last executing test programs: 6.545043502s ago: executing program 2 (id=3786): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) 6.251047652s ago: executing program 2 (id=3790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) 5.959015788s ago: executing program 2 (id=3795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 5.852127322s ago: executing program 3 (id=3796): r0 = syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeec, 0x12, r0, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0) 5.809915155s ago: executing program 1 (id=3797): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x5c5, 0x4, 0x0) 5.580309337s ago: executing program 4 (id=3798): getpid() r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@setlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x16122}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x10}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x20000000) 5.505040241s ago: executing program 2 (id=3799): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) 5.484667601s ago: executing program 3 (id=3800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) 5.427153353s ago: executing program 1 (id=3801): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000100)}, 0x36) 4.452002477s ago: executing program 1 (id=3802): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgctl$IPC_STAT(0x0, 0x2, 0x0) eventfd(0x5df) 4.45086724s ago: executing program 2 (id=3803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000e05240300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 4.439070992s ago: executing program 3 (id=3804): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000090) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000047c00000400000014000180080016000000000006000600800a0000080002"], 0x1034}}, 0x0) 4.397027771s ago: executing program 4 (id=3805): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') 4.04178581s ago: executing program 1 (id=3806): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) 4.027822492s ago: executing program 4 (id=3807): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 3.86825378s ago: executing program 3 (id=3808): socketpair$unix(0x1, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 3.614195164s ago: executing program 1 (id=3809): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f00000009c0)={0x0, 0x0, 0x4, {0x4, 0x0, "7dea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.489139811s ago: executing program 4 (id=3810): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xe, &(0x7f0000000080)="02", 0x1) listen(r0, 0x0) 3.102621062s ago: executing program 3 (id=3812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 3.032181227s ago: executing program 4 (id=3813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.634286952s ago: executing program 3 (id=3814): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x4}) 2.30287878s ago: executing program 4 (id=3815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) 1.83809959s ago: executing program 0 (id=3817): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000040)={{0x80}, 'port1\x00', 0xe3, 0x1b0407, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x7, 0xff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.677508595s ago: executing program 2 (id=3818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) io_setup(0xbf, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffe}]) 1.394193221s ago: executing program 0 (id=3819): openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x3) 1.072944158s ago: executing program 0 (id=3820): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@remote, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x7, 0x2, 0x0, 0x0, 0x0, 0x3ff}, 0x20) 874.425511ms ago: executing program 0 (id=3821): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0}) 657.013372ms ago: executing program 0 (id=3822): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @mcast2, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 445.090217ms ago: executing program 0 (id=3823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 0s ago: executing program 1 (id=3824): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) kernel console output (not intermixed with test programs): 371.318097][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.320443][ T5273] usb 3-1: Product: syz [ 371.320475][ T5273] usb 3-1: Manufacturer: syz [ 371.320504][ T5273] usb 3-1: SerialNumber: syz [ 371.335069][ T5273] usb 3-1: config 0 descriptor?? [ 371.361842][ T5273] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 371.401878][ T5273] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 371.901985][ T9] usb 3-1: USB disconnect, device number 30 [ 371.960779][ T9] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 372.002606][ T9] omninet 3-1:0.0: device disconnected [ 372.097592][ T29] audit: type=1326 audit(1724794532.837:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f24779e79 code=0x7ffc0000 [ 372.160230][ T29] audit: type=1326 audit(1724794532.837:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f24779e79 code=0x7ffc0000 [ 372.183839][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.268493][ T29] audit: type=1326 audit(1724794532.867:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f1f24779e79 code=0x7ffc0000 [ 372.323820][ T29] audit: type=1326 audit(1724794532.867:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f24779e79 code=0x7ffc0000 [ 372.351549][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.465911][ T29] audit: type=1326 audit(1724794532.867:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f24779e79 code=0x7ffc0000 [ 372.917248][ T29] audit: type=1400 audit(1724794533.657:541): avc: denied { bind } for pid=10723 comm="syz.4.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 373.005229][ T29] audit: type=1400 audit(1724794533.707:542): avc: denied { ioctl } for pid=10723 comm="syz.4.2471" path="socket:[25612]" dev="sockfs" ino=25612 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 373.030401][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.558271][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 373.658084][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 373.778582][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 373.820456][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.866440][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.940019][ T9] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 373.987555][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.028965][ T9] usb 2-1: config 0 descriptor?? [ 374.556628][ T9] samsung 0003:0419:0001.0053: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 374.965011][ T5273] usb 2-1: USB disconnect, device number 35 [ 375.520048][ T29] audit: type=1400 audit(1724794536.257:543): avc: denied { name_bind } for pid=10785 comm="syz.0.2493" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 375.918895][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 376.141099][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 376.192190][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 376.232981][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.253849][ T29] audit: type=1400 audit(1724794536.997:544): avc: denied { setopt } for pid=10811 comm="syz.1.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 376.270882][ T9] usb 3-1: config 0 descriptor?? [ 376.333141][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 376.678251][ T29] audit: type=1400 audit(1724794537.417:545): avc: denied { listen } for pid=10822 comm="syz.0.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 376.698642][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.821074][ T8] usb 3-1: USB disconnect, device number 31 [ 378.018948][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 378.234654][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 378.274127][ T8] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 378.288277][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 378.316649][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.342046][ T8] usb 4-1: Product: syz [ 378.356591][ T8] usb 4-1: Manufacturer: syz [ 378.388259][ T8] usb 4-1: SerialNumber: syz [ 378.415010][ T8] usb 4-1: config 0 descriptor?? [ 378.447990][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 378.515691][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 378.543244][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.587272][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.614516][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 378.638585][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.710631][ T9] usb 3-1: config 0 descriptor?? [ 378.978892][ T8] gspca_se401: Wrong descriptor type [ 378.995563][T10890] netlink: 'syz.4.2529': attribute type 4 has an invalid length. [ 379.253703][ T9] cypress 0003:04B4:DE61.0054: item fetching failed at offset 0/4 [ 379.316934][ T9] cypress 0003:04B4:DE61.0054: parse failed [ 379.343092][ T9] cypress 0003:04B4:DE61.0054: probe with driver cypress failed with error -22 [ 379.391758][ T8] usb 4-1: USB disconnect, device number 30 [ 379.473596][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2534'. [ 379.635325][ T5306] usb 3-1: USB disconnect, device number 32 [ 379.641908][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 379.848687][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 379.858872][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.867033][T10907] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2538'. [ 379.886615][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.908290][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 379.917642][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.931667][ T9] usb 2-1: config 0 descriptor?? [ 380.028400][ T5273] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 380.229693][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.251618][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.272096][ T5273] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 380.308484][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.359095][ T5273] usb 5-1: config 0 descriptor?? [ 380.451374][ T9] isku 0003:1E7D:319C.0055: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 380.543604][T10915] netlink: 'syz.0.2543': attribute type 3 has an invalid length. [ 380.574776][T10915] netlink: 'syz.0.2543': attribute type 1 has an invalid length. [ 380.608418][T10915] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2543'. [ 380.879630][ T5306] usb 2-1: USB disconnect, device number 36 [ 380.883279][ T5273] monterey 0003:0566:3004.0056: unknown main item tag 0x0 [ 380.966157][ T5273] monterey 0003:0566:3004.0056: unknown main item tag 0x0 [ 380.991679][ T5273] monterey 0003:0566:3004.0056: unknown main item tag 0x0 [ 381.017405][ T5273] monterey 0003:0566:3004.0056: unknown main item tag 0x0 [ 381.049138][ T5273] monterey 0003:0566:3004.0056: unknown main item tag 0x0 [ 381.068034][ T5273] monterey 0003:0566:3004.0056: unknown main item tag 0x0 [ 381.095843][ T5273] monterey 0003:0566:3004.0056: unknown main item tag 0x0 [ 381.133736][ T5273] monterey 0003:0566:3004.0056: unknown main item tag 0x0 [ 381.166705][ T5273] monterey 0003:0566:3004.0056: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.4-1/input0 [ 381.246942][ T5273] usb 5-1: USB disconnect, device number 31 [ 382.128374][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 382.387310][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 382.445849][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.516877][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.570617][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 382.636391][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 382.680774][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.740643][ T9] usb 2-1: config 0 descriptor?? [ 382.931284][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2567'. [ 383.313241][ T9] wacom 0003:056A:0331.0057: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 383.324903][T10976] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2572'. [ 383.473116][ T9] usb 2-1: USB disconnect, device number 37 [ 383.589633][ T5273] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 383.840231][ T5273] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 383.842656][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.842751][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.842800][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 383.844470][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.844555][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.844606][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 383.846130][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.846220][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.846269][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 383.847948][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.848084][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.850547][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 383.852337][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.852421][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.852470][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 383.854171][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.854254][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.854303][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 383.856171][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.856252][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.856300][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 383.858096][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.858351][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.858402][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 383.862401][ T5273] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 383.862448][ T5273] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 383.862488][ T5273] usb 5-1: Product: syz [ 383.862514][ T5273] usb 5-1: Manufacturer: syz [ 383.862542][ T5273] usb 5-1: SerialNumber: syz [ 383.879274][ T5273] usb 5-1: config 0 descriptor?? [ 383.914574][ T5273] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 384.464483][ T5273] usb 5-1: USB disconnect, device number 32 [ 384.474396][ T5273] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 384.537613][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 384.537637][ T29] audit: type=1400 audit(1724794545.267:547): avc: denied { bind } for pid=10992 comm="syz.2.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 385.109699][ T29] audit: type=1400 audit(1724794545.857:548): avc: denied { ioctl } for pid=11003 comm="syz.1.2586" path="socket:[26026]" dev="sockfs" ino=26026 ioctlcmd=0x89fd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 385.173385][T11004] sp0: Synchronizing with TNC [ 386.133797][T11030] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 386.308750][ T29] audit: type=1326 audit(1724794547.047:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.2598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb00d379e79 code=0x0 [ 386.448350][ T5274] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 386.658369][ T5339] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 386.680153][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 386.689646][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.723902][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.779059][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 386.818957][ T5274] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 386.839956][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.883262][ T5274] usb 3-1: config 0 descriptor?? [ 386.898278][ T5339] usb 1-1: Using ep0 maxpacket: 8 [ 386.941206][ T5339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.970957][ T5339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.997611][ T5339] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 387.011929][ T5339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.055613][ T5339] usb 1-1: config 0 descriptor?? [ 387.354751][ T5274] logitech 0003:046D:C29C.0058: report_id 0 is invalid [ 387.377040][ T5274] logitech 0003:046D:C29C.0058: item 0 1 1 8 parsing failed [ 387.389878][ T5274] logitech 0003:046D:C29C.0058: parse failed [ 387.397159][ T5274] logitech 0003:046D:C29C.0058: probe with driver logitech failed with error -22 [ 387.488430][ T5273] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 387.640186][ T9] usb 3-1: USB disconnect, device number 33 [ 387.642767][ T5339] hid-picolcd 0003:04D8:F002.0059: No report with id 0xf4 found [ 387.675595][ T5339] hid-picolcd 0003:04D8:F002.0059: No report with id 0xf3 found [ 387.701147][ T5273] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 387.728611][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.758464][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.790117][ T5273] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 387.828271][ T5273] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 387.848313][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.873073][ T5273] usb 4-1: config 0 descriptor?? [ 387.916926][ T5339] usb 1-1: USB disconnect, device number 35 [ 388.185606][ T29] audit: type=1400 audit(1724794548.927:550): avc: denied { module_request } for pid=11058 comm="syz.1.2608" kmod=6970367461626C655F01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 388.338442][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 388.375048][ T5273] hid-retrode 0003:0403:97C1.005A: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 388.538378][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 388.548056][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.568770][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.589274][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 388.614363][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.654991][ T9] usb 5-1: config 0 descriptor?? [ 388.718064][ T5273] usb 4-1: USB disconnect, device number 31 [ 388.754922][ T8] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 388.984501][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.018961][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.045680][ T8] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 389.078698][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.131122][ T8] usb 2-1: config 0 descriptor?? [ 389.232811][ T9] apple 0003:05AC:027D.005B: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.4-1/input0 [ 389.299762][T11076] sp1: Synchronizing with TNC [ 389.368668][T11076] sp1: Found TNC [ 389.642791][ T5273] usb 5-1: USB disconnect, device number 33 [ 389.681738][ T8] steelseries 0003:1038:12B6.005C: hidraw1: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 389.847960][ T8] steelseries 0003:1038:12B6.005C: hid_hw_raw_request() failed with -71 [ 389.911598][ T8] usb 2-1: USB disconnect, device number 38 [ 389.953627][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.961610][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.070642][T11086] netlink: 'syz.0.2624': attribute type 1 has an invalid length. [ 390.105951][T11086] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2624'. [ 390.448208][ T29] audit: type=1400 audit(1724794551.187:551): avc: denied { listen } for pid=11091 comm="syz.0.