last executing test programs: 36.127265492s ago: executing program 0 (id=3026): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800014001", 0x4d}], 0x1) 35.910020856s ago: executing program 0 (id=3028): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030e000000000000000000000004000900b6000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000000000000d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 34.809387485s ago: executing program 0 (id=3039): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200582900fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) mlockall(0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff1000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\x00#\x0f\x01bK\xd1\xd8cT\xa5\xfa\xc2\x9fAZ\xb8?D\xd0\xed(\xd0\x16\'\x89\xb7\x152=\x8a\x00T\xddj\xc8\xe3\xeb\x9b\x0f\x04\xa5\x06\x00\x00\x00\x00\b\xca=\xffa\xeb\b\xb2\x90\x1a\x03;\xae\xddc\nI\xcd\xf59>\x84ZE\xac\xd3\x1f\xe7\xc5\xe5(\xed\xbb+\xfd\xe3\xb2\xf8\x9d\xf1\b\xff9\".Be\xf6\xa0\x0e\x86\xa3\'k\xea\x95\xa2\xa0\x81\vN2N\xf1\xa5\x96\x94\x91\aS\x96@\xf1\x15\x9a{\xb9O{\x01*\xe98\xea\xcd\xcd\x04Y\x03\xf5>\x93\xb8ZQ\xe6Kk\x86\x80\xe5\xb0\xfe\xd9\x8b\x1e\xd9\xcaF!oM-\xef\xd4 \xd2+C2\x11\x84I\xfd/\xc2m\x7f\"\x9e\xd4\x03\x00\x00\x00\x00\x00\x00\x00n\x00~? g\xd5\xb1\x95') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 32.927500686s ago: executing program 3 (id=3054): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x4c, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}]}]}, 0x4c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080005000101fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) 32.846307636s ago: executing program 3 (id=3055): ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1}) 32.743225832s ago: executing program 3 (id=3056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xffffff21) 32.622088943s ago: executing program 3 (id=3058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000004c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) 32.111058809s ago: executing program 3 (id=3063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) 31.659734159s ago: executing program 0 (id=3069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="4ffeffffed03000129bd700002dcdf2536497336c857a7bbdecfd859a6c27572acb79ea0dcf27af135a344a4c79e56e42b19ede8fb90fc66aeb1827a4f042771099ecfa85311ce54b708afa3cb4df144d7da6ba91eb445e36071db959d88fe16ee44d70a9899c83d41b0f6546ba145eb99d8149b4f06ad54ee860000"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4000840) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x2a, 0x3, 0x4) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'sched_switch\x00'}, {}, {0x20, '!*:.++.[{'}], 0xa, "fc0d6542f433ea9102fc807900106d8d631db06be917db236a9be8efdccb83b10aef4127d8d4739a03f8884d1c94bd913ae984c7c53a98b31a098dc395871bbf7e7ba00d26426291f5bea6a2743a8bf34d8332b72c65b41a0aaf3a30c52dc9fe990c5eb8855e9ac45af22685d472bd6c584cfb284912a450b15306e0b4591f85e2dd7cd827"}, 0xa9) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe03f}, 0x90) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x1, 0x3, 0x200, 0x63e6, r0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000000000008801000000000000feffff7f00000000d609000000000000090000000000000035010000000000000700000000000000790b0000000000000600000000000000000000000000000005000000f3ffffff"]) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000580)=@newtaction={0x18, 0x30, 0x400, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000540)='btrfs_flush_space\x00', r7}, 0x10) 30.558488411s ago: executing program 0 (id=3072): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, 0x0) 30.207265596s ago: executing program 0 (id=3074): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) syz_open_procfs(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000007000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_io_uring_setup(0x24b9, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) io_uring_enter(r4, 0x353, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, r1, 0x20, 0x8, 0x0, @prog_fd=r1}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000980)) 30.207009606s ago: executing program 3 (id=3075): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udplite(0xa, 0x2, 0x88) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) execve(&(0x7f0000000280)='./file0\x00', &(0x7f00000011c0)=[&(0x7f0000001180)='\x00'], &(0x7f0000001480)=[&(0x7f0000001200)='pedit\x00', &(0x7f0000001240)='kmem_cache_free\x00', &(0x7f0000001280)='GPL\x00', &(0x7f00000012c0)='[&)/\\@\x00', &(0x7f0000001340)='\x00', &(0x7f0000001380)='kfree\x00', &(0x7f00000013c0)='\x00', &(0x7f0000001400)='/dev/rfkill\x00', &(0x7f0000001440)='/dev/rfkill\x00']) io_setup(0x3, &(0x7f00000003c0)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a6850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 4.276840679s ago: executing program 1 (id=3220): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000240)) 4.217063071s ago: executing program 1 (id=3222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) socket(0x2a, 0x6, 0x4) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6a, 0x0, @buffer={0x0, 0x73, &(0x7f00000000c0)=""/115}, &(0x7f00000003c0)="259374c96ee3440acbeec63892a3c73244990a0000d4eb62fa952fdaa59cf06cde5bf469a134ffb2e39f0fb9ec8cf62c105d8fb5faeaf2d02ef9f4e0afabe88be431472771f7b0de96a2cb02694cf596206122d2637f3cd6356ddaa6a987ec8f0b541639145a6a494964", 0x0, 0xad, 0xb12531df61d0214, 0x0, 0x0}) syz_emit_vhci(0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1000f0000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x18, 0x16, 0x8, 0x4}, 0x48) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000280)) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0xfe, {{0xa, 0x0, 0x0, @mcast2, 0x1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) syz_init_net_socket$ax25(0x3, 0x5, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 3.710177252s ago: executing program 4 (id=3228): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xa6, 0xd6, 0xb7, 0x40, 0x6cd, 0x10c, 0xaf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb6, 0x7e, 0xbb}}]}}]}}, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 3.22057679s ago: executing program 1 (id=3236): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000023c0), 0x0, 0x50) 3.123069752s ago: executing program 1 (id=3238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000200002000000400004803c0001800b00010065787468647200002c0002800500020000000000080003400000000008000440000000100800064000"], 0x94}}, 0x0) 2.955189369s ago: executing program 1 (id=3239): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)={0x2040}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 2.265425997s ago: executing program 4 (id=3244): syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb00090504020900000000090588"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000180)) 1.847737764s ago: executing program 2 (id=3249): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000037c0), &(0x7f0000003800)=0x8) 1.783302205s ago: executing program 2 (id=3250): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) read$midi(r0, 0x0, 0x0) 1.750971447s ago: executing program 2 (id=3251): syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000019640)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x40}}, 0x0) 1.343752962s ago: executing program 2 (id=3252): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xa6, 0xd6, 0xb7, 0x40, 0x6cd, 0x10c, 0xaf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb6, 0x7e, 0xbb}}]}}]}}, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 1.147243598s ago: executing program 1 (id=3253): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_io_uring_setup(0x1c09, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)) dup2(r0, r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 826.72024ms ago: executing program 4 (id=3254): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x5450, 0x0) 737.684238ms ago: executing program 4 (id=3255): r0 = socket$igmp(0x2, 0x3, 0x2) syncfs(r0) 635.529169ms ago: executing program 4 (id=3256): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x48041) 635.352968ms ago: executing program 4 (id=3257): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8000, 0x40, 0x5, 0x80, {{0xa, 0x4, 0x0, 0x1, 0x28, 0x67, 0x0, 0xf7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @remote, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0x4b, [@dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @broadcast]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 42.443328ms ago: executing program 2 (id=3258): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 0s ago: executing program 2 (id=3259): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): : type=1400 audit(1725698984.349:1047): avc: denied { accept } for pid=12370 comm="syz.4.2317" lport=34335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 688.882263][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 688.959272][ T29] team0 (unregistering): Port device team_slave_0 removed [ 689.087028][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 689.107886][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 689.115926][ T9] usb 4-1: config 0 has no interface number 0 [ 689.140005][ T9] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 689.168535][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 689.193633][ T9] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 689.201836][ T9] usb 4-1: Product: syz [ 689.206132][ T9] usb 4-1: SerialNumber: syz [ 689.213907][ T9] usb 4-1: config 0 descriptor?? [ 689.232241][T12369] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 689.877998][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 689.971605][ T9] usb 4-1: invalid MIDI in EP 0 [ 690.264951][ T9] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 690.279676][ T9] usb 4-1: USB disconnect, device number 17 [ 690.764676][ T5238] Bluetooth: hci6: command tx timeout [ 690.895587][T12367] team0 (unregistering): Port device team_slave_0 removed [ 690.924297][T12367] team0 (unregistering): Port device team_slave_1 removed [ 691.341895][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.367908][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.375165][T12312] bridge_slave_0: entered allmulticast mode [ 691.416628][T12312] bridge_slave_0: entered promiscuous mode [ 691.435406][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.463603][T12401] syz.4.2326[12401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 691.463718][T12401] syz.4.2326[12401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 691.483010][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.502377][T12312] bridge_slave_1: entered allmulticast mode [ 691.510635][T12312] bridge_slave_1: entered promiscuous mode [ 692.879384][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.971988][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 692.983569][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.123024][T12312] team0: Port device team_slave_0 added [ 693.168805][T12312] team0: Port device team_slave_1 added [ 693.178934][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 693.208127][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.219119][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 693.229714][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 693.241100][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 693.253909][ T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 693.263137][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.271327][ T9] usb 4-1: Product: syz [ 693.275507][ T9] usb 4-1: Manufacturer: syz [ 693.448245][ T8777] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 694.065767][ T9] usb 4-1: SerialNumber: syz [ 694.101716][ T9] usb 4-1: config 0 descriptor?? [ 694.129593][T12406] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 694.147904][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.157103][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.183050][ C0] usb 4-1: NFC: Urb failure (status -71) [ 694.192827][ T9] usb 4-1: NFC: Unable to get FW version [ 694.199941][ T9] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 694.219187][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.284401][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.292330][ T8777] usb 5-1: Using ep0 maxpacket: 8 [ 694.299408][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.302271][ T8777] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 694.344809][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.349211][ T8777] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 694.409978][ T9] usb 4-1: USB disconnect, device number 18 [ 694.422747][ T8777] usb 5-1: config 179 has no interface number 0 [ 694.441716][ T8777] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 694.464906][ T8777] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 694.507350][ T8777] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 694.524363][ T8777] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 694.533761][ T8777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.545099][T12413] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 694.551344][T12312] hsr_slave_0: entered promiscuous mode [ 694.566906][T12312] hsr_slave_1: entered promiscuous mode [ 694.573142][T12312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 694.582506][T12312] Cannot create hsr debugfs directory [ 694.603065][T12237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.797994][ T9] usb 5-1: USB disconnect, device number 18 [ 694.878649][T12237] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.047545][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.054731][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.057629][T12426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 695.168375][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.175660][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.945721][T12312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 695.968948][T12312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 696.066634][T12312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 696.258159][T12312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 696.477726][T12237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.706210][T12449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2341'. [ 696.939049][T12312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.035088][T12456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.035590][T12237] veth0_vlan: entered promiscuous mode [ 697.141423][T12312] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.180673][T12237] veth1_vlan: entered promiscuous mode [ 697.219816][T10233] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.227079][T10233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.266101][T10233] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.273240][T10233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.286787][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 697.506881][ T941] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 697.570991][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 697.620853][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 697.641198][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 697.672778][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.726236][T12454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 697.745841][T12237] veth0_macvtap: entered promiscuous mode [ 697.747271][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 697.767250][ T941] usb 2-1: Using ep0 maxpacket: 8 [ 697.783950][ T941] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 697.808406][ T941] usb 2-1: config 179 has no interface number 0 [ 