last executing test programs: 43.953754535s ago: executing program 3 (id=687): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x33fe0}], 0x1}, 0x0) 43.863507846s ago: executing program 3 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2a, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4c}]}, 0x2c}}, 0x0) 43.814072699s ago: executing program 3 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 43.687960368s ago: executing program 3 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x212f4d1, 0x0) mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) 43.653844868s ago: executing program 3 (id=691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000004503"]) 43.38730234s ago: executing program 3 (id=692): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x2000ae01, 0x0) 43.289685078s ago: executing program 32 (id=692): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x2000ae01, 0x0) 3.598645603s ago: executing program 2 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10040}, 0xc000) 3.48275691s ago: executing program 2 (id=1285): iopl(0x3) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 3.368748034s ago: executing program 0 (id=1288): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x30, r0, 0x20d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x81}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x1}]}]}, 0x30}}, 0x0) 3.368349053s ago: executing program 2 (id=1289): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = epoll_create(0x47f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000540)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 3.240714394s ago: executing program 2 (id=1291): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x8, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000300)={0x3, 0x100, 0x3, 0x1, 0x40, 0x9}) 3.240561499s ago: executing program 0 (id=1292): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000f40)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3ef4, 0x222000) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/84) 3.006424756s ago: executing program 5 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)=@arm64={0x9, 0x3, 0x6, '\x00', 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) 2.86055805s ago: executing program 5 (id=1302): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x14) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00220b000000900bc074069347"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.450825033s ago: executing program 1 (id=1307): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) 2.37575794s ago: executing program 1 (id=1308): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 2.315736856s ago: executing program 1 (id=1309): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) socket(0x1d, 0x2, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000700), 0x8800, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.447847117s ago: executing program 0 (id=1322): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000200), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0xfe, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) 1.360613174s ago: executing program 1 (id=1323): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) write$hidraw(r1, 0x0, 0x0) 1.161888721s ago: executing program 5 (id=1325): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2014c7f, &(0x7f0000000100)={[{@gid={'gid', 0x3d, r1}}]}) 1.009840077s ago: executing program 5 (id=1327): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f00000005c0)=@canfd={{}, 0x7e, 0x3, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9126ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x4045185}, 0x0) 962.837184ms ago: executing program 4 (id=1328): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1, 0x0, 0x0) 919.434799ms ago: executing program 5 (id=1329): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x156, @time={0x48}}) 884.837603ms ago: executing program 4 (id=1330): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x3) 849.740426ms ago: executing program 0 (id=1331): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x412}, 0x45) sendmmsg$inet(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001d00)="84ae1baf930b4569b9dd", 0xa}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 714.270086ms ago: executing program 4 (id=1332): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x3, 0xf00, 0x10000) read$char_usb(r0, &(0x7f0000000000)=""/159, 0x9f) 615.418901ms ago: executing program 5 (id=1333): r0 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x6be00000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000000)) 614.749484ms ago: executing program 2 (id=1334): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000580)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 532.145342ms ago: executing program 0 (id=1335): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 489.054726ms ago: executing program 4 (id=1336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x6, 0x0, @val=@tracing}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) 372.648095ms ago: executing program 2 (id=1337): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TCGETS2(r1, 0x800455ca, 0x0) 304.239316ms ago: executing program 4 (id=1338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 145.93728ms ago: executing program 0 (id=1339): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rtc_irq_set_state\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r1, r2, 0x0) 129.825631ms ago: executing program 1 (id=1340): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 120.033671ms ago: executing program 4 (id=1341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="af718e423cd3"}]}, 0x44}}, 0x0) 0s ago: executing program 1 (id=1342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xff, 0x800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x10000, 0x0, 0x0, r2}) kernel console output (not intermixed with test programs): 6][ T9] usb 2-1: USB disconnect, device number 5 [ 74.864406][ T29] audit: type=1400 audit(1730662696.250:255): avc: denied { create } for pid=6412 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.884398][ T29] audit: type=1400 audit(1730662696.260:256): avc: denied { connect } for pid=6412 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.204430][ T29] audit: type=1400 audit(1730662696.640:257): avc: denied { connect } for pid=6431 comm="syz.4.213" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.440700][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.589976][ T6443] netlink: 36 bytes leftover after parsing attributes in process `syz.4.217'. [ 75.606805][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10 [ 75.622998][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25772, setting to 1024 [ 75.638561][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 75.663080][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.673828][ T9] usb 1-1: config 0 descriptor?? [ 75.693852][ T6429] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.743568][ T29] audit: type=1400 audit(1730662697.180:258): avc: denied { create } for pid=6453 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.805448][ T29] audit: type=1400 audit(1730662697.240:259): avc: denied { setopt } for pid=6453 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.112152][ T9] appletouch 1-1:0.0: Geyser mode initialized. [ 76.120179][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 76.324072][ T5876] usb 1-1: USB disconnect, device number 3 [ 76.363472][ T5876] appletouch 1-1:0.0: input: appletouch disconnected [ 76.465709][ T1201] cfg80211: failed to load regulatory.db [ 76.583679][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.627668][ T6494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6494 comm=syz.2.231 [ 76.750529][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 76.762146][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.803325][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.850369][ T5906] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 76.914669][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.967964][ T5906] usb 5-1: config 0 descriptor?? [ 77.187727][ T29] audit: type=1400 audit(1730662698.620:260): avc: denied { connect } for pid=6511 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.418835][ T5906] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 77.453169][ T5906] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 77.480522][ T5906] hid-alps 0003:044E:120C.0003: item fetching failed at offset 2/5 [ 77.488978][ T5906] hid-alps 0003:044E:120C.0003: parse failed [ 77.515390][ T5906] hid-alps 0003:044E:120C.0003: probe with driver hid-alps failed with error -22 [ 77.601381][ T29] audit: type=1400 audit(1730662698.940:261): avc: denied { bind } for pid=6521 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.745108][ T5906] usb 5-1: USB disconnect, device number 4 [ 77.773308][ T29] audit: type=1400 audit(1730662699.200:262): avc: denied { create } for pid=6530 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.822201][ T29] audit: type=1400 audit(1730662699.240:263): avc: denied { write } for pid=6530 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.252580][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 78.673402][ T5132] IPVS: starting estimator thread 0... [ 78.770919][ T6557] IPVS: using max 21 ests per chain, 50400 per kthread [ 78.868984][ T6563] i2c i2c-0: Invalid block write size 252 [ 79.046897][ T6571] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.261'. [ 79.163295][ T5906] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 79.264293][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 79.352273][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 79.364384][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 79.377594][ T5906] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 79.390418][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.398501][ T5906] usb 2-1: Product: syz [ 79.402805][ T5906] usb 2-1: Manufacturer: syz [ 79.408389][ T5906] usb 2-1: SerialNumber: syz [ 79.415307][ T5906] usb 2-1: config 0 descriptor?? [ 79.421174][ T6565] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.428573][ T6565] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.647999][ T6565] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.656099][ T6591] syz.0.271 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.656192][ T6565] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.711485][ T6593] ptrace attach of ""[6594] was attempted by "./syz-executor exec"[6593] [ 79.799560][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 79.799577][ T29] audit: type=1400 audit(1730662701.230:266): avc: denied { listen } for pid=6597 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.907538][ T29] audit: type=1400 audit(1730662701.270:267): avc: denied { accept } for pid=6597 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.025882][ T6602] MPI: mpi too large (181568 bits) [ 80.135941][ T5906] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 80.144591][ T6604] hsr_slave_0 (unregistering): left promiscuous mode [ 80.349095][ T5906] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 80.388812][ T5906] usb 2-1: USB disconnect, device number 6 [ 80.688008][ T29] audit: type=1400 audit(1730662702.120:268): avc: denied { watch_mount } for pid=6625 comm="syz.3.287" path="/58" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.231929][ T6643] openvswitch: netlink: Actions may not be safe on all matching packets [ 81.309940][ T29] audit: type=1400 audit(1730662702.730:269): avc: denied { write } for pid=6647 comm="syz.2.297" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.335669][ T5876] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 81.380226][ T29] audit: type=1400 audit(1730662702.730:270): avc: denied { open } for pid=6647 comm="syz.2.297" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.465347][ T29] audit: type=1400 audit(1730662702.730:271): avc: denied { ioctl } for pid=6647 comm="syz.2.297" path="/dev/input/event1" dev="devtmpfs" ino=919 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.579265][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.601790][ T5876] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 81.621320][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.647507][ T5876] usb 2-1: config 0 descriptor?? [ 82.040737][ T1201] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 82.148059][ T5876] hid-steam 0003:28DE:1205.0004: item fetching failed at offset 3/5 [ 82.199660][ T5876] hid-steam 0003:28DE:1205.0004: steam_probe:parse of hid interface failed [ 82.232841][ T5876] hid-steam 0003:28DE:1205.0004: probe with driver hid-steam failed with error -22 [ 82.265739][ T29] audit: type=1400 audit(1730662703.700:272): avc: denied { read write } for pid=6665 comm="syz.3.305" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.269861][ T1201] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 82.344258][ T1201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.364205][ T1201] usb 3-1: Product: syz [ 82.365653][ T29] audit: type=1400 audit(1730662703.700:273): avc: denied { open } for pid=6665 comm="syz.3.305" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.368423][ T1201] usb 3-1: Manufacturer: syz [ 82.460348][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 82.466729][ T1201] usb 3-1: SerialNumber: syz [ 82.472630][ T5906] usb 2-1: USB disconnect, device number 7 [ 82.520584][ T29] audit: type=1400 audit(1730662703.700:274): avc: denied { ioctl } for pid=6657 comm="syz.2.301" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.557762][ T1201] usb 3-1: config 0 descriptor?? [ 82.574359][ T1201] ch341 3-1:0.0: ch341-uart converter detected [ 82.615114][ T29] audit: type=1400 audit(1730662703.910:275): avc: denied { read } for pid=6671 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.699995][ T6681] Zero length message leads to an empty skb [ 82.798170][ T6686] CUSE: info not properly terminated [ 83.077505][ T6699] misc userio: Invalid payload size [ 83.389585][ T1201] usb 3-1: failed to send control message: -71 [ 83.396495][ T1201] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 83.417052][ T1201] usb 3-1: USB disconnect, device number 5 [ 83.425417][ T1201] ch341 3-1:0.0: device disconnected [ 84.141493][ T1201] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.321253][ T1201] usb 1-1: Using ep0 maxpacket: 16 [ 84.378226][ T1201] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 84.390026][ T1201] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.433343][ T1201] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 84.443049][ T1201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.458840][ T1201] usb 1-1: Product: syz [ 84.468233][ T1201] usb 1-1: Manufacturer: syz [ 84.474131][ T1201] usb 1-1: SerialNumber: syz [ 84.484671][ T1201] usb 1-1: config 0 descriptor?? [ 84.515916][ T1201] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 84.560462][ T1201] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 84.657688][ T6762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.347'. [ 85.005529][ T6775] capability: warning: `syz.1.353' uses deprecated v2 capabilities in a way that may be insecure [ 85.150053][ T1201] em28xx 1-1:0.0: chip ID is em2765 [ 85.356613][ T1201] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 85.366788][ T1201] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 85.377083][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 85.378943][ T1201] em28xx 