last executing test programs: 20.592401896s ago: executing program 1 (id=1566): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) 19.58037808s ago: executing program 2 (id=1571): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'team_slave_1\x00', @broadcast}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 19.390736018s ago: executing program 1 (id=1573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 18.963782032s ago: executing program 2 (id=1576): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 18.849546315s ago: executing program 3 (id=1577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e700", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc77fe7886d3acb57}}}}}}}, 0x0) 18.423830703s ago: executing program 2 (id=1579): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f00000000c0)="03", 0x1a000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18.301512508s ago: executing program 1 (id=1580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)) 18.221447527s ago: executing program 3 (id=1581): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)) 17.830733113s ago: executing program 2 (id=1583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffff9}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) 17.557823138s ago: executing program 3 (id=1585): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.433229235s ago: executing program 1 (id=1586): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000002"], 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000c40)=""/122) 17.123748011s ago: executing program 2 (id=1588): syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f00000005c0), &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 16.038481375s ago: executing program 2 (id=1592): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 15.839808548s ago: executing program 1 (id=1594): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) tkill(0x0, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x80}, 'port1\x00'}) 14.652364979s ago: executing program 0 (id=1597): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000001300)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000480)=[{&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f0000000880)=""/87, 0x57}, {0x0, 0x1000000}], 0x3}}], 0x48}, 0x0) 14.58075651s ago: executing program 1 (id=1598): memfd_create(0x0, 0x2) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xfffe, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 14.334130859s ago: executing program 3 (id=1600): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r2}, 0x14) 13.931731557s ago: executing program 3 (id=1602): pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) close(0xffffffffffffffff) r0 = mq_open(&(0x7f0000000000)='\\,\x00', 0x4a1483037702dbc5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5452, &(0x7f0000000140)={0x3, 'veth1_vlan\x00'}) 13.427002466s ago: executing program 3 (id=1603): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) write$binfmt_elf32(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x80, 0x3, 0xff, 0x0, 0x3, 0x6, 0x10, 0xf2, 0x34, 0x342, 0x7, 0x8000, 0x20, 0x1, 0x47, 0x81, 0x7f}, [{0x6, 0x5, 0xfffffff5, 0x6, 0x2, 0xffff, 0xfff, 0x4}]}, 0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) write$sequencer(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="8101000005"], 0x8) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 13.304852863s ago: executing program 4 (id=1604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) 13.061152352s ago: executing program 0 (id=1605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f00000009c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0) 12.019045591s ago: executing program 4 (id=1606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x304, 0x39}, "2f9ba2ce41a730cb", "37a06f8ef45af1f5dd02000a4638ea00", "5d6937cd", "000000005a20ed4d"}, 0x28) 11.8311504s ago: executing program 0 (id=1607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="29003300b0000000ffffffffffff0802110000005050505050500000000001"], 0x48}}, 0x0) 10.798234882s ago: executing program 4 (id=1608): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000040000000000000000000bfef9004af9a20eaf3"], 0x78) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 10.03804286s ago: executing program 4 (id=1609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) 9.955771672s ago: executing program 0 (id=1610): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000003c0)=ANY=[@ANYRES64=r1], 0x6) 2.218593916s ago: executing program 4 (id=1614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x58}}, 0x0) 1.889521276s ago: executing program 0 (id=1615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x2, 0xa}]}}}}}}}}, 0x0) 1.289537692s ago: executing program 4 (id=1616): r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, 0x3) 0s ago: executing program 0 (id=1617): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x5d000100, 0x0, 0x3, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): nknown main item tag 0x0 [ 227.256553][ T5242] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 227.577485][ T5294] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 227.588823][ T5294] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 227.596286][ T5294] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 227.606996][ T5294] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 227.620807][ T5294] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 227.650963][ T5294] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 227.676708][ T5294] usb 3-1: USB disconnect, device number 6 [ 227.976019][ T29] audit: type=1326 audit(1725012250.333:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.4.404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f6ef79ef9 code=0x0 [ 228.367766][ T5242] gspca_vc032x: reg_w err -71 [ 228.374730][ T5242] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 228.436654][ T5242] usb 1-1: USB disconnect, device number 4 [ 228.756675][ T6635] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 228.985128][ T29] audit: type=1400 audit(1725012251.333:367): avc: denied { map } for pid=6642 comm="syz.4.561" path="socket:[11986]" dev="sockfs" ino=11986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.310419][ T972] wlan1: Trigger new scan to find an IBSS to join [ 232.331884][ T29] audit: type=1400 audit(1725012254.683:368): avc: denied { append } for pid=6684 comm="syz.0.578" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 232.670377][ T5241] Bluetooth: hci0: command 0x0406 tx timeout [ 232.674987][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 232.676477][ T5234] Bluetooth: hci1: command 0x0406 tx timeout [ 233.804185][ T6700] Bluetooth: MGMT ver 1.23 [ 233.809009][ T6700] Bluetooth: hci3: too big key_count value 40847 [ 233.916686][ T29] audit: type=1400 audit(1725012256.263:369): avc: denied { setopt } for pid=6701 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 234.153854][ T5294] kernel write not supported for file /radio1 (pid: 5294 comm: kworker/0:5) [ 234.342057][ T1103] wlan1: Trigger new scan to find an IBSS to join [ 234.605936][ T5214] kernel write not supported for file /snd/pcmC0D0p (pid: 5214 comm: kworker/0:3) [ 234.696523][ T29] audit: type=1400 audit(1725012257.053:370): avc: denied { module_load } for pid=6716 comm="syz.0.593" path="/sys/kernel/notes" dev="sysfs" ino=1375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 234.696651][ T6717] Invalid ELF header magic: != ELF [ 234.911234][ T6722] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.594'. [ 234.956838][ T6722] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.594'. [ 235.514945][ T6729] team0: entered promiscuous mode [ 235.537713][ T6729] team_slave_0: entered promiscuous mode [ 235.567598][ T6729] team_slave_1: entered promiscuous mode [ 235.644901][ T6728] team0: left promiscuous mode [ 235.672509][ T6728] team_slave_0: left promiscuous mode [ 235.679256][ T6728] team_slave_1: left promiscuous mode [ 236.252984][ T29] audit: type=1326 audit(1725012258.603:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.1.605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb98979ef9 code=0x0 [ 236.625358][ T29] audit: type=1400 audit(1725012258.983:372): avc: denied { bind } for pid=6753 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 237.378388][ T2532] wlan1: Creating new IBSS network, BSSID 2a:e5:bb:c0:bf:83 [ 237.493090][ T6769] netlink: 56 bytes leftover after parsing attributes in process `syz.4.614'. [ 237.524832][ T6769] netlink: 48 bytes leftover after parsing attributes in process `syz.4.614'. [ 237.619208][ T6773] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 238.616628][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 239.762992][ T29] audit: type=1400 audit(1725012262.113:373): avc: denied { read } for pid=6804 comm="syz.2.630" path="socket:[12785]" dev="sockfs" ino=12785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 239.907507][ T29] audit: type=1400 audit(1725012262.203:374): avc: denied { setopt } for pid=6804 comm="syz.2.630" laddr=::1 lport=2 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.016239][ T29] audit: type=1400 audit(1725012262.353:375): avc: denied { watch watch_reads } for pid=6808 comm="syz.3.631" path="/133" dev="tmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 240.061265][ T5242] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 240.095217][ T29] audit: type=1400 audit(1725012262.373:376): avc: denied { watch_mount } for pid=6808 comm="syz.3.631" path="/133" dev="tmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 240.294476][ T5242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.335104][ T5242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.382560][ T5242] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.413561][ T5242] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.434470][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 240.473963][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.496076][ T5242] usb 1-1: config 0 descriptor?? [ 240.586478][ T5239] block nbd3: Receive control failed (result -107) [ 240.735572][ T6820] nbd3: detected capacity change from 0 to 15960 [ 240.788725][ T6819] block nbd3: shutting down sockets [ 240.807053][ T46] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc [ 240.874596][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.940352][ T46] usb 2-1: Product: syz [ 240.944643][ T46] usb 2-1: Manufacturer: syz [ 240.972984][ T46] usb 2-1: SerialNumber: syz [ 240.990927][ T5242] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 241.023643][ T5242] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 241.038346][ T46] usb 2-1: config 0 descriptor?? [ 241.062219][ T46] cypress_m8 2-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 241.097715][ T46] nokiaca42v2 ttyUSB0: required endpoint is missing [ 241.126161][ T5242] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 241.339781][ T5242] usb 1-1: USB disconnect, device number 5 [ 241.916834][ T5242] usb 2-1: USB disconnect, device number 8 [ 241.949794][ T5242] cypress_m8 2-1:0.0: device disconnected [ 242.473898][ T6845] Zero length message leads to an empty skb [ 243.038647][ T6856] ======================================================= [ 243.038647][ T6856] WARNING: The mand mount option has been deprecated and [ 243.038647][ T6856] and is ignored by this kernel. Remove the mand [ 243.038647][ T6856] option from the mount to silence this warning. [ 243.038647][ T6856] ======================================================= [ 243.335866][ T29] audit: type=1400 audit(1725012265.693:377): avc: denied { unmount } for pid=5238 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 244.366148][ T29] audit: type=1400 audit(1725012266.723:378): avc: denied { create } for pid=6878 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 244.435929][ T29] audit: type=1400 audit(1725012266.793:379): avc: denied { read } for pid=6878 comm="syz.1.661" path="socket:[13557]" dev="sockfs" ino=13557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 244.548008][ T5242] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 244.768163][ T5242] usb 3-1: Using ep0 maxpacket: 16 [ 244.776060][ T5242] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 244.816804][ T6883] team0: entered promiscuous mode [ 244.842483][ T5242] usb 3-1: config 0 has no interface number 0 [ 244.854809][ T5242] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.909722][ T6883] team_slave_0: entered promiscuous mode [ 244.915833][ T6883] team_slave_1: entered promiscuous mode [ 244.935292][ T6888] team0: left promiscuous mode [ 244.935322][ T5242] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 244.966232][ T6888] team_slave_0: left promiscuous mode [ 244.999792][ T5242] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 245.000636][ T6888] team_slave_1: left promiscuous mode [ 245.032988][ T5242] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 245.064213][ T6885] team0: entered promiscuous mode [ 245.106774][ T5242] usb 3-1: Product: syz [ 245.154656][ T5242] usb 3-1: SerialNumber: syz [ 245.160944][ T6885] team_slave_0: entered promiscuous mode [ 245.161269][ T6885] team_slave_1: entered promiscuous mode [ 245.165138][ T6882] team0: left promiscuous mode [ 245.165233][ T6882] team_slave_0: left promiscuous mode [ 245.165566][ T6882] team_slave_1: left promiscuous mode [ 245.226473][ T5242] usb 3-1: config 0 descriptor?? [ 245.275626][ T5242] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 245.322935][ T5242] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input10 [ 245.897520][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 246.236488][ T6901] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.670'. [ 246.236794][ T6901] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 246.236820][ T6901] netlink: 121 bytes leftover after parsing attributes in process `syz.1.670'. [ 246.657484][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 246.665105][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 246.672182][ C0] hrtimer: interrupt took 14995171 ns [ 246.677717][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 246.685267][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 246.693672][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 246.700911][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 246.708151][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 246.715388][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 246.722628][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 246.729862][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 246.762825][ T25] usb 3-1: USB disconnect, device number 7 [ 246.762900][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 246.858306][ T25] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 246.888843][ T29] audit: type=1400 audit(1725012269.193:380): avc: denied { search } for pid=4661 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.405880][ T29] audit: type=1400 audit(1725012269.763:381): avc: denied { write } for pid=6919 comm="syz.1.