1326 audit(1724963322.153:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6494 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0307b79ef9 code=0x7ffc0000 [ 213.582064][ T6489] veth1_macvtap: left promiscuous mode [ 213.891410][ T6498] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 213.938525][ T6498] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.473'. [ 214.038897][ T6498] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 214.518097][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 214.518119][ T29] audit: type=1400 audit(1724963323.183:337): avc: denied { watch } for pid=6499 comm="syz.0.474" path="/116" dev="tmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 214.565124][ T29] audit: type=1400 audit(1724963323.183:338): avc: denied { watch_sb } for pid=6499 comm="syz.0.474" path="/116" dev="tmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 214.751673][ T29] audit: type=1400 audit(1724963323.413:339): avc: denied { bind } for pid=6508 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.222651][ T29] audit: type=1400 audit(1724963323.883:340): avc: denied { mounton } for pid=6515 comm="syz.4.481" path="/proc/107" dev="proc" ino=11665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 215.718933][ T29] audit: type=1400 audit(1724963324.383:341): avc: denied { connect } for pid=6525 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.891388][ T29] audit: type=1400 audit(1724963324.493:342): avc: denied { bind } for pid=6525 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 216.327867][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.490'. [ 216.475752][ T29] audit: type=1400 audit(1724963325.133:343): avc: denied { setopt } for pid=6536 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 216.542903][ T5287] IPVS: starting estimator thread 0... [ 216.711295][ T6538] IPVS: using max 17 ests per chain, 40800 per kthread [ 216.967134][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.187853][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.448573][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.580495][ T5274] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 217.794194][ T5274] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 217.808701][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.836429][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.857960][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.927092][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.972376][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.038198][ T5274] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.071507][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.135418][ T5274] usb 3-1: config 0 descriptor?? [ 218.218335][ T6543] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 218.542082][ T5273] kernel write not supported for file /radio7 (pid: 5273 comm: kworker/0:3) [ 218.773648][ T5274] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 218.864445][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.893684][ T5274] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 218.922198][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.938065][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.954816][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.972720][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.981815][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.996433][ T5274] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 219.034953][ T5274] usb 3-1: USB disconnect, device number 5 [ 219.108005][ T12] bridge_slave_1: left allmulticast mode [ 219.164036][ T29] audit: type=1400 audit(1724963327.793:344): avc: denied { search } for pid=4888 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.206130][ T12] bridge_slave_1: left promiscuous mode [ 219.267652][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.286463][ T29] audit: type=1400 audit(1724963327.823:345): avc: denied { read } for pid=4888 comm="dhcpcd" name="n74" dev="tmpfs" ino=2983 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.353376][ T29] audit: type=1400 audit(1724963327.823:346): avc: denied { open } for pid=4888 comm="dhcpcd" path="/run/udev/data/n74" dev="tmpfs" ino=2983 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.727748][ T12] bridge_slave_0: left allmulticast mode [ 219.745329][ T12] bridge_slave_0: left promiscuous mode [ 219.775083][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.614635][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 220.614655][ T29] audit: type=1400 audit(1724963329.293:348): avc: denied { nlmsg_write } for pid=6579 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 221.105106][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.117106][ T5238] Bluetooth: hci0: command tx timeout [ 221.146474][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.174313][ T12] bond0 (unregistering): Released all slaves [ 221.898566][ T29] audit: type=1400 audit(1724963330.563:349): avc: denied { read } for pid=6605 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.027504][ T6601] tun0: tun_chr_ioctl cmd 1074025675 [ 222.032979][ T6601] tun0: persist enabled [ 222.063395][ T29] audit: type=1400 audit(1724963330.563:350): avc: denied { open } for pid=6605 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.167644][ T29] audit: type=1400 audit(1724963330.563:351): avc: denied { getattr } for pid=6605 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.167721][ T6603] tun0: tun_chr_ioctl cmd 1074025675 [ 222.307790][ T6603] tun0: persist disabled [ 222.316455][ T5238] Bluetooth: hci1: command 0x0406 tx timeout [ 222.330168][ T5238] Bluetooth: hci3: command 0x0406 tx timeout [ 222.336218][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 222.919461][ T6622] input: syz0 as /devices/virtual/input/input11 [ 222.965759][ T29] audit: type=1400 audit(1724963331.613:352): avc: denied { write } for pid=6599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.045765][ T29] audit: type=1400 audit(1724963331.623:353): avc: denied { add_name } for pid=6599 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.175334][ T29] audit: type=1400 audit(1724963331.623:354): avc: denied { create } for pid=6599 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.216290][ T5241] Bluetooth: hci0: command tx timeout [ 223.322873][ T29] audit: type=1400 audit(1724963331.623:355): avc: denied { write } for pid=6599 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3021 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.377887][ T29] audit: type=1400 audit(1724963331.623:356): avc: denied { append } for pid=6599 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3021 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.627677][ T29] audit: type=1400 audit(1724963332.283:357): avc: denied { remove_name } for pid=6630 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3021 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.064810][ T12] hsr_slave_0: left promiscuous mode [ 224.083161][ T12] hsr_slave_1: left promiscuous mode [ 224.106848][ T6642] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6642 comm=syz.4.528 [ 224.124070][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.195635][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.254380][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.290919][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.446921][ T12] veth1_macvtap: left promiscuous mode [ 224.447103][ T12] veth0_macvtap: left promiscuous mode [ 224.447461][ T12] veth1_vlan: left promiscuous mode [ 224.447668][ T12] veth0_vlan: left promiscuous mode [ 225.011710][ T1854] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 225.206679][ T1854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.228686][ T1854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.248518][ T1854] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.275907][ T5241] Bluetooth: hci0: command tx timeout [ 225.282350][ T1854] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.298971][ T1854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.318653][ T1854] usb 2-1: config 0 descriptor?? [ 225.853827][ T1854] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 225.934142][ T1854] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 226.358285][ T5274] usb 2-1: USB disconnect, device number 9 [ 226.592894][ T12] team0 (unregistering): Port device team_slave_1 removed [ 226.687549][ T12] team0 (unregistering): Port device team_slave_0 removed [ 227.226571][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 227.226590][ T29] audit: type=1400 audit(1724963335.893:362): avc: denied { setopt } for pid=6663 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.356573][ T5241] Bluetooth: hci0: command tx timeout [ 228.263396][ T6670] mkiss: ax0: crc mode is auto. [ 228.425646][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 228.875135][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 229.127422][ T29] audit: type=1326 audit(1724963337.793:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.2.547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0307b79ef9 code=0x0 [ 229.507089][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.537969][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.588341][ T6560] bridge_slave_0: entered allmulticast mode [ 229.616904][ T6560] bridge_slave_0: entered promiscuous mode [ 229.713271][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.735053][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.795131][ T6560] bridge_slave_1: entered allmulticast mode [ 229.878332][ T6560] bridge_slave_1: entered promiscuous mode [ 230.186273][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.294504][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.367813][ T6717] process 'syz.1.554' launched './file0' with NULL argv: empty string added [ 230.400862][ T29] audit: type=1400 audit(1724963339.073:364): avc: denied { execute_no_trans } for pid=6716 comm="syz.1.554" path="/122/file0" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.193307][ T6560] team0: Port device team_slave_0 added [ 231.337300][ T6560] team0: Port device team_slave_1 added [ 231.641094][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.684596][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.766684][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.857169][ T29] audit: type=1400 audit(1724963340.513:365): avc: denied { write } for pid=6743 comm="syz.4.565" path="socket:[13030]" dev="sockfs" ino=13030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 231.858688][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.960669][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.043624][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.490943][ T5287] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 232.546134][ T6560] hsr_slave_0: entered promiscuous mode [ 232.587443][ T6560] hsr_slave_1: entered promiscuous mode [ 232.747139][ T5287] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 232.783004][ T5287] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 232.836333][ T5287] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 232.864334][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.874465][ T5287] usb 4-1: Product: syz [ 232.878678][ T5287] usb 4-1: Manufacturer: syz [ 232.915625][ T5287] usb 4-1: SerialNumber: syz [ 232.987458][ T5287] usb 4-1: config 0 descriptor?? [ 233.022707][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 233.045332][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 233.416206][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 233.522964][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 233.608679][ T29] audit: type=1400 audit(1724963342.273:366): avc: denied { append } for pid=6775 comm="syz.1.576" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 234.427988][ T5287] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 234.479044][ T5287] usb 4-1: USB disconnect, device number 9 [ 234.671637][ T29] audit: type=1400 audit(1724963343.333:367): avc: denied { create } for pid=6792 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 234.787455][ T29] audit: type=1400 audit(1724963343.393:368): avc: denied { bind } for pid=6792 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 234.904687][ T29] audit: type=1400 audit(1724963343.503:369): avc: denied { ioctl } for pid=6793 comm="syz.4.583" path="socket:[13145]" dev="sockfs" ino=13145 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.934267][ T5273] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 235.041049][ T29] audit: type=1326 audit(1724963343.713:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.4.585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60f3b79ef9 code=0x0 [ 235.131681][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.143075][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.157692][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.196432][ T5273] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 235.206180][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.265410][ T5273] usb 2-1: config 0 descriptor?? [ 235.954257][ T5273] acrux 0003:1A34:0802.000C: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 235.988926][ T6560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.017906][ T5273] acrux 0003:1A34:0802.000C: no inputs found [ 236.026037][ T5273] acrux 0003:1A34:0802.000C: Failed to enable force feedback support, error: -19 [ 236.088982][ T6560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.104923][ T47] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 236.152101][ T5273] usb 2-1: USB disconnect, device number 10 [ 236.292388][ T6560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.328759][ T47] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 236.377920][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.397639][ T6560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.427009][ T47] usb 3-1: Product: syz [ 236.476986][ T47] usb 3-1: Manufacturer: syz [ 236.506933][ T47] usb 3-1: SerialNumber: syz [ 236.517149][ T47] usb 3-1: config 0 descriptor?? [ 236.573650][ T47] ch341 3-1:0.0: ch341-uart converter detected [ 236.775285][ T29] audit: type=1400 audit(1724963345.433:371): avc: denied { create } for pid=6824 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 236.894752][ T29] audit: type=1400 audit(1724963345.503:372): avc: denied { setopt } for pid=6824 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 236.995518][ T29] audit: type=1400 audit(1724963345.503:373): avc: denied { connect } for pid=6824 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.098491][ T29] audit: type=1400 audit(1724963345.503:374): avc: denied { write } for pid=6824 comm="syz.4.591" laddr=fe80::11 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.121048][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.215339][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.317135][ T29] audit: type=1400 audit(1724963345.503:375): avc: denied { read } for pid=6824 comm="syz.4.591" laddr=fe80::11 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.438513][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.531970][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.539292][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.691202][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.698483][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.738456][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 237.743515][ T47] ch341-uart ttyUSB0: failed to read break control: -71 [ 237.784251][ T47] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 237.868878][ T47] usb 3-1: USB disconnect, device number 6 [ 237.928080][ T47] ch341 3-1:0.0: device disconnected [ 238.109045][ T6560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.445785][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.708888][ T6560] veth0_vlan: entered promiscuous mode [ 239.794861][ T6560] veth1_vlan: entered promiscuous mode [ 240.148123][ T6560] veth0_macvtap: entered promiscuous mode [ 240.188460][ T6560] veth1_macvtap: entered promiscuous mode [ 240.337380][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.408577][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.495151][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.518437][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.564254][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.593905][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.636286][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.667434][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.775983][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.875973][ T6884] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.010182][ T5273] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 241.241682][ T5273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.252435][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.287377][ T5273] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.324929][ T5273] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 241.337928][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.337945][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.337967][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.337981][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.338001][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.338019][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.338039][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.355268][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.424249][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 