1-1:0.0: No AC97 audio processor [ 85.402784][ T1201] usb 1-1: USB disconnect, device number 4 [ 85.409318][ T1201] em28xx 1-1:0.0: Disconnecting em28xx [ 85.421993][ T1201] em28xx 1-1:0.0: Freeing device [ 85.520964][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 85.590582][ T5906] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 85.681835][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.690233][ T25] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 85.699335][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.708449][ T25] usb 3-1: Product: syz [ 85.712830][ T25] usb 3-1: Manufacturer: syz [ 85.717439][ T25] usb 3-1: SerialNumber: syz [ 85.731161][ T25] usb 3-1: config 0 descriptor?? [ 85.744998][ T25] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 85.752629][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 85.761985][ T5906] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 85.771789][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 85.779546][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 85.783314][ T5906] usb 2-1: config 4 has no interface number 0 [ 85.795251][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 85.809074][ T5906] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 85.810518][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 85.819923][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.841384][ T5906] usb 2-1: Product: syz [ 85.843303][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 85.845687][ T5906] usb 2-1: Manufacturer: syz [ 85.864412][ T5906] usb 2-1: SerialNumber: syz [ 85.878246][ T25] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 85.885368][ T5906] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 85.900013][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 85.931087][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 85.938774][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 85.956479][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 85.969852][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 85.993692][ T25] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 86.016434][ T25] usb 3-1: USB disconnect, device number 6 [ 86.070882][ T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 86.099531][ T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 86.122311][ T25] keyspan 3-1:0.0: device disconnected [ 86.125532][ T5906] vp7045: USB control message 'out' went wrong. [ 86.155141][ T5906] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 86.190497][ T5906] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 86.221814][ T5906] usb 2-1: USB disconnect, device number 8 [ 86.291207][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 86.291223][ T29] audit: type=1400 audit(1730662707.730:290): avc: denied { write } for pid=6804 comm="syz.3.367" path="socket:[11615]" dev="sockfs" ino=11615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.321928][ T6806] Bluetooth: MGMT ver 1.23 [ 86.904782][ T29] audit: type=1400 audit(1730662708.340:291): avc: denied { read } for pid=6827 comm="syz.2.377" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.927924][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.968858][ T29] audit: type=1400 audit(1730662708.400:292): avc: denied { open } for pid=6827 comm="syz.2.377" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.202906][ T6838] netlink: 112 bytes leftover after parsing attributes in process `syz.2.381'. [ 87.231371][ T6838] bond0: option mode: unable to set because the bond device has slaves [ 87.621546][ T29] audit: type=1400 audit(1730662709.060:293): avc: denied { read write } for pid=6862 comm="syz.4.393" name="sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.700612][ T1201] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 87.724123][ T29] audit: type=1400 audit(1730662709.060:294): avc: denied { open } for pid=6862 comm="syz.4.393" path="/dev/sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.747851][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.805319][ T29] audit: type=1400 audit(1730662709.090:295): avc: denied { ioctl } for pid=6862 comm="syz.4.393" path="/dev/sg0" dev="devtmpfs" ino=710 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.830516][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.860615][ T1201] usb 3-1: Using ep0 maxpacket: 8 [ 87.898536][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 87.918605][ T1201] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.943862][ T1201] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.967591][ T1201] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.988754][ T1201] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.046652][ T1201] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.079421][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.101007][ T29] audit: type=1400 audit(1730662709.540:296): avc: denied { read } for pid=6878 comm="syz.1.401" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.144973][ T6880] input: syz0 as /devices/virtual/input/input8 [ 88.313029][ T1201] usb 3-1: GET_CAPABILITIES returned 0 [ 88.350080][ T1201] usbtmc 3-1:16.0: can't read capabilities [ 88.389441][ T29] audit: type=1326 audit(1730662709.820:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bad7e719 code=0x7ffc0000 [ 88.415186][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.478041][ T29] audit: type=1326 audit(1730662709.820:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bad7e719 code=0x7ffc0000 [ 88.541102][ T29] audit: type=1326 audit(1730662709.820:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f94bad7e719 code=0x7ffc0000 [ 88.558876][ T1201] usb 3-1: USB disconnect, device number 7 [ 88.564306][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.783165][ T5840] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 88.791851][ T5840] Bluetooth: hci1: Injecting HCI hardware error event [ 88.801068][ T5831] Bluetooth: hci1: hardware error 0x00 [ 89.068574][ T6929] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 89.279596][ T6937] sctp: [Deprecated]: syz.4.420 (pid 6937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.279596][ T6937] Use struct sctp_sack_info instead [ 89.286240][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.422'. [ 89.367927][ T6938] netlink: 'syz.0.423': attribute type 9 has an invalid length. [ 89.397253][ T6938] netlink: 134712 bytes leftover after parsing attributes in process `syz.0.423'. [ 89.660476][ T5878] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 89.830376][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 89.844206][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.885774][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.923518][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 89.951820][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.996021][ T5878] usb 3-1: config 0 descriptor?? [ 90.439885][ T5878] logitech 0003:046D:CA03.0005: item fetching failed at offset 0/5 [ 90.473533][ T5878] logitech 0003:046D:CA03.0005: parse failed [ 90.479641][ T5878] logitech 0003:046D:CA03.0005: probe with driver logitech failed with error -22 [ 90.767603][ T5132] usb 3-1: USB disconnect, device number 8 [ 91.029645][ T5831] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 91.080722][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.098958][ T6973] netlink: 76 bytes leftover after parsing attributes in process `syz.3.440'. [ 91.280982][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 91.303656][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.341788][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.366541][ T5878] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 91.382782][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.403773][ T5878] usb 1-1: config 0 descriptor?? [ 91.824300][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 91.824340][ T29] audit: type=1400 audit(1730662713.252:307): avc: denied { getopt } for pid=6990 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.850336][ T29] audit: type=1326 audit(1730662713.262:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2197e719 code=0x7ffc0000 [ 91.874173][ T29] audit: type=1326 audit(1730662713.262:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2197e719 code=0x7ffc0000 [ 91.897368][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.904365][ T29] audit: type=1326 audit(1730662713.332:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf2197e719 code=0x7ffc0000 [ 91.927550][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.934298][ T29] audit: type=1326 audit(1730662713.352:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2197e719 code=0x7ffc0000 [ 91.958152][ T29] audit: type=1326 audit(1730662713.352:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2197e719 code=0x7ffc0000 [ 91.981335][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.988274][ T29] audit: type=1326 audit(1730662713.352:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf2197e719 code=0x7ffc0000 [ 92.011466][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.019111][ T29] audit: type=1400 audit(1730662713.432:314): avc: denied { rename } for pid=5185 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.042025][ T29] audit: type=1400 audit(1730662713.432:315): avc: denied { unlink } for pid=5185 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.064336][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.071007][ T29] audit: type=1400 audit(1730662713.432:316): avc: denied { create } for pid=5185 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.094632][ T5878] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 92.160477][ T5878] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 92.168164][ T5878] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 92.205433][ T5878] usb 1-1: USB disconnect, device number 5 [ 93.170496][ T5876] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 93.332736][ T5876] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 93.346035][ T5876] usb 1-1: config 0 has no interface number 0 [ 93.354365][ T5876] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 93.368819][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.378083][ T5876] usb 1-1: Product: syz [ 93.387460][ T5876] usb 1-1: Manufacturer: syz [ 93.392328][ T5876] usb 1-1: SerialNumber: syz [ 93.399126][ T5876] usb 1-1: config 0 descriptor?? [ 93.413239][ T5878] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.580133][ T5878] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 93.590732][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.610859][ T5878] usb 4-1: config 0 descriptor?? [ 93.637879][ T5876] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 93.657498][ T5876] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 93.675778][ T5876] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 93.690687][ T5876] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 93.699863][ T5876] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 94.074009][ T5876] usb 1-1: USB disconnect, device number 6 [ 94.090756][ T5876] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 94.121619][ T5876] keyspan 1-1:0.133: device disconnected [ 94.273763][ T7062] syz.2.479 (7062) used greatest stack depth: 19968 bytes left [ 94.394342][ T7090] netlink: 'syz.2.490': attribute type 10 has an invalid length. [ 94.419917][ T7090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.435061][ T7090] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 94.447170][ T5878] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 94.484067][ T5878] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 94.515614][ T5878] asix 4-1:0.0: probe with driver asix failed with error -71 [ 94.536066][ T5878] usb 4-1: USB disconnect, device number 6 [ 94.800422][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 95.210475][ T1201] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 95.295471][ T7136] kernel read not supported for file /cpuset.effective_mems (pid: 7136 comm: syz.3.508) [ 95.360830][ T1201] usb 3-1: Using ep0 maxpacket: 8 [ 95.372196][ T1201] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 95.400471][ T1201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.417923][ T1201] usb 3-1: Product: syz [ 95.425615][ T1201] usb 3-1: Manufacturer: syz [ 95.430806][ T1201] usb 3-1: SerialNumber: syz [ 95.437362][ T1201] usb 3-1: config 0 descriptor?? [ 95.659790][ T1201] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 95.680542][ T1201] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 95.695809][ T1201] usb 3-1: USB disconnect, device number 9 [ 95.765606][ T7159] TCP: tcp_parse_options: Illegal window scaling value 247 > 14 received [ 95.880716][ T5876] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 96.045735][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 96.057399][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 96.069601][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 96.090375][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 96.105370][ T5876] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 96.114714][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.122889][ T5876] usb 4-1: Product: syz [ 96.127116][ T5876] usb 4-1: Manufacturer: syz [ 96.131837][ T5876] usb 4-1: SerialNumber: syz [ 96.138327][ T5876] usb 4-1: config 0 descriptor?? [ 96.153389][ T5876] iguanair 4-1:0.0: failed to submit urb: -90 [ 96.159623][ T5876] iguanair 4-1:0.0: probe with driver iguanair failed with error -90 [ 96.363020][ T5878] usb 4-1: USB disconnect, device number 7 [ 96.861049][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 96.891706][ T7208] trusted_key: encrypted_key: keyword 'upÇ-~î(:qYault' not recognized [ 97.037327][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 97.037345][ T29] audit: type=1400 audit(1730662718.472:532): avc: denied { create } for pid=7216 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.104109][ T29] audit: type=1400 audit(1730662718.512:533): avc: denied { ioctl } for pid=7216 comm="syz.1.544" path="socket:[14707]" dev="sockfs" ino=14707 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.134038][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 97.167153][ T29] audit: type=1400 audit(1730662718.592:534): avc: denied { write } for pid=7222 comm="syz.2.547" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.540408][ T5906] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 97.641025][ T5132] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 97.691929][ T5906] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 97.705945][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.717770][ T5906] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 97.732188][ T5906] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 97.741384][ T5906] usb 2-1: Manufacturer: syz [ 97.755879][ T5906] usb 2-1: config 0 descriptor?? [ 97.817282][ T7221] team0 (unregistering): Port device team_slave_0 removed [ 97.824866][ T5906] rc_core: IR keymap rc-hauppauge not found [ 97.831864][ T5906] Registered IR keymap rc-empty [ 97.838820][ T5906] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 97.840532][ T5132] usb 3-1: Using ep0 maxpacket: 16 [ 97.853490][ T7221] team0 (unregistering): Port device team_slave_1 removed [ 97.869462][ T5906] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 97.875025][ T5132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.901449][ T5132] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.918700][ T5132] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.950264][ T5132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.991090][ T5132] usb 3-1: config 0 descriptor?? [ 98.179120][ C0] igorplugusb 2-1:0.0: receive overflow, at least 4 lost [ 98.280033][ T29] audit: type=1400 audit(1730662719.712:535): avc: denied { create } for pid=7256 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.308507][ T29] audit: type=1400 audit(1730662719.712:536): avc: denied { connect } for pid=7256 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.388866][ T5876] usb 2-1: USB disconnect, device number 9 [ 98.728651][ T29] audit: type=1326 audit(1730662720.162:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.0.564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e2cb7e719 code=0x0 [ 98.978361][ T7279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.570497][ T29] audit: type=1326 audit(1730662721.002:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.3.580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf2197e719 code=0x0 [ 100.066644][ T29] audit: type=1326 audit(1730662721.502:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.0.587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e2cb7e719 code=0x0 [ 100.220963][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 100.292118][ T29] audit: type=1400 audit(1730662721.732:540): avc: denied { ioctl } for pid=7323 comm="syz.4.590" path="socket:[14891]" dev="sockfs" ino=14891 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.393100][ T5132] usbhid 3-1:0.0: can't add hid device: -71 [ 100.402958][ T5132] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 100.426090][ T5132] usb 3-1: USB disconnect, device number 10 [ 100.535848][ T29] audit: type=1400 audit(1730662721.972:541): avc: denied { create } for pid=7328 comm="syz.4.