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 249.360019][ T6947] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.691'. [ 249.399942][ T6947] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.691'. [ 249.804218][ T6962] team0: entered promiscuous mode [ 249.818008][ T6962] team_slave_0: entered promiscuous mode [ 249.851858][ T6962] team_slave_1: entered promiscuous mode [ 249.954444][ T6961] team0: left promiscuous mode [ 249.981934][ T6961] team_slave_0: left promiscuous mode [ 250.047003][ T6961] team_slave_1: left promiscuous mode [ 250.837410][ T6983] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 250.854053][ T5294] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 250.914546][ T6982] IPVS: stopping master sync thread 6983 ... [ 251.038655][ T5294] usb 1-1: Using ep0 maxpacket: 16 [ 251.048839][ T5294] usb 1-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 251.136070][ T5294] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 251.214720][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 251.264481][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 251.326482][ T5294] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.375047][ T5294] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 251.391736][ T5294] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 251.422657][ T5294] usb 1-1: Manufacturer: syz [ 251.451190][ T5294] usb 1-1: config 0 descriptor?? [ 251.474708][ T6976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.567718][ T5294] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 251.814880][ T29] audit: type=1400 audit(1725012274.173:382): avc: denied { name_bind } for pid=6992 comm="syz.2.710" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 252.153463][ T6996] team0: entered promiscuous mode [ 252.162722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 252.242809][ T6996] team_slave_0: entered promiscuous mode [ 252.330779][ T6996] team_slave_1: entered promiscuous mode [ 252.473502][ T6994] team0: left promiscuous mode [ 252.511531][ T46] usb 1-1: USB disconnect, device number 6 [ 252.559218][ T6994] team_slave_0: left promiscuous mode [ 252.564952][ T6994] team_slave_1: left promiscuous mode [ 252.566878][ T7004] syz.4.713: attempt to access beyond end of device [ 252.566878][ T7004] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 252.598623][ T7001] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 252.606535][ T7001] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 252.633908][ T7001] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 252.644958][ T7001] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 252.664836][ T7004] F2FS-fs (loop4): Unable to read 1th superblock [ 252.681628][ T7004] syz.4.713: attempt to access beyond end of device [ 252.681628][ T7004] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 252.767650][ T29] audit: type=1400 audit(1725012275.123:383): avc: denied { read } for pid=7002 comm="syz.1.712" laddr=::ffff:172.20.20.170 lport=20000 faddr=::ffff:172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 252.832832][ T7004] F2FS-fs (loop4): Unable to read 2th superblock [ 253.601899][ T29] audit: type=1400 audit(1725012275.953:384): avc: denied { mounton } for pid=7013 comm="syz.0.717" path="/160/file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 253.660482][ T5214] kernel read not supported for file /newroot/160/file0 (pid: 5214 comm: kworker/0:3) [ 254.171818][ T5239] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 254.452457][ T7025] Process accounting resumed [ 254.524822][ T29] audit: type=1400 audit(1725012276.883:385): avc: denied { unmount } for pid=5231 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 255.183258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 255.460913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 255.843117][ T5214] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 256.059935][ T5214] usb 5-1: Using ep0 maxpacket: 16 [ 256.070027][ T5214] usb 5-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 256.151729][ T5214] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 256.238010][ T5214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 256.279912][ T5214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 256.308307][ T29] audit: type=1400 audit(1725012278.673:386): avc: denied { execute } for pid=7046 comm="syz.0.731" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 256.485132][ T5214] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.668648][ T5214] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 256.766121][ T5214] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 256.812005][ T5214] usb 5-1: Manufacturer: syz [ 256.851783][ T5214] usb 5-1: config 0 descriptor?? [ 256.862706][ T7043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 256.963697][ T5214] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 257.445493][ T5282] usb 5-1: USB disconnect, device number 4 [ 257.847442][ T7063] batadv_slave_0: entered allmulticast mode [ 258.201703][ T5239] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 258.223825][ T5239] Bluetooth: hci1: Injecting HCI hardware error event [ 258.233812][ T5237] Bluetooth: hci1: hardware error 0x00 [ 258.495685][ T29] audit: type=1400 audit(1725012280.853:387): avc: denied { wake_alarm } for pid=7069 comm="syz.4.742" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 258.862884][ T29] audit: type=1400 audit(1725012281.203:388): avc: denied { append } for pid=7071 comm="syz.1.744" name="event3" dev="devtmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 258.994556][ T29] audit: type=1400 audit(1725012281.263:389): avc: denied { read } for pid=7071 comm="syz.1.744" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 259.043151][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.746'. [ 259.126193][ T29] audit: type=1400 audit(1725012281.273:390): avc: denied { open } for pid=7071 comm="syz.1.744" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 260.302773][ T4617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.317395][ T4617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.341812][ T4617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.356417][ T4617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.366205][ T4617] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.380955][ T4617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.442987][ T5237] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 260.827141][ T972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.264773][ T972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.312166][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.320141][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.632638][ T972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.858066][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 261.861538][ T972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.061185][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 262.069209][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 262.143110][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 262.164939][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.367773][ T25] usb 3-1: config 0 descriptor?? [ 262.469634][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 262.498922][ T5237] Bluetooth: hci3: command tx timeout [ 262.925471][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.043253][ T7096] chnl_net:caif_netlink_parms(): no params data found [ 263.050719][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.136383][ T25] usb 3-1: USB disconnect, device number 8 [ 263.193969][ T972] bridge_slave_1: left allmulticast mode [ 263.229104][ T972] bridge_slave_1: left promiscuous mode [ 263.264596][ T972] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.376673][ T29] audit: type=1400 audit(1725012285.733:391): avc: denied { write } for pid=7125 comm="syz.1.763" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.424399][ T972] bridge_slave_0: left allmulticast mode [ 263.454174][ T972] bridge_slave_0: left promiscuous mode [ 263.475850][ T972] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.590779][ T5237] Bluetooth: hci3: command tx timeout [ 265.463530][ T972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.497151][ T972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.530717][ T972] bond0 (unregistering): Released all slaves [ 265.794954][ T7134] bond_slave_0: entered promiscuous mode [ 265.801490][ T7134] bond_slave_1: entered promiscuous mode [ 265.859268][ T7134] bond_slave_0: left promiscuous mode [ 265.865379][ T7134] bond_slave_1: left promiscuous mode [ 266.262519][ T7135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.295338][ T7135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.310016][ T7135] bond0 (unregistering): Released all slaves [ 266.660841][ T5237] Bluetooth: hci3: command tx timeout [ 266.782440][ T29] audit: type=1400 audit(1725012289.143:392): avc: denied { read } for pid=7173 comm="syz.2.779" path="socket:[14204]" dev="sockfs" ino=14204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 267.327926][ T29] audit: type=1400 audit(1725012289.673:393): avc: denied { read } for pid=7181 comm="syz.4.782" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 267.462022][ T29] audit: type=1400 audit(1725012289.673:394): avc: denied { open } for pid=7181 comm="syz.4.782" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 267.594103][ T29] audit: type=1400 audit(1725012289.683:395): avc: denied { ioctl } for pid=7181 comm="syz.4.782" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 267.706136][ T29] audit: type=1400 audit(1725012289.873:396): avc: denied { mount } for pid=7185 comm="syz.0.784" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 267.926820][ T7096] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.995174][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.033505][ T7096] bridge_slave_0: entered allmulticast mode [ 268.055791][ T29] audit: type=1400 audit(1725012290.413:397): avc: denied { mount } for pid=7194 comm="syz.0.788" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 268.077199][ T7096] bridge_slave_0: entered promiscuous mode [ 268.153009][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.162180][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.191998][ T7096] bridge_slave_1: entered allmulticast mode [ 268.223778][ T7096] bridge_slave_1: entered promiscuous mode [ 268.241279][ T29] audit: type=1400 audit(1725012290.603:398): avc: denied { unmount } for pid=5232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 268.546139][ T972] hsr_slave_0: left promiscuous mode [ 268.617546][ T972] hsr_slave_1: left promiscuous mode [ 268.653071][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 268.692286][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.717089][ T972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.728980][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.736673][ T972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.744730][ T5237] Bluetooth: hci3: command tx timeout [ 268.896900][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.970740][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 269.000156][ T972] veth1_macvtap: left promiscuous mode [ 269.005851][ T972] veth0_macvtap: left promiscuous mode [ 269.025014][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 269.038690][ T972] veth1_vlan: left promiscuous mode [ 269.044141][ T972] veth0_vlan: left promiscuous mode [ 269.061013][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 269.098219][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.122125][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.136559][ T25] usb 1-1: config 0 descriptor?? [ 269.175515][ T7203] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 269.660804][ T25] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 269.697097][ T25] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 269.767546][ T25] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 270.020416][ T5214] usb 1-1: USB disconnect, device number 7 [ 271.252829][ T29] audit: type=1400 audit(1725012293.613:399): avc: denied { map } for pid=7238 comm="syz.0.806" path="/dev/video3" dev="devtmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 271.486250][ T7243] input: syz0 as /devices/virtual/input/input12 [ 271.756853][ T972] team0 (unregistering): Port device team_slave_1 removed [ 271.809786][ T29] audit: type=1400 audit(1725012294.173:400): avc: denied { bind } for pid=7246 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.016133][ T972] team0 (unregistering): Port device team_slave_0 removed [ 274.284586][ T29] audit: type=1400 audit(1725012296.653:401): avc: denied { map } for pid=7321 comm="syz.2.815" path="socket:[14517]" dev="sockfs" ino=14517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 274.667145][ T7096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.734577][ T7096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.747073][ T7326] Illegal XDP return value 1929957435 on prog (id 77) dev N/A, expect packet loss! [ 274.805992][ T7219] team_slave_0: entered allmulticast mode [ 274.944887][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.818'. [ 275.195452][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.818'. [ 275.316761][ T7096] team0: Port device team_slave_0 added [ 275.422701][ T7096] team0: Port device team_slave_1 added [ 275.587895][ T29] audit: type=1400 audit(1725012297.933:402): avc: denied { watch watch_reads } for pid=7334 comm="syz.0.821" path="/proc/415/net/unix" dev="proc" ino=4026533166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 275.829273][ T5214] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 275.899305][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.926100][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.986195][ T7096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.077417][ T5214] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.088472][ T5214] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 276.121452][ T5214] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 276.146169][ T5214] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 276.165974][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.173860][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.207225][ T5214] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 276.220276][ T5214] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.239550][ T7096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.266008][ T5214] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.277670][ T5214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.308542][ T5214] usb 5-1: Product: syz [ 276.312791][ T5214] usb 5-1: Manufacturer: syz [ 276.338789][ T5214] usb 5-1: SerialNumber: syz [ 276.400294][ T7337] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 276.879462][ T7096] hsr_slave_0: entered promiscuous mode [ 276.916475][ T29] audit: type=1400 audit(1725012299.273:403): avc: denied { watch } for pid=7349 comm="syz.2.827" path="/181" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 276.954479][ T7096] hsr_slave_1: entered promiscuous mode [ 276.973152][ T29] audit: type=1400 audit(1725012299.333:404): avc: denied { watch_sb } for pid=7349 comm="syz.2.827" path="/181" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 277.034822][ T7096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.073831][ T7096] Cannot create hsr debugfs directory [ 277.102288][ T7330] netlink: 5 bytes leftover after parsing attributes in process `syz.1.819'. [ 277.161226][ T7330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.506395][ T5214] cdc_ncm 5-1:1.0: bind() failure [ 277.544940][ T5214] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 277.587172][ T5214] cdc_ncm 5-1:1.1: bind() failure [ 277.645989][ T5214] usb 5-1: USB disconnect, device number 5 [ 278.469819][ T5237] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 279.398171][ T5214] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 279.607940][ T5214] usb 3-1: Using ep0 maxpacket: 8 [ 279.615869][ T5214] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 279.644366][ T5214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.693082][ T5214] usb 3-1: config 0 descriptor?? [ 279.726468][ T5214] ums-jumpshot 3-1:0.0: USB Mass Storage device detected [ 279.791674][ T5214] ums-jumpshot 3-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 279.855248][ T7383] overlayfs: conflicting options: metacopy=off,verity=on [ 279.880106][ T29] audit: type=1400 audit(1725012302.213:405): avc: denied { relabelfrom } for pid=7378 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 279.899879][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.983035][ T29] audit: type=1400 audit(1725012302.233:406): avc: denied { relabelto } for pid=7378 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 280.097592][ T5214] usb 3-1: USB disconnect, device number 9 [ 280.223978][ T7387] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 280.392592][ T7096] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.427654][ T7096] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.524134][ T7096] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.572619][ T7096] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 281.073531][ T7096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.225289][ T7096] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.323325][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.330637][ T7304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.520256][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.527534][ T7304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.924795][ T7413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.498408][ T5237] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 282.521970][ T5237] Bluetooth: hci0: Injecting HCI hardware error event [ 282.532630][ T5237] Bluetooth: hci0: hardware error 0x00 [ 282.742716][ T5282] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 282.936427][ T5282] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.032819][ T5282] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.094437][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.167372][ T5282] usb 3-1: Product: syz [ 283.192461][ T5282] usb 3-1: Manufacturer: syz [ 283.197188][ T5282] usb 3-1: SerialNumber: syz [ 283.269567][ T5282] cdc_ncm 3-1:1.0: skipping garbage [ 283.306553][ T7096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.355029][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 283.364471][ T7441] netlink: 'syz.1.863': attribute type 2 has an invalid length. [ 283.772861][ T7096] veth0_vlan: entered promiscuous mode [ 283.814121][ T7096] veth1_vlan: entered promiscuous mode [ 283.881432][ T29] audit: type=1400 audit(1725012306.213:407): avc: denied { bind } for pid=7442 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 283.900792][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.046895][ T5239] block nbd0: Receive control failed (result -104) [ 284.051198][ T7439] block nbd0: shutting down sockets [ 284.132883][ T7096] veth0_macvtap: entered promiscuous mode [ 284.422438][ T5282] cdc_ncm 3-1:1.0: bind() failure [ 284.483250][ T5282] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 284.526197][ T5282] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 284.571856][ T5282] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 284.618041][ T5237] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 284.641261][ T7096] veth1_macvtap: entered promiscuous mode [ 284.653006][ T5282] usb 3-1: USB disconnect, device number 10 [ 284.924011][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.948571][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.994980][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.052038][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.097396][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.129930][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.161138][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.220921][ T7456] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'. [ 285.230719][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.235156][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.363035][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.396412][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.430036][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.466171][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.523917][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.561882][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.587540][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.623041][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.664686][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.853990][ T29] audit: type=1400 audit(1725012308.193:408): avc: denied { getopt } for pid=7461 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 285.922525][ T7096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.945718][ T7096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.954586][ T7096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.991852][ T7096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.186700][ T7469] netlink: 156 bytes leftover after parsing attributes in process `syz.4.874'. [ 286.250432][ T7469] netlink: 'syz.4.874': attribute type 2 has an invalid length. [ 286.272189][ T7469] netlink: 60 bytes leftover after parsing attributes in process `syz.4.874'. [ 286.805816][ T7478] vcan0: tx address claim with dest, not broadcast [ 286.970886][ T941] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 287.050393][ T29] audit: type=1400 audit(1725012309.403:409): avc: denied { ioctl } for pid=7479 comm="syz.2.880" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 287.060957][ T5242] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 287.116558][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.134440][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.193838][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.279389][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.342172][ T941] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 287.376779][ T5242] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 287.385797][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.409797][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.423887][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.448185][ T5242] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 287.474298][ T972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.479350][ T5242] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 287.521904][ T5242] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 287.524251][ T972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.530088][ T5242] usb 2-1: Manufacturer: syz [ 287.561878][ T5242] usb 2-1: config 0 descriptor?? [ 287.572840][ T941] usb 5-1: config 0 descriptor?? [ 288.007989][ T46] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 288.048805][ T5242] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 288.080522][ T5242] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 288.103746][ T941] aquacomputer_d5next 0003:0C70:F011.000A: item fetching failed at offset 0/5 [ 288.170374][ T941] aquacomputer_d5next 0003:0C70:F011.000A: probe with driver aquacomputer_d5next failed with error -22 [ 288.180230][ T5242] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 288.275717][ T46] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 288.302693][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 288.342666][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 288.406559][ T5242] usb 2-1: USB disconnect, device number 9 [ 288.432085][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.567496][ T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.587478][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.657834][ T46] usb 3-1: config 0 descriptor?? [ 288.664186][ T7486] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 288.664600][ T7490] io-wq is not configured for unbound workers [ 288.690523][ T5280] usb 5-1: USB disconnect, device number 6 [ 289.248424][ T46] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 289.294849][ T46] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 289.352964][ T46] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 289.459778][ T5362] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 289.551624][ T7500] Cannot find set identified by id 0 to match [ 289.665850][ T5282] usb 3-1: USB disconnect, device number 11 [ 289.680471][ T5362] usb 4-1: Using ep0 maxpacket: 32 [ 289.704791][ T5362] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 289.755840][ T5362] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 289.784802][ T5362] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 289.830754][ T5362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.913499][ T5362] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 289.963338][ T5362] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 289.995022][ T5362] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 290.025394][ T5362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.044183][ T5362] usb 4-1: config 0 descriptor?? [ 290.115884][ T29] audit: type=1400 audit(1725012312.473:410): avc: denied { getopt } for pid=7507 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 290.161275][ T29] audit: type=1400 audit(1725012312.473:411): avc: denied { read } for pid=7507 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 290.401253][ T5362] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 290.860734][ T5214] usb 4-1: USB disconnect, device number 6 [ 290.895943][ T5214] usblp0: removed [ 291.513271][ T7528] netlink: 'syz.1.900': attribute type 3 has an invalid length. [ 292.474397][ T7544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.515301][ T29] audit: type=1400 audit(1725012314.873:412): avc: denied { unmount } for pid=5232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 292.770733][ T5362] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 292.985890][ T5362] usb 2-1: Using ep0 maxpacket: 8 [ 293.013329][ T5362] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.073615][ T5362] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.137212][ T5362] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 293.290762][ T5362] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.314407][ T5362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.340153][ T5362] usb 2-1: Product: syz [ 293.344487][ T5362] usb 2-1: Manufacturer: syz [ 293.351586][ T5362] usb 2-1: SerialNumber: syz [ 293.492780][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 294.630832][ T5362] cdc_ncm 2-1:1.0: bind() failure [ 294.723642][ T5362] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 294.791034][ T5362] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 294.908111][ T5362] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 295.026573][ T5362] usb 2-1: USB disconnect, device number 10 [ 295.124425][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 295.162609][ T7599] netlink: 'syz.0.915': attribute type 7 has an invalid length. [ 295.191724][ T7599] netlink: 'syz.0.915': attribute type 8 has an invalid length. [ 295.213769][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 295.237300][ T5280] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 295.317755][ T29] audit: type=1804 audit(1725012317.673:413): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.916" name="/newroot/78/file0/bus" dev="hugetlbfs" ino=16164 res=1 errno=0 [ 295.433929][ T5280] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 295.450810][ T5280] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.485250][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.566004][ T5280] usb 4-1: Product: syz [ 295.571179][ T5280] usb 4-1: Manufacturer: syz [ 295.575837][ T5280] usb 4-1: SerialNumber: syz [ 295.617965][ T7597] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 295.918536][ T29] audit: type=1400 audit(1725012318.283:414): avc: denied { read } for pid=7608 comm="syz.2.919" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 296.032236][ T5280] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 296.042451][ T29] audit: type=1400 audit(1725012318.323:415): avc: denied { open } for pid=7608 comm="syz.2.919" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 296.185410][ T29] audit: type=1400 audit(1725012318.543:416): avc: denied { map } for pid=7613 comm="syz.4.922" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 296.205671][ T5280] usb 4-1: USB disconnect, device number 7 [ 296.846722][ T5362] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 296.998307][ T29] audit: type=1400 audit(1725012319.363:417): avc: denied { write } for pid=7628 comm="syz.4.930" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.020863][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.100406][ T5362] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 297.124618][ T5362] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.160684][ T5362] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 297.223686][ T5362] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 297.284936][ T5362] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 64 [ 297.341964][ T5362] usb 4-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.409311][ T5362] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.443385][ T5362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.490525][ T7597] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 297.799820][ T5362] usb 4-1: usb_control_msg returned -71 [ 297.805519][ T5362] usbtmc 4-1:16.0: can't read capabilities [ 297.909551][ T5362] usb 4-1: USB disconnect, device number 8 [ 298.077732][ T29] audit: type=1400 audit(1725012320.423:418): avc: denied { unmount } for pid=6269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 298.612983][ T7656] netlink: 52 bytes leftover after parsing attributes in process `syz.1.940'. [ 298.968983][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 299.716150][ T5214] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 299.751800][ T5362] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 299.800111][ T7683] netlink: 'syz.4.953': attribute type 1 has an invalid length. [ 299.810723][ T7683] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.953'. [ 299.830702][ T7683] netlink: 1 bytes leftover after parsing attributes in process `syz.4.953'. [ 299.918734][ T5214] usb 3-1: Using ep0 maxpacket: 8 [ 299.933134][ T5214] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 299.948195][ T5362] usb 4-1: Using ep0 maxpacket: 32 [ 299.956477][ T5362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.979593][ T5214] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 299.994973][ T5214] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.017433][ T5362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.027384][ T5214] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 300.047163][ T5362] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 300.067383][ T5214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.084240][ T5362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.106504][ T5362] usb 4-1: config 0 descriptor?? [ 300.126387][ T5214] usbtmc 3-1:16.0: bulk endpoints not found [ 300.217571][ T29] audit: type=1400 audit(1725012322.563:419): avc: denied { getopt } for pid=7688 comm="syz.4.956" lport=55258 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 300.275408][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 300.484368][ T46] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 300.492685][ T46] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.527897][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 300.561753][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 300.606380][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.667120][ T5362] uclogic 0003:28BD:0094.000C: interface is invalid, ignoring [ 300.667894][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.701966][ T5280] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 300.713653][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.734837][ T46] usb 1-1: config 0 descriptor?? [ 300.746479][ T7687] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 300.946252][ T5280] usb 2-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=5d.5a [ 300.982055][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.025847][ T5362] usb 4-1: USB disconnect, device number 9 [ 301.053004][ T5280] usb 2-1: Product: syz [ 301.088204][ T5280] usb 2-1: Manufacturer: syz [ 301.092950][ T5280] usb 2-1: SerialNumber: syz [ 301.126454][ T5280] usb 2-1: config 0 descriptor?? [ 301.285945][ T46] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 301.326575][ T46] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 301.395053][ T46] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 301.591953][ T7703] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 301.899848][ T5362] usb 1-1: USB disconnect, device number 8 [ 302.328479][ T5280] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 302.376033][ T5280] asix 2-1:0.0: probe with driver asix failed with error -71 [ 302.420745][ T46] usb 3-1: USB disconnect, device number 12 [ 302.437660][ T7712] [U]   [ 302.445331][ T7712] [U] [ 302.448119][ T7712] [U] [ 302.450874][ T7712] [U] [ 302.482410][ T7712] [U] [ 302.485382][ T7712] [U] [ 302.488140][ T7712] [U] [ 302.490300][ T5280] usb 2-1: USB disconnect, device number 11 [ 302.490875][ T7712] [U] [ 302.513827][ T7712] [U] [ 302.516621][ T7712] [U] [ 302.519390][ T7712] [U] [ 302.552297][ T7712] [U] [ 302.583610][ T7711] [U] [ 302.679420][ T7714] input: syz1 as /devices/virtual/input/input15 [ 303.596766][ T29] audit: type=1400 audit(1725012325.953:420): avc: denied { create } for pid=7727 comm="syz.4.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 303.726856][ T29] audit: type=1400 audit(1725012325.953:421): avc: denied { sys_admin } for pid=7727 comm="syz.4.973" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 304.303771][ T29] audit: type=1400 audit(1725012326.653:422): avc: denied { listen } for pid=7744 comm="syz.0.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.810103][ T7754] Bluetooth: MGMT ver 1.23 [ 305.240105][ T29] audit: type=1400 audit(1725012327.603:423): avc: denied { watch } for pid=7757 comm="syz.1.985" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 306.402764][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 306.698714][ T5282] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 306.908607][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 306.916686][ T5282] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.951259][ T5282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 306.985251][ T5282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.012920][ T5282] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.042062][ T5362] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 307.075923][ T5282] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.124901][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.278797][ T5362] usb 3-1: Using ep0 maxpacket: 8 [ 307.313666][ T5362] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 307.345939][ T5362] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.402739][ T5362] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.426188][ T5282] usb 2-1: GET_CAPABILITIES returned 0 [ 307.439350][ T5282] usbtmc 2-1:16.0: can't read capabilities [ 307.445392][ T5362] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.487033][ T5362] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.547614][ T5362] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.567687][ T5362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.655265][ T941] usb 2-1: USB disconnect, device number 12 [ 307.942625][ T5362] usb 3-1: usb_control_msg returned -32 [ 307.947561][ T29] audit: type=1400 audit(1725012330.293:424): avc: denied { create } for pid=7814 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.986564][ T5362] usbtmc 3-1:16.0: can't read capabilities [ 308.014742][ T29] audit: type=1400 audit(1725012330.323:425): avc: denied { ioctl } for pid=7814 comm="syz.3.1012" path="socket:[17534]" dev="sockfs" ino=17534 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 308.756493][ T29] audit: type=1400 audit(1725012331.113:426): avc: denied { ioctl } for pid=7827 comm="syz.4.1019" path="socket:[17564]" dev="sockfs" ino=17564 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 308.781157][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.618295][ T941] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 309.677899][ T5280] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 309.724814][ T46] usb 3-1: USB disconnect, device number 13 [ 309.816002][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 309.862246][ T941] usb 1-1: unable to get BOS descriptor or descriptor too short [ 309.887700][ T941] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 309.927450][ T941] usb 1-1: config 8 has no interface number 0 [ 309.967673][ T941] usb 1-1: config 8 interface 255 has no altsetting 0 [ 309.970673][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.015052][ T941] usb 1-1: string descriptor 0 read error: -22 [ 310.043400][ T941] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 310.097199][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.147852][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 310.235560][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 310.360055][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.427920][ T5280] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.484375][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.517492][ T29] audit: type=1400 audit(1725012332.863:427): avc: denied { create } for pid=7852 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 310.531716][ T5280] usb 2-1: config 0 descriptor?? [ 310.642816][ T29] audit: type=1400 audit(1725012332.993:428): avc: denied { write } for pid=7852 comm="syz.3.1030" path="socket:[17604]" dev="sockfs" ino=17604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 311.056186][ T5280] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 311.114369][ T941] catc 1-1:8.255: Couldn't detect memory size, assuming 32k [ 311.118416][ T5280] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 311.135399][ T29] audit: type=1400 audit(1725012333.493:429): avc: denied { ioctl } for pid=7858 comm="syz.3.1033" path="socket:[17615]" dev="sockfs" ino=17615 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 311.317058][ T5280] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 311.351898][ T5280] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 311.375519][ T941] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 311.425524][ T5362] kernel write not supported for file /uinput (pid: 5362 comm: kworker/0:6) [ 311.446980][ T5280] usb 2-1: USB disconnect, device number 13 [ 311.496922][ T7865] __vm_enough_memory: pid: 7865, comm: syz.4.1035, bytes: 549266558976 not enough memory for the allocation [ 311.577676][ T941] usb 1-1: USB disconnect, device number 9 [ 311.883238][ T29] audit: type=1400 audit(1725012334.233:430): avc: denied { getopt } for pid=7869 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 312.188045][ T29] audit: type=1400 audit(1725012334.533:431): avc: denied { append } for pid=7876 comm="syz.1.1040" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 313.064174][ T7892] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1048'. [ 313.553589][ T7905] loop0: detected capacity change from 0 to 16384 [ 313.677613][ T7905] loop0: detected capacity change from 16384 to 0 [ 314.147930][ T5242] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 314.339970][ T5242] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 314.444085][ T5242] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 314.481896][ T29] audit: type=1400 audit(1725012336.843:432): avc: denied { watch_reads } for pid=7925 comm="syz.1.1062" path="/228/file0" dev="tmpfs" ino=1182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 314.529885][ T5242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 314.564553][ T5242] usb 5-1: SerialNumber: syz [ 315.281162][ T5362] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 315.351878][ T5242] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 315.486516][ T7950] pim6reg9: entered allmulticast mode [ 315.494580][ T5362] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 315.524968][ T5362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.537673][ T5362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.573417][ T5362] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 315.613390][ T5362] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 315.640757][ T46] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 315.643251][ T5362] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 315.672599][ T5362] usb 4-1: Manufacturer: syz [ 315.705201][ T5362] usb 4-1: config 0 descriptor?? [ 315.755366][ T5242] usb 5-1: USB disconnect, device number 7 [ 315.787563][ T5242] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 315.852360][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.896243][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.937758][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 315.979840][ T46] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.014326][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.077645][ T46] usb 2-1: config 0 descriptor?? [ 316.175141][ T5362] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 316.194015][ T5362] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 316.236855][ T5362] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 316.397409][ T7958] netlink: 'syz.2.1077': attribute type 12 has an invalid length. [ 316.443567][ T7958] netlink: 'syz.2.1077': attribute type 11 has an invalid length. [ 316.463647][ T7958] netlink: 'syz.2.1077': attribute type 11 has an invalid length. [ 316.511361][ T5362] usb 4-1: USB disconnect, device number 10 [ 316.517152][ T7958] netlink: 'syz.2.1077': attribute type 11 has an invalid length. [ 316.557698][ T7958] netlink: 'syz.2.1077': attribute type 11 has an invalid length. [ 316.580524][ T46] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 316.613975][ T46] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 316.616965][ T7958] netlink: 'syz.2.1077': attribute type 11 has an invalid length. [ 316.670334][ T7958] netlink: 'syz.2.1077': attribute type 11 has an invalid length. [ 316.683621][ T7958] netlink: 'syz.2.1077': attribute type 4 has an invalid length. [ 316.710036][ T7958] netlink: 'syz.2.1077': attribute type 5 has an invalid length. [ 316.722061][ T7958] netlink: 195936 bytes leftover after parsing attributes in process `syz.2.1077'. [ 316.866654][ T46] usb 2-1: USB disconnect, device number 14 [ 317.440603][ T5362] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 317.642340][ T5362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.682466][ T5362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.741210][ T5362] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.792277][ T5362] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 317.846432][ T5362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.886000][ T5362] usb 3-1: config 0 descriptor?? [ 317.895914][ T7978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1086'. [ 318.387268][ T5362] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 318.421884][ T7985] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.1088'. [ 318.462664][ T5362] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 318.493696][ T5362] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 318.533239][ T5362] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 318.592941][ T5362] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 318.634543][ T5362] acrux 0003:1A34:0802.0011: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 318.682168][ T29] audit: type=1400 audit(1725012341.033:433): avc: denied { bind } for pid=7988 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 318.742817][ T5362] acrux 0003:1A34:0802.0011: no inputs found [ 318.749057][ T5362] acrux 0003:1A34:0802.0011: Failed to enable force feedback support, error: -19 [ 318.808652][ T7991] syzkaller1: entered promiscuous mode [ 318.814244][ T7991] syzkaller1: entered allmulticast mode [ 318.885335][ T5214] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 319.086293][ T5214] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 319.112684][ T5214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.140477][ T5214] usb 4-1: Product: syz [ 319.144722][ T5214] usb 4-1: Manufacturer: syz [ 319.207468][ T5214] usb 4-1: SerialNumber: syz [ 319.246365][ T5214] usb 4-1: config 0 descriptor?? [ 319.503034][ T29] audit: type=1400 audit(1725012341.863:434): avc: denied { mount } for pid=8002 comm="syz.0.1096" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 319.585354][ T29] audit: type=1400 audit(1725012341.863:435): avc: denied { read } for pid=8002 comm="syz.0.1096" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 319.585954][ T5280] usb 4-1: USB disconnect, device number 11 [ 319.718090][ T29] audit: type=1400 audit(1725012341.863:436): avc: denied { open } for pid=8002 comm="syz.0.1096" path="/248/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 319.816029][ T29] audit: type=1400 audit(1725012341.863:437): avc: denied { search } for pid=8002 comm="syz.0.1096" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 319.856482][ T29] audit: type=1400 audit(1725012341.913:438): avc: denied { remount } for pid=8002 comm="syz.0.1096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 319.965699][ T29] audit: type=1400 audit(1725012342.113:439): avc: denied { unmount } for pid=5232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 319.996366][ T8013] syz.0.1100[8013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.996614][ T8013] syz.0.1100[8013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.036925][ T29] audit: type=1400 audit(1725012342.203:440): avc: denied { getopt } for pid=8009 comm="syz.4.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 320.848358][ T5362] usb 3-1: USB disconnect, device number 14 [ 320.997647][ T8032] syz.1.1110 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 321.058419][ T941] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 321.094249][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 321.299296][ T941] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 321.328539][ T941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.343352][ T941] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.417469][ T941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 321.443275][ T941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.464043][ T941] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.521829][ T941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 321.553371][ T941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.582022][ T941] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.647634][ T941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 321.714276][ T941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.743915][ T941] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.816316][ T941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 321.856187][ T29] audit: type=1400 audit(1725012344.213:441): avc: denied { bind } for pid=8043 comm="syz.4.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 321.926233][ T941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.961413][ T941] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.034870][ T941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.076611][ T941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.114079][ T941] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.115612][ T29] audit: type=1400 audit(1725012344.473:442): avc: denied { write } for pid=8048 comm="syz.2.1118" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 322.180489][ T941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.197262][ T941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.222777][ T941] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.252556][ T941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.273279][ T941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.314800][ T941] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.354056][ T941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.397365][ T941] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 322.430984][ T941] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 322.463030][ T941] usb 4-1: Product: syz [ 322.488679][ T941] usb 4-1: Manufacturer: syz [ 322.503271][ T941] usb 4-1: SerialNumber: syz [ 322.523001][ T941] usb 4-1: config 0 descriptor?? [ 322.552287][ T941] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 322.599939][ T5280] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 322.735745][ T29] audit: type=1400 audit(1725012345.093:443): avc: denied { create } for pid=8059 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 322.794667][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.821364][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 322.826760][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.875894][ T5280] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 322.891814][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.926959][ T5280] usb 5-1: config 0 descriptor?? [ 322.947232][ T941] usb 4-1: USB disconnect, device number 12 [ 322.954025][ T5280] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 322.977276][ T941] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 324.082853][ T5280] usb 5-1: USB disconnect, device number 8 [ 324.189477][ T941] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 324.253881][ T8080] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 324.297312][ T8080] gretap1: entered promiscuous mode [ 324.316300][ T8080] gretap1: entered allmulticast mode [ 324.392109][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 324.402069][ T941] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 324.436867][ T941] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.473991][ T941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 324.493887][ T5362] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 324.529561][ T941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.557543][ T941] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.595094][ T941] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 324.615862][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.680296][ T5362] usb 4-1: Using ep0 maxpacket: 32 [ 324.705404][ T5362] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 324.752086][ T5362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.818775][ T5239] Bluetooth: hci5: command 0x0405 tx timeout [ 324.927533][ T941] usb 1-1: usb_control_msg returned -32 [ 324.963198][ T5362] usb 4-1: config 0 descriptor?? [ 325.015628][ T941] usbtmc 1-1:16.0: can't read capabilities [ 325.045797][ T5362] gspca_main: sunplus-2.14.0 probing 041e:400b [ 325.446859][ T5242] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 325.571307][ T29] audit: type=1400 audit(1725012347.933:444): avc: denied { write } for pid=8100 comm="syz.4.1141" name="mdstat" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 325.699460][ T5242] usb 3-1: config 0 has an invalid interface number: 62 but max is 0 [ 325.708553][ T5242] usb 3-1: config 0 has no interface number 0 [ 325.767462][ T5242] usb 3-1: New USB device found, idVendor=093a, idProduct=2624, bcdDevice=94.5b [ 325.779104][ T5242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.817846][ T5242] usb 3-1: Product: syz [ 325.826401][ T5242] usb 3-1: Manufacturer: syz [ 325.845228][ T5242] usb 3-1: SerialNumber: syz [ 325.857320][ T5242] usb 3-1: config 0 descriptor?? [ 325.914160][ T5242] gspca_main: gspca_pac7302-2.14.0 probing 093a:2624 [ 326.124224][ T5362] gspca_sunplus: reg_w_riv err -71 [ 326.153244][ T5362] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 326.222564][ T5362] usb 4-1: USB disconnect, device number 13 [ 326.701858][ T941] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 326.793761][ T5242] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 326.962087][ T941] usb 5-1: Using ep0 maxpacket: 16 [ 326.988270][ T5242] usb 1-1: USB disconnect, device number 10 [ 327.005388][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.065077][ T5214] usb 3-1: USB disconnect, device number 15 [ 327.101797][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.194151][ T941] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 327.256067][ T29] audit: type=1326 audit(1725012349.613:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.1.1147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb98979ef9 code=0x0 [ 327.257566][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.327464][ T941] usb 5-1: config 0 descriptor?? [ 327.333531][ T29] audit: type=1400 audit(1725012349.683:446): avc: denied { create } for pid=8111 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 327.382984][ T29] audit: type=1400 audit(1725012349.703:447): avc: denied { write } for pid=8111 comm="syz.3.1146" path="socket:[17234]" dev="sockfs" ino=17234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 327.776117][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.840770][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.941548][ T941] hid (null): unknown global tag 0xd [ 327.946977][ T941] hid (null): unknown global tag 0xd [ 327.983149][ T941] hid (null): report_id 40203 is invalid [ 328.014885][ T941] hid (null): invalid report_size -1862471209 [ 328.028667][ T941] hid (null): invalid report_size -1217885453 [ 328.035409][ T941] hid (null): unknown global tag 0x36 [ 328.214346][ T941] usb 5-1: string descriptor 0 read error: -71 [ 328.325205][ T941] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 328.334683][ T941] letsketch 0003:6161:4D15.0012: probe with driver letsketch failed with error -32 [ 328.419774][ T941] usb 5-1: USB disconnect, device number 9 [ 329.688861][ T5280] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 329.926443][ T5280] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 329.957181][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.028793][ T5280] usb 4-1: config 0 descriptor?? [ 330.524312][ T5280] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 330.938602][ T8153] netlink: 'syz.2.1163': attribute type 8 has an invalid length. [ 330.946442][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 331.221587][ T5280] usb 4-1: USB disconnect, device number 14 [ 331.851883][ T8164] input: syz1 as /devices/virtual/input/input17 [ 332.485387][ T8172] netlink: 'syz.2.1172': attribute type 3 has an invalid length. [ 332.541201][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 333.087221][ T29] audit: type=1400 audit(1725012355.443:448): avc: denied { write } for pid=8181 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 333.237222][ T5362] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 333.433229][ T5362] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.527049][ T5362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 333.606247][ T5362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 333.666298][ T5362] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.747648][ T5362] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.840376][ T5362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.867341][ T29] audit: type=1400 audit(1725012356.213:449): avc: denied { write } for pid=8194 comm="syz.2.1182" name="file0" dev="tmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 333.977343][ T5362] usb 5-1: config 0 descriptor?? [ 333.993803][ T8179] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 334.587569][ T5362] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 334.607163][ T5362] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 334.713759][ T5362] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 335.316978][ T5281] usb 5-1: USB disconnect, device number 10 [ 335.950276][ T941] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 336.157293][ T941] usb 1-1: Using ep0 maxpacket: 32 [ 336.206762][ T941] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 336.245979][ T941] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 336.357108][ T941] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 336.389820][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 336.447444][ T941] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 336.481316][ T941] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 336.541611][ T941] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 336.569219][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.614741][ T941] usb 1-1: config 0 descriptor?? [ 336.944242][ T941] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 337.075759][ T8237] atomic_op ffff88802e013198 conn xmit_atomic 0000000000000000 [ 337.083631][ T29] audit: type=1400 audit(1725012359.423:450): avc: denied { bind } for pid=8236 comm="syz.2.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 337.083727][ T29] audit: type=1400 audit(1725012359.423:451): avc: denied { write } for pid=8236 comm="syz.2.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 337.197014][ T5282] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 337.362089][ T5281] usb 1-1: USB disconnect, device number 11 [ 337.375624][ T5281] usblp0: removed [ 337.444908][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 337.504457][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 337.557708][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 337.575359][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.608479][ T5282] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.633466][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.669250][ T5282] usb 5-1: config 0 descriptor?? [ 338.146633][ T5282] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 338.177031][ T5282] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 338.315031][ T5282] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 338.558066][ T5362] usb 5-1: USB disconnect, device number 11 [ 339.824989][ T29] audit: type=1400 audit(1725012362.183:452): avc: denied { bind } for pid=8256 comm="syz.2.