697.832247][ T941] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 697.843016][T12237] veth1_macvtap: entered promiscuous mode [ 697.873775][ T941] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 697.909382][ T941] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 697.938342][ T941] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 698.001813][ T941] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 698.019877][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.031301][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.046543][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.063452][T12458] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 698.073697][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.084507][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.157900][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.192716][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.203929][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.214883][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.227846][T12237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.258161][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.294487][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.316876][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.334025][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.363732][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.380481][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.391899][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.398282][ T941] usb 2-1: USB disconnect, device number 14 [ 698.403550][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.450370][T12237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.481686][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 698.619284][T12237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.630452][T12237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.657558][T12237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.671911][T12237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.820211][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.992794][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.010572][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.126118][T12312] veth0_vlan: entered promiscuous mode [ 699.382575][T12312] veth1_vlan: entered promiscuous mode [ 699.403397][T10233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.443798][T10233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.568051][T12312] veth0_macvtap: entered promiscuous mode [ 699.657995][T12312] veth1_macvtap: entered promiscuous mode [ 699.805225][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.821834][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.844795][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.897629][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.915994][ T25] usb 5-1: USB disconnect, device number 19 [ 699.936621][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.966993][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.112067][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.134191][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.148670][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.163843][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.219203][T12312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.241310][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.252081][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.333969][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.365707][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.402910][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.419771][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.433170][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.450491][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.461600][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.472171][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.485141][T12312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.619670][T12312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.723687][T12312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.746410][T12312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.755506][T12312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.061891][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 701.081837][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 701.262555][ T30] audit: type=1400 audit(1725698996.749:1048): avc: denied { read write } for pid=12505 comm="syz.2.2357" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 701.264023][T12506] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 701.336506][ T30] audit: type=1400 audit(1725698996.749:1049): avc: denied { open } for pid=12505 comm="syz.2.2357" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 701.391773][T12508] syz.1.2358[12508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 701.391888][T12508] syz.1.2358[12508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 702.339744][T12513] bridge0: port 3(syz_tun) entered blocking state [ 702.350982][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.353843][T12513] bridge0: port 3(syz_tun) entered disabled state [ 702.372214][T12513] syz_tun: entered allmulticast mode [ 702.379481][T12513] syz_tun: entered promiscuous mode [ 702.383097][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.385593][T12513] bridge0: port 3(syz_tun) entered blocking state [ 702.398783][T12513] bridge0: port 3(syz_tun) entered forwarding state [ 702.782528][T10243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.790557][T10243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.924213][ T30] audit: type=1400 audit(1725698998.409:1050): avc: denied { ioctl } for pid=12312 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=2646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 703.005613][T12527] netlink: 'syz.0.2291': attribute type 25 has an invalid length. [ 703.015424][T12527] netlink: 'syz.0.2291': attribute type 8 has an invalid length. [ 703.057843][T12527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2291'. [ 703.100189][T12527] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2291'. [ 703.776327][T12549] syz.4.2372[12549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 703.776626][T12549] syz.4.2372[12549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.846560][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 705.499589][ T25] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 705.517398][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.532069][ T25] usb 2-1: Product: syz [ 705.546806][ T25] usb 2-1: Manufacturer: syz [ 705.551554][ T25] usb 2-1: SerialNumber: syz [ 705.576096][ T25] usb 2-1: config 0 descriptor?? [ 705.591269][ T25] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 705.605812][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 705.640134][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 705.657393][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 705.665683][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 705.681315][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 705.691267][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 705.699551][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 705.807560][ T25] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 705.965073][T12552] bridge0: entered promiscuous mode [ 706.941414][ T25] usb 2-1: USB disconnect, device number 15 [ 706.952609][T12579] vivid-001: ================= START STATUS ================= [ 706.961924][T12579] vivid-001: Radio HW Seek Mode: Bounded [ 706.982913][ T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 706.996106][T12579] vivid-001: Radio Programmable HW Seek: false [ 707.265334][T12579] vivid-001: RDS Rx I/O Mode: Block I/O [ 707.276123][ T25] keyspan 2-1:0.0: device disconnected [ 707.294697][T12579] vivid-001: Generate RBDS Instead of RDS: false [ 707.312827][ T30] audit: type=1326 audit(1725699002.749:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12573 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd537cef9 code=0x7fc00000 [ 707.465935][T12579] vivid-001: RDS Reception: true [ 707.538069][T12579] vivid-001: RDS Program Type: 0 inactive [ 707.543897][T12579] vivid-001: RDS PS Name: inactive [ 707.575854][T12579] vivid-001: RDS Radio Text: inactive [ 707.603789][T12579] vivid-001: RDS Traffic Announcement: false inactive [ 707.662946][T12579] vivid-001: RDS Traffic Program: false inactive [ 707.699239][T12579] vivid-001: RDS Music: false inactive [ 707.704778][T12579] vivid-001: ================== END STATUS ================== [ 707.869450][ T30] audit: type=1400 audit(1725699003.339:1052): avc: denied { write } for pid=12582 comm="syz.2.2381" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 708.163211][T12602] syz.3.2386[12602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 708.163407][T12602] syz.3.2386[12602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 708.261548][T12608] blktrace: Concurrent blktraces are not allowed on loop3 [ 711.083356][T12629] netlink: 'syz.0.2392': attribute type 4 has an invalid length. [ 712.544276][T12659] 9pnet_fd: Insufficient options for proto=fd [ 712.946583][ T5284] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 713.129708][T12672] blktrace: Concurrent blktraces are not allowed on loop3 [ 713.226777][ T5284] usb 1-1: Using ep0 maxpacket: 8 [ 713.242826][ T5284] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 713.269915][ T5284] usb 1-1: config 179 has no interface number 0 [ 713.289147][ T5284] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 713.324909][ T5284] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 713.353630][ T5284] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 713.400130][ T5284] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 713.437788][ T5284] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 713.484237][ T5284] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 713.507507][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.417775][T12663] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 714.431616][ T5284] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 715.419066][T11433] usb 1-1: USB disconnect, device number 19 [ 716.127666][T12700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.344104][T12693] veth0_vlan: entered allmulticast mode [ 717.937441][T12734] kvm: MWAIT instruction emulated as NOP! [ 718.106560][ T30] audit: type=1400 audit(1725699013.579:1053): avc: denied { write } for pid=12725 comm="syz.3.2420" path="socket:[42026]" dev="sockfs" ino=42026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 718.486574][ T941] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 720.536823][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 720.810495][ T941] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 720.824048][ T941] usb 1-1: config 179 has no interface number 0 [ 720.834041][ T941] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 720.845665][ T941] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 720.858571][ T941] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 720.869756][ T941] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 720.880013][ T941] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 720.915899][ T941] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 721.037439][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.056406][ T30] audit: type=1400 audit(1725699016.499:1054): avc: denied { ioctl } for pid=12754 comm="syz.4.2428" path="socket:[42088]" dev="sockfs" ino=42088 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 721.115107][ T941] usb 1-1: can't set config #179, error -71 [ 721.162996][ T941] usb 1-1: USB disconnect, device number 20 [ 721.772698][T12773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.832578][T12797] IPv6: NLM_F_CREATE should be specified when creating new route [ 723.871627][T12797] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2439'. [ 723.905106][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 723.932110][T12803] 9pnet_fd: Insufficient options for proto=fd [ 726.052514][T12810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.144332][T12815] netlink: 'syz.0.2448': attribute type 25 has an invalid length. [ 726.166615][T12815] netlink: 'syz.0.2448': attribute type 8 has an invalid length. [ 726.189505][T12815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2448'. [ 726.210146][T12815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2448'. [ 727.703664][T12833] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2455'. [ 728.033010][T12845] netlink: 'syz.3.2460': attribute type 1 has an invalid length. [ 728.292325][T12850] netlink: 'syz.1.2462': attribute type 25 has an invalid length. [ 728.312173][T12848] 9pnet_fd: Insufficient options for proto=fd [ 728.324424][T12850] netlink: 'syz.1.2462': attribute type 8 has an invalid length. [ 728.777684][T12857] Bluetooth: MGMT ver 1.23 [ 731.617005][ T30] audit: type=1326 audit(1725699027.089:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12879 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7277cef9 code=0x7ffc0000 [ 731.702392][ T30] audit: type=1326 audit(1725699027.089:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12879 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7efe7277cef9 code=0x7ffc0000 [ 731.741642][ T30] audit: type=1326 audit(1725699027.089:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12879 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7277cef9 code=0x7ffc0000 [ 731.814856][ T30] audit: type=1326 audit(1725699027.089:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12879 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7efe7277cef9 code=0x7ffc0000 [ 731.896894][ T30] audit: type=1326 audit(1725699027.089:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12879 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7277cef9 code=0x7ffc0000 [ 731.929460][ T30] audit: type=1326 audit(1725699027.099:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12879 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7277cef9 code=0x7ffc0000 [ 732.266253][T12890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.634410][T12900] SELinux: security_context_str_to_sid () failed with errno=-22 [ 734.120933][T12850] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2462'. [ 734.130380][T12850] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2462'. [ 734.139605][T12883] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2472'. [ 734.154674][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 734.164924][T12896] netlink: 'syz.4.2477': attribute type 10 has an invalid length. [ 734.206737][T12896] vlan0: entered allmulticast mode [ 734.230170][T12896] veth0_vlan: entered allmulticast mode [ 734.265789][T12896] team0: Port device vlan0 added [ 734.852449][T12919] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2486'. [ 734.862777][T12919] 0·: renamed from hsr0 (while UP) [ 735.424648][T12919] 0·: entered allmulticast mode [ 735.442481][T12919] hsr_slave_0: entered allmulticast mode [ 735.643398][T12919] hsr_slave_1: entered allmulticast mode [ 735.678631][T12919] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 735.834936][T12919] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 736.119280][T12938] netlink: 'syz.4.2491': attribute type 25 has an invalid length. [ 736.135354][T12938] netlink: 'syz.4.2491': attribute type 8 has an invalid length. [ 736.429654][T12938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2491'. [ 736.452073][T12938] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2491'. [ 737.254264][T12945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.262837][T12948] netlink: 'syz.4.2495': attribute type 10 has an invalid length. [ 737.291902][T12948] veth0_vlan: left allmulticast mode [ 737.468284][T12954] vivid-001: ================= START STATUS ================= [ 737.475922][T12954] vivid-001: Radio HW Seek Mode: Bounded [ 737.512506][T12954] vivid-001: Radio Programmable HW Seek: false [ 737.518938][T12954] vivid-001: RDS Rx I/O Mode: Block I/O [ 737.531294][T12954] vivid-001: Generate RBDS Instead of RDS: false [ 737.551009][T12954] vivid-001: RDS Reception: true [ 737.583012][T12954] vivid-001: RDS Program Type: 0 inactive [ 737.595733][T12954] vivid-001: RDS PS Name: inactive [ 737.601948][T12954] vivid-001: RDS Radio Text: inactive [ 737.609404][T12954] vivid-001: RDS Traffic Announcement: false inactive [ 737.616356][T12954] vivid-001: RDS Traffic Program: false inactive [ 737.623532][T12954] vivid-001: RDS Music: false inactive [ 737.646893][T12954] vivid-001: ================== END STATUS ================== [ 737.807475][T11433] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 737.976703][T12962] IPv6: NLM_F_CREATE should be specified when creating new route [ 737.979104][T11433] usb 5-1: device descriptor read/64, error -71 [ 738.023212][T12962] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2500'. [ 738.081924][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 738.134167][ T30] audit: type=1326 audit(1725699033.619:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12949 comm="syz.0.