last executing test programs: 20.255941175s ago: executing program 1 (id=1610): r0 = socket$key(0xf, 0x3, 0x2) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./file1\x00', 0xe042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 20.229117015s ago: executing program 1 (id=1613): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) close(0x3) 20.136096907s ago: executing program 1 (id=1615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x3c}}, 0x0) 20.135732743s ago: executing program 1 (id=1617): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x16}, 0x0, 0x0}) 19.519776492s ago: executing program 3 (id=1628): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x20, 0x2b, @empty}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 19.510463567s ago: executing program 3 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @val={0x5, 0x3, {0x7, 0xf, 0x9}}, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x0, 0x19, 0x6}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x74}}, 0x0) 19.490490552s ago: executing program 3 (id=1631): openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 19.431910627s ago: executing program 3 (id=1632): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000002580)='./file0/../file0\x00', 0x9) 19.431545409s ago: executing program 3 (id=1633): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 19.269528764s ago: executing program 3 (id=1635): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r1, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r2) tkill(r0, 0x12) 19.178692378s ago: executing program 32 (id=1635): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r1, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r2) tkill(r0, 0x12) 18.628127532s ago: executing program 2 (id=1648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18.627967933s ago: executing program 4 (id=1649): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) 18.572388345s ago: executing program 4 (id=1650): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 18.502542016s ago: executing program 4 (id=1651): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10}}}}}}, 0x0) 18.413454072s ago: executing program 2 (id=1652): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x25dfdbfc, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 18.413100417s ago: executing program 4 (id=1653): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000002c0)) 18.337019944s ago: executing program 2 (id=1654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 18.290982435s ago: executing program 2 (id=1655): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x81, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f00000006c0)='3', 0x1, 0x0, &(0x7f0000000040)={0x11, 0xf8, r2, 0x1, 0xd, 0x6, @multicast}, 0x14) 18.226909533s ago: executing program 2 (id=1656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000300), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 18.226741895s ago: executing program 2 (id=1657): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000440)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x1ff) 18.174510076s ago: executing program 1 (id=1658): socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x8000480) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000000)={0xc4, 0x0, 0x5}) 18.123579928s ago: executing program 1 (id=1659): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000c00)=ANY=[], 0x0) 17.445373025s ago: executing program 0 (id=1664): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b02, 0x0) 16.775507465s ago: executing program 4 (id=1665): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x5, 0x6, 0xa960, 0x0, 0x201, 0xefc, 0x2, 0x2, 0xdf}) 16.774967511s ago: executing program 4 (id=1666): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5940eb25a1"}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4009}, 0x4000) 15.891658085s ago: executing program 0 (id=1667): r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}) 15.877986445s ago: executing program 0 (id=1668): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) 15.824149619s ago: executing program 0 (id=1669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x504, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000020000002201"]) 15.808444951s ago: executing program 0 (id=1670): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.782941759s ago: executing program 0 (id=1671): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) 3.035888529s ago: executing program 33 (id=1659): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000c00)=ANY=[], 0x0) 2.99210464s ago: executing program 34 (id=1657): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000440)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x1ff) 1.006896234s ago: executing program 35 (id=1666): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5940eb25a1"}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4009}, 0x4000) 0s ago: executing program 36 (id=1671): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): 7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.511549][ T5837] hub 3-1:1.0: bad descriptor, ignoring hub [ 89.518137][ T5837] hub 3-1:1.0: probe with driver hub failed with error -5 [ 89.525391][ T5837] cdc_wdm 3-1:1.0: skipping garbage [ 89.531354][ T5837] cdc_wdm 3-1:1.0: skipping garbage [ 89.537117][ T5837] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 89.543049][ T5837] cdc_wdm 3-1:1.0: Unknown control protocol [ 89.608267][ T3147] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 89.746830][ T5828] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 89.784082][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.792938][ T3147] usb 5-1: Using ep0 maxpacket: 16 [ 89.798339][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.807888][ T3147] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.818771][ T3147] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 89.833293][ T3147] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 89.842603][ T3147] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 89.851031][ T3147] usb 5-1: Product: syz [ 89.855239][ T3147] usb 5-1: Manufacturer: syz [ 89.862756][ T3147] cdc_ether 5-1:1.0: skipping garbage [ 89.870229][ T3147] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 89.887462][ T5877] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 89.901827][ T5828] usb 3-1: USB disconnect, device number 20 [ 89.939782][ T8] usb 4-1: USB disconnect, device number 13 [ 89.977929][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 90.068412][ T5877] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 90.075512][ T3147] usb 5-1: USB disconnect, device number 14 [ 90.079788][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.101403][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 90.114951][ T5877] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 90.124538][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.133825][ T5877] usb 1-1: config 0 descriptor?? [ 90.543945][ T5877] holtek_kbd 0003:04D9:A055.001C: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.0-1/input0 [ 90.632479][ T7518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.661989][ T7520] netlink: 'syz.4.689': attribute type 25 has an invalid length. [ 90.676291][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 90.756339][ T3147] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 90.906246][ T3147] usb 2-1: Using ep0 maxpacket: 32 [ 90.914258][ T3147] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 90.929638][ T3147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.948199][ T3147] usb 2-1: config 0 descriptor?? [ 90.955291][ T3147] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 91.114068][ T7546] netlink: 830 bytes leftover after parsing attributes in process `syz.2.700'. [ 91.866313][ T5837] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 91.967867][ T3147] gspca_vc032x: reg_w err -71 [ 91.973154][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.979145][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.984650][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.990459][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.995773][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.001757][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.008654][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.013977][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.014394][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.715'. [ 92.019496][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.029203][ T7584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.715'. [ 92.035167][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.044591][ T7584] gretap0: entered promiscuous mode [ 92.049287][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.053746][ T7584] batadv_slave_1: entered promiscuous mode [ 92.058729][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.072783][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.083782][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.093727][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.099671][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.105042][ T5837] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 92.114302][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.120583][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.128637][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.133907][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.139666][ T3147] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.145302][ T5837] usb 3-1: config 0 descriptor?? [ 92.150401][ T3147] gspca_vc032x: Unknown sensor... [ 92.155612][ T3147] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 92.167147][ T3147] usb 2-1: USB disconnect, device number 18 [ 92.538629][ T7593] loop6: detected capacity change from 0 to 524287999 [ 92.545696][ C0] blk_print_req_error: 7 callbacks suppressed [ 92.545710][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.560933][ C0] buffer_io_error: 7 callbacks suppressed [ 92.560944][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.575499][ T5829] Bluetooth: hci0: unknown advertising packet type: 0x79 [ 92.575519][ T5829] Bluetooth: hci0: unknown advertising packet type: 0x0f [ 92.582573][ T5829] Bluetooth: hci0: unknown advertising packet type: 0xc0 [ 92.583358][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.589710][ T5829] Bluetooth: hci0: unknown advertising packet type: 0xc0 [ 92.596625][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.606353][ T5829] Bluetooth: hci0: unknown advertising packet type: 0xc0 [ 92.620577][ T5829] Bluetooth: hci0: unknown advertising packet type: 0xc0 [ 92.627687][ T5829] Bluetooth: hci0: unknown advertising packet type: 0xc7 [ 92.629493][ T3147] usb 1-1: USB disconnect, device number 14 [ 92.634732][ T5829] Bluetooth: hci0: unknown advertising packet type: 0x48 [ 92.643069][ T5837] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 92.682941][ T5837] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 92.690156][ T7594] Invalid logical block size (3) [ 92.690281][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.700903][ T5837] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001D/input/input27 [ 92.704246][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.723711][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.732885][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.745070][ T5837] cm6533_jd 0003:0D8C:0022.001D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 92.777057][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.786252][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.794636][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.803811][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.816865][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.826021][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.844569][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.844658][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 92.853738][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.870381][ T7593] ldm_validate_partition_table(): Disk read failed. [ 92.878680][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.887834][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.897871][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.907021][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.915557][ T7593] Dev loop6: unable to read RDB block 0 [ 92.923108][ T7593] loop6: unable to read partition table [ 92.929157][ T7593] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 92.939054][ T5877] usb 3-1: USB disconnect, device number 21 [ 92.950915][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 92.950926][ T29] audit: type=1400 audit(1737658467.274:399): avc: denied { ioctl } for pid=7606 comm="syz.1.726" path="socket:[16836]" dev="sockfs" ino=16836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.962053][ T7604] netlink: 'syz.3.725': attribute type 21 has an invalid length. [ 93.593890][ T29] audit: type=1400 audit(1737658467.924:400): avc: denied { watch_sb } for pid=7644 comm="syz.0.743" path="/152/file0" dev="tmpfs" ino=796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.733379][ T29] audit: type=1400 audit(1737658468.064:401): avc: denied { sys_module } for pid=7655 comm="syz.0.747" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 94.116263][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 94.263633][ T29] audit: type=1326 audit(1737658468.594:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7633 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8518cd29 code=0x7fc00000 [ 94.288413][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 94.295238][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 94.315312][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.338590][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.352545][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.370776][ T8] usb 1-1: Product: syz [ 94.380344][ T8] usb 1-1: Manufacturer: syz [ 94.386438][ T8] usb 1-1: SerialNumber: syz [ 94.397107][ T8] usb 1-1: config 0 descriptor?? [ 94.409674][ T8] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 94.423631][ T8] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 94.558882][ T7686] sd 0:0:1:0: device reset [ 94.570556][ T29] audit: type=1400 audit(1737658468.904:403): avc: denied { shutdown } for pid=7687 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.635423][ T29] audit: type=1400 audit(1737658468.904:404): avc: denied { read } for pid=7687 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.727074][ T29] audit: type=1400 audit(1737658469.054:405): avc: denied { getopt } for pid=7693 comm="syz.4.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.731535][ T7696] netlink: 830 bytes leftover after parsing attributes in process `syz.1.765'. [ 94.941543][ T7710] input: syz1 as /devices/virtual/input/input28 [ 95.027405][ T8] em28xx 1-1:0.0: chip ID is em2874 [ 95.193427][ T29] audit: type=1400 audit(1737658469.524:406): avc: denied { ioctl } for pid=7728 comm="syz.4.780" path="socket:[17722]" dev="sockfs" ino=17722 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.218100][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.237965][ T9] usb 1-1: USB disconnect, device number 15 [ 95.244189][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 95.258943][ T9] em28xx 1-1:0.0: Freeing device [ 95.476270][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 95.586252][ T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 95.626247][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 95.632462][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 95.639276][ T8] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 95.648577][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.657602][ T8] usb 3-1: config 0 descriptor?? [ 95.747418][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.759960][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.770220][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 95.780926][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.790095][ T46] usb 2-1: config 0 descriptor?? [ 95.867462][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.876544][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.090136][ T8] hid (null): report_id 0 is invalid [ 96.095538][ T8] hid (null): unknown global tag 0xe [ 96.101160][ T8] hid (null): unknown global tag 0xc [ 96.110077][ T8] hid-sensor-hub 0003:1B1C:1C07.001E: unexpected long global item [ 96.118726][ T8] hid-sensor-hub 0003:1B1C:1C07.001E: parse failed [ 96.122855][ T7754] ======================================================= [ 96.122855][ T7754] WARNING: The mand mount option has been deprecated and [ 96.122855][ T7754] and is ignored by this kernel. Remove the mand [ 96.122855][ T7754] option from the mount to silence this warning. [ 96.122855][ T7754] ======================================================= [ 96.125277][ T8] hid-sensor-hub 0003:1B1C:1C07.001E: probe with driver hid-sensor-hub failed with error -22 [ 96.160075][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.177855][ T8] corsair-psu 0003:1B1C:1C07.001E: unexpected long global item [ 96.185575][ T8] corsair-psu 0003:1B1C:1C07.001E: probe with driver corsair-psu failed with error -22 [ 96.199209][ T29] audit: type=1400 audit(1737658470.534:407): avc: denied { ioctl } for pid=7755 comm="syz.0.793" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.209508][ T46] logitech-hidpp-device 0003:046D:C086.001F: unknown main item tag 0x0 [ 96.260926][ T29] audit: type=1400 audit(1737658470.564:408): avc: denied { execute } for pid=7755 comm="syz.0.793" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.272673][ T46] logitech-hidpp-device 