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 390.676246][T11097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2630'. [ 391.022442][ T29] audit: type=1400 audit(1724794551.767:552): avc: denied { read } for pid=11107 comm="syz.3.2635" name="file0" dev="tmpfs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 391.136029][ T29] audit: type=1400 audit(1724794551.767:553): avc: denied { open } for pid=11107 comm="syz.3.2635" path="/530/file0" dev="tmpfs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 391.240014][ T29] audit: type=1400 audit(1724794551.807:554): avc: denied { ioctl } for pid=11107 comm="syz.3.2635" path="/530/file0" dev="tmpfs" ino=2693 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 391.543768][T11123] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2642'. [ 391.556149][ T29] audit: type=1400 audit(1724794552.297:555): avc: denied { shutdown } for pid=11119 comm="syz.3.2640" lport=42363 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.738813][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 392.385778][T11144] fuse: Invalid rootmode [ 392.529471][T11148] netlink: 'syz.4.2655': attribute type 8 has an invalid length. [ 392.551757][T11150] openvswitch: netlink: Missing key (keys=80040, expected=2000) [ 392.568227][T11148] netlink: 'syz.4.2655': attribute type 1 has an invalid length. [ 392.619575][T11148] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.2655'. [ 392.766306][T11154] mkiss: ax0: crc mode is auto. [ 393.088298][T11163] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 394.038670][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2671'. [ 394.696566][T11212] tipc: Enabling of bearer rejected, failed to enable media [ 394.868392][ T5301] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 394.929146][ T29] audit: type=1400 audit(1724794555.677:556): avc: denied { write } for pid=11216 comm="syz.0.2685" name="bus" dev="tmpfs" ino=2809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 395.081675][T11221] Invalid logical block size (65522) [ 395.089001][ T5301] usb 4-1: Using ep0 maxpacket: 8 [ 395.110555][ T5301] usb 4-1: config index 0 descriptor too short (expected 49, got 36) [ 395.128447][ T5301] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 395.130919][ T25] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 395.146949][ T5301] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 395.180536][ T5301] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 395.210140][ T5301] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 395.249140][ T5301] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 395.300426][ T5301] usb 4-1: config index 1 descriptor too short (expected 49, got 36) [ 395.317816][ T5301] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 395.344061][ T5301] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 395.368312][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 395.388603][ T5301] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 395.390584][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.433778][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.441577][ T5301] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 395.449357][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.488264][ T5301] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 395.524797][ T5301] usb 4-1: config index 2 descriptor too short (expected 49, got 36) [ 395.542445][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.556628][ T5301] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 395.558184][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.593546][ T5301] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 395.606825][ T25] usb 2-1: config 0 descriptor?? [ 395.658086][ T5301] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 395.692314][ T5301] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 395.739596][ T5301] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 395.784840][ T5301] usb 4-1: string descriptor 0 read error: -22 [ 395.815159][ T5301] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 395.848399][ T5301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.924632][ T5301] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 396.163394][ T25] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 396.196745][ T25] microsoft 0003:045E:07DA.005D: ignoring exceeding usage max [ 396.244599][ T25] microsoft 0003:045E:07DA.005D: No inputs registered, leaving [ 396.273185][ T25] microsoft 0003:045E:07DA.005D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 396.310628][ T25] microsoft 0003:045E:07DA.005D: no inputs found [ 396.327277][ T25] microsoft 0003:045E:07DA.005D: could not initialize ff, continuing anyway [ 396.513206][T11248] tipc: Enabled bearer , priority 10 [ 396.567625][ T5274] usb 2-1: USB disconnect, device number 39 [ 396.867123][T11254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2702'. [ 397.163048][T11260] ALSA: mixer_oss: invalid OSS volume '¢' [ 397.540243][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 397.629973][ T8] tipc: Node number set to 1 [ 397.738424][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 397.761170][ T25] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 397.785511][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.796784][ T25] usb 5-1: Product: syz [ 397.801877][ T25] usb 5-1: Manufacturer: syz [ 397.806995][ T25] usb 5-1: SerialNumber: syz [ 397.842054][ T25] usb 5-1: config 0 descriptor?? [ 397.874778][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 398.088400][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 398.186472][ T5301] usb 4-1: USB disconnect, device number 32 [ 398.201347][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 398.238211][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.246423][ T9] usb 2-1: Product: syz [ 398.295981][ T9] usb 2-1: Manufacturer: syz [ 398.307799][ T9] usb 2-1: SerialNumber: syz [ 398.357501][ T9] usb 2-1: config 0 descriptor?? [ 398.358853][ T25] airspy 5-1:0.0: Board ID: 00 [ 398.380541][ T25] airspy 5-1:0.0: Firmware version: [ 398.578645][ T25] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 398.642098][ T25] airspy 5-1:0.0: Registered as swradio16 [ 398.647939][ T25] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 398.691228][ T25] usb 5-1: USB disconnect, device number 34 [ 399.140569][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:df:e2:cb:10:db [ 399.276639][ T9] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 399.335771][ T9] usb 2-1: USB disconnect, device number 40 [ 399.424253][ T29] audit: type=1400 audit(1724794560.167:557): avc: denied { map } for pid=11300 comm="syz.3.2723" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 400.022236][T11313] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 400.109100][ T29] audit: type=1400 audit(1724794560.857:558): avc: denied { bind } for pid=11316 comm="syz.3.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 400.691884][T11330] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2738'. [ 400.727862][T11330] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 401.608724][ T5300] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 401.818482][ T5300] usb 1-1: Using ep0 maxpacket: 32 [ 401.862534][ T5300] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 401.908286][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.964825][ T5300] usb 1-1: config 0 descriptor?? [ 401.983937][ T5300] gspca_main: sunplus-2.14.0 probing 041e:400b [ 402.070073][ T25] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 402.227932][T11374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2769'. [ 402.241449][ T5273] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 402.278225][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 402.294897][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.316377][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.358275][ T25] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 402.399304][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.445810][ T25] usb 2-1: config 0 descriptor?? [ 402.468609][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 402.477010][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.529250][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.553193][ T5273] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 402.576200][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.621356][ T5273] usb 5-1: config 0 descriptor?? [ 402.669081][ T5300] gspca_sunplus: reg_r err -71 [ 402.674118][ T5300] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 402.721122][ T5300] usb 1-1: USB disconnect, device number 36 [ 403.034987][ T25] hid-multitouch 0003:1FD2:6007.005E: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 403.087855][ T5273] bigben 0003:146B:0902.005F: unexpected rdesc, please submit for review [ 403.110347][ T5273] bigben 0003:146B:0902.005F: hidraw1: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.4-1/input0 [ 403.173806][ T5273] bigben 0003:146B:0902.005F: missing HID_OUTPUT_REPORT 0 [ 403.188214][ T5273] bigben 0003:146B:0902.005F: no output report found [ 403.357313][T11388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2764'. [ 403.386817][ T25] usb 2-1: USB disconnect, device number 41 [ 403.476995][ T5300] usb 5-1: USB disconnect, device number 35 [ 404.275526][T11408] netlink: 'syz.0.2773': attribute type 1 has an invalid length. [ 404.300212][T11408] netlink: 9384 bytes leftover after parsing attributes in process `syz.0.2773'. [ 404.538362][ T5273] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 404.758358][ T5273] usb 4-1: Using ep0 maxpacket: 8 [ 404.777355][ T5273] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 404.806167][ T5273] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 404.835176][ T5273] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.886105][ T5273] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 404.940360][ T5273] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 404.971925][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2783'. [ 405.019706][ T5273] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 405.027609][ T5273] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 405.098387][ T5273] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.154349][ T5273] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 405.214658][ T5273] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 405.296242][ T5273] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 405.369934][ T5273] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 405.412663][ T5273] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.468155][ T5273] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 405.518937][ T5273] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 405.585144][ T5273] usb 4-1: string descriptor 0 read error: -22 [ 405.592865][ T5273] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 405.620571][T11445] netlink: 'syz.2.2790': attribute type 3 has an invalid length. [ 405.655717][T11445] netlink: 'syz.2.2790': attribute type 1 has an invalid length. [ 405.658246][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.685822][T11445] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2790'. [ 405.759092][ T5273] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 406.295964][ T5300] usb 4-1: USB disconnect, device number 33 [ 406.600957][ T5301] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 406.785728][ T5301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.818528][ T5301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.847166][ T5301] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 406.867827][ T5301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.892340][ T5301] usb 1-1: config 0 descriptor?? [ 407.427056][ T5301] logitech 0003:046D:C294.0060: unbalanced collection at end of report description [ 407.473062][ T5301] logitech 0003:046D:C294.0060: parse failed [ 407.498486][ T5301] logitech 0003:046D:C294.0060: probe with driver logitech failed with error -22 [ 407.838062][ T5301] usb 1-1: USB disconnect, device number 37 [ 408.131419][T11487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2811'. [ 408.170336][T11487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2811'. [ 410.171995][ T29] audit: type=1400 audit(1724794570.917:559): avc: denied { write } for pid=11543 comm="syz.0.2838" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 410.198736][T11544] random: crng reseeded on system resumption [ 410.288418][ T29] audit: type=1400 audit(1724794570.917:560): avc: denied { open } for pid=11543 comm="syz.0.2838" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 410.364257][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2841'. [ 411.000434][T11544] Unrecognized hibernate image header format! [ 411.029278][T11544] PM: hibernation: Image mismatch: architecture specific data [ 411.218378][ T5300] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 411.432158][ T5300] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 411.470749][ T5300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.508226][ T5300] usb 3-1: config 0 has no interface number 0 [ 411.526278][ T5300] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 411.577016][ T5300] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.622839][ T5300] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 411.639066][ T5300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.675581][ T5300] usb 3-1: Product: syz [ 411.718295][ T5300] usb 3-1: Manufacturer: syz [ 411.728290][ T5300] usb 3-1: SerialNumber: syz [ 411.772771][ T5300] usb 3-1: config 0 descriptor?? [ 412.248311][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 412.450783][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 412.500556][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.539499][ T9] usb 4-1: config 0 descriptor?? [ 412.567823][ T9] cp210x 4-1:0.0: cp210x converter detected [ 412.727765][ T25] usb 3-1: USB disconnect, device number 34 [ 413.060506][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 413.211268][ T8] IPVS: starting estimator thread 0... [ 413.248593][T11616] IPVS: wlc: UDP 0.0.0.0:0 - no destination available [ 413.328476][T11618] IPVS: using max 15 ests per chain, 36000 per kthread [ 413.437738][ T25] usb 4-1: USB disconnect, device number 34 [ 413.497216][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 413.539460][ T25] cp210x 4-1:0.0: device disconnected [ 413.695025][T11628] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2868'. [ 414.858682][T11656] UBIFS error (pid: 11656): cannot open "ubÎ", error -22 [ 415.253521][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 415.498617][ T5273] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 415.549795][ T25] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 415.698375][ T5273] usb 3-1: Using ep0 maxpacket: 16 [ 415.715890][ T5273] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 415.745861][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 415.751625][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.776609][ T5273] usb 3-1: Product: syz [ 415.790658][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.801166][ T5273] usb 3-1: Manufacturer: syz [ 415.805838][ T5273] usb 3-1: SerialNumber: syz [ 415.815641][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 415.829694][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.842461][ T25] usb 5-1: Product: syz [ 415.847558][ T25] usb 5-1: Manufacturer: syz [ 415.859747][ T5273] r8152-cfgselector 3-1: Unknown version 0x0000 [ 415.866175][ T5273] r8152-cfgselector 3-1: config 0 descriptor?? [ 415.887092][ T25] usb 5-1: SerialNumber: syz [ 415.925505][ T25] usb 5-1: config 0 descriptor?? [ 416.133539][ T29] audit: type=1401 audit(1724794576.867:561): op=fscreate invalid_context="}" [ 416.212611][ T5273] r8152-cfgselector 3-1: Needed 1 retries to read version [ 416.424610][ T25] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 416.434113][ T25] usb 5-1: No valid video chain found. [ 416.590904][ T8] r8152-cfgselector 3-1: USB disconnect, device number 35 [ 416.791544][T11701] sp1: Synchronizing with TNC [ 416.796676][ T9] usb 5-1: USB disconnect, device number 36 [ 416.888783][T11701] sp1: Found TNC [ 417.885010][T11716] nbd: must specify a size in bytes for the device [ 418.478484][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 418.699938][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.745348][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.778366][ T25] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 418.814964][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.849832][ T25] usb 3-1: config 0 descriptor?? [ 419.185386][T11745] netlink: 'syz.1.2920': attribute type 3 has an invalid length. [ 419.216366][T11745] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2920'. [ 419.313220][ T25] cypress 0003:04B4:DE61.0061: item fetching failed at offset 5/7 [ 419.349314][ T25] cypress 0003:04B4:DE61.0061: parse failed [ 419.362491][ T25] cypress 0003:04B4:DE61.0061: probe with driver cypress failed with error -22 [ 419.742314][ T5300] usb 3-1: USB disconnect, device number 36 [ 421.046645][T11794] /dev/nullb0: Can't open blockdev [ 421.128606][ T5300] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 421.338364][ T5300] usb 5-1: Using ep0 maxpacket: 16 [ 421.354901][ T5300] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 421.388274][ T5300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.399785][ T5300] usb 5-1: Product: syz [ 421.404031][ T5300] usb 5-1: Manufacturer: syz [ 421.429534][ T5300] usb 5-1: SerialNumber: syz [ 421.451725][ T5300] r8152-cfgselector 5-1: Unknown version 0x0000 [ 421.476660][ T5300] r8152-cfgselector 5-1: config 0 descriptor?? [ 421.705642][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2951'. [ 421.834842][ T29] audit: type=1400 audit(1724794582.577:562): avc: denied { listen } for pid=11810 comm="syz.2.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 422.127582][ T5274] r8152-cfgselector 5-1: USB disconnect, device number 37 [ 422.139268][T11818] overlayfs: conflicting options: nfs_export=on,index=off [ 423.127222][ T29] audit: type=1400 audit(1724794583.867:563): avc: denied { shutdown } for pid=11840 comm="syz.1.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 423.206673][ T29] audit: type=1400 audit(1724794583.877:564): avc: denied { read } for pid=11840 comm="syz.1.