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd537cef9 code=0x7fc00000 [ 738.276946][T11433] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 738.376565][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 738.510426][ T48] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 739.292970][T11433] usb 5-1: device descriptor read/64, error -71 [ 739.401278][ T48] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 739.419479][T11433] usb usb5-port1: attempt power cycle [ 739.426713][ T48] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 739.442445][ T48] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 739.449091][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 739.467705][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.501281][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.503515][T12968] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 739.540201][ T48] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 739.553097][ T8] usb 4-1: Product: syz [ 739.570707][ T8] usb 4-1: Manufacturer: syz [ 739.593610][ T8] usb 4-1: SerialNumber: syz [ 739.615244][ T8] usb 4-1: config 0 descriptor?? [ 739.623672][ T8] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 739.641342][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 739.676204][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 739.699576][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 739.730065][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 739.765014][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 739.780302][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 739.790622][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 739.880515][T11433] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 739.947769][ T8] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 739.987710][T11433] usb 5-1: device descriptor read/8, error -71 [ 740.729927][ T25] usb 4-1: USB disconnect, device number 19 [ 740.738862][ T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 740.752120][ T25] keyspan 4-1:0.0: device disconnected [ 740.922577][T12993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12993 comm=syz.4.2509 [ 741.118136][ T8] usb 3-1: USB disconnect, device number 19 [ 741.309898][T13006] bridge0: entered allmulticast mode [ 741.361013][T13010] vivid-003: ================= START STATUS ================= [ 741.369631][T13010] vivid-003: Radio HW Seek Mode: Bounded [ 741.375373][T13010] vivid-003: Radio Programmable HW Seek: false [ 741.382595][T13010] vivid-003: RDS Rx I/O Mode: Block I/O [ 741.395481][T13010] vivid-003: Generate RBDS Instead of RDS: false [ 741.420717][T13010] vivid-003: RDS Reception: true [ 741.425899][T13010] vivid-003: RDS Program Type: 0 inactive [ 741.433139][T13010] vivid-003: RDS PS Name: inactive [ 741.438613][T13010] vivid-003: RDS Radio Text: inactive [ 741.446091][T13010] vivid-003: RDS Traffic Announcement: false inactive [ 741.455270][T13010] vivid-003: RDS Traffic Program: false inactive [ 741.467161][T13010] vivid-003: RDS Music: false inactive [ 741.472745][T13010] vivid-003: ================== END STATUS ================== [ 741.594808][T13014] syz.3.2516[13014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 741.594918][T13014] syz.3.2516[13014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 743.146914][ T30] audit: type=1326 audit(1725699038.589:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.1.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779fd7cef9 code=0x7fc00000 [ 744.693400][T13061] syz.2.2529[13061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 744.693510][T13061] syz.2.2529[13061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 745.688751][T13067] vivid-004: ================= START STATUS ================= [ 745.720997][T13067] vivid-004: Radio HW Seek Mode: Bounded [ 745.726819][T13067] vivid-004: Radio Programmable HW Seek: false [ 745.741221][T13067] vivid-004: RDS Rx I/O Mode: Block I/O [ 745.749839][T13067] vivid-004: Generate RBDS Instead of RDS: false [ 745.756341][T13067] vivid-004: RDS Reception: true [ 745.788919][T13067] vivid-004: RDS Program Type: 0 inactive [ 745.794666][T13067] vivid-004: RDS PS Name: inactive [ 745.831656][T13067] vivid-004: RDS Radio Text: inactive [ 745.846583][T13067] vivid-004: RDS Traffic Announcement: false inactive [ 745.853444][T13067] vivid-004: RDS Traffic Program: false inactive [ 745.860977][T13067] vivid-004: RDS Music: false inactive [ 745.866616][T13067] vivid-004: ================== END STATUS ================== [ 745.952807][ T30] audit: type=1326 audit(1725699041.439:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13057 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7277cef9 code=0x7fc00000 [ 746.515753][T13096] syz.0.2543[13096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 746.515866][T13096] syz.0.2543[13096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.734240][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.752999][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.769961][T13105] netlink: 'syz.3.2545': attribute type 10 has an invalid length. [ 748.214915][T13121] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2554'. [ 748.424405][T13127] syz.4.2557[13127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 748.424599][T13127] syz.4.2557[13127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 749.583084][ T30] audit: type=1400 audit(1725699045.069:1064): avc: denied { watch_reads } for pid=13137 comm="syz.1.2560" path=2F6D656D66643A2D888C47F3BDBDE2D0401E8BF487E5490884A26D202864656C6574656429 dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 750.399692][T13143] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 750.417679][T13143] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 750.494047][T13143] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 750.546870][T13143] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 750.859543][T13155] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2567'. [ 751.360752][T13164] syz.4.2572[13164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 751.360864][T13164] syz.4.2572[13164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 752.586857][T13178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2575'. [ 752.626313][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2575'. [ 753.329308][ T941] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 753.549248][ T941] usb 4-1: Using ep0 maxpacket: 8 [ 753.561255][ T941] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 754.406614][ T941] usb 4-1: config 179 has no interface number 0 [ 754.424271][ T941] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 754.459687][ T941] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 754.497425][ T941] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 754.537469][ T941] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 754.588422][ T941] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 754.620843][ T941] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 754.631148][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.674318][T13184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 755.081501][T13201] syz.2.2584[13201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 755.081702][T13201] syz.2.2584[13201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 755.322409][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 755.322414][T11433] usb 4-1: USB disconnect, device number 20 [ 755.322618][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 757.279937][T13221] IPv6: NLM_F_CREATE should be specified when creating new route [ 757.296065][T13221] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2589'. [ 757.322154][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 761.709924][T13223] delete_channel: no stack [ 762.036818][ T48] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 764.097346][ T48] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 764.146645][ T48] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 764.158484][ T48] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 764.169625][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.203001][T13283] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 764.233017][ T48] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.679934][T13323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2622'. [ 766.083878][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 767.128590][ T8] usb 2-1: USB disconnect, device number 16 [ 767.444742][T13349] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 767.644966][T13344] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2630'. [ 767.680762][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 768.752234][T13362] nbd: must specify a device to reconfigure [ 768.758333][ T5284] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 768.950039][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.970923][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.986381][ T30] audit: type=1400 audit(1725699064.469:1065): avc: denied { unmount } for pid=12312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 768.991521][ T5284] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 769.042344][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.062293][ T5284] usb 3-1: config 0 descriptor?? [ 771.074699][ T5284] usb 3-1: language id specifier not provided by device, defaulting to English [ 771.096579][T11433] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 771.519409][T11433] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 771.535276][T11433] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 772.632865][T11433] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 772.645963][T11433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.670352][T13383] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 772.689412][T11433] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 773.554931][ T5284] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 773.603103][ T5284] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 773.616395][ T5284] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 773.668287][ T5284] usb 3-1: USB disconnect, device number 20 [ 773.706531][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 773.910086][ T8] usb 4-1: device descriptor read/64, error -71 [ 774.217283][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 774.386642][ T8] usb 4-1: device descriptor read/64, error -71 [ 774.421991][ T25] usb 1-1: USB disconnect, device number 21 [ 774.469858][T11433] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 774.522814][ T8] usb usb4-port1: attempt power cycle [ 775.378193][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 775.559976][ T8] usb 4-1: device descriptor read/8, error -71 [ 775.808585][T11433] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.828786][T13419] nbd: must specify a device to reconfigure [ 775.831061][T11433] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.847090][T11433] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 775.856163][T11433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.866853][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 775.880016][T11433] usb 5-1: config 0 descriptor?? [ 775.909222][ T8] usb 4-1: device descriptor read/8, error -71 [ 776.043799][ T8] usb usb4-port1: unable to enumerate USB device [ 776.051008][T13426] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2656'. [ 776.086363][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2656'. [ 776.086811][T13428] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2657'. [ 776.515227][T11433] usb 5-1: language id specifier not provided by device, defaulting to English [ 778.846749][ T5281] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 779.026173][T11433] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 779.094503][T11433] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 779.131662][ T5281] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 779.167910][T11433] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 779.196176][ T5281] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 779.217083][T11433] usb 5-1: USB disconnect, device number 24 [ 779.225327][ T5281] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 779.247114][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.275684][T13444] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 779.299580][ T5281] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 780.898230][T13464] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 781.302562][T13466] nbd: must specify a device to reconfigure [ 782.203156][T11433] usb 4-1: USB disconnect, device number 25 [ 785.036609][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 785.236708][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 785.264284][ T8] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 785.290315][ T8] usb 5-1: config 0 has no interface number 0 [ 785.302754][ T8] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 785.317453][T13506] netlink: 'syz.2.2682': attribute type 1 has an invalid length. [ 785.331248][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 785.347574][ T8] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 785.355891][ T8] usb 5-1: Product: syz [ 785.384855][ T8] usb 5-1: SerialNumber: syz [ 785.419744][ T8] usb 5-1: config 0 descriptor?? [ 785.455645][T13493] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 785.782197][T13493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2677'. [ 785.849815][ T8777] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 786.062583][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 786.086570][ T8777] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 786.105323][ T8] usb 5-1: invalid MIDI in EP 0 [ 786.121964][ T8777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.155504][ T8777] usb 2-1: Product: syz [ 786.175339][ T8777] usb 2-1: Manufacturer: syz [ 786.189156][ T8777] usb 2-1: SerialNumber: syz [ 786.322189][ T8777] usb 2-1: config 0 descriptor?? [ 786.447151][ T8777] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 786.474945][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 786.537066][ T8777] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 