0003:046D:C086.001F: unknown main item tag 0x0 [ 96.284018][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.309730][ T5837] usb 3-1: USB disconnect, device number 22 [ 96.327469][ T46] logitech-hidpp-device 0003:046D:C086.001F: unknown main item tag 0x0 [ 96.345100][ T46] logitech-hidpp-device 0003:046D:C086.001F: unknown main item tag 0x0 [ 96.357018][ T46] logitech-hidpp-device 0003:046D:C086.001F: unknown main item tag 0x0 [ 96.383529][ T46] logitech-hidpp-device 0003:046D:C086.001F: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 96.416539][ T46] usb 2-1: USB disconnect, device number 19 [ 96.534722][ T7780] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.803'. [ 96.554467][ T7780] netlink: 6296 bytes leftover after parsing attributes in process `syz.4.803'. [ 96.576719][ T7780] netlink: 32 bytes leftover after parsing attributes in process `syz.4.803'. [ 96.816467][ T7796] macvtap1: entered promiscuous mode [ 96.821886][ T7796] macvtap1: entered allmulticast mode [ 97.216702][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 97.225857][ T7831] netlink: 'syz.1.825': attribute type 21 has an invalid length. [ 97.939135][ T7868] syz.4.840 (7868): attempted to duplicate a private mapping with mremap. This is not supported. [ 98.076316][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 98.123005][ T7883] team0 (unregistering): Port device team_slave_0 removed [ 98.141662][ T7883] team0 (unregistering): Port device team_slave_1 removed [ 98.171155][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 98.171170][ T29] audit: type=1400 audit(1737658472.504:418): avc: denied { setopt } for pid=7886 comm="syz.3.847" lport=57292 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 98.236307][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 98.246131][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.257686][ T46] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 98.275588][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.302498][ T46] usb 1-1: config 0 descriptor?? [ 98.441112][ T29] audit: type=1400 audit(1737658472.774:419): avc: denied { ioctl } for pid=7901 comm="syz.1.854" path="socket:[18390]" dev="sockfs" ino=18390 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.546272][ T5837] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 98.586519][ T3147] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 98.706319][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 98.712431][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.724874][ T46] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 98.732190][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.742232][ T46] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 98.749381][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.762237][ T46] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 98.769361][ T46] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 98.776506][ T5837] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 98.785554][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.793597][ T46] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 98.800872][ T46] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 98.811553][ T3147] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 98.821802][ T5837] usb 4-1: config 0 descriptor?? [ 98.827025][ T3147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.836484][ T3147] usb 3-1: config 0 descriptor?? [ 98.842645][ T3147] cp210x 3-1:0.0: cp210x converter detected [ 99.129230][ T5875] usb 1-1: USB disconnect, device number 16 [ 99.196792][ T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 99.244863][ T3147] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 99.256523][ T3147] usb 3-1: cp210x converter now attached to ttyUSB0 [ 99.264003][ T5837] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0021/input/input29 [ 99.337853][ T5837] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 99.356251][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 99.367845][ T46] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 99.377101][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.400684][ T46] usb 5-1: config 0 descriptor?? [ 99.407220][ T46] gspca_main: sunplus-2.14.0 probing 041e:400b [ 99.457579][ T5837] usb 3-1: USB disconnect, device number 23 [ 99.459681][ T8] usb 4-1: USB disconnect, device number 14 [ 99.472391][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 99.487826][ T5837] cp210x 3-1:0.0: device disconnected [ 99.952751][ T7930] netlink: 'syz.0.866': attribute type 3 has an invalid length. [ 100.236354][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 100.386625][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 100.392763][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 100.400188][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.411445][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.423103][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.426752][ T46] gspca_sunplus: reg_w_riv err -71 [ 100.434625][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.450585][ T46] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 100.461102][ T46] usb 5-1: USB disconnect, device number 15 [ 100.467700][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 100.475090][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.487812][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.499704][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.511284][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.523606][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 100.531029][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.542440][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.554237][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.565550][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.579124][ T8] usb 3-1: string descriptor 0 read error: -22 [ 100.585300][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 100.594401][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.604634][ T8] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 100.810616][ T3147] usb 3-1: USB disconnect, device number 24 [ 100.882854][ T7951] ebtables: ebtables: counters copy to user failed while replacing table [ 101.032893][ T29] audit: type=1400 audit(1737658475.364:420): avc: denied { validate_trans } for pid=7965 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 101.446264][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 101.548125][ T29] audit: type=1400 audit(1737658475.884:421): avc: denied { map } for pid=7982 comm="syz.2.887" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.572577][ T29] audit: type=1400 audit(1737658475.884:422): avc: denied { execute } for pid=7982 comm="syz.2.887" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.596258][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 101.608150][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.619910][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.631683][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 101.641542][ T5877] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 101.646755][ T29] audit: type=1400 audit(1737658475.984:423): avc: denied { bind } for pid=7986 comm="syz.2.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.649168][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.678408][ T8] usb 2-1: config 0 descriptor?? [ 101.765404][ T29] audit: type=1400 audit(1737658476.094:424): avc: denied { append } for pid=7994 comm="syz.2.893" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 101.826364][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 101.834429][ T5877] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 101.856296][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.864318][ T5877] usb 4-1: Product: syz [ 101.868583][ T5877] usb 4-1: Manufacturer: syz [ 101.873189][ T5877] usb 4-1: SerialNumber: syz [ 101.885339][ T5877] usb 4-1: config 0 descriptor?? [ 101.898791][ T5877] gspca_main: se401-2.14.0 probing 047d:5003 [ 102.092729][ T8] savu 0003:1E7D:2D5A.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 102.234693][ T8014] tipc: Started in network mode [ 102.239723][ T8014] tipc: Node identity ac1414bb, cluster identity 4711 [ 102.248136][ T8014] tipc: New replicast peer: 172.30.1.5 [ 102.253780][ T8014] tipc: Enabled bearer , priority 10 [ 102.304878][ T5877] gspca_se401: Frame size: 0x2 bayer [ 102.316226][ T5877] gspca_se401: Frame size: 0x224 bayer [ 102.321697][ T5877] gspca_se401: Frame size: 512x0 bayer [ 102.336225][ T5877] gspca_se401: Frame size: 0x0 1/16th janggu [ 102.355927][ T8019] team0 (unregistering): Port device team_slave_0 removed [ 102.365133][ T3147] usb 2-1: USB disconnect, device number 20 [ 102.377880][ T8019] team0 (unregistering): Port device team_slave_1 removed [ 102.512598][ T5877] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 102.524359][ T5877] usb 4-1: USB disconnect, device number 15 [ 102.587345][ T29] audit: type=1326 audit(1737658476.924:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf798cd29 code=0x7fc00000 [ 102.976520][ T46] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 103.056931][ T3147] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 103.136248][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 103.143910][ T46] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 103.153951][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.162444][ T46] usb 5-1: Product: syz [ 103.168180][ T46] usb 5-1: Manufacturer: syz [ 103.172804][ T46] usb 5-1: SerialNumber: syz [ 103.178996][ T46] usb 5-1: config 0 descriptor?? [ 103.185789][ T46] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 103.206277][ T3147] usb 3-1: Using ep0 maxpacket: 8 [ 103.212465][ T3147] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.220860][ T3147] usb 3-1: config 0 has no interface number 0 [ 103.227751][ T3147] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.238832][ T3147] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.249188][ T3147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.257243][ T5837] tipc: Node number set to 2886997179 [ 103.264276][ T3147] usb 3-1: config 0 descriptor?? [ 103.270299][ T29] audit: type=1326 audit(1737658477.604:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbf798cd29 code=0x7fc00000 [ 103.298218][ T3147] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 103.387856][ T8057] team0 (unregistering): Port device team_slave_0 removed [ 103.407213][ T8057] team0 (unregistering): Port device team_slave_1 removed [ 103.479958][ T8] usb 3-1: USB disconnect, device number 25 [ 103.528583][ T8071] netlink: 'syz.0.922': attribute type 12 has an invalid length. [ 103.537220][ T8071] netlink: 'syz.0.922': attribute type 29 has an invalid length. [ 103.544958][ T8071] netlink: 148 bytes leftover after parsing attributes in process `syz.0.922'. [ 103.554583][ T8071] netlink: 'syz.0.922': attribute type 1 has an invalid length. [ 103.562867][ T8071] netlink: 39 bytes leftover after parsing attributes in process `syz.0.922'. [ 103.720642][ T8080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.884215][ T8087] trusted_key: syz.0.929 sent an empty control message without MSG_MORE. [ 103.920730][ T29] audit: type=1400 audit(1737658478.254:427): avc: denied { mount } for pid=8088 comm="syz.0.930" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 103.943922][ T29] audit: type=1400 audit(1737658478.254:428): avc: denied { mounton } for pid=8088 comm="syz.0.930" path="/191/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 103.966326][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.976715][ T29] audit: type=1400 audit(1737658478.254:429): avc: denied { read } for pid=8088 comm="syz.0.930" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 103.998056][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.036803][ T29] audit: type=1400 audit(1737658478.254:430): avc: denied { open } for pid=8088 comm="syz.0.930" path="/191/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.069236][ T29] audit: type=1400 audit(1737658478.314:431): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 104.171275][ T8100] team0 (unregistering): Port device team_slave_0 removed [ 104.200743][ T46] gspca_sonixj: reg_w1 err -71 [ 104.217006][ T8100] team0 (unregistering): Port device team_slave_1 removed [ 104.276257][ T46] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 104.285056][ T46] usb 5-1: USB disconnect, device number 16 [ 104.385421][ T29] audit: type=1400 audit(1737658478.714:432): avc: denied { setopt } for pid=8113 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.414242][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 104.417149][ T29] audit: type=1400 audit(1737658478.744:433): avc: denied { connect } for pid=8113 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.583919][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 104.596389][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.606266][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 104.627129][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 104.646132][ T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 104.666365][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.695104][ T9] usb 3-1: config 0 descriptor?? [ 104.769193][ T8139] bond0: (slave team0): Releasing backup interface [ 104.776732][ T8139] team0 (unregistering): left promiscuous mode [ 104.786065][ T8139] team_slave_0: left promiscuous mode [ 104.786619][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 104.792050][ T8139] team_slave_1: left promiscuous mode [ 104.805766][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.818024][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.828789][ T8139] infiniband syz1: set down [ 104.857466][ T8] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 104.867286][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 104.874457][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.884284][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 104.897873][ T8] usb 4-1: config 0 descriptor?? [ 105.114313][ T9] holtek_kbd 0003:04D9:A055.0023: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 105.340980][ T8] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 105.348123][ T8] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 105.354902][ T8] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 105.363977][ T29] audit: type=1400 audit(1737658479.704:434): avc: denied { append } for pid=8153 comm="syz.1.957" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.376278][ T8] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 105.403367][ T8] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 105.415917][ T8] elan 0003:04F3:0755.0024: failed to start in urb: -90 [ 105.444438][ T8] elan 0003:04F3:0755.0024: hidraw1: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 105.607528][ T8] usb 4-1: USB disconnect, device number 16 [ 105.736310][ T46] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 105.886380][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 105.892620][ T46] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.900772][ T46] usb 5-1: config 0 has no interface number 0 [ 105.908300][ T46] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.917349][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.925316][ T46] usb 5-1: Product: syz [ 105.929479][ T46] usb 5-1: Manufacturer: syz [ 105.934076][ T46] usb 5-1: SerialNumber: syz [ 105.939413][ T46] usb 5-1: config 0 descriptor?? [ 105.945383][ T46] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 106.152759][ T46] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 106.169507][ T46] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 106.179165][ T29] audit: type=1400 audit(1737658480.504:435): avc: denied { read } for pid=8169 comm="syz.1.964" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 106.310814][ T8182] kernel profiling enabled (shift: 0) [ 106.361629][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.417916][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.634183][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 106.634324][ T5828] usb 5-1: USB disconnect, device number 17 [ 106.654318][ T5828] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 106.677140][ T5828] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 106.698646][ T5828] quatech2 5-1:0.51: device disconnected [ 107.139928][ T8] usb 3-1: USB disconnect, device number 26 [ 107.196280][ T5828] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 107.356241][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 107.362388][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.373549][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 107.397272][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.417750][ T5828] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 107.436236][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.444221][ T5828] usb 2-1: Product: syz [ 107.456250][ T5828] usb 2-1: Manufacturer: syz [ 107.460850][ T5828] usb 2-1: SerialNumber: syz [ 107.476662][ T5828] usb 2-1: config 0 descriptor?? [ 107.636125][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 107.687538][ T8] usb 2-1: USB disconnect, device number 21 [ 107.802885][ T8240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.880700][ T8247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.303872][ T8281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.357189][ T46] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 108.516244][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 108.522599][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 108.533761][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.543751][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.554091][ T46] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.567280][ T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.576348][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.786852][ T46] usb 3-1: GET_CAPABILITIES returned 0 [ 108.792356][ T46] usbtmc 3-1:16.0: can't read capabilities [ 108.992321][ T46] usb 3-1: USB disconnect, device number 27 [ 109.538948][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 109.538962][ T29] audit: type=1400 audit(1737658483.874:447): avc: denied { write } for pid=8 comm="kworker/0:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19259 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.569451][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.758335][ T29] audit: type=1400 audit(1737658484.094:448): avc: denied { connect } for pid=8300 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.779300][ T29] audit: type=1400 audit(1737658484.094:449): avc: denied { read } for pid=8300 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.798577][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.804879][ T29] audit: type=1400 audit(1737658484.114:450): avc: denied { bind } for pid=8305 comm="syz.4.