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.730444][ T5876] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 100.860965][ T5132] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 100.930564][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 100.976561][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.987853][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.012593][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 101.038258][ T5132] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 101.040419][ T5876] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 101.050155][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.066626][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.079728][ T5132] usb 3-1: Product: syz [ 101.092083][ T5876] usb 4-1: config 0 descriptor?? [ 101.097406][ T5132] usb 3-1: Manufacturer: syz [ 101.113177][ T5132] usb 3-1: SerialNumber: syz [ 101.123546][ T5132] usb 3-1: config 0 descriptor?? [ 101.230918][ T7344] devtmpfs: Too few inodes for current use [ 101.521379][ T5876] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0007/input/input12 [ 101.558594][ T5132] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 101.575126][ T5132] usb 3-1: Firmware version (0.0) predates our first public release. [ 101.599699][ T5132] usb 3-1: Please update to version 0.2 or newer [ 101.614505][ T5876] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0007/input/input13 [ 101.659782][ T5876] kye 0003:0458:5011.0007: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 101.757434][ T5876] usb 4-1: USB disconnect, device number 8 [ 101.802576][ T5132] usb 3-1: USB disconnect, device number 11 [ 102.230559][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.316177][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 102.316192][ T29] audit: type=1400 audit(1730662723.752:549): avc: denied { write } for pid=7383 comm="syz.3.617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 102.415043][ T29] audit: type=1400 audit(1730662723.852:550): avc: denied { map } for pid=7387 comm="syz.2.621" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.428477][ T7392] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 102.453145][ T5906] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 102.458439][ T29] audit: type=1400 audit(1730662723.882:551): avc: denied { execute } for pid=7387 comm="syz.2.621" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.462460][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.540066][ T5906] usb 5-1: Product: syz [ 102.575917][ T5906] usb 5-1: Manufacturer: syz [ 102.585771][ T5906] usb 5-1: SerialNumber: syz [ 102.597902][ T5906] usb 5-1: config 0 descriptor?? [ 102.611765][ T5906] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 005 [ 102.790448][ T29] audit: type=1400 audit(1730662724.222:552): avc: denied { ioctl } for pid=7409 comm="syz.2.629" path="socket:[15022]" dev="sockfs" ino=15022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.031592][ T5906] (null): failure reading functionality [ 103.077485][ T5906] i2c i2c-1: connected i2c-tiny-usb device [ 103.204805][ T29] audit: type=1400 audit(1730662724.642:553): avc: denied { append } for pid=7433 comm="syz.2.638" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.238539][ T29] audit: type=1400 audit(1730662724.672:554): avc: denied { map } for pid=7433 comm="syz.2.638" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.385520][ T29] audit: type=1400 audit(1730662724.812:555): avc: denied { read write } for pid=7442 comm="syz.2.642" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.425675][ T5876] usb 5-1: USB disconnect, device number 5 [ 103.456514][ T29] audit: type=1400 audit(1730662724.812:556): avc: denied { open } for pid=7442 comm="syz.2.642" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.484217][ T29] audit: type=1400 audit(1730662724.862:557): avc: denied { ioctl } for pid=7442 comm="syz.2.642" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.514027][ T29] audit: type=1400 audit(1730662724.952:558): avc: denied { mounton } for pid=7446 comm="syz.3.644" path="/135/file0" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.543383][ T7449] tun0: tun_chr_ioctl cmd 1074025675 [ 103.552857][ T7449] tun0: persist enabled [ 103.558514][ T7449] tun0: tun_chr_ioctl cmd 1074025675 [ 103.579357][ T7449] tun0: persist disabled [ 103.622066][ T7453] block nbd0: shutting down sockets [ 103.785736][ T7470] netlink: 'syz.2.654': attribute type 2 has an invalid length. [ 103.794062][ T7470] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 103.801797][ T7470] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.654'. [ 103.805901][ T7472] netlink: 'syz.3.655': attribute type 21 has an invalid length. [ 103.824653][ T7472] netlink: 128 bytes leftover after parsing attributes in process `syz.3.655'. [ 103.834257][ T7472] netlink: 'syz.3.655': attribute type 4 has an invalid length. [ 103.846915][ T7472] netlink: 'syz.3.655': attribute type 5 has an invalid length. [ 103.866583][ T7472] netlink: 3 bytes leftover after parsing attributes in process `syz.3.655'. [ 104.034190][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 104.048658][ T7483] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 104.057679][ T7483] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 104.109085][ T7484] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 104.349149][ T7506] netlink: 'syz.3.670': attribute type 4 has an invalid length. [ 104.362475][ T5876] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.430054][ T7510] syz.0.672 uses obsolete (PF_INET,SOCK_PACKET) [ 104.439976][ T5878] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 104.452029][ T7510] syzkaller1: entered promiscuous mode [ 104.457665][ T7510] syzkaller1: entered allmulticast mode [ 104.502821][ T7512] ======================================================= [ 104.502821][ T7512] WARNING: The mand mount option has been deprecated and [ 104.502821][ T7512] and is ignored by this kernel. Remove the mand [ 104.502821][ T7512] option from the mount to silence this warning. [ 104.502821][ T7512] ======================================================= [ 104.537880][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 104.546696][ T5876] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 104.562156][ T7512] Mount JFS Failure: -22 [ 104.570524][ T5876] usb 5-1: config 0 has no interface number 0 [ 104.591076][ T5876] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 104.610357][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.621136][ T5876] usb 5-1: Product: syz [ 104.625324][ T5876] usb 5-1: Manufacturer: syz [ 104.629929][ T5876] usb 5-1: SerialNumber: syz [ 104.634559][ T5878] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 104.651213][ T5876] usb 5-1: config 0 descriptor?? [ 104.653989][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.665737][ T5876] smsc95xx v2.0.0 [ 104.680438][ T5878] usb 2-1: Product: syz [ 104.684630][ T5878] usb 2-1: Manufacturer: syz [ 104.698823][ T5878] usb 2-1: SerialNumber: syz [ 104.704114][ T7516] bond0: entered promiscuous mode [ 104.709277][ T7516] bond_slave_0: entered promiscuous mode [ 104.717717][ T7516] bond_slave_1: entered promiscuous mode [ 104.718271][ T5878] usb 2-1: config 0 descriptor?? [ 104.792706][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 105.251003][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.285921][ T7543] netlink: 'syz.3.687': attribute type 9 has an invalid length. [ 105.299884][ T7543] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.687'. [ 105.390924][ T5132] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 105.410756][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 105.427726][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.444172][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.454690][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.464658][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.477752][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.484718][ T5876] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 105.487404][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.505321][ T5876] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 105.530550][ T5876] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 105.542122][ T5876] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 105.553332][ T5876] usb 5-1: USB disconnect, device number 6 [ 105.604815][ T5132] usb 3-1: Using ep0 maxpacket: 8 [ 105.610213][ T5878] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 105.622045][ T5878] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 105.632749][ T5878] asix 2-1:0.0: probe with driver asix failed with error -71 [ 105.644285][ T5878] usb 2-1: USB disconnect, device number 10 [ 105.654140][ T5132] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 105.669114][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.677293][ T5132] usb 3-1: Product: syz [ 105.684365][ T5132] usb 3-1: Manufacturer: syz [ 105.689001][ T5132] usb 3-1: SerialNumber: syz [ 105.695235][ T5132] usb 3-1: config 0 descriptor?? [ 105.703263][ T5132] gspca_main: sq930x-2.14.0 probing 2770:930c [ 105.729131][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 105.734814][ T25] usbtmc 1-1:16.0: can't read capabilities [ 105.863734][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.958794][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.975966][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.988000][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.006194][ T5876] usb 1-1: USB disconnect, device number 7 [ 106.067963][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.087009][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.096173][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.110339][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.118895][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.126515][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.135150][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.178399][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.340722][ T11] bridge_slave_1: left allmulticast mode [ 106.346650][ T11] bridge_slave_1: left promiscuous mode [ 106.354685][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.365228][ T11] bridge_slave_0: left allmulticast mode [ 106.370939][ T11] bridge_slave_0: left promiscuous mode [ 106.376596][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.520742][ T5132] gspca_sq930x: ucbus_write failed -71 [ 106.530859][ T967] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.681586][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.690775][ T11] bond_slave_0: left promiscuous mode [ 106.698514][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.707587][ T11] bond_slave_1: left promiscuous mode [ 106.710605][ T967] usb 5-1: Using ep0 maxpacket: 16 [ 106.713068][ T5876] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 106.728513][ T967] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.728834][ T11] bond0 (unregistering): Released all slaves [ 106.742947][ T967] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.754534][ T5132] gspca_sq930x: Sensor ov9630 not yet treated [ 106.761223][ T5132] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 106.773085][ T7551] chnl_net:caif_netlink_parms(): no params data found [ 106.782590][ T5132] usb 3-1: USB disconnect, device number 12 [ 106.789414][ T967] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.805136][ T967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.830818][ T967] usb 5-1: Product: syz [ 106.835049][ T967] usb 5-1: Manufacturer: syz [ 106.843529][ T967] usb 5-1: SerialNumber: syz [ 106.898895][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 106.917453][ T5876] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=4d.93 [ 106.927490][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.941701][ T5876] usb 2-1: Product: syz [ 106.945897][ T5876] usb 2-1: Manufacturer: syz [ 106.956370][ T5876] usb 2-1: SerialNumber: syz [ 106.963903][ T5876] usb 2-1: config 0 descriptor?? [ 106.979273][ T5876] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 107.048232][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.056356][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.076428][ T7551] bridge_slave_0: entered allmulticast mode [ 107.088468][ T7551] bridge_slave_0: entered promiscuous mode [ 107.112259][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.119567][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.139895][ T7551] bridge_slave_1: entered allmulticast mode [ 107.151420][ T7551] bridge_slave_1: entered promiscuous mode [ 107.191981][ T5876] gspca_m5602: Failed to find a sensor [ 107.200586][ T5876] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 107.220690][ T5876] usb 2-1: USB disconnect, device number 11 [ 107.283130][ T7551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.304750][ T7551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.306432][ T967] usb 5-1: 0:2 : does not exist [ 107.379415][ T11] hsr_slave_0: left promiscuous mode [ 107.403673][ T11] hsr_slave_1: left promiscuous mode [ 107.416806][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.430718][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.451768][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.459235][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.499081][ T11] veth1_macvtap: left promiscuous mode [ 107.505264][ T11] veth0_macvtap: left promiscuous mode [ 107.511608][ T11] veth1_vlan: left promiscuous mode [ 107.513468][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 107.513482][ T29] audit: type=1400 audit(1730662728.952:575): avc: denied { audit_write } for pid=7588 comm="syz.2.708" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 