786.642234][ T8] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 786.655347][ T8777] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 786.734699][ T8777] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 786.786724][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 786.824359][ T8] usb 5-1: USB disconnect, device number 25 [ 786.862262][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 786.875988][ T8777] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 786.941023][ T8777] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 786.948885][ T9] usb 1-1: config 0 has no interface number 0 [ 786.955021][ T9] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 786.971469][ T8777] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 786.979105][T13510] ip6gretap0: entered promiscuous mode [ 786.988942][ T8777] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 786.997635][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 787.006873][ T9] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 787.016462][ T9] usb 1-1: Product: syz [ 787.021681][ T8777] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 787.030218][ T9] usb 1-1: SerialNumber: syz [ 787.090247][ T9] usb 1-1: config 0 descriptor?? [ 787.123025][T11433] usb 2-1: USB disconnect, device number 17 [ 787.163174][T11433] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 787.217490][T11433] keyspan 2-1:0.0: device disconnected [ 787.340545][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 787.442297][ T9] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 787.464955][ T9] usb 1-1: USB disconnect, device number 22 [ 787.891295][T13535] netlink: 'syz.4.2694': attribute type 1 has an invalid length. [ 787.931968][T13535] netlink: 'syz.4.2694': attribute type 2 has an invalid length. [ 787.976734][T13535] netlink: 'syz.4.2694': attribute type 1 has an invalid length. [ 788.076693][T13540] netlink: 'syz.0.2696': attribute type 1 has an invalid length. [ 788.215437][T13535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2694'. [ 788.333834][ T9854] bridge0: port 3(syz_tun) entered disabled state [ 788.425246][ T9854] syz_tun (unregistering): left allmulticast mode [ 788.437009][ T9854] syz_tun (unregistering): left promiscuous mode [ 788.468531][ T9854] bridge0: port 3(syz_tun) entered disabled state [ 788.517102][T13542] netlink: 'syz.2.2697': attribute type 25 has an invalid length. [ 788.542285][T13542] netlink: 'syz.2.2697': attribute type 8 has an invalid length. [ 788.578785][T13543] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2697'. [ 788.623943][T10231] bridge_slave_1: left allmulticast mode [ 788.636917][T10231] bridge_slave_1: left promiscuous mode [ 788.656817][T10231] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.700944][T10231] bridge_slave_0: left allmulticast mode [ 788.724350][T10231] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.319390][T10231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.339963][T10231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.362718][T10231] bond0 (unregistering): Released all slaves [ 790.403178][T13564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2704'. [ 791.382107][T11433] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 791.408427][T10231] hsr_slave_0: left promiscuous mode [ 791.420665][T10231] hsr_slave_1: left promiscuous mode [ 791.445933][T10231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.474681][T10231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.491365][T10231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.499020][T10231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.543644][T10231] veth1_macvtap: left promiscuous mode [ 791.549609][T10231] veth0_macvtap: left promiscuous mode [ 791.555572][T10231] veth1_vlan: left promiscuous mode [ 791.561133][T10231] veth0_vlan: left promiscuous mode [ 791.590092][T11433] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.618215][T11433] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.682061][T11433] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 791.817752][T11433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.874856][T11433] usb 5-1: config 0 descriptor?? [ 793.090243][T11433] usb 5-1: language id specifier not provided by device, defaulting to English [ 793.109702][T13621] input: syz0 as /devices/virtual/input/input17 [ 794.498080][T11433] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 794.530552][T11433] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 794.547513][T11433] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 794.590485][T11433] usb 5-1: USB disconnect, device number 26 [ 797.196569][ T5281] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 797.426637][ T5281] usb 5-1: Using ep0 maxpacket: 16 [ 797.470218][ T5281] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 797.531690][ T5281] usb 5-1: config 0 has no interface number 0 [ 797.552545][ T5281] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 797.582823][ T5281] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 797.606929][T10231] bridge_slave_1: left allmulticast mode [ 797.612328][ T5281] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 797.612590][T10231] bridge_slave_1: left promiscuous mode [ 797.627783][T10231] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.658585][T10231] bridge_slave_0: left allmulticast mode [ 797.671510][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 797.696550][T10231] bridge_slave_0: left promiscuous mode [ 797.704445][ T5281] usb 5-1: Product: syz [ 797.710151][T10231] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.728755][ T5281] usb 5-1: SerialNumber: syz [ 797.749037][ T5281] usb 5-1: config 0 descriptor?? [ 797.970409][ T5281] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 798.132928][ T5281] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 798.180309][ T5281] usb 5-1: USB disconnect, device number 27 [ 799.319846][T10231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.343735][T10231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.359860][T10231] bond0 (unregistering): Released all slaves [ 799.435053][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2742'. [ 799.486600][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2742'. [ 799.758805][T10231] IPVS: stopping master sync thread 8616 ... [ 801.456552][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 801.676517][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 802.012725][T10231] hsr_slave_0: left promiscuous mode [ 802.400128][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 802.408666][ T9] usb 5-1: config 0 has no interface number 0 [ 802.414932][ T9] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 802.425193][ T9] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 802.438077][T10231] hsr_slave_1: left promiscuous mode [ 802.438536][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 802.456822][ T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 802.475246][ T9] usb 5-1: Product: syz [ 802.484934][ T9] usb 5-1: SerialNumber: syz [ 802.487832][T10231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.502125][T10231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.517959][ T9] usb 5-1: config 0 descriptor?? [ 802.524251][T10231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.532431][T10231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.595375][T10231] veth1_macvtap: left promiscuous mode [ 802.603440][T10231] veth0_macvtap: left promiscuous mode [ 802.610008][T10231] veth1_vlan: left promiscuous mode [ 802.615584][T10231] veth0_vlan: left promiscuous mode [ 802.771670][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 802.926140][ T9] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 803.023272][ T9] usb 5-1: USB disconnect, device number 28 [ 803.454642][T13732] vivid-004: ================= START STATUS ================= [ 803.491080][T13732] vivid-004: Radio HW Seek Mode: Bounded [ 803.515783][T13732] vivid-004: Radio Programmable HW Seek: false [ 803.528179][T13732] vivid-004: RDS Rx I/O Mode: Block I/O [ 803.536561][T13732] vivid-004: Generate RBDS Instead of RDS: false [ 803.556040][T13732] vivid-004: RDS Reception: true [ 803.569668][T13732] vivid-004: RDS Program Type: 0 inactive [ 803.577813][T13732] vivid-004: RDS PS Name: inactive [ 803.588635][T13732] vivid-004: RDS Radio Text: inactive [ 803.595376][T13732] vivid-004: RDS Traffic Announcement: false inactive [ 803.609880][T13732] vivid-004: RDS Traffic Program: false inactive [ 803.622929][T13732] vivid-004: RDS Music: false inactive [ 803.636586][T13732] vivid-004: ================== END STATUS ================== [ 803.654326][ T5238] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 804.234434][T10231] team0 (unregistering): Port device team_slave_1 removed [ 804.346569][T10231] team0 (unregistering): Port device team_slave_0 removed [ 805.481588][ T30] audit: type=1326 audit(1725699100.959:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13749 comm="syz.3.2763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc1eb7cef9 code=0x0 [ 805.996942][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 806.206467][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.229069][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.262491][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 806.275581][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 806.294694][ T8] usb 4-1: SerialNumber: syz [ 807.056704][T11433] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 807.074847][T13773] vivid-001: ================= START STATUS ================= [ 807.152384][T13773] vivid-001: Radio HW Seek Mode: Bounded [ 807.166593][T13773] vivid-001: Radio Programmable HW Seek: false [ 807.178641][T13773] vivid-001: RDS Rx I/O Mode: Block I/O [ 807.184341][T13773] vivid-001: Generate RBDS Instead of RDS: false [ 807.194427][T13773] vivid-001: RDS Reception: true [ 807.204897][T13773] vivid-001: RDS Program Type: 0 inactive [ 807.216094][T13773] vivid-001: RDS PS Name: inactive [ 807.230335][T13773] vivid-001: RDS Radio Text: inactive [ 807.243834][T13773] vivid-001: RDS Traffic Announcement: false inactive [ 807.256386][T13773] vivid-001: RDS Traffic Program: false inactive [ 807.276475][T13773] vivid-001: RDS Music: false inactive [ 807.282024][T13773] vivid-001: ================== END STATUS ================== [ 807.304130][T11433] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 807.364011][T11433] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 807.375434][T11433] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 807.444079][T11433] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.471300][T13770] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 807.507432][T11433] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 808.751063][ T8] usb 4-1: 0:2 : does not exist [ 808.899376][ T8] usb 4-1: USB disconnect, device number 26 [ 809.162479][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.169326][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.426287][T13788] team0 (unregistering): Port device team_slave_0 removed [ 809.453014][T13788] team0 (unregistering): Port device team_slave_1 removed [ 810.075857][ T8] usb 3-1: USB disconnect, device number 21 [ 810.099158][T13812] vivid-002: ================= START STATUS ================= [ 810.302357][T13812] vivid-002: Radio HW Seek Mode: Bounded [ 810.338382][T13812] vivid-002: Radio Programmable HW Seek: false [ 811.098697][T13812] vivid-002: RDS Rx I/O Mode: Block I/O [ 811.116907][T13812] vivid-002: Generate RBDS Instead of RDS: false [ 811.123250][T13812] vivid-002: RDS Reception: true [ 811.138434][T13812] vivid-002: RDS Program Type: 0 inactive [ 811.144191][T13812] vivid-002: RDS PS Name: inactive [ 811.287656][T13812] vivid-002: RDS Radio Text: inactive [ 811.356317][T13812] vivid-002: RDS Traffic Announcement: false inactive [ 811.393131][T13812] vivid-002: RDS Traffic Program: false inactive [ 811.425240][T13812] vivid-002: RDS Music: false inactive [ 811.450315][T13812] vivid-002: ================== END STATUS ================== [ 812.633564][T13833] team0 (unregistering): Port device team_slave_0 removed [ 812.719603][T13833] team0 (unregistering): Port device team_slave_1 removed [ 812.743394][T13833] team0 (unregistering): Port device vlan0 removed [ 812.798739][T13842] 9pnet_virtio: no channels available for device syz [ 815.518326][T13867] vivid-000: ================= START STATUS ================= [ 815.527441][T13867] vivid-000: Radio HW Seek Mode: Bounded [ 815.533326][T13867] vivid-000: Radio Programmable HW Seek: false [ 815.541339][T13867] vivid-000: RDS Rx I/O Mode: Block I/O [ 815.547318][T13867] vivid-000: Generate RBDS Instead of RDS: false [ 815.553941][T13867] vivid-000: RDS Reception: true [ 815.559901][T13867] vivid-000: RDS Program Type: 0 inactive [ 815.565860][T13867] vivid-000: RDS PS Name: inactive [ 815.571273][T13867] vivid-000: RDS Radio Text: inactive [ 815.577066][T13867] vivid-000: RDS Traffic Announcement: false inactive [ 815.584509][T13867] vivid-000: RDS Traffic Program: false inactive [ 815.591177][T13867] vivid-000: RDS Music: false inactive [ 815.596974][T13867] vivid-000: ================== END STATUS ================== [ 816.815454][T13723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 816.828417][T13723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 816.838005][T13723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 816.849763][T13723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 816.859521][T13723] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 816.868588][T13723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 816.893756][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 816.905834][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 816.955607][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 816.990688][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 816.999375][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 817.016784][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 817.183131][ T1114] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.465962][ T1114] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.619674][ T1114] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.650953][T13894] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 817.810460][ T1114] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.287854][T13909] vivid-003: ================= START STATUS ================= [ 818.412021][T13911] input: syz0 as /devices/virtual/input/input18 [ 818.978006][T13909] vivid-003: Radio HW Seek Mode: Bounded [ 819.011862][T13909] vivid-003: Radio Programmable HW Seek: false [ 819.087492][ T5238] Bluetooth: hci2: command tx timeout [ 819.096615][T13909] vivid-003: RDS Rx I/O Mode: Block I/O [ 819.110478][T13909] vivid-003: Generate RBDS Instead of RDS: false [ 819.117076][T13909] vivid-003: RDS Reception: true [ 819.122032][T13909] vivid-003: RDS Program Type: 0 inactive [ 819.136616][T13909] vivid-003: RDS PS Name: inactive [ 819.141835][T13909] vivid-003: RDS Radio Text: inactive [ 819.162666][T13909] vivid-003: RDS Traffic Announcement: false inactive [ 819.171067][T13909] vivid-003: RDS Traffic Program: false inactive [ 819.177642][T13909] vivid-003: RDS Music: false inactive [ 819.196633][T13909] vivid-003: ================== END STATUS ================== [ 819.254165][T13913] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2813'. [ 819.393642][T13917] ip6gre1: entered allmulticast mode [ 819.638550][T13913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2813'. [ 819.677935][T13924] netlink: 'syz.3.2813': attribute type 10 has an invalid length. [ 819.754659][T13924] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 