241.424288][ T5273] usb 4-1: SerialNumber: syz [ 241.506482][ T6890] Bluetooth: MGMT ver 1.23 [ 241.557252][ T6560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.573716][ T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 241.693884][ T6560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.731256][ T5273] usb 4-1: 0:2 : does not exist [ 241.736323][ T6560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.767999][ T5273] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 241.781832][ T6560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.801077][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 241.836302][ T47] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 241.877552][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.933606][ T5273] usb 4-1: USB disconnect, device number 10 [ 241.942728][ T47] usb 5-1: Product: syz [ 241.946928][ T47] usb 5-1: Manufacturer: syz [ 241.986298][ T47] usb 5-1: SerialNumber: syz [ 242.008155][ T47] usb 5-1: config 0 descriptor?? [ 242.028429][ T29] audit: type=1400 audit(1724963350.693:376): avc: denied { write } for pid=6894 comm="syz.2.610" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.050984][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.155476][ T47] gspca_main: sq905-2.14.0 probing 2770:9120 [ 242.340819][ T5347] udevd[5347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.747869][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.801475][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.141942][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.237093][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.275758][ T47] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 243.346738][ T47] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 243.437378][ T47] usb 5-1: USB disconnect, device number 7 [ 244.054692][ T6917] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 244.931237][ T1106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.268725][ T1106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.732075][ T1106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.274273][ T1106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.435141][ T6915] netlink: 'syz.3.615': attribute type 4 has an invalid length. [ 246.478226][ T6915] netlink: 17 bytes leftover after parsing attributes in process `syz.3.615'. [ 247.589220][ T5274] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 247.635128][ T1106] bridge_slave_1: left allmulticast mode [ 247.647367][ T1106] bridge_slave_1: left promiscuous mode [ 247.654349][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.786365][ T1106] bridge_slave_0: left allmulticast mode [ 247.798896][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.811699][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 247.817496][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.828641][ T5274] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 247.828683][ T5274] usb 3-1: config 179 has no interface number 0 [ 247.828763][ T5274] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 247.828811][ T5274] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 247.828859][ T5274] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 247.828906][ T5274] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 247.828952][ T5274] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 247.829032][ T5274] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 247.829069][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.845942][ T6961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.884637][ T1106] bridge_slave_0: left promiscuous mode [ 247.974445][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.005766][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.018112][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.047926][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.076255][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.415224][ T47] usb 3-1: USB disconnect, device number 7 [ 248.415264][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 248.429521][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 248.471257][ T1176] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12 [ 248.626075][ T47] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 249.335396][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.377457][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.405503][ T1106] bond0 (unregistering): Released all slaves [ 250.166836][ T6985] netlink: 'syz.4.635': attribute type 6 has an invalid length. [ 250.194340][ T6985] netlink: 'syz.4.635': attribute type 8 has an invalid length. [ 250.311793][ T5241] Bluetooth: hci0: command tx timeout [ 251.355086][ T1106] hsr_slave_0: left promiscuous mode [ 251.407717][ T29] audit: type=1400 audit(1724963360.073:377): avc: denied { bind } for pid=7017 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 251.457871][ T1106] hsr_slave_1: left promiscuous mode [ 251.547783][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.566237][ T29] audit: type=1400 audit(1724963360.073:378): avc: denied { name_bind } for pid=7017 comm="syz.2.644" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 251.612562][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.726163][ T29] audit: type=1400 audit(1724963360.073:379): avc: denied { node_bind } for pid=7017 comm="syz.2.644" saddr=::1 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 251.756663][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.794792][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.986461][ T1106] veth1_macvtap: left promiscuous mode [ 252.004386][ T1106] veth0_macvtap: left promiscuous mode [ 252.035840][ T1106] veth1_vlan: left promiscuous mode [ 252.063292][ T1106] veth0_vlan: left promiscuous mode [ 252.393839][ T5241] Bluetooth: hci0: command 0x041b tx timeout [ 253.301824][ T29] audit: type=1400 audit(1724963361.973:380): avc: denied { write } for pid=7034 comm="syz.4.649" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 253.557987][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 253.623044][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 254.470616][ T5239] Bluetooth: hci0: command 0x041b tx timeout [ 255.101904][ T8] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 255.189303][ T8] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 255.242302][ T8] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 255.322209][ T8] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 255.367088][ T8] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 255.394279][ T8] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 255.458451][ T6966] chnl_net:caif_netlink_parms(): no params data found [ 255.480058][ T8] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 255.524820][ T8] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.02 Device [syz0] on syz1 [ 255.713438][ T29] audit: type=1400 audit(1724963364.353:381): avc: denied { mounton } for pid=7063 comm="syz.1.659" path="/proc/351/cgroup" dev="proc" ino=15025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 255.736140][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.749900][ T7064] ======================================================= [ 255.749900][ T7064] WARNING: The mand mount option has been deprecated and [ 255.749900][ T7064] and is ignored by this kernel. Remove the mand [ 255.749900][ T7064] option from the mount to silence this warning. [ 255.749900][ T7064] ======================================================= [ 255.784752][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.838398][ T29] audit: type=1400 audit(1724963364.423:382): avc: denied { remount } for pid=7063 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 256.555943][ T5239] Bluetooth: hci0: command 0x041b tx timeout [ 256.660847][ T29] audit: type=1400 audit(1724963365.323:383): avc: denied { write } for pid=7079 comm="syz.4.