107.517213][ T11] veth0_vlan: left promiscuous mode [ 107.702454][ T29] audit: type=1400 audit(1730662729.132:576): avc: denied { write } for pid=7594 comm="syz.0.710" path="socket:[15632]" dev="sockfs" ino=15632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 107.773226][ T29] audit: type=1400 audit(1730662729.132:577): avc: denied { nlmsg_read } for pid=7594 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 107.997395][ T1201] usb 5-1: USB disconnect, device number 7 [ 108.022224][ T967] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 108.180403][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 108.193087][ T11] team0 (unregistering): Port device team_slave_1 removed [ 108.195742][ T967] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 108.216258][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.225493][ T5840] Bluetooth: hci0: command tx timeout [ 108.235612][ T967] usb 3-1: Product: syz [ 108.247593][ T967] usb 3-1: Manufacturer: syz [ 108.256640][ T967] usb 3-1: SerialNumber: syz [ 108.263415][ T967] usb 3-1: config 0 descriptor?? [ 108.263975][ T7610] netlink: 188 bytes leftover after parsing attributes in process `syz.1.716'. [ 108.272340][ T967] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 108.277537][ T7610] netlink: 'syz.1.716': attribute type 1 has an invalid length. [ 108.304834][ T11] team0 (unregistering): Port device team_slave_0 removed [ 108.375710][ T29] audit: type=1400 audit(1730662729.812:578): avc: denied { mounton } for pid=7611 comm="syz.1.717" path="/136/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 108.419288][ T29] audit: type=1400 audit(1730662729.852:579): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 108.674823][ T1201] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 108.802174][ T7551] team0: Port device team_slave_0 added [ 108.842039][ T1201] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.867477][ T1201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.870694][ T7551] team0: Port device team_slave_1 added [ 108.897185][ T1201] usb 2-1: config 0 descriptor?? [ 108.911925][ T1201] cp210x 2-1:0.0: cp210x converter detected [ 108.935590][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.950112][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.984704][ T7551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.014310][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.047306][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.073215][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.080054][ T7551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.180984][ T7551] hsr_slave_0: entered promiscuous mode [ 109.187690][ T7551] hsr_slave_1: entered promiscuous mode [ 109.195507][ T7551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.205939][ T7551] Cannot create hsr debugfs directory [ 109.258385][ T7627] batadv0: entered promiscuous mode [ 109.286706][ T7627] batadv_slave_0: entered promiscuous mode [ 109.287081][ T29] audit: type=1326 audit(1730662730.722:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.4.725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb302d7e719 code=0x0 [ 109.294603][ T7627] batadv_slave_0: left promiscuous mode [ 109.323461][ T7627] batadv0: left promiscuous mode [ 109.330335][ T967] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 109.341497][ T967] usb 3-1: USB disconnect, device number 13 [ 109.352112][ T1201] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 109.432841][ T11] IPVS: stop unused estimator thread 0... [ 109.524480][ T7551] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.533867][ T7551] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.542999][ T7551] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.558740][ T7551] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.569977][ T1201] usb 2-1: cp210x converter now attached to ttyUSB0 [ 109.649007][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.675154][ T7551] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.704501][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.711698][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.736922][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.744218][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.803624][ T1201] usb 2-1: USB disconnect, device number 12 [ 109.815737][ T1201] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.848083][ T1201] cp210x 2-1:0.0: device disconnected [ 110.017600][ T7551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.249294][ T5831] Bluetooth: hci5: sending frame failed (-49) [ 110.256356][ T7661] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 110.259682][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 110.310555][ T5840] Bluetooth: hci0: command tx timeout [ 110.321968][ T7551] veth0_vlan: entered promiscuous mode [ 110.332676][ T7551] veth1_vlan: entered promiscuous mode [ 110.420735][ T7551] veth0_macvtap: entered promiscuous mode [ 110.431406][ T7551] veth1_macvtap: entered promiscuous mode [ 110.444843][ T29] audit: type=1400 audit(1730662731.882:581): avc: denied { read } for pid=7672 comm="syz.0.738" path="socket:[15969]" dev="sockfs" ino=15969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.480253][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.496317][ T29] audit: type=1400 audit(1730662731.932:582): avc: denied { connect } for pid=7672 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.516991][ T967] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.532320][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.545346][ T29] audit: type=1400 audit(1730662731.962:583): avc: denied { write } for pid=7672 comm="syz.0.738" laddr=::1 lport=2 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.568080][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.579559][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.589773][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.601545][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.611967][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.645309][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.661696][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.691700][ T967] usb 5-1: Using ep0 maxpacket: 8 [ 110.701969][ T967] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 110.711441][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.725336][ T967] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.736213][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.746420][ T967] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.760770][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.772155][ T967] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.790696][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.801162][ T967] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.823915][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.835043][ T967] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.847644][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.857572][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.867441][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.878895][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.913525][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.941676][ T7551] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.959288][ T7551] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.969008][ T7551] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.996564][ T7551] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.103255][ T967] usb 5-1: usb_control_msg returned -32 [ 111.108870][ T967] usbtmc 5-1:16.0: can't read capabilities [ 111.143763][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.155340][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.169452][ T29] audit: type=1400 audit(1730662732.602:584): avc: denied { bind } for pid=7693 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 111.199804][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.207953][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.270542][ T1201] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 111.350404][ T5876] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.424470][ T1201] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 111.434183][ T1201] usb 2-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 111.442983][ T1201] usb 2-1: Product: syz [ 111.447182][ T1201] usb 2-1: Manufacturer: syz [ 111.451892][ T1201] usb 2-1: SerialNumber: syz [ 111.458310][ T1201] usb 2-1: config 0 descriptor?? [ 111.500501][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 111.507097][ T5876] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 111.514803][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.526293][ T5876] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.538140][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.549482][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.562882][ T5876] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 111.570470][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.582462][ T5876] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.594394][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.605622][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.618353][ T5876] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 111.626020][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.637377][ T5876] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.649246][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.667178][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.685894][ T5876] usb 1-1: string descriptor 0 read error: -22 [ 111.692811][ T5876] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 111.702770][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.714540][ T5876] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 111.880390][ T1201] usb 2-1: Firmware version (0.0) predates our first public release. [ 111.888769][ T1201] usb 2-1: Please update to version 0.2 or newer [ 111.895735][ T1201] usb 2-1: Firmware: build [ 111.926792][ T5878] usb 1-1: USB disconnect, device number 8 [ 112.122162][ T1201] usb 2-1: USB disconnect, device number 13 [ 112.381022][ T5840] Bluetooth: hci0: command tx timeout [ 112.560408][ T5876] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 112.575156][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 112.575170][ T29] audit: type=1400 audit(1730662734.012:589): avc: denied { ioctl } for pid=7725 comm="syz.5.757" path="socket:[17128]" dev="sockfs" ino=17128 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.713569][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.732626][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.750494][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.763556][ T5876] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 112.772922][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.782893][ T5876] usb 3-1: config 0 descriptor?? [ 112.968907][ T29] audit: type=1400 audit(1730662734.402:590): avc: denied { ioctl } for pid=7740 comm="syz.5.764" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 113.218387][ T5876] acrux 0003:1A34:0802.0008: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 113.225979][ T5919] usb 5-1: USB disconnect, device number 8 [ 113.260518][ T5876] acrux 0003:1A34:0802.0008: no inputs found [ 113.278745][ T5876] acrux 0003:1A34:0802.0008: Failed to enable force feedback support, error: -19 [ 113.356613][ T7755] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 113.474956][ T5919] usb 3-1: USB disconnect, device number 14 [ 113.736779][ T29] audit: type=1400 audit(1730662735.172:591): avc: denied { watch watch_reads } for pid=7775 comm="syz.1.782" path="/147" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 114.058570][ T29] audit: type=1326 audit(1730662735.492:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.1.790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94bad7e719 code=0x0 [ 114.198973][ T29] audit: type=1400 audit(1730662735.632:593): avc: denied { setopt } for pid=7800 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.239946][ T5878] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 114.430380][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 114.438754][ T5878] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 114.448501][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.459418][ T5878] usb 6-1: config 0 descriptor?? [ 114.463319][ T5840] Bluetooth: hci0: command tx timeout [ 114.465450][ T7810] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 114.487028][ T5878] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 114.542005][ T5876] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 114.701336][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 114.711824][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.722965][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.733483][ T5876] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 114.743432][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.754428][ T5876] usb 3-1: config 0 descriptor?? [ 115.179968][ T5876] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 115.197394][ T5876] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 115.205388][ T5876] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 115.213077][ T5876] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 115.220455][ T5876] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 115.228261][ T5876] cm6533_jd 0003:0D8C:0022.0009: No inputs registered, leaving [ 115.230459][ T5132] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 115.260929][ T5876] cm6533_jd 0003:0D8C:0022.