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 423.298637][ T8] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 423.318263][ T5274] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 423.495556][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 423.527468][ T5274] usb 5-1: Using ep0 maxpacket: 16 [ 423.530884][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.562175][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.587215][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.606727][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.617857][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 423.617942][ T8] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 423.675282][ T5274] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 423.696554][T11853] tipc: Enabling of bearer rejected, failed to enable media [ 423.703875][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.716205][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.771499][ T5274] usb 5-1: config 0 descriptor?? [ 423.779729][ T8] usb 1-1: config 0 descriptor?? [ 424.313840][ T5274] elecom 0003:056E:00FD.0062: item fetching failed at offset 5/9 [ 424.352268][ T8] thrustmaster 0003:044F:B653.0063: unbalanced delimiter at end of report description [ 424.363902][ T5274] elecom 0003:056E:00FD.0062: probe with driver elecom failed with error -22 [ 424.399418][ T8] thrustmaster 0003:044F:B653.0063: parse failed [ 424.427753][ T8] thrustmaster 0003:044F:B653.0063: probe with driver thrustmaster failed with error -22 [ 424.734998][ T5300] usb 1-1: USB disconnect, device number 38 [ 424.778950][ T5274] usb 5-1: USB disconnect, device number 38 [ 425.320094][ T29] audit: type=1400 audit(1724794586.057:565): avc: denied { create } for pid=11877 comm="syz.2.2985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 425.360893][T11878] sp1: Synchronizing with TNC [ 426.160748][ T5300] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 426.381707][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.409423][T11903] netlink: 'syz.0.2997': attribute type 1 has an invalid length. [ 426.433048][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.444747][T11903] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.2997'. [ 426.476873][ T5300] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 426.486943][T11903] netlink: 'syz.0.2997': attribute type 1 has an invalid length. [ 426.516713][ T5300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.526843][T11903] netlink: 'syz.0.2997': attribute type 2 has an invalid length. [ 426.548400][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2997'. [ 426.577407][ T5300] usb 3-1: config 0 descriptor?? [ 427.033504][T11915] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3003'. [ 427.100932][ T5300] cougar 0003:060B:700A.0064: item fetching failed at offset 4/5 [ 427.113535][T11917] CUSE: unknown device info "€" [ 427.159563][ T5300] cougar 0003:060B:700A.0064: parse failed [ 427.179226][ T5300] cougar 0003:060B:700A.0064: probe with driver cougar failed with error -22 [ 427.191255][T11917] CUSE: zero length info key specified [ 427.558449][ T5300] usb 3-1: USB disconnect, device number 37 [ 427.748267][ T8] IPVS: starting estimator thread 0... [ 427.848730][T11930] IPVS: using max 15 ests per chain, 36000 per kthread [ 427.858393][ T5236] Bluetooth: hci5: command 0x0405 tx timeout [ 428.345797][T11943] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3013'. [ 428.383098][T11943] openvswitch: netlink: Tunnel attr 7 has unexpected len 8 expected 0 [ 428.458349][ T5274] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 428.678346][ T5274] usb 4-1: Using ep0 maxpacket: 32 [ 428.692643][ T5274] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 428.735825][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.785825][ T5274] usb 4-1: config 0 descriptor?? [ 428.805439][ T5274] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 429.487889][ T5274] gspca_sunplus: reg_w_riv err -71 [ 429.499477][ T5274] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 429.540233][ T5274] usb 4-1: USB disconnect, device number 35 [ 429.665885][T11977] sp0: Synchronizing with TNC [ 429.988701][ T5339] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 430.211788][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.241537][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.261941][ T5339] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 430.288263][ T5300] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 430.296632][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.332087][ T5339] usb 5-1: config 0 descriptor?? [ 430.503773][ T5300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.525471][ T5300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.546641][ T5300] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 430.587562][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.629650][ T5300] usb 1-1: config 0 descriptor?? [ 430.803811][ T5339] hid (null): report_id 1230628742 is invalid [ 430.853098][ T5339] itetech 0003:258A:6A88.0065: report_id 1230628742 is invalid [ 430.863782][ T5339] itetech 0003:258A:6A88.0065: item 0 4 1 8 parsing failed [ 430.895581][ T5339] itetech 0003:258A:6A88.0065: probe with driver itetech failed with error -22 [ 431.023985][T12006] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3045'. [ 431.118059][T12007] netlink: 'syz.2.3046': attribute type 10 has an invalid length. [ 431.154064][T12007] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 431.167379][ T5300] dragonrise 0003:0079:0011.0066: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 431.202488][ T5339] usb 5-1: USB disconnect, device number 39 [ 431.519836][ T5339] usb 1-1: USB disconnect, device number 39 [ 431.739635][ T29] audit: type=1400 audit(1724794592.487:566): avc: denied { module_load } for pid=12014 comm="syz.1.3049" path=2F6D656D66643A1037202864656C6574656429 dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 431.766930][T12015] Invalid ELF header type: 0 != 1 [ 432.478629][ T5301] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 432.603722][T12036] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3061'. [ 432.631212][T12036] netlink: 'syz.1.3061': attribute type 1 has an invalid length. [ 432.698354][ T5300] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 432.706250][ T5301] usb 3-1: Using ep0 maxpacket: 16 [ 432.727367][ T5301] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.760032][ T5301] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.785427][ T5301] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.807986][ T5301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.815239][ T5301] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 432.825606][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.854932][ T5301] usb 3-1: config 0 descriptor?? [ 432.902890][ T5300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.927893][ T5300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.956758][ T5300] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 432.996060][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.029426][ T5300] usb 1-1: config 0 descriptor?? [ 433.342595][ T5301] hid (null): usage index exceeded [ 433.374959][ T5301] hid-generic 0003:045E:05DA.0067: ignoring exceeding usage max [ 433.401855][ T5301] hid-generic 0003:045E:05DA.0067: usage index exceeded [ 433.422159][ T5301] hid-generic 0003:045E:05DA.0067: item 0 4 2 0 parsing failed [ 433.432085][ T5301] hid-generic 0003:045E:05DA.0067: probe with driver hid-generic failed with error -22 [ 433.509568][ T5300] hid-retrode 0003:0403:97C1.0068: unbalanced collection at end of report description [ 433.550488][ T5300] hid-retrode 0003:0403:97C1.0068: probe with driver hid-retrode failed with error -22 [ 433.762916][ T5300] usb 3-1: USB disconnect, device number 38 [ 433.893731][ T5301] usb 1-1: USB disconnect, device number 40 [ 434.446648][T12080] Invalid ELF section header overflow [ 434.706044][ T29] audit: type=1400 audit(1724794595.437:567): avc: denied { ioctl } for pid=12087 comm="syz.3.3087" path="socket:[29903]" dev="sockfs" ino=29903 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 435.172602][T12107] veth0_macvtap: left promiscuous mode [ 435.198619][T12107] macvtap0: entered promiscuous mode [ 435.209996][T12107] macvtap0: entered allmulticast mode [ 435.448514][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 435.648501][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 435.666067][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.698468][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.739404][ T9] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 435.756837][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.789635][ T9] usb 5-1: config 0 descriptor?? [ 435.817929][ T29] audit: type=1400 audit(1724794596.557:568): avc: denied { getopt } for pid=12123 comm="syz.1.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 436.155814][T12137] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3111'. [ 436.176369][T12137] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3111'. [ 436.299947][ T9] megaworld 0003:07B5:0312.0069: item fetching failed at offset 2/5 [ 436.326853][ T9] megaworld 0003:07B5:0312.0069: parse failed [ 436.344361][ T9] megaworld 0003:07B5:0312.0069: probe with driver megaworld failed with error -22 [ 436.388332][T12134] "syz.1.3109" (12134) uses obsolete ecb(arc4) skcipher [ 436.445373][ T29] audit: type=1400 audit(1724794597.187:569): avc: denied { read } for pid=12145 comm="syz.3.3114" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.508314][ T29] audit: type=1400 audit(1724794597.217:570): avc: denied { open } for pid=12145 comm="syz.3.3114" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.731482][ T25] usb 5-1: USB disconnect, device number 40 [ 437.518375][ T8] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 437.558230][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 437.718544][ T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 437.735738][T12185] SELinux: security_context_str_to_sid (¯/) failed with errno=-22 [ 437.744077][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.757887][T12185] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 437.770233][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 437.777272][ T8] usb 1-1: config 0 descriptor?? [ 437.798972][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.820950][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.848309][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.878248][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 437.887442][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.950273][ T9] usb 2-1: config 0 descriptor?? [ 438.228636][ T5301] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 438.277357][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 438.325293][ T8] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 438.333613][ T8] [drm] Initialized udl on minor 2 [ 438.352838][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 438.387684][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 438.428703][ T5301] usb 3-1: Using ep0 maxpacket: 16 [ 438.438586][ T5300] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 438.448007][ T8] usb 1-1: USB disconnect, device number 41 [ 438.464856][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.480323][ T5300] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 438.488714][ T9] hid-picolcd 0003:04D8:C002.006A: No report with id 0x11 found [ 438.505952][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.533547][ T5301] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.556855][ T5301] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 438.586833][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.612925][ T5301] usb 3-1: config 0 descriptor?? [ 438.733348][ T5274] usb 2-1: USB disconnect, device number 42 [ 439.054003][ T5301] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 439.092872][ T5301] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.006B/input/input31 [ 439.109067][ T5339] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 439.176119][T12212] netlink: 'syz.3.3146': attribute type 2 has an invalid length. [ 439.194621][T12212] netlink: 'syz.3.3146': attribute type 1 has an invalid length. [ 439.239540][ T5301] microsoft 0003:045E:07DA.006B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 439.314258][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.336353][ T25] usb 3-1: USB disconnect, device number 39 [ 439.344945][ T29] audit: type=1400 audit(1724794600.087:571): avc: denied { create } for pid=12213 comm="syz.0.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 439.357057][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.421267][ T5238] Bluetooth: hci3: unexpected cc 0x1004 length: 6 < 11 [ 439.428985][ T5339] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 439.431602][ T5238] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 439.447293][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.499621][ T5339] usb 5-1: config 0 descriptor?? [ 439.633783][T12221] nftables ruleset with unbound set [ 439.790124][ T29] audit: type=1400 audit(1724794600.537:572): avc: denied { ioctl } for pid=12224 comm="syz.0.3152" path="socket:[30958]" dev="sockfs" ino=30958 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 440.013815][ T5339] stadia 0003:18D1:9400.006C: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.4-1/input0 [ 440.049984][ T5339] stadia 0003:18D1:9400.006C: no inputs found [ 440.056952][ T5339] stadia 0003:18D1:9400.006C: force feedback init failed [ 440.237453][T12238] program syz.0.3159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.316644][ T29] audit: type=1400 audit(1724794601.057:573): avc: denied { read } for pid=12239 comm="syz.3.3160" lport=56059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 440.404270][ T5273] usb 5-1: USB disconnect, device number 41 [ 440.578384][ T5300] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 440.728367][ T5339] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 440.758279][ T5300] usb 2-1: Using ep0 maxpacket: 16 [ 440.767492][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.798880][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.813813][ T5300] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 440.841490][ T5300] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 440.858191][ T5300] usb 2-1: Product: syz [ 440.862528][ T5300] usb 2-1: Manufacturer: syz [ 440.879165][ T5300] usb 2-1: config 0 descriptor?? [ 440.936223][ T5339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.938287][ T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 440.964337][ T5339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.976191][ T5339] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 440.986194][ T5339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.013819][ T5339] usb 1-1: config 0 descriptor?? [ 441.115345][T12262] netlink: 'syz.4.3171': attribute type 4 has an invalid length. [ 441.123527][T12262] netlink: 'syz.4.3171': attribute type 1 has an invalid length. [ 441.146205][T12262] netlink: 88156 bytes leftover after parsing attributes in process `syz.4.3171'. [ 441.146832][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 441.175879][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.193173][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.203840][ T8] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 441.214032][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.228538][ T8] usb 3-1: config 0 descriptor?? [ 441.229097][ T5273] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 441.334669][ T29] audit: type=1400 audit(1724794602.077:574): avc: denied { sqpoll } for pid=12263 comm="syz.4.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 441.373086][ T5300] kovaplus 0003:1E7D:2D50.006D: unknown main item tag 0xd [ 441.419204][ T5300] kovaplus 0003:1E7D:2D50.006D: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 441.468932][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 441.490829][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.503873][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.522744][ T5339] elecom 0003:056E:011C.006E: item fetching failed at offset 1/3 [ 441.534203][ T5273] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 441.551147][ T5339] elecom 0003:056E:011C.006E: probe with driver elecom failed with error -22 [ 441.560608][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.571864][ T5300] kovaplus 0003:1E7D:2D50.006D: couldn't init struct kovaplus_device [ 441.579885][ T5273] usb 4-1: config 0 descriptor?? [ 441.588458][ T5300] kovaplus 0003:1E7D:2D50.006D: couldn't install mouse [ 441.610569][ T5300] kovaplus 0003:1E7D:2D50.006D: probe with driver kovaplus failed with error -71 [ 441.626790][ T5300] usb 2-1: USB disconnect, device number 43 [ 441.748684][ T8] megaworld 0003:07B5:0312.006F: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 441.788209][ T8] megaworld 0003:07B5:0312.006F: no inputs found [ 441.861835][ T8] usb 1-1: USB disconnect, device number 42 [ 441.975213][ T5300] usb 3-1: USB disconnect, device number 40 [ 442.045012][ T5273] hkems 0003:2006:0118.0070: unknown main item tag 0x0 [ 442.064092][ T5273] hkems 0003:2006:0118.0070: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0 [ 442.075378][ T5273] hkems 0003:2006:0118.0070: no inputs found [ 442.084874][ T5273] hkems 0003:2006:0118.0070: force feedback init failed [ 442.303097][ T5273] usb 4-1: USB disconnect, device number 36 [ 442.550347][ T29] audit: type=1400 audit(1724794603.297:575): avc: denied { getopt } for pid=12276 comm="syz.0.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 442.787012][T12283] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3178'. [ 442.860901][T12286] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3181'. [ 442.999396][T12290] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 443.158371][ T5300] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 443.390413][ T5300] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 443.418876][ T5300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.427055][ T5300] usb 5-1: Product: syz [ 443.442277][ T29] audit: type=1400 audit(1724794604.187:576): avc: denied { execute } for pid=12303 comm="syz.0.3191" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 443.473534][ T5300] usb 5-1: Manufacturer: syz [ 443.478509][ T5238] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 443.491453][ T5238] Bluetooth: hci3: Injecting HCI hardware error event [ 443.501283][ T5238] Bluetooth: hci3: hardware error 0x00 [ 443.510724][ T5300] usb 5-1: SerialNumber: syz [ 443.521750][ T5300] usb 5-1: config 0 descriptor?? [ 443.551734][ T5300] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 443.628810][T12310] sp0: Synchronizing with TNC [ 443.766377][T12313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3195'. [ 443.990047][T12316] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 444.022536][ T5300] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 444.050272][T12316] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 444.109915][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 444.351474][ T5273] usb 5-1: USB disconnect, device number 42 [ 444.438437][ T29] audit: type=1800 audit(1724794605.177:577): pid=12328 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3202" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 444.634251][ T29] audit: type=1326 audit(1724794605.377:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a72979e79 code=0x7ffc0000 [ 444.671851][ T29] audit: type=1326 audit(1724794605.407:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a72979e79 code=0x7ffc0000 [ 444.705288][ T29] audit: type=1326 audit(1724794605.447:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f6a72979e79 code=0x7ffc0000 [ 444.742272][ T29] audit: type=1326 audit(1724794605.447:581): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a72979e79 code=0x7ffc0000 [ 444.814275][ T29] audit: type=1326 audit(1724794605.447:582): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a72979e79 code=0x7ffc0000 [ 444.898701][ T29] audit: type=1326 audit(1724794605.477:583): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f6a72979e79 code=0x7ffc0000 [ 444.985129][ T29] audit: type=1326 audit(1724794605.477:584): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a72979e79 code=0x7ffc0000 [ 445.059923][ T29] audit: type=1326 audit(1724794605.477:585): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a72979e79 code=0x7ffc0000 [ 445.544033][ T5238] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 446.524677][T12389] netlink: 644 bytes leftover after parsing attributes in process `syz.2.3232'. [ 446.608441][ T5300] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 446.808310][ T5300] usb 5-1: Using ep0 maxpacket: 32 [ 446.830946][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.876922][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.907835][ T5300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 446.948818][ T5300] usb 5-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 446.971636][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.999328][ T5300] usb 5-1: config 0 descriptor?? [ 447.078497][ T5273] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 447.258003][ T29] audit: type=1400 audit(1724794607.997:586): avc: denied { connect } for pid=12409 comm="syz.1.