819.901685][ T30] audit: type=1400 audit(1725699115.389:1067): avc: denied { ioctl } for pid=13925 comm="syz.1.2817" path="socket:[47365]" dev="sockfs" ino=47365 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 819.940369][ T1114] bridge_slave_1: left allmulticast mode [ 820.017316][ T1114] bridge_slave_1: left promiscuous mode [ 820.083035][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.220515][ T1114] bridge_slave_0: left allmulticast mode [ 820.236371][ T1114] bridge_slave_0: left promiscuous mode [ 820.242312][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.639613][ T30] audit: type=1400 audit(1725699116.129:1068): avc: denied { mounton } for pid=13928 comm="syz.2.2818" path="/96/file1/file0" dev="autofs" ino=47378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 820.674187][T13933] fuse: Unknown parameter '0xffffffffffffffff' [ 820.796741][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 821.016645][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 821.047327][ T8] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 821.079764][ T8] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 821.095538][ T8] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 821.135570][ T8] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 821.165027][ T5238] Bluetooth: hci2: command tx timeout [ 821.170861][ T8] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 821.182741][ T8] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 821.198912][ T8] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 821.211530][ T8] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 821.221924][ T8] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 821.236064][ T8] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 821.246458][ T8] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 821.258391][ T8] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 821.271085][ T8] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 821.282500][ T8] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 821.295491][ T8] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 821.304555][ T8] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 821.321749][ T8] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 821.357231][ T8] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 821.437774][ T8] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 821.451163][ T8] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 821.472437][ T8] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 821.510598][ T8] usb 2-1: string descriptor 0 read error: -22 [ 821.534495][ T8] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 821.550520][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.575596][ T8] adutux 2-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 822.309519][ T8] usb 2-1: USB disconnect, device number 18 [ 822.838646][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.877963][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.896659][ T1114] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 822.914501][ T1114] bond0 (unregistering): Released all slaves [ 823.015486][T13882] chnl_net:caif_netlink_parms(): no params data found [ 823.237891][ T5238] Bluetooth: hci2: command tx timeout [ 823.285176][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 824.522240][ T1114] tipc: Disabling bearer [ 824.527757][ T1114] tipc: Left network mode [ 824.620885][T13882] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.657209][T13882] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.668485][T13964] vivid-001: ================= START STATUS ================= [ 824.684636][T13882] bridge_slave_0: entered allmulticast mode [ 824.691867][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 824.709982][T13882] bridge_slave_0: entered promiscuous mode [ 824.716518][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 824.725480][T13964] vivid-001: Radio HW Seek Mode: Bounded [ 824.733127][T13964] vivid-001: Radio Programmable HW Seek: false [ 824.735805][T13882] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.749103][T13964] [ 824.751646][T13964] vivid-001: RDS Rx I/O Mode: Block I/O [ 824.758130][T13964] vivid-001: Generate RBDS Instead of RDS: false [ 824.765183][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 824.774589][T13882] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.781703][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 824.790947][T13964] vivid-001: RDS Reception: [ 824.791241][T13882] bridge_slave_1: entered allmulticast mode [ 824.802146][T13964] true [ 824.808596][T13882] bridge_slave_1: entered promiscuous mode [ 824.814637][T13964] vivid-001: RDS Program Type: 0 inactive [ 824.829879][ T8] usb 3-1: SerialNumber: syz [ 824.856833][T13964] vivid-001: RDS PS Name: inactive [ 824.866562][T13964] vivid-001: RDS Radio Text: inactive [ 824.872141][T13964] vivid-001: RDS Traffic Announcement: false inactive [ 824.884439][T13968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2827'. [ 824.916593][T13964] vivid-001: RDS Traffic Program: false inactive [ 824.929065][T13964] vivid-001: RDS Music: false inactive [ 824.954731][T13964] vivid-001: ================== END STATUS ================== [ 825.044463][T13882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.089977][T13882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.317197][ T5238] Bluetooth: hci2: command tx timeout [ 825.709995][T13976] vlan0: entered promiscuous mode [ 826.372583][ T8] usb 3-1: 0:2 : does not exist [ 826.377665][ T8] usb 3-1: unit 5 not found! [ 826.394676][ T8] usb 3-1: USB disconnect, device number 22 [ 826.458163][ T1114] hsr_slave_0: left promiscuous mode [ 826.539248][ T1114] hsr_slave_1: left promiscuous mode [ 826.561758][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.589850][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.613392][ T30] audit: type=1400 audit(1725699122.089:1069): avc: denied { create } for pid=13977 comm="syz.3.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 826.633803][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.644838][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.763287][ T1114] veth1_macvtap: left promiscuous mode [ 826.787312][T13989] fuse: Bad value for 'fd' [ 826.788220][ T1114] veth0_macvtap: left promiscuous mode [ 826.818394][ T1114] veth1_vlan: left promiscuous mode [ 826.823696][ T1114] veth0_vlan: left promiscuous mode [ 827.206311][ T30] audit: type=1400 audit(1725699122.689:1070): avc: denied { map } for pid=13991 comm="syz.0.2834" path="socket:[46808]" dev="sockfs" ino=46808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 829.690193][T13882] team0: Port device team_slave_0 added [ 829.701046][T13882] team0: Port device team_slave_1 added [ 829.936005][T14007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2838'. [ 829.942071][T14012] vivid-000: ================= START STATUS ================= [ 829.957773][T14012] vivid-000: Radio HW Seek Mode: [ 829.965397][T13882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.983173][T14012] Bounded [ 829.986695][T13882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.025045][T14012] vivid-000: Radio Programmable HW Seek: false [ 830.026392][T13882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.073998][T14012] vivid-000: RDS Rx I/O Mode: Block I/O [ 830.087177][T13882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.112143][T14012] vivid-000: Generate RBDS Instead of RDS: false [ 830.118128][T13882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.166292][T14012] vivid-000: RDS Reception: true [ 830.179835][T14012] vivid-000: RDS Program Type: 0 inactive [ 830.189783][T13882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.206659][T14012] vivid-000: RDS PS Name: inactive [ 830.224944][T14012] vivid-000: RDS Radio Text: inactive [ 830.231722][T14012] vivid-000: RDS Traffic Announcement: false inactive [ 830.245263][T14012] vivid-000: RDS Traffic Program: false inactive [ 830.252844][T14012] vivid-000: RDS Music: false inactive [ 830.262052][T14012] vivid-000: ================== END STATUS ================== [ 830.390139][T13882] hsr_slave_0: entered promiscuous mode [ 830.409943][T13882] hsr_slave_1: entered promiscuous mode [ 830.417840][T13882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 830.436413][T13882] Cannot create hsr debugfs directory [ 831.211530][T13882] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 831.223451][T13882] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 831.243597][T13882] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 831.255338][T13882] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 831.403345][T13882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.448065][T13882] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.480732][T10231] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.487978][T10231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.519451][T10231] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.526674][T10231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.791844][T14052] vivid-002: ================= START STATUS ================= [ 831.832497][T14052] vivid-002: Radio HW Seek Mode: Bounded [ 831.839820][T14052] vivid-002: Radio Programmable HW Seek: false [ 831.852237][T14052] vivid-002: RDS Rx I/O Mode: Block I/O [ 831.864475][T14052] vivid-002: Generate RBDS Instead of RDS: false [ 831.876188][T14052] vivid-002: RDS Reception: true [ 831.882902][T14052] vivid-002: RDS Program Type: 0 inactive [ 831.895919][T14052] vivid-002: RDS PS Name: inactive [ 831.912010][T14052] vivid-002: RDS Radio Text: inactive [ 831.924267][T14052] vivid-002: RDS Traffic Announcement: false inactive [ 831.965730][T14052] vivid-002: RDS Traffic Program: false inactive [ 831.997995][T14052] vivid-002: RDS Music: false inactive [ 832.015514][T14052] vivid-002: ================== END STATUS ================== [ 832.066327][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 832.276313][T13882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.541157][T14095] vivid-000: ================= START STATUS ================= [ 834.276772][T14095] vivid-000: Radio HW Seek Mode: Bounded [ 834.282467][T14095] vivid-000: Radio Programmable HW Seek: false [ 834.320988][T14095] vivid-000: RDS Rx I/O Mode: Block I/O [ 834.330414][T14095] vivid-000: Generate RBDS Instead of RDS: false [ 834.337978][T14095] vivid-000: RDS Reception: true [ 834.343522][T14095] vivid-000: RDS Program Type: 0 inactive [ 834.354674][T14095] vivid-000: RDS PS Name: inactive [ 834.361993][T14095] vivid-000: RDS Radio Text: inactive [ 834.426394][T13882] veth0_vlan: entered promiscuous mode [ 834.435710][T14095] vivid-000: RDS Traffic Announcement: false inactive [ 834.637694][T14095] vivid-000: RDS Traffic Program: false inactive [ 834.651404][T13882] veth1_vlan: entered promiscuous mode [ 834.658512][T14095] vivid-000: RDS Music: false inactive [ 834.664007][T14095] vivid-000: ================== END STATUS ================== [ 835.394707][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 835.579919][T13882] veth0_macvtap: entered promiscuous mode [ 835.644592][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.688329][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.703163][ T8] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 835.713651][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.732090][T13882] veth1_macvtap: entered promiscuous mode [ 835.761647][ T8] usb 2-1: config 0 descriptor?? [ 835.798069][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.831510][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.841753][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.852685][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.862848][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.873609][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.936188][T13882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.958462][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.970700][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.982583][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.002112][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.039715][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.062609][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.086745][T13882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.145914][T13882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.164610][T13882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.186977][T13882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.195893][T13882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.384954][ T8] hid-led 0003:1D34:000A.0006: unbalanced collection at end of report description [ 836.397377][ T8] hid-led 0003:1D34:000A.0006: probe with driver hid-led failed with error -22 [ 836.508232][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.531806][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.705343][ T25] usb 2-1: USB disconnect, device number 19 [ 836.769041][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.778861][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.366303][T14141] vivid-002: ================= START STATUS ================= [ 837.374308][T14141] vivid-002: Radio HW Seek Mode: Bounded [ 838.148822][T14141] vivid-002: Radio Programmable HW Seek: false [ 838.206502][T14141] vivid-002: RDS Rx I/O Mode: Block I/O [ 838.217558][T14141] vivid-002: Generate RBDS Instead of RDS: false [ 838.246987][T14141] vivid-002: RDS Reception: true [ 838.252007][T14141] vivid-002: RDS Program Type: 0 inactive [ 838.310834][T14141] vivid-002: RDS PS Name: inactive [ 838.325184][T14141] vivid-002: RDS Radio Text: inactive [ 838.374743][T14141] vivid-002: RDS Traffic Announcement: false inactive [ 838.405049][T14141] vivid-002: RDS Traffic Program: false inactive [ 838.447018][T14141] vivid-002: RDS Music: false inactive [ 838.454869][T14141] vivid-002: ================== END STATUS ================== [ 838.813217][T14169] binder: 14168:14169 ioctl 4018620d 0 returned -22 [ 839.401089][T14193] vivid-002: ================= START STATUS ================= [ 839.410408][T14193] vivid-002: Radio HW Seek Mode: Bounded [ 839.416131][T14193] vivid-002: Radio Programmable HW Seek: false [ 839.422513][T14193] vivid-002: RDS Rx I/O Mode: Block I/O [ 839.428277][T14193] vivid-002: Generate RBDS Instead of RDS: false [ 839.440646][T14193] vivid-002: RDS Reception: true [ 839.445620][T14193] vivid-002: RDS Program Type: 0 inactive [ 839.453573][T14193] vivid-002: RDS PS Name: inactive [ 839.459984][T14193] vivid-002: RDS Radio Text: inactive [ 839.466030][T14193] vivid-002: RDS Traffic Announcement: false inactive [ 839.472984][T14193] vivid-002: RDS Traffic Program: false inactive [ 839.480403][T14193] vivid-002: RDS Music: false inactive [ 839.485941][T14193] vivid-002: ================== END STATUS ================== [ 839.729126][T14205] binder: 14203:14205 ioctl 4018620d 0 returned -22 [ 839.855860][T14200] netlink: zone id is out of range [ 839.859185][ T30] audit: type=1400 audit(1725699135.339:1071): avc: denied { bind } for pid=14209 comm="syz.1.