last executing test programs: 49.599014598s ago: executing program 4 (id=3542): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 41.193323217s ago: executing program 4 (id=3542): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 32.719418486s ago: executing program 4 (id=3542): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 23.220375073s ago: executing program 4 (id=3542): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 14.30060303s ago: executing program 4 (id=3542): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 6.438219262s ago: executing program 2 (id=4148): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x0, 0xea60}, 0x15, 0x0, 0xfffffffe}, 0x18) 6.166755102s ago: executing program 2 (id=4151): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000020bc20005500000000000109022d00010000600209040000050301010009210000360122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000080090"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.143348159s ago: executing program 4 (id=3542): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 3.031597532s ago: executing program 0 (id=4173): r0 = fanotify_init(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x1038, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000006540)={0x2020}, 0x5b3) 3.027361914s ago: executing program 2 (id=4175): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ee2d010203010902"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x200001) 2.877219929s ago: executing program 0 (id=4178): r0 = syz_io_uring_setup(0x5d2, &(0x7f0000000600)={0x0, 0x3597, 0x80, 0x1, 0x21e}, &(0x7f0000000400)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x1, 0x8, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 2.725259962s ago: executing program 0 (id=4180): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x2f61, 0x81}}}}]}, 0x44}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.257760048s ago: executing program 3 (id=4183): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0/file0\x00') ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 2.000925861s ago: executing program 0 (id=4184): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000600)) 1.450855886s ago: executing program 2 (id=4185): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r2, 0x400}, 0x8) 1.3951586s ago: executing program 2 (id=4186): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2}, 0x10) 1.079405518s ago: executing program 0 (id=4187): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000001d00000008000300", @ANYRES32=r3], 0x44}}, 0x0) 657.177998ms ago: executing program 3 (id=4189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f00000000c0)) 512.163827ms ago: executing program 1 (id=4191): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 472.570483ms ago: executing program 3 (id=4192): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 445.274988ms ago: executing program 1 (id=4193): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setuid(r0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r2) 418.022337ms ago: executing program 1 (id=4194): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xa8}, {}, @raw32}, {0x4, 0x0, 0x0, 0x0, @tick=0x80000000, {}, {}, @quote={{0x0, 0xf}}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x1, 0x81}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}, {0x0, 0x3f, 0x0, 0x0, @tick, {0x10}, {}, @time}, {0x0, 0x0, 0x0, 0x10, @time={0xbf9e}, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}], 0x70) 342.652296ms ago: executing program 1 (id=4195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x59, 0x0}, 0x10) 279.860511ms ago: executing program 3 (id=4196): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x2, 0x0, 0x80000001, 0x6, 0x0, "7f1227f7adf97affe4ffff7d1800"}) r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000040)}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 255.854497ms ago: executing program 1 (id=4197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000180)=0x6) 182.184686ms ago: executing program 3 (id=4198): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 120.816278ms ago: executing program 3 (id=4199): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 64.067264ms ago: executing program 0 (id=4200): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r1, &(0x7f0000000040)=""/61, 0x3d) 11.878963ms ago: executing program 1 (id=4201): r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x80203) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x5, [0x1, 0xffff133a, 0xb], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x2}, {0xffffffff}, {}, {0x0, 0x3}, {0x0, 0xffffff8a}, {0x3, 0xfffffffd}, {0x0, 0x1}, {0x0, 0x1}, {0x9, 0xffffffff}], 0x10}) 0s ago: executing program 2 (id=4202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000030301"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): 6081 - 0 [ 289.688765][ T192] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.796084][ T6015] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 289.830043][ T6015] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.842513][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.852201][ T6015] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 289.860568][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 289.868599][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.874802][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 289.877884][T14096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3549'. [ 289.895750][T14096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3549'. [ 289.905804][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.909170][ T6015] usb 2-1: media controller created [ 289.932457][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.945848][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.956956][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.965282][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.973834][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.985176][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.993276][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.002264][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.006854][T14078] dtv5100: wlen = 0, aborting. [ 290.076448][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 290.083473][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 