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 447.280184][ T5273] usb 3-1: Using ep0 maxpacket: 16 [ 447.282983][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.319976][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.347840][ T5273] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 447.372723][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.402946][ T5273] usb 3-1: config 0 descriptor?? [ 447.446301][ T5300] waltop 0003:172F:0502.0071: unknown main item tag 0x0 [ 447.464049][ T5300] waltop 0003:172F:0502.0071: unknown main item tag 0x0 [ 447.475415][ T5300] waltop 0003:172F:0502.0071: unknown main item tag 0x0 [ 447.500687][ T5300] waltop 0003:172F:0502.0071: unknown main item tag 0x0 [ 447.507754][ T5300] waltop 0003:172F:0502.0071: unknown main item tag 0x0 [ 447.526223][ T5300] waltop 0003:172F:0502.0071: unknown main item tag 0x0 [ 447.536118][ T5300] waltop 0003:172F:0502.0071: unknown main item tag 0x0 [ 447.538334][ T25] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 447.558778][ T5300] waltop 0003:172F:0502.0071: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.4-1/input0 [ 447.675737][ T5274] usb 5-1: USB disconnect, device number 43 [ 447.738465][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 447.752015][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.768318][ T25] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 447.783245][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.800446][ T25] usb 4-1: config 0 descriptor?? [ 447.898839][ T5339] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 447.911968][ T5273] playstation 0003:054C:05C4.0072: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 448.087564][ T5273] playstation 0003:054C:05C4.0072: Failed to retrieve feature with reportID 18: -71 [ 448.108757][ T5273] playstation 0003:054C:05C4.0072: Failed to retrieve DualShock4 pairing info: -71 [ 448.119814][ T5273] playstation 0003:054C:05C4.0072: Failed to get MAC address from DualShock4 [ 448.129793][ T5339] usb 2-1: Using ep0 maxpacket: 8 [ 448.137218][ T5273] playstation 0003:054C:05C4.0072: Failed to create dualshock4. [ 448.150785][ T5339] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 448.164495][ T5273] playstation 0003:054C:05C4.0072: probe with driver playstation failed with error -71 [ 448.174909][ T5339] usb 2-1: config 8 has no interface number 0 [ 448.184631][ T5339] usb 2-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 448.207597][ T5339] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.219910][ T5273] usb 3-1: USB disconnect, device number 41 [ 448.238147][ T5339] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 448.277171][ T25] sigmamicro 0003:1C4F:0059.0073: unknown main item tag 0x0 [ 448.296733][ T5339] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 448.313297][ T5339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.323884][ T25] sigmamicro 0003:1C4F:0059.0073: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.3-1/input0 [ 448.341598][ T5339] usb 2-1: Product: syz [ 448.345944][ T5339] usb 2-1: Manufacturer: syz [ 448.365297][ T5339] usb 2-1: SerialNumber: syz [ 448.646271][ T5339] vmk80xx 2-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 448.672749][ T5339] vmk80xx 2-1:8.188: probe with driver vmk80xx failed with error -22 [ 448.679241][ T5301] usb 4-1: USB disconnect, device number 37 [ 448.732816][ T5339] usb 2-1: USB disconnect, device number 44 [ 449.537211][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 449.537238][ T29] audit: type=1400 audit(1724794610.257:590): avc: denied { create } for pid=12448 comm="syz.3.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 449.633253][ T29] audit: type=1400 audit(1724794610.327:591): avc: denied { bind } for pid=12448 comm="syz.3.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 449.681037][ T29] audit: type=1400 audit(1724794610.337:592): avc: denied { write } for pid=12448 comm="syz.3.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 449.738300][ T5301] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 449.843869][T12459] xt_cgroup: invalid path, errno=-2 [ 449.953115][ T5301] usb 3-1: config index 0 descriptor too short (expected 22, got 18) [ 450.003152][ T5301] usb 3-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 450.031104][ T5301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.057445][ T5301] usb 3-1: Product: syz [ 450.061727][ T29] audit: type=1400 audit(1724794610.797:593): avc: denied { read } for pid=12463 comm="syz.0.3267" path="socket:[31406]" dev="sockfs" ino=31406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 450.121366][ T5301] usb 3-1: Manufacturer: syz [ 450.126137][ T5301] usb 3-1: SerialNumber: syz [ 450.156457][ T5301] usb 3-1: config 0 descriptor?? [ 450.372314][T12477] overlayfs: lower data-only dirs require metacopy support. [ 450.454640][ T5301] kaweth 3-1:0.0: Firmware present in device. [ 450.623179][ T5301] kaweth 3-1:0.0: Statistics collection: 0 [ 450.645485][ T5301] kaweth 3-1:0.0: Multicast filter limit: 0 [ 450.666331][ T5301] kaweth 3-1:0.0: MTU: 0 [ 450.679641][ T5301] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 450.839044][ T5301] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 450.885311][ T5301] usb 3-1: USB disconnect, device number 42 [ 451.006358][ T29] audit: type=1400 audit(1724794611.747:594): avc: denied { mount } for pid=12493 comm="syz.0.3282" name="/" dev="configfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 451.089060][ T29] audit: type=1400 audit(1724794611.797:595): avc: denied { mounton } for pid=12493 comm="syz.0.3282" path="/676/file0" dev="configfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 451.188536][ T29] audit: type=1400 audit(1724794611.897:596): avc: denied { unmount } for pid=5228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 451.385211][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.392029][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.918268][ T29] audit: type=1400 audit(1724794612.657:597): avc: denied { ioctl } for pid=12520 comm="syz.1.3293" path="socket:[30585]" dev="sockfs" ino=30585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 452.269588][ T5339] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 452.425697][T12541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3303'. [ 452.500147][ T5339] usb 5-1: Using ep0 maxpacket: 32 [ 452.511592][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.538279][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.570388][ T5339] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 452.605213][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.641612][ T5339] usb 5-1: config 0 descriptor?? [ 453.145559][ T5339] uclogic 0003:5543:0781.0074: unknown main item tag 0x0 [ 453.189590][ T5339] uclogic 0003:5543:0781.0074: No inputs registered, leaving [ 453.231320][ T5339] uclogic 0003:5543:0781.0074: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 453.255034][T12565] PM: Enabling pm_trace changes system date and time during resume. [ 453.255034][T12565] PM: Correct system time has to be restored manually after resume. [ 453.295915][T12567] tipc: Started in network mode [ 453.315268][T12567] tipc: Node identity e0000002, cluster identity 4711 [ 453.346856][T12567] tipc: Enabling of bearer rejected, failed to enable media [ 453.530579][ T5300] usb 5-1: USB disconnect, device number 44 [ 453.988271][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 454.055366][T12591] mkiss: ax0: crc mode is auto. [ 454.200529][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.230011][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.295718][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 454.310652][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 454.345527][ T9] usb 2-1: SerialNumber: syz [ 454.629967][T12609] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3336'. [ 454.636522][ T9] usb 2-1: 0:2 : does not exist [ 454.667382][T12609] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 454.726441][ T9] usb 2-1: USB disconnect, device number 45 [ 454.888645][ T5273] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 455.080883][ T5273] usb 4-1: Using ep0 maxpacket: 32 [ 455.106304][ T5273] usb 4-1: unable to get BOS descriptor or descriptor too short [ 455.129571][ T5273] usb 4-1: config 127 has an invalid interface number: 25 but max is 1 [ 455.155973][ T5273] usb 4-1: config 127 has an invalid interface number: 4 but max is 1 [ 455.183220][ T5273] usb 4-1: config 127 has no interface number 0 [ 455.198200][ T5273] usb 4-1: config 127 has no interface number 1 [ 455.214938][ T5273] usb 4-1: config 127 interface 25 has no altsetting 0 [ 455.225163][ T5273] usb 4-1: config 127 interface 4 has no altsetting 0 [ 455.259489][ T5273] usb 4-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 455.278192][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.296628][ T5273] usb 4-1: Product: syz [ 455.317500][ T5273] usb 4-1: Manufacturer: syz [ 455.327237][ T5273] usb 4-1: SerialNumber: syz [ 455.621360][ T5273] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 455.701844][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3349'. [ 455.899011][T12643] tipc: MTU too low for tipc bearer [ 456.278283][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 456.478940][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 456.496192][ T9] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 456.517573][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.539211][ T9] usb 5-1: config 0 descriptor?? [ 456.562013][ T9] as10x_usb: device has been detected [ 456.569955][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 456.600212][ T5273] ueagle-atm 4-1:127.25: usbatm_usb_probe: bind failed: -19! [ 456.647357][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 456.647627][ T5273] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 456.704461][ T5273] ueagle-atm 4-1:127.4: usbatm_usb_probe: bind failed: -19! [ 456.748977][ T5273] usb 4-1: USB disconnect, device number 38 [ 456.770653][ T9] as10x_usb: error during firmware upload part1 [ 456.793963][ T9] Registered device nBox DVB-T Dongle [ 456.803956][ T9] usb 5-1: USB disconnect, device number 45 [ 456.853440][ T9] Unregistered device nBox DVB-T Dongle [ 456.857995][ T9] as10x_usb: device has been disconnected [ 456.898576][T12420] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 457.018292][ T5300] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 457.118523][T12420] usb 2-1: Using ep0 maxpacket: 16 [ 457.132598][T12420] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 457.142930][T12420] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 457.152029][T12420] usb 2-1: Product: syz [ 457.156602][T12420] usb 2-1: Manufacturer: syz [ 457.164182][T12420] usb 2-1: SerialNumber: syz [ 457.179611][T12420] usb 2-1: config 0 descriptor?? [ 457.211482][ T5300] usb 3-1: Using ep0 maxpacket: 16 [ 457.234024][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.247457][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.259386][ T5300] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 457.269371][ T5300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.279649][T12657] orangefs_mount: mount request failed with -4 [ 457.299963][ T5300] usb 3-1: config 0 descriptor?? [ 457.428873][ T5301] usb 2-1: USB disconnect, device number 46 [ 457.780377][ T5300] razer 0003:1532:010D.0075: item fetching failed at offset 4/6 [ 457.813850][ T5300] razer 0003:1532:010D.0075: probe with driver razer failed with error -22 [ 457.966574][ T5301] usb 3-1: USB disconnect, device number 43 [ 458.148736][ T5300] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 458.218477][T12420] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 458.307795][ T29] audit: type=1400 audit(1724794619.047:598): avc: denied { setattr } for pid=12686 comm="syz.3.3375" name="tun" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 458.366745][ T5300] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.397137][ T5300] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.431032][ T5300] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 458.459803][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 458.467897][ T5300] usb 1-1: SerialNumber: syz [ 458.468161][T12420] usb 5-1: Using ep0 maxpacket: 8 [ 458.506923][T12420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.525945][T12420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.561736][T12420] usb 5-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 458.577753][T12420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.598756][T12420] usb 5-1: config 0 descriptor?? [ 458.779405][ T5300] usb 1-1: 0:2 : does not exist [ 458.858982][ T5300] usb 1-1: USB disconnect, device number 43 [ 459.075369][T12420] wacom 0003:056A:00E5.0076: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.4-1/input0 [ 459.282813][ T8] usb 5-1: USB disconnect, device number 46 [ 459.448060][T12715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3388'. [ 459.550394][T12718] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3390'. [ 459.561652][T12718] openvswitch: netlink: Key type 133 is out of range max 32 [ 460.188255][ T8] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 460.386181][ T29] audit: type=1400 audit(1724794621.127:599): avc: denied { getopt } for pid=12743 comm="syz.0.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 460.405600][T12746] nbd: couldn't find device at index 1024 [ 460.412881][T12420] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 460.423485][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 460.448330][ T8] usb 4-1: config 0 has no interface number 0 [ 460.464900][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 460.507004][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.548310][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 460.557448][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.598401][T12420] usb 2-1: Using ep0 maxpacket: 16 [ 460.606074][ T8] usb 4-1: config 0 descriptor?? [ 460.619467][T12420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.637217][T12420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.637891][ T8] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 460.652096][T12420] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 460.698335][T12420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.727621][T12420] usb 2-1: config 0 descriptor?? [ 460.868761][ T5339] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 460.955698][ T5273] usb 4-1: USB disconnect, device number 39 [ 460.994167][ T5273] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 461.091479][ T5339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.109155][ T5339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.121454][ T5339] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 461.134126][ T5339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.150041][ T5339] usb 3-1: config 0 descriptor?? [ 461.197806][ T8] IPVS: starting estimator thread 0... [ 461.217716][T12420] hid-rmi 0003:17EF:6085.0077: item 0 1 0 9 parsing failed [ 461.227800][T12420] hid-rmi 0003:17EF:6085.0077: parse failed [ 461.247639][T12420] hid-rmi 0003:17EF:6085.0077: probe with driver hid-rmi failed with error -22 [ 461.308276][T12763] IPVS: using max 14 ests per chain, 33600 per kthread [ 461.513898][ T8] usb 2-1: USB disconnect, device number 47 [ 461.607528][ T5339] waltop 0003:172F:0032.0078: unknown main item tag 0x0 [ 461.630919][ T5339] waltop 0003:172F:0032.0078: unknown main item tag 0x0 [ 461.654810][ T5339] waltop 0003:172F:0032.0078: unknown main item tag 0x0 [ 461.671086][ T5339] waltop 0003:172F:0032.0078: unknown main item tag 0x0 [ 461.681244][ T5339] waltop 0003:172F:0032.0078: unknown main item tag 0x0 [ 461.689337][ T5339] waltop 0003:172F:0032.0078: unknown main item tag 0x0 [ 461.697458][ T5339] waltop 0003:172F:0032.0078: unknown main item tag 0x0 [ 461.706302][ T5339] waltop 0003:172F:0032.0078: unknown main item tag 0x0 [ 461.720603][ T5339] waltop 0003:172F:0032.0078: unknown main item tag 0x0 [ 461.730939][ T5339] waltop 0003:172F:0032.0078: unknown main item tag 0x0 [ 461.741852][ T5339] waltop 0003:172F:0032.0078: unknown main item tag 0x0 [ 461.775520][ T5339] waltop 0003:172F:0032.0078: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.2-1/input0 [ 461.807495][ T5339] usb 3-1: USB disconnect, device number 44 [ 462.169031][ T29] audit: type=1400 audit(1724794622.907:600): avc: denied { write } for pid=12778 comm="syz.4.3419" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 462.218399][ T29] audit: type=1400 audit(1724794622.917:601): avc: denied { open } for pid=12778 comm="syz.4.3419" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 462.321821][ T29] audit: type=1326 audit(1724794623.067:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12780 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4b379e79 code=0x7ffc0000 [ 462.395991][ T29] audit: type=1326 audit(1724794623.067:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12780 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4b379e79 code=0x7ffc0000 [ 462.440018][ T29] audit: type=1326 audit(1724794623.147:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12780 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d4b378810 code=0x7ffc0000 [ 462.464669][ T29] audit: type=1326 audit(1724794623.157:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12780 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d4b378810 code=0x7ffc0000 [ 462.546252][ T29] audit: type=1326 audit(1724794623.157:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12780 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4b379e79 code=0x7ffc0000 [ 462.592253][ T29] audit: type=1326 audit(1724794623.157:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12780 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4b379e79 code=0x7ffc0000 [ 463.998396][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3444'. [ 464.614946][T12862] tipc: Enabling of bearer rejected, failed to enable media [ 464.795855][T12864] netlink: 'syz.2.3459': attribute type 1 has an invalid length. [ 464.826772][T12864] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.3459'. [ 464.849263][T12864] netlink: 'syz.2.3459': attribute type 1 has an invalid length. [ 465.446107][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 465.446132][ T29] audit: type=1400 audit(1724794626.187:612): avc: denied { accept } for pid=12888 comm="syz.4.