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 115.288936][ T7824] kvm: apic: phys broadcast and lowest prio [ 115.386985][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 115.434900][ T5132] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.450383][ T5919] usb 3-1: USB disconnect, device number 15 [ 115.466632][ T5132] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.486575][ T5132] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.502208][ T5878] gspca_sonixj: reg_w1 err -71 [ 115.508778][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.530500][ T29] audit: type=1400 audit(1730662736.972:594): avc: denied { bind } for pid=7832 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.540783][ T5878] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 115.562919][ T5878] usb 6-1: USB disconnect, device number 2 [ 115.569902][ T29] audit: type=1400 audit(1730662736.972:595): avc: denied { node_bind } for pid=7832 comm="syz.0.805" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 115.733098][ T5132] usb 2-1: usb_control_msg returned -32 [ 115.738713][ T5132] usbtmc 2-1:16.0: can't read capabilities [ 115.878867][ T29] audit: type=1400 audit(1730662737.312:596): avc: denied { read } for pid=7850 comm="syz.0.814" path="socket:[17485]" dev="sockfs" ino=17485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 115.926148][ T7853] usb usb7: usbfs: process 7853 (syz.0.815) did not claim interface 0 before use [ 115.937291][ T29] audit: type=1326 audit(1730662737.372:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7852 comm="syz.0.815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e2cb7e719 code=0x0 [ 116.370538][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.530472][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 116.542205][ T5876] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 116.551708][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.561974][ T5876] usb 6-1: config 0 descriptor?? [ 116.637802][ T7878] vlan2: entered promiscuous mode [ 116.647255][ T7878] veth1: entered promiscuous mode [ 116.652755][ T7878] vlan2: entered allmulticast mode [ 116.658016][ T7878] veth1: entered allmulticast mode [ 116.796613][ T29] audit: type=1400 audit(1730662738.232:598): avc: denied { ioctl } for pid=7883 comm="syz.0.828" path="/dev/usbmon6" dev="devtmpfs" ino=739 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.967203][ T7892] bond0: entered promiscuous mode [ 116.972634][ T7892] bond_slave_0: entered promiscuous mode [ 116.978483][ T7892] bond_slave_1: entered promiscuous mode [ 116.985413][ T5878] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 117.142261][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.157850][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.168955][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 117.184885][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.198961][ T5878] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.208696][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.220594][ T5878] usb 3-1: config 0 descriptor?? [ 117.377945][ T5876] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.388333][ T5876] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 117.423572][ T5876] asix 6-1:0.0: probe with driver asix failed with error -71 [ 117.441156][ T5876] usb 6-1: USB disconnect, device number 3 [ 117.638226][ T5878] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 117.647542][ T5878] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 117.843072][ T5878] usb 3-1: USB disconnect, device number 16 [ 117.989729][ T25] usb 2-1: USB disconnect, device number 14 [ 118.103571][ T29] audit: type=1400 audit(1730662739.542:599): avc: denied { search } for pid=7918 comm="syz.5.844" name="/" dev="configfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.177660][ T29] audit: type=1400 audit(1730662739.612:600): avc: denied { connect } for pid=7923 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.197912][ T5876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 118.364156][ T5876] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 118.374117][ T5876] usb 1-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 118.384484][ T5876] usb 1-1: Product: syz [ 118.388677][ T5876] usb 1-1: Manufacturer: syz [ 118.393439][ T5876] usb 1-1: SerialNumber: syz [ 118.405017][ T5876] usb 1-1: config 0 descriptor?? [ 118.840418][ T5876] usb 1-1: Firmware version (0.0) predates our first public release. [ 118.848546][ T5876] usb 1-1: Please update to version 0.2 or newer [ 118.880419][ T5876] usb 1-1: Firmware: build [ 118.965324][ T7948] netlink: 'syz.1.857': attribute type 10 has an invalid length. [ 118.985797][ T7948] netlink: 40 bytes leftover after parsing attributes in process `syz.1.857'. [ 119.027469][ T29] audit: type=1400 audit(1730662740.462:601): avc: denied { write } for pid=7945 comm="syz.5.856" path="socket:[17764]" dev="sockfs" ino=17764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.053149][ T7948] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.063460][ T7948] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.072570][ T7948] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.082562][ T7948] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.102205][ T5876] usb 1-1: USB disconnect, device number 9 [ 119.133576][ T7948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.158104][ T7948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.170444][ T7948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.179268][ T7948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.202979][ T7948] team0: Port device geneve0 added [ 119.313387][ T29] audit: type=1400 audit(1730662740.752:602): avc: denied { ioctl } for pid=7958 comm="syz.1.862" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 119.360422][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 119.431455][ T5906] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 119.531012][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 119.543194][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.571054][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.594172][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.600360][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 119.619033][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 119.624941][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.649998][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.651393][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.691780][ T5906] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 119.703423][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 119.723232][ T25] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 119.741460][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.749116][ T25] usb 3-1: Manufacturer: syz [ 119.768886][ T5906] usb 6-1: config 0 descriptor?? [ 119.770005][ T25] usb 3-1: config 0 descriptor?? [ 119.781108][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 120.156860][ T7970] team0 (unregistering): Port device team_slave_0 removed [ 120.191177][ T7970] team0 (unregistering): Port device team_slave_1 removed [ 120.199776][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.211267][ T25] rc_core: IR keymap rc-hauppauge not found [ 120.219271][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.221584][ T25] Registered IR keymap rc-empty [ 120.232240][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.245287][ T5906] hid (null): unknown global tag 0xd [ 120.255281][ T5906] hid (null): unknown global tag 0xd [ 120.260447][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.260757][ T5906] hid (null): report_id 40203 is invalid [ 120.275201][ T5906] hid (null): invalid report_size -1862471209 [ 120.281504][ T5906] hid (null): invalid report_size -1217885453 [ 120.288306][ T5906] hid (null): unknown global tag 0x36 [ 120.290890][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 120.312740][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 120.330310][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.353093][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.406155][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.470154][ T5906] usb 6-1: string descriptor 0 read error: -71 [ 120.470377][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.505380][ T5906] usb 6-1: Max retries (5) exceeded reading string descriptor 200 [ 120.520882][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.524325][ T5906] letsketch 0003:6161:4D15.000B: probe with driver letsketch failed with error -32 [ 120.558573][ T5840] Bluetooth: hci0: command 0x0405 tx timeout [ 120.570937][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.605640][ T5906] usb 6-1: USB disconnect, device number 4 [ 120.610440][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.635401][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.660891][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.680368][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.701272][ T25] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 120.709294][ T25] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 120.721693][ T25] usb 3-1: USB disconnect, device number 17 [ 120.987125][ T29] audit: type=1400 audit(1730662742.412:603): avc: denied { write } for pid=7992 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.249173][ T29] audit: type=1400 audit(1730662742.682:604): avc: denied { setopt } for pid=8001 comm="syz.5.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.348164][ T29] audit: type=1400 audit(1730662742.712:605): avc: denied { bind } for pid=8001 comm="syz.5.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.459111][ T29] audit: type=1400 audit(1730662742.892:606): avc: denied { execute } for pid=8007 comm="syz.1.883" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 121.680674][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 121.842092][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.864029][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.895635][ T25] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 121.917191][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.928266][ T25] usb 6-1: config 0 descriptor?? [ 121.941179][ T29] audit: type=1400 audit(1730662743.382:607): avc: denied { remount } for pid=8034 comm="syz.1.893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 122.063713][ T29] audit: type=1400 audit(1730662743.492:608): avc: denied { mounton } for pid=8042 comm="syz.1.898" path="/proc/365/cgroup" dev="proc" ino=18844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 122.114172][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 122.320640][ T8047] team0 (unregistering): Port device team_slave_0 removed [ 122.347020][ T25] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 122.354475][ T25] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 122.362306][ T25] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 122.369543][ T25] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 122.381036][ T25] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 122.388671][ T25] cm6533_jd 0003:0D8C:0022.000C: No inputs registered, leaving [ 122.391558][ T8047] team0 (unregistering): Port device team_slave_1 removed [ 122.407965][ T25] cm6533_jd 0003:0D8C:0022.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 122.607360][ T5876] usb 6-1: USB disconnect, device number 5 [ 122.702954][ T8070] team_slave_0: entered allmulticast mode [ 122.785304][ T25] kernel write not supported for file /uinput (pid: 25 comm: kworker/1:0) [ 122.830546][ T5132] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 122.940680][ T5831] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 122.950627][ T5831] Bluetooth: hci3: Injecting HCI hardware error event [ 122.958962][ T5831] Bluetooth: hci3: hardware error 0x00 [ 123.014783][ T5132] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 123.042119][ T5132] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.060342][ T5132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.068441][ T5132] usb 2-1: Product: syz [ 123.072685][ T5132] usb 2-1: Manufacturer: syz [ 123.077295][ T5132] usb 2-1: SerialNumber: syz [ 123.084991][ T8061] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 123.193665][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.918'. [ 123.193685][ T8094] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 123.217743][ T8092] IPVS: stopping master sync thread 8094 ... [ 123.309648][ T5132] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 123.339390][ T5132] usb 2-1: USB disconnect, device number 15 [ 123.408876][ T8090] team0 (unregistering): Port device team_slave_0 removed [ 123.426027][ T8090] team0 (unregistering): Port device team_slave_1 removed [ 123.443054][ T5876] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.612565][ T5876] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 123.622024][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.655613][ T5876] usb 1-1: config 0 descriptor?? [ 123.669151][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 123.669167][ T29] audit: type=1400 audit(1730662745.092:610): avc: denied { append } for pid=8109 comm="syz.4.927" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.707939][ T5876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 123.830964][ T5132] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 123.925858][ T8121] block nbd4: shutting down sockets [ 123.985611][ T29] audit: type=1326 audit(1730662745.422:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb08517e719 code=0x0 [ 124.008653][ T29] audit: type=1400 audit(1730662745.422:612): avc: denied { write } for pid=8125 comm="syz.5.933" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 124.038146][ T29] audit: type=1326 audit(1730662745.472:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.2.932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7fb0851b0805 code=0x0 [ 124.063007][ T5132] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 124.071468][ T5132] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.089415][ T29] audit: type=1400 audit(1730662745.482:614): avc: denied { write } for pid=8127 comm="syz.4.934" path="socket:[18184]" dev="sockfs" ino=18184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.091624][ T5132] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 124.128507][ T5132] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.147015][ T5876] cpia1 1-1:0.0: unexpected state after lo power cmd: 4e [ 124.147217][ T5132] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 64 [ 124.170677][ T5132] usb 2-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.187688][ T5132] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.198137][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.208599][ T8061] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 124.431233][ T5132] usb 2-1: usb_control_msg returned -71 [ 124.436820][ T5132] usbtmc 2-1:16.0: can't read capabilities [ 124.454804][ T5132] usb 2-1: USB disconnect, device number 16 [ 124.492335][ T29] audit: type=1400 audit(1730662745.932:615): avc: denied { accept } for pid=8137 comm="syz.4.939" path="socket:[18211]" dev="sockfs" ino=18211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.516749][ T8138] af_packet: packet_mmap: vma is busy: 1 [ 124.559184][ T5876] cpia1 1-1:0.0: only firmware version 1 is supported (got: 9) [ 124.769888][ T5876] usb 1-1: USB disconnect, device number 10 [ 124.986592][ T8148] macvlan0: entered promiscuous mode [ 124.998181][ T8148] macvlan0: left promiscuous mode [ 125.020521][ T5831] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 125.448361][ T1201] IPVS: starting estimator thread 0... [ 125.516049][ T5831] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 125.540926][ T8178] IPVS: using max 20 ests per chain, 48000 per kthread [ 125.741580][ T5132] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 125.903022][ T5132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.914071][ T5132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.923871][ T5132] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.937032][ T5132] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 125.946346][ T5132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.955480][ T5132] usb 6-1: config 0 descriptor?? [ 126.067346][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 126.079775][ T8194] macsec0: entered promiscuous mode [ 126.368380][ T5132] gt683r_led 0003:1770:FF00.000D: item fetching failed at offset 1/5 [ 126.376976][ T5132] gt683r_led 0003:1770:FF00.000D: hid parsing failed [ 126.386226][ T5132] gt683r_led 0003:1770:FF00.000D: probe with driver gt683r_led failed with error -22 [ 126.571052][ T8199] block nbd0: NBD_DISCONNECT [ 126.571572][ T5132] usb 6-1: USB disconnect, device number 6 [ 126.575998][ T8199] block nbd0: Send disconnect failed -22 [ 126.596601][ T8198] block nbd0: Disconnected due to user request. [ 126.603974][ T8198] block nbd0: shutting down sockets [ 127.040456][ T1201] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 127.202891][ T1201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.221309][ T1201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.240594][ T1201] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 127.261222][ T1201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.280197][ T1201] usb 2-1: config 0 descriptor?? [ 