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.857221][ T5875] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 109.945572][ T8318] binder: 8317:8318 ioctl c018620c 20000140 returned -22 [ 110.037284][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 110.058981][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.085382][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.097878][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.114504][ T5875] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.137401][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.155348][ T5875] usb 1-1: config 0 descriptor?? [ 110.174359][ T29] audit: type=1400 audit(1737658484.504:451): avc: denied { write } for pid=8331 comm="syz.4.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.412072][ T29] audit: type=1400 audit(1737658484.744:452): avc: denied { create } for pid=8357 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.573622][ T5875] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0025/input/input33 [ 110.638889][ T5875] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 110.788943][ T9] usb 1-1: USB disconnect, device number 17 [ 110.881989][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.930467][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.978826][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.001052][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.008387][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.015552][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.023001][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.030442][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 111.037618][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.045015][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.058388][ T29] audit: type=1400 audit(1737658485.394:453): avc: denied { mounton } for pid=8390 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 111.127307][ T61] bridge_slave_1: left allmulticast mode [ 111.132953][ T61] bridge_slave_1: left promiscuous mode [ 111.140128][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.148550][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.271793][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.282361][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.294398][ T61] bond0 (unregistering): Released all slaves [ 111.414968][ T8390] chnl_net:caif_netlink_parms(): no params data found [ 111.668688][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.695635][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.713137][ T8390] bridge_slave_0: entered allmulticast mode [ 111.721172][ T8390] bridge_slave_0: entered promiscuous mode [ 111.738862][ T8390] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.749347][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.760883][ T8390] bridge_slave_1: entered allmulticast mode [ 111.767506][ T8390] bridge_slave_1: entered promiscuous mode [ 111.867771][ T8390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.887836][ T8390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.908743][ T61] hsr_slave_0: left promiscuous mode [ 111.914405][ T61] hsr_slave_1: left promiscuous mode [ 111.923663][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.941239][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.957635][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.975245][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.992721][ T61] veth1_macvtap: left promiscuous mode [ 112.001574][ T61] veth0_macvtap: left promiscuous mode [ 112.016394][ T61] veth1_vlan: left promiscuous mode [ 112.021654][ T61] veth0_vlan: left promiscuous mode [ 112.152994][ T8390] team0: Port device team_slave_0 added [ 112.175027][ T8390] team0: Port device team_slave_1 added [ 112.195976][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.203281][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.230876][ T8390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.242729][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.249757][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.275769][ T8390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.309865][ T8390] hsr_slave_0: entered promiscuous mode [ 112.315661][ T8390] hsr_slave_1: entered promiscuous mode [ 112.321528][ T8390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.329338][ T8390] Cannot create hsr debugfs directory [ 112.580643][ T8390] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.593083][ T8390] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.609136][ T8390] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.620250][ T8390] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.654400][ T8500] netlink: 'syz.3.1078': attribute type 3 has an invalid length. [ 112.689971][ T8500] netlink: 'syz.3.1078': attribute type 2 has an invalid length. [ 112.703602][ T29] audit: type=1400 audit(1737658487.034:454): avc: denied { create } for pid=8501 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 112.706306][ T8500] netlink: 198084 bytes leftover after parsing attributes in process `syz.3.1078'. [ 112.743421][ T29] audit: type=1400 audit(1737658487.034:455): avc: denied { write } for pid=8501 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 112.751698][ T8390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.771379][ T29] audit: type=1400 audit(1737658487.034:456): avc: denied { nlmsg_read } for pid=8501 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 112.806104][ T8390] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.850044][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.857156][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.868960][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.876035][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.897181][ T3147] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 112.921287][ T8390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.941893][ T8390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.057899][ T3147] usb 5-1: Using ep0 maxpacket: 16 [ 113.067419][ T5829] Bluetooth: hci3: command tx timeout [ 113.072898][ T3147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.085591][ T3147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.102853][ T3147] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.109383][ T8390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.122480][ T3147] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.122502][ T3147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.148754][ T3147] usb 5-1: config 0 descriptor?? [ 113.175093][ T8390] veth0_vlan: entered promiscuous mode [ 113.183547][ T8390] veth1_vlan: entered promiscuous mode [ 113.212364][ T8390] veth0_macvtap: entered promiscuous mode [ 113.223875][ T8390] veth1_macvtap: entered promiscuous mode [ 113.237849][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.248399][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.258427][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.269753][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.279746][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.290328][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.300316][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.311803][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.322378][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.335749][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.348310][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.359272][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.388877][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.414411][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.427550][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.438244][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.475723][ T8390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.487996][ T8390] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.506218][ T8390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.514925][ T8390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.534594][ T8569] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1085'. [ 113.581048][ T3147] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0026/input/input34 [ 113.613229][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.633442][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.651628][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.670251][ T3147] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 113.676513][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.789958][ T5876] usb 5-1: USB disconnect, device number 18 [ 113.906382][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 114.056290][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 114.063906][ T8] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 114.073589][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.081793][ T8] usb 1-1: Product: syz [ 114.085955][ T8] usb 1-1: Manufacturer: syz [ 114.090610][ T8] usb 1-1: SerialNumber: syz [ 114.096633][ T8] usb 1-1: config 0 descriptor?? [ 114.103035][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 114.380313][ T8595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.387578][ T8595] IPv6: NLM_F_CREATE should be set when creating new route [ 114.395031][ T8595] IPv6: NLM_F_CREATE should be set when creating new route [ 114.511286][ T8] gspca_se401: Frame size: 0x2 bayer [ 114.519540][ T8] gspca_se401: Frame size: 0x224 bayer [ 114.530422][ T8] gspca_se401: Frame size: 512x0 bayer [ 114.556267][ T8] gspca_se401: Frame size: 0x0 1/16th janggu [ 114.622329][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 114.622342][ T29] audit: type=1400 audit(1737658488.954:467): avc: denied { read } for pid=8617 comm="syz.4.1110" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.712674][ T8] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 114.726532][ T8] usb 1-1: USB disconnect, device number 18 [ 114.836926][ T46] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 114.896244][ T5875] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 114.986867][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 114.992985][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.004094][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.013851][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.026979][ T46] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.036134][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.045023][ T46] usb 2-1: config 0 descriptor?? [ 115.050205][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 115.057260][ T5875] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 115.065457][ T5875] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.075847][ T5875] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.085658][ T5875] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.095585][ T5875] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.109151][ T5875] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.118410][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.146384][ T5835] Bluetooth: hci3: command tx timeout [ 115.330317][ T5875] usb 3-1: usb_control_msg returned -32 [ 115.335893][ T5875] usbtmc 3-1:16.0: can't read capabilities [ 115.462524][ T46] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0027/input/input36 [ 115.527944][ T46] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 115.677719][ T5875] usb 2-1: USB disconnect, device number 22 [ 115.690513][ T8627] usbtmc 3-1:16.0: INDICATOR_PULSE returned 0 [ 115.891512][ T5875] usb 3-1: USB disconnect, device number 28 [ 116.262553][ T8642] Bluetooth: hci0: load_link_keys: too big key_count value 7168 [ 116.287588][ T29] audit: type=1400 audit(1737658490.624:468): avc: denied { read write } for pid=8645 comm="syz.4.1120" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.312640][ T29] audit: type=1400 audit(1737658490.624:469): avc: denied { open } for pid=8645 comm="syz.4.1120" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.347111][ T29] audit: type=1400 audit(1737658490.654:470): avc: denied { map } for pid=8645 comm="syz.4.1120" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.380850][ T29] audit: type=1400 audit(1737658490.654:471): avc: denied { execute } for pid=8645 comm="syz.4.1120" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.407034][ T8653] syzkaller1: entered promiscuous mode [ 116.412624][ T8653] syzkaller1: entered allmulticast mode [ 116.423138][ T8653] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 116.534761][ T8669] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1131'. [ 116.561034][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1132'. [ 116.574616][ T8671] vlan2: entered promiscuous mode [ 116.580010][ T8671] gretap0: entered promiscuous mode [ 116.604780][ T29] audit: type=1400 audit(1737658490.934:472): avc: denied { unmount } for pid=8677 comm="syz.4.1135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 116.696284][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 116.723630][ T29] audit: type=1400 audit(1737658491.054:473): avc: denied { sqpoll } for pid=8682 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 116.771724][ T29] audit: type=1400 audit(1737658491.104:474): avc: denied { map } for pid=8685 comm="syz.4.1138" path="/dev/sg0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.849091][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.860187][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.866263][ T5875] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 116.869927][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.892343][ T9] usb 3-1: config 0 descriptor?? [ 117.026248][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 117.033105][ T5875] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 117.041566][ T5875] usb 1-1: config 179 has no interface number 0 [ 117.048084][ T5875] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 117.065823][ T5875] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 117.079405][ T5875] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.091733][ T5875] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 117.103297][ T5875] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 117.116624][ T5875] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 117.118083][ T29] audit: type=1400 audit(1737658491.454:475): avc: denied { write } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.125741][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.147523][ T29] audit: type=1400 audit(1737658491.454:476): avc: denied { remove_name } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.194788][ T8676] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.226759][ T5835] Bluetooth: hci3: command 0x040f tx timeout [ 117.358310][ T9] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 117.368635][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0028/input/input37 [ 117.444368][ T5875] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input38 [ 117.447141][ T9] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 117.628558][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.639140][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.650586][ T8732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'. [ 117.681541][ T8732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'. [ 117.717498][ T5875] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 117.753298][ T8739] Bluetooth: hci0: load_link_keys: too big key_count value 7168 [ 117.857399][ T5877] usb 1-1: USB disconnect, device number 19 [ 117.857469][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 117.871834][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 117.888108][ T5828] usb 3-1: USB disconnect, device number 29 [ 117.894016][ T5875] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.912292][ T5875] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.923909][ T8750] netlink: 'syz.4.1166': attribute type 10 has an invalid length. [ 117.941295][ T5875] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.950842][ T8750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1166'. [ 117.959907][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.970904][ T8750] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 117.974229][ T8723] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 117.997244][ T5875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.249307][ T5877] usb 4-1: USB disconnect, device number 17 [ 118.258977][ T8770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.311238][ T8777] netlink: 'syz.1.1178': attribute type 39 has an invalid length. [ 