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 465.618366][ T5273] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 465.658697][ T8] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 465.820613][ T5273] usb 4-1: Using ep0 maxpacket: 8 [ 465.837957][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.858169][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.873608][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 465.878275][ T5273] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 465.893577][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.906670][ T5273] usb 4-1: config 0 descriptor?? [ 465.915450][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 465.942902][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 465.966340][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 465.987298][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 466.013092][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.044586][ T8] usb 3-1: config 0 descriptor?? [ 466.308752][ T8] hdpvr 3-1:0.0: firmware version 0x0 dated [ 466.337066][ T8] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 466.405647][ T5273] greenasia 0003:0E8F:0012.0079: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 466.429578][ T5273] greenasia 0003:0E8F:0012.0079: no inputs found [ 466.788685][ T5273] usb 4-1: USB disconnect, device number 40 [ 466.826640][ T8] hdpvr 3-1:0.0: Could not setup controls [ 466.840145][ T8] hdpvr 3-1:0.0: registering videodev failed [ 466.892065][ T8] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 466.948290][ T8] usb 3-1: USB disconnect, device number 45 [ 467.008257][ T5301] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 467.208668][ T5301] usb 5-1: Using ep0 maxpacket: 8 [ 467.236048][ T5301] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 467.268202][ T5301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.277206][ T5301] usb 5-1: Product: syz [ 467.297050][ T5301] usb 5-1: Manufacturer: syz [ 467.303060][ T5301] usb 5-1: SerialNumber: syz [ 467.319667][ T5301] usb 5-1: config 0 descriptor?? [ 467.349912][ T5301] gspca_main: sq905-2.14.0 probing 2770:9120 [ 467.878498][T12420] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 468.029773][ T5301] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 468.047512][ T5301] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 468.076039][ T5301] usb 5-1: USB disconnect, device number 47 [ 468.088811][T12420] usb 4-1: Using ep0 maxpacket: 8 [ 468.112218][T12420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.158713][T12420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.227796][T12420] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 468.258414][T12420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.303495][T12420] usb 4-1: config 0 descriptor?? [ 468.738316][ T5301] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 468.754592][T12420] lenovo 0003:17EF:6067.007A: unknown main item tag 0x0 [ 468.798468][T12420] lenovo 0003:17EF:6067.007A: item fetching failed at offset 5/7 [ 468.822928][T12420] lenovo 0003:17EF:6067.007A: hid_parse failed [ 468.831622][T12420] lenovo 0003:17EF:6067.007A: probe with driver lenovo failed with error -22 [ 468.931400][ T5301] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 468.961332][ T5301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.987692][ T8] usb 4-1: USB disconnect, device number 41 [ 469.011878][ T5301] usb 1-1: config 0 descriptor?? [ 469.041776][ T5301] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 469.180405][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3509'. [ 469.712519][ T5301] gspca_cpia1: usb_control_msg 01, error -71 [ 469.738309][ T5301] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 469.757929][ T5301] usb 1-1: USB disconnect, device number 44 [ 470.038495][T12420] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 470.190338][T12998] netlink: 'syz.4.3523': attribute type 1 has an invalid length. [ 470.200086][T12998] netlink: 9388 bytes leftover after parsing attributes in process `syz.4.3523'. [ 470.252718][T12420] usb 4-1: config index 0 descriptor too short (expected 2340, got 36) [ 470.278589][T12420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.300158][T12420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.326060][T12420] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 470.361120][T12420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.401414][T12420] usb 4-1: config 0 descriptor?? [ 470.586712][T13008] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 470.618607][T13008] overlayfs: missing 'lowerdir' [ 470.902388][T12420] a4tech 0003:09DA:022B.007B: unknown main item tag 0x0 [ 470.948667][T12420] a4tech 0003:09DA:022B.007B: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.3-1/input0 [ 471.121389][ T29] audit: type=1400 audit(1724794631.867:613): avc: denied { accept } for pid=13021 comm="syz.1.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 471.344140][ T5273] usb 4-1: USB disconnect, device number 42 [ 471.388231][ T5301] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 471.395762][T13031] netlink: 'syz.1.3539': attribute type 1 has an invalid length. [ 471.407568][T13031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.415080][T13031] IPv6: NLM_F_CREATE should be set when creating new route [ 471.592126][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 471.624669][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.653723][ T5301] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 471.673517][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.694976][ T5301] usb 3-1: config 0 descriptor?? [ 471.784203][T13041] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 472.188966][ T5301] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 472.207979][ T5301] elecom 0003:056E:00FE.007C: unknown main item tag 0x6 [ 472.236889][ T5301] elecom 0003:056E:00FE.007C: unknown main item tag 0x5 [ 472.248757][ T5301] elecom 0003:056E:00FE.007C: unknown main item tag 0x4 [ 472.255817][ T5301] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 472.312992][ T5301] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 472.336088][ T5301] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 472.358406][ T5301] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 472.392615][ T5301] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 472.418430][ T5301] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 472.425753][ T5301] elecom 0003:056E:00FE.007C: unknown global tag 0xd [ 472.463750][ T5301] elecom 0003:056E:00FE.007C: item 0 4 1 13 parsing failed [ 472.497091][ T5301] elecom 0003:056E:00FE.007C: probe with driver elecom failed with error -22 [ 472.556529][ T5301] usb 3-1: USB disconnect, device number 46 [ 473.522750][T13083] xt_hashlimit: size too large, truncated to 1048576 [ 473.653593][ T29] audit: type=1400 audit(1724794634.387:614): avc: denied { create } for pid=13084 comm="syz.2.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 473.690779][T13084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.739610][ T29] audit: type=1400 audit(1724794634.437:615): avc: denied { write } for pid=13084 comm="syz.2.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 474.074066][ T29] audit: type=1400 audit(1724794634.817:616): avc: denied { connect } for pid=13071 comm="syz.3.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 475.148660][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3579'. [ 475.279152][ T5301] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 475.492856][ T5301] usb 4-1: Using ep0 maxpacket: 32 [ 475.501583][ T5301] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 475.523612][ T5301] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 475.556497][ T5301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 475.569795][ T29] audit: type=1400 audit(1724794636.317:617): avc: denied { create } for pid=13128 comm="syz.0.3583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 475.570486][ T5301] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 475.589569][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.616942][ T5301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 475.627836][ T5301] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 475.648334][ T29] audit: type=1400 audit(1724794636.357:618): avc: denied { write } for pid=13128 comm="syz.0.3583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 475.658547][ T5301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 475.738361][ T5301] usb 4-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 475.792229][ T5301] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 475.815985][ T5301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.856706][ T5301] usb 4-1: Product: syz [ 475.870472][ T5301] usb 4-1: Manufacturer: syz [ 475.875497][ T5301] usb 4-1: SerialNumber: syz [ 475.893825][ T5301] usb 4-1: config 0 descriptor?? [ 475.910828][T13118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 476.209309][ T5301] cxacru 4-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 476.243284][T13149] cxacru 4-1:0.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 476.260481][T13145] nftables ruleset with unbound chain [ 476.272681][ T5301] usb 4-1: USB disconnect, device number 43 [ 476.279179][T13149] cxacru 4-1:0.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 476.534493][ T8] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 476.759365][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.791424][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.812323][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.840112][ T8] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 476.866043][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.907916][ T8] usb 5-1: config 0 descriptor?? [ 477.364894][ T8] hid-udraw 0003:20D6:CB17.007D: unbalanced delimiter at end of report description [ 477.422700][ T8] hid-udraw 0003:20D6:CB17.007D: parse failed [ 477.422882][ T8] hid-udraw 0003:20D6:CB17.007D: probe with driver hid-udraw failed with error -22 [ 477.597523][T12420] usb 5-1: USB disconnect, device number 48 [ 477.695642][T13172] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3603'. [ 477.695682][T13172] netlink: 'syz.0.3603': attribute type 1 has an invalid length. [ 477.882408][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3604'. [ 478.141936][ T29] audit: type=1400 audit(1724794638.877:619): avc: denied { setattr } for pid=13179 comm="syz.0.3607" name="RAWv6" dev="sockfs" ino=33687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 479.975537][T13226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3629'. [ 480.468540][T13239] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 481.303616][ T5273] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 481.508522][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 481.524770][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.556698][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.597598][ T5273] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 481.610985][T13264] xt_NFQUEUE: number of total queues is 0 [ 481.617879][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.641330][ T5273] usb 1-1: config 0 descriptor?? [ 482.103497][ T5273] steelseries 0003:1038:1410.007E: unknown main item tag 0x0 [ 482.130199][ T5273] steelseries 0003:1038:1410.007E: report_id 0 is invalid [ 482.157988][ T5273] steelseries 0003:1038:1410.007E: item 0 0 1 8 parsing failed [ 482.191854][ T5273] steelseries 0003:1038:1410.007E: parse failed [ 482.220776][ T5273] steelseries 0003:1038:1410.007E: probe with driver steelseries failed with error -22 [ 482.339438][ T5306] usb 1-1: USB disconnect, device number 45 [ 482.956357][ T29] audit: type=1400 audit(1724794643.697:620): avc: denied { read } for pid=13299 comm="syz.1.3662" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 483.569410][ T5273] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 483.739753][T13323] smc: net device erspan0 applied user defined pnetid SYZ2 [ 483.791007][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.820616][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.875987][ T5273] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 483.907304][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.938504][ T5273] usb 3-1: config 0 descriptor?? [ 483.982554][ T29] audit: type=1400 audit(1724794644.727:621): avc: denied { write } for pid=13330 comm="syz.1.3675" path="socket:[34168]" dev="sockfs" ino=34168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 484.094766][T13335] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3677'. [ 484.104995][T13335] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3677'. [ 484.403981][ T5273] cougar 0003:060B:700A.007F: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.2-1/input0 [ 484.518897][ T25] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 484.537459][T13348] mkiss: ax0: crc mode is auto. [ 484.615852][ T5300] usb 3-1: USB disconnect, device number 47 [ 484.708431][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 484.723990][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.744904][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.806773][ T25] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 484.827113][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.851288][ T25] usb 2-1: config 0 descriptor?? [ 484.895779][T13356] veth1_macvtap: left promiscuous mode [ 485.020707][T13356] veth1_macvtap: entered promiscuous mode [ 485.300799][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 485.346729][ T25] corsair-psu 0003:1B1C:1C1E.0080: item fetching failed at offset 2/5 [ 485.397558][ T25] corsair-psu 0003:1B1C:1C1E.0080: probe with driver corsair-psu failed with error -22 [ 485.701469][ T5306] usb 2-1: USB disconnect, device number 48 [ 485.748616][ T5300] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 485.939208][ T5300] usb 5-1: Using ep0 maxpacket: 16 [ 485.952164][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.973155][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.990542][ T5300] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 486.004715][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.040158][ T5300] usb 5-1: config 0 descriptor?? [ 486.498534][T12420] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 486.537692][ T5300] input: HID 05ac:8240 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8240.0081/input/input36 [ 486.648466][ T5300] appleir 0003:05AC:8240.0081: input,hiddev0,hidraw0: USB HID v0.20 Device [HID 05ac:8240] on usb-dummy_hcd.4-1/input0 [ 486.702207][T12420] usb 3-1: Using ep0 maxpacket: 8 [ 486.722883][ T5300] usb 5-1: USB disconnect, device number 49 [ 486.731549][T12420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.756026][T12420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.774833][T12420] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 486.805913][T12420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.846402][T12420] usb 3-1: config 0 descriptor?? [ 487.333444][T12420] wacom 0003:056A:0317.0082: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 487.363890][T12420] wacom 0003:056A:0317.0082: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.2-1/input0 [ 487.402436][T12420] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0317.0082/input/input37 [ 487.589417][T12420] usb 3-1: USB disconnect, device number 48 [ 487.728322][ T5300] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 487.918596][ T5300] usb 2-1: Using ep0 maxpacket: 8 [ 487.935813][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.958773][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.969834][ T8] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 487.977507][ T5300] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 487.987509][ T5300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.999854][ T5300] usb 2-1: config 0 descriptor?? [ 488.168439][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 488.194468][ T8] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 488.204548][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.227500][ T8] usb 5-1: config 0 descriptor?? [ 488.238875][ T25] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 488.255569][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 488.453610][ T25] usb 1-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 488.463350][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.478533][ T25] usb 1-1: Product: syz [ 488.483829][ T25] usb 1-1: Manufacturer: syz [ 488.490476][ T25] usb 1-1: SerialNumber: syz [ 488.493665][ T5300] logitech 0003:046D:C20E.0083: rdesc size test failed for formula gp [ 488.510479][ T25] usb 1-1: config 0 descriptor?? [ 488.526165][ T5300] logitech 0003:046D:C20E.0083: unbalanced delimiter at end of report description [ 488.527166][ T25] r8712u: register rtl8712_netdev_ops to netdev_ops [ 488.537865][ T5300] logitech 0003:046D:C20E.0083: parse failed [ 488.549466][ T25] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 488.568387][T12420] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 488.568912][ T5300] logitech 0003:046D:C20E.0083: probe with driver logitech failed with error -22 [ 488.770070][T12420] usb 3-1: Using ep0 maxpacket: 32 [ 488.783765][ T8] usb 2-1: USB disconnect, device number 49 [ 488.788401][T12420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.803401][T12420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.813926][T12420] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 488.824448][T12420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.837604][T12420] usb 3-1: config 0 descriptor?? [ 488.912441][ T5273] usb 5-1: USB disconnect, device number 50 [ 488.960545][ T25] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 488.967320][ T25] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 488.985383][ T25] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 489.178348][ T29] audit: type=1400 audit(1724794649.917:622): avc: denied { bind } for pid=13435 comm="syz.3.3726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 489.292429][T12420] logitech 0003:046D:C50C.0084: unknown main item tag 0x0 [ 489.315343][T12420] logitech 0003:046D:C50C.0084: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 489.377794][ T8] usb 1-1: USB disconnect, device number 46 [ 489.661877][ T5300] usb 3-1: USB disconnect, device number 49 [ 489.728289][T13444] sp1: Synchronizing with TNC [ 490.252002][T13460] netlink: 'syz.4.3738': attribute type 30 has an invalid length. [ 490.907394][T13484] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3750'. [ 490.942810][T13484] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 491.779320][ T29] audit: type=1400 audit(1724794652.527:623): avc: denied { connect } for pid=13511 comm="syz.2.