127.426088][ T29] audit: type=1400 audit(1730662748.862:616): avc: denied { create } for pid=8247 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.470130][ T29] audit: type=1400 audit(1730662748.892:617): avc: denied { ioctl } for pid=8247 comm="syz.0.989" path="socket:[19415]" dev="sockfs" ino=19415 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.494585][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.532001][ T29] audit: type=1400 audit(1730662748.892:618): avc: denied { write } for pid=8247 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 127.580950][ T29] audit: type=1400 audit(1730662749.012:619): avc: denied { read } for pid=8254 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.782810][ T1201] hid-led 0003:1D34:000A.000E: unknown main item tag 0x0 [ 127.789946][ T1201] hid-led 0003:1D34:000A.000E: item fetching failed at offset 3/5 [ 127.808894][ T1201] hid-led 0003:1D34:000A.000E: probe with driver hid-led failed with error -22 [ 127.874825][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 127.888433][ T8273] syz_tun: entered promiscuous mode [ 127.895449][ T8273] macsec1: entered promiscuous mode [ 127.906098][ T8273] batman_adv: batadv0: Adding interface: macsec1 [ 127.913453][ T8273] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.939779][ T8273] batman_adv: batadv0: Interface activated: macsec1 [ 127.973980][ T5878] usb 2-1: USB disconnect, device number 17 [ 128.450497][ T1201] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 128.610425][ T1201] usb 3-1: Using ep0 maxpacket: 32 [ 128.617282][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.628782][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.638699][ T1201] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 128.651855][ T1201] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 128.661494][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.671091][ T1201] usb 3-1: config 0 descriptor?? [ 129.130785][ T1201] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000F/input/input17 [ 129.213480][ T1201] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000F/input/input18 [ 129.237721][ T1201] kye 0003:0458:5011.000F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 129.251696][ T8319] block nbd1: NBD_DISCONNECT [ 129.267704][ T8319] block nbd1: Send disconnect failed -22 [ 129.280114][ T8314] block nbd1: Disconnected due to user request. [ 129.299520][ T8314] block nbd1: shutting down sockets [ 129.580823][ T5831] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 129.590811][ T5831] Bluetooth: hci4: Injecting HCI hardware error event [ 129.599075][ T5840] Bluetooth: hci4: hardware error 0x00 [ 129.646734][ T1201] usb 3-1: USB disconnect, device number 18 [ 129.790432][ T8336] macvlan0: entered promiscuous mode [ 129.798120][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 129.798135][ T29] audit: type=1326 audit(1730662751.232:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.1.1026" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94bad7e719 code=0x0 [ 129.824908][ T8336] macvlan0: left promiscuous mode [ 130.242354][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 130.253659][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: macsec1 [ 130.263805][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.274641][ T8355] syz_tun: entered promiscuous mode [ 130.279922][ T8355] macsec2: entered promiscuous mode [ 130.287069][ T8355] batman_adv: batadv0: Adding interface: macsec2 [ 130.293626][ T8355] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.321437][ T8355] batman_adv: batadv0: Interface activated: macsec2 [ 130.744024][ T29] audit: type=1400 audit(1730662752.182:622): avc: denied { ioctl } for pid=8373 comm="syz.2.1042" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.795522][ T29] audit: type=1400 audit(1730662752.232:623): avc: denied { watch } for pid=8375 comm="syz.0.1043" path="/263" dev="tmpfs" ino=1355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 130.818420][ T29] audit: type=1400 audit(1730662752.232:624): avc: denied { watch_sb } for pid=8375 comm="syz.0.1043" path="/263" dev="tmpfs" ino=1355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 131.095633][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 131.127176][ T29] audit: type=1400 audit(1730662752.562:625): avc: denied { read } for pid=8392 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.329438][ T29] audit: type=1400 audit(1730662752.762:626): avc: denied { bind } for pid=8405 comm="syz.5.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.351789][ T29] audit: type=1400 audit(1730662752.762:627): avc: denied { listen } for pid=8405 comm="syz.5.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.354619][ T5919] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 131.456660][ T29] audit: type=1326 audit(1730662752.892:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bad7e719 code=0x7fc00000 [ 131.509329][ T29] audit: type=1400 audit(1730662752.942:629): avc: denied { create } for pid=8411 comm="syz.5.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 131.552420][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 131.560164][ T5919] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=4d.93 [ 131.569633][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.577766][ T5919] usb 1-1: Product: syz [ 131.582428][ T5919] usb 1-1: Manufacturer: syz [ 131.587027][ T5919] usb 1-1: SerialNumber: syz [ 131.595471][ T5919] usb 1-1: config 0 descriptor?? [ 131.616271][ T5919] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 131.750427][ T5840] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 131.822486][ T5919] gspca_m5602: Failed to find a sensor [ 131.827972][ T5919] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 131.837053][ T5919] usb 1-1: USB disconnect, device number 11 [ 132.120565][ T29] audit: type=1326 audit(1730662753.552:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94bad7e719 code=0x7fc00000 [ 132.143789][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.227550][ T8427] bond0: entered promiscuous mode [ 132.246145][ T8427] bond_slave_0: entered promiscuous mode [ 132.270241][ T8427] bond_slave_1: entered promiscuous mode [ 132.585369][ T8455] sock: sock_set_timeout: `syz.1.1076' (pid 8455) tries to set negative timeout [ 132.790768][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.797098][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.903583][ T1201] IPVS: starting estimator thread 0... [ 132.913762][ T8480] tipc: Started in network mode [ 132.930482][ T8480] tipc: Node identity ac1414aa, cluster identity 4711 [ 132.938063][ T8480] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 132.953172][ T8480] tipc: Enabled bearer , priority 10 [ 132.990433][ T5919] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 132.999221][ T8481] IPVS: using max 22 ests per chain, 52800 per kthread [ 133.072049][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.083873][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1091'. [ 133.128614][ T8493] devtmpfs: Too few inodes for current use [ 133.170562][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 133.179609][ T5919] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.191599][ T5919] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.201526][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.208164][ T5919] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 133.210515][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.217236][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.234724][ T5919] usb 2-1: config 0 descriptor?? [ 133.350418][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.357505][ T1201] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 133.490406][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.510406][ T1201] usb 1-1: Using ep0 maxpacket: 16 [ 133.517793][ T1201] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.528028][ T1201] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.539112][ T1201] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.548900][ T1201] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.558663][ T1201] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.574048][ T1201] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 133.583388][ T1201] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 133.591500][ T1201] usb 1-1: Manufacturer: syz [ 133.597756][ T1201] usb 1-1: config 0 descriptor?? [ 133.630495][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.649938][ T5919] hkems 0003:2006:0118.0010: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 133.661864][ T5919] hkems 0003:2006:0118.0010: no inputs found [ 133.667872][ T5919] hkems 0003:2006:0118.0010: force feedback init failed [ 133.770445][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.850427][ T1201] rc_core: IR keymap rc-hauppauge not found [ 133.856404][ T1201] Registered IR keymap rc-empty [ 133.880426][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.889687][ T5876] usb 2-1: USB disconnect, device number 18 [ 133.901707][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.910359][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.920883][ T1201] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 133.935215][ T1201] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 133.957232][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.980681][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 134.001476][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 134.025333][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 134.053045][ T5906] tipc: Node number set to 2886997162 [ 134.061000][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 134.081457][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 134.102582][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 134.122027][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 134.141522][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 134.191635][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 134.198825][ T1201] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 134.221762][ T1201] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 134.229829][ T1201] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 134.347717][ T25] usb 1-1: USB disconnect, device number 12 [ 135.400352][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 135.400369][ T29] audit: type=1400 audit(1730662756.812:699): avc: denied { create } for pid=8562 comm="syz.1.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 135.426375][ T29] audit: type=1400 audit(1730662756.832:700): avc: denied { ioctl } for pid=8562 comm="syz.1.1123" path="socket:[21363]" dev="sockfs" ino=21363 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 135.652175][ T29] audit: type=1400 audit(1730662757.092:701): avc: denied { create } for pid=8573 comm="syz.2.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 135.676406][ T29] audit: type=1400 audit(1730662757.092:702): avc: denied { read } for pid=8573 comm="syz.2.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 135.880917][ T5919] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 136.030812][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 136.042288][ T8597] bridge1: entered promiscuous mode [ 136.044320][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.047514][ T8597] bridge1: entered allmulticast mode [ 136.082157][ T5919] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 136.093720][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.103691][ T5919] usb 1-1: config 0 descriptor?? [ 136.304916][ T1201] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 136.331738][ T5919] usb 1-1: USB disconnect, device number 13 [ 136.370996][ T29] audit: type=1400 audit(1730662757.812:703): avc: denied { bind } for pid=8608 comm="syz.1.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.424313][ T8611] batadv0: entered promiscuous mode [ 136.430537][ T8611] batadv_slave_0: entered promiscuous mode [ 136.436495][ T8611] batadv_slave_0: left promiscuous mode [ 136.442552][ T8611] batadv0: left promiscuous mode [ 136.487179][ T1201] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 136.500345][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.521151][ T1201] usb 6-1: config 0 descriptor?? [ 136.695005][ T8619] bond_slave_0: entered promiscuous mode [ 136.701132][ T8619] bond_slave_1: entered promiscuous mode [ 136.711985][ T8619] bond_slave_0: left promiscuous mode [ 136.717845][ T8619] bond_slave_1: left promiscuous mode [ 136.822113][ T8619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.835683][ T8619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.848130][ T8619] bond0 (unregistering): Released all slaves [ 136.895333][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 137.001508][ T29] audit: type=1400 audit(1730662758.432:704): avc: denied { execute } for pid=8624 comm="syz.1.1160" path=2F6D656D66643A1033717D329ACEAF03DF795BD9FF5238F41C0869E45ED5FDA90DAC374194A0202864656C6574656429 dev="hugetlbfs" ino=21593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 137.456266][ T8646] input: syz1 as /devices/virtual/input/input20 [ 137.545977][ T1201] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 137.560781][ T1201] asix 6-1:0.0: probe with driver asix failed with error -71 [ 137.571085][ T1201] usb 6-1: USB disconnect, device number 7 [ 137.648292][ T8658] syzkaller1: entered promiscuous mode [ 137.654437][ T8658] syzkaller1: entered allmulticast mode [ 137.672048][ T8658] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 99 [ 137.759857][ T29] audit: type=1400 audit(1730662759.192:705): avc: denied { setopt } for pid=8659 comm="syz.1.