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 256.743195][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.778628][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.869056][ T6966] bridge_slave_0: entered allmulticast mode [ 256.886475][ T6966] bridge_slave_0: entered promiscuous mode [ 256.928130][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.944823][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.956648][ T6966] bridge_slave_1: entered allmulticast mode [ 256.968594][ T6966] bridge_slave_1: entered promiscuous mode [ 257.403827][ T6966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.487912][ T6966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.797741][ T6966] team0: Port device team_slave_0 added [ 257.986983][ T6966] team0: Port device team_slave_1 added [ 258.278077][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.325066][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.437837][ T6966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.502830][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.550773][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.593128][ T6966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.631143][ T5239] Bluetooth: hci0: command 0x041b tx timeout [ 258.700313][ T7122] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.678'. [ 258.811469][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 258.950630][ T7128] Bluetooth: MGMT ver 1.23 [ 258.992009][ T6966] hsr_slave_0: entered promiscuous mode [ 259.009764][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 259.017552][ T25] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 259.037701][ T6966] hsr_slave_1: entered promiscuous mode [ 259.056819][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.137822][ T25] usb 5-1: config 0 descriptor?? [ 259.201927][ T25] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 259.319938][ T7125] syz.3.679 (7125) used greatest stack depth: 21344 bytes left [ 260.251993][ T8] usb 5-1: USB disconnect, device number 8 [ 261.197897][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.209078][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.388592][ T7173] loop0: detected capacity change from 0 to 7 [ 261.463952][ T7173] Dev loop0: unable to read RDB block 7 [ 261.494330][ T7173] loop0: AHDI p2 p3 [ 261.523594][ T7173] loop0: partition table partially beyond EOD, truncated [ 261.585701][ T7173] loop0: p2 start 341296255 is beyond EOD, truncated [ 262.520657][ T6966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.618813][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 262.650888][ T6966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.768344][ T6966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.888349][ T6966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.905932][ T29] audit: type=1400 audit(1724963371.567:384): avc: denied { create } for pid=7195 comm="syz.1.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 263.047434][ T7198] __vm_enough_memory: pid: 7198, comm: syz.4.701, bytes: 549112520704 not enough memory for the allocation [ 263.128761][ T7202] 9pnet_fd: Insufficient options for proto=fd [ 263.178680][ T7203] tipc: Started in network mode [ 263.263490][ T7203] tipc: Node identity 7f000001, cluster identity 4711 [ 263.296481][ T7203] tipc: Enabled bearer , priority 10 [ 263.678619][ T7215] Illegal XDP return value 1141088312 on prog (id 77) dev N/A, expect packet loss! [ 263.914405][ T6966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.939153][ T29] audit: type=1400 audit(1724963372.597:385): avc: denied { mount } for pid=7218 comm="syz.3.708" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 264.048417][ T6966] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.134719][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.141959][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.253161][ T29] audit: type=1400 audit(1724963372.927:386): avc: denied { unmount } for pid=5225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 264.307309][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.314590][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.414970][ T25] tipc: Node number set to 2130706433 [ 264.936764][ T7241] Cannot find set identified by id 0 to match [ 265.534440][ T29] audit: type=1400 audit(1724963374.187:387): avc: denied { unmount } for pid=5668 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 265.727374][ T29] audit: type=1400 audit(1724963374.397:388): avc: denied { read } for pid=7252 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.903960][ T7258] netlink: 'syz.1.719': attribute type 2 has an invalid length. [ 265.954017][ T7258] netlink: 244 bytes leftover after parsing attributes in process `syz.1.719'. [ 266.264465][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.846441][ T6966] veth0_vlan: entered promiscuous mode [ 266.847421][ T29] audit: type=1400 audit(1724963375.517:389): avc: denied { execute } for pid=7269 comm="syz.1.724" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 266.996970][ T6966] veth1_vlan: entered promiscuous mode [ 267.473025][ T6966] veth0_macvtap: entered promiscuous mode [ 267.553005][ T6966] veth1_macvtap: entered promiscuous mode [ 267.680413][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.713780][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.764743][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.805690][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.879250][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.933452][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.966149][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.995192][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.032218][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.166834][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.234890][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.274689][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.301628][ T29] audit: type=1400 audit(1724963376.977:390): avc: denied { execute } for pid=7290 comm="syz.4.730" path="/dev/dsp" dev="devtmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 268.341836][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.383848][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.407475][ T7293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.474455][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.552915][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.613858][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.643817][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.665851][ T6966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.721875][ T6966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.746158][ T6966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.770092][ T6966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.712051][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.796523][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.018591][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 270.026245][ T7321] netlink: 'syz.2.739': attribute type 2 has an invalid length. [ 270.075236][ T7321] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.739'. [ 270.144119][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.158713][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.785087][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 270.835948][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 270.884726][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 270.906087][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 270.917857][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 270.941791][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.027710][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.061237][ T5274] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 271.101673][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.138946][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.190330][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.235930][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.257121][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.266421][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.292318][ T5274] usb 2-1: config 0 has no interfaces? [ 271.296286][ T7341] netlink: 156 bytes leftover after parsing attributes in process `syz.2.746'. [ 271.298815][ T5274] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 271.328169][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.357056][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.370670][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.388381][ T7341] netlink: 'syz.2.746': attribute type 2 has an invalid length. [ 271.405629][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.418058][ T5274] usb 2-1: config 0 descriptor?? [ 271.453721][ T7341] netlink: 60 bytes leftover after parsing attributes in process `syz.2.746'. [ 271.455258][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.514583][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.522150][ T5273] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 