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 491.910415][T13520] netlink: 'syz.3.3768': attribute type 1 has an invalid length. [ 492.140602][T13527] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3772'. [ 492.189116][T13527] openvswitch: netlink: Actions may not be safe on all matching packets [ 492.798341][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 492.825516][ T29] audit: type=1400 audit(1724794653.567:624): avc: denied { watch_reads } for pid=13555 comm="syz.1.3785" path="/723" dev="tmpfs" ino=3652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 493.046532][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 493.068507][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.099898][ T9] usb 1-1: Product: syz [ 493.104155][ T9] usb 1-1: Manufacturer: syz [ 493.128163][ T9] usb 1-1: SerialNumber: syz [ 493.167548][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 493.177632][ T29] audit: type=1401 audit(1724794653.917:625): op=setxattr invalid_context="system_u:object_r:newrole_exec_t:s0" [ 493.293478][ T5300] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 493.714694][ T29] audit: type=1400 audit(1724794654.457:626): avc: denied { execute } for pid=13578 comm="syz.3.3796" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 495.143651][T13598] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.3804'. [ 495.172110][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3803'. [ 495.214843][T13598] openvswitch: netlink: Actions may not be safe on all matching packets [ 495.224031][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3803'. [ 495.597507][T13602] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3807'. [ 496.448250][T12420] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 496.688229][T12420] usb 2-1: Using ep0 maxpacket: 16 [ 496.722878][T12420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.778576][T12420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.864270][T12420] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 496.911764][T12420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.001739][T12420] usb 2-1: config 0 descriptor?? [ 497.600499][T12420] uclogic 0003:28BD:0042.0085: interface is invalid, ignoring [ 498.078940][T12420] usb 2-1: USB disconnect, device number 50 [ 508.629782][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 508.647117][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 508.656412][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 508.667497][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 508.676377][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 508.685852][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 509.531247][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 509.559032][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 509.575728][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 509.589988][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 509.609780][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 509.618460][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 510.337818][ T5238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 510.352301][ T5238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 510.364806][ T5238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 510.376873][ T5238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 510.386937][ T5238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 510.396705][ T5238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 510.748730][ T5238] Bluetooth: hci6: command tx timeout [ 511.429469][ T5236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 511.441933][ T5236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 511.452210][ T5236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 511.461716][ T5236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 511.498520][ T5236] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 511.509358][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 511.708573][ T5236] Bluetooth: hci7: command tx timeout [ 511.899789][ T5238] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 511.912060][ T5238] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 511.921539][ T5238] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 511.932537][ T5238] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 511.941506][ T5238] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 511.958541][ T5238] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 512.512854][ T5238] Bluetooth: hci8: command tx timeout [ 512.828612][ T5238] Bluetooth: hci6: command tx timeout [ 513.454895][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.462081][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.628661][ T5238] Bluetooth: hci9: command tx timeout [ 513.790569][ T5238] Bluetooth: hci7: command tx timeout [ 514.028374][ T5238] Bluetooth: hci10: command tx timeout [ 514.589584][ T5238] Bluetooth: hci8: command tx timeout [ 514.908725][ T5238] Bluetooth: hci6: command tx timeout [ 515.708412][ T5238] Bluetooth: hci9: command tx timeout [ 515.873845][ T5238] Bluetooth: hci7: command tx timeout [ 516.118448][ T5238] Bluetooth: hci10: command tx timeout [ 516.669064][ T5238] Bluetooth: hci8: command tx timeout [ 516.988811][ T5238] Bluetooth: hci6: command tx timeout [ 517.789696][ T5238] Bluetooth: hci9: command tx timeout [ 517.843470][ T5300] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 517.950428][ T5238] Bluetooth: hci7: command tx timeout [ 518.188521][ T5238] Bluetooth: hci10: command tx timeout [ 518.748468][ T5238] Bluetooth: hci8: command tx timeout [ 519.870593][ T5238] Bluetooth: hci9: command tx timeout [ 520.269138][ T5238] Bluetooth: hci10: command tx timeout [ 526.616366][ T5300] ath9k_htc: Failed to initialize the device [ 538.464486][T13149] cxacru 4-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 569.101904][T13665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 569.113667][T13665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 569.128540][T13665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 569.156320][T13665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 569.166145][T13665] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 569.178218][T13665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 569.963723][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 569.975858][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 569.993170][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.006389][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 570.018424][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 570.026138][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 570.772241][T13665] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 570.783946][T13665] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 570.794541][T13665] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 570.805380][T13665] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 570.821599][T13665] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 570.829803][T13665] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 571.228711][T13665] Bluetooth: hci0: command tx timeout [ 571.680405][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 571.699670][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 571.711609][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 571.722117][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 571.731639][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 571.750470][T13674] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 572.073308][T13665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 572.092436][T13665] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 572.112678][T13665] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 572.123659][T13665] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 572.132905][T13665] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 572.145486][T13665] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 572.205931][T13674] Bluetooth: hci1: command tx timeout [ 572.898711][T13674] Bluetooth: hci2: command tx timeout [ 573.312519][T13674] Bluetooth: hci0: command tx timeout [ 573.788835][T13674] Bluetooth: hci3: command tx timeout [ 574.192340][T13674] Bluetooth: hci5: command tx timeout [ 574.281777][T13674] Bluetooth: hci1: command tx timeout [ 574.994544][T13674] Bluetooth: hci2: command tx timeout [ 575.007677][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 575.019809][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.391598][T13674] Bluetooth: hci0: command tx timeout [ 575.872497][T13674] Bluetooth: hci3: command tx timeout [ 576.268606][T13674] Bluetooth: hci5: command tx timeout [ 576.354150][T13674] Bluetooth: hci1: command tx timeout [ 577.076293][T13674] Bluetooth: hci2: command tx timeout [ 577.468614][T13674] Bluetooth: hci0: command tx timeout [ 577.948568][T13674] Bluetooth: hci3: command tx timeout [ 578.349669][T13674] Bluetooth: hci5: command tx timeout [ 578.428332][T13674] Bluetooth: hci1: command tx timeout [ 579.158200][T13674] Bluetooth: hci2: command tx timeout [ 580.028853][T13674] Bluetooth: hci3: command tx timeout [ 580.431010][T13674] Bluetooth: hci5: command tx timeout [ 631.199430][T13686] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 631.259624][T13686] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 631.275980][T13686] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 631.301734][ T5238] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 631.310794][ T5238] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 631.319702][ T5238] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 631.365785][T13681] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 631.382627][T13681] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 631.408390][T13681] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 631.419691][T13681] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 631.471300][T13681] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 631.483322][T13681] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 631.702490][T13686] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 631.716500][T13686] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 631.731085][T13686] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 631.744375][T13686] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 631.768533][T13686] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 631.776751][T13686] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 632.749108][T13686] Bluetooth: hci6: command 0x0406 tx timeout [ 632.755246][T13686] Bluetooth: hci7: command 0x0406 tx timeout [ 632.762843][T13681] Bluetooth: hci8: command 0x0406 tx timeout [ 632.829190][T13681] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 632.844025][T13681] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 632.853566][T13681] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 632.864843][T13681] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 632.876341][T13681] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 632.884853][T13681] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 633.093273][ T5238] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 633.110467][ T5238] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 633.121978][ T5238] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 633.137354][ T5238] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 633.150111][ T5238] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 633.160211][ T5238] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 633.388569][T13686] Bluetooth: hci11: command tx timeout [ 633.550635][T13686] Bluetooth: hci12: command tx timeout [ 633.870249][T13686] Bluetooth: hci13: command tx timeout [ 635.468508][T13686] Bluetooth: hci11: command tx timeout [ 635.628438][T13686] Bluetooth: hci12: command tx timeout [ 635.951996][T13696] Bluetooth: hci13: command tx timeout [ 636.069762][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.076160][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 637.557064][T13696] Bluetooth: hci11: command tx timeout [ 637.725454][T13696] Bluetooth: hci12: command tx timeout [ 637.788651][T13696] Bluetooth: hci9: command 0x0406 tx timeout [ 637.794881][T13696] Bluetooth: hci10: command 0x0406 tx timeout [ 638.033249][T13697] Bluetooth: hci13: command tx timeout [ 639.628494][T13697] Bluetooth: hci11: command tx timeout [ 639.789591][T13697] Bluetooth: hci12: command tx timeout [ 640.108499][T13697] Bluetooth: hci13: command tx timeout [ 657.468585][ T30] INFO: task kworker/u8:9:2494 blocked for more than 143 seconds. [ 657.476480][ T30] Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 657.577481][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 657.638118][ T30] task:kworker/u8:9 state:D stack:23808 pid:2494 tgid:2494 ppid:2 flags:0x00004000 [ 657.700989][ T30] Workqueue: events_unbound linkwatch_event [ 657.770137][ T30] Call Trace: [ 657.773498][ T30] [ 657.776468][ T30] __schedule+0xe37/0x5490 [ 657.875250][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 657.915160][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 657.938099][ T30] ? __pfx___schedule+0x10/0x10 [ 657.943052][ T30] ? schedule+0x298/0x350 [ 657.947441][ T30] ? __pfx_lock_release+0x10/0x10 [ 657.963272][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 657.976897][ T30] ? __mutex_trylock_common+0x78/0x250 [ 657.982873][ T30] schedule+0xe7/0x350 [ 657.987100][ T30] schedule_preempt_disabled+0x13/0x30 [ 657.995456][ T30] __mutex_lock+0x5b8/0x9c0 [ 658.009095][ T30] ? linkwatch_event+0x51/0xc0 [ 658.013971][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 658.038047][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 658.043167][ T30] ? __pfx_lock_release+0x10/0x10 [ 658.054247][ T30] ? linkwatch_event+0x51/0xc0 [ 658.078224][ T30] ? rtnl_lock+0x9/0x20 [ 658.082475][ T30] linkwatch_event+0x51/0xc0 [ 658.087136][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 658.105451][ T30] ? rcu_is_watching+0x12/0xc0 [ 658.115915][ T30] process_one_work+0x9c5/0x1b40 [ 658.137729][ T30] ? __pfx_batadv_nc_worker+0x10/0x10 [ 658.148625][ T30] ? __pfx_process_one_work+0x10/0x10 [ 658.154094][ T30] ? assign_work+0x1a0/0x250 [ 658.168593][ T30] worker_thread+0x6c8/0xed0 [ 658.173282][ T30] ? __pfx_worker_thread+0x10/0x10 [ 658.179404][ T30] kthread+0x2c1/0x3a0 [ 658.183604][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 658.198945][ T30] ? __pfx_kthread+0x10/0x10 [ 658.203708][ T30] ret_from_fork+0x45/0x80 [ 658.225592][ T30] ? __pfx_kthread+0x10/0x10 [ 658.239067][ T30] ret_from_fork_asm+0x1a/0x30 [ 658.243934][ T30] [ 658.247042][ T30] INFO: task syz.3.3814:13617 blocked for more than 143 seconds. [ 658.278226][ T30] Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 658.285940][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 658.345418][ T30] task:syz.3.3814 state:D stack:25328 pid:13617 tgid:13616 ppid:5224 flags:0x00004006 [ 658.393865][ T30] Call Trace: [ 658.397216][ T30] [ 658.408042][ T30] __schedule+0xe37/0x5490 [ 658.412569][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 658.417826][ T30] ? hlock_class+0x4e/0x130 [ 658.436391][ T30] ? __pfx___schedule+0x10/0x10 [ 658.446287][ T30] ? schedule+0x298/0x350 [ 658.451097][ T30] ? __pfx_lock_release+0x10/0x10 [ 658.456520][ T30] ? mark_lock+0xb5/0xc60 [ 658.469994][ T30] ? __pfx_mark_lock+0x10/0x10 [ 658.474860][ T30] schedule+0xe7/0x350 [ 658.482774][ T30] schedule_timeout+0x258/0x2a0 [ 658.487713][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 658.500934][ T30] ? mark_held_locks+0x9f/0xe0 [ 658.505784][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 658.536341][ T30] __wait_for_common+0x3de/0x5f0 [ 658.547750][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 658.568366][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 658.573926][ T30] ? mark_held_locks+0x9f/0xe0 [ 658.585613][ T30] __flush_work+0x776/0xc30 [ 658.598076][ T30] ? __pfx___flush_work+0x10/0x10 [ 658.603193][ T30] ? _raw_spin_lock_irqsave+0x42/0x60 [ 658.611816][ T30] ? lock_timer_base+0x5d/0x220 [ 658.616738][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 658.635892][ T30] ? __pfx___might_resched+0x10/0x10 [ 658.647364][ T30] ? mark_held_locks+0x9f/0xe0 [ 658.652889][ T30] nf_flow_table_cleanup+0x2d0/0x3d0 [ 658.678133][ T30] ? __pfx_nf_flow_table_cleanup+0x10/0x10 [ 658.684059][ T30] ? nf_tables_flowtable_event+0x35/0x480 [ 658.702857][ T30] ? __pfx_virt_wifi_event+0x10/0x10 [ 658.708797][ T30] ? nft_offload_netdev_event+0x58/0x3e0 [ 658.714522][ T30] flow_offload_netdev_event+0x57/0x70 [ 658.734754][ T30] notifier_call_chain+0xb9/0x410 [ 658.744562][ T30] ? __pfx_flow_offload_netdev_event+0x10/0x10 [ 658.758541][ T30] call_netdevice_notifiers_info+0xbe/0x140 [ 658.768427][ T30] dev_close_many+0x333/0x6a0 [ 658.773194][ T30] ? find_held_lock+0x2d/0x110 [ 658.787364][ T30] ? __pfx_dev_close_many+0x10/0x10 [ 658.798045][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 658.803343][ T30] unregister_netdevice_many_notify+0x477/0x1e40 [ 658.856109][ T30] ? __pfx_lock_release+0x10/0x10 [ 658.866357][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 658.878312][ T30] ? __queue_work+0x43b/0x1070 [ 658.883167][ T30] ? mark_held_locks+0x9f/0xe0 [ 658.897732][ T30] unregister_netdevice_queue+0x307/0x3f0 [ 658.907767][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 658.928407][ T30] ? linkwatch_schedule_work+0x181/0x1c0 [ 658.934134][ T30] ? linkwatch_fire_event+0x6f/0x270 [ 658.947472][ T30] __tun_detach+0x11cc/0x14a0 [ 658.973351][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 658.980518][ T30] tun_chr_close+0xc8/0x230 [ 658.985130][ T30] __fput+0x408/0xbb0 [ 658.998233][ T30] task_work_run+0x14e/0x250 [ 659.002939][ T30] ? __pfx_task_work_run+0x10/0x10 [ 659.020146][ T30] ? switch_task_namespaces+0xeb/0x100 [ 659.025716][ T30] do_exit+0xaa3/0x2bb0 [ 659.048136][ T30] ? get_signal+0x8f2/0x2770 [ 659.052929][ T30] ? __pfx_do_exit+0x10/0x10 [ 659.057583][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 659.080260][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 659.085839][ T30] do_group_exit+0xd3/0x2a0 [ 659.124039][ T30] get_signal+0x25fd/0x2770 [ 659.138203][ T30] ? __pfx___mm_populate+0x10/0x10 [ 659.151162][ T30] ? up_write+0x209/0x520 [ 659.155591][ T30] ? __pfx_get_signal+0x10/0x10 [ 659.167703][ T30] ? vm_mmap_pgoff+0xf2/0x360 [ 659.173053][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 659.181192][ T30] ? hugetlbfs_get_inode+0x32d/0x530 [ 659.186741][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 659.205096][ T30] ? ksys_mmap_pgoff+0x85/0x5d0 [ 659.210567][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 659.216304][ T30] do_syscall_64+0xda/0x250 [ 659.227687][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.235937][ T30] RIP: 0033:0x7fb00d379e79 [ 659.246891][ T30] RSP: 002b:00007fb00e0dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 659.278233][ T30] RAX: 0000000020800000 RBX: 00007fb00d515f80 RCX: 00007fb00d379e79 [ 659.286479][ T30] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 659.305829][ T30] RBP: 00007fb00d3e793e R08: ffffffffffffffff R09: 0000000000000000 [ 659.326711][ T30] R10: 0000000000042032 R11: 0000000000000246 R12: 0000000000000000 [ 659.342593][ T30] R13: 0000000000000001 R14: 00007fb00d515f80 R15: 00007fffede15878 [ 659.364626][ T30] [ 659.367723][ T30] INFO: task syz.0.3823:13635 blocked for more than 144 seconds. [ 659.381543][ T30] Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 659.410206][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 659.427921][ T30] task:syz.0.3823 state:D stack:27008 pid:13635 tgid:13634 ppid:5228 flags:0x00004002 [ 659.455691][ T30] Call Trace: [ 659.459695][ T30] [ 659.462670][ T30] __schedule+0xe37/0x5490 [ 659.467147][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 659.488088][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 659.493392][ T30] ? __pfx___schedule+0x10/0x10 [ 659.504027][ T30] ? schedule+0x298/0x350 [ 659.517953][ T30] ? __pfx_lock_release+0x10/0x10 [ 659.523539][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 659.530797][ T30] ? __mutex_trylock_common+0x78/0x250 [ 659.536341][ T30] schedule+0xe7/0x350 [ 659.568631][ T30] schedule_preempt_disabled+0x13/0x30 [ 659.574195][ T30] __mutex_lock+0x5b8/0x9c0 [ 659.587869][ T30] ? tun_chr_close+0x3e/0x230 [ 659.598225][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 659.603367][ T30] ? locks_remove_file+0x399/0x5a0 [ 