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.780948][ T5919] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 137.819737][ T8662] Bluetooth: MGMT ver 1.23 [ 137.980344][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 137.995172][ T5919] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 138.010318][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.018338][ T5919] usb 1-1: Product: syz [ 138.039252][ T5919] usb 1-1: Manufacturer: syz [ 138.044224][ T5919] usb 1-1: SerialNumber: syz [ 138.061768][ T5919] usb 1-1: config 0 descriptor?? [ 138.072189][ T5919] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 138.140394][ C0] net_ratelimit: 4 callbacks suppressed [ 138.140414][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 138.561347][ T5878] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 138.741006][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 138.759559][ T5878] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 138.780434][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=80, SerialNumber=233 [ 138.799314][ T5878] usb 6-1: Product: syz [ 138.804204][ T5878] usb 6-1: Manufacturer: syz [ 138.808868][ T5878] usb 6-1: SerialNumber: syz [ 138.842820][ T5878] r8152-cfgselector 6-1: Unknown version 0x0000 [ 138.849177][ T5878] r8152-cfgselector 6-1: config 0 descriptor?? [ 138.849614][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1184'. [ 138.883868][ T8708] vlan2: entered promiscuous mode [ 139.125264][ T5876] usb 1-1: USB disconnect, device number 14 [ 139.181874][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 139.271994][ T5878] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 139.756253][ T29] audit: type=1326 audit(1730662761.192:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.2.1201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb08517e719 code=0x0 [ 140.190421][ T5919] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 140.220450][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 140.342514][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 140.363166][ T5919] usb 1-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.376137][ T5919] usb 1-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.404236][ T5919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.421922][ T5919] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 140.443366][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.462528][ T5919] usb 1-1: config 0 descriptor?? [ 140.697191][ T8804] input: syz0 as /devices/virtual/input/input21 [ 140.883524][ T5919] hkems 0003:2006:0118.0011: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0 [ 140.895060][ T5878] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 140.903280][ T5919] hkems 0003:2006:0118.0011: no inputs found [ 140.904974][ T8810] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 140.909337][ T5919] hkems 0003:2006:0118.0011: force feedback init failed [ 140.986757][ T8812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1228'. [ 140.998319][ T8812] netlink: 'syz.2.1228': attribute type 7 has an invalid length. [ 141.006193][ T8812] netlink: 'syz.2.1228': attribute type 8 has an invalid length. [ 141.014089][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 141.070748][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 141.077093][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.088240][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.098863][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 141.105029][ T5876] usb 1-1: USB disconnect, device number 15 [ 141.112761][ T5878] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 141.126843][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.136074][ T5878] usb 6-1: config 0 descriptor?? [ 141.220940][ T5919] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 141.260458][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 141.281517][ T1201] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 141.370764][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 141.388743][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.397352][ T5919] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 141.405234][ T5919] usb 2-1: can't read configurations, error -71 [ 141.430516][ T1201] usb 3-1: Using ep0 maxpacket: 32 [ 141.437330][ T1201] usb 3-1: config 0 has no interfaces? [ 141.445671][ T1201] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 141.454988][ T1201] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 141.463922][ T1201] usb 3-1: Product: syz [ 141.468179][ T1201] usb 3-1: Manufacturer: syz [ 141.472905][ T1201] usb 3-1: SerialNumber: syz [ 141.478998][ T1201] usb 3-1: config 0 descriptor?? [ 141.558181][ T5878] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0012/input/input22 [ 141.632632][ T5878] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0012/input/input23 [ 141.650375][ T5878] kye 0003:0458:5011.0012: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 141.705774][ T1201] usb 3-1: USB disconnect, device number 19 [ 141.825507][ T5906] usb 6-1: USB disconnect, device number 9 [ 142.300381][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 142.621832][ T1201] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 142.640430][ T5919] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 142.733125][ T29] audit: type=1326 audit(1730662764.172:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2cb7e719 code=0x7ffc0000 [ 142.756754][ T29] audit: type=1326 audit(1730662764.172:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2cb7e719 code=0x7ffc0000 [ 142.770522][ T1201] usb 3-1: Using ep0 maxpacket: 16 [ 142.785784][ T29] audit: type=1326 audit(1730662764.172:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3e2cb7e719 code=0x7ffc0000 [ 142.809814][ T29] audit: type=1326 audit(1730662764.172:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2cb7e719 code=0x7ffc0000 [ 142.833924][ T29] audit: type=1326 audit(1730662764.172:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2cb7e719 code=0x7ffc0000 [ 142.857417][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.868623][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.869751][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.878472][ T1201] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 142.878503][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.891922][ T1201] usb 3-1: config 0 descriptor?? [ 142.899408][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.910410][ T29] audit: type=1326 audit(1730662764.172:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2cb7e719 code=0x7ffc0000 [ 142.912826][ T5919] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.927414][ T29] audit: type=1326 audit(1730662764.172:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3e2cb7e719 code=0x7ffc0000 [ 142.947009][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.962407][ T29] audit: type=1326 audit(1730662764.172:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2cb7e719 code=0x7ffc0000 [ 142.986058][ T5919] usb 6-1: config 0 descriptor?? [ 142.986687][ T29] audit: type=1326 audit(1730662764.172:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2cb7e719 code=0x7ffc0000 [ 143.041614][ T29] audit: type=1326 audit(1730662764.172:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f3e2cb7e719 code=0x7ffc0000 [ 143.320763][ T8843] batadv_slave_0: entered promiscuous mode [ 143.327877][ T8843] batadv_slave_0: left promiscuous mode [ 143.340464][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.389340][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.401984][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.432118][ T5919] hid (null): bogus close delimiter [ 143.632826][ T5919] usb 6-1: string descriptor 0 read error: -22 [ 143.640739][ T1201] usb 3-1: string descriptor 0 read error: -71 [ 143.675208][ T1201] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 143.683330][ T1201] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -32 [ 143.696461][ T1201] usb 3-1: USB disconnect, device number 20 [ 143.810965][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 143.843364][ T5919] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0014/input/input24 [ 143.873442][ T5919] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0014/input/input25 [ 143.889852][ T5919] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0014/input/input26 [ 143.905738][ T5919] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0014/input/input27 [ 143.921661][ T5919] uclogic 0003:256C:006D.0014: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 144.005328][ T25] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice= 0.00 [ 144.021191][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.035689][ T25] usb 1-1: config 0 descriptor?? [ 144.095613][ T1201] usb 6-1: USB disconnect, device number 10 [ 144.380453][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 144.449608][ T25] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 144.650782][ T25] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 144.680975][ T25] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 144.879768][ T25] usb 1-1: USB disconnect, device number 16 [ 145.197517][ T8893] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 145.420440][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 145.569100][ T8922] usb usb8: usbfs: process 8922 (syz.4.1276) did not claim interface 0 before use [ 145.953451][ T8947] tipc: Started in network mode [ 145.976184][ T8947] tipc: Node identity ac1414aa, cluster identity 4711 [ 145.984841][ T8947] tipc: Enabled bearer , priority 10 [ 146.013292][ T8947] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 146.136239][ T8961] netlink: 'syz.1.1297': attribute type 9 has an invalid length. [ 146.144294][ T8961] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1297'. [ 146.174759][ T5906] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 146.231475][ T5919] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 146.340462][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 146.351648][ T5906] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.363735][ T5906] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.374381][ T5906] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 146.387617][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.397088][ T5906] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 146.407835][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.414086][ T5919] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.417535][ T5906] usb 3-1: config 0 descriptor?? [ 146.434001][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.443679][ T5919] usb 1-1: Product: syz [ 146.447926][ T5919] usb 1-1: Manufacturer: syz [ 146.456909][ T5919] usb 1-1: SerialNumber: syz [ 146.460452][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 146.477736][ T5919] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 146.519074][ T967] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 146.591199][ T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 146.703403][ T8981] delete_channel: no stack [ 146.753076][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.765033][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.784877][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 146.802241][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.819773][ T25] usb 6-1: config 0 descriptor?? [ 146.894747][ T5906] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.0015/input/input28 [ 146.990964][ T5878] tipc: Node number set to 2886997162 [ 146.992692][ T5906] kye 0003:0458:5010.0015: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 147.116999][ T8994] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 147.195671][ T5906] usb 1-1: USB disconnect, device number 17 [ 147.242763][ T25] lg-g15 0003:046D:C222.0016: hidraw1: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 147.453080][ T5876] usb 6-1: USB disconnect, device number 11 [ 147.500422][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 147.732931][ T9015] loop2: detected capacity change from 0 to 7 [ 147.746246][ T9015] Dev loop2: unable to read RDB block 7 [ 147.760360][ T9015] loop2: unable to read partition table [ 147.780120][ T9015] loop2: partition table beyond EOD, truncated [ 147.797407][ T9015] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 147.821021][ T967] usb 1-1: Service connection timeout for: 256 [ 147.834896][ T967] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 147.843927][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 147.843967][ T29] audit: type=1400 audit(1730662769.282:726): avc: denied { read write } for pid=9019 comm="syz.1.1323" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 147.858045][ T967] ath9k_htc: Failed to initialize the device [ 147.873356][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.903640][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 147.910231][ T29] audit: type=1400 audit(1730662769.282:727): avc: denied { open } for pid=9019 comm="syz.1.1323" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 147.931659][ T5878] hid-generic 0000:0000:0000.0017: hidraw1: HID v0.00 Device [syz1] on syz0 [ 147.963103][ C0] kye 0003:0458:5010.0015: usb_submit_urb(ctrl) failed: -1 [ 147.979006][ T5906] usb 1-1: ath9k_htc: USB layer deinitialized [ 148.094486][ T29] audit: type=1400 audit(1730662769.532:728): avc: denied { mount } for pid=9031 comm="syz.5.1325" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 148.124654][ T9032] tracefs: Invalid gid '0x00000000ffffffff' [ 148.125543][ T29] audit: type=1400 audit(1730662769.562:729): avc: denied { remount } for pid=9031 comm="syz.5.1325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 148.161150][ T25] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 148.187266][ T29] audit: type=1400 audit(1730662769.622:730): avc: denied { unmount } for pid=7551 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 148.398183][ T29] audit: type=1400 audit(1730662769.832:731): avc: denied { map } for pid=9042 comm="syz.4.1330" path="/dev/sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.421938][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.436165][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.446147][ T25] usb 2-1: no configurations [ 148.515070][ T25] usb 2-1: can't read configurations, error -22 [ 148.540447][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.765387][ T5878] usb 3-1: USB disconnect, device number 21 [ 148.780144][ T29] audit: type=1400 audit(1730662770.212:732): avc: denied { map } for pid=9057 comm="syz.0.1335" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 148.803644][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.978076][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 254.240316][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 254.247373][ C1] rcu: 0-...!: (1 GPs behind) idle=fd0c/1/0x4000000000000000 softirq=28024/28025 fqs=0 [ 254.258238][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9054/1:b..l [ 254.266183][ C1] rcu: (detected by 1, t=10505 jiffies, g=23117, q=353 ncpus=2) [ 254.273911][ C1] Sending NMI from CPU 1 to CPUs 0: [ 254.273946][ C0] NMI backtrace for cpu 0 [ 254.273965][ C0] CPU: 0 UID: 0 PID: 9070 Comm: syz.4.1341 Not tainted 6.12.0-rc5-syzkaller-00322-gb9021de3ec2f #0 [ 254.273985][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.273998][ C0] RIP: 0010:kasan_check_range+0x1a/0x1a0 [ 254.274035][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 55 <53> 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 f8 0f 83 [ 254.274051][ C0] RSP: 0018:ffffc90000007bc0 EFLAGS: 00000096 [ 254.274064][ C0] RAX: ffffffff96e2dc50 RBX: 000000000000006e RCX: ffffffff8169b52e [ 254.274077][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff96e2dc48 [ 254.274087][ C0] RBP: ffffffff96e57f78 R08: 0000000000000000 R09: fffffbfff2dc5b95 [ 254.274099][ C0] R10: ffffffff96e2dcaf R11: 0000000000000000 R12: ffff88805e850b51 [ 254.274111][ C0] R13: ffff88805e850b58 R14: 0000000000000002 R15: ffff88805e850000 [ 254.274122][ C0] FS: 00007fb3027ff6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 254.274139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.274152][ C0] CR2: 0000001b2fe1bff8 CR3: 000000005e236000 CR4: 00000000003526f0 [ 254.274163][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 254.274173][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 254.274184][ C0] Call Trace: [ 254.274190][ C0] [ 254.274199][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 254.274227][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 254.274251][ C0] ? nmi_handle+0x1a9/0x5c0 [ 254.274269][ C0] ? kasan_check_range+0x1a/0x1a0 [ 254.274291][ C0] ? default_do_nmi+0x6a/0x160 [ 254.274311][ C0] ? exc_nmi+0x170/0x1e0 [ 254.274329][ C0] ? end_repeat_nmi+0xf/0x53 [ 254.274356][ C0] ? hlock_class+0x4e/0x130 [ 254.274377][ C0] ? kasan_check_range+0x1a/0x1a0 [ 254.274399][ C0] ? kasan_check_range+0x1a/0x1a0 [ 254.274420][ C0] ? kasan_check_range+0x1a/0x1a0 [ 254.274442][ C0] [ 254.274447][ C0] [ 254.274453][ C0] hlock_class+0x4e/0x130 [ 254.274472][ C0] __lock_acquire+0xbdd/0x3ce0 [ 254.274494][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 254.274510][ C0] ? advance_sched+0x6d2/0xc60 [ 254.274531][ C0] lock_acquire.part.0+0x11b/0x380 [ 254.274547][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 254.274566][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 