118.559857][ T8792] syzkaller1: entered promiscuous mode [ 118.571493][ T8792] syzkaller1: entered allmulticast mode [ 118.721922][ T8815] binder: 8814:8815 ioctl 400c620e 200003c0 returned -22 [ 118.736011][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 118.759642][ T8819] team1: entered promiscuous mode [ 118.765013][ T8819] 8021q: adding VLAN 0 to HW filter on device team1 [ 118.924647][ T8832] syzkaller1: entered promiscuous mode [ 118.930524][ T8832] syzkaller1: entered allmulticast mode [ 118.936470][ T5877] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 119.097876][ T5877] usb 1-1: config 2 has an invalid interface number: 226 but max is 0 [ 119.106087][ T5877] usb 1-1: config 2 has no interface number 0 [ 119.112482][ T5877] usb 1-1: config 2 interface 226 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.123995][ T5877] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 119.134820][ T5877] usb 1-1: config 2 interface 226 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 119.146917][ T5877] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x8B has invalid maxpacket 60280, setting to 8 [ 119.158099][ T5877] usb 1-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.171294][ T5877] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=44.62 [ 119.180666][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.189811][ T8811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.197050][ T8811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.204798][ T5877] kvaser_usb 1-1:2.226: error -ENODEV: Cannot get usb endpoint(s) [ 119.226306][ T25] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 119.236342][ T5828] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 119.316319][ T5829] Bluetooth: hci3: command 0x040f tx timeout [ 119.376275][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 119.382486][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.387291][ T5828] usb 4-1: config 0 has no interfaces? [ 119.393584][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.400234][ T5828] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.408940][ T25] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 119.427302][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.427866][ T5877] usb 1-1: USB disconnect, device number 20 [ 119.436107][ T25] usb 3-1: config 0 descriptor?? [ 119.450092][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.463296][ T5828] usb 4-1: config 0 descriptor?? [ 119.674924][ T5877] usb 4-1: USB disconnect, device number 18 [ 119.851662][ T25] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 119.881336][ T8851] loop9: detected capacity change from 0 to 1 [ 119.887791][ T8851] loop9: [POWERTEC] p1 p2 p3 [ 119.892523][ T8851] loop9: p1 start 251723956 is beyond EOD, truncated [ 119.899661][ T8851] loop9: p2 start 1661300723 is beyond EOD, truncated [ 119.907016][ T8851] loop9: p3 start 2635344306 is beyond EOD, truncated [ 120.052248][ T25] ft260 0003:0403:6030.0029: chip code: 5e81 abf2 [ 120.116305][ T5875] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 120.226299][ T46] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 120.266325][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 120.272645][ T5875] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.283773][ T5875] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 120.298173][ T5875] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.304750][ T5875] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 120.313774][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.322580][ T5875] usb 4-1: config 0 descriptor?? [ 120.386312][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 120.392598][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.402738][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.413604][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 120.424388][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.438216][ T46] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 120.447269][ T46] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 120.455265][ T46] usb 2-1: Manufacturer: syz [ 120.461726][ T46] usb 2-1: config 0 descriptor?? [ 120.467463][ T25] usb 3-1: USB disconnect, device number 30 [ 120.726241][ T46] rc_core: IR keymap rc-hauppauge not found [ 120.732164][ T46] Registered IR keymap rc-empty [ 120.738759][ T5875] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 120.746129][ T5875] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 120.753785][ T5875] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 120.761201][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 120.767848][ T5875] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 120.775200][ T5875] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 120.786461][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 120.806520][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 120.818741][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 120.831939][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 120.838948][ T5875] hid-picolcd 0003:04D8:F002.002A: No report with id 0xf4 found [ 120.846697][ T5875] hid-picolcd 0003:04D8:F002.002A: No report with id 0xf3 found [ 120.866412][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 120.886502][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 120.916409][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 120.936454][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 120.942634][ T5877] usb 4-1: USB disconnect, device number 19 [ 120.956399][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 120.977540][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 120.996453][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 121.026417][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 121.046428][ T46] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 121.077181][ T46] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 121.086972][ T46] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 121.148709][ T5877] usb 2-1: USB disconnect, device number 23 [ 121.386326][ T5829] Bluetooth: hci3: command 0x040f tx timeout [ 121.846281][ T5877] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 121.956232][ T5828] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 121.964095][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 122.008813][ T5877] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 122.026277][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.034459][ T5877] usb 1-1: Product: syz [ 122.046273][ T5877] usb 1-1: Manufacturer: syz [ 122.050891][ T5877] usb 1-1: SerialNumber: syz [ 122.056581][ T5877] usb 1-1: config 0 descriptor?? [ 122.118112][ T9] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 122.127443][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.143070][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.151246][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.161483][ T5828] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 122.171590][ T9] usb 3-1: config 0 descriptor?? [ 122.176944][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.186341][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 122.207495][ T5828] usb 5-1: config 0 descriptor?? [ 122.376262][ T5875] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 122.536228][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 122.547239][ T5875] usb 4-1: config 0 has no interfaces? [ 122.552753][ T5875] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 122.561814][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.571197][ T5875] usb 4-1: config 0 descriptor?? [ 122.589197][ T9] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 122.623879][ T5828] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 122.631529][ T5828] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 122.640082][ T5828] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 122.647570][ T5828] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 122.654643][ T5828] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 122.663309][ T5828] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 122.671861][ T5828] samsung 0003:0419:0001.002B: unknown main item tag 0x0 [ 122.686816][ T5828] samsung 0003:0419:0001.002B: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 122.726270][ T46] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 122.835674][ T5875] usb 5-1: USB disconnect, device number 19 [ 122.877002][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 122.882927][ T5877] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 122.883647][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.895701][ T5877] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 122.906043][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.916012][ T5877] asix 1-1:0.0: probe with driver asix failed with error -71 [ 122.924307][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 122.935158][ T5877] usb 1-1: USB disconnect, device number 21 [ 122.947976][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.957188][ T46] usb 2-1: config 0 descriptor?? [ 122.982087][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.991857][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.001703][ T5875] usb 4-1: USB disconnect, device number 20 [ 123.001708][ T9] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 123.202905][ T5877] usb 3-1: USB disconnect, device number 31 [ 123.365872][ T46] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 123.373131][ T46] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 123.380502][ T46] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 123.388060][ T46] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 123.395103][ T46] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 123.403289][ T46] appleir 0003:05AC:8241.002C: No inputs registered, leaving [ 123.411707][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 123.411719][ T29] audit: type=1400 audit(1737658497.744:484): avc: denied { write } for pid=8944 comm="syz.4.1253" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 123.447506][ T46] appleir 0003:05AC:8241.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 123.481044][ T8951] sctp: [Deprecated]: syz.0.1255 (pid 8951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.481044][ T8951] Use struct sctp_sack_info instead [ 123.591535][ T8956] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.637439][ T9] usb 2-1: USB disconnect, device number 24 [ 123.638579][ T29] audit: type=1400 audit(1737658497.964:485): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 123.713165][ T8966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1263'. [ 123.946339][ T5877] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 124.113437][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.125135][ T5877] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 124.134408][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 124.146800][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.162527][ T5877] usb 5-1: Product: syz [ 124.167096][ T5877] usb 5-1: Manufacturer: syz [ 124.173902][ T5877] usb 5-1: SerialNumber: syz [ 124.182048][ T5877] usb 5-1: config 0 descriptor?? [ 124.188819][ T5877] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 124.307706][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.318991][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.329688][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 124.338828][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.347744][ T9] usb 3-1: config 0 descriptor?? [ 124.400862][ T5828] usb 5-1: USB disconnect, device number 20 [ 124.456229][ T5877] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 124.627207][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 124.633441][ T5877] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 124.642662][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.651656][ T5877] usb 1-1: config 0 descriptor?? [ 124.658530][ T5877] as10x_usb: device has been detected [ 124.664014][ T5877] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 124.671305][ T5876] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 124.681748][ T5877] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 124.693312][ T5877] as10x_usb: error during firmware upload part1 [ 124.699701][ T5877] Registered device nBox DVB-T Dongle [ 124.765289][ T9023] smb3: Unknown parameter 'rdma' [ 124.836321][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 124.842659][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.853321][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.871111][ T5876] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 124.882137][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.891131][ T46] usb 1-1: USB disconnect, device number 22 [ 124.891935][ T5876] usb 2-1: Product: syz [ 124.902214][ T5876] usb 2-1: Manufacturer: syz [ 124.906914][ T5876] usb 2-1: SerialNumber: syz [ 124.912070][ T46] Unregistered device nBox DVB-T Dongle [ 124.912616][ T46] as10x_usb: device has been disconnected [ 124.957536][ T29] audit: type=1400 audit(1737658499.284:486): avc: denied { execute } for pid=9036 comm="syz.4.1294" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 125.022699][ T9044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.158783][ T9058] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 125.168004][ T29] audit: type=1400 audit(1737658499.494:487): avc: denied { getopt } for pid=9059 comm="syz.3.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.174365][ T9058] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 125.215624][ T29] audit: type=1400 audit(1737658499.544:488): avc: denied { append } for pid=9062 comm="syz.3.1307" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.331396][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.339832][ T46] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 125.340248][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.364660][ T5876] usb 2-1: 0:2 : does not exist [ 125.373093][ T5876] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 125.389534][ T5876] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 125.399245][ T5876] usb 2-1: USB disconnect, device number 25 [ 125.411404][ T6112] udevd[6112]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.430010][ T9] uclogic 0003:256C:006D.002D: failed retrieving Huion firmware version: -71 [ 125.438857][ T9] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 125.446595][ T9] uclogic 0003:256C:006D.002D: probe with driver uclogic failed with error -71 [ 125.459316][ T9] usb 3-1: USB disconnect, device number 32 [ 125.496340][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 125.506410][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 125.512503][ T46] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 125.521609][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.530545][ T46] usb 1-1: config 0 descriptor?? [ 125.538561][ T46] as10x_usb: device has been detected [ 125.544141][ T46] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 125.554020][ T46] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 125.563201][ T46] as10x_usb: error during firmware upload part1 [ 125.569763][ T46] Registered device nBox DVB-T Dongle [ 125.636293][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 125.646231][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 125.655838][ T25] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.666936][ T25] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.676853][ T25] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.689820][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.696438][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 125.705458][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.714931][ T25] usb 5-1: config 0 descriptor?? [ 125.753367][ T46] usb 1-1: USB disconnect, device number 23 [ 125.763111][ T46] Unregistered device nBox DVB-T Dongle [ 125.764191][ T46] as10x_usb: device has been disconnected [ 125.808070][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.819862][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 125.830992][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 125.842116][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.855073][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.864118][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.876633][ T8] usb 4-1: config 0 descriptor?? [ 125.882495][ T9070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.900469][ T9072] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1311'. [ 125.909566][ T9072] netlink: 'syz.1.1311': attribute type 1 has an invalid length. [ 126.125366][ T25] magicmouse 0003:05AC:0265.002E: unbalanced delimiter at end of report description [ 126.135292][ T25] magicmouse 0003:05AC:0265.002E: magicmouse hid parse failed [ 126.143018][ T25] magicmouse 0003:05AC:0265.002E: probe with driver magicmouse failed with error -22 [ 126.293864][ T8] plantronics 0003:047F:FFFF.002F: unknown main item tag 0xd [ 126.301939][ T8] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 126.310867][ T8] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 126.330314][ T8] usb 5-1: USB disconnect, device number 21 [ 126.484076][ T29] audit: type=1400 audit(1737658500.814:489): avc: denied { create } for pid=9098 comm="syz.0.1320" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.512005][ T29] audit: type=1400 audit(1737658500.814:490): avc: denied { write } for pid=9098 comm="syz.0.1320" name="file0" dev="tmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.537433][ T29] audit: type=1400 audit(1737658500.814:491): avc: denied { open } for pid=9098 comm="syz.0.1320" path="/253/file0" dev="tmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.561404][ T29] audit: type=1400 