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 339.979916][ T29] audit: type=1400 audit(1725012362.223:453): avc: denied { name_bind } for pid=8256 comm="syz.2.1207" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 340.144917][ T29] audit: type=1400 audit(1725012362.223:454): avc: denied { node_bind } for pid=8256 comm="syz.2.1207" saddr=::1 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 340.965027][ T8268] fuse: Unknown parameter 'rootmod0000000000000000000000000000000000000000' [ 341.275707][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.309903][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.329515][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.391773][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.437233][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.460638][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.867926][ T29] audit: type=1400 audit(1725012365.203:455): avc: denied { connect } for pid=8286 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 343.185555][ T5362] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 343.252705][ T8271] chnl_net:caif_netlink_parms(): no params data found [ 343.427005][ T5362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.465978][ T5362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.552003][ T5362] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.640776][ T5237] Bluetooth: hci4: command tx timeout [ 343.649993][ T5362] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 343.674791][ T5362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.705786][ T5362] usb 5-1: config 0 descriptor?? [ 344.227471][ T5362] acrux 0003:1A34:0802.0015: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 344.282769][ T5362] acrux 0003:1A34:0802.0015: no inputs found [ 344.313517][ T5362] acrux 0003:1A34:0802.0015: Failed to enable force feedback support, error: -19 [ 344.515304][ T5281] usb 5-1: USB disconnect, device number 12 [ 344.734498][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.770705][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.803030][ T8271] bridge_slave_0: entered allmulticast mode [ 344.833467][ T8271] bridge_slave_0: entered promiscuous mode [ 344.947196][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.966516][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.003043][ T8271] bridge_slave_1: entered allmulticast mode [ 345.036052][ T8271] bridge_slave_1: entered promiscuous mode [ 345.517335][ T8271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.722125][ T5237] Bluetooth: hci4: command tx timeout [ 345.768824][ T8271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.364262][ T8271] team0: Port device team_slave_0 added [ 346.661009][ T8271] team0: Port device team_slave_1 added [ 347.196061][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.237382][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.263354][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.368311][ T8271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.442567][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.485809][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.562034][ T8342] loop2: detected capacity change from 0 to 7 [ 347.603087][ T8271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.634011][ T8342] Dev loop2: unable to read RDB block 7 [ 347.644634][ T8339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1239'. [ 347.655551][ T8342] loop2: unable to read partition table [ 347.655953][ T8342] loop2: partition table beyond EOD, truncated [ 347.655982][ T8342] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 347.786093][ T5239] Bluetooth: hci4: command tx timeout [ 348.425655][ T5237] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 348.472330][ T8271] hsr_slave_0: entered promiscuous mode [ 348.585262][ T8271] hsr_slave_1: entered promiscuous mode [ 348.647389][ T8271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.697034][ T8271] Cannot create hsr debugfs directory [ 349.252084][ T5214] kernel write not supported for file /adsp1 (pid: 5214 comm: kworker/0:3) [ 349.298315][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 349.400265][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1249'. [ 349.864908][ T5237] Bluetooth: hci4: command tx timeout [ 350.394523][ T8368] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.1253'. [ 350.563118][ T8271] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.139152][ T8271] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.303137][ T8378] netlink: 'syz.4.1257': attribute type 1 has an invalid length. [ 351.322546][ T5242] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 351.377319][ T8378] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.1257'. [ 351.442548][ T8378] netlink: 'syz.4.1257': attribute type 1 has an invalid length. [ 351.543883][ T5242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.607688][ T8271] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.635149][ T5242] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.697631][ T5242] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 351.734375][ T5242] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 351.790696][ T5242] usb 4-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 351.834952][ T5242] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.973630][ T5242] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.995455][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.026125][ T8271] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.075226][ T5242] usb 4-1: Product: syz [ 352.083552][ T5242] usb 4-1: Manufacturer: syz [ 352.114317][ T5242] usb 4-1: SerialNumber: syz [ 352.163979][ T8374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.327582][ T5242] cdc_ncm 4-1:1.0: bind() failure [ 353.344158][ T5242] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 353.504758][ T5242] cdc_ncm 4-1:1.1: bind() failure [ 353.625366][ T5242] usb 4-1: USB disconnect, device number 15 [ 354.446844][ T8271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.846757][ T8271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.191957][ T8271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.468071][ T8271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.451286][ T8456] Bluetooth: MGMT ver 1.23 [ 356.717140][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.803396][ T5362] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 356.927678][ T8271] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.995774][ T5362] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.055180][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.062526][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.094945][ T5362] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.223641][ T5362] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 357.263326][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.270630][ T7316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.305858][ T5362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 357.324231][ T5362] usb 1-1: SerialNumber: syz [ 357.746435][ T5362] usb 1-1: 0:2 : does not exist [ 357.772557][ T5362] usb 1-1: usbmixer: too many channels (61) in unit 5 [ 358.145864][ T5362] usb 1-1: USB disconnect, device number 12 [ 359.713386][ T8489] syz_tun: entered promiscuous mode [ 360.007649][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.559678][ T8271] veth0_vlan: entered promiscuous mode [ 360.616141][ T8271] veth1_vlan: entered promiscuous mode [ 361.027624][ T8271] veth0_macvtap: entered promiscuous mode [ 361.190859][ T8271] veth1_macvtap: entered promiscuous mode [ 361.414096][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.504913][ T8509] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1294'. [ 361.567916][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.633362][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.863491][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.923306][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.013112][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.095185][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.214292][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.236856][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.375149][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.485477][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.667628][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.757943][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.827590][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.936837][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.014011][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.096156][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.185666][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.204543][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.283060][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.346331][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.504864][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.766139][ T29] audit: type=1400 audit(1725012386.113:456): avc: denied { append } for pid=8530 comm="syz.0.1304" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 363.813971][ T8271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.898647][ T8271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.907442][ T8271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.017529][ T8271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.987208][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.097252][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.325142][ T2495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.354416][ T2495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.822405][ T5242] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 367.073998][ T5242] usb 4-1: Using ep0 maxpacket: 32 [ 367.095701][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.132683][ T29] audit: type=1400 audit(1725012389.483:457): avc: denied { nlmsg_write } for pid=8573 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 367.227546][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.241172][ T5242] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 367.280121][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.345702][ T5242] usb 4-1: config 0 descriptor?? [ 368.005193][ T5242] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 368.196992][ T5242] ft260 0003:0403:6030.0016: chip code: 5e81 abf2 [ 368.407080][ T5242] ft260 0003:0403:6030.0016: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 368.627360][ T5242] ft260 0003:0403:6030.0016: failed to retrieve status: -71, no wakeup [ 368.664381][ T5242] ft260 0003:0403:6030.0016: failed to retrieve status: -71 [ 368.716533][ T5242] ft260 0003:0403:6030.0016: failed to reset I2C controller: -71 [ 368.908599][ T5242] usb 4-1: USB disconnect, device number 16 [ 369.555132][ T8602] sit0: entered allmulticast mode [ 369.723483][ T8605] sit0: entered promiscuous mode [ 370.220974][ T29] audit: type=1326 audit(1725012392.583:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.3.1336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3450d79ef9 code=0x0 [ 370.243789][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.514587][ T29] audit: type=1400 audit(1725012392.753:459): avc: denied { connect } for pid=8613 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 370.623710][ T29] audit: type=1400 audit(1725012392.823:460): avc: denied { bind } for pid=8613 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 373.044628][ T8652] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 373.068172][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 374.192507][ T8663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1358'. [ 374.702631][ T5214] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 374.933428][ T5214] usb 2-1: Using ep0 maxpacket: 16 [ 374.972666][ T5214] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 375.023140][ T5214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.046115][ T5214] usb 2-1: Product: syz [ 375.124590][ T5214] usb 2-1: Manufacturer: syz [ 375.143127][ T5214] usb 2-1: SerialNumber: syz [ 375.176834][ T5214] usb 2-1: config 0 descriptor?? [ 375.257003][ T5214] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 375.901702][ T8686] syzkaller1: entered promiscuous mode [ 375.907324][ T8686] syzkaller1: entered allmulticast mode [ 376.445903][ T5214] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 376.522917][ T5214] usb 2-1: USB disconnect, device number 15 [ 376.697516][ T8690] ALSA: seq fatal error: cannot create timer (-19) [ 378.034493][ T5214] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 378.198447][ T5242] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 378.232701][ T29] audit: type=1400 audit(1725012400.583:461): avc: denied { write } for pid=8714 comm="syz.1.1379" path="socket:[20566]" dev="sockfs" ino=20566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.305364][ T5214] usb 5-1: Using ep0 maxpacket: 16 [ 378.335945][ T5214] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 378.427726][ T5242] usb 1-1: Using ep0 maxpacket: 32 [ 378.437399][ T5214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 378.454224][ T5242] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 378.454270][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.471534][ T5242] usb 1-1: config 0 descriptor?? [ 378.478566][ T5242] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 378.591695][ T5214] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 378.634148][ T5214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.683526][ T5214] usb 5-1: Product: syz [ 378.703014][ T5214] usb 5-1: Manufacturer: syz [ 378.753814][ T5214] usb 5-1: SerialNumber: syz [ 378.806462][ T8723] loop0: detected capacity change from 0 to 16384 [ 378.826107][ T5214] usb 5-1: config 0 descriptor?? [ 378.847600][ T5214] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 378.903254][ T5214] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 379.028755][ T8723] loop0: detected capacity change from 16384 to 0 [ 379.595369][ T5242] gspca_sunplus: reg_w_riv err -71 [ 379.650937][ T5242] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 379.715498][ T5242] usb 1-1: USB disconnect, device number 13 [ 379.744655][ T5214] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 379.775631][ T5214] em28xx 5-1:0.0: Config register raw data: 0x3d [ 379.807666][ T5214] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 379.836213][ T5214] em28xx 5-1:0.0: No AC97 audio processor [ 380.021879][ T5214] usb 5-1: USB disconnect, device number 13 [ 381.173154][ T8745] batadv_slave_1: entered promiscuous mode [ 381.180784][ T8742] batadv_slave_1: left promiscuous mode [ 382.196788][ T5280] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 382.412656][ T5280] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 382.454517][ T5280] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 382.526022][ T5280] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.584707][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 382.736847][ T5280] usb 4-1: SerialNumber: syz [ 382.855000][ T8758] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 383.211050][ T5280] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 383.365562][ T5280] usb 4-1: USB disconnect, device number 17 [ 384.256788][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.277489][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.125062][ T8797] veth1_macvtap: left promiscuous mode [ 386.271906][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 388.741866][ T46] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 389.063459][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 389.081630][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.207687][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.295653][ T46] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 389.455628][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.486276][ T46] usb 2-1: config 0 descriptor?? [ 390.336604][ T46] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 390.427106][ T29] audit: type=1400 audit(1725012668.789:462): avc: denied { ioctl } for pid=8867 comm="syz.2.1439" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 390.571348][ T46] ft260 0003:0403:6030.0017: chip code: 5e81 abf2 [ 390.846501][ T46] ft260 0003:0403:6030.0017: uart interface is not supported [ 392.067437][ T5282] usb 2-1: USB disconnect, device number 16 [ 392.315863][ T5242] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 392.556173][ T5242] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 392.587997][ T5242] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 392.636534][ T5242] usb 4-1: Manufacturer: syz [ 392.696253][ T5242] usb 4-1: config 0 descriptor?? [ 393.245996][ T5242] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 393.869658][ T5242] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 393.914551][ T5242] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 394.061564][ T5242] usb 4-1: USB disconnect, device number 18 [ 394.063438][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1452'. [ 394.783350][ T29] audit: type=1400 audit(1725012673.149:463): avc: denied { create } for pid=8910 comm="syz.0.1456" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 394.863091][ T29] audit: type=1400 audit(1725012673.149:464): avc: denied { setattr } for pid=8910 comm="syz.0.1456" name="bus" dev="tmpfs" ino=1664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 395.097273][ T29] audit: type=1400 audit(1725012673.459:465): avc: denied { unlink } for pid=5232 comm="syz-executor" name="bus" dev="tmpfs" ino=1664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 395.551781][ T8923] netlink: 161156 bytes leftover after parsing attributes in process `syz.0.1461'. [ 395.586688][ T8923] netlink: zone id is out of range [ 395.702434][ T8923] netlink: zone id is out of range [ 395.852982][ T8923] netlink: zone id is out of range [ 395.860093][ T8923] netlink: zone id is out of range [ 395.943617][ T8923] netlink: zone id is out of range [ 395.954129][ T8923] netlink: zone id is out of range [ 395.969325][ T8923] netlink: zone id is out of range [ 395.974489][ T8923] netlink: zone id is out of range [ 395.986001][ T8923] netlink: zone id is out of range [ 396.004949][ T8923] netlink: zone id is out of range [ 400.323247][ T7296] Bluetooth: hci6: Frame reassembly failed (-84) [ 400.349618][ T7296] Bluetooth: hci6: Frame reassembly failed (-84) [ 400.415466][ T5280] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 400.716399][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 400.814301][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 400.943573][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 401.035263][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.134408][ T5280] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.236997][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.334767][ T5280] usb 5-1: config 0 descriptor?? [ 401.825544][ T29] audit: type=1400 audit(1725012680.189:466): avc: denied { read } for pid=8993 comm="syz.3.1488" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 401.907730][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 401.954770][ T5280] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 401.961861][ T29] audit: type=1400 audit(1725012680.189:467): avc: denied { open } for pid=8993 comm="syz.3.1488" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 402.083777][ T5280] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 402.338569][ T5237] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 402.448155][ T8994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.761796][ T5242] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 402.835143][ T46] usb 5-1: USB disconnect, device number 14 [ 403.001348][ T5242] usb 3-1: Using ep0 maxpacket: 32 [ 403.044538][ T5242] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 403.065008][ T5242] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 403.112412][ T8994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.155954][ T5242] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 403.187408][ T5242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 403.284751][ T5242] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 403.411865][ T5242] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 403.537862][ T5242] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 403.572904][ T5242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.724413][ T5242] usb 3-1: config 0 descriptor?? [ 403.740847][ T9006] netlink: 'syz.0.1492': attribute type 29 has an invalid length. [ 403.772270][ T8994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.006180][ T5242] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 404.304305][ T8994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.416153][ T9012] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 404.495631][ T5214] usb 3-1: USB disconnect, device number 16 [ 404.556525][ T5214] usblp0: removed [ 404.652351][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 404.930655][ T25] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 404.983185][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.022080][ T8994] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.040068][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 405.113147][ T8994] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.173210][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 405.275544][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.286257][ T9021] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 405.303861][ T8994] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.373342][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.401120][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.502788][ T25] usb 1-1: config 0 descriptor?? [ 405.539192][ T9013] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 405.563003][ T8994] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.617517][ T9021] overlayfs: conflicting lowerdir path [ 405.975443][ T46] kernel write not supported for file /snd/seq (pid: 46 comm: kworker/1:1) [ 406.133423][ T25] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 406.228249][ T25] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 406.332434][ T25] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 406.746486][ T46] IPVS: starting estimator thread 0... [ 406.873914][ T9035] IPVS: using max 15 ests per chain, 36000 per kthread [ 406.911833][ T5214] usb 1-1: USB disconnect, device number 14 [ 407.044176][ T29] audit: type=1400 audit(1725012685.409:468): avc: denied { bind } for pid=9028 comm="syz.1.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 407.291617][ T29] audit: type=1400 audit(1725012685.659:469): avc: denied { ioctl } for pid=9038 comm="syz.2.1507" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 407.335418][ T9043] Trying to write to read-only block-device nullb0 [ 407.924729][ T29] audit: type=1400 audit(1725012686.269:470): avc: denied { read } for pid=9046 comm="syz.3.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 408.075054][ T29] audit: type=1400 audit(1725012686.349:471): avc: denied { write } for pid=9052 comm="syz.2.1512" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 408.471228][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 408.517026][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 408.744165][ T9064] netlink: 'syz.0.1516': attribute type 3 has an invalid length. [ 408.801964][ T9064] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1516'. [ 409.274108][ T29] audit: type=1400 audit(1725012687.639:472): avc: denied { ioctl } for pid=9070 comm="syz.1.1518" path="socket:[21943]" dev="sockfs" ino=21943 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 409.299895][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.611823][ T5362] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 409.847160][ T5362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 409.873771][ T5362] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.913509][ T5362] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.997650][ T5362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.006521][ T5362] usb 4-1: Product: syz [ 410.017033][ T5362] usb 4-1: Manufacturer: syz [ 410.046337][ T5362] usb 4-1: SerialNumber: syz [ 410.184405][ T9067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 410.416611][ T5362] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 410.673575][ T5362] usb 4-1: USB disconnect, device number 19 [ 410.717616][ T29] audit: type=1400 audit(1725012689.069:473): avc: denied { open } for pid=9087 comm="syz.4.1527" path="/dev/ptyqc" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 410.741162][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.886237][ T29] audit: type=1400 audit(1725012689.139:474): avc: denied { ioctl } for pid=9087 comm="syz.4.1527" path="/dev/ptyqc" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 412.042259][ T29] audit: type=1400 audit(1725012690.399:475): avc: denied { read write } for pid=9104 comm="syz.2.1535" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 412.156090][ T29] audit: type=1400 audit(1725012690.409:476): avc: denied { open } for pid=9104 comm="syz.2.1535" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 412.388405][ T9111] loop0: detected capacity change from 0 to 2 [ 412.482254][ T5242] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 412.701044][ T5242] usb 4-1: Using ep0 maxpacket: 8 [ 413.036322][ T5242] usb 4-1: unable to get BOS descriptor or descriptor too short [ 413.106021][ T5242] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 413.142103][ T5242] usb 4-1: can't read configurations, error -71 [ 413.729084][ T9125] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 416.009370][ T29] audit: type=1400 audit(1725012694.329:477): avc: denied { write } for pid=9163 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 418.030399][ T9191] loop4: detected capacity change from 0 to 2 [ 420.893483][ T5214] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 421.103345][ T5214] usb 4-1: Using ep0 maxpacket: 16 [ 421.115510][ T5214] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 421.180744][ T5214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.286962][ T5214] usb 4-1: config 0 descriptor?? [ 421.307246][ T5214] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 422.442915][ T5214] gspca_sonixj: reg_w1 err -71 [ 422.511501][ T5214] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 422.562497][ T5214] usb 4-1: USB disconnect, device number 22 [ 424.421442][ T5282] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 424.721685][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 424.914341][ T5282] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 424.965016][ T5282] usb 2-1: config 179 has no interface number 0 [ 425.002996][ T5282] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 425.077657][ T5282] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 425.135245][ T5282] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 425.288492][ T5282] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 425.394943][ T5282] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 425.494091][ T5282] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 425.567321][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.654154][ T9261] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 426.496239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 426.505714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 429.067974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 438.964125][ T29] audit: type=1400 audit(1725012717.329:478): avc: denied { create } for pid=9297 comm="syz.0.