last executing test programs: 59.515783361s ago: executing program 1 (id=378): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x22, 0x14}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 46.735644173s ago: executing program 1 (id=378): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x22, 0x14}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 38.995684581s ago: executing program 1 (id=378): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x22, 0x14}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 27.112870868s ago: executing program 1 (id=378): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x22, 0x14}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 16.356621435s ago: executing program 1 (id=378): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x22, 0x14}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 6.675702956s ago: executing program 1 (id=378): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x22, 0x14}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 5.549663087s ago: executing program 4 (id=721): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r3, @ANYBLOB="000000000000000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x8}, 0x0) 5.488826022s ago: executing program 4 (id=722): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x4048084) r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "f8959cae0b5e441a8a477937bf44e3ff73794b39bf566abb480779ae79c3f8a9cb0043f5ab81f376c9afa505a347bd22634fd412446924cf0cec4aef715adc8cdede97f7fd68827abbde8b018966b21b5c536b67362af9d8ad8c22f8a2adc951e77aeae653bc5a06d0d7cfe5f5d89b60e7f7b24a66d42d963f2d"}}}, 0x0) 4.041526105s ago: executing program 2 (id=731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000002c0)=r0}, 0x20) close(0x3) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 3.892438649s ago: executing program 2 (id=733): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x2, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x40f6, 0x29a7, 0x0, 0x0, 0x0) 3.443295776s ago: executing program 2 (id=737): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.260716116s ago: executing program 4 (id=739): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x3cfa, 0x0, 0xffffffff, 0x69}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 3.014015561s ago: executing program 3 (id=742): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r1, 0x0, 0x0) 2.881874992s ago: executing program 3 (id=744): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 2.842519356s ago: executing program 4 (id=746): syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="be46", 0x2}], 0x1}, 0x557d9d6c5d718913) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 2.419944278s ago: executing program 2 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffff7, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 2.295820142s ago: executing program 2 (id=750): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f3045507000000000001090224"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c0007"], 0x40c}}, 0x0) 2.187118732s ago: executing program 4 (id=752): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000340)=0x6) 1.901953553s ago: executing program 3 (id=756): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 1.511984896s ago: executing program 0 (id=760): pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) 1.275665149s ago: executing program 0 (id=761): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect={0x81ffffff}) 1.174779672s ago: executing program 4 (id=762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/120, 0x78}], 0x1}, 0x5}], 0x3fffe7d, 0x0, 0x0) 1.060035712s ago: executing program 0 (id=763): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x839eef59733fa2ad, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 730.827446ms ago: executing program 0 (id=764): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 715.437191ms ago: executing program 2 (id=765): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000004c0)=""/210) 575.537495ms ago: executing program 0 (id=766): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000bc0)={0x6, 0x400d, 0x400, 0x97aa, 0x1a, "5ef863f1a0973cf65a7917895c30acd61b3d2b"}) 369.314141ms ago: executing program 3 (id=767): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 178.984596ms ago: executing program 3 (id=768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 121.688935ms ago: executing program 0 (id=769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 0s ago: executing program 3 (id=770): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0), 0x8) kernel console output (not intermixed with test programs): 7][ T5845] usb 1-1: Manufacturer: syz [ 97.103510][ T5845] usb 1-1: SerialNumber: syz [ 97.105127][ T6566] lowmem_reserve[]: 0 0 0 0 0 [ 97.117698][ T5845] usb 1-1: config 0 descriptor?? [ 97.151472][ T6566] Node 1 Normal free:3898700kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20320kB local_pcp:12416kB free_cma:0kB [ 97.182751][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.194180][ T5845] smsc75xx v1.0.0 [ 97.204803][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 97.242345][ T6566] lowmem_reserve[]: 0 0 0 0 0 [ 97.257955][ T6566] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 97.287149][ T6566] Node 0 DMA32: 557*4kB (ME) 137*8kB (ME) 37*16kB (M) 29*32kB (ME) 33*64kB (UME) 45*128kB (ME) 22*256kB (UME) 9*512kB (M) 4*1024kB (UM) 3*2048kB (UME) 301*4096kB (M) = 1266092kB [ 97.307033][ T6566] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 97.319720][ T6566] Node 1 Normal: 185*4kB (UME) 41*8kB (UME) 36*16kB (UME) 55*32kB (UME) 22*64kB (UME) 7*128kB (UME) 7*256kB (UME) 4*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3898700kB [ 97.346298][ T6566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.358392][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 97.366843][ T6566] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.379808][ T6618] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.380755][ T6566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.388696][ T6618] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.388753][ T6618] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.404571][ T6566] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.408635][ T6618] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.421065][ T6566] 43272 total pagecache pages [ 97.429730][ T6618] vxlan0: entered promiscuous mode [ 97.440417][ T6566] 0 pages in swap cache [ 97.464992][ T6566] Free swap = 124996kB [ 97.469432][ T6566] Total swap = 124996kB [ 97.473640][ T6566] 2097051 pages RAM [ 97.479546][ T6566] 0 pages HighMem/MovableOnly [ 97.486296][ T6566] 429917 pages reserved [ 97.490618][ T6566] 0 pages cma reserved [ 97.898566][ T6629] raw_sendmsg: syz.1.274 forgot to set AF_INET. Fix it! [ 98.016730][ T6633] netlink: 'syz.3.276': attribute type 2 has an invalid length. [ 98.026183][ T6633] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.276'. [ 98.035636][ T6633] nbd: must specify a device to reconfigure [ 98.181773][ T5845] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 98.343959][ T5926] usb 3-1: USB disconnect, device number 4 [ 98.396169][ T5845] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 98.429973][ T5845] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 98.443923][ T5845] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 98.474634][ T5845] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 98.491755][ T5845] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 98.523026][ T5845] usb 1-1: USB disconnect, device number 5 [ 98.802166][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 98.802180][ T30] audit: type=1400 audit(1749914107.557:278): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 98.935241][ T30] audit: type=1400 audit(1749914107.697:279): avc: denied { watch_reads } for pid=6664 comm="syz.2.289" path="/62" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 99.162757][ T6675] input: syz1 as /devices/virtual/input/input10 [ 100.236257][ T2945] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfc [ 101.125161][ T5926] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.334853][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 101.343762][ T5926] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 101.376529][ T5926] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.394860][ T30] audit: type=1400 audit(1749914110.157:280): avc: denied { relabelfrom } for pid=6755 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 101.416649][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.436708][ T5926] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.461235][ T30] audit: type=1400 audit(1749914110.157:281): avc: denied { relabelto } for pid=6755 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 101.483243][ T5926] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.511311][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.524758][ T5926] usb 5-1: Product: syz [ 101.533165][ T5926] usb 5-1: Manufacturer: syz [ 101.547515][ T5926] usb 5-1: SerialNumber: syz [ 101.576361][ T6758] netlink: 'syz.2.328': attribute type 6 has an invalid length. [ 101.584063][ T6758] __nla_validate_parse: 1 callbacks suppressed [ 101.584075][ T6758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.328'. [ 101.609654][ T6760] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.993841][ T5926] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 102.053306][ T6768] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 102.560232][ T6786] tls_set_device_offload_rx: netdev not found [ 102.854880][ T5926] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 102.928844][ T5926] usb 5-1: USB disconnect, device number 5 [ 103.034340][ T30] audit: type=1400 audit(1749914111.777:282): avc: denied { attach_queue } for pid=6797 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 103.258948][ T30] audit: type=1400 audit(1749914112.017:283): avc: denied { append } for pid=6808 comm="syz.1.348" name="usbmon5" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.292322][ T30] audit: type=1400 audit(1749914112.017:284): avc: denied { open } for pid=6808 comm="syz.1.348" path="/dev/usbmon5" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.336482][ T5845] kernel read not supported for file /snd/controlC0 (pid: 5845 comm: kworker/1:3) [ 103.498492][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.546507][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.687014][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.715302][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.829754][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.871045][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.081040][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.114695][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.182334][ T30] audit: type=1400 audit(1749914112.937:285): avc: denied { create } for pid=6830 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.205178][ T5845] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.249263][ T30] audit: type=1400 audit(1749914112.977:286): avc: denied { write } for pid=6830 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.297584][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.311172][ T30] audit: type=1400 audit(1749914112.977:287): avc: denied { ioctl } for pid=6830 comm="syz.4.358" path="socket:[12934]" dev="sockfs" ino=12934 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.336578][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.366954][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.383410][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.391668][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.411793][ T30] audit: type=1400 audit(1749914113.167:288): avc: denied { mounton } for pid=6836 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 104.455065][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 104.486599][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.549199][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.586452][ T5845] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 104.624800][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.649376][ T5845] usb 2-1: config 0 descriptor?? [ 104.691877][ T13] bridge_slave_1: left allmulticast mode [ 104.702951][ T13] bridge_slave_1: left promiscuous mode [ 104.712506][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.724290][ T13] bridge_slave_0: left allmulticast mode [ 104.730348][ T13] bridge_slave_0: left promiscuous mode [ 104.736636][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.754285][ T30] audit: type=1400 audit(1749914113.517:289): avc: denied { create } for pid=6849 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 104.799398][ T30] audit: type=1400 audit(1749914113.557:290): avc: denied { sys_admin } for pid=6849 comm="syz.2.362" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 104.864613][ T30] audit: type=1400 audit(1749914113.617:291): avc: denied { ioctl } for pid=6826 comm="syz.1.356" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.123448][ T5845] savu 0003:1E7D:2D5A.0007: bogus close delimiter [ 105.134527][ T5845] savu 0003:1E7D:2D5A.0007: item 0 2 2 10 parsing failed [ 105.148184][ T5845] savu 0003:1E7D:2D5A.0007: parse failed [ 105.154132][ T5845] savu 0003:1E7D:2D5A.0007: probe with driver savu failed with error -22 [ 105.335477][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.375151][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.396804][ T13] bond0 (unregistering): Released all slaves [ 105.599579][ T13] bond1 (unregistering): (slave veth3): Releasing backup interface [ 105.632676][ T13] veth3: left promiscuous mode [ 105.645166][ T13] bond1 (unregistering): Released all slaves [ 105.703392][ T30] audit: type=1400 audit(1749914114.457:292): avc: denied { read write } for pid=6866 