290.111117][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.129255][ T6015] zl10353_read_register: readreg error (reg=127, ret==0) [ 290.140488][ T192] bridge_slave_0: left allmulticast mode [ 290.146201][ T192] bridge_slave_0: left promiscuous mode [ 290.162202][ T10] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 290.169989][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.170531][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.187446][ T6015] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 290.198005][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.208779][ T6015] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 290.220834][ T10] usb 3-1: config 0 has no interface number 0 [ 290.227090][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.244944][ T6015] usb 2-1: USB disconnect, device number 44 [ 290.252893][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 290.263273][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 290.285210][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.297601][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.309986][ T10] usb 3-1: Product: syz [ 290.314213][ T10] usb 3-1: Manufacturer: syz [ 290.318842][ T10] usb 3-1: SerialNumber: syz [ 290.333175][ T6015] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 290.344816][ T10] usb 3-1: config 0 descriptor?? [ 290.351880][ T9] usb 1-1: config 0 descriptor?? [ 290.405709][ T5907] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 290.560863][ T10] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 290.568299][ T10] usb 3-1: No valid video chain found. [ 290.579936][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 290.588862][ T5907] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 290.597543][ T5907] usb 4-1: config 0 has no interface number 0 [ 290.604002][ T5907] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 290.614214][ T5907] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 290.627412][ T5907] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 290.636800][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.644901][ T5907] usb 4-1: Product: syz [ 290.649194][ T5907] usb 4-1: Manufacturer: syz [ 290.653974][ T5907] usb 4-1: SerialNumber: syz [ 290.668296][ T5907] usb 4-1: config 0 descriptor?? [ 290.674368][T14101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 290.682351][T14101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 290.779899][ T10] usb 3-1: USB disconnect, device number 36 [ 290.788099][ T9] microsoft 0003:045E:07DA.002C: ignoring exceeding usage max [ 290.796482][ T192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.822882][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002C/input/input64 [ 290.834939][ T192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.850664][ T192] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 290.863964][ T192] bond0 (unregistering): (slave team0): Releasing backup interface [ 290.874140][ T192] bond0 (unregistering): Released all slaves [ 290.892213][ T9] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 290.910776][T14101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 290.928408][T14101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 290.958699][ T192] tipc: Left network mode [ 291.126104][T14095] chnl_net:caif_netlink_parms(): no params data found [ 291.139004][ T48] usb 1-1: USB disconnect, device number 41 [ 291.409431][T14095] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.443631][T14095] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.481813][T14095] bridge_slave_0: entered allmulticast mode [ 291.493789][T14095] bridge_slave_0: entered promiscuous mode [ 291.523879][ T192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.537013][ T192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.547356][ T192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.555704][ T5907] asix 4-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x3b [ 291.565835][ T192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.596548][ T192] veth1_macvtap: left promiscuous mode [ 291.602185][ T192] veth0_macvtap: left promiscuous mode [ 291.607803][ T192] veth1_vlan: left promiscuous mode [ 291.613411][ T192] veth0_vlan: left promiscuous mode [ 291.658009][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 291.658028][ T30] audit: type=1400 audit(1751651963.111:1471): avc: denied { read } for pid=14124 comm="syz.1.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 291.774885][ T5907] usb 4-1: USB disconnect, device number 34 [ 291.999867][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 292.075746][ T5844] Bluetooth: hci4: command tx timeout [ 292.111175][ T192] team0 (unregistering): Port device team_slave_1 removed [ 292.157244][ T192] team0 (unregistering): Port device team_slave_0 removed [ 292.169350][ T10] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 292.171745][ T3518] smc: removing ib device syz2 [ 292.179096][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 292.197416][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 292.213470][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 292.226961][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.240262][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.249318][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.259960][ T10] usb 1-1: config 0 descriptor?? [ 292.265848][T14128] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 292.709182][ T10] plantronics 0003:047F:FFFF.002D: reserved main item tag 0xd [ 292.774229][ T10] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 292.847710][T14095] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.860257][T14095] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.878268][T14095] bridge_slave_1: entered allmulticast mode [ 292.891946][T14095] bridge_slave_1: entered promiscuous mode [ 293.048515][T14095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.077911][ T48] usb 1-1: USB disconnect, device number 42 [ 293.091874][T14095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.412598][T14095] team0: Port device team_slave_0 added [ 293.454409][T14095] team0: Port device team_slave_1 added [ 293.468388][T14142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3564'. [ 293.477759][T14142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3564'. [ 