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 439.285928][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 439.322175][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 439.348109][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 439.375609][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 439.384220][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 439.407294][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 439.684798][ T5237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 439.712589][ T5237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 439.730131][ T5237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 439.786031][ T5237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 439.812857][ T5237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 439.826234][ T5237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 440.735561][ T5237] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 440.812742][ T5237] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 440.836263][ T5237] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 440.850757][ T5237] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 440.874128][ T5237] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 440.885451][ T5237] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 441.487927][ T5237] Bluetooth: hci6: command tx timeout [ 441.955712][ T5237] Bluetooth: hci7: command tx timeout [ 443.063488][ T5237] Bluetooth: hci8: command tx timeout [ 443.574212][ T5237] Bluetooth: hci6: command tx timeout [ 444.023948][ T5237] Bluetooth: hci7: command tx timeout [ 444.884717][ T9299] chnl_net:caif_netlink_parms(): no params data found [ 445.167018][ T5237] Bluetooth: hci8: command tx timeout [ 445.640337][ T5237] Bluetooth: hci6: command tx timeout [ 445.657952][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.664454][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.135078][ T5237] Bluetooth: hci7: command tx timeout [ 447.263278][ T5237] Bluetooth: hci8: command tx timeout [ 447.715902][ T5237] Bluetooth: hci6: command tx timeout [ 448.196046][ T5237] Bluetooth: hci7: command tx timeout [ 449.315159][ T5237] Bluetooth: hci8: command tx timeout [ 450.958803][ T5239] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 451.014843][ T5239] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 451.025009][ T5239] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 451.053195][ T5239] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 451.083840][ T5239] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 451.096925][ T5239] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 452.904068][ T5237] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 452.916283][ T5237] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 452.946443][ T5237] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 452.957578][ T5237] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 452.984106][ T5237] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 452.994737][ T5237] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 453.229635][ T5237] Bluetooth: hci9: command tx timeout [ 455.083867][ T5237] Bluetooth: hci10: command tx timeout [ 455.339769][ T5237] Bluetooth: hci9: command tx timeout [ 457.158014][ T5237] Bluetooth: hci10: command tx timeout [ 457.384188][ T5237] Bluetooth: hci9: command tx timeout [ 459.247843][ T5237] Bluetooth: hci10: command tx timeout [ 459.483494][ T5237] Bluetooth: hci9: command tx timeout [ 461.326113][ T5237] Bluetooth: hci10: command tx timeout [ 462.264155][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2666 jiffies s: 8709 root: 0x1/. [ 462.295546][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 462.341277][ T19] Sending NMI from CPU 1 to CPUs 0: [ 462.346818][ C0] NMI backtrace for cpu 0 [ 462.346849][ C0] CPU: 0 UID: 0 PID: 941 Comm: kworker/0:2 Not tainted 6.11.0-rc5-syzkaller-00176-g20371ba12063 #0 [ 462.346881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 462.346899][ C0] Workqueue: events xpad_presence_work [ 462.346936][ C0] RIP: 0010:write_comp_data+0x0/0x90 [ 462.346980][ C0] Code: 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 c3 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 7f 1a 78 7e 65 8b 05 80 1a [ 462.347005][ C0] RSP: 0018:ffffc90000007218 EFLAGS: 00000006 [ 462.347024][ C0] RAX: 0000000000010104 RBX: 0000000000000006 RCX: ffffffff813ce5c1 [ 462.347041][ C0] RDX: 0000000000000005 RSI: 0000000000000007 RDI: 0000000000000001 [ 462.347056][ C0] RBP: ffffffff8b49d6c0 R08: 0000000000000001 R09: 0000000000000006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 462.347073][ C0] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000005 [ 462.347089][ C0] R13: 0000000000000001 R14: 0000000000000008 R15: ffffc90000007305 [ 462.347105][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 462.347130][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.347148][ C0] CR2: 00007fffe0863c38 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 462.347165][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 462.347180][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 462.347197][ C0] Call Trace: [ 462.347204][ C0] [ 462.347214][ C0] ? show_regs+0x8c/0xa0 [ 462.347255][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 462.347311][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 462.347367][ C0] ? nmi_handle+0x1a9/0x5c0 [ 462.347393][ C0] ? __pfx_write_comp_data+0x10/0x10 [ 462.347435][ C0] ? default_do_nmi+0x6a/0x160 [ 462.347461][ C0] ? exc_nmi+0x170/0x1e0 [ 462.347484][ C0] ? end_repeat_nmi+0xf/0x53 [ 462.347514][ C0] ? unwind_next_frame+0x6c1/0x23a0 [ 462.347542][ C0] ? __pfx_write_comp_data+0x10/0x10 [ 462.347589][ C0] ? __pfx_write_comp_data+0x10/0x10 [ 462.347632][ C0] ? __pfx_write_comp_data+0x10/0x10 [ 462.347673][ C0] [ 462.347681][ C0] [ 462.347688][ C0] __sanitizer_cov_trace_switch+0x54/0x90 [ 462.347718][ C0] unwind_next_frame+0x6c1/0x23a0 [ 462.347748][ C0] ? process_one_work+0x9c5/0x1b40 [ 462.347799][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 462.347857][ C0] arch_stack_walk+0x100/0x170 [ 462.347896][ C0] ? process_one_work+0x9c5/0x1b40 [ 462.347946][ C0] ? dummy_timer+0x1750/0x38d0 [ 462.347982][ C0] stack_trace_save+0x95/0xd0 [ 462.348020][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 462.348062][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 462.348111][ C0] kasan_save_stack+0x33/0x60 [ 462.348156][ C0] ? kasan_save_stack+0x33/0x60 [ 462.348198][ C0] ? kasan_save_track+0x14/0x30 [ 462.348242][ C0] ? kasan_save_free_info+0x3b/0x60 [ 462.348280][ C0] ? poison_slab_object+0xf7/0x160 [ 462.348324][ C0] ? __kasan_slab_free+0x32/0x50 [ 462.348370][ C0] ? kfree+0x12a/0x3b0 [ 462.348409][ C0] ? dummy_timer+0x1750/0x38d0 [ 462.348443][ C0] ? __hrtimer_run_queues+0x20c/0xcc0 [ 462.348475][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 462.348508][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 462.348551][ C0] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 462.348599][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 462.348648][ C0] ? write_comp_data+0x38/0x90 [ 462.348692][ C0] ? pie_calculate_probability+0x107/0x850 [ 462.348740][ C0] ? fq_pie_timer+0x215/0x5a0 [ 462.348766][ C0] ? call_timer_fn+0x1a0/0x610 [ 462.348807][ C0] ? __run_timers+0x74b/0xaf0 [ 462.348848][ C0] ? run_timer_base+0x111/0x190 [ 462.348889][ C0] ? run_timer_softirq+0x1a/0x40 [ 462.348932][ C0] ? handle_softirqs+0x216/0x8f0 [ 462.348964][ C0] ? irq_exit_rcu+0xbb/0x120 [ 462.348994][ C0] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 462.349030][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 462.349078][ C0] ? __sanitizer_cov_trace_pc+0x41/0x70 [ 462.349124][ C0] ? unwind_next_frame+0x1182/0x23a0 [ 462.349153][ C0] ? arch_stack_walk+0x100/0x170 [ 462.349183][ C0] ? stack_trace_save+0x95/0xd0 [ 462.349218][ C0] ? save_stack+0x162/0x1f0 [ 462.349254][ C0] ? __reset_page_owner+0x8d/0x400 [ 462.349292][ C0] ? free_unref_page+0x64a/0xe40 [ 462.349338][ C0] ? __put_partials+0x14c/0x170 [ 462.349378][ C0] ? qlist_free_all+0x4e/0x140 [ 462.349419][ C0] ? kasan_quarantine_reduce+0x192/0x1e0 [ 462.349463][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 462.349507][ C0] ? kmem_cache_alloc_noprof+0x121/0x2f0 [ 462.349553][ C0] ? __kernfs_new_node+0xd3/0x890 [ 462.349595][ C0] ? kernfs_new_node+0x186/0x240 [ 462.349635][ C0] ? kernfs_create_dir_ns+0x4c/0x150 [ 462.349678][ C0] ? sysfs_create_dir_ns+0x13b/0x2b0 [ 462.349712][ C0] ? kobject_add_internal+0x2c8/0x990 [ 462.349744][ C0] ? kobject_add+0x16f/0x240 [ 462.349774][ C0] ? device_add+0x289/0x1a70 [ 462.349815][ C0] ? device_create_groups_vargs+0x1f8/0x270 [ 462.349860][ C0] ? device_create_with_groups+0xf2/0x130 [ 462.349904][ C0] ? led_classdev_register_ext+0x561/0x9e0 [ 462.349969][ C0] ? xpad_init_input+0xe3c/0x14c0 [ 462.350007][ C0] ? xpad_presence_work+0x63/0x2b0 [ 462.350044][ C0] ? process_one_work+0x9c5/0x1b40 [ 462.350103][ C0] kasan_save_track+0x14/0x30 [ 462.350149][ C0] kasan_save_free_info+0x3b/0x60 [ 462.350188][ C0] poison_slab_object+0xf7/0x160 [ 462.350247][ C0] __kasan_slab_free+0x32/0x50 [ 462.350294][ C0] kfree+0x12a/0x3b0 [ 462.350330][ C0] ? dummy_timer+0x1750/0x38d0 [ 462.350367][ C0] dummy_timer+0x1750/0x38d0 [ 462.350407][ C0] ? debug_object_deactivate+0x1f0/0x370 [ 462.350456][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 462.350509][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 462.350541][ C0] ? __pfx_lock_release+0x10/0x10 [ 462.350591][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 462.350626][ C0] ? timerqueue_del+0x83/0x150 [ 462.350665][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 462.350698][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 462.350739][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 462.350773][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 462.350824][ C0] hrtimer_interrupt+0x31b/0x800 [ 462.350870][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 462.350903][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 462.350940][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 462.350990][ C0] RIP: 0010:write_comp_data+0x38/0x90 [ 462.351038][ C0] Code: 1a 78 7e 65 8b 05 80 1a 78 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 1c 16 00 00 <85> c0 74 4f 8b 82 f8 15 00 00 83 f8 03 75 44 48 8b 82 00 16 00 00 [ 462.351068][ C0] RSP: 0018:ffffc90000007b78 EFLAGS: 00000246 [ 462.351091][ C0] RAX: 0000000000000000 RBX: ffff88807b1c2840 RCX: ffffffff89244fc7 [ 462.351111][ C0] RDX: ffff888021f51e00 RSI: 0000000000000000 RDI: 0000000000000005 [ 462.351130][ C0] RBP: ffff888024a4f300 R08: 0000000000000005 R09: 0000000000000000 [ 462.351149][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 462.351167][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 462.351194][ C0] ? pie_calculate_probability+0x107/0x850 [ 462.351248][ C0] pie_calculate_probability+0x107/0x850 [ 462.351304][ C0] fq_pie_timer+0x215/0x5a0 [ 462.351339][ C0] call_timer_fn+0x1a0/0x610 [ 462.351382][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 462.351411][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 462.351453][ C0] ? __pfx_lock_release+0x10/0x10 [ 462.351501][ C0] ? mark_held_locks+0x9f/0xe0 [ 462.351542][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 462.351578][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 462.351608][ C0] __run_timers+0x74b/0xaf0 [ 462.351658][ C0] ? __pfx___run_timers+0x10/0x10 [ 462.351702][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 462.351760][ C0] run_timer_base+0x111/0x190 [ 462.351803][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 462.351850][ C0] run_timer_softirq+0x1a/0x40 [ 462.351892][ C0] handle_softirqs+0x216/0x8f0 [ 462.351930][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 462.351967][ C0] irq_exit_rcu+0xbb/0x120 [ 462.351999][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 462.352036][ C0] [ 462.352045][ C0] [ 462.352056][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 462.352105][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x70 [ 462.352155][ C0] Code: 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 1c 16 00 00 85 c0 74 2b 8b 82 f8 15 00 00 <83> f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 00 00 48 8b 01 48 [ 462.352183][ C0] RSP: 0018:ffffc90004007048 EFLAGS: 00000246 [ 462.352205][ C0] RAX: 0000000000000000 RBX: ffffc900040070d0 RCX: ffffffff813cf026 [ 462.352225][ C0] RDX: ffff888021f51e00 RSI: ffffffff813cf082 RDI: ffffc900040070d8 [ 462.352246][ C0] RBP: ffffc90004007518 R08: 0000000000000004 R09: 0000000000000001 [ 462.352265][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90004000000 [ 462.352284][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000001 [ 462.352310][ C0] ? unwind_next_frame+0x1126/0x23a0 [ 462.352339][ C0] ? unwind_next_frame+0x1182/0x23a0 [ 462.352373][ C0] unwind_next_frame+0x1182/0x23a0 [ 462.352405][ C0] ? kmem_cache_alloc_noprof+0x121/0x2f0 [ 462.352455][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 462.352494][ C0] arch_stack_walk+0x100/0x170 [ 462.352532][ C0] ? __kernfs_new_node+0xd3/0x890 [ 462.352580][ C0] stack_trace_save+0x95/0xd0 [ 462.352618][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 462.352663][ C0] save_stack+0x162/0x1f0 [ 462.352701][ C0] ? __pfx_save_stack+0x10/0x10 [ 462.352737][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 462.352781][ C0] ? free_unref_page+0x64a/0xe40 [ 462.352825][ C0] ? __put_partials+0x14c/0x170 [ 462.352865][ C0] ? qlist_free_all+0x4e/0x140 [ 462.352905][ C0] ? kasan_quarantine_reduce+0x192/0x1e0 [ 462.352949][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 462.352994][ C0] ? kmem_cache_alloc_noprof+0x121/0x2f0 [ 462.353055][ C0] __reset_page_owner+0x8d/0x400 [ 462.353102][ C0] free_unref_page+0x64a/0xe40 [ 462.353153][ C0] __put_partials+0x14c/0x170 [ 462.353200][ C0] qlist_free_all+0x4e/0x140 [ 462.353245][ C0] kasan_quarantine_reduce+0x192/0x1e0 [ 462.353293][ C0] __kasan_slab_alloc+0x69/0x90 [ 462.353338][ C0] kmem_cache_alloc_noprof+0x121/0x2f0 [ 462.353387][ C0] ? __kernfs_new_node+0xd3/0x890 [ 462.353428][ C0] __kernfs_new_node+0xd3/0x890 [ 462.353467][ C0] ? hlock_class+0x4e/0x130 [ 462.353501][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 462.353549][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 462.353597][ C0] ? kernfs_add_one+0x182/0x520 [ 462.353644][ C0] kernfs_new_node+0x186/0x240 [ 462.353691][ C0] kernfs_create_dir_ns+0x4c/0x150 [ 462.353739][ C0] sysfs_create_dir_ns+0x13b/0x2b0 [ 462.353777][ C0] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 462.353813][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 462.353845][ C0] ? class_dir_child_ns_type+0xd/0x60 [ 462.353890][ C0] ? class_dir_child_ns_type+0xd/0x60 [ 462.353935][ C0] kobject_add_internal+0x2c8/0x990 [ 462.353973][ C0] kobject_add+0x16f/0x240 [ 462.354006][ C0] ? __pfx_kobject_add+0x10/0x10 [ 462.354044][ C0] ? kobject_put+0xab/0x5a0 [ 462.354076][ C0] ? device_add+0x250/0x1a70 [ 462.354121][ C0] device_add+0x289/0x1a70 [ 462.354168][ C0] ? __pfx_device_add+0x10/0x10 [ 462.354210][ C0] ? kfree+0x245/0x3b0 [ 462.354248][ C0] ? kstrdup+0x5c/0x70 [ 462.354300][ C0] device_create_groups_vargs+0x1f8/0x270 [ 462.354350][ C0] device_create_with_groups+0xf2/0x130 [ 462.354400][ C0] ? __pfx_device_create_with_groups+0x10/0x10 [ 462.354455][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 462.354500][ C0] ? __raw_spin_lock_init+0x3a/0x110 [ 462.354533][ C0] led_classdev_register_ext+0x561/0x9e0 [ 462.354588][ C0] ? __pfx_led_classdev_register_ext+0x10/0x10 [ 462.354640][ C0] ? __pfx_snprintf+0x10/0x10 [ 462.354682][ C0] ? __pfx_ida_alloc_range+0x10/0x10 [ 462.354743][ C0] xpad_init_input+0xe3c/0x14c0 [ 462.354786][ C0] xpad_presence_work+0x63/0x2b0 [ 462.354826][ C0] process_one_work+0x9c5/0x1b40 [ 462.354882][ C0] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 462.354933][ C0] ? __pfx_process_one_work+0x10/0x10 [ 462.354988][ C0] ? assign_work+0x1a0/0x250 [ 462.355034][ C0] worker_thread+0x6c8/0xed0 [ 462.355089][ C0] ? __kthread_parkme+0x148/0x220 [ 462.355126][ C0] ? __pfx_worker_thread+0x10/0x10 [ 462.355173][ C0] kthread+0x2c1/0x3a0 [ 462.355206][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.355241][ C0] ? __pfx_kthread+0x10/0x10 [ 462.355276][ C0] ret_from_fork+0x45/0x80 [ 462.355321][ C0] ? __pfx_kthread+0x10/0x10 [ 462.355356][ C0] ret_from_fork_asm+0x1a/0x30 [ 462.355412][ C0] [ 468.201674][ T5239] Bluetooth: hci4: command 0x0405 tx timeout