659.615531][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 659.624165][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 659.633034][ T30] ? tun_chr_close+0x3e/0x230 [ 659.637806][ T30] ? rtnl_lock+0x9/0x20 [ 659.648038][ T30] tun_chr_close+0x3e/0x230 [ 659.663251][ T30] __fput+0x408/0xbb0 [ 659.667908][ T30] task_work_run+0x14e/0x250 [ 659.682407][ T30] ? __pfx_task_work_run+0x10/0x10 [ 659.687620][ T30] ? switch_task_namespaces+0xeb/0x100 [ 659.697428][ T30] do_exit+0xaa3/0x2bb0 [ 659.711673][ T30] ? get_signal+0x8f2/0x2770 [ 659.716369][ T30] ? __pfx_do_exit+0x10/0x10 [ 659.748414][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 659.753548][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 659.777225][ T30] do_group_exit+0xd3/0x2a0 [ 659.782370][ T30] get_signal+0x25fd/0x2770 [ 659.786956][ T30] ? task_work_add+0x1d6/0x370 [ 659.798046][ T30] ? __pfx_get_signal+0x10/0x10 [ 659.802995][ T30] ? fput+0x13d/0x390 [ 659.807034][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 659.823827][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 659.830645][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 659.836407][ T30] do_syscall_64+0xda/0x250 [ 659.846924][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.877621][ T30] RIP: 0033:0x7f1d4b379e79 [ 659.896441][ T30] RSP: 002b:00007f1d4c183038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.915241][ T30] RAX: 0000000000000068 RBX: 00007f1d4b515f80 RCX: 00007f1d4b379e79 [ 659.929534][ T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 659.937667][ T30] RBP: 00007f1d4b3e793e R08: 0000000000000000 R09: 0000000000000000 [ 659.964327][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.973701][ T30] R13: 0000000000000000 R14: 00007f1d4b515f80 R15: 00007ffc44be1408 [ 659.988429][ T30] [ 659.991518][ T30] INFO: task syz-executor:13642 blocked for more than 145 seconds. [ 660.005692][ T30] Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 660.024009][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 660.033989][ T30] task:syz-executor state:D stack:27072 pid:13642 tgid:13642 ppid:1 flags:0x00004006 [ 660.078485][ T30] Call Trace: [ 660.081838][ T30] [ 660.084894][ T30] __schedule+0xe37/0x5490 [ 660.098560][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 660.131147][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 660.136452][ T30] ? __pfx___schedule+0x10/0x10 [ 660.160940][ T30] ? schedule+0x298/0x350 [ 660.167916][ T30] ? __pfx_lock_release+0x10/0x10 [ 660.188607][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 660.193391][ T30] ? __mutex_trylock_common+0x78/0x250 [ 660.205242][ T30] schedule+0xe7/0x350 [ 660.232584][ T30] schedule_preempt_disabled+0x13/0x30 [ 660.243767][ T30] __mutex_lock+0x5b8/0x9c0 [ 660.254445][ T30] ? find_held_lock+0x2d/0x110 [ 660.264137][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 660.282860][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 660.291563][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 660.297311][ T30] ? __pfx_vxlan_init_net+0x10/0x10 [ 660.308065][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 660.313924][ T30] register_nexthop_notifier+0x1b/0x70 [ 660.325107][ T30] ops_init+0xb9/0x650 [ 660.335062][ T30] setup_net+0x435/0xb40 [ 660.339816][ T30] ? __pfx_setup_net+0x10/0x10 [ 660.344645][ T30] ? down_read_killable+0xcc/0x380 [ 660.386257][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 660.395740][ T30] ? read_word_at_a_time+0xe/0x20 [ 660.408042][ T30] copy_net_ns+0x2fb/0x700 [ 660.412558][ T30] create_new_namespaces+0x3ea/0xad0 [ 660.417920][ T30] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 660.434593][ T30] ksys_unshare+0x419/0x970 [ 660.439666][ T30] ? __fput+0x6c5/0xbb0 [ 660.443893][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 660.450093][ T30] __x64_sys_unshare+0x31/0x40 [ 660.454928][ T30] do_syscall_64+0xcd/0x250 [ 660.480195][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.486209][ T30] RIP: 0033:0x7fbace37b677 [ 660.513891][ T30] RSP: 002b:00007ffc743ef7e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 660.535406][ T30] RAX: ffffffffffffffda RBX: 00007fbace515f40 RCX: 00007fbace37b677 [ 660.547948][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 660.556387][ T30] RBP: 00007fbace516a38 R08: 0000000000000000 R09: 0000000000000000 [ 660.568037][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 660.594353][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 660.608504][ T30] [ 660.611583][ T30] INFO: task syz-executor:13645 blocked for more than 146 seconds. [ 660.630606][ T30] Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 660.638770][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 660.647482][ T30] task:syz-executor state:D stack:27072 pid:13645 tgid:13645 ppid:1 flags:0x00004006 [ 660.673333][ T30] Call Trace: [ 660.688446][ T30] [ 660.691445][ T30] __schedule+0xe37/0x5490 [ 660.695923][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 660.727132][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 660.732974][ T30] ? __pfx___schedule+0x10/0x10 [ 660.737897][ T30] ? schedule+0x298/0x350 [ 660.755444][ T30] ? __pfx_lock_release+0x10/0x10 [ 660.766977][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 660.772183][ T30] ? __mutex_trylock_common+0x78/0x250 [ 660.777739][ T30] schedule+0xe7/0x350 [ 660.796390][ T30] schedule_preempt_disabled+0x13/0x30 [ 660.806832][ T30] __mutex_lock+0x5b8/0x9c0 [ 660.818441][ T30] ? find_held_lock+0x2d/0x110 [ 660.823309][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 660.861758][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 660.867007][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 660.888329][ T30] ? __pfx_vxlan_init_net+0x10/0x10 [ 660.894153][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 660.908040][ T30] register_nexthop_notifier+0x1b/0x70 [ 660.913618][ T30] ops_init+0xb9/0x650 [ 660.917746][ T30] setup_net+0x435/0xb40 [ 660.936828][ T30] ? __pfx_setup_net+0x10/0x10 [ 660.942243][ T30] ? down_read_killable+0xcc/0x380 [ 660.947417][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 660.958042][ T30] ? read_word_at_a_time+0xe/0x20 [ 660.963693][ T30] copy_net_ns+0x2fb/0x700 [ 660.974214][ T30] create_new_namespaces+0x3ea/0xad0 [ 660.998235][ T30] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 661.004121][ T30] ksys_unshare+0x419/0x970 [ 661.033236][ T30] ? __fput+0x6c5/0xbb0 [ 661.037589][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 661.045439][ T30] __x64_sys_unshare+0x31/0x40 [ 661.062335][ T30] do_syscall_64+0xcd/0x250 [ 661.067131][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.074821][ T30] RIP: 0033:0x7f9de1b7b677 [ 661.089935][ T30] RSP: 002b:00007ffe0aac39c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 661.107883][ T30] RAX: ffffffffffffffda RBX: 00007f9de1d15f40 RCX: 00007f9de1b7b677 [ 661.119396][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 661.127540][ T30] RBP: 00007f9de1d16a38 R08: 0000000000000000 R09: 0000000000000000 [ 661.146336][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 661.157151][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 661.188148][ T30] [ 661.195290][ T30] INFO: task syz-executor:13648 blocked for more than 146 seconds. [ 661.214820][ T30] Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 661.223537][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.237240][ T30] task:syz-executor state:D stack:27072 pid:13648 tgid:13648 ppid:1 flags:0x00000004 [ 661.255445][ T30] Call Trace: [ 661.268712][ T30] [ 661.271732][ T30] __schedule+0xe37/0x5490 [ 661.276213][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 661.287469][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 661.313551][ T30] ? find_held_lock+0x2d/0x110 [ 661.328069][ T30] ? __pfx___schedule+0x10/0x10 [ 661.333025][ T30] ? schedule+0x298/0x350 [ 661.337420][ T30] ? __pfx_lock_release+0x10/0x10 [ 661.363001][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 661.367786][ T30] ? __mutex_trylock_common+0x78/0x250 [ 661.378643][ T30] schedule+0xe7/0x350 [ 661.383074][ T30] schedule_preempt_disabled+0x13/0x30 [ 661.408493][ T30] __mutex_lock+0x5b8/0x9c0 [ 661.413119][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 661.428046][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 661.433180][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 661.448618][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 661.453762][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.460705][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 661.465989][ T30] ? avc_has_perm+0x11b/0x1c0 [ 661.481045][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 661.486601][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 661.515216][ T30] ? __lock_acquire+0xbdd/0x3cb0 [ 661.526045][ T30] netlink_rcv_skb+0x16b/0x440 [ 661.532398][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.537945][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.544818][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 661.563285][ T30] netlink_unicast+0x53c/0x7f0 [ 661.568924][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 661.574731][ T30] netlink_sendmsg+0x8b8/0xd70 [ 661.588211][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.593725][ T30] __sys_sendto+0x47f/0x4e0 [ 661.607281][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 661.630262][ T30] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 661.636435][ T30] ? kasan_quarantine_put+0x10a/0x240 [ 661.656704][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 661.668049][ T30] ? __fput+0x6c5/0xbb0 [ 661.672312][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 661.677233][ T30] ? do_syscall_64+0x91/0x250 [ 661.692455][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 661.698947][ T30] do_syscall_64+0xcd/0x250 [ 661.707861][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.727138][ T30] RIP: 0033:0x7efd3b97bd0c [ 661.738634][ T30] RSP: 002b:00007ffc5be211e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 661.747927][ T30] RAX: ffffffffffffffda RBX: 00007efd3c644620 RCX: 00007efd3b97bd0c [ 661.783211][ T30] RDX: 000000000000002c RSI: 00007efd3c644670 RDI: 0000000000000003 [ 661.800896][ T30] RBP: 0000000000000000 R08: 00007ffc5be21234 R09: 000000000000000c [ 661.817884][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 661.842224][ T30] R13: 0000000000000000 R14: 00007efd3c644670 R15: 0000000000000000 [ 661.857148][ T30] [ 661.868052][ T30] INFO: task syz-executor:13650 blocked for more than 147 seconds. [ 661.876111][ T30] Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 661.896045][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.928577][ T30] task:syz-executor state:D stack:27072 pid:13650 tgid:13650 ppid:1 flags:0x00004006 [ 661.960699][ T30] Call Trace: [ 661.977569][ T30] [ 661.982812][ T30] __schedule+0xe37/0x5490 [ 661.987319][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 662.002818][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 662.012336][ T30] ? __pfx___schedule+0x10/0x10 [ 662.017275][ T30] ? schedule+0x298/0x350 [ 662.035441][ T30] ? __pfx_lock_release+0x10/0x10 [ 662.045147][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 662.050374][ T30] ? __mutex_trylock_common+0x78/0x250 [ 662.056129][ T30] schedule+0xe7/0x350 [ 662.061288][ T30] schedule_preempt_disabled+0x13/0x30 [ 662.066840][ T30] __mutex_lock+0x5b8/0x9c0 [ 662.088348][ T30] ? find_held_lock+0x2d/0x110 [ 662.093223][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 662.099972][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 662.105188][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 662.136753][ T30] ? __pfx_vxlan_init_net+0x10/0x10 [ 662.148045][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 662.156972][ T30] register_nexthop_notifier+0x1b/0x70 [ 662.167613][ T30] ops_init+0xb9/0x650 [ 662.173447][ T30] setup_net+0x435/0xb40 [ 662.177773][ T30] ? __pfx_setup_net+0x10/0x10 [ 662.198724][ T30] ? down_read_killable+0xcc/0x380 [ 662.203926][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 662.224184][ T30] ? read_word_at_a_time+0xe/0x20 [ 662.230504][ T30] copy_net_ns+0x2fb/0x700 [ 662.235001][ T30] create_new_namespaces+0x3ea/0xad0 [ 662.264537][ T30] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 662.278973][ T30] ksys_unshare+0x419/0x970 [ 662.283763][ T30] ? __fput+0x6c5/0xbb0 [ 662.308372][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 662.313504][ T30] __x64_sys_unshare+0x31/0x40 [ 662.332035][ T30] do_syscall_64+0xcd/0x250 [ 662.336677][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.353083][ T30] RIP: 0033:0x7f19d3f7b677 [ 662.357574][ T30] RSP: 002b:00007fff0696f6f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 662.372456][ T30] RAX: ffffffffffffffda RBX: 00007f19d4115f40 RCX: 00007f19d3f7b677 [ 662.383579][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 662.414443][ T30] RBP: 00007f19d4116a38 R08: 0000000000000000 R09: 0000000000000000 [ 662.446017][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 662.462825][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 662.471708][ T30] [ 662.474814][ T30] INFO: task syz-executor:13652 blocked for more than 148 seconds. [ 662.493104][ T30] Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 662.518059][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.535265][ T30] task:syz-executor state:D stack:25104 pid:13652 tgid:13652 ppid:1 flags:0x00000004 [ 662.551676][ T30] Call Trace: [ 662.555143][ T30] [ 662.559463][ T30] __schedule+0xe37/0x5490 [ 662.563964][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 662.594259][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 662.600998][ T30] ? find_held_lock+0x2d/0x110 [ 662.605944][ T30] ? __pfx___schedule+0x10/0x10 [ 662.626460][ T30] ? schedule+0x298/0x350 [ 662.643528][ T30] ? __pfx_lock_release+0x10/0x10 [ 662.649638][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 662.654410][ T30] ? __mutex_trylock_common+0x78/0x250 [ 662.661006][ T30] schedule+0xe7/0x350 [ 662.665170][ T30] schedule_preempt_disabled+0x13/0x30 [ 662.681130][ T30] __mutex_lock+0x5b8/0x9c0 [ 662.685899][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 662.691916][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 662.697140][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 662.709888][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 662.714939][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.742427][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 662.747816][ T30] ? avc_has_perm+0x11b/0x1c0 [ 662.768274][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 662.773579][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 662.794880][ T30] ? __lock_acquire+0xbdd/0x3cb0 [ 662.807622][ T30] netlink_rcv_skb+0x16b/0x440 [ 662.813203][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.822154][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.840287][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 662.845784][ T30] netlink_unicast+0x53c/0x7f0 [ 662.875298][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 662.888347][ T30] netlink_sendmsg+0x8b8/0xd70 [ 662.893998][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.905575][ T30] __sys_sendto+0x47f/0x4e0 [ 662.911785][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 662.917015][ T30] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 662.939727][ T30] ? kasan_quarantine_put+0x10a/0x240 [ 662.945223][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 662.962447][ T30] ? __fput+0x6c5/0xbb0 [ 662.967092][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 662.980870][ T30] ? do_syscall_64+0x91/0x250 [ 662.985901][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 662.998649][ T30] do_syscall_64+0xcd/0x250 [ 663.003330][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.035482][ T30] RIP: 0033:0x7f046917bd0c [ 663.049940][ T30] RSP: 002b:00007ffe1eee9cf0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 663.073333][ T30] RAX: ffffffffffffffda RBX: 00007f0469e44620 RCX: 00007f046917bd0c [ 663.088043][ T30] RDX: 000000000000002c RSI: 00007f0469e44670 RDI: 0000000000000003 [ 663.096188][ T30] RBP: 0000000000000000 R08: 00007ffe1eee9d44 R09: 000000000000000c [ 663.116623][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 663.129868][ T30] R13: 0000000000000000 R14: 00007f0469e44670 R15: 0000000000000000 [ 663.153983][ T30] [ 663.157215][ T30] [ 663.157215][ T30] Showing all locks held in the system: [ 663.166542][ T30] 2 locks held by kworker/0:0/8: [ 663.196212][ T30] 6 locks held by kworker/0:1/9: [ 663.211972][ T30] 3 locks held by kworker/u8:0/11: [ 663.217733][ T30] #0: ffff88802a730148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 663.264057][ T30] #1: ffffc90000107d80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 663.285578][ T30] #2: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 663.302508][ T30] 1 lock held by khungtaskd/30: [ 663.315774][ T30] #0: ffffffff8ddb5d20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 663.328617][ T30] 3 locks held by kworker/u8:9/2494: [ 663.333975][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 663.362731][ T30] #1: ffffc90008f7fd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 663.392599][ T30] #2: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 663.426021][ T30] 2 locks held by getty/4978: [ 663.431974][ T30] #0: ffff88802acee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 663.458114][ T30] #1: ffffc90002ef62f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 663.475633][ T30] 5 locks held by kworker/u9:4/5236: [ 663.488060][ T30] #0: ffff88805e04a948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 663.504789][ T30] #1: ffffc9000325fd80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 663.523170][ T30] #2: ffff88802c53cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x170/0x410 [ 663.548599][ T30] #3: ffff88802c53c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x150/0xb50 [ 663.582796][ T30] #4: ffffffff8fc88268 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x158/0x370 [ 663.598040][ T30] 4 locks held by kworker/u9:6/5238: [ 663.603516][ T30] #0: ffff8880449d8948 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 663.624584][ T30] #1: ffffc900032a7d80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 663.665192][ T30] #2: ffff88803830c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x99/0x9e0 [ 663.685362][ T30] #3: ffffffff8fc88268 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4dc/0x9e0 [ 663.731157][ T30] 3 locks held by kworker/1:4/5273: [ 663.736613][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 663.761652][ T30] #1: ffffc90003be7d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 663.784995][ T30] #2: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 663.802120][ T30] 2 locks held by kworker/0:4/5300: [ 663.814100][ T30] 7 locks held by kworker/0:5/5301: [ 663.824827][ T30] 5 locks held by kworker/0:6/5306: [ 663.832926][ T30] 3 locks held by kworker/1:2/12420: [ 663.855674][ T30] #0: ffff888015881948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 663.882535][ T30] #1: ffffc90003287d80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 663.903872][ T30] #2: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x84/0x1140 [ 663.917012][ T30] 2 locks held by syz.3.3814/13617: [ 663.928529][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x230 [ 663.957278][ T30] #1: ffffffff8fb1ee28 (flowtable_lock){+.+.