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 839.874167][T14200] netlink: zone id is out of range [ 839.898768][T14200] netlink: zone id is out of range [ 839.906110][T14200] netlink: zone id is out of range [ 839.911544][T14200] netlink: zone id is out of range [ 839.916876][T14200] netlink: zone id is out of range [ 839.923050][T14200] netlink: zone id is out of range [ 839.928278][T14200] netlink: zone id is out of range [ 839.933436][T14200] netlink: zone id is out of range [ 839.938642][T14200] netlink: zone id is out of range [ 840.034812][ T30] audit: type=1400 audit(1725699135.509:1072): avc: denied { ioctl } for pid=14211 comm="syz.4.2908" path="socket:[49153]" dev="sockfs" ino=49153 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 840.076042][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 840.876790][ T8777] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 841.527924][ T8777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 841.547663][ T8777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 841.576730][ T8777] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 841.616530][ T8777] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 841.646560][ T8777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.747509][ T8777] usb 4-1: config 0 descriptor?? [ 841.754846][T14226] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 841.829616][T14242] binder: 14241:14242 ioctl 4018620d 0 returned -22 [ 842.247452][ T30] audit: type=1400 audit(1725699137.729:1073): avc: denied { create } for pid=14252 comm="syz.4.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 842.251150][T14255] netlink: 'syz.4.2923': attribute type 11 has an invalid length. [ 842.287780][T14240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.314942][T14255] netlink: 211132 bytes leftover after parsing attributes in process `syz.4.2923'. [ 842.351746][T14240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.438669][T14240] bond0 (unregistering): Released all slaves [ 842.620947][ T8777] usbhid 4-1:0.0: can't add hid device: -71 [ 842.640548][ T8777] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 842.688204][ T8777] usb 4-1: USB disconnect, device number 27 [ 844.775882][ T30] audit: type=1400 audit(1725699140.219:1074): avc: denied { getopt } for pid=14294 comm="syz.3.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 844.860015][T14300] sctp: [Deprecated]: syz.4.2936 (pid 14300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 844.860015][T14300] Use struct sctp_sack_info instead [ 844.889097][T14302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14302 comm=syz.3.2935 [ 844.961825][T14303] sp0: Synchronizing with TNC [ 845.901089][ T30] audit: type=1400 audit(1725699141.269:1075): avc: denied { getopt } for pid=14306 comm="syz.3.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 845.967772][T14301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 846.039142][T14301] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 846.796634][ T5281] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 847.726569][ T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 847.766526][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 847.782295][ T5281] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 847.806559][ T5281] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 847.816339][ T5281] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 847.845267][T14342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2951'. [ 847.847802][ T5281] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.886650][ T5281] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 847.888590][ T30] audit: type=1400 audit(1725699143.379:1076): avc: denied { ioctl } for pid=14340 comm="syz.2.2952" path="socket:[49457]" dev="sockfs" ino=49457 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 847.905895][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.000161][ T25] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 848.023904][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 848.042589][ T25] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 848.064967][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 848.085354][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.105077][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 848.123608][ T25] usb 5-1: invalid MIDI out EP 0 [ 848.182361][ T5281] usb 4-1: GET_CAPABILITIES returned 0 [ 848.206982][ T5281] usbtmc 4-1:16.0: can't read capabilities [ 848.264152][ T25] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 848.350038][ T25] usb 5-1: USB disconnect, device number 29 [ 848.411273][ T8777] usb 4-1: USB disconnect, device number 28 [ 849.516592][ T8777] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 849.574730][ T30] audit: type=1326 audit(1725699145.059:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14370 comm="syz.2.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355f97cef9 code=0x7ffc0000 [ 849.599609][ T30] audit: type=1326 audit(1725699145.059:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14370 comm="syz.2.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355f97cef9 code=0x7ffc0000 [ 849.630010][ T30] audit: type=1326 audit(1725699145.059:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14370 comm="syz.2.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f355f97b890 code=0x7ffc0000 [ 849.729215][ T30] audit: type=1326 audit(1725699145.059:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14370 comm="syz.2.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f355f97cafb code=0x7ffc0000 [ 849.760789][ T8777] usb 2-1: Using ep0 maxpacket: 8 [ 849.778946][ T8777] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 849.802817][ T8777] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 849.812936][ T30] audit: type=1326 audit(1725699145.059:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14370 comm="syz.2.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f355f97cafb code=0x7ffc0000 [ 849.842164][ T8777] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 849.862518][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 849.866754][ T8777] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.915770][ T8777] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 849.920946][ T30] audit: type=1326 audit(1725699145.059:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14370 comm="syz.2.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f355f97cafb code=0x7ffc0000 [ 849.945074][ T8777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.979146][T14374] netlink: 'syz.4.2964': attribute type 20 has an invalid length. [ 850.028531][ T30] audit: type=1326 audit(1725699145.059:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14370 comm="syz.2.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f355f97cafb code=0x7ffc0000 [ 850.105700][ T30] audit: type=1326 audit(1725699145.179:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14370 comm="syz.2.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f355f97cafb code=0x7ffc0000 [ 850.162945][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.208944][ T25] usb 3-1: config 0 has no interfaces? [ 850.254679][ T8777] usb 2-1: GET_CAPABILITIES returned 0 [ 850.274743][ T8777] usbtmc 2-1:16.0: can't read capabilities [ 850.281515][ T25] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 850.334323][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.386481][ T25] usb 3-1: Product: syz [ 850.406515][ T25] usb 3-1: Manufacturer: syz [ 850.411151][ T25] usb 3-1: SerialNumber: syz [ 850.448135][ T25] usb 3-1: config 0 descriptor?? [ 850.626897][ T25] usb 2-1: USB disconnect, device number 20 [ 850.840026][ T8777] usb 3-1: USB disconnect, device number 23 [ 850.851810][T13723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 850.864995][T13723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 850.873383][T13723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 850.894207][T13723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 850.902705][T13723] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 850.911726][T13723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 850.937981][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 850.948688][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 850.958813][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 850.967531][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 850.975463][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 850.983153][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 851.001668][T10238] bond0: (slave netdevsim0): Releasing backup interface [ 851.166617][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 851.416138][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 851.626908][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 851.746639][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 851.776664][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.841662][T14390] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 851.857665][T14390] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 851.870639][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.967933][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 851.967951][ T30] audit: type=1400 audit(1725699147.459:1122): avc: denied { append } for pid=14398 comm="syz.0.2975" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 852.067427][T14400] binder: BINDER_SET_CONTEXT_MGR already set [ 852.074074][T14400] binder: 14398:14400 ioctl 4018620d 20000040 returned -16 [ 852.132351][T14400] binder: 14398:14400 ioctl c0306201 200001c0 returned -14 [ 852.442217][ T25] usb 5-1: USB disconnect, device number 30 [ 852.844500][T10238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.863317][T10238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.873965][T10238] bond0 (unregistering): Released all slaves [ 853.000493][T13723] Bluetooth: hci1: command tx timeout [ 853.077396][T10238] tipc: Disabling bearer [ 853.083072][T10238] tipc: Left network mode [ 853.426693][ T5281] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 853.491565][T14387] chnl_net:caif_netlink_parms(): no params data found [ 853.567431][T10238] hsr_slave_0: left promiscuous mode [ 853.584962][T10238] hsr_slave_1: left promiscuous mode [ 853.595113][T10238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.613052][T10238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.689889][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 853.705931][ T5281] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 853.725402][ T5281] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 853.752753][ T5281] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 853.788449][ T5281] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.830214][ T5281] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 853.847114][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.120588][ T5281] usb 1-1: GET_CAPABILITIES returned 0 [ 854.126150][ T5281] usbtmc 1-1:16.0: can't read capabilities [ 854.261045][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 855.076790][T13723] Bluetooth: hci1: command tx timeout [ 855.094936][ T5280] usb 1-1: USB disconnect, device number 23 [ 855.463421][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 855.476825][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.484932][ T9] usb 5-1: Product: syz [ 855.489287][ T9] usb 5-1: Manufacturer: syz [ 855.494325][ T9] usb 5-1: SerialNumber: syz [ 855.614861][ T9] usb 5-1: config 0 descriptor?? [ 856.295549][T14439] binder: BINDER_SET_CONTEXT_MGR already set [ 856.305033][T14439] binder: 14437:14439 ioctl 4018620d 20000040 returned -16 [ 856.331951][ T9] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 856.345674][ T9] usb 5-1: Firmware version (0.0) predates our first public release. [ 856.374006][ T9] usb 5-1: Please update to version 0.2 or newer [ 857.156856][T13723] Bluetooth: hci1: command tx timeout [ 857.757255][ T5281] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 857.904189][ T9] usb 5-1: USB disconnect, device number 31 [ 857.947546][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 857.968894][ T5281] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 857.986487][ T5281] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 857.997000][ T5281] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 858.009611][ T5281] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.023046][ T5281] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 858.035277][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.264101][ T5281] usb 3-1: GET_CAPABILITIES returned 0 [ 858.270162][ T5281] usbtmc 3-1:16.0: can't read capabilities [ 858.303716][T14387] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.326571][ T5284] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 858.353150][T14387] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.367912][T14387] bridge_slave_0: entered allmulticast mode [ 858.386781][T14387] bridge_slave_0: entered promiscuous mode [ 858.402330][T14387] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.416678][T14387] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.427741][T14387] bridge_slave_1: entered allmulticast mode [ 858.447958][T14387] bridge_slave_1: entered promiscuous mode [ 858.552115][ T5284] usb 1-1: New USB device found, idVendor=0b05, idProduct=171f, bcdDevice=9d.6b [ 858.569357][T14387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.577593][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.587372][ T5284] usb 1-1: Product: syz [ 858.591606][ T5284] usb 1-1: Manufacturer: syz [ 858.596224][ T5284] usb 1-1: SerialNumber: syz [ 858.601961][ T9] usb 3-1: USB disconnect, device number 24 [ 858.612124][T14387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.637750][ T5284] usb 1-1: config 0 descriptor?? [ 858.740440][T14387] team0: Port device team_slave_0 added [ 858.769021][T14387] team0: Port device team_slave_1 added [ 858.822658][ T30] audit: type=1400 audit(1725699154.309:1123): avc: denied { bind } for pid=14464 comm="syz.4.