audit(1737658500.814:492): avc: denied { ioctl } for pid=9098 comm="syz.0.1320" path="/253/file0" dev="tmpfs" ino=1316 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.586152][ T29] audit: type=1400 audit(1737658500.844:493): avc: denied { unlink } for pid=5836 comm="syz-executor" name="file0" dev="tmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.611839][ T46] usb 4-1: USB disconnect, device number 21 [ 126.853816][ T9114] bond_slave_1: entered promiscuous mode [ 126.865621][ T9114] bond_slave_1: left promiscuous mode [ 126.926247][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 127.078048][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 127.091033][ T25] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 127.099251][ T25] usb 1-1: config 8 has no interface number 0 [ 127.105333][ T25] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 127.117759][ T25] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 127.131701][ T25] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 127.141616][ T25] usb 1-1: config 8 interface 39 has no altsetting 0 [ 127.150770][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 127.160313][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.173686][ T25] usb 1-1: Product: syz [ 127.177991][ T25] usb 1-1: Manufacturer: syz [ 127.182616][ T25] usb 1-1: SerialNumber: syz [ 127.326872][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 127.486236][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 127.492802][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 127.505723][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 127.514762][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.524416][ T8] usb 5-1: config 0 descriptor?? [ 127.531139][ T8] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 127.606247][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 127.733044][ T5181] bcm5974 5-1:0.0: could not read from device [ 127.739884][ T8] bcm5974 5-1:0.0: could not read from device [ 127.746460][ T5181] bcm5974 5-1:0.0: could not read from device [ 127.753249][ T8] input: failed to attach handler mousedev to device input41, error: -5 [ 127.762591][ T5181] bcm5974 5-1:0.0: could not read from device [ 127.764012][ T8] usb 5-1: USB disconnect, device number 22 [ 127.774836][ T5181] bcm5974 5-1:0.0: could not read from device [ 127.786357][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 127.792525][ T25] ipheth 1-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 127.797073][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 127.809069][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.812542][ T25] ipheth 1-1:8.39: Apple iPhone USB Ethernet device attached [ 127.817894][ T9] usb 4-1: Product: syz [ 127.829168][ T9] usb 4-1: Manufacturer: syz [ 127.833760][ T9] usb 4-1: SerialNumber: syz [ 127.835737][ T25] usb 1-1: USB disconnect, device number 24 [ 127.845232][ T9] usb 4-1: config 0 descriptor?? [ 127.859529][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 127.897013][ T25] ipheth 1-1:8.39: Apple iPhone USB Ethernet now disconnected [ 127.984392][ T9172] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1352'. [ 127.993901][ T9172] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1352'. [ 128.116414][ T5875] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 128.234335][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 128.267345][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.278941][ T5875] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.288314][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.297778][ T5875] usb 2-1: config 0 descriptor?? [ 128.336315][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1363'. [ 128.345325][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1363'. [ 128.376999][ T9199] bridge0: entered allmulticast mode [ 128.498869][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 128.635498][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 128.635512][ T29] audit: type=1400 audit(1737658502.964:495): avc: denied { connect } for pid=9213 comm="syz.0.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.660907][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 128.662795][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.678658][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.690059][ T25] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 128.699419][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.711413][ T5875] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 128.720135][ T25] usb 3-1: config 0 descriptor?? [ 128.729098][ T5875] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0030/input/input42 [ 128.756233][ T8] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 128.798954][ T5875] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 128.905540][ T5828] usb 4-1: USB disconnect, device number 22 [ 128.913780][ T8] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.925183][ T9163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.928600][ T8] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.936387][ T9163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.946233][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.958603][ T8] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 128.958627][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.963005][ T8] usb 5-1: config 0 descriptor?? [ 128.981405][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 129.148602][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.158827][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.161728][ T25] hid-multitouch 0003:1FD2:6007.0031: unknown main item tag 0x4 [ 129.168882][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.176632][ T25] hid-multitouch 0003:1FD2:6007.0031: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 129.185931][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.209830][ T9] usb 1-1: SerialNumber: syz [ 129.252167][ T5876] usb 2-1: USB disconnect, device number 26 [ 129.375215][ T25] usb 3-1: USB disconnect, device number 33 [ 129.416571][ T8] saitek 0003:06A3:0621.0032: unknown main item tag 0x0 [ 129.427807][ T8] saitek 0003:06A3:0621.0032: unknown main item tag 0x0 [ 129.438189][ T8] saitek 0003:06A3:0621.0032: collection stack underflow [ 129.445234][ T8] saitek 0003:06A3:0621.0032: item 0 0 0 12 parsing failed [ 129.454108][ T9] usb 1-1: 0:2 : does not exist [ 129.462138][ T8] saitek 0003:06A3:0621.0032: parse failed [ 129.468207][ T8] saitek 0003:06A3:0621.0032: probe with driver saitek failed with error -22 [ 129.479089][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 129.492544][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 129.505450][ T9] usb 1-1: USB disconnect, device number 25 [ 129.590382][ T9227] ip_vti0: Master is either lo or non-ether device [ 129.609835][ T29] audit: type=1400 audit(1737658503.944:496): avc: denied { load_policy } for pid=9228 comm="syz.3.1379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 129.609875][ T9229] SELinux: failed to load policy [ 129.666609][ T8] usb 5-1: USB disconnect, device number 23 [ 129.697880][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.736979][ T29] audit: type=1400 audit(1737658504.074:497): avc: denied { create } for pid=9234 comm="syz.3.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 129.792680][ T29] audit: type=1400 audit(1737658504.124:498): avc: denied { attach_queue } for pid=9237 comm="syz.1.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 129.884980][ T29] audit: type=1400 audit(1737658504.214:499): avc: denied { create } for pid=9242 comm="syz.1.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.904527][ T29] audit: type=1400 audit(1737658504.214:500): avc: denied { getopt } for pid=9242 comm="syz.1.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.277076][ T29] audit: type=1400 audit(1737658504.614:501): avc: denied { sys_ptrace } for pid=9282 comm="syz.1.1404" capability=19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 130.345608][ T29] audit: type=1400 audit(1737658504.674:502): avc: denied { read append } for pid=9296 comm="syz.4.1410" name="usbmon6" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.454285][ T29] audit: type=1400 audit(1737658504.674:503): avc: denied { open } for pid=9296 comm="syz.4.1410" path="/dev/usbmon6" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.744033][ T9332] vlan2: entered promiscuous mode [ 130.923262][ T5829] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 131.036081][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1435'. [ 131.049037][ T9358] overlay: filesystem on ./bus not supported as upperdir [ 131.089920][ T29] audit: type=1400 audit(1737658505.424:504): avc: denied { name_connect } for pid=9359 comm="syz.4.1437" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 131.122942][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 131.287610][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.299270][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 131.312725][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.327880][ T9] usb 3-1: config 0 descriptor?? [ 131.339577][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 131.517955][ T9390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.621634][ T9398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.740802][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 131.756785][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 131.821316][ T9403] loop2: detected capacity change from 0 to 7 [ 131.827908][ T9403] Dev loop2: unable to read RDB block 7 [ 131.833507][ T9403] loop2: unable to read partition table [ 131.839440][ T9403] loop2: partition table beyond EOD, truncated [ 131.845610][ T9403] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.896274][ T9403] loop2: detected capacity change from 7 to 0 [ 131.963933][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 131.972216][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 131.989422][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 132.006487][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 132.020729][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 132.028236][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 132.036630][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 132.046597][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 132.056889][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 132.075157][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 132.082120][ T9421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1462'. [ 132.084150][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 132.106811][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 132.114357][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 132.121997][ T9] pwc: Registered as video103. [ 132.128001][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 132.151795][ T5829] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 132.164811][ T9] usb 3-1: USB disconnect, device number 34 [ 132.261983][ T9435] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 132.507421][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.514135][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.524485][ T25] kernel read not supported for file /swradio8 (pid: 25 comm: kworker/1:0) [ 132.556285][ T46] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 132.564528][ T9472] tun0: tun_chr_ioctl cmd 1074025675 [ 132.580522][ T9472] tun0: persist enabled [ 132.591191][ T9472] tun0: tun_chr_ioctl cmd 1074025675 [ 132.598074][ T9472] tun0: persist enabled [ 132.727563][ T46] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 132.742405][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.753653][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.771356][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.787068][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.796068][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.807203][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.815130][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.843307][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.854477][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.862457][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.881937][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.896099][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.905970][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.916116][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.928499][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.938711][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.948996][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.962289][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.972283][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.982043][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.994639][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.000913][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.009108][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.018246][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.029896][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.038251][ T46] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 133.047513][ T46] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 133.056065][ T46] usb 1-1: Product: syz [ 133.060448][ T46] usb 1-1: Manufacturer: syz [ 133.065071][ T46] usb 1-1: SerialNumber: syz [ 133.071609][ T46] usb 1-1: config 0 descriptor?? [ 133.079162][ T46] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 133.269600][ T9531] netlink: 'syz.2.1513': attribute type 20 has an invalid length. [ 133.304416][ T9533] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1515'. [ 133.446275][ T46] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 133.599030][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.613679][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.624130][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.641577][ T46] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 133.650892][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.662280][ T46] usb 4-1: config 0 descriptor?? [ 133.924087][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 133.931308][ T5875] usb 1-1: USB disconnect, device number 26 [ 133.937577][ T5837] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 133.945509][ T5875] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 134.071514][ T46] acrux 0003:1A34:0802.0033: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 134.082781][ T46] acrux 0003:1A34:0802.0033: no inputs found [ 134.088835][ T46] acrux 0003:1A34:0802.0033: Failed to enable force feedback support, error: -19 [ 134.117229][ T5837] usb 5-1: config 0 has an invalid interface number: 142 but max is 1 [ 134.125403][ T5837] usb 5-1: config 0 has no interface number 0 [ 134.131537][ T5837] usb 5-1: config 0 interface 1 has no altsetting 0 [ 134.139621][ T5837] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 134.148867][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.158447][ T5837] usb 5-1: Product: syz [ 134.162609][ T5837] usb 5-1: Manufacturer: syz [ 134.167471][ T5837] usb 5-1: SerialNumber: syz [ 134.172744][ T5837] usb 5-1: config 0 descriptor?? [ 134.279361][ T46] usb 4-1: USB disconnect, device number 23 [ 134.344539][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1527'. [ 134.416522][ T5837] msi2500 5-1:0.1: Registered as swradio24 [ 134.426810][ T5837] msi2500 5-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 134.477375][ T5837] videodev: could not get a free minor [ 134.477527][ T9579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9579 comm=syz.2.1532 [ 134.482839][ T5837] msi2500 5-1:0.142: Failed to register as video device (-23) [ 134.483593][ T5837] msi2500 5-1:0.142: probe with driver msi2500 failed with error -23 [ 134.518511][ T5837] usb 5-1: USB disconnect, device number 24 [ 134.889890][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 134.889903][ T29] audit: type=1400 audit(1737658509.224:511): avc: denied { lock } for pid=9600 comm="syz.2.1541" path="socket:[28006]" dev="sockfs" ino=28006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 134.959740][ T9612] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1545'. [ 135.068360][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.136299][ T5876] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 135.297404][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 135.310614][ T5876] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.330923][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.345067][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.365966][ T5876] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.382753][ T5876] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.393456][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.508085][ T9661] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1562'. [ 135.589046][ T29] audit: type=1400 audit(1737658509.924:512): avc: denied { listen } for pid=9670 comm="syz.1.