comm="syz.2.368" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.790223][ T5934] usb 2-1: USB disconnect, device number 5 [ 105.832200][ T30] audit: type=1400 audit(1749914114.457:293): avc: denied { open } for pid=6866 comm="syz.2.368" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.982582][ T30] audit: type=1400 audit(1749914114.537:294): avc: denied { read } for pid=5485 comm="dhcpcd" name="n101" dev="tmpfs" ino=3336 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.005253][ T5845] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 106.162876][ T5925] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.216903][ T5845] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 106.241927][ T5845] usb 3-1: config 0 has no interface number 0 [ 106.278629][ T5845] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 106.306824][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.337546][ T5845] usb 3-1: Product: syz [ 106.364667][ T5845] usb 3-1: Manufacturer: syz [ 106.377204][ T5845] usb 3-1: SerialNumber: syz [ 106.382285][ T5925] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 106.405412][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.418821][ T6885] kvm: Disabled LAPIC found during irq injection [ 106.429748][ T5925] usb 5-1: config 0 descriptor?? [ 106.445684][ T5845] usb 3-1: config 0 descriptor?? [ 106.470743][ T5815] Bluetooth: hci0: command tx timeout [ 106.499214][ T6836] chnl_net:caif_netlink_parms(): no params data found [ 106.951345][ T5845] usb 3-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 107.138280][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.150644][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.162384][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 107.176953][ T6836] bridge_slave_0: entered allmulticast mode [ 107.183352][ T5845] usb 3-1: no permanent extended address found, random address set [ 107.197185][ T6836] bridge_slave_0: entered promiscuous mode [ 107.204114][ T5845] usb 3-1: atusb_probe: initialization failed, error = -524 [ 107.215119][ T6908] bridge0: entered allmulticast mode [ 107.224126][ T5845] atusb 3-1:0.128: probe with driver atusb failed with error -524 [ 107.273867][ T13] hsr_slave_0: left promiscuous mode [ 107.296157][ T13] hsr_slave_1: left promiscuous mode [ 107.307219][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.328618][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.348761][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.356498][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.400225][ T13] veth1_macvtap: left promiscuous mode [ 107.415164][ T13] veth0_macvtap: left promiscuous mode [ 107.422292][ T13] veth1_vlan: left promiscuous mode [ 107.435469][ T24] usb 3-1: USB disconnect, device number 5 [ 107.444810][ T13] veth0_vlan: left promiscuous mode [ 107.680772][ T5925] usb 5-1: Cannot set autoneg [ 107.686940][ T5925] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 107.718767][ T5925] usb 5-1: USB disconnect, device number 6 [ 107.792627][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.801628][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.811226][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.824347][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.846742][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.197917][ T13] team0 (unregistering): Port device team_slave_1 removed [ 108.257482][ T13] team0 (unregistering): Port device team_slave_0 removed [ 108.335277][ T5926] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 108.512291][ T5926] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 108.520631][ T5926] usb 3-1: config 0 has no interface number 0 [ 108.528630][ T5926] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 108.540930][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.549315][ T5815] Bluetooth: hci0: command tx timeout [ 108.558991][ T5926] usb 3-1: Product: syz [ 108.563193][ T5926] usb 3-1: Manufacturer: syz [ 108.563838][ T6909] bridge_slave_1: left allmulticast mode [ 108.567899][ T5926] usb 3-1: SerialNumber: syz [ 108.569833][ T5926] usb 3-1: config 0 descriptor?? [ 108.576642][ T6909] bridge_slave_1: left promiscuous mode [ 108.589503][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.603714][ T6909] bridge_slave_0: left allmulticast mode [ 108.609655][ T6909] bridge_slave_0: left promiscuous mode [ 108.625519][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.649349][ T6909] bridge0 (unregistering): left allmulticast mode [ 108.699455][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.706824][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.714004][ T6836] bridge_slave_1: entered allmulticast mode [ 108.720981][ T6836] bridge_slave_1: entered promiscuous mode [ 108.755949][ T6918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.763907][ T6918] bridge0: port 3(bond1) entered blocking state [ 108.774030][ T6918] bridge0: port 3(bond1) entered disabled state [ 108.783839][ T6918] bond1: entered allmulticast mode [ 108.809586][ T6918] bond1: entered promiscuous mode [ 108.825780][ T6918] bridge0: port 3(bond1) entered blocking state [ 108.833080][ T6918] bridge0: port 3(bond1) entered forwarding state [ 108.914148][ T6836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.952884][ T6836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.074350][ T6836] team0: Port device team_slave_0 added [ 109.083881][ T5934] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.139192][ T6836] team0: Port device team_slave_1 added [ 109.244951][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 109.264438][ T5934] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 109.284513][ T5934] usb 4-1: config 1 has no interface number 0 [ 109.305191][ T5934] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 109.315883][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.322845][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.348780][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.365308][ T5934] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 109.375571][ T6836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.378118][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.394268][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.421240][ T5926] asix 3-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x39 [ 109.429431][ T5934] usb 4-1: config 1 interface 105 has no altsetting 0 [ 109.430742][ T6836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.469414][ T5934] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 109.497968][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.514570][ T5934] usb 4-1: Product: syz [ 109.525203][ T5934] usb 4-1: Manufacturer: syz [ 109.529848][ T5934] usb 4-1: SerialNumber: syz [ 109.565070][ T6924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 109.572350][ T6924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 109.666298][ T6836] hsr_slave_0: entered promiscuous mode [ 109.673262][ T5926] usb 3-1: USB disconnect, device number 6 [ 109.676318][ T6836] hsr_slave_1: entered promiscuous mode [ 109.809511][ T12] bridge0: port 3(bond1) entered disabled state [ 109.905156][ T5815] Bluetooth: hci2: command tx timeout [ 109.989110][ T6911] chnl_net:caif_netlink_parms(): no params data found [ 110.019377][ T6924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 110.029854][ T6924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 110.047001][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.188232][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.300511][ T6958] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 110.362467][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.407591][ T6958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.460875][ T6964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.469154][ T6964] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.481124][ T6964] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 110.494999][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 110.625226][ T5815] Bluetooth: hci0: command tx timeout [ 110.655601][ T5926] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 110.680167][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.696388][ T5926] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.708219][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.716389][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.725518][ T5926] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.744995][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.752728][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.767241][ T5926] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.787792][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.796945][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.820285][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.826160][ T5926] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.851230][ T5934] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 110.872326][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.881213][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.891574][ T5926] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.904870][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.915678][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.924608][ T5926] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.935737][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.943302][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.952383][ T5926] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.966763][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.967411][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.982184][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.984753][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.989476][ T6911] bridge_slave_0: entered allmulticast mode [ 110.998486][ T5926] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.006884][ T6911] bridge_slave_0: entered promiscuous mode [ 111.019407][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.025600][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.038280][ T5926] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 111.039024][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.048126][ T5926] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 111.057338][ T6911] bridge_slave_1: entered allmulticast mode [ 111.063055][ T5926] usb 3-1: Product: syz [ 111.070005][ T6911] bridge_slave_1: entered promiscuous mode [ 111.074771][ T5926] usb 3-1: Manufacturer: syz [ 111.086562][ T5926] usb 3-1: SerialNumber: syz [ 111.111286][ T5926] usb 3-1: config 0 descriptor?? [ 111.131119][ T5934] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 111.149512][ T5926] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 111.152006][ T5934] usb 4-1: USB disconnect, device number 4 [ 111.219918][ T5934] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 111.290486][ T6911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.311912][ T5934] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 111.326040][ T6911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.345231][ T5934] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 111.354743][ T5934] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 111.464045][ T6911] team0: Port device team_slave_0 added [ 111.472812][ T6911] team0: Port device team_slave_1 added [ 111.559240][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 111.567420][ T5926] usb 3-1: USB disconnect, device number 7 [ 111.576846][ T6986] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 111.592500][ T6836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.595174][ T5926] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 111.613130][ T6911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.631360][ T6911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.658794][ T6911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.674653][ T6836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.825005][ T5934] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.882340][ T12] bond0 (unregistering): Released all slaves [ 111.901117][ T6911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.909751][ T6911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.944501][ T6911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.968609][ T6836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.981976][ T5934] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.996790][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.997191][ T5815] Bluetooth: hci2: command tx timeout [ 112.005367][ T5934] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.029438][ T6836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.044033][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.079615][ T5934] usb 4-1: Product: syz [ 112.084030][ T5934] usb 4-1: Manufacturer: syz [ 112.096864][ T5934] usb 4-1: SerialNumber: syz [ 112.118636][ T5934] usb 4-1: config 0 descriptor?? [ 112.160124][ T5934] usb 4-1: selecting invalid altsetting 0 [ 112.260300][ T6911] hsr_slave_0: entered promiscuous mode [ 112.304305][ T6911] hsr_slave_1: entered promiscuous mode [ 112.335676][ T6911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.343908][ T6911] Cannot create hsr debugfs directory [ 112.593302][ T24] usb 4-1: USB disconnect, device number 5 [ 112.705105][ T12] hsr_slave_0: left promiscuous mode [ 112.707306][ T5815] Bluetooth: hci0: command tx timeout [ 112.718087][ T12] hsr_slave_1: left promiscuous mode [ 112.778785][ T12] veth1_macvtap: left promiscuous mode [ 112.823779][ T12] veth0_macvtap: left promiscuous mode [ 112.836025][ T12] veth1_vlan: left promiscuous mode [ 112.841349][ T12] veth0_vlan: left promiscuous mode [ 113.091574][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 113.091590][ T30] audit: type=1400 audit(1749914121.847:307): avc: denied { map } for pid=7031 comm="syz.2.400" path="socket:[13580]" dev="sockfs" ino=13580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.816428][ T5926] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.976835][ T5934] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.986842][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 114.006722][ T5926] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 114.036716][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 114.061849][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.074066][ T5815] Bluetooth: hci2: command tx timeout [ 114.098191][ T5926] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.115986][ T5926] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.125660][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.163836][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.193175][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.203523][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.226247][ T5934] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.252221][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.282186][ T5934] usb 4-1: config 0 descriptor?? [ 114.359060][ T5926] usb 5-1: GET_CAPABILITIES returned 0 [ 114.393266][ T5926] usbtmc 5-1:16.0: can't read capabilities [ 114.600787][ T30] audit: type=1400 audit(1749914123.357:308): avc: denied { create } for pid=7053 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.647583][ T5926] usb 5-1: USB disconnect, device number 7 [ 114.720776][ T5934] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 114.742517][ T5934] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 114.779684][ T5934] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 115.082266][ C0] plantronics 0003:047F:FFFF.0008: hid_field_extract() called with n (132) > 32! (kworker/u8:0) [ 115.118806][ T30] audit: type=1400 audit(1749914123.877:309): avc: denied { ioctl } for pid=7089 comm="syz.2.410" path="socket:[13633]" dev="sockfs" ino=13633 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.207944][ T30] audit: type=1400 audit(1749914123.967:310): avc: denied { mount } for pid=7091 comm="syz.2.411" name="/" dev="ramfs" ino=13644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 115.241463][ T7092] ======================================================= [ 115.241463][ T7092] WARNING: The mand mount option has been deprecated and [ 115.241463][ T7092] and is ignored by this kernel. Remove the mand [ 115.241463][ T7092] option from the mount to silence this warning. [ 115.241463][ T7092] ======================================================= [ 115.276652][ T30] audit: type=1400 audit(1749914123.997:311): avc: denied { mounton } for pid=7091 comm="syz.2.411" path="/file0" dev="ramfs" ino=13645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 115.325804][ T24] usb 4-1: USB disconnect, device number 6 [ 115.381744][ T30] audit: type=1400 audit(1749914124.137:312): avc: denied { write } for pid=7093 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.468621][ T7094] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 115.477970][ T7094] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 115.655243][ T5845] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.805530][ T6836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.837087][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 115.863737][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.868457][ T6836] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.913528][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.954531][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.976423][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.983599][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.002775][ T5845] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.028873][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.036092][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.046572][ T30] audit: type=1400 audit(1749914124.807:313): avc: denied { mount } for pid=7110 comm="syz.3.415" name="/" dev="configfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.075439][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.090348][ T5845] usb 3-1: config 0 descriptor?? [ 116.104362][ T30] audit: type=1400 audit(1749914124.807:314): avc: denied { search } for pid=7110 comm="syz.3.415" name="/" dev="configfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.145640][ T5815] Bluetooth: hci2: command tx timeout [ 116.254758][ T30] audit: type=1400 audit(1749914124.807:315): avc: denied { search } for pid=7110 comm="syz.3.415" name="/" dev="configfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.371579][ T30] audit: type=1400 audit(1749914124.807:316): avc: denied { read open } for pid=7110 comm="syz.3.415" path="/" dev="configfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.586474][ T5845] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 116.593794][ T5845] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 116.640354][ T5845] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 116.663346][ T5845] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 116.687379][ T5845] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 116.714000][ T6836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.721230][ T5845] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 116.728963][ T5845] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 116.748029][ T5845] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 116.769226][ T6911] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.789960][ T5845] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input11 [ 116.812912][ T6911] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.830092][ T6911] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.852464][ T5845] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 116.889431][ T6911] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 116.977917][ T6836] veth0_vlan: entered promiscuous mode [ 117.009283][ T6836] veth1_vlan: entered promiscuous mode [ 117.078337][ T6836] veth0_macvtap: entered promiscuous mode [ 117.145095][ T6836] veth1_macvtap: entered promiscuous mode [ 117.192647][ T6911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.220259][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.247400][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.268875][ T6911] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.302739][ T6836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.311919][ T6836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.337234][ T6836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.349608][ T6836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.383950][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.391120][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.434580][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.441811][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.480224][ T5934] usb 3-1: USB disconnect, device number 8 [ 117.653888][ T7163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.733290][ T7166] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 117.776838][ T7166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.846516][ T7166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.853541][ T7166] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 117.872356][ T7166] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 117.934472][ T6911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.971640][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.998470][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.102244][ T2945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.132801][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 118.132817][ T30] audit: type=1400 audit(1749914126.867:318): avc: denied { mount } for pid=7172 comm="syz.3.426" name="/" dev="hugetlbfs" ino=14133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 118.139195][ T2945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.161586][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.182418][ T7173] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 118.226619][ T7173] overlayfs: failed to set xattr on upper [ 118.232446][ T7173] overlayfs: ...falling back to redirect_dir=nofollow. [ 118.255608][ T6911] veth0_vlan: entered promiscuous mode [ 118.273634][ T7173] overlayfs: ...falling back to index=off. [ 118.291960][ T30] audit: type=1400 audit(1749914126.937:319): avc: denied { mounton } for pid=7172 comm="syz.3.426" path="/88/file0/file0" dev="hugetlbfs" ino=14145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 118.315995][ T7173] overlayfs: maximum fs stacking depth exceeded [ 118.339933][ T6911] veth1_vlan: entered promiscuous mode [ 118.357731][ T30] audit: type=1400 audit(1749914126.957:320): avc: denied { create } for pid=7174 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.434798][ T30] audit: type=1400 audit(1749914126.957:321): avc: denied { write } for pid=7174 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.445209][ T6911] veth0_macvtap: entered promiscuous mode [ 118.491705][ T30] audit: type=1400 audit(1749914127.027:322): avc: denied { mounton } for pid=6836 comm="syz-executor" path="/root/syzkaller.N9Dtyq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 118.508544][ T6911] veth1_macvtap: entered promiscuous mode [ 118.531128][ T30] audit: type=1400 audit(1749914127.167:323): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 118.642300][ T6911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.688745][ T6911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.715435][ T2149] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.727991][ T6911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.744316][ T6911] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.760306][ T6911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.762951][ T30] audit: type=1400 audit(1749914127.517:324): avc: denied { map } for pid=7191 comm="syz.2.434" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 118.771717][ T6911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.804046][ T5934] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.825862][ T30] audit: type=1400 audit(1749914127.557:325): avc: denied { block_suspend } for pid=7193 comm="syz.4.435" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.912849][ T2149] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.924730][ T2149] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.971128][ T2149] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.987188][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.003660][ T5934] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 119.016342][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.024365][ T5934] usb 4-1: Product: syz [ 119.025912][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.031900][ T2149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.056934][ T2149] usb 1-1: SerialNumber: syz [ 119.064292][ T30] audit: type=1400 audit(1749914127.817:326): avc: denied { append } for pid=7196 comm="syz.2.436" name="userio" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.091459][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.101740][ T5934] usb 4-1: Manufacturer: syz [ 119.117937][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.129203][ T5934] usb 4-1: SerialNumber: syz [ 119.145638][ T5934] usb 4-1: config 0 descriptor?? [ 119.176843][ T5934] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 119.332811][ T2149] usb 1-1: 0:2 : does not exist [ 119.348138][ T2149] usb 1-1: usbmixer: too many channels (61) in unit 5 [ 119.386574][ T2149] usb 1-1: USB disconnect, device number 6 [ 119.431444][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.576084][ T5934] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 119.706060][ T49] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 119.806811][ T5925] usb 4-1: USB disconnect, device number 7 [ 119.970527][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.264594][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.274333][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.282743][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.296445][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.304691][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.307773][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.345370][ T2149] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.530031][ T2149] usb 1-1: Using ep0 maxpacket: 8 [ 120.551195][ T2149] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 120.576587][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.587047][ T2149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.609492][ T2149] usb 1-1: Product: syz [ 120.619016][ T2149] usb 1-1: Manufacturer: syz [ 120.632306][ T2149] usb 1-1: SerialNumber: syz [ 120.647464][ T30] audit: type=1400 audit(1749914129.407:327): avc: denied { search } for pid=7246 comm="syz.2.452" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 120.685317][ T2149] usb 1-1: config 0 descriptor?? [ 120.711985][ T2149] gspca_main: sq930x-2.14.0 probing 2770:930c [ 120.720872][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.762967][ T7233] chnl_net:caif_netlink_parms(): no params data found [ 121.017582][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.024744][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.050258][ T7233] bridge_slave_0: entered allmulticast mode [ 121.062087][ T7233] bridge_slave_0: entered promiscuous mode [ 121.101723][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.130816][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.155066][ T7233] bridge_slave_1: entered allmulticast mode [ 121.168613][ T7233] bridge_slave_1: entered promiscuous mode [ 121.285045][ T5934] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.294155][ T36] bridge_slave_1: left allmulticast mode [ 121.300864][ T36] bridge_slave_1: left promiscuous mode [ 121.308562][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.329272][ T36] bridge_slave_0: left allmulticast mode [ 121.338799][ T36] bridge_slave_0: left promiscuous mode [ 121.345273][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.446465][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.468681][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.489969][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.525712][ T5934] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.534792][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.561844][ T5934] usb 3-1: config 0 descriptor?? [ 121.719978][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.731805][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.741706][ T36] bond0 (unregistering): Released all slaves [ 121.759556][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.770415][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 121.784760][ T7270] netlink: 'syz.3.456': attribute type 30 has an invalid length. [ 121.803783][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.905115][ T5828] Bluetooth: hci2: command 0x1003 tx timeout [ 121.907778][ T7233] team0: Port device team_slave_0 added [ 121.912546][ T5815] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 121.919985][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 121.957877][ T7233] team0: Port device team_slave_1 added [ 121.964952][ T2149] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 121.984139][ T7270] netlink: 'syz.3.456': attribute type 30 has an invalid length. [ 122.003058][ T5934] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 122.029398][ T7278] netlink: 'syz.4.457': attribute type 1 has an invalid length. [ 122.042590][ T5934] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 122.091876][ T7278] bond3: entered promiscuous mode [ 122.101419][ T5934] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 122.136141][ T7278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.162243][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.173159][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.199713][ T2149] gspca_sq930x: Sensor ov9630 not yet treated [ 122.219991][ T2149] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 122.232613][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.248498][ T2149] usb 1-1: USB disconnect, device number 7 [ 122.257829][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.264789][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.298743][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.379241][ T7280] bond3: (slave veth3): making interface the new active one [ 122.387541][ T7280] veth3: entered promiscuous mode [ 122.393100][ T7280] bond3: (slave veth3): Enslaving as an active interface with an up link [ 122.398310][ T5815] Bluetooth: hci5: command tx timeout [ 122.455382][ T36] hsr_slave_0: left promiscuous mode [ 122.462848][ T36] hsr_slave_1: left promiscuous mode [ 122.469492][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.477938][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.500033][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.519832][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.558698][ T5925] usb 3-1: USB disconnect, device number 9 [ 122.571968][ T36] veth1_macvtap: left promiscuous mode [ 122.603659][ T36] veth0_macvtap: left promiscuous mode [ 122.621933][ T36] veth1_vlan: left promiscuous mode [ 122.629723][ T36] veth0_vlan: left promiscuous mode [ 123.188952][ T36] team0 (unregistering): Port device team_slave_1 removed [ 123.238280][ T36] team0 (unregistering): Port device team_slave_0 removed [ 123.510812][ T7291] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 123.545785][ T5845] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 123.722146][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.736024][ T7233] hsr_slave_0: entered promiscuous mode [ 123.742791][ T7233] hsr_slave_1: entered promiscuous mode [ 123.744794][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.782444][ T5845] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 123.785465][ T7233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.794656][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.813103][ T7233] Cannot create hsr debugfs directory [ 123.830919][ T5845] usb 3-1: config 0 descriptor?? [ 123.859690][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 123.859705][ T30] audit: type=1400 audit(1749914132.617:332): avc: denied { read } for pid=7323 comm="syz.0.469" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.939554][ T30] audit: type=1400 audit(1749914132.657:333): avc: denied { open } for pid=7323 comm="syz.0.469" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.939618][ T30] audit: type=1400 audit(1749914132.657:334): avc: denied { ioctl } for pid=7323 comm="syz.0.469" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.024957][ T5934] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.175048][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 124.199125][ T5934] usb 4-1: config 9 has an invalid interface number: 8 but max is 1 [ 124.208725][ T5934] usb 4-1: config 9 has an invalid interface number: 3 but max is 1 [ 124.226779][ T5934] usb 4-1: config 9 has no interface number 0 [ 124.235754][ T5934] usb 4-1: config 9 has no interface number 1 [ 124.251220][ T5934] usb 4-1: config 9 interface 8 has no altsetting 0 [ 124.278220][ T5934] usb 4-1: config 9 interface 3 has no altsetting 0 [ 124.295549][ T5934] usb 4-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=da.72 [ 124.304656][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.336439][ T5934] usb 4-1: Product: syz [ 124.340639][ T5934] usb 4-1: Manufacturer: syz [ 124.351933][ T5934] usb 4-1: SerialNumber: syz [ 124.468658][ T5815] Bluetooth: hci5: command tx timeout [ 124.602555][ T5934] usb 4-1: selecting invalid altsetting 0 [ 124.623410][ T7233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.635000][ T5934] usb 4-1: Could not set interface, error -22 [ 124.644513][ T5934] usb 4-1: USB disconnect, device number 8 [ 124.657028][ T7233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.672686][ T7233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.697741][ T7233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.799072][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.819186][ T7233] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.830675][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.837830][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.861488][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.868641][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.887930][ T5845] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000B/input/input13 [ 125.043499][ T5845] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000B/input/input14 [ 125.107928][ T5845] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000B/input/input15 [ 125.227899][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.297200][ T5845] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000B/input/input16 [ 125.308566][ T7364] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 125.343585][ T30] audit: type=1400 audit(1749914134.087:335): avc: denied { connect } for pid=7361 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.408670][ T5845] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 125.447636][ T5845] usb 3-1: USB disconnect, device number 10 [ 125.516128][ T7364] bond2: entered promiscuous mode [ 125.570116][ T7364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.616359][ T7233] veth0_vlan: entered promiscuous mode [ 125.657829][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.473'. [ 125.700113][ T7375] fido_id[7375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 125.718385][ T7368] bond2: (slave veth3): making interface the new active one [ 125.743535][ T7368] veth3: entered promiscuous mode [ 125.771594][ T7368] bond2: (slave veth3): Enslaving as an active interface with an up link [ 125.798334][ T30] audit: type=1400 audit(1749914134.557:336): avc: denied { name_connect } for pid=7380 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 125.818331][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.876328][ T7233] veth1_vlan: entered promiscuous mode [ 125.921944][ T30] audit: type=1400 audit(1749914134.637:337): avc: denied { listen } for pid=7380 comm="syz.4.475" lport=41093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.010411][ T7233] veth0_macvtap: entered promiscuous mode [ 126.056823][ T7233] veth1_macvtap: entered promiscuous mode [ 126.120616][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.152378][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.171577][ T7233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.195813][ T7233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.217448][ T7233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.236107][ T7233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.392844][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.423162][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.532745][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.542815][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.550681][ T5815] Bluetooth: hci5: command tx timeout [ 126.805079][ T30] audit: type=1400 audit(1749914135.557:338): avc: denied { override_creds } for pid=7420 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 126.947720][ T30] audit: type=1400 audit(1749914135.707:339): avc: denied { create } for pid=7425 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.967122][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.147351][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.317925][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.335161][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 127.336564][ T30] audit: type=1400 audit(1749914136.087:340): avc: denied { create } for pid=7443 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.347766][ T5925] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 127.385878][ T5925] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 127.399012][ T30] audit: type=1400 audit(1749914136.127:341): avc: denied { connect } for pid=7443 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.415005][ T5925] usb 1-1: config 0 has no interface number 0 [ 127.418470][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.424534][ T5925] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 127.483721][ T5925] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 127.545031][ T5925] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.563672][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 127.578466][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.596723][ T5925] usb 1-1: config 0 interface 52 has no altsetting 0 [ 127.607737][ T10] usb 4-1: Product: syz [ 127.621821][ T10] usb 4-1: Manufacturer: syz [ 127.628553][ T10] usb 4-1: SerialNumber: syz [ 127.636206][ T5925] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 127.657057][ T10] usb 4-1: config 0 descriptor?? [ 127.662078][ T5925] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 127.685481][ T10] ch341 4-1:0.0: ch341-uart converter detected [ 127.691770][ T5925] usb 1-1: Manufacturer: syz [ 127.703739][ T5925] usb 1-1: config 0 descriptor?? [ 127.840821][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.948775][ T5925] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input17 [ 128.459060][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.710663][ T10] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 128.741422][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.889439][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.914681][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.942917][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.961557][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.966377][ T5934] usb 4-1: USB disconnect, device number 9 [ 129.005969][ T5934] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 129.026849][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.040920][ T5934] ch341 4-1:0.0: device disconnected [ 129.063313][ T5951] usb 1-1: USB disconnect, device number 8 [ 129.063473][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 129.117481][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.815641][ T7524] Set syz1 is full, maxelem 1038 reached [ 129.886850][ T13] bridge_slave_1: left allmulticast mode [ 129.892535][ T13] bridge_slave_1: left promiscuous mode [ 129.896747][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 129.933645][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 129.937998][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.967456][ T7530] netlink: 'syz.4.516': attribute type 15 has an invalid length. [ 129.983091][ T13] bridge_slave_0: left allmulticast mode [ 130.005214][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 130.026980][ T13] bridge_slave_0: left promiscuous mode [ 130.033815][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.559241][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 130.559259][ T30] audit: type=1400 audit(1749914139.307:347): avc: denied { ioctl } for pid=7546 comm="syz.0.522" path="socket:[17244]" dev="sockfs" ino=17244 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.686764][ T7550] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.749029][ T30] audit: type=1400 audit(1749914139.507:348): avc: denied { bind } for pid=7549 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.814186][ T30] audit: type=1400 audit(1749914139.537:349): avc: denied { name_bind } for pid=7549 comm="syz.0.523" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 130.898754][ T30] audit: type=1400 audit(1749914139.537:350): avc: denied { node_bind } for pid=7549 comm="syz.0.523" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 130.971108][ T7553] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 131.101429][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.133313][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.184551][ T13] bond0 (unregistering): Released all slaves [ 131.197399][ T5828] Bluetooth: hci2: command tx timeout [ 131.332336][ T7487] chnl_net:caif_netlink_parms(): no params data found [ 131.355061][ T30] audit: type=1400 audit(1749914140.107:351): avc: denied { listen } for pid=7565 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.615047][ T5925] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.793531][ T7582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.835054][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 131.860079][ T7582] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 131.869693][ T5925] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.899665][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.945892][ T5925] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 131.969125][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.979105][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.005042][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.019969][ T5925] usb 1-1: config 0 descriptor?? [ 132.042871][ T7487] bridge_slave_0: entered allmulticast mode [ 132.060904][ T7487] bridge_slave_0: entered promiscuous mode [ 132.083849][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.094815][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.109059][ T7487] bridge_slave_1: entered allmulticast mode [ 132.120008][ T7487] bridge_slave_1: entered promiscuous mode [ 132.209245][ T13] hsr_slave_0: left promiscuous mode [ 132.237866][ T13] hsr_slave_1: left promiscuous mode [ 132.243861][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.272916][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.284071][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.302220][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.348326][ T13] veth1_macvtap: left promiscuous mode [ 132.353895][ T13] veth0_macvtap: left promiscuous mode [ 132.361533][ T13] veth1_vlan: left promiscuous mode [ 132.369720][ T13] veth0_vlan: left promiscuous mode [ 132.464426][ T5925] aureal 0003:0755:2626.000C: item fetching failed at offset 0/4 [ 132.490077][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.502311][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.512563][ T5925] aureal 0003:0755:2626.000C: probe with driver aureal failed with error -22 [ 132.578360][ T7605] input: syz1 as /devices/virtual/input/input18 [ 132.689635][ T5925] usb 1-1: USB disconnect, device number 9 [ 133.261050][ T30] audit: type=1400 audit(1749914142.017:352): avc: denied { accept } for pid=7626 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.287163][ T5828] Bluetooth: hci2: command tx timeout [ 133.312582][ T7629] netlink: 68 bytes leftover after parsing attributes in process `syz.0.551'. [ 133.391586][ T30] audit: type=1400 audit(1749914142.157:353): avc: denied { getopt } for pid=7632 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.396084][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 133.461747][ T13] team0 (unregistering): Port device team_slave_1 removed [ 133.493791][ T13] team0 (unregistering): Port device team_slave_0 removed [ 133.784639][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 133.801530][ T7487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.847740][ T7487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.919313][ T7635] trusted_key: syz.0.553 sent an empty control message without MSG_MORE. [ 133.975842][ T30] audit: type=1400 audit(1749914142.717:354): avc: denied { connect } for pid=7638 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.015493][ T7487] team0: Port device team_slave_0 added [ 134.038615][ T7487] team0: Port device team_slave_1 added [ 134.040206][ T30] audit: type=1400 audit(1749914142.737:355): avc: denied { setopt } for pid=7638 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.124570][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.167559][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.193563][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.204099][ T7487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.224002][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.261725][ T7647] block nbd0: shutting down sockets [ 134.329216][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.404988][ T7487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.627335][ T7487] hsr_slave_0: entered promiscuous mode [ 134.645867][ T7487] hsr_slave_1: entered promiscuous mode [ 134.662224][ T7487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.697104][ T7487] Cannot create hsr debugfs directory [ 134.703939][ T7666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.954251][ T7672] netlink: 72 bytes leftover after parsing attributes in process `syz.0.564'. [ 135.032914][ T7672] netlink: 80 bytes leftover after parsing attributes in process `syz.0.564'. [ 135.164945][ T30] audit: type=1400 audit(1749914143.917:356): avc: denied { setopt } for pid=7680 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.285007][ T2149] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.338778][ T7662] Bluetooth: MGMT ver 1.23 [ 135.349534][ T5828] Bluetooth: hci2: command tx timeout [ 135.353793][ T7662] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 135.440446][ T2149] usb 5-1: Using ep0 maxpacket: 32 [ 135.457239][ T2149] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 135.475457][ T2149] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.502184][ T2149] usb 5-1: config 0 has no interface number 0 [ 135.518924][ T2149] usb 5-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.560238][ T2149] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 135.590651][ T2149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.622974][ T2149] usb 5-1: Product: syz [ 135.622995][ T2149] usb 5-1: Manufacturer: syz [ 135.623008][ T2149] usb 5-1: SerialNumber: syz [ 135.630098][ T2149] usb 5-1: config 0 descriptor?? [ 135.674737][ T2149] ums-jumpshot 5-1:0.16: USB Mass Storage device detected [ 135.690753][ T2149] ums-jumpshot 5-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 135.937418][ T30] audit: type=1400 audit(1749914144.697:357): avc: denied { read } for pid=7708 comm="syz.3.573" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.975214][ T30] audit: type=1400 audit(1749914144.697:358): avc: denied { open } for pid=7708 comm="syz.3.573" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 136.005126][ T5951] usb 5-1: USB disconnect, device number 8 [ 136.245084][ T5926] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 136.378377][ T7721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.576'. [ 136.392697][ T7721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.576'. [ 136.404137][ T7487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.419438][ T7487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.452428][ T7487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.461602][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.494857][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 136.511631][ T7487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.575346][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.618703][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.642243][ T5926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.658593][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.694338][ T7736] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 136.703652][ T5926] usb 3-1: config 0 descriptor?? [ 136.721258][ T7711] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 136.730857][ T30] audit: type=1400 audit(1749914145.487:359): avc: denied { relabelto } for pid=7731 comm="syz.4.578" name="/" dev="overlay" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 136.759247][ T7736] evm: overlay not supported [ 136.825482][ T7487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.846461][ T30] audit: type=1400 audit(1749914145.547:360): avc: denied { associate } for pid=7731 comm="syz.4.578" name="file1" dev="tmpfs" ino=728 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 136.893347][ T7487] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.944311][ T30] audit: type=1400 audit(1749914145.607:361): avc: denied { rmdir } for pid=5816 comm="syz-executor" name="file1" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 136.970600][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.970714][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.981948][ T1631] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.994604][ T1631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.099733][ T30] audit: type=1400 audit(1749914145.787:362): avc: denied { ioctl } for pid=7750 comm="syz.4.580" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 137.168444][ T5926] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 137.212057][ T5926] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 137.221285][ T30] audit: type=1400 audit(1749914145.787:363): avc: denied { set_context_mgr } for pid=7750 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 137.282780][ T5926] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 137.425022][ T5828] Bluetooth: hci2: command tx timeout [ 137.437847][ T5926] usb 3-1: USB disconnect, device number 11 [ 137.505552][ T7762] fido_id[7762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 137.761168][ T7487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.833704][ T7777] kvm: user requested TSC rate below hardware speed [ 137.865294][ T7487] veth0_vlan: entered promiscuous mode [ 137.902324][ T7487] veth1_vlan: entered promiscuous mode [ 138.015365][ T7487] veth0_macvtap: entered promiscuous mode [ 138.030813][ T7487] veth1_macvtap: entered promiscuous mode [ 138.101891][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.140076][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.182274][ T7487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.217978][ T7487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.244413][ T7487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.275138][ T7487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.465522][ T2149] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.473624][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.497727][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.570059][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.588991][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.636507][ T2149] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 138.657919][ T5934] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.671249][ T2149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.698700][ T2149] usb 4-1: config 0 descriptor?? [ 138.722546][ T2149] cp210x 4-1:0.0: cp210x converter detected [ 138.776748][ T30] audit: type=1400 audit(1749914147.527:364): avc: denied { write } for pid=7810 comm="syz.4.594" path="socket:[19471]" dev="sockfs" ino=19471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 138.835668][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 138.848664][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.860610][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.894207][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.919842][ T5934] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.942440][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.955841][ T5934] usb 1-1: config 0 descriptor?? [ 139.177655][ T7795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.207861][ T7795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.222856][ T2149] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 139.274808][ T2149] usb 4-1: cp210x converter now attached to ttyUSB0 [ 139.406929][ T5934] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input20 [ 139.439207][ T5934] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 139.468152][ T5951] usb 4-1: USB disconnect, device number 10 [ 139.491284][ T5951] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 139.522251][ T5951] cp210x 4-1:0.0: device disconnected [ 139.611009][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.830032][ T5926] usb 1-1: USB disconnect, device number 10 [ 140.472330][ T30] audit: type=1400 audit(1749914149.227:365): avc: denied { append } for pid=7837 comm="syz.0.602" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 140.559692][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.577277][ T7842] overlayfs: invalid origin (00000079007a6b616c6c6572310000000000000180c2000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 140.638988][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.648371][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.657809][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.668923][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.687847][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.827382][ T7850] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 140.854803][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 140.940486][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.045565][ T5934] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 141.096696][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.130898][ T30] audit: type=1326 audit(1749914149.887:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.3.613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa91b8e929 code=0x0 [ 141.199641][ T7843] chnl_net:caif_netlink_parms(): no params data found [ 141.208177][ T5934] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 141.234942][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.246103][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.256923][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 