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 858.909108][T14387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.923755][ T5284] dvb-usb: found a 'ASUS My Cinema U3000 Mini DVBT Tuner' in cold state, will try to load a firmware [ 858.934220][T14387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.981774][T14387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.016136][T14387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.028919][T14387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.065750][T14387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.089682][ T5284] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 859.116536][ T5284] dib0700: firmware download failed at 7 with -22 [ 859.218026][T14387] hsr_slave_0: entered promiscuous mode [ 859.244579][T13723] Bluetooth: hci1: command tx timeout [ 859.265237][T14387] hsr_slave_1: entered promiscuous mode [ 859.287791][T14387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 859.315796][T14387] Cannot create hsr debugfs directory [ 859.380772][ T5284] usb 1-1: USB disconnect, device number 24 [ 860.271003][T14474] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2998'. [ 860.323360][T14474] net_ratelimit: 8 callbacks suppressed [ 860.323380][T14474] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 862.213336][T14387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 862.253409][T14387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 862.295281][T14387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 862.319017][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3011'. [ 862.326022][T14387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 862.411156][T14511] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3012'. [ 862.431214][T14511] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 862.671556][T14387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.766210][T14387] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.795703][T10243] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.802859][T10243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.873511][T10243] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.880641][T10243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.460735][T14534] loop2: detected capacity change from 0 to 7 [ 863.480769][T14534] Dev loop2: unable to read RDB block 7 [ 863.494973][T14534] loop2: unable to read partition table [ 863.502888][T14534] loop2: partition table beyond EOD, truncated [ 863.516395][T14534] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 863.617000][ T30] audit: type=1400 audit(1725699159.089:1124): avc: denied { write } for pid=14516 comm="syz.2.3015" name="usbmon0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 863.672330][ T30] audit: type=1400 audit(1725699159.089:1125): avc: denied { ioctl } for pid=14516 comm="syz.2.3015" path="/dev/usbmon0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 863.715502][T14387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.891064][T14387] veth0_vlan: entered promiscuous mode [ 864.093602][T14387] veth1_vlan: entered promiscuous mode [ 864.151677][ T5284] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 864.298819][T14387] veth0_macvtap: entered promiscuous mode [ 864.328797][T14387] veth1_macvtap: entered promiscuous mode [ 864.356726][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 864.374655][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.392765][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.396508][ T5284] usb 3-1: Using ep0 maxpacket: 32 [ 864.403112][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.430253][ T5284] usb 3-1: config 1 interface 0 has no altsetting 0 [ 864.436476][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.449659][ T5284] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 864.458959][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.466526][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.486501][ T5284] usb 3-1: Product: syz [ 864.489131][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.490675][ T5284] usb 3-1: Manufacturer: syz [ 864.490698][ T5284] usb 3-1: SerialNumber: syz [ 864.520010][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.537129][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.554144][T14387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.575779][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.589772][ T8] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 864.594952][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.616507][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.616569][ T8] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 864.632485][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.641927][ T8] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 864.646006][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.663199][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.683539][ T8] usb 2-1: Product: syz [ 864.687862][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.687885][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.687905][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.734758][ T8] usb 2-1: Manufacturer: syz [ 864.744484][T14387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.755345][ T8] usb 2-1: SerialNumber: syz [ 864.761436][ T5284] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input19 [ 864.782333][T14387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.804115][T14387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.823427][T14387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.828790][ T5284] usb 3-1: USB disconnect, device number 25 [ 864.836468][T14387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.952582][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3023'. [ 864.966228][ T30] audit: type=1400 audit(1725699160.439:1126): avc: denied { read write } for pid=12312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=2646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 865.068247][ T30] audit: type=1400 audit(1725699160.439:1127): avc: denied { open } for pid=12312 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=2646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 865.181905][T14547] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3024'. [ 865.191729][ T30] audit: type=1400 audit(1725699160.439:1128): avc: denied { ioctl } for pid=12312 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=2646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 865.216625][T14547] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 865.280124][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.312335][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.335428][ T30] audit: type=1400 audit(1725699160.819:1129): avc: denied { map } for pid=14538 comm="syz.1.3020" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 865.394660][ T30] audit: type=1400 audit(1725699160.819:1130): avc: denied { execute } for pid=14538 comm="syz.1.3020" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 865.439526][T10231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.448388][T10231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.489096][ T30] audit: type=1400 audit(1725699160.969:1131): avc: denied { create } for pid=14553 comm="syz.0.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 865.512140][ T5284] usb 2-1: USB disconnect, device number 21 [ 865.549622][ T30] audit: type=1400 audit(1725699161.009:1132): avc: denied { write } for pid=14553 comm="syz.0.3026" path="socket:[50074]" dev="sockfs" ino=50074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 866.299760][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3034'. [ 866.323459][T14582] overlayfs: missing 'workdir' [ 866.570695][ T30] audit: type=1400 audit(1725699162.059:1133): avc: denied { ioctl } for pid=14584 comm="syz.1.3036" path="socket:[50793]" dev="sockfs" ino=50793 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 866.954351][T14597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3041'. [ 867.265320][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3046'. [ 867.388411][ T30] audit: type=1326 audit(1725699162.869:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.3.3047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07a417cef9 code=0x0 [ 868.599404][T14635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3054'. [ 869.846556][ T48] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 870.103457][ T30] audit: type=1400 audit(1725699165.579:1135): avc: denied { lock } for pid=14669 comm="syz.0.3069" path="socket:[51027]" dev="sockfs" ino=51027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 870.203130][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.850187][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.856822][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.874825][ T48] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 870.884505][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.932786][ T48] usb 3-1: config 0 descriptor?? [ 871.394971][ T48] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 871.414473][ T48] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input21 [ 871.592540][ T48] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 872.050911][ T30] audit: type=1326 audit(1725699167.539:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355f97cef9 code=0x7ffc0000 [ 872.142504][ T30] audit: type=1326 audit(1725699167.569:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355f97cef9 code=0x7ffc0000 [ 872.242117][T14691] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 872.272485][ T30] audit: type=1326 audit(1725699167.569:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f355f97cef9 code=0x7ffc0000 [ 872.303996][T14691] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 872.316687][ T30] audit: type=1326 audit(1725699167.579:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355f97cef9 code=0x7ffc0000 [ 872.351899][ T30] audit: type=1326 audit(1725699167.579:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355f97cef9 code=0x7ffc0000 [ 872.379938][ T30] audit: type=1326 audit(1725699167.579:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f355f97cef9 code=0x7ffc0000 [ 872.408019][ T48] usb 3-1: USB disconnect, device number 26 [ 872.418031][ T30] audit: type=1326 audit(1725699167.579:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355f97cef9 code=0x7ffc0000 [ 872.465991][ T30] audit: type=1326 audit(1725699167.579:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f355f97cef9 code=0x7ffc0000 [ 872.506204][ T30] audit: type=1326 audit(1725699167.619:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14708 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f355f9aefe5 code=0x7ffc0000 [ 872.556752][ T5280] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 872.741767][ T5280] usb 5-1: unable to get BOS descriptor or descriptor too short [ 872.759164][ T5280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.785457][ T5280] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 872.799801][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.826097][ T5280] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 872.839180][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.857113][ T5280] usb 5-1: Product: syz [ 872.861558][ T5280] usb 5-1: Manufacturer: syz [ 872.866183][ T5280] usb 5-1: SerialNumber: syz [ 872.877783][ T5280] usb 5-1: config 0 descriptor?? [ 872.884114][T14712] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 872.894852][ T5280] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 873.122784][ T8] usb 5-1: USB disconnect, device number 32 [ 880.528369][ T5281] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 880.738541][ T5281] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 880.760051][ T5281] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 880.790776][ T5281] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 880.806523][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.830070][T14837] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 880.855718][ T5281] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 881.107573][ T5280] usb 3-1: USB disconnect, device number 27 [ 883.397836][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3149'. [ 883.498075][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3149'. [ 884.966953][T14908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3161'. [ 885.059644][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3161'. [ 887.796804][ T5284] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 888.196915][ T5284] usb 2-1: Using ep0 maxpacket: 8 [ 888.209943][ T5284] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 888.219233][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.251711][ T5284] usb 2-1: config 0 descriptor?? [ 888.480130][ T5284] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 888.505898][ T5284] asix 2-1:0.0: probe with driver asix failed with error -32 [ 888.546596][ T5284] usb 2-1: USB disconnect, device number 22 [ 890.011998][T14967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14967 comm=syz.1.3182 [ 890.366572][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 890.555128][ T8] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 890.569879][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.693689][ T8] usb 2-1: Product: syz [ 890.702390][ T8] usb 2-1: Manufacturer: syz [ 890.707583][ T8] usb 2-1: SerialNumber: syz [ 890.723716][ T8] usb 2-1: config 0 descriptor?? [ 890.732100][ T8] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 890.740160][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 890.749572][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 890.758062][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 890.765905][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 890.773752][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 890.781743][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 890.793153][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 890.827374][ T8] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 890.969558][ T5280] usb 2-1: USB disconnect, device number 23 [ 891.729774][ T5280] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 891.745373][ T5280] keyspan 2-1:0.0: device disconnected [ 895.657394][T11433] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 895.861426][T11433] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 895.886507][T11433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.894738][T11433] usb 2-1: Product: syz [ 895.900334][T11433] usb 2-1: Manufacturer: syz [ 895.904973][T11433] usb 2-1: SerialNumber: syz [ 895.920515][T11433] usb 2-1: config 0 descriptor?? [ 895.929238][T11433] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 895.938497][T11433] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 895.947768][T11433] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 895.956817][T11433] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 895.964940][T11433] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 895.973384][T11433] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 895.981565][T11433] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 895.990115][T11433] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 896.026853][T11433] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 896.680403][ T9] usb 2-1: USB disconnect, device number 24 [ 896.698731][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 896.711476][ T9] keyspan 2-1:0.0: device disconnected [ 896.944532][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 896.944550][ T30] audit: type=1400 audit(1725699192.429:1153): avc: denied { getopt } for pid=15061 comm="syz.2.3214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 897.084529][ T30] audit: type=1400 audit(1725699192.569:1154): avc: denied { setattr } for pid=15068 comm="syz.2.3217" name="tun" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 897.849153][T15100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3229'. [ 898.076929][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 898.287280][ T8] usb 5-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 898.296370][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.326725][ T8] usb 5-1: Product: syz [ 898.330931][ T8] usb 5-1: Manufacturer: syz [ 898.335545][ T8] usb 5-1: SerialNumber: syz [ 898.365997][ T8] usb 5-1: config 0 descriptor?? [ 898.383734][ T8] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 898.400389][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 898.414863][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 898.422941][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 898.436683][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 898.444383][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 898.452665][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 898.459554][T15119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3238'. [ 898.463030][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 898.481561][ T8] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 898.640665][T11433] usb 5-1: USB disconnect, device number 33 [ 898.655137][T11433] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 898.678259][T11433] keyspan 5-1:0.0: device disconnected [ 899.488810][T15145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3247'. [ 899.526592][ T8] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 899.729421][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 899.739028][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.756522][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 899.773276][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 899.792744][ T8] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 899.803622][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.822889][ T8] usb 5-1: Product: syz [ 899.836570][ T8] usb 5-1: Manufacturer: syz [ 899.846596][ T8] usb 5-1: SerialNumber: syz [ 899.863060][ T8] usb 5-1: config 0 descriptor?? [ 