254.274583][ C0] ? rcu_is_watching+0x12/0xc0 [ 254.274602][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 254.274622][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 254.274640][ C0] ? lock_acquire+0x2f/0xb0 [ 254.274655][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 254.274673][ C0] ? __pfx_advance_sched+0x10/0x10 [ 254.274691][ C0] _raw_spin_lock_irq+0x36/0x50 [ 254.274711][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 254.274728][ C0] __hrtimer_run_queues+0x2be/0xae0 [ 254.274754][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 254.274772][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 254.274798][ C0] hrtimer_interrupt+0x31b/0x800 [ 254.274820][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 254.274840][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 254.274863][ C0] [ 254.274868][ C0] [ 254.274874][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.274898][ C0] RIP: 0010:_ieee80211_recalc_chanctx_min_def+0x2b6/0xed0 [ 254.274921][ C0] Code: f3 07 00 00 e8 fb 49 ed f6 48 8b 44 24 08 48 8d 88 80 1a 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 c1 ea 03 80 3c 02 00 <0f> 85 83 0b 00 00 48 8b 44 24 08 45 31 ff 48 8b b0 80 1a 00 00 48 [ 254.274937][ C0] RSP: 0018:ffffc900034af110 EFLAGS: 00000246 [ 254.274951][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880223628c0 [ 254.274962][ C0] RDX: 1ffff1100446c518 RSI: ffffffff8aa030b5 RDI: 0000000000000001 [ 254.274974][ C0] RBP: 1ffff92000695e2e R08: 0000000000000001 R09: 0000000000000000 [ 254.274985][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880791bf0a8 [ 254.274996][ C0] R13: 0000000000000000 R14: ffff8880791bf000 R15: 0000000000000000 [ 254.275010][ C0] ? _ieee80211_recalc_chanctx_min_def+0x295/0xed0 [ 254.275035][ C0] ? find_held_lock+0x2d/0x110 [ 254.275055][ C0] ? __pfx__ieee80211_recalc_chanctx_min_def+0x10/0x10 [ 254.275077][ C0] ? __pfx_lock_release+0x10/0x10 [ 254.275092][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 254.275112][ C0] ? mark_held_locks+0x9f/0xe0 [ 254.275129][ C0] ieee80211_recalc_chanctx_min_def+0x2f/0x250 [ 254.275151][ C0] ieee80211_recalc_min_chandef+0x1c8/0x650 [ 254.275179][ C0] __sta_info_flush+0x545/0x730 [ 254.275203][ C0] ? __pfx___sta_info_flush+0x10/0x10 [ 254.275224][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.275246][ C0] ? cfg80211_put_bss+0x1b4/0x280 [ 254.275266][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 254.275288][ C0] ieee80211_ibss_disconnect+0x15c/0x8f0 [ 254.275315][ C0] ieee80211_ibss_leave+0x16/0x160 [ 254.275332][ C0] cfg80211_leave_ibss+0x1b4/0x490 [ 254.275354][ C0] cfg80211_change_iface+0x422/0xdc0 [ 254.275379][ C0] nl80211_set_interface+0x64c/0x980 [ 254.275405][ C0] ? __pfx_nl80211_set_interface+0x10/0x10 [ 254.275430][ C0] ? nl80211_pre_doit+0x71e/0xb10 [ 254.275449][ C0] ? nl80211_pre_doit+0x1b0/0xb10 [ 254.275471][ C0] genl_family_rcv_msg_doit+0x202/0x2f0 [ 254.275492][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 254.275513][ C0] ? bpf_lsm_capable+0x9/0x10 [ 254.275531][ C0] ? security_capable+0x7e/0x260 [ 254.275556][ C0] ? ns_capable+0xd7/0x110 [ 254.275574][ C0] genl_rcv_msg+0x565/0x800 [ 254.275593][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.275610][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 254.275630][ C0] ? __pfx_nl80211_set_interface+0x10/0x10 [ 254.275652][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 254.275678][ C0] netlink_rcv_skb+0x16b/0x440 [ 254.275702][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.275720][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.275752][ C0] ? down_read+0xc9/0x330 [ 254.275768][ C0] ? __pfx_down_read+0x10/0x10 [ 254.275784][ C0] ? netlink_deliver_tap+0x1ae/0xd90 [ 254.275808][ C0] genl_rcv+0x28/0x40 [ 254.275824][ C0] netlink_unicast+0x53c/0x7f0 [ 254.275848][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 254.275874][ C0] netlink_sendmsg+0x8b8/0xd70 [ 254.275899][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.275927][ C0] ____sys_sendmsg+0xaaf/0xc90 [ 254.275949][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 254.275968][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.275992][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 254.276010][ C0] ___sys_sendmsg+0x135/0x1e0 [ 254.276029][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.276052][ C0] ? lock_acquire+0x2f/0xb0 [ 254.276067][ C0] ? __fget_files+0x40/0x3f0 [ 254.276093][ C0] ? fdget+0x176/0x210 [ 254.276115][ C0] __sys_sendmsg+0x117/0x1f0 [ 254.276133][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.276152][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 254.276180][ C0] do_syscall_64+0xcd/0x250 [ 254.276196][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.276219][ C0] RIP: 0033:0x7fb302d7e719 [ 254.276237][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.276252][ C0] RSP: 002b:00007fb3027ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.276268][ C0] RAX: ffffffffffffffda RBX: 00007fb302f35f80 RCX: 00007fb302d7e719 [ 254.276280][ C0] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 254.276290][ C0] RBP: 00007fb302df132e R08: 0000000000000000 R09: 0000000000000000 [ 254.276301][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.276311][ C0] R13: 0000000000000000 R14: 00007fb302f35f80 R15: 00007fff761c1a18 [ 254.276328][ C0] [ 254.276946][ C1] task:syz.5.1333 state:R running task stack:25824 pid:9054 tgid:9054 ppid:7551 flags:0x00004000 [ 255.048368][ C1] Call Trace: [ 255.051643][ C1] [ 255.054580][ C1] __schedule+0xe55/0x5740 [ 255.059008][ C1] ? __pfx_mark_lock+0x10/0x10 [ 255.063781][ C1] ? mark_lock+0xb5/0xc60 [ 255.068114][ C1] ? __pfx___schedule+0x10/0x10 [ 255.072984][ C1] ? irqentry_exit+0x3b/0x90 [ 255.077580][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.082787][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 255.088162][ C1] preempt_schedule_common+0x44/0xc0 [ 255.093458][ C1] preempt_schedule_thunk+0x1a/0x30 [ 255.098662][ C1] unwind_next_frame+0x1776/0x20c0 [ 255.103776][ C1] ? __reset_page_owner+0x8d/0x400 [ 255.108892][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 255.115053][ C1] arch_stack_walk+0x95/0x100 [ 255.119739][ C1] ? free_unref_folios+0x956/0x1310 [ 255.124945][ C1] stack_trace_save+0x95/0xd0 [ 255.129627][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 255.135009][ C1] save_stack+0x162/0x1f0 [ 255.139338][ C1] ? __pfx_save_stack+0x10/0x10 [ 255.144187][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 255.149839][ C1] __reset_page_owner+0x8d/0x400 [ 255.154793][ C1] free_unref_folios+0x956/0x1310 [ 255.159835][ C1] folios_put_refs+0x551/0x750 [ 255.164613][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 255.169904][ C1] ? lock_acquire+0x2f/0xb0 [ 255.174417][ C1] ? mlock_drain_local+0x6f/0x4f0 [ 255.179456][ C1] free_pages_and_swap_cache+0x36d/0x510 [ 255.185093][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 255.191258][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 255.196454][ C1] ? hlock_class+0x4e/0x130 [ 255.200986][ C1] ? folio_memcg_unlock+0x5c/0x120 [ 255.206110][ C1] ? __pfx___might_resched+0x10/0x10 [ 255.211403][ C1] ? find_held_lock+0x2d/0x110 [ 255.216176][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 255.222166][ C1] tlb_flush_mmu+0xe9/0x590 [ 255.226679][ C1] unmap_page_range+0x1c08/0x3cf0 [ 255.231725][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 255.237099][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 255.242041][ C1] ? uprobe_munmap+0x20/0x5c0 [ 255.246728][ C1] unmap_single_vma+0x194/0x2b0 [ 255.251584][ C1] unmap_vmas+0x22f/0x490 [ 255.255923][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 255.260779][ C1] ? __pfx_lock_release+0x10/0x10 [ 255.265811][ C1] ? lock_acquire+0x2f/0xb0 [ 255.270320][ C1] ? mlock_drain_local+0x6f/0x4f0 [ 255.275359][ C1] exit_mmap+0x1c6/0xb30 [ 255.279610][ C1] ? trace_contention_end+0xea/0x140 [ 255.284897][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 255.289659][ C1] ? __mutex_lock+0x1a6/0x9c0 [ 255.294363][ C1] __mmput+0x12a/0x480 [ 255.298441][ C1] mmput+0x62/0x70 [ 255.302162][ C1] do_exit+0x9bf/0x2d70 [ 255.306329][ C1] ? __pfx_do_exit+0x10/0x10 [ 255.310928][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 255.316325][ C1] do_group_exit+0xd3/0x2a0 [ 255.321276][ C1] __x64_sys_exit_group+0x3e/0x50 [ 255.326313][ C1] x64_sys_call+0x14a9/0x16a0 [ 255.330994][ C1] do_syscall_64+0xcd/0x250 [ 255.335499][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.341403][ C1] RIP: 0033:0x7f514a77e719 [ 255.345818][ C1] RSP: 002b:00007ffdc0f99198 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 255.354231][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f514a77e719 [ 255.362207][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.370203][ C1] RBP: 00007ffdc0f991ec R08: 00007ffdc0f9927f R09: 0000000000024415 [ 255.378172][ C1] R10: 00007f514a922000 R11: 0000000000000246 R12: 0000000000000032 [ 255.386140][ C1] R13: 0000000000024415 R14: 0000000000024333 R15: 00007ffdc0f99240 [ 255.394124][ C1] [ 255.397149][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g23117 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 255.408340][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 255.418309][ C1] rcu: RCU grace-period kthread stack dump: [ 255.424187][ C1] task:rcu_preempt state:R running task stack:28400 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 255.435954][ C1] Call Trace: [ 255.439230][ C1] [ 255.442163][ C1] __schedule+0xe55/0x5740 [ 255.446590][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 255.451800][ C1] ? __pfx___schedule+0x10/0x10 [ 255.456656][ C1] ? schedule+0x298/0x350 [ 255.460992][ C1] ? __pfx_lock_release+0x10/0x10 [ 255.466012][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 255.471221][ C1] ? lock_acquire+0x2f/0xb0 [ 255.475724][ C1] ? schedule+0x1fd/0x350 [ 255.480061][ C1] schedule+0xe7/0x350 [ 255.484137][ C1] schedule_timeout+0x136/0x2a0 [ 255.489006][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 255.494387][ C1] ? __pfx_process_timeout+0x10/0x10 [ 255.499683][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 255.505496][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 255.510962][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 255.515730][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 255.521015][ C1] ? rcu_gp_init+0xc82/0x1630 [ 255.525695][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 255.530903][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 255.536745][ C1] rcu_gp_kthread+0x271/0x380 [ 255.541424][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 255.546622][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.551829][ C1] ? __kthread_parkme+0x148/0x220 [ 255.556860][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 255.562057][ C1] kthread+0x2c1/0x3a0 [ 255.566130][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.571336][ C1] ? __pfx_kthread+0x10/0x10 [ 255.575940][ C1] ret_from_fork+0x45/0x80 [ 255.580364][ C1] ? __pfx_kthread+0x10/0x10 [ 255.584962][ C1] ret_from_fork_asm+0x1a/0x30 [ 255.589750][ C1] [ 255.592776][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 255.599116][ C1] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc5-syzkaller-00322-gb9021de3ec2f #0 [ 255.609785][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.619851][ C1] Workqueue: events_unbound toggle_allocation_gate [ 255.626369][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 255.633047][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 8a 1b 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a4 0c 00 00 8b 43 08 31 [ 255.652668][ C1] RSP: 0018:ffffc90000107998 EFLAGS: 00000293 [ 255.658827][ C1] RAX: 0000000000000000 RBX: ffff8880b8646b80 RCX: ffffffff81815f4c [ 255.666795][ C1] RDX: ffff88801c6aa440 RSI: ffffffff81815f26 RDI: 0000000000000005 [ 255.674765][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 255.682735][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170c8d71 [ 255.690702][ C1] R13: 0000000000000001 R14: ffff8880b8646b88 R15: ffff8880b8740100 [ 255.698675][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 255.707605][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.714211][ C1] CR2: 0000001b2fe19ff8 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 255.722201][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.730176][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.738149][ C1] Call Trace: [ 255.741425][ C1] [ 255.744271][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 255.750604][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 255.755811][ C1] ? rcu_sched_clock_irq+0x23d7/0x32a0 [ 255.761283][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 255.766924][ C1] ? __asan_memcpy+0x3c/0x60 [ 255.771520][ C1] ? __asan_memcpy+0x3c/0x60 [ 255.776125][ C1] ? update_process_times+0x178/0x220 [ 255.781527][ C1] ? __pfx_update_process_times+0x10/0x10 [ 255.787255][ C1] ? update_wall_time+0x1c/0x40 [ 255.792117][ C1] ? tick_nohz_handler+0x376/0x530 [ 255.797232][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 255.802698][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 255.808091][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 255.813818][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 255.819896][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 255.825022][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 255.831190][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 255.837005][ C1] [ 255.839934][ C1] [ 255.842872][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.849041][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 255.855108][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 255.861177][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 255.867245][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 255.873314][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 255.878363][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 255.883389][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 255.888589][ C1] text_poke_bp_batch+0x22b/0x760 [ 255.893622][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 255.899805][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 255.905357][ C1] ? __jump_label_patch+0x1db/0x400 [ 255.910565][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 255.916820][ C1] text_poke_finish+0x30/0x40 [ 255.921501][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 255.927486][ C1] jump_label_update+0x1d7/0x400 [ 255.932427][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 255.938322][ C1] static_key_enable+0x1a/0x20 [ 255.943089][ C1] toggle_allocation_gate+0xfc/0x260 [ 255.948380][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 255.954274][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 255.959481][ C1] ? process_one_work+0x921/0x1ba0 [ 255.964600][ C1] ? lock_acquire+0x2f/0xb0 [ 255.969102][ C1] ? process_one_work+0x921/0x1ba0 [ 255.974230][ C1] process_one_work+0x9c5/0x1ba0 [ 255.979188][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 255.985358][ C1] ? __pfx_process_one_work+0x10/0x10 [ 255.990753][ C1] ? assign_work+0x1a0/0x250 [ 255.995365][ C1] worker_thread+0x6c8/0xf00 [ 255.999972][ C1] ? __pfx_worker_thread+0x10/0x10 [ 256.005086][ C1] kthread+0x2c1/0x3a0 [ 256.009159][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.014364][ C1] ? __pfx_kthread+0x10/0x10 [ 256.018964][ C1] ret_from_fork+0x45/0x80 [ 256.023380][ C1] ? __pfx_kthread+0x10/0x10 [ 256.027980][ C1] ret_from_fork_asm+0x1a/0x30 [ 256.032765][ C1]