141.284459][ T5934] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 141.295902][ T5934] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 141.313406][ T5934] usb 3-1: Manufacturer: syz [ 141.337027][ T5934] usb 3-1: config 0 descriptor?? [ 141.418419][ T36] bridge_slave_1: left allmulticast mode [ 141.445325][ T36] bridge_slave_1: left promiscuous mode [ 141.454804][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.465953][ T36] bridge_slave_0: left allmulticast mode [ 141.471681][ T36] bridge_slave_0: left promiscuous mode [ 141.480422][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.648299][ T2149] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.759605][ T5934] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 141.785682][ T5934] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 141.807461][ T5934] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 141.826531][ T2149] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 141.845516][ T2149] usb 5-1: config 0 has no interface number 0 [ 141.871756][ T2149] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.892147][ T2149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.920274][ T2149] usb 5-1: config 0 descriptor?? [ 141.944306][ T2149] cp210x 5-1:0.32: cp210x converter detected [ 141.989163][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.038552][ T30] audit: type=1400 audit(1749914150.797:367): avc: denied { append } for pid=7891 comm="syz.0.616" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 142.090673][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.116708][ T36] bond0 (unregistering): Released all slaves [ 142.274303][ T30] audit: type=1400 audit(1749914151.027:368): avc: denied { watch } for pid=7897 comm="syz.0.618" path="/sys/power/pm_trace" dev="sysfs" ino=1404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 142.297890][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.311323][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.311780][ T30] audit: type=1400 audit(1749914151.027:369): avc: denied { watch_sb watch_reads } for pid=7897 comm="syz.0.618" path="/sys/power/pm_trace" dev="sysfs" ino=1404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 142.343796][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.352755][ T7843] bridge_slave_0: entered allmulticast mode [ 142.360148][ T2149] cp210x 5-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 142.370718][ T7843] bridge_slave_0: entered promiscuous mode [ 142.384403][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.386230][ T10] usb 3-1: USB disconnect, device number 12 [ 142.391917][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.425943][ T7843] bridge_slave_1: entered allmulticast mode [ 142.460977][ T7843] bridge_slave_1: entered promiscuous mode [ 142.514546][ T30] audit: type=1400 audit(1749914151.267:370): avc: denied { bind } for pid=7899 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.570307][ T2149] cp210x 5-1:0.32: GPIO initialisation failed: -19 [ 142.585292][ T30] audit: type=1400 audit(1749914151.307:371): avc: denied { listen } for pid=7899 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.610093][ T2149] usb 5-1: cp210x converter now attached to ttyUSB0 [ 142.610417][ T30] audit: type=1400 audit(1749914151.307:372): avc: denied { accept } for pid=7899 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.662068][ T7843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.705449][ T5815] Bluetooth: hci2: command tx timeout [ 142.714236][ T7843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.744857][ T36] hsr_slave_0: left promiscuous mode [ 142.768845][ T30] audit: type=1400 audit(1749914151.517:373): avc: denied { setopt } for pid=7902 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.810391][ T36] hsr_slave_1: left promiscuous mode [ 142.825848][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.828608][ T5934] usb 5-1: USB disconnect, device number 9 [ 142.841761][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.856035][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.871011][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.881121][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.896162][ T5934] cp210x 5-1:0.32: device disconnected [ 142.930365][ T36] veth1_macvtap: left promiscuous mode [ 142.975195][ T36] veth0_macvtap: left promiscuous mode [ 142.981735][ T36] veth1_vlan: left promiscuous mode [ 143.002346][ T36] veth0_vlan: left promiscuous mode [ 143.765256][ T5934] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.927254][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 143.942313][ T5934] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 143.963756][ T5934] usb 5-1: config 0 has no interface number 0 [ 143.992827][ T5934] usb 5-1: config 0 interface 184 has no altsetting 0 [ 144.016799][ T5934] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 144.036301][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.064386][ T5934] usb 5-1: Product: syz [ 144.086516][ T5934] usb 5-1: Manufacturer: syz [ 144.091902][ T5934] usb 5-1: SerialNumber: syz [ 144.102199][ T5934] usb 5-1: config 0 descriptor?? [ 144.126908][ T5934] smsc75xx v1.0.0 [ 144.399597][ T36] team0 (unregistering): Port device team_slave_1 removed [ 144.435206][ T36] team0 (unregistering): Port device team_slave_0 removed [ 144.748308][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 144.774951][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 144.785133][ T5815] Bluetooth: hci2: command tx timeout [ 144.960188][ T7843] team0: Port device team_slave_0 added [ 145.015613][ T7843] team0: Port device team_slave_1 added [ 145.103753][ T30] audit: type=1400 audit(1749914153.857:374): avc: denied { watch } for pid=7929 comm="syz.0.624" path="/43" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.148959][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.170118][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.188848][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 145.199413][ T30] audit: type=1400 audit(1749914153.887:375): avc: denied { watch_sb } for pid=7929 comm="syz.0.624" path="/43" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 145.236935][ T7843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.247714][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 145.281004][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 145.302066][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.312520][ T5934] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 145.330179][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.353243][ T5934] usb 5-1: USB disconnect, device number 10 [ 145.508821][ T7843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.873526][ T7843] hsr_slave_0: entered promiscuous mode [ 145.918276][ T7843] hsr_slave_1: entered promiscuous mode [ 145.944215][ T7843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.964339][ T7843] Cannot create hsr debugfs directory [ 146.606350][ T7957] hub 9-0:1.0: USB hub found [ 146.626791][ T7957] hub 9-0:1.0: 1 port detected [ 146.865208][ T5815] Bluetooth: hci2: command tx timeout [ 147.165076][ T5845] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 147.345119][ T30] audit: type=1400 audit(1749914156.087:376): avc: denied { read } for pid=7984 comm="syz.2.634" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.349845][ T5845] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.412901][ T7843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.429892][ T30] audit: type=1400 audit(1749914156.087:377): avc: denied { open } for pid=7984 comm="syz.2.634" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.493687][ T30] audit: type=1400 audit(1749914156.187:378): avc: denied { mount } for pid=7986 comm="syz.0.635" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 147.516657][ T30] audit: type=1400 audit(1749914156.217:379): avc: denied { mounton } for pid=7986 comm="syz.0.635" path="/47/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 147.519357][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.552698][ T7843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.594713][ T30] audit: type=1400 audit(1749914156.347:380): avc: denied { unmount } for pid=6836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 147.624115][ T5845] usb 5-1: config 0 descriptor?? [ 147.647793][ T7843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.686879][ T5845] cp210x 5-1:0.0: cp210x converter detected [ 147.727350][ T7843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.090406][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.124374][ T7843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.135479][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.170705][ T5845] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 148.214142][ T5845] usb 5-1: cp210x converter now attached to ttyUSB0 [ 148.261271][ T7843] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.297444][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.304597][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.337324][ T30] audit: type=1400 audit(1749914157.087:381): avc: denied { create } for pid=8009 comm="syz.2.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 148.396288][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.403430][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.425879][ T5925] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.491286][ T9] usb 5-1: USB disconnect, device number 11 [ 148.514318][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 148.517083][ T7843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.532673][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 148.580371][ T7843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.597622][ T9] cp210x 5-1:0.0: device disconnected [ 148.620660][ T5925] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 148.640603][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.659293][ T5925] usb 1-1: Product: syz [ 148.669466][ T5925] usb 1-1: Manufacturer: syz [ 148.683505][ T5925] usb 1-1: SerialNumber: syz [ 148.705922][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 148.717115][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.737106][ T5925] usb 1-1: config 0 descriptor?? [ 148.744074][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 148.771642][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.817504][ T10] usb 4-1: config 0 descriptor?? [ 148.945365][ T5815] Bluetooth: hci2: command tx timeout [ 148.962673][ T7843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.975445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 149.005065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 149.070686][ T7843] veth0_vlan: entered promiscuous mode [ 149.114659][ T7843] veth1_vlan: entered promiscuous mode [ 149.200378][ T7843] veth0_macvtap: entered promiscuous mode [ 149.232895][ T7843] veth1_macvtap: entered promiscuous mode [ 149.249307][ T10] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 149.260558][ T10] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 149.277082][ T10] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 149.285131][ T10] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 149.289574][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.303637][ T10] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 149.321605][ T10] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 149.328545][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.391617][ T7843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.431494][ T7843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.463208][ T7843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.499053][ T7843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.570945][ T5925] usb 1-1: f81604_write: reg: 105 data: 10 failed: -EPROTO [ 149.595073][ T5925] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 149.602103][ T1631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.609983][ T5925] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 149.627658][ T1631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.638854][ T5925] usb 1-1: USB disconnect, device number 11 [ 149.726222][ T10] usb 4-1: USB disconnect, device number 11 [ 149.726356][ T1631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.772706][ T1631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.382503][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.703872][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.146933][ T30] audit: type=1326 audit(1749914159.907:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa91b8e929 code=0x7fc00000 [ 151.230623][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.497252][ T5845] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 151.505227][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 151.511575][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 151.659541][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.669663][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.677999][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.685065][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 151.691633][ T5845] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 151.691786][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.701063][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.705607][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.728159][ T5845] usb 3-1: config 0 descriptor?? [ 151.734145][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.941158][ T5845] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 151.963912][ T5845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.003300][ T5845] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 152.023571][ T8149] netlink: 'syz.4.662': attribute type 10 has an invalid length. [ 