899.877441][T15138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 899.886597][ T8] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 900.113367][ T8] usb 5-1: USB disconnect, device number 34 [ 900.456534][ T5284] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 900.651107][ T5284] usb 3-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 900.660423][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.668514][ T5284] usb 3-1: Product: syz [ 900.672694][ T5284] usb 3-1: Manufacturer: syz [ 900.678035][ T5284] usb 3-1: SerialNumber: syz [ 900.685975][ T5284] usb 3-1: config 0 descriptor?? [ 900.698438][ T5284] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 900.706208][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 900.715587][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 900.723480][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 900.731390][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 900.739149][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 900.746964][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 900.754792][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 900.764512][ T5284] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 900.920132][ T5280] usb 3-1: USB disconnect, device number 28 [ 900.929569][ T5280] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 900.939851][ T5280] keyspan 3-1:0.0: device disconnected [ 932.051075][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.057528][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.480694][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.487161][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 1015.876634][ T31] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 1015.884225][ T31] Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 1015.891935][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1015.900663][ T31] task:kworker/1:0 state:D stack:21360 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 1015.910874][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1015.917629][ T31] Call Trace: [ 1015.920912][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1015.923835][ T31] __schedule+0xe37/0x5490 [ 1015.928417][ T31] ? __pfx_mark_lock+0x10/0x10 [ 1015.933232][ T31] ? __pfx___schedule+0x10/0x10 [ 1015.940578][ T31] ? schedule+0x298/0x350 [ 1015.944958][ T31] ? __pfx_lock_release+0x10/0x10 [ 1015.950058][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1015.955292][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1015.960618][ T31] schedule+0xe7/0x350 [ 1015.964813][ T31] schedule_preempt_disabled+0x13/0x30 [ 1015.986517][ T31] __mutex_lock+0x5b8/0x9c0 [ 1015.991074][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 1016.029626][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1016.034733][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 1016.041268][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 1016.048485][ T31] process_one_work+0x9c5/0x1b40 [ 1016.053467][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 1016.058530][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1016.063930][ T31] ? assign_work+0x1a0/0x250 [ 1016.068555][ T31] worker_thread+0x6c8/0xed0 [ 1016.073237][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1016.078389][ T31] kthread+0x2c1/0x3a0 [ 1016.082486][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1016.087718][ T31] ? __pfx_kthread+0x10/0x10 [ 1016.092313][ T31] ret_from_fork+0x45/0x80 [ 1016.097249][ T31] ? __pfx_kthread+0x10/0x10 [ 1016.101868][ T31] ret_from_fork_asm+0x1a/0x30 [ 1016.106719][ T31] [ 1016.109850][ T31] INFO: task syz.0.3074:14681 blocked for more than 143 seconds. [ 1016.117846][ T31] Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 1016.125488][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1016.134185][ T31] task:syz.0.3074 state:D stack:26480 pid:14681 tgid:14681 ppid:12312 flags:0x00004004 [ 1016.144512][ T31] Call Trace: [ 1016.147832][ T31] [ 1016.150783][ T31] __schedule+0xe37/0x5490 [ 1016.155215][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 1016.160483][ T31] ? __pfx___schedule+0x10/0x10 [ 1016.165330][ T31] ? schedule+0x298/0x350 [ 1016.169692][ T31] ? __pfx_lock_release+0x10/0x10 [ 1016.174742][ T31] ? __mutex_lock+0x5b3/0x9c0 [ 1016.179437][ T31] ? __mutex_trylock_common+0x78/0x250 [ 1016.184898][ T31] schedule+0xe7/0x350 [ 1016.189006][ T31] schedule_preempt_disabled+0x13/0x30 [ 1016.194502][ T31] __mutex_lock+0x5b8/0x9c0 [ 1016.199703][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1016.204945][ T31] ? rfkill_unregister+0xde/0x2c0 [ 1016.210024][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1016.215068][ T31] ? device_del+0x6b6/0x9f0 [ 1016.219620][ T31] ? __pfx_device_del+0x10/0x10 [ 1016.224467][ T31] ? rfkill_unregister+0xde/0x2c0 [ 1016.229543][ T31] rfkill_unregister+0xde/0x2c0 [ 1016.234415][ T31] nfc_unregister_device+0x94/0x330 [ 1016.239651][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1016.245363][ T31] virtual_ncidev_close+0x51/0xb0 [ 1016.250439][ T31] __fput+0x408/0xbb0 [ 1016.254445][ T31] task_work_run+0x14e/0x250 [ 1016.259062][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1016.264172][ T31] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1016.269876][ T31] do_syscall_64+0xda/0x250 [ 1016.274415][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.281059][ T31] RIP: 0033:0x7fbfd537cef9 [ 1016.285634][ T31] RSP: 002b:00007ffe99486f78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1016.294061][ T31] RAX: 0000000000000000 RBX: 00007fbfd5537a80 RCX: 00007fbfd537cef9 [ 1016.302054][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1016.310075][ T31] RBP: 00007fbfd5537a80 R08: 0000000000000006 R09: 00007ffe9948726f [ 1016.318089][ T31] R10: 00000000003fe974 R11: 0000000000000246 R12: 00000000000d4ed6 [ 1016.326047][ T31] R13: 00007ffe99487080 R14: 0000000000000032 R15: ffffffffffffffff [ 1016.334122][ T31] [ 1016.337221][ T31] [ 1016.337221][ T31] Showing all locks held in the system: [ 1016.344965][ T31] 3 locks held by kworker/1:0/25: [ 1016.351435][ T31] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1016.362028][ T31] #1: ffffc900001f7d80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1016.374965][ T31] #2: ffffffff8fec2028 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 1016.386389][ T31] 1 lock held by khungtaskd/31: [ 1016.391323][ T31] #0: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 1016.401285][ T31] 2 locks held by getty/4982: [ 1016.405947][ T31] #0: ffff8880352ea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1016.415832][ T31] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 1016.426041][ T31] 2 locks held by syz.3.3075/14691: [ 1016.431278][ T31] #0: ffffffff8fec2028 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x16e/0x570 [ 1016.441419][ T31] #1: ffff88807ab45100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down+0x2d/0x2e0 [ 1016.450580][ T31] 2 locks held by syz.0.3074/14681: [ 1016.455781][ T31] #0: ffff88807ab45100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x60/0x330 [ 1016.465566][ T31] #1: ffffffff8fec2028 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 [ 1016.475691][ T31] 2 locks held by syz-executor/14869: [ 1016.481104][ T31] #0: ffff88803246a118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x2bd/0x480 [ 1016.490565][ T31] #1: ffffffff8fec2028 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x3a/0xb40 [ 1016.500554][ T31] 2 locks held by syz-executor/14874: [ 1016.505907][ T31] #0: ffff88802b4a5918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x2bd/0x480 [ 1016.515345][ T31] #1: ffffffff8fec2028 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x3a/0xb40 [ 1016.525416][ T31] 2 locks held by syz.1.3253/15161: [ 1016.530681][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.539272][ T31] #1: ffffffff8fec2028 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x13b/0x750 [ 1016.549371][ T31] 1 lock held by syz.4.3257/15170: [ 1016.554482][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.562962][ T31] 1 lock held by syz.2.3259/15175: [ 1016.568206][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.576796][ T31] 1 lock held by syz-executor/15178: [ 1016.582082][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.590547][ T31] 1 lock held by syz-executor/15180: [ 1016.595824][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.604306][ T31] 1 lock held by syz-executor/15182: [ 1016.609638][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.618170][ T31] 1 lock held by syz-executor/15185: [ 1016.623452][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.631955][ T31] 1 lock held by syz-executor/15186: [ 1016.637289][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.645779][ T31] 1 lock held by syz-executor/15188: [ 1016.651102][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.659618][ T31] 1 lock held by syz-executor/15190: [ 1016.664888][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.673348][ T31] 1 lock held by syz-executor/15192: [ 1016.678805][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.687451][ T31] 1 lock held by syz-executor/15195: [ 1016.692738][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.701335][ T31] 1 lock held by syz-executor/15196: [ 1016.706734][ T31] #0: ffffffff8e9f68a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 1016.715183][ T31] [ 1016.720481][ T31] ============================================= [ 1016.720481][ T31] [ 1016.728959][ T31] NMI backtrace for cpu 0 [ 1016.733311][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 1016.743812][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1016.753854][ T31] Call Trace: [ 1016.757119][ T31] [ 1016.760035][ T31] dump_stack_lvl+0x116/0x1f0 [ 1016.764728][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1016.769659][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1016.775652][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1016.781634][ T31] watchdog+0xf0c/0x1240 [ 1016.785874][ T31] ? __pfx_watchdog+0x10/0x10 [ 1016.790550][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1016.795769][ T31] ? __kthread_parkme+0x148/0x220 [ 1016.800786][ T31] ? __pfx_watchdog+0x10/0x10 [ 1016.805464][ T31] kthread+0x2c1/0x3a0 [ 1016.809538][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1016.814725][ T31] ? __pfx_kthread+0x10/0x10 [ 1016.819302][ T31] ret_from_fork+0x45/0x80 [ 1016.823710][ T31] ? __pfx_kthread+0x10/0x10 [ 1016.828303][ T31] ret_from_fork_asm+0x1a/0x30 [ 1016.833072][ T31] [ 1016.836385][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1016.841660][ C1] NMI backtrace for cpu 1 [ 1016.841673][ C1] CPU: 1 UID: 0 PID: 10231 Comm: kworker/u8:10 Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 1016.841698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1016.841711][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1016.841742][ C1] RIP: 0010:load_new_mm_cr3+0x38/0xa0 [ 1016.841769][ C1] Code: 33 eb 1c cc cc cc 89 f7 48 89 54 24 08 89 74 24 04 e8 1c fd ff ff 48 8b 54 24 08 8b 74 24 04 48 89 df e8 cb fd ff ff 0f 22 d8 <48> 83 c4 10 5b c3 cc cc cc cc 48 c7 c0 c0 32 14 90 48 b9 00 00 00 [ 1016.841789][ C1] RSP: 0018:ffffc9000394f8e8 EFLAGS: 00000046 [ 1016.841805][ C1] RAX: 000000001ac78000 RBX: ffff88801ac78000 RCX: ffffffff813e7a8c [ 1016.841819][ C1] RDX: ffff88807e353c00 RSI: ffffffff813e7a96 RDI: 0000000000000007 [ 1016.841833][ C1] RBP: ffffffff8df45280 R08: 0000000000000007 R09: 0000000000000000 [ 1016.841847][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801ac70000 [ 1016.841860][ C1] R13: 0000000000000000 R14: 000000000003dc28 R15: 0000000000000002 [ 1016.841873][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1016.841894][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1016.841909][ C1] CR2: 000055604a3f06f8 CR3: 000000001ac78000 CR4: 00000000003506f0 [ 1016.841923][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1016.841940][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1016.841953][ C1] Call Trace: [ 1016.841960][ C1] [ 1016.841967][ C1] ? show_regs+0x8c/0xa0 [ 1016.841996][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1016.842025][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1016.842051][ C1] ? nmi_handle+0x1a9/0x5c0 [ 1016.842071][ C1] ? load_new_mm_cr3+0x38/0xa0 [ 1016.842095][ C1] ? default_do_nmi+0x6a/0x160 [ 1016.842117][ C1] ? exc_nmi+0x170/0x1e0 [ 1016.842138][ C1] ? end_repeat_nmi+0xf/0x53 [ 1016.842164][ C1] ? __phys_addr+0xbc/0x150 [ 1016.842185][ C1] ? __phys_addr+0xc6/0x150 [ 1016.842207][ C1] ? load_new_mm_cr3+0x38/0xa0 [ 1016.842230][ C1] ? load_new_mm_cr3+0x38/0xa0 [ 1016.842255][ C1] ? load_new_mm_cr3+0x38/0xa0 [ 1016.842279][ C1] [ 1016.842285][ C1] [ 1016.842292][ C1] switch_mm_irqs_off+0x689/0xbb0 [ 1016.842318][ C1] ? kmem_cache_alloc_noprof+0x86/0x2f0 [ 1016.842348][ C1] ? kmem_cache_alloc_noprof+0x86/0x2f0 [ 1016.842377][ C1] __text_poke+0x3fb/0xca0 [ 1016.842399][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1016.842426][ C1] ? __pfx___text_poke+0x10/0x10 [ 1016.842449][ C1] ? kmem_cache_alloc_noprof+0x86/0x2f0 [ 1016.842481][ C1] text_poke_bp_batch+0x493/0x760 [ 1016.842506][ C1] ? __kmalloc_node_track_caller_noprof+0xe5/0x430 [ 1016.842539][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1016.842562][ C1] ? __jump_label_patch+0x1db/0x400 [ 1016.842590][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1016.842620][ C1] text_poke_finish+0x30/0x40 [ 1016.842644][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1016.842671][ C1] jump_label_update+0x1d7/0x400 [ 1016.842698][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 1016.842728][ C1] static_key_enable+0x1a/0x20 [ 1016.842755][ C1] toggle_allocation_gate+0xf8/0x250 [ 1016.842784][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1016.842819][ C1] process_one_work+0x9c5/0x1b40 [ 1016.842854][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1016.842882][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1016.842915][ C1] ? assign_work+0x1a0/0x250 [ 1016.842948][ C1] worker_thread+0x6c8/0xed0 [ 1016.842983][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1016.843012][ C1] kthread+0x2c1/0x3a0 [ 1016.843033][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1016.843057][ C1] ? __pfx_kthread+0x10/0x10 [ 1016.843080][ C1] ret_from_fork+0x45/0x80 [ 1016.843107][ C1] ? __pfx_kthread+0x10/0x10 [ 1016.843129][ C1] ret_from_fork_asm+0x1a/0x30 [ 1016.843163][ C1] [ 1017.232914][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1017.239789][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 1017.250295][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1017.260333][ T31] Call Trace: [ 1017.263593][ T31] [ 1017.266510][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1017.271087][ T31] panic+0x6dc/0x7c0 [ 1017.274969][ T31] ? __pfx_panic+0x10/0x10 [ 1017.279372][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 1017.284734][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1017.290702][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 1017.296057][ T31] ? watchdog+0xd76/0x1240 [ 1017.300459][ T31] ? watchdog+0xd69/0x1240 [ 1017.304859][ T31] watchdog+0xd87/0x1240 [ 1017.309091][ T31] ? __pfx_watchdog+0x10/0x10 [ 1017.313748][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1017.318950][ T31] ? __kthread_parkme+0x148/0x220 [ 1017.323988][ T31] ? __pfx_watchdog+0x10/0x10 [ 1017.328669][ T31] kthread+0x2c1/0x3a0 [ 1017.332743][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1017.337934][ T31] ? __pfx_kthread+0x10/0x10 [ 1017.342510][ T31] ret_from_fork+0x45/0x80 [ 1017.346916][ T31] ? __pfx_kthread+0x10/0x10 [ 1017.351488][ T31] ret_from_fork_asm+0x1a/0x30 [ 1017.356245][ T31] [ 1017.359901][ T31] Kernel Offset: disabled [ 1017.364212][ T31] Rebooting in 86400 seconds..