271.533794][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.563336][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.589390][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.596827][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.699166][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.706603][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.770769][ T5273] usb 4-1: Using ep0 maxpacket: 8 [ 271.786783][ T5273] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.801720][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.821636][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.831701][ T5273] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.893937][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.916167][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.939172][ T5273] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.963166][ T25] usb 2-1: USB disconnect, device number 11 [ 271.966343][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 271.996967][ T5273] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.044429][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 272.081226][ T5273] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.097454][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 272.153941][ T8] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 272.168114][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.246797][ T8] hid-generic 0000:04AD:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 272.441370][ T5273] usb 4-1: GET_CAPABILITIES returned 0 [ 272.447054][ T5273] usbtmc 4-1:16.0: can't read capabilities [ 272.538622][ T1106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.734277][ T8] usb 4-1: USB disconnect, device number 11 [ 273.127092][ T1106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.496097][ T1106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.979043][ T29] audit: type=1400 audit(1724963382.647:391): avc: denied { create } for pid=7369 comm="syz.4.754" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 274.117179][ T29] audit: type=1400 audit(1724963382.657:392): avc: denied { setattr } for pid=7369 comm="syz.4.754" name="bus" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 274.164172][ T1106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.293250][ T29] audit: type=1400 audit(1724963382.817:393): avc: denied { unlink } for pid=5668 comm="syz-executor" name="bus" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 275.158520][ T1106] bridge_slave_1: left allmulticast mode [ 275.186240][ T1106] bridge_slave_1: left promiscuous mode [ 275.205543][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.206749][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.248204][ T1106] bridge_slave_0: left allmulticast mode [ 275.266346][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.293759][ T1106] bridge_slave_0: left promiscuous mode [ 275.296994][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.354742][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.367589][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.415922][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.449001][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.674069][ T29] audit: type=1400 audit(1724963384.347:394): avc: denied { read } for pid=7395 comm="syz.3.763" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 275.738277][ T7398] 9pnet_fd: Insufficient options for proto=fd [ 275.784020][ T29] audit: type=1400 audit(1724963384.377:395): avc: denied { open } for pid=7395 comm="syz.3.763" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 275.851130][ T29] audit: type=1400 audit(1724963384.427:396): avc: denied { bind } for pid=7392 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 275.916898][ T29] audit: type=1400 audit(1724963384.437:397): avc: denied { getopt } for pid=7392 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.491143][ T7413] [U]   [ 276.532498][ T7413] [U] [ 276.535865][ T7413] [U] [ 276.538914][ T7413] [U] [ 276.724084][ T7413] [U] [ 276.727750][ T7413] [U] [ 276.730506][ T7413] [U] [ 276.733257][ T7413] [U] [ 276.754696][ T7413] [U] [ 276.757456][ T7413] [U] [ 276.760210][ T7413] [U] [ 276.784166][ T7413] [U] [ 276.805962][ T7411] [U] [ 277.295678][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 277.474880][ T29] audit: type=1400 audit(1724963386.137:398): avc: denied { read append } for pid=7427 comm="syz.1.775" name="btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 277.516618][ T5239] Bluetooth: hci0: command tx timeout [ 277.549017][ T29] audit: type=1400 audit(1724963386.137:399): avc: denied { open } for pid=7427 comm="syz.1.775" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 277.584937][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 277.606180][ T25] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 277.627789][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.646952][ T29] audit: type=1400 audit(1724963386.267:400): avc: denied { ioctl } for pid=7427 comm="syz.1.775" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 ioctlcmd=0x5004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 277.672438][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.698352][ T25] usb 5-1: config 0 descriptor?? [ 278.056760][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.088905][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.117951][ T1106] bond0 (unregistering): Released all slaves [ 278.776589][ T25] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 278.836307][ T25] asix 5-1:0.0: probe with driver asix failed with error -71 [ 278.839435][ T1176] kernel write not supported for file /adsp1 (pid: 1176 comm: kworker/0:2) [ 278.955040][ T25] usb 5-1: USB disconnect, device number 9 [ 279.597270][ T5239] Bluetooth: hci0: command tx timeout [ 279.630611][ T29] audit: type=1400 audit(1724963388.287:401): avc: denied { write } for pid=7437 comm="syz.1.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 279.649749][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.695326][ T1106] hsr_slave_0: left promiscuous mode [ 279.774852][ T1106] hsr_slave_1: left promiscuous mode [ 279.861112][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.868594][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.953240][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.004919][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.277388][ T1106] veth1_macvtap: left promiscuous mode [ 280.347585][ T1106] veth0_macvtap: left promiscuous mode [ 280.406655][ T1106] veth1_vlan: left promiscuous mode [ 280.425862][ T1106] veth0_vlan: left promiscuous mode [ 280.726604][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 280.912059][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 281.088880][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.152520][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 281.196167][ T25] usb 3-1: can't read configurations, error -71 [ 281.256630][ T29] audit: type=1400 audit(1724963389.927:402): avc: denied { append } for pid=7464 comm="syz.3.785" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 281.672822][ T5239] Bluetooth: hci0: command tx timeout [ 281.706079][ T7473] input: syz1 as /devices/virtual/input/input13 [ 282.719801][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 282.777764][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 283.457521][ T7452] netlink: 'syz.1.781': attribute type 3 has an invalid length. [ 283.473094][ T7452] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.781'. [ 283.563614][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.790'. [ 283.751456][ T5239] Bluetooth: hci0: command tx timeout [ 283.854425][ T7492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.936777][ T7494] loop0: detected capacity change from 0 to 2 [ 284.612914][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.901946][ T29] audit: type=1400 audit(1724963393.507:403): avc: denied { map } for pid=7512 comm="syz.3.802" path="/dev/video3" dev="devtmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 285.221679][ T7384] chnl_net:caif_netlink_parms(): no params data found [ 285.692200][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:1) [ 286.058726][ T7540] team0: entered promiscuous mode [ 286.079209][ T7540] team_slave_0: entered promiscuous mode [ 286.142127][ T7540] team_slave_1: entered promiscuous mode [ 286.211558][ T7535] team0: left promiscuous mode [ 286.258883][ T7535] team_slave_0: left promiscuous mode [ 286.298736][ T7535] team_slave_1: left promiscuous mode [ 286.366784][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.436604][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.488556][ T7384] bridge_slave_0: entered allmulticast mode [ 286.547443][ T7384] bridge_slave_0: entered promiscuous mode [ 286.626642][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.667549][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.728209][ T7384] bridge_slave_1: entered allmulticast mode [ 286.797185][ T7384] bridge_slave_1: entered promiscuous mode [ 287.267321][ T7384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.383652][ T7384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.897271][ T7384] team0: Port device team_slave_0 added [ 287.909007][ T7384] team0: Port device team_slave_1 added [ 288.452284][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.485880][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.551330][ T7384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.584985][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.598769][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.674176][ T7384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.155659][ T7384] hsr_slave_0: entered promiscuous mode [ 289.257284][ T7384] hsr_slave_1: entered promiscuous mode [ 290.046083][ T7602] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 290.915390][ T29] audit: type=1400 audit(1724963399.577:404): avc: denied { create } for pid=7616 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 291.119027][ T29] audit: type=1400 audit(1724963399.607:405): avc: denied { write } for pid=7616 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 291.470435][ T1854] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 291.678821][ T1854] usb 4-1: Using ep0 maxpacket: 8 [ 291.688542][ T1854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.726339][ T1854] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.750990][ T1854] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 291.824140][ T1854] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.858704][ T1854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.894201][ T1854] usb 4-1: Product: syz [ 291.898459][ T1854] usb 4-1: Manufacturer: syz [ 291.926711][ T1854] usb 4-1: SerialNumber: syz [ 292.917833][ T29] audit: type=1400 audit(1724963401.587:406): avc: denied { connect } for pid=7646 comm="syz.2.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 293.158165][ T1854] cdc_ncm 4-1:1.0: bind() failure [ 293.178204][ T1854] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 293.188955][ T7384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.242699][ T7384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.242737][ T1854] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 293.287807][ T7384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.369955][ T7384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.395520][ T1854] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 293.427540][ T1854] usb 4-1: USB disconnect, device number 12 [ 294.155037][ T7384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.214391][ T7664] bond_slave_0: entered promiscuous mode [ 294.220701][ T7664] bond_slave_1: entered promiscuous mode [ 294.347052][ T7664] bond_slave_0: left promiscuous mode [ 294.395562][ T7664] bond_slave_1: left promiscuous mode [ 295.543939][ T7664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.685865][ T7664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.777321][ T7664] bond0 (unregistering): Released all slaves [ 296.327969][ T7384] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.358419][ T29] audit: type=1400 audit(1724963405.027:407): avc: denied { read } for pid=7689 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.374559][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.385001][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.699132][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.706429][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.747528][ T7695] sock: sock_set_timeout: `syz.1.858' (pid 7695) tries to set negative timeout [ 297.118719][ T7384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.228481][ T7384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.425218][ T29] audit: type=1400 audit(1724963406.097:408): avc: denied { create } for pid=7707 comm="syz.1.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 297.608917][ T29] audit: type=1400 audit(1724963406.277:409): avc: denied { bind } for pid=7707 comm="syz.1.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 298.575406][ T7384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.944502][ T7384] veth0_vlan: entered promiscuous mode [ 299.123838][ T7384] veth1_vlan: entered promiscuous mode [ 299.509723][ T29] audit: type=1400 audit(1724963408.177:410): avc: denied { create } for pid=7734 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.611528][ T7384] veth0_macvtap: entered promiscuous mode [ 299.630735][ T29] audit: type=1400 audit(1724963408.187:411): avc: denied { connect } for pid=7734 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.828672][ T29] audit: type=1400 audit(1724963408.187:412): avc: denied { bind } for pid=7734 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.869012][ T7384] veth1_macvtap: entered promiscuous mode [ 300.015894][ T29] audit: type=1400 audit(1724963408.187:413): avc: denied { write } for pid=7734 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.169187][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.216469][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.305154][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.365098][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.414595][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.488284][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.528705][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.578909][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.675547][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.798788][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.895932][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.968864][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.048998][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.127813][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.197047][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.224347][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.237162][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.386137][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.675276][ T7775] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 301.675486][ T7774] IPVS: stopping master sync thread 7775 ... [ 301.704940][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.878'. [ 301.774481][ T7384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.817507][ T7384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.897153][ T7384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.909037][ T7384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.481706][ T1854] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 302.684843][ T1854] usb 4-1: Using ep0 maxpacket: 8 [ 302.715494][ T1854] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.728475][ T1854] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.761887][ T1854] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 302.783075][ T1854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.933263][ T1854] usb 4-1: config 0 descriptor?? [ 303.388254][ T29] audit: type=1400 audit(1724963412.057:414): avc: denied { read } for pid=7798 comm="syz.4.886" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 303.498226][ T8] usb 4-1: USB disconnect, device number 13 [ 303.541022][ T29] audit: type=1400 audit(1724963412.057:415): avc: denied { open } for pid=7798 comm="syz.4.886" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 303.608619][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.706022][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.895260][ T2563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.978776][ T2563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.906293][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 305.123235][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 305.200798][ T8] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice= c.b2 [ 305.247485][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.305677][ T8] usb 2-1: Product: syz [ 305.310042][ T8] usb 2-1: Manufacturer: syz [ 305.314799][ T8] usb 2-1: SerialNumber: syz [ 305.446843][ T8] usb 2-1: config 0 descriptor?? [ 305.548816][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 305.558491][ T5287] kernel write not supported for file /uhid (pid: 5287 comm: kworker/1:4) [ 305.724893][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.013074][ T8] gspca_zc3xx: reg_r err -71 [ 306.017866][ T8] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 306.113735][ T8] usb 2-1: USB disconnect, device number 12 [ 306.202264][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.386531][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.548917][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.934399][ T29] audit: type=1400 audit(1724963415.607:416): avc: denied { read } for pid=7847 comm="syz.3.