152.037134][ T5845] usb 3-1: media controller created [ 152.087294][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.088210][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.158286][ T5845] az6027: usb out operation failed. (-71) [ 152.163873][ T8149] bond0: (slave team0): Enslaving as an active interface with an up link [ 152.174363][ T5845] az6027: usb out operation failed. (-71) [ 152.183090][ T5845] stb0899_attach: Driver disabled by Kconfig [ 152.190085][ T5845] az6027: no front-end attached [ 152.190085][ T5845] [ 152.200231][ T5845] az6027: usb out operation failed. (-71) [ 152.209736][ T5845] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 152.225371][ T5845] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 152.258672][ T5845] dvb-usb: schedule remote query interval to 400 msecs. [ 152.280268][ T5845] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 152.305308][ T5845] usb 3-1: USB disconnect, device number 13 [ 152.470656][ T5845] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 152.532966][ T36] bridge_slave_1: left allmulticast mode [ 152.579220][ T36] bridge_slave_1: left promiscuous mode [ 152.598439][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.638746][ T36] bridge_slave_0: left allmulticast mode [ 152.639299][ T30] audit: type=1400 audit(1749914161.387:383): avc: denied { load_policy } for pid=8158 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 152.644446][ T36] bridge_slave_0: left promiscuous mode [ 152.743038][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.898971][ T8161] SELinux: failed to load policy [ 153.358262][ T30] audit: type=1400 audit(1749914162.117:384): avc: denied { watch watch_reads } for pid=8192 comm="syz.3.675" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 153.553676][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 153.637973][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.663755][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.675161][ T36] bond0 (unregistering): Released all slaves [ 153.710756][ T8195] veth0: entered promiscuous mode [ 153.806573][ T8138] chnl_net:caif_netlink_parms(): no params data found [ 153.825554][ T5815] Bluetooth: hci2: command tx timeout [ 153.865706][ T5925] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.035879][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 154.062874][ T5925] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 154.077481][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.115368][ T5925] usb 5-1: config 0 descriptor?? [ 154.292108][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.302435][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.311268][ T8138] bridge_slave_0: entered allmulticast mode [ 154.319172][ T8138] bridge_slave_0: entered promiscuous mode [ 154.339524][ T5925] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 154.371240][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.387798][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.415141][ T8138] bridge_slave_1: entered allmulticast mode [ 154.425298][ T8138] bridge_slave_1: entered promiscuous mode [ 154.456906][ T36] hsr_slave_0: left promiscuous mode [ 154.476049][ T36] hsr_slave_1: left promiscuous mode [ 154.492648][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.511113][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.534799][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.552691][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.592383][ T36] veth1_macvtap: left promiscuous mode [ 154.605546][ T36] veth0_macvtap: left promiscuous mode [ 154.615157][ T36] veth1_vlan: left promiscuous mode [ 154.621302][ T36] veth0_vlan: left promiscuous mode [ 154.960305][ T30] audit: type=1400 audit(1749914163.717:385): avc: denied { connect } for pid=8248 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.225768][ T36] team0 (unregistering): Port device team_slave_1 removed [ 155.361234][ T5925] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 155.379838][ T36] team0 (unregistering): Port device team_slave_0 removed [ 155.390236][ T5925] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 155.416998][ T5925] asix 5-1:0.0: probe with driver asix failed with error -71 [ 155.431746][ T5925] usb 5-1: USB disconnect, device number 12 [ 155.613664][ T30] audit: type=1400 audit(1749914164.367:386): avc: denied { wake_alarm } for pid=8260 comm="syz.3.698" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.735947][ T2149] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 155.877808][ T8138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.892465][ T8138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.903932][ T2149] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.924344][ T5815] Bluetooth: hci2: command tx timeout [ 155.932789][ T2149] usb 3-1: config 0 has no interface number 0 [ 155.947045][ T2149] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 155.978798][ T2149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.031692][ T2149] usb 3-1: Product: syz [ 156.048109][ T2149] usb 3-1: Manufacturer: syz [ 156.052745][ T2149] usb 3-1: SerialNumber: syz [ 156.064053][ T8138] team0: Port device team_slave_0 added [ 156.084601][ T2149] usb 3-1: config 0 descriptor?? [ 156.102433][ T8138] team0: Port device team_slave_1 added [ 156.194330][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.220981][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.274078][ T8138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.295660][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.302724][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.321564][ T2149] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 156.406032][ T2149] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 156.421709][ T8138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.440693][ T2149] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 156.462326][ T2149] usb 3-1: media controller created [ 156.507879][ T2149] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.534206][ T8138] hsr_slave_0: entered promiscuous mode [ 156.551672][ T8138] hsr_slave_1: entered promiscuous mode [ 156.559758][ T8138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.568819][ T2149] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 156.575931][ T8138] Cannot create hsr debugfs directory [ 156.672981][ T2149] usb 3-1: USB disconnect, device number 14 [ 156.705304][ T5925] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 156.866034][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 156.873096][ T5925] usb 1-1: config 0 has no interfaces? [ 156.883171][ T5925] usb 1-1: New USB device found, idVendor=6ff6, idProduct=43f9, bcdDevice= 0.00 [ 156.899780][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.926570][ T5925] usb 1-1: config 0 descriptor?? [ 157.182845][ T5925] usb 1-1: USB disconnect, device number 12 [ 157.477362][ T8138] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.495029][ T2149] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 157.509427][ T8138] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 157.527910][ T8138] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 157.540095][ T8138] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.642537][ T8138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.655551][ T2149] usb 3-1: Using ep0 maxpacket: 8 [ 157.662953][ T2149] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.683555][ T2149] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 157.694662][ T8138] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.702842][ T2149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.715957][ T2149] usb 3-1: Product: syz [ 157.720138][ T2149] usb 3-1: Manufacturer: syz [ 157.724731][ T2149] usb 3-1: SerialNumber: syz [ 157.736819][ T1631] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.743936][ T1631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.756532][ T2149] usb 3-1: config 0 descriptor?? [ 157.762426][ T5925] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 157.763305][ T1631] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.777145][ T1631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.788814][ T2149] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 157.795331][ T2149] usb 3-1: selecting invalid altsetting 1 [ 157.945383][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 157.983760][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.984311][ T30] audit: type=1400 audit(1749914166.737:387): avc: denied { accept } for pid=8337 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.995015][ T5815] Bluetooth: hci2: command tx timeout [ 158.009000][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.028842][ T2149] gspca_stk014: init reg: 0x00 [ 158.037654][ T2149] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 158.093308][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 158.111667][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.157420][ T5925] usb 5-1: config 0 descriptor?? [ 158.174796][ T5925] hub 5-1:0.0: USB hub found [ 158.185155][ T8138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.228583][ T2149] usb 3-1: USB disconnect, device number 15 [ 158.285074][ T8138] veth0_vlan: entered promiscuous mode [ 158.296599][ T8138] veth1_vlan: entered promiscuous mode [ 158.322778][ T8138] veth0_macvtap: entered promiscuous mode [ 158.341195][ T8138] veth1_macvtap: entered promiscuous mode [ 158.360911][ T8138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.371951][ T8138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.383043][ T8138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.408288][ T5925] hub 5-1:0.0: 1 port detected [ 158.408908][ T8138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.429255][ T8138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.438884][ T8138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.450049][ T5951] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 158.557126][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.572789][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.606997][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 158.624275][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.639349][ T5951] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 158.653101][ T5951] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.654993][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.668324][ T5951] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.709789][ T5951] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.721811][ T5951] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.767744][ T5951] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 158.793849][ T5951] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.842452][ T5951] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.881371][ T5951] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.921776][ T5951] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.981395][ T5951] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 158.997512][ T5951] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 159.017741][ T5951] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.073586][ T5951] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.100711][ T30] audit: type=1400 audit(1749914167.857:388): avc: denied { create } for pid=8369 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.131389][ T9] hub 5-1:0.0: activate --> -90 [ 159.135705][ T5951] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.165047][ T30] audit: type=1400 audit(1749914167.857:389): avc: denied { setopt } for pid=8369 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.201396][ T5951] usb 1-1: string descriptor 0 read error: -22 [ 159.208559][ T5951] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 159.225080][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.263764][ T5951] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 159.535321][ T5951] usb 5-1: USB disconnect, device number 13 [ 159.574313][ T9] usb 1-1: USB disconnect, device number 13 [ 160.149699][ T1631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.161875][ T30] audit: type=1326 audit(1749914168.907:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.2.714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20d2b8e929 code=0x0 [ 160.974928][ T30] audit: type=1400 audit(1749914169.727:391): avc: denied { create } for pid=8402 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.055367][ T30] audit: type=1400 audit(1749914169.737:392): avc: denied { create } for pid=8401 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 161.098287][ T30] audit: type=1400 audit(1749914169.737:393): avc: denied { ioctl } for pid=8401 comm="syz.0.717" path="socket:[22645]" dev="sockfs" ino=22645 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 161.142733][ T8410] all: renamed from bridge_slave_0 (while UP) [ 161.219127][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 161.243914][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 161.257927][ T1631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.261602][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 161.281143][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 161.315079][ T5845] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 161.326372][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.334836][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.343631][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.354343][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.363167][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.418192][ T1631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.454997][ T5925] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 161.487193][ T5845] usb 3-1: config 0 has no interfaces? [ 161.497540][ T5845] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.506893][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.521101][ T5845] usb 3-1: Product: syz [ 161.525338][ T5845] usb 3-1: Manufacturer: syz [ 161.533194][ T1631] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.546968][ T5845] usb 3-1: config 0 descriptor?? [ 161.552176][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 161.561318][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 161.581285][ T8417] chnl_net:caif_netlink_parms(): no params data found [ 161.636504][ T5925] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.651454][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.664183][ T5925] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.678156][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.687039][ T5925] usb 5-1: Product: syz [ 161.691603][ T5925] usb 5-1: Manufacturer: syz [ 161.709438][ T5925] usb 5-1: SerialNumber: syz [ 161.740402][ T8417] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.747817][ T8417] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.755518][ T8417] bridge_slave_0: entered allmulticast mode [ 161.762995][ T8417] bridge_slave_0: entered promiscuous mode [ 161.770564][ T1631] bridge_slave_1: left allmulticast mode [ 161.777604][ T1631] bridge_slave_1: left promiscuous mode [ 161.783352][ T1631] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.794061][ T1631] bridge_slave_0: left allmulticast mode [ 161.800032][ T1631] bridge_slave_0: left promiscuous mode [ 161.806986][ T1631] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.897150][ T5845] usb 3-1: USB disconnect, device number 16 [ 161.942136][ T8408] ceph: No mds server is up or the cluster is laggy [ 162.065895][ T5815] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 162.127748][ T5925] usb 5-1: 0:2 : does not exist [ 162.271531][ T1631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.283116][ T1631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.294617][ T1631] bond0 (unregistering): Released all slaves [ 162.324688][ T8417] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.339479][ T8417] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.347352][ T8417] bridge_slave_1: entered allmulticast mode [ 162.355015][ T8417] bridge_slave_1: entered promiscuous mode [ 162.478146][ T8417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.542270][ T8417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.803255][ T5881] usb 5-1: USB disconnect, device number 14 [ 162.914462][ T1631] hsr_slave_0: left promiscuous mode [ 162.945675][ T1631] hsr_slave_1: left promiscuous mode [ 162.951639][ T1631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.974997][ T1631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.982996][ T1631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.992352][ T1631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.067179][ T1631] veth1_macvtap: left promiscuous mode [ 163.072750][ T1631] veth0_macvtap: left promiscuous mode [ 163.099748][ T1631] veth1_vlan: left promiscuous mode [ 163.112874][ T1631] veth0_vlan: left promiscuous mode [ 163.424990][ T5815] Bluetooth: hci5: command tx timeout [ 163.847555][ T30] audit: type=1400 audit(1749914172.597:394): avc: denied { read } for pid=8476 comm="syz.3.744" name="usbmon8" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.140576][ T8483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.328962][ T8487] use of bytesused == 0 is deprecated and will be removed in the future, [ 164.338050][ T8487] use the actual size instead. [ 164.414004][ T1631] team0 (unregistering): Port device team_slave_1 removed [ 164.440790][ T30] audit: type=1400 audit(1749914173.197:395): avc: denied { create } for pid=8488 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 164.557659][ T1631] team0 (unregistering): Port device team_slave_0 removed [ 164.708108][ T5881] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 164.888790][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.908187][ T5881] usb 3-1: config 0 has no interfaces? [ 164.923601][ T5881] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 164.943397][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.968793][ T5881] usb 3-1: config 0 descriptor?? [ 165.065090][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 165.129735][ T8417] team0: Port device team_slave_0 added [ 165.168536][ T8417] team0: Port device team_slave_1 added [ 165.214514][ T30] audit: type=1400 audit(1749914173.967:396): avc: denied { read } for pid=8511 comm="syz.0.760" path="socket:[23857]" dev="sockfs" ino=23857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.250243][ T8489] netlink: 148 bytes leftover after parsing attributes in process `syz.2.750'. [ 165.265723][ T10] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 165.272693][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.284017][ T10] usb 4-1: config 0 has no interface number 0 [ 165.289461][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.316235][ T8417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.335037][ T10] usb 4-1: config 0 interface 98 has no altsetting 0 [ 165.355063][ T5951] usb 3-1: USB disconnect, device number 17 [ 165.355593][ T10] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 165.368349][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.380257][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.402576][ T10] usb 4-1: Product: syz [ 165.406870][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.406925][ T8417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.464935][ T10] usb 4-1: Manufacturer: syz [ 165.480584][ T10] usb 4-1: SerialNumber: syz [ 165.507257][ T5815] Bluetooth: hci5: command tx timeout [ 165.513662][ T10] usb 4-1: config 0 descriptor?? [ 165.553557][ T8417] hsr_slave_0: entered promiscuous mode [ 165.585499][ T8417] hsr_slave_1: entered promiscuous mode [ 165.614593][ T8417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.631443][ T8417] Cannot create hsr debugfs directory [ 165.722404][ T8526] netlink: 'syz.0.763': attribute type 10 has an invalid length. [ 165.751376][ T8526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.763'. [ 165.761624][ T10] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 165.768750][ T8526] dummy0: entered promiscuous mode [ 165.780394][ T8526] bridge0: port 3(dummy0) entered blocking state [ 165.790301][ T8526] bridge0: port 3(dummy0) entered disabled state [ 165.800433][ T8526] dummy0: entered allmulticast mode [ 165.811024][ T8526] bridge0: port 3(dummy0) entered blocking state [ 165.817557][ T8526] bridge0: port 3(dummy0) entered forwarding state [ 166.349644][ T5951] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 166.517006][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.540926][ T8544] Set syz1 is full, maxelem 1038 reached [ 166.548165][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.567880][ T5951] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 166.591387][ T10] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 166.599600][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.621865][ T10] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 166.633497][ T5951] usb 3-1: config 0 descriptor?? [ 166.633674][ T9] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 166.708756][ T10] usb 4-1: USB disconnect, device number 12 [ 166.717197][ T9] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 166.725137][ T30] audit: type=1400 audit(1749914175.477:397): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 166.767058][ T9] ------------[ cut here ]------------ [ 166.773123][ T9] WARNING: CPU: 0 PID: 9 at fs/kernfs/dir.c:537 kernfs_get.part.0+0x6e/0x80 [ 166.781918][ T9] Modules linked in: [ 166.786165][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 166.798016][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.808106][ T9] Workqueue: events request_firmware_work_func [ 166.814294][ T9] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 166.820492][ T9] Code: 58 b7 5a ff 85 ed 74 1c e8 0f bc 5a ff be 04 00 00 00 48 89 df e8 32 94 c1 ff f0 ff 03 5b 5d c3 cc cc cc cc e8 f3 bb 5a ff 90 <0f> 0b 90 eb d9 48 89 df e8 15 8c c1 ff eb c0 0f 1f 00 90 90 90 90 [ 166.840765][ T9] RSP: 0018:ffffc900000e7790 EFLAGS: 00010293 [ 166.848184][ T9] RAX: 0000000000000000 RBX: ffff88805bb59c30 RCX: ffffffff82615fd8 [ 166.856544][ T9] RDX: ffff88801ded4880 RSI: ffffffff82615ffd RDI: 0000000000000005 [ 166.864519][ T9] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 166.872955][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802df0f0b0 [ 166.881262][ T9] R13: ffff88807a2cc8b0 R14: 0000000000000000 R15: ffff88807a2cc8a8 [ 166.889718][ T9] FS: 0000000000000000(0000) GS:ffff888124754000(0000) knlGS:0000000000000000 [ 166.899070][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.905985][ T9] CR2: 00007f59cb9aaee0 CR3: 000000005e839000 CR4: 00000000003526f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 166.914051][ T9] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 166.922323][ T9] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.931130][ T9] Call Trace: [ 166.934414][ T9] [ 166.938191][ T9] kernfs_get+0x1f/0x30 [ 166.942367][ T9] kobject_add_internal+0x353/0x9b0 [ 166.947843][ T9] kobject_add+0x16e/0x240 [ 166.952582][ T9] ? __pfx_kobject_add+0x10/0x10 [ 166.957805][ T9] get_device_parent+0x399/0x4e0 [ 166.962757][ T9] device_add+0x1ad/0x1a70 [ 166.967527][ T9] ? __pfx_device_add+0x10/0x10 [ 166.972397][ T9] ? __init_waitqueue_head+0xca/0x150 [ 166.978123][ T9] firmware_fallback_sysfs+0x2ec/0xbe0 [ 166.983627][ T9] _request_firmware+0xfe9/0x1470 [ 166.989017][ T9] ? __pfx__request_firmware+0x10/0x10 [ 166.994629][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 167.000549][ T9] ? debug_object_deactivate+0x1ec/0x3a0 [ 167.006517][ T9] ? finish_task_switch.isra.0+0x221/0xc10 [ 167.012393][ T9] request_firmware_work_func+0xea/0x250 [ 167.018508][ T9] ? __pfx_request_firmware_work_func+0x10/0x10 [ 167.025434][ T9] ? rcu_is_watching+0x12/0xc0 [ 167.030217][ T9] process_one_work+0x9cc/0x1b70 [ 167.037240][ T9] ? __pfx_process_one_work+0x10/0x10 [ 167.042640][ T9] ? assign_work+0x1a0/0x250 [ 167.047293][ T9] worker_thread+0x6c8/0xf10 [ 167.051910][ T9] ? __pfx_worker_thread+0x10/0x10 [ 167.057061][ T9] kthread+0x3c2/0x780 [ 167.061140][ T9] ? __pfx_kthread+0x10/0x10 [ 167.065833][ T9] ? rcu_is_watching+0x12/0xc0 [ 167.070654][ T9] ? __pfx_kthread+0x10/0x10 [ 167.075319][ T9] ret_from_fork+0x5d7/0x6f0 [ 167.079926][ T9] ? __pfx_kthread+0x10/0x10 [ 167.084523][ T9] ret_from_fork_asm+0x1a/0x30 [ 167.089626][ T9] [ 167.092649][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 167.099934][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 167.111745][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.121809][ T9] Workqueue: events request_firmware_work_func [ 167.128000][ T9] Call Trace: [ 167.131266][ T9] [ 167.134181][ T9] dump_stack_lvl+0x3d/0x1f0 [ 167.138768][ T9] panic+0x71c/0x800 [ 167.142658][ T9] ? __pfx_panic+0x10/0x10 [ 167.147071][ T9] ? show_trace_log_lvl+0x29b/0x3e0 [ 167.152993][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 167.158101][ T9] ? kernfs_get.part.0+0x6e/0x80 [ 167.163043][ T9] check_panic_on_warn+0xab/0xb0 [ 167.167984][ T9] __warn+0xf6/0x3c0 [ 167.171875][ T9] ? kernfs_get.part.0+0x6e/0x80 [ 167.176816][ T9] report_bug+0x3c3/0x580 [ 167.181178][ T9] ? kernfs_get.part.0+0x6e/0x80 [ 167.186117][ T9] handle_bug+0x184/0x210 [ 167.190436][ T9] exc_invalid_op+0x17/0x50 [ 167.195012][ T9] asm_exc_invalid_op+0x1a/0x20 [ 167.199847][ T9] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 167.205385][ T9] Code: 58 b7 5a ff 85 ed 74 1c e8 0f bc 5a ff be 04 00 00 00 48 89 df e8 32 94 c1 ff f0 ff 03 5b 5d c3 cc cc cc cc e8 f3 bb 5a ff 90 <0f> 0b 90 eb d9 48 89 df e8 15 8c c1 ff eb c0 0f 1f 00 90 90 90 90 [ 167.224980][ T9] RSP: 0018:ffffc900000e7790 EFLAGS: 00010293 [ 167.231033][ T9] RAX: 0000000000000000 RBX: ffff88805bb59c30 RCX: ffffffff82615fd8 [ 167.239021][ T9] RDX: ffff88801ded4880 RSI: ffffffff82615ffd RDI: 0000000000000005 [ 167.246985][ T9] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 167.254939][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802df0f0b0 [ 167.262895][ T9] R13: ffff88807a2cc8b0 R14: 0000000000000000 R15: ffff88807a2cc8a8 [ 167.270862][ T9] ? kernfs_get.part.0+0x48/0x80 [ 167.275792][ T9] ? kernfs_get.part.0+0x6d/0x80 [ 167.280723][ T9] kernfs_get+0x1f/0x30 [ 167.284869][ T9] kobject_add_internal+0x353/0x9b0 [ 167.290079][ T9] kobject_add+0x16e/0x240 [ 167.294480][ T9] ? __pfx_kobject_add+0x10/0x10 [ 167.299424][ T9] get_device_parent+0x399/0x4e0 [ 167.304357][ T9] device_add+0x1ad/0x1a70 [ 167.308768][ T9] ? __pfx_device_add+0x10/0x10 [ 167.313612][ T9] ? __init_waitqueue_head+0xca/0x150 [ 167.318980][ T9] firmware_fallback_sysfs+0x2ec/0xbe0 [ 167.324440][ T9] _request_firmware+0xfe9/0x1470 [ 167.329547][ T9] ? __pfx__request_firmware+0x10/0x10 [ 167.335001][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 167.340808][ T9] ? debug_object_deactivate+0x1ec/0x3a0 [ 167.346433][ T9] ? finish_task_switch.isra.0+0x221/0xc10 [ 167.352236][ T9] request_firmware_work_func+0xea/0x250 [ 167.357857][ T9] ? __pfx_request_firmware_work_func+0x10/0x10 [ 167.364083][ T9] ? rcu_is_watching+0x12/0xc0 [ 167.368835][ T9] process_one_work+0x9cc/0x1b70 [ 167.373765][ T9] ? __pfx_process_one_work+0x10/0x10 [ 167.379148][ T9] ? assign_work+0x1a0/0x250 [ 167.383867][ T9] worker_thread+0x6c8/0xf10 [ 167.388569][ T9] ? __pfx_worker_thread+0x10/0x10 [ 167.393682][ T9] kthread+0x3c2/0x780 [ 167.397744][ T9] ? __pfx_kthread+0x10/0x10 [ 167.402425][ T9] ? rcu_is_watching+0x12/0xc0 [ 167.407449][ T9] ? __pfx_kthread+0x10/0x10 [ 167.412047][ T9] ret_from_fork+0x5d7/0x6f0 [ 167.416653][ T9] ? __pfx_kthread+0x10/0x10 [ 167.421255][ T9] ret_from_fork_asm+0x1a/0x30 [ 167.426036][ T9] [ 167.429332][ T9] Kernel Offset: disabled [ 167.433675][ T9] Rebooting in 86400 seconds..