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.614593][ T5876] usb 1-1: usb_control_msg returned -32 [ 135.625886][ T5876] usbtmc 1-1:16.0: can't read capabilities [ 135.633771][ T29] audit: type=1400 audit(1737658509.964:513): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 135.821532][ T9699] netlink: 'syz.2.1579': attribute type 4 has an invalid length. [ 135.879256][ T9705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1583'. [ 135.936367][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 136.086228][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 136.092360][ T25] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 136.100811][ T46] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 136.108378][ T25] usb 4-1: config 0 has no interface number 0 [ 136.114448][ T25] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.126728][ T25] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 136.138398][ T25] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 136.149436][ T25] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.163905][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 136.172976][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.180969][ T25] usb 4-1: Product: syz [ 136.185116][ T25] usb 4-1: Manufacturer: syz [ 136.190055][ T25] usb 4-1: SerialNumber: syz [ 136.195772][ T25] usb 4-1: config 0 descriptor?? [ 136.267308][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.278861][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.289752][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 136.299584][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.312524][ T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.321591][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.330908][ T46] usb 3-1: config 0 descriptor?? [ 136.407839][ T25] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 136.658951][ T25] usb 4-1: USB disconnect, device number 24 [ 136.686306][ T5876] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 136.739782][ T46] plantronics 0003:047F:FFFF.0034: ignoring exceeding usage max [ 136.749232][ T46] plantronics 0003:047F:FFFF.0034: No inputs registered, leaving [ 136.758155][ T46] plantronics 0003:047F:FFFF.0034: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 136.837592][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.847784][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.857988][ T5876] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.868267][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.877175][ T5876] usb 5-1: SerialNumber: syz [ 136.943698][ T9] usb 3-1: USB disconnect, device number 35 [ 136.994081][ T9733] loop2: detected capacity change from 0 to 7 [ 137.001648][ T9733] Dev loop2: unable to read RDB block 7 [ 137.007403][ T9733] loop2: unable to read partition table [ 137.013179][ T9733] loop2: partition table beyond EOD, truncated [ 137.019867][ T9733] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.087730][ T5876] usb 5-1: 0:2 : does not exist [ 137.095081][ T5876] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 137.106545][ T5876] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 137.120416][ T5876] usb 5-1: USB disconnect, device number 25 [ 137.297330][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.489830][ T5835] Bluetooth: hci5: sending frame failed (-49) [ 137.495996][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 137.875355][ T29] audit: type=1400 audit(1737658512.204:514): avc: denied { write } for pid=9766 comm="syz.4.1609" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 137.918354][ T25] usb 1-1: USB disconnect, device number 27 [ 137.962296][ T9775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.187044][ T46] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 138.256312][ T5837] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 138.337309][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.347621][ T46] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 138.356685][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.365540][ T46] usb 5-1: config 0 descriptor?? [ 138.406271][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 138.413866][ T5837] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 138.423169][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 138.431359][ T5837] usb 2-1: Product: syz [ 138.435531][ T5837] usb 2-1: Manufacturer: syz [ 138.440130][ T5837] usb 2-1: SerialNumber: syz [ 138.445331][ T5837] usb 2-1: config 0 descriptor?? [ 138.452079][ T5837] gspca_main: sq905-2.14.0 probing 2770:9120 [ 138.575006][ T9] usb 5-1: USB disconnect, device number 26 [ 138.593484][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1626'. [ 138.907297][ T3010] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.961452][ T3010] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.012817][ T3010] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.075435][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.082723][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.091175][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.099123][ T3010] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.099173][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.126887][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.134029][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.205801][ T3010] bridge_slave_1: left allmulticast mode [ 139.212275][ T3010] bridge_slave_1: left promiscuous mode [ 139.218668][ T3010] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.246557][ T3010] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.303909][ T3010] gretap0 (unregistering): left promiscuous mode [ 139.349821][ T3010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.360097][ T3010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.368658][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 139.377032][ T3010] bond0 (unregistering): Released all slaves [ 139.385399][ T3010] bond1 (unregistering): Released all slaves [ 139.460529][ T9824] chnl_net:caif_netlink_parms(): no params data found [ 139.468833][ T5837] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 139.481147][ T5837] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 139.491962][ T5837] usb 2-1: USB disconnect, device number 27 [ 139.541241][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.577525][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.610681][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.640021][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.650632][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.666524][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.671139][ T9829] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.675920][ T9824] bridge_slave_0: entered allmulticast mode [ 139.687606][ T9824] bridge_slave_0: entered promiscuous mode [ 139.700024][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.701178][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.711305][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.726577][ T9824] bridge_slave_1: entered allmulticast mode [ 139.736431][ T9875] syz.2.1652[9875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.736496][ T9875] syz.2.1652[9875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.755433][ T9875] syz.2.1652[9875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.767454][ T9824] bridge_slave_1: entered promiscuous mode [ 139.825157][ T9824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.842150][ T9824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.928613][ T3147] usb 1-1: USB disconnect, device number 28 [ 140.026355][ T5837] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 140.197815][ T5837] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 140.206927][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.215464][ T5837] usb 5-1: config 0 descriptor?? [ 140.625832][ T5837] elan 0003:04F3:0755.0035: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 140.827612][ T9] usb 5-1: USB disconnect, device number 27 [ 140.976334][ T5837] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 141.126253][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 141.132391][ T5837] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.142415][ T5837] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.152275][ T5837] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.156461][ T5829] Bluetooth: hci1: command tx timeout [ 141.162237][ T5837] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.180545][ T5837] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.189588][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.400276][ T5837] usb 1-1: usb_control_msg returned -32 [ 141.405871][ T5837] usbtmc 1-1:16.0: can't read capabilities [ 141.755189][ T9909] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 141.762583][ T9] usb 1-1: USB disconnect, device number 29 [ 143.226311][ T5829] Bluetooth: hci1: command tx timeout [ 145.306582][ T5829] Bluetooth: hci1: command tx timeout [ 147.386311][ T5829] Bluetooth: hci1: command tx timeout [ 155.256316][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.261344][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.263431][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.271534][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.277867][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.284540][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.291983][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.299844][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.305718][ T5842] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.312719][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.319806][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.328396][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.223048][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.230755][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.237935][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.245328][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.252636][ T5843] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.259735][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.396290][ T5829] Bluetooth: hci5: command tx timeout [ 157.401690][ T5829] Bluetooth: hci6: command tx timeout [ 158.219217][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 158.226468][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 158.233583][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 158.241326][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 158.248638][ T5843] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 158.255730][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 159.306404][ T5829] Bluetooth: hci7: command tx timeout [ 159.466300][ T5829] Bluetooth: hci6: command tx timeout [ 159.466302][ T5843] Bluetooth: hci5: command tx timeout [ 160.266284][ T5843] Bluetooth: hci8: command tx timeout [ 161.386283][ T5843] Bluetooth: hci7: command tx timeout [ 161.546252][ T5843] Bluetooth: hci6: command tx timeout [ 161.546261][ T5829] Bluetooth: hci5: command tx timeout [ 162.346273][ T5843] Bluetooth: hci8: command tx timeout [ 163.466285][ T5843] Bluetooth: hci7: command tx timeout [ 163.626263][ T5843] Bluetooth: hci5: command tx timeout [ 163.636296][ T5843] Bluetooth: hci6: command tx timeout [ 164.426251][ T5843] Bluetooth: hci8: command tx timeout [ 165.546340][ T5843] Bluetooth: hci7: command tx timeout [ 166.506293][ T5843] Bluetooth: hci8: command tx timeout [ 193.947463][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.954032][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.734972][ T5829] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 199.742366][ T5829] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 199.749478][ T5829] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 199.756850][ T5829] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 199.764147][ T5829] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 199.771467][ T5829] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 201.786296][ T5829] Bluetooth: hci9: command tx timeout [ 203.866260][ T5829] Bluetooth: hci9: command tx timeout [ 205.946227][ T5829] Bluetooth: hci9: command tx timeout [ 208.026228][ T5829] Bluetooth: hci9: command tx timeout [ 215.810402][ T5843] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 215.817622][ T5843] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 215.821299][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 215.824828][ T5843] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 215.833847][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 215.839374][ T5843] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 215.847463][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 215.853279][ T5843] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 215.860424][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 215.867211][ T5843] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 215.874516][ T5835] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 215.888594][ T5835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 217.777843][ T5842] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 217.785081][ T5842] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 217.792575][ T5842] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 217.800350][ T5842] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 217.807755][ T5842] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 217.815004][ T5842] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 217.946253][ T5835] Bluetooth: hci11: command tx timeout [ 217.946250][ T5842] Bluetooth: hci10: command tx timeout [ 218.789044][ T5842] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 218.796421][ T5842] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 218.803630][ T5842] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 218.811335][ T5842] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 218.818828][ T5842] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 218.825987][ T5842] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 219.866263][ T5835] Bluetooth: hci12: command tx timeout [ 220.026242][ T5842] Bluetooth: hci11: command tx timeout [ 220.026856][ T5835] Bluetooth: hci10: command tx timeout [ 220.906386][ T5835] Bluetooth: hci13: command tx timeout [ 221.946286][ T5835] Bluetooth: hci12: command tx timeout [ 222.106272][ T5835] Bluetooth: hci10: command tx timeout [ 222.106299][ T5842] Bluetooth: hci11: command tx timeout [ 222.986281][ T5842] Bluetooth: hci13: command tx timeout [ 224.026267][ T5842] Bluetooth: hci12: command tx timeout [ 224.186219][ T5842] Bluetooth: hci10: command tx timeout [ 224.196262][ T5842] Bluetooth: hci11: command tx timeout [ 225.066306][ T5842] Bluetooth: hci13: command tx timeout [ 226.106300][ T5842] Bluetooth: hci12: command tx timeout [ 227.146268][ T5842] Bluetooth: hci13: command tx timeout [ 252.346241][ T5835] Bluetooth: hci3: command 0x040f tx timeout [ 255.387480][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.393869][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.809098][ T5835] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 259.816623][ T5835] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 259.823863][ T5835] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 259.831382][ T5835] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 259.838860][ T5835] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 259.846024][ T5835] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 261.866197][ T5835] Bluetooth: hci14: command tx timeout [ 262.586268][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 263.946254][ T5842] Bluetooth: hci14: command tx timeout [ 266.026219][ T5842] Bluetooth: hci14: command tx timeout [ 268.106201][ T5842] Bluetooth: hci14: command tx timeout [ 275.957828][ T5843] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 275.964984][ T5843] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 275.965090][ T5137] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 275.980848][ T5137] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 275.983903][ T5843] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 275.988463][ T5137] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 275.995518][ T5843] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 276.003815][ T5137] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 276.009541][ T5843] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 276.016622][ T5137] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 276.023423][ T5843] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 276.030450][ T5137] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 277.909127][ T5137] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 277.916397][ T5137] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 277.923751][ T5137] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 277.931856][ T5137] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 277.939202][ T5137] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 277.946321][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 277.946568][ T5137] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 277.959601][ T5829] Bluetooth: hci6: command 0x0406 tx timeout [ 278.106253][ T5835] Bluetooth: hci16: command tx timeout [ 278.106259][ T5842] Bluetooth: hci15: command tx timeout [ 278.908328][ T5842] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 278.915577][ T5842] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 278.922854][ T5842] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 278.930318][ T5842] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 278.937756][ T5842] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 278.944934][ T5842] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 280.026213][ T5842] Bluetooth: hci17: command tx timeout [ 280.186232][ T5835] Bluetooth: hci16: command tx timeout [ 280.186672][ T5842] Bluetooth: hci15: command tx timeout [ 280.986826][ T5842] Bluetooth: hci18: command tx timeout [ 282.106204][ T5829] Bluetooth: hci17: command tx timeout [ 282.266182][ T5829] Bluetooth: hci15: command tx timeout [ 282.266236][ T5137] Bluetooth: hci16: command tx timeout [ 283.066595][ T5835] Bluetooth: hci7: command 0x0406 tx timeout [ 283.067925][ T5829] Bluetooth: hci18: command tx timeout [ 283.077192][ T5137] Bluetooth: hci8: command 0x0406 tx timeout [ 284.186268][ T5829] Bluetooth: hci17: command tx timeout [ 284.346264][ T5829] Bluetooth: hci15: command tx timeout [ 284.347482][ T5842] Bluetooth: hci16: command tx timeout [ 285.146203][ T5842] Bluetooth: hci18: command tx timeout [ 286.106790][ T30] INFO: task kworker/1:1:46 blocked for more than 143 seconds. [ 286.114348][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 286.121692][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.130389][ T30] task:kworker/1:1 state:D stack:21488 pid:46 tgid:46 ppid:2 flags:0x00004000 [ 286.140589][ T30] Workqueue: events disconnect_work [ 286.145792][ T30] Call Trace: [ 286.149084][ T30] [ 286.152001][ T30] __schedule+0x1142/0x5b60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.156512][ T30] ? kasan_save_stack+0x42/0x60 [ 286.161687][ T30] ? kasan_save_stack+0x33/0x60 [ 286.188547][ T30] ? kasan_save_track+0x14/0x30 [ 286.193541][ T30] ? kasan_save_free_info+0x3b/0x60 [ 286.198860][ T30] ? vfree+0x311/0x950 [ 286.202931][ T30] ? delayed_vfree_work+0x56/0x70 [ 286.207961][ T30] ? ret_from_fork+0x45/0x80 [ 286.212538][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 286.217474][ T30] ? rcu_is_watching+0x12/0xc0 [ 286.222229][ T30] ? __pfx___schedule+0x10/0x10 [ 286.227083][ T30] ? lock_release+0x4e2/0x6f0 [ 286.231749][ T30] ? schedule+0x298/0x350 [ 286.236064][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.241103][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 286.246493][ T30] ? rcu_is_watching+0x12/0xc0 [ 286.251242][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 286.257230][ T30] schedule+0xe7/0x350 [ 286.261286][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.266789][ T5842] Bluetooth: hci17: command tx timeout [ 286.267837][ T30] __mutex_lock+0x6bd/0xb10 [ 286.276983][ T30] ? disconnect_work+0xa0/0x2a0 [ 286.281834][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 286.287024][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 286.292225][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.298225][ T30] ? process_one_work+0x813/0x1ba0 [ 286.303328][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 286.309226][ T30] ? disconnect_work+0xa0/0x2a0 [ 286.314074][ T30] disconnect_work+0xa0/0x2a0 [ 286.318753][ T30] process_one_work+0x9c5/0x1ba0 [ 286.323682][ T30] ? __pfx_process_one_work+0x10/0x10 [ 286.329045][ T30] ? rcu_is_watching+0x12/0xc0 [ 286.333808][ T30] ? assign_work+0x1a0/0x250 [ 286.338416][ T30] worker_thread+0x6c8/0xf00 [ 286.342999][ T30] ? __pfx_worker_thread+0x10/0x10 [ 286.348110][ T30] kthread+0x3af/0x750 [ 286.352192][ T30] ? __pfx_kthread+0x10/0x10 [ 286.356784][ T30] ? lock_acquire+0x2f/0xb0 [ 286.361281][ T30] ? __pfx_kthread+0x10/0x10 [ 286.365842][ T30] ret_from_fork+0x45/0x80 [ 286.370272][ T30] ? __pfx_kthread+0x10/0x10 [ 286.374853][ T30] ret_from_fork_asm+0x1a/0x30 [ 286.379630][ T30] [ 286.382643][ T30] INFO: task kworker/u8:3:52 blocked for more than 143 seconds. [ 286.390764][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 286.398134][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.406820][ T30] task:kworker/u8:3 state:D stack:24464 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 286.417001][ T30] Workqueue: events_unbound linkwatch_event [ 286.422878][ T30] Call Trace: [ 286.426161][ T30] [ 286.429083][ T30] __schedule+0x1142/0x5b60 [ 286.433560][ T30] ? lock_release+0x4e2/0x6f0 [ 286.438285][ T30] ? update_load_avg+0xfd1/0x20b0 [ 286.443308][ T30] ? lock_release+0x4e2/0x6f0 [ 286.447980][ T30] ? sched_clock_cpu+0x6d/0x4d0 [ 286.452822][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.457845][ T30] ? __pfx___schedule+0x10/0x10 [ 286.462683][ T30] ? lock_release+0x4e2/0x6f0 [ 286.467357][ T30] ? schedule+0x298/0x350 [ 286.471672][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.476719][ T30] ? __mutex_trylock_common+0x78/0x250 [ 286.482170][ T30] ? schedule+0x1fd/0x350 [ 286.486510][ T30] ? lock_acquire+0x2f/0xb0 [ 286.491003][ T30] ? schedule+0x1fd/0x350 [ 286.495319][ T30] schedule+0xe7/0x350 [ 286.499383][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.504830][ T30] __mutex_lock+0x6bd/0xb10 [ 286.509339][ T30] ? __pfx_lock_unpin_lock+0x10/0x10 [ 286.514617][ T30] ? linkwatch_event+0x51/0xc0 [ 286.519420][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 286.524436][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 286.529647][ T30] ? lock_release+0x4e2/0x6f0 [ 286.534299][ T30] ? process_one_work+0x813/0x1ba0 [ 286.539421][ T30] ? rcu_is_watching+0x12/0xc0 [ 286.544171][ T30] ? linkwatch_event+0x51/0xc0 [ 286.548938][ T30] linkwatch_event+0x51/0xc0 [ 286.553521][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 286.559328][ T30] ? rcu_is_watching+0x12/0xc0 [ 286.564077][ T30] process_one_work+0x9c5/0x1ba0 [ 286.569014][ T30] ? __pfx_process_one_work+0x10/0x10 [ 286.574375][ T30] ? rcu_is_watching+0x12/0xc0 [ 286.579147][ T30] ? assign_work+0x1a0/0x250 [ 286.583725][ T30] worker_thread+0x6c8/0xf00 [ 286.588391][ T30] ? __kthread_parkme+0x148/0x220 [ 286.593410][ T30] ? __pfx_worker_thread+0x10/0x10 [ 286.598570][ T30] kthread+0x3af/0x750 [ 286.602630][ T30] ? __pfx_kthread+0x10/0x10 [ 286.607222][ T30] ? lock_acquire+0x2f/0xb0 [ 286.611716][ T30] ? __pfx_kthread+0x10/0x10 [ 286.616308][ T30] ret_from_fork+0x45/0x80 [ 286.620713][ T30] ? __pfx_kthread+0x10/0x10 [ 286.625276][ T30] ret_from_fork_asm+0x1a/0x30 [ 286.630053][ T30] [ 286.633136][ T30] INFO: task kworker/u8:6:3010 blocked for more than 143 seconds. [ 286.640963][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 286.648236][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.656895][ T30] task:kworker/u8:6 state:D stack:25048 pid:3010 tgid:3010 ppid:2 flags:0x00004000 [ 286.667148][ T30] Workqueue: netns cleanup_net [ 286.671912][ T30] Call Trace: [ 286.675163][ T30] [ 286.678106][ T30] __schedule+0x1142/0x5b60 [ 286.682613][ T30] ? __switch_to+0x749/0x1190 [ 286.687312][ T30] ? rcu_is_watching+0x12/0xc0 [ 286.692074][ T30] ? synchronize_rcu_expedited+0x424/0x450 [ 286.697880][ T30] ? __pfx___schedule+0x10/0x10 [ 286.702716][ T30] ? lock_release+0x4e2/0x6f0 [ 286.707404][ T30] ? schedule+0x298/0x350 [ 286.711721][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.716743][ T30] ? __mutex_trylock_common+0x78/0x250 [ 286.722192][ T30] ? schedule+0x1fd/0x350 [ 286.726519][ T30] ? lock_acquire+0x2f/0xb0 [ 286.731012][ T30] ? schedule+0x1fd/0x350 [ 286.735313][ T30] schedule+0xe7/0x350 [ 286.739395][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.744844][ T30] __mutex_lock+0x6bd/0xb10 [ 286.749413][ T30] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 286.756005][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 286.761043][ T30] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 286.766338][ T30] ? __pfx___might_resched+0x10/0x10 [ 286.771623][ T30] ? unregister_netdevice_many_notify+0x959/0x21a0 [ 286.778146][ T30] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 286.784725][ T30] unregister_netdevice_many_notify+0x1a51/0x21a0 [ 286.791145][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 286.797913][ T30] ? rcu_is_watching+0x12/0xc0 [ 286.802647][ T30] ? lock_release+0x4e2/0x6f0 [ 286.807328][ T30] ? kernfs_remove_by_name_ns+0xc4/0x130 [ 286.812956][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.817987][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 286.823962][ T30] unregister_netdevice_queue+0x307/0x3f0 [ 286.829680][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 286.835918][ T30] _cfg80211_unregister_wdev+0x64b/0x830 [ 286.841580][ T30] ieee80211_remove_interfaces+0x34f/0x720 [ 286.847391][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 286.853690][ T30] ieee80211_unregister_hw+0x55/0x3a0 [ 286.859102][ T30] hwsim_exit_net+0x3ad/0x7d0 [ 286.863784][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 286.868996][ T30] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 286.874364][ T30] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 286.880108][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 286.885317][ T30] ops_exit_list+0xb0/0x180 [ 286.889820][ T30] cleanup_net+0x5c6/0xbf0 [ 286.894247][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 286.899189][ T30] ? lock_acquire+0x2f/0xb0 [ 286.903680][ T30] ? process_one_work+0x921/0x1ba0 [ 286.908812][ T30] process_one_work+0x9c5/0x1ba0 [ 286.913745][ T30] ? __pfx_process_one_work+0x10/0x10 [ 286.919127][ T30] ? rcu_is_watching+0x12/0xc0 [ 286.923878][ T30] ? assign_work+0x1a0/0x250 [ 286.928465][ T30] worker_thread+0x6c8/0xf00 [ 286.933060][ T30] ? __kthread_parkme+0x148/0x220 [ 286.938088][ T30] ? __pfx_worker_thread+0x10/0x10 [ 286.943199][ T30] kthread+0x3af/0x750 [ 286.947276][ T30] ? __pfx_kthread+0x10/0x10 [ 286.951853][ T30] ? lock_acquire+0x2f/0xb0 [ 286.956366][ T30] ? __pfx_kthread+0x10/0x10 [ 286.961464][ T30] ret_from_fork+0x45/0x80 [ 286.965852][ T30] ? __pfx_kthread+0x10/0x10 [ 286.970445][ T30] ret_from_fork_asm+0x1a/0x30 [ 286.975207][ T30] [ 286.978254][ T30] INFO: task dhcpcd:5490 blocked for more than 144 seconds. [ 286.985523][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 286.992884][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.002077][ T30] task:dhcpcd state:D stack:23376 pid:5490 tgid:5490 ppid:5489 flags:0x00000002 [ 287.012249][ T30] Call Trace: [ 287.015514][ T30] [ 287.018446][ T30] __schedule+0x1142/0x5b60 [ 287.022954][ T30] ? rcu_is_watching+0x12/0xc0 [ 287.027735][ T30] ? avc_has_perm_noaudit+0x119/0x3a0 [ 287.033098][ T30] ? __pfx___schedule+0x10/0x10 [ 287.037952][ T30] ? lock_release+0x4e2/0x6f0 [ 287.042641][ T30] ? schedule+0x298/0x350 [ 287.046967][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.051982][ T30] ? __mutex_trylock_common+0x78/0x250 [ 287.057468][ T30] ? schedule+0x1fd/0x350 [ 287.061790][ T30] ? lock_acquire+0x2f/0xb0 [ 287.066308][ T30] ? schedule+0x1fd/0x350 [ 287.070623][ T30] schedule+0xe7/0x350 [ 287.074663][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.080115][ T30] __mutex_lock+0x6bd/0xb10 [ 287.084608][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 287.089391][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 287.094403][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 287.100131][ T30] ? cap_capable+0x1cf/0x240 [ 287.104713][ T30] ? ns_capable+0xd7/0x110 [ 287.109137][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 287.113895][ T30] rtnl_newlink+0x5d9/0x1d60 [ 287.118507][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.123522][ T30] ? avc_has_perm_noaudit+0x143/0x3a0 [ 287.128887][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 287.134773][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 287.141016][ T30] ? stack_trace_save+0x95/0xd0 [ 287.145866][ T30] ? rcu_is_watching+0x12/0xc0 [ 287.150626][ T30] ? lock_release+0x4e2/0x6f0 [ 287.155289][ T30] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 287.160409][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.165570][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 287.170771][ T30] ? bpf_lsm_capable+0x9/0x10 [ 287.175435][ T30] ? security_capable+0x7e/0x260 [ 287.180398][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 287.185515][ T30] ? lock_acquire+0x2f/0xb0 [ 287.190012][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 287.195113][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.200137][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 287.205064][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.210529][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 287.215543][ T30] netlink_rcv_skb+0x16b/0x440 [ 287.220308][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.225756][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.231066][ T5842] Bluetooth: hci18: command tx timeout [ 287.236530][ T30] ? lock_release+0x4e2/0x6f0 [ 287.241209][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 287.246543][ T30] netlink_unicast+0x53c/0x7f0 [ 287.251304][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 287.256615][ T30] netlink_sendmsg+0x8b8/0xd70 [ 287.261367][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.266657][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 287.271407][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 287.276865][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.282133][ T30] ? __pfx_netlink_insert+0x10/0x10 [ 287.287329][ T30] ? __rhashtable_lookup.constprop.0+0x397/0x710 [ 287.293644][ T30] ___sys_sendmsg+0x135/0x1e0 [ 287.298327][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.303522][ T30] __sys_sendmsg+0x16e/0x220 [ 287.308133][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.313237][ T30] ? rcu_is_watching+0x12/0xc0 [ 287.318000][ T30] ? rcu_is_watching+0x12/0xc0 [ 287.322749][ T30] do_syscall_64+0xcd/0x250 [ 287.327249][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.333132][ T30] RIP: 0033:0x7f9b44caba4b [ 287.337546][ T30] RSP: 002b:00007ffebcfeeb18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.345954][ T30] RAX: ffffffffffffffda RBX: 00007f9b44bd36c0 RCX: 00007f9b44caba4b [ 287.353920][ T30] RDX: 0000000000000000 RSI: 00007ffebd002cc8 RDI: 0000000000000018 [ 287.361906][ T30] RBP: 0000000000000018 R08: 0000000000000000 R09: 00007ffebd002cc8 [ 287.369890][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 287.377869][ T30] R13: 00007ffebd002cc8 R14: 0000000000000030 R15: 0000000000000001 [ 287.385835][ T30] [ 287.388928][ T30] INFO: task syz-executor:9824 blocked for more than 144 seconds. [ 287.396732][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 287.403989][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.412641][ T30] task:syz-executor state:D stack:24912 pid:9824 tgid:9824 ppid:1 flags:0x00000004 [ 287.422822][ T30] Call Trace: [ 287.426073][ T30] [ 287.429002][ T30] __schedule+0x1142/0x5b60 [ 287.433505][ T30] ? __pfx_veth_validate+0x10/0x10 [ 287.438615][ T30] ? rtnl_get_peer_net+0x1e7/0x3d0 [ 287.443714][ T30] ? rcu_is_watching+0x12/0xc0 [ 287.448480][ T30] ? avc_has_perm_noaudit+0x119/0x3a0 [ 287.453840][ T30] ? __pfx___schedule+0x10/0x10 [ 287.458688][ T30] ? lock_release+0x4e2/0x6f0 [ 287.463353][ T30] ? schedule+0x298/0x350 [ 287.467708][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.472723][ T30] ? __mutex_trylock_common+0x78/0x250 [ 287.478185][ T30] ? schedule+0x1fd/0x350 [ 287.482501][ T30] ? lock_acquire+0x2f/0xb0 [ 287.487002][ T30] ? schedule+0x1fd/0x350 [ 287.491323][ T30] schedule+0xe7/0x350 [ 287.495388][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.500849][ T30] __mutex_lock+0x6bd/0xb10 [ 287.505324][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 287.510088][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 287.515098][ T30] ? cap_capable+0x1cf/0x240 [ 287.519691][ T30] ? ns_capable+0xd7/0x110 [ 287.524096][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 287.528850][ T30] rtnl_newlink+0x5d9/0x1d60 [ 287.533430][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.538450][ T30] ? avc_has_perm_noaudit+0x143/0x3a0 [ 287.543810][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 287.549819][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 287.556088][ T30] ? rcu_is_watching+0x12/0xc0 [ 287.560848][ T30] ? lock_release+0x4e2/0x6f0 [ 287.565512][ T30] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 287.570618][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.575630][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 287.580825][ T30] ? bpf_lsm_capable+0x9/0x10 [ 287.585492][ T30] ? security_capable+0x7e/0x260 [ 287.590432][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 287.595533][ T30] ? lock_acquire+0x2f/0xb0 [ 287.600041][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 287.605153][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.610196][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 287.615128][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.620592][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 287.625590][ T30] netlink_rcv_skb+0x16b/0x440 [ 287.630370][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.635834][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.641116][ T30] ? lock_release+0x4e2/0x6f0 [ 287.645789][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 287.651067][ T30] netlink_unicast+0x53c/0x7f0 [ 287.655827][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 287.661118][ T30] netlink_sendmsg+0x8b8/0xd70 [ 287.665872][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.671157][ T30] __sys_sendto+0x488/0x4f0 [ 287.675650][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 287.680678][ T30] ? xfd_validate_state+0x5d/0x180 [ 287.685778][ T30] ? rcu_is_watching+0x12/0xc0 [ 287.690536][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 287.695287][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 287.701268][ T30] do_syscall_64+0xcd/0x250 [ 287.705759][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.711726][ T30] RIP: 0033:0x7f8dc198ebbc [ 287.716144][ T30] RSP: 002b:00007fff946e5340 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 287.724550][ T30] RAX: ffffffffffffffda RBX: 00007f8dc26d4620 RCX: 00007f8dc198ebbc [ 287.732536][ T30] RDX: 0000000000000068 RSI: 00007f8dc26d4670 RDI: 0000000000000003 [ 287.740517][ T30] RBP: 0000000000000000 R08: 00007fff946e5394 R09: 000000000000000c [ 287.748508][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 287.756472][ T30] R13: 0000000000000000 R14: 00007f8dc26d4670 R15: 0000000000000000 [ 287.764417][ T30] [ 287.767453][ T30] INFO: task syz.2.1657:9888 blocked for more than 145 seconds. [ 287.775062][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 287.782335][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.791000][ T30] task:syz.2.1657 state:D stack:27872 pid:9888 tgid:9887 ppid:8390 flags:0x00000004 [ 287.801151][ T30] Call Trace: [ 287.804417][ T30] [ 287.807362][ T30] __schedule+0x1142/0x5b60 [ 287.811861][ T30] ? __pfx___schedule+0x10/0x10 [ 287.816705][ T30] ? lock_release+0x4e2/0x6f0 [ 287.821370][ T30] ? schedule+0x298/0x350 [ 287.825670][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.830720][ T30] ? __mutex_trylock_common+0x78/0x250 [ 287.836191][ T30] ? schedule+0x1fd/0x350 [ 287.840492][ T30] ? lock_acquire+0x2f/0xb0 [ 287.844975][ T30] ? schedule+0x1fd/0x350 [ 287.849329][ T30] schedule+0xe7/0x350 [ 287.853400][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.858868][ T30] __mutex_lock+0x6bd/0xb10 [ 287.863373][ T30] ? cgrp_css_online+0xa9/0x200 [ 287.868262][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 287.873273][ T30] ? __pfx_idr_alloc_u32+0x10/0x10 [ 287.878386][ T30] ? delete_node+0x207/0x8e0 [ 287.882960][ T30] ? rcu_is_watching+0x12/0xc0 [ 287.887722][ T30] ? lock_release+0x4e2/0x6f0 [ 287.892390][ T30] ? cgrp_css_online+0xa9/0x200 [ 287.897237][ T30] ? rtnl_lock+0x9/0x20 [ 287.901388][ T30] cgrp_css_online+0xa9/0x200 [ 287.906035][ T30] ? __pfx_cgrp_css_online+0x10/0x10 [ 287.911324][ T30] online_css+0xaf/0x350 [ 287.915558][ T30] cgroup_apply_control_enable+0x6d7/0xc80 [ 287.921375][ T30] cgroup_mkdir+0x398/0x1150 [ 287.925957][ T30] ? __pfx_cgroup_mkdir+0x10/0x10 [ 287.930992][ T30] kernfs_iop_mkdir+0x14a/0x1d0 [ 287.935830][ T30] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 287.940873][ T30] vfs_mkdir+0x57d/0x860 [ 287.945106][ T30] do_mkdirat+0x301/0x3a0 [ 287.949483][ T30] ? __pfx_do_mkdirat+0x10/0x10 [ 287.954325][ T30] ? getname_flags.part.0+0x1c5/0x550 [ 287.959690][ T30] __x64_sys_mkdirat+0x83/0xb0 [ 287.964443][ T30] do_syscall_64+0xcd/0x250 [ 287.968951][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.974839][ T30] RIP: 0033:0x7ff390b8cd29 [ 287.979263][ T30] RSP: 002b:00007ff391926038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 287.987702][ T30] RAX: ffffffffffffffda RBX: 00007ff390da5fa0 RCX: 00007ff390b8cd29 [ 287.995656][ T30] RDX: 00000000000001ff RSI: 0000000020000180 RDI: 0000000000000003 [ 288.003630][ T30] RBP: 00007ff390c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.011602][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.019570][ T30] R13: 0000000000000000 R14: 00007ff390da5fa0 R15: 00007ffe5d0af4a8 [ 288.027598][ T30] [ 288.030611][ T30] INFO: task syz.1.1659:9893 blocked for more than 145 seconds. [ 288.038265][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 288.045526][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.054215][ T30] task:syz.1.1659 state:D stack:27040 pid:9893 tgid:9892 ppid:5825 flags:0x00000004 [ 288.064419][ T30] Call Trace: [ 288.067704][ T30] [ 288.070622][ T30] __schedule+0x1142/0x5b60 [ 288.075096][ T30] ? rcu_is_watching+0x12/0xc0 [ 288.079849][ T30] ? lock_release+0x4e2/0x6f0 [ 288.084515][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 288.089716][ T30] ? rcu_is_watching+0x12/0xc0 [ 288.094639][ T30] ? __pfx___schedule+0x10/0x10 [ 288.099494][ T30] ? lock_release+0x4e2/0x6f0 [ 288.104167][ T30] ? schedule+0x298/0x350 [ 288.108570][ T30] ? __pfx_lock_release+0x10/0x10 [ 288.113601][ T30] ? __mutex_trylock_common+0x78/0x250 [ 288.119069][ T30] ? schedule+0x1fd/0x350 [ 288.123388][ T30] ? lock_acquire+0x2f/0xb0 [ 288.127905][ T30] ? schedule+0x1fd/0x350 [ 288.132221][ T30] schedule+0xe7/0x350 [ 288.136287][ T30] schedule_preempt_disabled+0x13/0x30 [ 288.141745][ T30] __mutex_lock+0x6bd/0xb10 [ 288.146257][ T30] ? bpf_xdp_link_attach+0x121/0x690 [ 288.151537][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 288.156568][ T30] ? schedule+0x298/0x350 [ 288.161407][ T30] ? lock_acquire+0x2f/0xb0 [ 288.165897][ T30] ? schedule+0x1fd/0x350 [ 288.170229][ T30] ? bpf_xdp_link_attach+0x121/0x690 [ 288.175506][ T30] bpf_xdp_link_attach+0x121/0x690 [ 288.180618][ T30] ? rcu_is_watching+0x12/0xc0 [ 288.185367][ T30] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 288.191029][ T30] ? __fget_files+0x1fc/0x3a0 [ 288.195699][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 288.200896][ T30] ? rcu_is_watching+0x12/0xc0 [ 288.205644][ T30] ? __fget_files+0x40/0x3a0 [ 288.210248][ T30] ? fput+0x67/0x440 [ 288.214224][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 288.220124][ T30] __sys_bpf+0x1e4f/0x49c0 [ 288.224542][ T30] ? __pfx___sys_bpf+0x10/0x10 [ 288.229334][ T30] ? do_futex+0x123/0x350 [ 288.233658][ T30] ? __pfx_do_futex+0x10/0x10 [ 288.238351][ T30] ? __pfx___x64_sys_futex+0x10/0x10 [ 288.243628][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 288.248748][ T30] __x64_sys_bpf+0x78/0xc0 [ 288.253149][ T30] do_syscall_64+0xcd/0x250 [ 288.257656][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.263713][ T30] RIP: 0033:0x7f3cfd78cd29 [ 288.268164][ T30] RSP: 002b:00007f3cfe636038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.276584][ T30] RAX: ffffffffffffffda RBX: 00007f3cfd9a5fa0 RCX: 00007f3cfd78cd29 [ 288.284528][ T30] RDX: 0000000000000010 RSI: 00000000200000c0 RDI: 000000000000001c [ 288.292503][ T30] RBP: 00007f3cfd80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.300474][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.308443][ T30] R13: 0000000000000000 R14: 00007f3cfd9a5fa0 R15: 00007ffdd8dd1398 [ 288.316414][ T30] [ 288.319415][ T30] INFO: task syz.4.1666:9908 blocked for more than 145 seconds. [ 288.327057][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 288.334318][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.342988][ T30] task:syz.4.1666 state:D stack:27952 pid:9908 tgid:9907 ppid:5831 flags:0x00000004 [ 288.353211][ T30] Call Trace: [ 288.356506][ T30] [ 288.359448][ T30] __schedule+0x1142/0x5b60 [ 288.363949][ T30] ? stack_depot_save_flags+0x28/0x9c0 [ 288.369435][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 288.376735][ T30] ? kasan_save_stack+0x42/0x60 [ 288.381570][ T30] ? kasan_save_stack+0x33/0x60 [ 288.386439][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 288.393716][ T30] ? __pfx___schedule+0x10/0x10 [ 288.398571][ T30] ? lock_release+0x4e2/0x6f0 [ 288.403237][ T30] ? schedule+0x298/0x350 [ 288.407576][ T30] ? __pfx_lock_release+0x10/0x10 [ 288.412590][ T30] ? __mutex_trylock_common+0x78/0x250 [ 288.418058][ T30] ? schedule+0x1fd/0x350 [ 288.422373][ T30] ? lock_acquire+0x2f/0xb0 [ 288.426889][ T30] ? schedule+0x1fd/0x350 [ 288.431213][ T30] schedule+0xe7/0x350 [ 288.435251][ T30] schedule_preempt_disabled+0x13/0x30 [ 288.440704][ T30] __mutex_lock+0x6bd/0xb10 [ 288.445195][ T30] ? nl80211_pre_doit+0xb4/0xb10 [ 288.450138][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 288.455154][ T30] ? __nla_parse+0x40/0x60 [ 288.459572][ T30] ? nl80211_pre_doit+0xb4/0xb10 [ 288.464492][ T30] nl80211_pre_doit+0xb4/0xb10 [ 288.469279][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 288.474638][ T30] genl_family_rcv_msg_doit+0x1be/0x2f0 [ 288.480194][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 288.486287][ T30] ? bpf_lsm_capable+0x9/0x10 [ 288.490960][ T30] ? security_capable+0x7e/0x260 [ 288.495892][ T30] ? ns_capable+0xd7/0x110 [ 288.500326][ T30] genl_rcv_msg+0x565/0x800 [ 288.504820][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.509854][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 288.515212][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 288.520581][ T30] ? __pfx_nl80211_new_key+0x10/0x10 [ 288.525870][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 288.531349][ T30] netlink_rcv_skb+0x16b/0x440 [ 288.536103][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.541146][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.546439][ T30] ? down_read+0xc9/0x330 [ 288.550758][ T30] ? __pfx_down_read+0x10/0x10 [ 288.555493][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 288.560785][ T30] genl_rcv+0x28/0x40 [ 288.564756][ T30] netlink_unicast+0x53c/0x7f0 [ 288.569522][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 288.574798][ T30] netlink_sendmsg+0x8b8/0xd70 [ 288.579559][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.584833][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 288.589640][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 288.595103][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.600388][ T30] ? try_to_wake_up+0x158/0x1490 [ 288.605319][ T30] ___sys_sendmsg+0x135/0x1e0 [ 288.610022][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.615261][ T30] ? __pfx_lock_release+0x10/0x10 [ 288.620308][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 288.625519][ T30] ? __fget_files+0x206/0x3a0 [ 288.630224][ T30] __sys_sendmsg+0x16e/0x220 [ 288.634813][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.639930][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 288.644858][ T30] ? rcu_is_watching+0x12/0xc0 [ 288.649640][ T30] ? rcu_is_watching+0x12/0xc0 [ 288.654396][ T30] do_syscall_64+0xcd/0x250 [ 288.658913][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.664806][ T30] RIP: 0033:0x7f3f8518cd29 [ 288.669430][ T30] RSP: 002b:00007f3f85fbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.678071][ T30] RAX: ffffffffffffffda RBX: 00007f3f853a5fa0 RCX: 00007f3f8518cd29 [ 288.686506][ T30] RDX: 0000000000004000 RSI: 0000000020000280 RDI: 0000000000000004 [ 288.694462][ T30] RBP: 00007f3f8520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.702443][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.710423][ T30] R13: 0000000000000000 R14: 00007f3f853a5fa0 R15: 00007fff0c3e72e8 [ 288.718404][ T30] [ 288.721417][ T30] INFO: task syz.0.1671:9920 blocked for more than 145 seconds. [ 288.729237][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 288.736510][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.745145][ T30] task:syz.0.1671 state:D stack:27288 pid:9920 tgid:9919 ppid:5836 flags:0x00000004 [ 288.755363][ T30] Call Trace: [ 288.759224][ T30] [ 288.762149][ T30] __schedule+0x1142/0x5b60 [ 288.766673][ T30] ? __kernel_text_address+0xd/0x40 [ 288.771862][ T30] ? unwind_get_return_address+0x59/0xa0 [ 288.777497][ T30] ? arch_stack_walk+0xa7/0x100 [ 288.782343][ T30] ? __pfx___schedule+0x10/0x10 [ 288.787197][ T30] ? lock_release+0x4e2/0x6f0 [ 288.791872][ T30] ? schedule+0x298/0x350 [ 288.796208][ T30] ? __pfx_lock_release+0x10/0x10 [ 288.801222][ T30] ? __mutex_trylock_common+0x78/0x250 [ 288.806687][ T30] ? schedule+0x1fd/0x350 [ 288.811023][ T30] ? lock_acquire+0x2f/0xb0 [ 288.815497][ T30] ? schedule+0x1fd/0x350 [ 288.819829][ T30] schedule+0xe7/0x350 [ 288.823884][ T30] schedule_preempt_disabled+0x13/0x30 [ 288.829353][ T30] __mutex_lock+0x6bd/0xb10 [ 288.833850][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 288.839052][ T30] ? start_sync_thread+0x134/0x28e0 [ 288.844256][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 288.849328][ T30] ? lock_acquire+0x2f/0xb0 [ 288.853833][ T30] ? is_bpf_text_address+0x30/0x1a0 [ 288.859041][ T30] ? bpf_ksym_find+0x127/0x1c0 [ 288.863804][ T30] ? kernel_text_address+0x8d/0x100 [ 288.869021][ T30] ? bpf_ksym_find+0x127/0x1c0 [ 288.873779][ T30] ? __kernel_text_address+0xd/0x40 [ 288.878998][ T30] ? unwind_get_return_address+0x59/0xa0 [ 288.884628][ T30] ? start_sync_thread+0x134/0x28e0 [ 288.889851][ T30] ? rtnl_lock+0x9/0x20 [ 288.894009][ T30] start_sync_thread+0x134/0x28e0 [ 288.899074][ T30] ? stack_trace_save+0x95/0xd0 [ 288.903913][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 288.909295][ T30] ? stack_depot_save_flags+0x28/0x9c0 [ 288.914756][ T30] ? __pfx_start_sync_thread+0x10/0x10 [ 288.920218][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 288.927538][ T30] ? kasan_save_stack+0x42/0x60 [ 288.932376][ T30] ? kasan_save_stack+0x33/0x60 [ 288.937234][ T30] ? kasan_save_track+0x14/0x30 [ 288.942078][ T30] ? __kasan_kmalloc+0xaa/0xb0 [ 288.946859][ T30] ? __kmalloc_noprof+0x21c/0x510 [ 288.951877][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 288.959837][ T30] ? genl_family_rcv_msg_doit+0xbf/0x2f0 [ 288.965482][ T30] ? genl_rcv_msg+0x565/0x800 [ 288.970168][ T30] ? netlink_rcv_skb+0x16b/0x440 [ 288.975095][ T30] ? genl_rcv+0x28/0x40 [ 288.979265][ T30] ? netlink_unicast+0x53c/0x7f0 [ 288.984192][ T30] ? netlink_sendmsg+0x8b8/0xd70 [ 288.989145][ T30] ? ____sys_sendmsg+0xaaf/0xc90 [ 288.994071][ T30] ? ___sys_sendmsg+0x135/0x1e0 [ 288.998996][ T30] ? __sys_sendmsg+0x16e/0x220 [ 289.003751][ T30] ? do_syscall_64+0xcd/0x250 [ 289.008459][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.014359][ T30] ? ip_vs_genl_new_daemon+0x4af/0x690 [ 289.019845][ T30] ip_vs_genl_new_daemon+0x4af/0x690 [ 289.025124][ T30] ? __pfx_ip_vs_genl_new_daemon+0x10/0x10 [ 289.030961][ T30] ? __nla_validate_parse+0x601/0x2880 [ 289.036462][ T30] ? __nla_parse+0x40/0x60 [ 289.040898][ T30] ip_vs_genl_set_daemon+0x327/0x3c0 [ 289.046203][ T30] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 289.052005][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 289.059837][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 289.067234][ T30] genl_family_rcv_msg_doit+0x202/0x2f0 [ 289.072758][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 289.078841][ T30] ? bpf_lsm_capable+0x9/0x10 [ 289.083520][ T30] ? security_capable+0x7e/0x260 [ 289.088478][ T30] genl_rcv_msg+0x565/0x800 [ 289.092974][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.097999][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 289.103377][ T30] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 289.109193][ T30] netlink_rcv_skb+0x16b/0x440 [ 289.113948][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.118990][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.124354][ T30] ? down_read+0xc9/0x330 [ 289.128693][ T30] ? __pfx_down_read+0x10/0x10 [ 289.133447][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 289.138752][ T30] genl_rcv+0x28/0x40 [ 289.142749][ T30] netlink_unicast+0x53c/0x7f0 [ 289.147974][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 289.153255][ T30] netlink_sendmsg+0x8b8/0xd70 [ 289.158105][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.163380][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 289.168144][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 289.173594][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.178888][ T30] ? try_to_wake_up+0x158/0x1490 [ 289.183815][ T30] ___sys_sendmsg+0x135/0x1e0 [ 289.188499][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.193688][ T30] ? __pfx_lock_release+0x10/0x10 [ 289.198716][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 289.203901][ T30] ? __fget_files+0x206/0x3a0 [ 289.208589][ T30] __sys_sendmsg+0x16e/0x220 [ 289.213169][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.218277][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 289.223203][ T30] ? rcu_is_watching+0x12/0xc0 [ 289.227973][ T30] ? rcu_is_watching+0x12/0xc0 [ 289.232720][ T30] do_syscall_64+0xcd/0x250 [ 289.237229][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.243110][ T30] RIP: 0033:0x7fdbf798cd29 [ 289.247541][ T30] RSP: 002b:00007fdbf8844038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.255943][ T30] RAX: ffffffffffffffda RBX: 00007fdbf7ba5fa0 RCX: 00007fdbf798cd29 [ 289.263912][ T30] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 289.271921][ T30] RBP: 00007fdbf7a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 289.279903][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.287900][ T30] R13: 0000000000000000 R14: 00007fdbf7ba5fa0 R15: 00007ffc1184c4a8 [ 289.295871][ T30] [ 289.298912][ T30] INFO: lockdep is turned off. [ 289.303651][ T30] NMI backtrace for cpu 0 [ 289.303657][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 289.303667][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 289.303672][ T30] Call Trace: [ 289.303675][ T30] [ 289.303678][ T30] dump_stack_lvl+0x116/0x1f0 [ 289.303692][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 289.303705][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.303715][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 289.303729][ T30] watchdog+0xf14/0x1240 [ 289.303741][ T30] ? __pfx_watchdog+0x10/0x10 [ 289.303752][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.303762][ T30] ? __kthread_parkme+0x148/0x220 [ 289.303775][ T30] ? __pfx_watchdog+0x10/0x10 [ 289.303786][ T30] kthread+0x3af/0x750 [ 289.303795][ T30] ? __pfx_kthread+0x10/0x10 [ 289.303804][ T30] ? __pfx_kthread+0x10/0x10 [ 289.303813][ T30] ret_from_fork+0x45/0x80 [ 289.303822][ T30] ? __pfx_kthread+0x10/0x10 [ 289.303830][ T30] ret_from_fork_asm+0x1a/0x30 [ 289.303847][ T30] [ 289.303850][ T30] Sending NMI from CPU 0 to CPUs 1: [ 289.414734][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 289.424751][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 289.431589][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 289.441706][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 289.451730][ T30] Call Trace: [ 289.454989][ T30] [ 289.457895][ T30] dump_stack_lvl+0x3d/0x1f0 [ 289.462458][ T30] panic+0x71d/0x800 [ 289.466323][ T30] ? __pfx_panic+0x10/0x10 [ 289.470706][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 289.476045][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.482002][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 289.487353][ T30] ? watchdog+0xd7e/0x1240 [ 289.491742][ T30] ? watchdog+0xd71/0x1240 [ 289.496132][ T30] watchdog+0xd8f/0x1240 [ 289.500377][ T30] ? __pfx_watchdog+0x10/0x10 [ 289.505054][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.510223][ T30] ? __kthread_parkme+0x148/0x220 [ 289.515220][ T30] ? __pfx_watchdog+0x10/0x10 [ 289.519875][ T30] kthread+0x3af/0x750 [ 289.523913][ T30] ? __pfx_kthread+0x10/0x10 [ 289.528481][ T30] ? __pfx_kthread+0x10/0x10 [ 289.533052][ T30] ret_from_fork+0x45/0x80 [ 289.537451][ T30] ? __pfx_kthread+0x10/0x10 [ 289.542018][ T30] ret_from_fork_asm+0x1a/0x30 [ 289.546770][ T30] [ 289.549950][ T30] Kernel Offset: disabled [ 289.554248][ T30] Rebooting in 86400 seconds..