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 307.518067][ T12] bridge_slave_1: left allmulticast mode [ 307.545921][ T12] bridge_slave_1: left promiscuous mode [ 307.630064][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.725862][ T12] bridge_slave_0: left allmulticast mode [ 307.755105][ T12] bridge_slave_0: left promiscuous mode [ 307.787686][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.313824][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.343562][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.375368][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.445841][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.475628][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 309.497222][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.899004][ T29] audit: type=1400 audit(1724963419.567:417): avc: denied { getopt } for pid=7915 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 311.120149][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.177637][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.228940][ T12] bond0 (unregistering): Released all slaves [ 311.605061][ T29] audit: type=1400 audit(1724963420.277:418): avc: denied { map } for pid=7930 comm="syz.4.925" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 311.687729][ T5241] Bluetooth: hci0: command tx timeout [ 312.356334][ T29] audit: type=1400 audit(1724963421.027:419): avc: denied { write } for pid=7944 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 312.968174][ T12] hsr_slave_0: left promiscuous mode [ 313.007157][ T12] hsr_slave_1: left promiscuous mode [ 313.114298][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.154326][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.218658][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.267429][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.934'. [ 313.277299][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.451584][ T12] veth1_macvtap: left promiscuous mode [ 313.474171][ T12] veth0_macvtap: left promiscuous mode [ 313.514187][ T12] veth1_vlan: left promiscuous mode [ 313.547437][ T12] veth0_vlan: left promiscuous mode [ 313.759474][ T5241] Bluetooth: hci0: command tx timeout [ 314.634371][ T29] audit: type=1400 audit(1724963423.307:420): avc: denied { execstack } for pid=7987 comm="syz.4.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 315.278499][ T12] team0 (unregistering): Port device team_slave_1 removed [ 315.353344][ T12] team0 (unregistering): Port device team_slave_0 removed [ 315.847009][ T5241] Bluetooth: hci0: command tx timeout [ 316.869252][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 317.227997][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 317.424738][ T5287] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 317.534141][ T5241] block nbd1: Receive control failed (result -107) [ 317.614883][ T5287] usb 3-1: Using ep0 maxpacket: 8 [ 317.674761][ T8019] nbd1: detected capacity change from 0 to 15960 [ 317.676035][ T5287] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 317.676081][ T5287] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 317.676159][ T5287] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.676237][ T5287] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.676281][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.778358][ T5481] block nbd1: shutting down sockets [ 317.818967][ T5287] usbtmc 3-1:16.0: bulk endpoints not found [ 317.909253][ T5241] Bluetooth: hci0: command tx timeout [ 318.166457][ T5287] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 318.166506][ T5287] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 318.166545][ T5287] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 318.166584][ T5287] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 318.193138][ T5287] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 318.440688][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 318.652169][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.683541][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.706610][ T25] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.718668][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.720290][ T7884] bridge_slave_0: entered allmulticast mode [ 318.816515][ T25] usb 2-1: Product: syz [ 318.834648][ T7884] bridge_slave_0: entered promiscuous mode [ 318.848523][ T25] usb 2-1: Manufacturer: syz [ 318.891511][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.896474][ T25] usb 2-1: SerialNumber: syz [ 318.943635][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.973532][ T7884] bridge_slave_1: entered allmulticast mode [ 319.027557][ T25] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 319.036044][ T7884] bridge_slave_1: entered promiscuous mode [ 319.095843][ T5287] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 320.188329][ T8] usb 3-1: USB disconnect, device number 10 [ 322.664499][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.670993][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.681808][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2634 jiffies s: 10717 root: 0x2/. [ 345.741538][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 345.756189][ T19] Sending NMI from CPU 0 to CPUs 1: [ 345.762920][ C1] NMI backtrace for cpu 1 [ 345.762947][ C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 345.762975][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 345.762990][ C1] Workqueue: usb_hub_wq hub_event [ 345.763014][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 345.763056][ C1] Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 04 1b 78 7e 65 8b 05 05 1b 78 7e a9 00 01 [ 345.763079][ C1] RSP: 0018:ffffc90000a17fc0 EFLAGS: 00000002 [ 345.763096][ C1] RAX: 0000000000010103 RBX: ffffc90000a18048 RCX: ffffc90000a1807c [ 345.763112][ C1] RDX: ffff8880182b1e00 RSI: 0000000000000000 RDI: 0000000000000001 [ 345.763144][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 345.763159][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff90b1b14a [ 345.763174][ C1] R13: ffffc900001f74b0 R14: ffffffff90b1b14e R15: 0000000000000001 [ 345.763190][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 345.763213][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.763230][ C1] CR2: 000000110c2fd3b8 CR3: 000000004cbac000 CR4: 00000000003506f0 [ 345.763246][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 345.763260][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 345.763276][ C1] Call Trace: [ 345.763283][ C1] [ 345.763291][ C1] ? show_regs+0x8c/0xa0 [ 345.763332][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 345.763384][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 345.763451][ C1] ? nmi_handle+0x1a9/0x5c0 [ 345.763477][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 345.763520][ C1] ? default_do_nmi+0x6a/0x160 [ 345.763563][ C1] ? exc_nmi+0x170/0x1e0 [ 345.763603][ C1] ? end_repeat_nmi+0xf/0x53 [ 345.763635][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 345.763679][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 345.763724][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 345.763767][ C1] [ 345.763775][ C1] [ 345.763782][ C1] unwind_next_frame+0xdb9/0x23a0 [ 345.763811][ C1] ? kmem_cache_free+0x12f/0x3a0 [ 345.763852][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 345.763888][ C1] arch_stack_walk+0x100/0x170 [ 345.763921][ C1] ? kmem_cache_free+0x12f/0x3a0 [ 345.763962][ C1] stack_trace_save+0x95/0xd0 [ 345.763995][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 345.764029][ C1] ? hlock_class+0x4e/0x130 [ 345.764058][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 345.764099][ C1] kasan_save_stack+0x33/0x60 [ 345.764138][ C1] ? kasan_save_stack+0x33/0x60 [ 345.764176][ C1] ? kasan_save_track+0x14/0x30 [ 345.764214][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 345.764251][ C1] ? dummy_urb_enqueue+0x8d/0x8a0 [ 345.764281][ C1] ? usb_hcd_submit_urb+0x2d1/0x2090 [ 345.764313][ C1] ? usb_submit_urb+0x87c/0x1730 [ 345.764348][ C1] ? ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 345.764387][ C1] ? __usb_hcd_giveback_urb+0x389/0x6e0 [ 345.764422][ C1] ? usb_hcd_giveback_urb+0x396/0x450 [ 345.764452][ C1] ? dummy_timer+0x17c3/0x38d0 [ 345.764481][ C1] ? __hrtimer_run_queues+0x20c/0xcc0 [ 345.764508][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 345.764536][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 345.764563][ C1] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 345.764604][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.764645][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 345.764696][ C1] ? pie_calculate_probability+0x214/0x850 [ 345.764733][ C1] ? fq_pie_timer+0x215/0x5a0 [ 345.764768][ C1] ? call_timer_fn+0x1a0/0x610 [ 345.764800][ C1] ? __run_timers+0x74b/0xaf0 [ 345.764833][ C1] ? run_timer_base+0x111/0x190 [ 345.764865][ C1] ? run_timer_softirq+0x1a/0x40 [ 345.764899][ C1] ? handle_softirqs+0x216/0x8f0 [ 345.764923][ C1] ? irq_exit_rcu+0xbb/0x120 [ 345.764947][ C1] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 345.764974][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.765011][ C1] ? unwind_next_frame+0x1b4b/0x23a0 [ 345.765033][ C1] ? __unwind_start+0x5aa/0x880 [ 345.765055][ C1] ? arch_stack_walk+0xb2/0x170 [ 345.765079][ C1] ? stack_trace_save+0x95/0xd0 [ 345.765107][ C1] ? kasan_save_stack+0x33/0x60 [ 345.765140][ C1] ? kasan_save_track+0x14/0x30 [ 345.765174][ C1] ? kasan_save_free_info+0x3b/0x60 [ 345.765203][ C1] ? poison_slab_object+0xf7/0x160 [ 345.765236][ C1] ? __kasan_slab_free+0x32/0x50 [ 345.765271][ C1] ? kmem_cache_free+0x12f/0x3a0 [ 345.765318][ C1] kasan_save_track+0x14/0x30 [ 345.765353][ C1] __kasan_kmalloc+0xaa/0xb0 [ 345.765388][ C1] dummy_urb_enqueue+0x8d/0x8a0 [ 345.765420][ C1] ? usb_hcd_map_urb_for_dma+0x39e/0x1190 [ 345.765454][ C1] usb_hcd_submit_urb+0x2d1/0x2090 [ 345.765488][ C1] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 345.765526][ C1] ? lock_acquire+0x1b1/0x560 [ 345.765561][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 345.765593][ C1] ? find_held_lock+0x2d/0x110 [ 345.765620][ C1] ? ath9k_hif_usb_reg_in_cb+0x487/0x690 [ 345.765657][ C1] usb_submit_urb+0x87c/0x1730 [ 345.765691][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 345.765716][ C1] ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 345.765753][ C1] __usb_hcd_giveback_urb+0x389/0x6e0 [ 345.765782][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 345.765812][ C1] dummy_timer+0x17c3/0x38d0 [ 345.765840][ C1] ? debug_object_deactivate+0x1f0/0x370 [ 345.765876][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 345.765914][ C1] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 345.765939][ C1] ? __pfx_lock_release+0x10/0x10 [ 345.765973][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 345.766017][ C1] ? timerqueue_del+0x83/0x150 [ 345.766047][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 345.766073][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 345.766105][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 345.766132][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 345.766173][ C1] hrtimer_interrupt+0x31b/0x800 [ 345.766208][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 345.766234][ C1] sysvec_apic_timer_interrupt+0x43/0xb0 [ 345.766262][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.766300][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 345.766340][ C1] Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 04 1b 78 7e 65 8b 05 05 1b 78 7e a9 00 01 [ 345.766362][ C1] RSP: 0018:ffffc90000a18b78 EFLAGS: 00000202 [ 345.766380][ C1] RAX: 0019999999999998 RBX: ffff88807aa68ea0 RCX: ffffffff8924313c [ 345.766400][ C1] RDX: ffff8880182b1e00 RSI: 0019999999999998 RDI: 0000000000000007 [ 345.766415][ C1] RBP: ffff88802f8fcb00 R08: 0000000000000007 R09: 0019999999999998 [ 345.766430][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000015798ee228 [ 345.766445][ C1] R13: 0000000000000000 R14: 0000000225c17d04 R15: 0000000000000000 [ 345.766465][ C1] ? pie_calculate_probability+0x1fc/0x850 [ 345.766507][ C1] pie_calculate_probability+0x214/0x850 [ 345.766551][ C1] fq_pie_timer+0x215/0x5a0 [ 345.766592][ C1] call_timer_fn+0x1a0/0x610 [ 345.766626][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 345.766663][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 345.766697][ C1] ? __pfx_lock_release+0x10/0x10 [ 345.766734][ C1] ? mark_held_locks+0x9f/0xe0 [ 345.766767][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 345.766805][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 345.766844][ C1] __run_timers+0x74b/0xaf0 [ 345.766883][ C1] ? __pfx___run_timers+0x10/0x10 [ 345.766918][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 345.766957][ C1] ? irqentry_exit+0x3b/0x90 [ 345.766990][ C1] run_timer_base+0x111/0x190 [ 345.767025][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 345.767063][ C1] run_timer_softirq+0x1a/0x40 [ 345.767096][ C1] handle_softirqs+0x216/0x8f0 [ 345.767126][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 345.767157][ C1] irq_exit_rcu+0xbb/0x120 [ 345.767182][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 345.767210][ C1] [ 345.767217][ C1] [ 345.767225][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.767263][ C1] RIP: 0010:unwind_next_frame+0x1b4b/0x23a0 [ 345.767288][ C1] Code: 49 8d 7c 24 02 48 ba 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 0f b6 0c 10 49 8d 44 24 03 48 89 c6 48 c1 ee 03 0f b6 14 16 <48> 89 fe 83 e6 07 40 38 f1 40 0f 9e c6 84 c9 0f 95 c1 40 84 ce 0f [ 345.767310][ C1] RSP: 0018:ffffc900001f6fc8 EFLAGS: 00000a07 [ 345.767327][ C1] RAX: ffffffff90a472cf RBX: ffffc900001f70a0 RCX: 0000000000000000 [ 345.767343][ C1] RDX: 0000000000000000 RSI: 1ffffffff2148e59 RDI: ffffffff90a472ce [ 345.767359][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000004 [ 345.767373][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff90a472cc [ 345.767388][ C1] R13: ffffc900001f7098 R14: 0000000000000001 R15: 0000000000000001 [ 345.767417][ C1] ? unwind_next_frame+0x1b21/0x23a0 [ 345.767452][ C1] ? __unwind_start+0x6ba/0x880 [ 345.767477][ C1] __unwind_start+0x5aa/0x880 [ 345.767500][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 345.767530][ C1] arch_stack_walk+0xb2/0x170 [ 345.767557][ C1] ? arch_stack_walk+0xb2/0x170 [ 345.767582][ C1] ? skb_free_head+0x18a/0x1d0 [ 345.767610][ C1] stack_trace_save+0x95/0xd0 [ 345.767638][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 345.767668][ C1] ? __pfx_mark_lock+0x10/0x10 [ 345.767698][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 345.767732][ C1] kasan_save_stack+0x33/0x60 [ 345.767794][ C1] kasan_save_track+0x14/0x30 [ 345.767826][ C1] kasan_save_free_info+0x3b/0x60 [ 345.767855][ C1] poison_slab_object+0xf7/0x160 [ 345.767889][ C1] __kasan_slab_free+0x32/0x50 [ 345.767923][ C1] kmem_cache_free+0x12f/0x3a0 [ 345.767955][ C1] ? skb_free_head+0x18a/0x1d0 [ 345.767984][ C1] skb_free_head+0x18a/0x1d0 [ 345.768012][ C1] skb_release_data+0x75c/0x980 [ 345.768044][ C1] ? kobject_uevent_env+0xcd5/0x1860 [ 345.768070][ C1] ? rcu_is_watching+0x12/0xc0 [ 345.768107][ C1] consume_skb+0xd0/0x160 [ 345.768140][ C1] kobject_uevent_env+0xcd5/0x1860 [ 345.768170][ C1] ? kobject_put+0xab/0x5a0 [ 345.768195][ C1] driver_bound+0x164/0x230 [ 345.768221][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 345.768245][ C1] really_probe+0x62b/0xa90 [ 345.768274][ C1] __driver_probe_device+0x1de/0x440 [ 345.768302][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 345.768330][ C1] driver_probe_device+0x4c/0x1b0 [ 345.768358][ C1] __device_attach_driver+0x1df/0x310 [ 345.768388][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 345.768421][ C1] bus_for_each_drv+0x157/0x1e0 [ 345.768443][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 345.768466][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 345.768492][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 345.768521][ C1] __device_attach+0x1e8/0x4b0 [ 345.768549][ C1] ? __pfx___device_attach+0x10/0x10 [ 345.768578][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 345.768604][ C1] bus_probe_device+0x17f/0x1c0 [ 345.768630][ C1] device_add+0x114b/0x1a70 [ 345.768664][ C1] ? __pfx_device_add+0x10/0x10 [ 345.768695][ C1] ? add_device_randomness+0xb8/0xf0 [ 345.768728][ C1] usb_new_device+0xd90/0x1a10 [ 345.768753][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 345.768795][ C1] hub_event+0x2d9a/0x4e10 [ 345.768833][ C1] ? __pfx_hub_event+0x10/0x10 [ 345.768856][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 345.768889][ C1] ? __pfx_lock_release+0x10/0x10 [ 345.768929][ C1] process_one_work+0x9c5/0x1b40 [ 345.768971][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 345.768995][ C1] ? __pfx_process_one_work+0x10/0x10 [ 345.769035][ C1] ? assign_work+0x1a0/0x250 [ 345.769074][ C1] worker_thread+0x6c8/0xed0 [ 345.769117][ C1] ? __pfx_worker_thread+0x10/0x10 [ 345.769153][ C1] kthread+0x2c1/0x3a0 [ 345.769177][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.769202][ C1] ? __pfx_kthread+0x10/0x10 [ 345.769228][ C1] ret_from_fork+0x45/0x80 [ 345.769260][ C1] ? __pfx_kthread+0x10/0x10 [ 345.769286][ C1] ret_from_fork_asm+0x1a/0x30 [ 345.769327][ C1]