}-{3:3}, at: nf_flow_table_cleanup+0x81/0x3d0 [ 663.976471][ T30] 1 lock held by syz.4.3815/13619: [ 663.982913][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x230 [ 664.026697][ T30] 1 lock held by syz.2.3818/13624: [ 664.036093][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x230 [ 664.074860][ T30] 1 lock held by syz.0.3823/13635: [ 664.086272][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x230 [ 664.102951][ T30] 1 lock held by syz.1.3824/13638: [ 664.116546][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x230 [ 664.134736][ T30] 2 locks held by syz-executor/13642: [ 664.141113][ T30] #0: ffffffff8fa0e150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2d6/0x700 [ 664.184801][ T30] #1: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 664.208699][ T30] 2 locks held by syz-executor/13645: [ 664.214176][ T30] #0: ffffffff8fa0e150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2d6/0x700 [ 664.233821][ T30] #1: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 664.253499][ T30] 1 lock held by syz-executor/13648: [ 664.260164][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 664.295893][ T30] 2 locks held by syz-executor/13650: [ 664.304034][ T30] #0: ffffffff8fa0e150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2d6/0x700 [ 664.328090][ T30] #1: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 664.360138][ T30] 1 lock held by syz-executor/13652: [ 664.375290][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 664.393367][ T30] 1 lock held by syz-executor/13663: [ 664.404095][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 664.425166][ T30] 6 locks held by kworker/u9:0/13665: [ 664.431374][ T30] #0: ffff8880247ab148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 664.451942][ T30] #1: ffffc90003397d80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 664.494411][ T30] #2: ffff8880209c4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x170/0x410 [ 664.517250][ T30] #3: ffff8880209c4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x150/0xb50 [ 664.538586][ T30] #4: ffffffff8fc88268 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x158/0x370 [ 664.566414][ T30] #5: ffffffff8ddc14b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 664.587888][ T30] 1 lock held by syz-executor/13667: [ 664.598081][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 664.607725][ T30] 1 lock held by syz-executor/13670: [ 664.623307][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 664.654143][ T30] 1 lock held by syz-executor/13672: [ 664.673735][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 664.697690][ T30] 5 locks held by kworker/u9:1/13674: [ 664.705524][ T30] #0: ffff88805ed52148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 664.726254][ T30] #1: ffffc90003307d80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 664.744469][ T30] #2: ffff8880120fcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x170/0x410 [ 664.766207][ T30] #3: ffff8880120fc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x150/0xb50 [ 664.787372][ T30] #4: ffffffff8ddc14b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 664.806016][ T30] 1 lock held by syz-executor/13675: [ 664.812037][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 664.845416][ T30] 4 locks held by kworker/u9:2/13681: [ 664.855415][ T30] #0: ffff88802df9d948 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 664.873511][ T30] #1: ffffc9000340fd80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 664.889824][ T30] #2: ffff888034c44078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x99/0x9e0 [ 664.918084][ T30] #3: ffffffff8fc88268 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4dc/0x9e0 [ 664.942432][ T30] 1 lock held by syz-executor/13683: [ 664.948553][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 664.981026][ T30] 1 lock held by syz-executor/13684: [ 664.986496][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 665.016025][ T30] 5 locks held by kworker/u9:3/13686: [ 665.029923][ T30] #0: ffff88806d1ea948 ((wq_completion)hci10){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 665.056717][ T30] #1: ffffc900033c7d80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 665.084155][ T30] #2: ffff888054624d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x170/0x410 [ 665.104945][ T30] #3: ffff888054624078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x150/0xb50 [ 665.142039][ T30] #4: ffffffff8fc88268 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x158/0x370 [ 665.178221][ T30] 1 lock held by syz-executor/13689: [ 665.198186][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 665.208741][ T30] 1 lock held by syz-executor/13691: [ 665.214253][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 665.235736][ T30] 1 lock held by syz-executor/13693: [ 665.241896][ T30] #0: ffffffff8fa238e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 665.264617][ T30] 5 locks held by kworker/u9:7/13695: [ 665.273370][ T30] #0: ffff88801cfc9148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 665.308248][ T30] #1: ffffc90003477d80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 665.341709][ T30] #2: ffff88802a3acd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x170/0x410 [ 665.359187][ T30] #3: ffff88802a3ac078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x150/0xb50 [ 665.376267][ T30] #4: ffffffff8fc88268 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x158/0x370 [ 665.410058][ T30] 1 lock held by dhcpcd/13698: [ 665.414895][ T30] #0: ffff8880200ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 665.436312][ T30] 1 lock held by dhcpcd/13699: [ 665.441831][ T30] #0: ffff8880609f4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 665.458037][ T30] 1 lock held by dhcpcd/13700: [ 665.462863][ T30] #0: ffff88802ab58258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 665.518154][ T30] 1 lock held by dhcpcd/13701: [ 665.522996][ T30] #0: ffff8880306bc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 665.542183][ T30] 1 lock held by dhcpcd/13702: [ 665.547636][ T30] #0: ffff888062f26258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 665.575235][ T30] 1 lock held by dhcpcd/13703: [ 665.584173][ T30] #0: ffff888062f20258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 665.608150][ T30] [ 665.610547][ T30] ============================================= [ 665.610547][ T30] [ 665.634662][ T30] NMI backtrace for cpu 1 [ 665.639062][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 665.649696][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 665.660229][ T30] Call Trace: [ 665.663630][ T30] [ 665.666774][ T30] dump_stack_lvl+0x116/0x1f0 [ 665.671606][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 665.677058][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 665.683184][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 665.689574][ T30] watchdog+0xf0c/0x1240 [ 665.693936][ T30] ? __pfx_watchdog+0x10/0x10 [ 665.698972][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 665.704261][ T30] ? __kthread_parkme+0x148/0x220 [ 665.709373][ T30] ? __pfx_watchdog+0x10/0x10 [ 665.714207][ T30] kthread+0x2c1/0x3a0 [ 665.718349][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 665.723601][ T30] ? __pfx_kthread+0x10/0x10 [ 665.728238][ T30] ret_from_fork+0x45/0x80 [ 665.732915][ T30] ? __pfx_kthread+0x10/0x10 [ 665.737637][ T30] ret_from_fork_asm+0x1a/0x30 [ 665.742468][ T30] [ 665.749664][ T30] Sending NMI from CPU 1 to CPUs 0: [ 665.755105][ C0] NMI backtrace for cpu 0 [ 665.755122][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 665.755155][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 665.755172][ C0] Workqueue: events nsim_dev_trap_report_work [ 665.755203][ C0] RIP: 0010:unwind_next_frame+0xd2/0x23a0 [ 665.755234][ C0] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 21 1d 00 00 48 8b 43 38 bf 01 00 00 00 48 89 44 24 18 e8 72 c6 1d 00 48 8d 43 50 <48> 89 c2 48 89 44 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 665.755259][ C0] RSP: 0018:ffffc90000006b78 EFLAGS: 00000093 [ 665.755278][ C0] RAX: ffffc90000006c48 RBX: ffffc90000006bf8 RCX: 1ffffffff29e182c [ 665.755297][ C0] RDX: 0000000000000000 RSI: ffffffff813cdf6b RDI: 0000000000000001 [ 665.755314][ C0] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 665.755330][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: ffffc90000006bf8 [ 665.755348][ C0] R13: ffffffff81761240 R14: ffffc90000006cb8 R15: ffff888017a80000 [ 665.755366][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 665.755393][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 665.755411][ C0] CR2: 0000001b32205ff8 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 665.755428][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 665.755444][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 665.755461][ C0] Call Trace: [ 665.755468][ C0] [ 665.755477][ C0] ? show_regs+0x8c/0xa0 [ 665.755517][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 665.755555][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 665.755593][ C0] ? nmi_handle+0x1a9/0x5c0 [ 665.755616][ C0] ? unwind_next_frame+0xd2/0x23a0 [ 665.755642][ C0] ? default_do_nmi+0x6a/0x160 [ 665.755674][ C0] ? exc_nmi+0x170/0x1e0 [ 665.755699][ C0] ? end_repeat_nmi+0xf/0x53 [ 665.755727][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 665.755757][ C0] ? unwind_next_frame+0x6b/0x23a0 [ 665.755781][ C0] ? unwind_next_frame+0xd2/0x23a0 [ 665.755806][ C0] ? unwind_next_frame+0xd2/0x23a0 [ 665.755832][ C0] ? unwind_next_frame+0xd2/0x23a0 [ 665.755857][ C0] [ 665.755864][ C0] [ 665.755873][ C0] ? ieee80211_rx_handlers+0x1e57/0x9a50 [ 665.755909][ C0] ? ieee80211_rx_handlers+0x1e57/0x9a50 [ 665.755944][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 665.755971][ C0] arch_stack_walk+0x100/0x170 [ 665.756002][ C0] ? ieee80211_rx_handlers+0x1e57/0x9a50 [ 665.756038][ C0] stack_trace_save+0x95/0xd0 [ 665.756064][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 665.756090][ C0] ? hlock_class+0x4e/0x130 [ 665.756131][ C0] ? __lock_acquire+0x1620/0x3cb0 [ 665.756163][ C0] kasan_save_stack+0x33/0x60 [ 665.756193][ C0] ? kasan_save_stack+0x33/0x60 [ 665.756222][ C0] ? kasan_save_track+0x14/0x30 [ 665.756250][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 665.756277][ C0] ? dummy_urb_enqueue+0x8d/0x8a0 [ 665.756306][ C0] ? usb_hcd_submit_urb+0x2d1/0x2090 [ 665.756337][ C0] ? usb_submit_urb+0x87c/0x1730 [ 665.756372][ C0] ? ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 665.756410][ C0] ? __usb_hcd_giveback_urb+0x389/0x6e0 [ 665.756440][ C0] ? usb_hcd_giveback_urb+0x396/0x450 [ 665.756469][ C0] ? dummy_timer+0x17c3/0x38d0 [ 665.756495][ C0] ? __hrtimer_run_queues+0x20c/0xcc0 [ 665.756533][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 665.756572][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 665.756598][ C0] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 665.756633][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 665.756666][ C0] ? ieee80211_rx_h_michael_mic_verify+0x39/0xac0 [ 665.756698][ C0] ? ieee80211_rx_handlers+0x1e57/0x9a50 [ 665.756742][ C0] kasan_save_track+0x14/0x30 [ 665.756772][ C0] __kasan_kmalloc+0xaa/0xb0 [ 665.756801][ C0] dummy_urb_enqueue+0x8d/0x8a0 [ 665.756829][ C0] ? usb_hcd_map_urb_for_dma+0x39e/0x1190 [ 665.756862][ C0] usb_hcd_submit_urb+0x2d1/0x2090 [ 665.756896][ C0] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 665.756926][ C0] ? lock_acquire+0x1b1/0x560 [ 665.756959][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 665.756989][ C0] ? find_held_lock+0x2d/0x110 [ 665.757030][ C0] ? ath9k_hif_usb_reg_in_cb+0x487/0x690 [ 665.757070][ C0] usb_submit_urb+0x87c/0x1730 [ 665.757106][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 665.757145][ C0] ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 665.757184][ C0] __usb_hcd_giveback_urb+0x389/0x6e0 [ 665.757216][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 665.757247][ C0] dummy_timer+0x17c3/0x38d0 [ 665.757277][ C0] ? debug_object_deactivate+0x1f0/0x370 [ 665.757316][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 665.757351][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 665.757389][ C0] ? __pfx_lock_release+0x10/0x10 [ 665.757420][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 665.757448][ C0] ? timerqueue_del+0x83/0x150 [ 665.757483][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 665.757510][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 665.757551][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 665.757590][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 665.757624][ C0] hrtimer_interrupt+0x31b/0x800 [ 665.757673][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 665.757701][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 665.757736][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 665.757765][ C0] RIP: 0010:ieee80211_rx_h_michael_mic_verify+0x39/0xac0 [ 665.757800][ C0] Code: 00 00 00 00 fc ff df 55 53 48 89 fb 48 81 ec 98 00 00 00 48 c7 44 24 38 b3 8a b5 41 48 8d 6c 24 38 48 c7 44 24 40 43 a3 79 8d <48> c1 ed 03 48 c7 44 24 48 d0 7f 7b 8a 4a 8d 44 25 00 c7 00 f1 f1 [ 665.757824][ C0] RSP: 0018:ffffc90000007720 EFLAGS: 00000282 [ 665.757843][ C0] RAX: 0000000000000000 RBX: ffffc90000007d20 RCX: ffffffff8a8637d4 [ 665.757861][ C0] RDX: ffff888017a80000 RSI: ffffffff8a86386f RDI: ffffc90000007d20 [ 665.757878][ C0] RBP: ffffc90000007758 R08: 0000000000000005 R09: 0000000000000000 [ 665.757895][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 665.757913][ C0] R13: ffff88802a139b50 R14: dffffc0000000000 R15: ffffc90000007d20 [ 665.757934][ C0] ? ieee80211_rx_handlers+0x1db4/0x9a50 [ 665.757968][ C0] ? ieee80211_rx_handlers+0x1e4f/0x9a50 [ 665.758008][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 665.758049][ C0] ? ieee80211_rx_get_bigtk+0xdb/0x540 [ 665.758080][ C0] ieee80211_rx_handlers+0x1e57/0x9a50 [ 665.758118][ C0] ? __pfx_mark_lock+0x10/0x10 [ 665.758148][ C0] ? __pfx_mark_lock+0x10/0x10 [ 665.758178][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 665.758217][ C0] ? hlock_class+0x4e/0x130 [ 665.758258][ C0] ? hlock_class+0x4e/0x130 [ 665.758298][ C0] ? __lock_acquire+0xbdd/0x3cb0 [ 665.758332][ C0] ieee80211_prepare_and_rx_handle+0x2b6a/0x6ec0 [ 665.758370][ C0] ? check_irq_usage+0xab0/0x1490 [ 665.758404][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 665.758443][ C0] ? sta_info_get_bss+0x18b/0x3a0 [ 665.758482][ C0] ? __pfx_lock_release+0x10/0x10 [ 665.758518][ C0] ieee80211_rx_for_interface+0x10a/0x1f0 [ 665.758556][ C0] ieee80211_rx_list+0x10e4/0x2e90 [ 665.758594][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 665.758629][ C0] ? lock_acquire+0x1b1/0x560 [ 665.758670][ C0] ? skb_dequeue+0x126/0x180 [ 665.758709][ C0] ieee80211_rx_napi+0xdd/0x400 [ 665.758743][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 665.758777][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 665.758811][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 665.758847][ C0] ieee80211_handle_queued_frames+0xd5/0x130 [ 665.758880][ C0] tasklet_action_common.constprop.0+0x24c/0x3e0 [ 665.758928][ C0] handle_softirqs+0x216/0x8f0 [ 665.758969][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 665.759010][ C0] irq_exit_rcu+0xbb/0x120 [ 665.759049][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 665.759083][ C0] [ 665.759091][ C0] [ 665.759099][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 665.759128][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 665.759166][ C0] Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 e4 64 79 7e 65 8b 05 e5 64 79 7e a9 00 01 [ 665.759191][ C0] RSP: 0018:ffffc900000e7690 EFLAGS: 00000202 [ 665.759210][ C0] RAX: 0000000000000000 RBX: ffffffff902bdfcc RCX: ffffffff813cd424 [ 665.759227][ C0] RDX: ffff888017a80000 RSI: ffffffff81e77143 RDI: 0000000000000006 [ 665.759244][ C0] RBP: ffffffff902bdfe0 R08: 0000000000000006 R09: ffffffff81e77143 [ 665.759262][ C0] R10: ffffffff81e77120 R11: 0000000000000000 R12: ffffffff81e77143 [ 665.759278][ C0] R13: ffffffff81e77120 R14: dffffc0000000000 R15: ffffffff902bdfd4 [ 665.759297][ C0] ? kasan_set_track+0x20/0x20 [ 665.759325][ C0] ? kasan_save_track+0x13/0x30 [ 665.759353][ C0] ? kasan_set_track+0x20/0x20 [ 665.759381][ C0] ? kasan_save_track+0x13/0x30 [ 665.759408][ C0] ? __orc_find+0xc4/0x130 [ 665.759430][ C0] ? kasan_save_track+0x13/0x30 [ 665.759461][ C0] __orc_find+0x63/0x130 [ 665.759485][ C0] ? kasan_save_track+0x13/0x30 [ 665.759513][ C0] unwind_next_frame+0x335/0x23a0 [ 665.759539][ C0] ? kasan_save_track+0x14/0x30 [ 665.759569][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 665.759597][ C0] arch_stack_walk+0x100/0x170 [ 665.759626][ C0] ? kasan_save_track+0x14/0x30 [ 665.759660][ C0] stack_trace_save+0x95/0xd0 [ 665.759686][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 665.759713][ C0] ? stack_trace_save+0x95/0xd0 [ 665.759737][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 665.759762][ C0] ? kasan_save_stack+0x42/0x60 [ 665.759790][ C0] kasan_save_stack+0x33/0x60 [ 665.759818][ C0] ? kasan_save_stack+0x33/0x60 [ 665.759846][ C0] ? kasan_save_track+0x14/0x30 [ 665.759887][ C0] kasan_save_track+0x14/0x30 [ 665.759917][ C0] __kasan_slab_alloc+0x89/0x90 [ 665.759949][ C0] kmem_cache_alloc_node_noprof+0x153/0x310 [ 665.759983][ C0] ? __alloc_skb+0x2b1/0x380 [ 665.760009][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 665.760039][ C0] __alloc_skb+0x2b1/0x380 [ 665.760064][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 665.760090][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 665.760131][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 665.760171][ C0] nsim_dev_trap_report_work+0x2a4/0xc80 [ 665.760202][ C0] process_one_work+0x9c5/0x1b40 [ 665.760240][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 665.760271][ C0] ? __pfx_process_one_work+0x10/0x10 [ 665.760308][ C0] ? assign_work+0x1a0/0x250 [ 665.760338][ C0] worker_thread+0x6c8/0xed0 [ 665.760376][ C0] ? __pfx_worker_thread+0x10/0x10 [ 665.760410][ C0] kthread+0x2c1/0x3a0 [ 665.760432][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 665.760465][ C0] ? __pfx_kthread+0x10/0x10 [ 665.760488][ C0] ret_from_fork+0x45/0x80 [ 665.760526][ C0] ? __pfx_kthread+0x10/0x10 [ 665.760549][ C0] ret_from_fork_asm+0x1a/0x30 [ 665.760592][ C0] [ 666.898253][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 666.905177][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 666.915728][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 666.926093][ T30] Call Trace: [ 666.929440][ T30] [ 666.932408][ T30] dump_stack_lvl+0x3d/0x1f0 [ 666.937082][ T30] panic+0x6dc/0x7c0 [ 666.941295][ T30] ? __pfx_panic+0x10/0x10 [ 666.945868][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 666.951896][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 666.957949][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 666.963467][ T30] ? watchdog+0xd76/0x1240 [ 666.967964][ T30] ? watchdog+0xd69/0x1240 [ 666.972435][ T30] watchdog+0xd87/0x1240 [ 666.976749][ T30] ? __pfx_watchdog+0x10/0x10 [ 666.981479][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 666.986734][ T30] ? __kthread_parkme+0x148/0x220 [ 666.991837][ T30] ? __pfx_watchdog+0x10/0x10 [ 666.996575][ T30] kthread+0x2c1/0x3a0 [ 667.000686][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.006024][ T30] ? __pfx_kthread+0x10/0x10 [ 667.010690][ T30] ret_from_fork+0x45/0x80 [ 667.015178][ T30] ? __pfx_kthread+0x10/0x10 [ 667.019851][ T30] ret_from_fork_asm+0x1a/0x30 [ 667.024681][ T30] [ 667.029246][ T30] Kernel Offset: disabled [ 667.033618][ T30] Rebooting in 86400 seconds..