293.606175][T14095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.623447][T14095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.654375][T14095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.686755][T14095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.694043][T14095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.725155][T14095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.871791][T14095] hsr_slave_0: entered promiscuous mode [ 293.899027][T14095] hsr_slave_1: entered promiscuous mode [ 293.921069][T14095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.955908][T14095] Cannot create hsr debugfs directory [ 294.142865][ T192] IPVS: stop unused estimator thread 0... [ 294.144135][ T5844] Bluetooth: hci4: command tx timeout [ 294.759270][T14172] netlink: 'syz.1.3578': attribute type 39 has an invalid length. [ 294.786328][T14095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.832835][ T5907] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 294.846091][T14095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.997472][T14095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.006187][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 295.014598][ T5907] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 295.029197][T14095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.058912][ T5907] usb 1-1: config 254 has no interface number 0 [ 295.082780][ T5907] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 295.094909][ T5907] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 295.111237][ T5907] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 295.126957][ T5907] usb 1-1: config 254 interface 235 has no altsetting 0 [ 295.138659][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 295.160981][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 295.174894][ T5907] usb 1-1: Product: syz [ 295.179168][ T5907] usb 1-1: Manufacturer: syz [ 295.226240][ T5907] usb 1-1: SerialNumber: syz [ 295.256328][T14166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.348542][T14192] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3584'. [ 295.430631][T14095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.477192][T14095] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.485881][ T5907] usbtest 1-1:254.235: couldn't get endpoints, -71 [ 295.500015][ T5907] usbtest 1-1:254.235: probe with driver usbtest failed with error -71 [ 295.522798][ T5907] usb 1-1: USB disconnect, device number 43 [ 295.531287][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.538453][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.570000][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.577172][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.669893][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 295.830336][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 295.846861][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.868329][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.883120][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 295.910368][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 295.929177][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.945994][ T10] usb 4-1: config 0 descriptor?? [ 295.976694][T14095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.221361][ T5844] Bluetooth: hci4: command tx timeout [ 296.362547][T14095] veth0_vlan: entered promiscuous mode [ 296.367932][ T10] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 296.396416][T14095] veth1_vlan: entered promiscuous mode [ 296.415517][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002E/input/input66 [ 296.469659][T14095] veth0_macvtap: entered promiscuous mode [ 296.482403][T14095] veth1_macvtap: entered promiscuous mode [ 296.498599][ T10] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 296.528457][T14095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.568528][T14095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.585865][T14095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.596124][T14095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.613128][T14095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.630305][T14095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.641521][ T10] usb 4-1: USB disconnect, device number 35 [ 296.736212][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.755310][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.799418][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.819938][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.871725][T14231] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 297.240489][ T30] audit: type=1400 audit(1751651968.701:1472): avc: denied { setopt } for pid=14243 comm="syz.0.3604" lport=52904 faddr=255.255.255.254 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 298.017103][ T30] audit: type=1326 audit(1751651969.471:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 298.105666][ T30] audit: type=1326 audit(1751651969.471:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 298.183832][ T30] audit: type=1326 audit(1751651969.501:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 298.238622][ T3485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.281320][ T30] audit: type=1326 audit(1751651969.501:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 298.361361][ T30] audit: type=1326 audit(1751651969.501:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 298.384852][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.394855][ T30] audit: type=1326 audit(1751651969.501:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 298.418446][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.488611][ T30] audit: type=1326 audit(1751651969.501:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 298.565139][ T30] audit: type=1326 audit(1751651969.501:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 298.588468][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.638378][ T30] audit: type=1326 audit(1751651969.501:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 298.740297][ T5907] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 298.799543][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.813108][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.823378][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.836816][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.844805][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.894511][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.906472][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.916788][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.930255][ T5907] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.939323][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.949731][ T5907] usb 2-1: config 0 descriptor?? [ 299.094295][ T3485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.129672][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3624'. [ 299.274558][T14286] chnl_net:caif_netlink_parms(): no params data found [ 299.378718][ T5907] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 299.419381][ T3485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.465591][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.475184][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.482716][T14286] bridge_slave_0: entered allmulticast mode [ 299.491254][T14286] bridge_slave_0: entered promiscuous mode [ 299.499363][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.512160][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.519479][T14286] bridge_slave_1: entered allmulticast mode [ 299.534360][T14286] bridge_slave_1: entered promiscuous mode [ 299.572651][ T3485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.651115][T14286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.664650][T14286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.679125][ T5907] usb 2-1: USB disconnect, device number 45 [ 299.794633][T14286] team0: Port device team_slave_0 added [ 299.810345][T14286] team0: Port device team_slave_1 added [ 300.366510][T14286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.375337][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.401399][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.420108][T14286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.435704][T14286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.453520][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.456937][T14344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.483383][T14286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.489855][ T5907] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 300.614532][T14286] hsr_slave_0: entered promiscuous mode [ 300.637037][T14286] hsr_slave_1: entered promiscuous mode [ 300.646039][T14286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.654375][T14286] Cannot create hsr debugfs directory [ 300.665849][ T5907] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 300.675146][ T5979] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 300.690036][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.703140][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3646'. [ 300.714881][ T3485] bridge_slave_1: left allmulticast mode [ 300.715155][ T5907] usb 4-1: config 0 descriptor?? [ 300.727653][ T3485] bridge_slave_1: left promiscuous mode [ 300.730321][ T5907] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 300.740384][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.764735][ T3485] bridge_slave_0: left allmulticast mode [ 300.776469][ T3485] bridge_slave_0: left promiscuous mode [ 300.783912][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.843739][ T5979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.861854][ T5979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.885397][ T5979] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 300.907865][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.921889][T14360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.933168][ T5979] usb 3-1: config 0 descriptor?? [ 300.945562][ T5844] Bluetooth: hci4: command tx timeout [ 301.026338][T14363] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3652'. [ 301.161450][ T5907] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 301.303798][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.314653][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.325039][ T3485] bond0 (unregistering): Released all slaves [ 301.353763][ T5979] pyra 0003:1E7D:2CF6.0030: item fetching failed at offset 5/7 [ 301.374695][ T5979] pyra 0003:1E7D:2CF6.0030: parse failed [ 301.384552][ T5979] pyra 0003:1E7D:2CF6.0030: probe with driver pyra failed with error -22 [ 301.513782][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 301.566127][ T5907] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 301.574273][ T917] usb 3-1: USB disconnect, device number 37 [ 301.687722][ T24] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 301.701387][ T24] usb 1-1: config 0 has no interface number 0 [ 301.717746][ T24] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 301.737049][ T24] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.759058][ T3485] hsr_slave_0: left promiscuous mode [ 301.781343][ T3485] hsr_slave_1: left promiscuous mode [ 301.782047][ T24] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 301.792730][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.810064][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.812664][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.828246][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.836498][ T917] usb 4-1: USB disconnect, device number 36 [ 301.837614][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.848718][ T24] usb 1-1: Product: syz [ 301.854003][ T24] usb 1-1: Manufacturer: syz [ 301.858812][ T24] usb 1-1: SerialNumber: syz [ 301.865946][ T24] usb 1-1: config 0 descriptor?? [ 301.874736][T14367] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 301.892370][ T24] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 301.895938][ T3485] veth1_macvtap: left promiscuous mode [ 301.907693][ T3485] veth0_macvtap: left promiscuous mode [ 301.912141][ T24] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 301.913808][ T3485] veth1_vlan: left promiscuous mode [ 301.927967][ T3485] veth0_vlan: left promiscuous mode [ 301.954826][T14375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3657'. [ 301.966892][T14375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3657'. [ 302.405936][ T917] usb 1-1: USB disconnect, device number 44 [ 302.434771][ T917] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 302.458526][ T917] cyberjack 1-1:0.69: device disconnected [ 302.524176][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 302.524194][ T30] audit: type=1400 audit(1751651973.981:1488): avc: denied { append } for pid=14390 comm="syz.3.3662" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 302.553992][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.634567][ T3485] team0 (unregistering): Port device team_slave_1 removed [ 302.687658][ T3485] team0 (unregistering): Port device team_slave_0 removed [ 303.021586][ T5844] Bluetooth: hci4: command tx timeout [ 303.295090][T14399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.411891][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3665'. [ 303.589873][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 303.746525][T14286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.753663][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 303.762088][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 303.779138][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 303.780455][T14286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.837104][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 303.847223][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.859016][ T9] usb 2-1: Product: syz [ 303.868728][ T9] usb 2-1: Manufacturer: syz [ 303.875111][ T9] usb 2-1: SerialNumber: syz [ 303.886020][T14286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.895454][ T9] usb 2-1: config 0 descriptor?? [ 303.906158][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 303.918848][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 303.933873][T14286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.009797][ T917] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 304.065049][T14286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.095759][T14286] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.122535][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.129716][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.171376][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.173766][ T917] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 304.178526][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.190553][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.208451][ T917] usb 4-1: Product: syz [ 304.218894][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 304.237417][ T917] usb 4-1: Manufacturer: syz [ 304.242653][ T917] usb 4-1: SerialNumber: syz [ 304.249452][ T917] usb 4-1: config 0 descriptor?? [ 304.257318][ T917] ch341 4-1:0.0: ch341-uart converter detected [ 304.385219][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.399927][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.411826][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.423073][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.439853][ T24] usb 3-1: SerialNumber: syz [ 304.516820][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 304.526278][ T9] em28xx 2-1:0.0: Config register raw data: 0x41 [ 304.574074][T14286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.666282][ T24] usb 3-1: 0:2 : does not exist [ 304.702291][ T24] usb 3-1: USB disconnect, device number 38 [ 304.795353][ T48] usb 2-1: USB disconnect, device number 46 [ 304.805947][ T48] em28xx 2-1:0.0: Disconnecting em28xx [ 304.813173][T14451] batadv_slave_1: entered promiscuous mode [ 304.821137][ T48] em28xx 2-1:0.0: Freeing device [ 304.826659][T14450] batadv_slave_1: left promiscuous mode [ 304.956457][T14457] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 304.992961][T14286] veth0_vlan: entered promiscuous mode [ 305.005869][T14286] veth1_vlan: entered promiscuous mode [ 305.037005][T14286] veth0_macvtap: entered promiscuous mode [ 305.047195][T14286] veth1_macvtap: entered promiscuous mode [ 305.076373][T14286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.089901][T14286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.099923][ T5844] Bluetooth: hci4: command tx timeout [ 305.108568][T14286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.118358][T14286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.127270][T14286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.138129][T14286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.225324][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.238696][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.275091][T14463] netlink: 'syz.0.3685': attribute type 12 has an invalid length. [ 305.284716][T14463] netlink: 'syz.0.3685': attribute type 29 has an invalid length. [ 305.294707][T14463] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3685'. [ 305.294896][ T917] usb 4-1: failed to send control message: -71 [ 305.305906][T14463] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3685'. [ 305.316535][ T917] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 305.337696][ T917] usb 4-1: USB disconnect, device number 37 [ 305.350841][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.380627][ T917] ch341 4-1:0.0: device disconnected [ 305.386664][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.576026][ T30] audit: type=1400 audit(1751651977.031:1489): avc: denied { ioctl } for pid=14470 comm="syz.2.3689" path="socket:[50386]" dev="sockfs" ino=50386 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 305.632173][T14473] macsec3: entered promiscuous mode [ 305.639146][T14473] macsec3: entered allmulticast mode [ 305.647506][T14473] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 306.220943][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 306.390482][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 306.402652][ T24] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 306.415801][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.425535][ T24] usb 4-1: Product: syz [ 306.430165][ T24] usb 4-1: Manufacturer: syz [ 306.434793][ T24] usb 4-1: SerialNumber: syz [ 306.441645][ T24] usb 4-1: config 0 descriptor?? [ 306.449034][ T24] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 306.648234][T14515] af_packet: tpacket_rcv: packet too big, clamped from 52 to 0. macoff=72 [ 306.670908][ T24] gp8psk: usb in 128 operation failed. [ 306.697114][ T24] gp8psk: usb in 137 operation failed. [ 306.714529][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 306.770773][ T24] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 306.801242][ T24] usb 4-1: media controller created [ 306.852475][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.883792][ T3485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.889970][ T24] gp8psk_fe: Frontend revision 1 attached [ 306.915931][ T24] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 306.963089][ T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 307.067110][ T24] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 307.078821][ T5921] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 307.090558][ T24] gp8psk: found Genpix USB device pID = 201 (hex) [ 307.113746][ T5921] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.253258][ T30] audit: type=1400 audit(1751651978.711:1490): avc: denied { watch } for pid=14528 comm="syz.2.3715" path="/763/file0" dev="tmpfs" ino=3893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 307.402385][ T48] usb 4-1: USB disconnect, device number 38 [ 307.475708][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.492674][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.505640][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.515313][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.523222][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.560877][ T48] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 307.733024][T14536] chnl_net:caif_netlink_parms(): no params data found [ 307.936337][ T30] audit: type=1400 audit(1751651979.371:1491): avc: denied { map } for pid=14547 comm="syz.2.3718" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 307.964342][ T30] audit: type=1400 audit(1751651979.371:1492): avc: denied { execute } for pid=14547 comm="syz.2.3718" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 308.028003][T14536] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.035324][T14536] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.042796][T14536] bridge_slave_0: entered allmulticast mode [ 308.052062][T14536] bridge_slave_0: entered promiscuous mode [ 308.062188][T14536] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.077672][T14536] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.086201][T14536] bridge_slave_1: entered allmulticast mode [ 308.094143][T14536] bridge_slave_1: entered promiscuous mode [ 308.220318][ T3485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.230812][ T30] audit: type=1400 audit(1751651979.671:1493): avc: denied { setopt } for pid=14551 comm="syz.3.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 308.339302][T14560] overlayfs: failed to resolve './file1': -2 [ 308.384012][ T3485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.500175][T14536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.585874][ T3485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.625768][ T30] audit: type=1400 audit(1751651980.071:1494): avc: denied { read } for pid=14567 comm="syz.2.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 308.646118][T14536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.796411][T14536] team0: Port device team_slave_0 added [ 308.824218][T14536] team0: Port device team_slave_1 added [ 308.947072][T14536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.967378][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.000402][T14536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.037415][T14536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.046754][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.078212][T14536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.142662][T14599] could not open pipe file descriptor [ 309.162569][ T3485] bridge_slave_1: left allmulticast mode [ 309.169295][ T3485] bridge_slave_1: left promiscuous mode [ 309.178715][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.179847][ T5907] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 309.196981][ T3485] bridge_slave_0: left allmulticast mode [ 309.204058][ T3485] bridge_slave_0: left promiscuous mode [ 309.211700][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.362979][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 309.374443][ T5907] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 309.394222][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.422907][ T5907] usb 2-1: config 0 descriptor?? [ 309.433724][ T5907] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 309.581287][ T5844] Bluetooth: hci4: command tx timeout [ 309.802544][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.817328][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.851687][ T3485] bond0 (unregistering): Released all slaves [ 309.906374][T14536] hsr_slave_0: entered promiscuous mode [ 309.914621][T14536] hsr_slave_1: entered promiscuous mode [ 309.921973][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 309.932192][ T59] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 309.941363][T14536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.948983][T14536] Cannot create hsr debugfs directory [ 310.000103][ T5837] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 310.175327][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 310.185268][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 310.197293][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 310.216916][ T5837] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 310.234983][ T3485] hsr_slave_0: left promiscuous mode [ 310.236127][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.248720][ T3485] hsr_slave_1: left promiscuous mode [ 310.260526][ T5837] usb 4-1: Product: syz [ 310.260589][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.266184][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.273478][ T5837] usb 4-1: Manufacturer: syz [ 310.285090][ T5837] usb 4-1: SerialNumber: syz [ 310.293946][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.295343][ T5837] usb 4-1: config 0 descriptor?? [ 310.308173][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.335332][ T3485] veth1_macvtap: left promiscuous mode [ 310.341223][ T3485] veth0_macvtap: left promiscuous mode [ 310.350019][ T3485] veth1_vlan: left promiscuous mode [ 310.355403][ T3485] veth0_vlan: left promiscuous mode [ 310.361068][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 310.371309][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.387972][ T10] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 310.397580][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.411244][ T10] usb 3-1: Product: syz [ 310.415555][ T10] usb 3-1: Manufacturer: syz [ 310.422562][ T10] usb 3-1: SerialNumber: syz [ 310.431567][ T10] usb 3-1: config 0 descriptor?? [ 310.439227][ T10] cdc_ether 3-1:0.0: probe with driver cdc_ether failed with error -22 [ 310.452994][ T10] usb 3-1: unsupported MDLM descriptors [ 310.493611][ T5907] gspca_nw80x: reg_w err -71 [ 310.498415][ T5907] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 310.519460][ T5907] usb 2-1: USB disconnect, device number 47 [ 310.555094][ T5837] usb 4-1: USB disconnect, device number 39 [ 310.661513][ T10] usb 3-1: USB disconnect, device number 39 [ 310.992426][ T3485] team0 (unregistering): Port device team_slave_1 removed [ 311.040094][ T3485] team0 (unregistering): Port device team_slave_0 removed [ 311.128677][T14632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.410102][ T5921] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 311.581589][ T5921] usb 4-1: config 223 has an invalid interface number: 35 but max is 0 [ 311.595754][ T5921] usb 4-1: config 223 has no interface number 0 [ 311.611107][ T5921] usb 4-1: config 223 interface 35 has no altsetting 0 [ 311.622113][ T5921] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=b4.bb [ 311.631481][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.639515][ T5921] usb 4-1: Product: syz [ 311.646673][ T5921] usb 4-1: Manufacturer: syz [ 311.661496][ T5154] Bluetooth: hci4: command tx timeout [ 311.668366][ T5921] usb 4-1: SerialNumber: syz [ 311.889130][ T5921] usbserial_generic 4-1:223.35: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 311.906860][ T5921] usbserial_generic 4-1:223.35: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 311.921592][ T5921] usbserial_generic 4-1:223.35: device has no bulk endpoints [ 311.930395][ T5921] safe_serial 4-1:223.35: safe_serial converter detected [ 311.937865][ T5921] safe_serial 4-1:223.35: probe with driver safe_serial failed with error -22 [ 311.950403][ T5921] usb 4-1: USB disconnect, device number 40 [ 311.980366][ T5154] Bluetooth: hci5: command 0x1003 tx timeout [ 311.987098][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 312.093355][T14656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14656 comm=syz.0.3766 [ 312.144967][T14536] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.155554][T14536] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.164831][T14536] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.178877][T14536] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.244509][T14536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.261533][T14536] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.272235][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.279430][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.298073][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.305302][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.458220][T14536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.727013][T14680] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3770'. [ 312.852358][T14536] veth0_vlan: entered promiscuous mode [ 312.885947][T14536] veth1_vlan: entered promiscuous mode [ 312.944038][T14536] veth0_macvtap: entered promiscuous mode [ 312.966668][T14536] veth1_macvtap: entered promiscuous mode [ 312.992106][T14536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.024845][T14536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.060405][T14536] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.079468][T14536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.123760][T14536] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.153236][T14536] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.447697][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.478174][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.572520][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.585214][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.948104][ T30] audit: type=1400 audit(1751651985.401:1495): avc: denied { remount } for pid=14719 comm="syz.1.3788" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 314.141342][ T5837] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 314.316939][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.327429][ T5837] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 314.341200][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.357887][ T5837] usb 4-1: config 0 descriptor?? [ 314.365865][ T5837] pwc: Askey VC010 type 2 USB webcam detected. [ 314.592720][T14745] netlink: 'syz.0.3799': attribute type 39 has an invalid length. [ 314.776194][ T5837] pwc: recv_control_msg error -32 req 02 val 2b00 [ 314.789393][ T5837] pwc: recv_control_msg error -32 req 02 val 2700 [ 314.916479][ T30] audit: type=1400 audit(1751651986.371:1496): avc: denied { connect } for pid=14753 comm="syz.0.3802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 314.951054][ T30] audit: type=1400 audit(1751651986.371:1497): avc: denied { listen } for pid=14753 comm="syz.0.3802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 315.002397][ T5837] pwc: recv_control_msg error -71 req 04 val 1000 [ 315.017758][ T5837] pwc: recv_control_msg error -71 req 04 val 1300 [ 315.041838][ T5837] pwc: recv_control_msg error -71 req 04 val 1400 [ 315.056794][ T5837] pwc: recv_control_msg error -71 req 02 val 2000 [ 315.072575][ T5837] pwc: recv_control_msg error -71 req 02 val 2100 [ 315.087982][ T5837] pwc: recv_control_msg error -71 req 04 val 1500 [ 315.125442][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.136322][ T5837] pwc: recv_control_msg error -71 req 02 val 2500 [ 315.139844][ T5837] pwc: recv_control_msg error -71 req 02 val 2400 [ 315.180193][ T5837] pwc: recv_control_msg error -71 req 02 val 2600 [ 315.192210][ T5837] pwc: recv_control_msg error -71 req 02 val 2900 [ 315.212655][ T5837] pwc: recv_control_msg error -71 req 02 val 2800 [ 315.230320][ T5837] pwc: recv_control_msg error -71 req 04 val 1100 [ 315.239797][ T5837] pwc: recv_control_msg error -71 req 04 val 1200 [ 315.247605][ T5837] pwc: Registered as video103. [ 315.254450][ T5837] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67 [ 315.268901][ T5837] usb 4-1: USB disconnect, device number 41 [ 315.765986][ T30] audit: type=1400 audit(1751651987.221:1498): avc: denied { write } for pid=14760 comm="syz.0.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.777386][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3806'. [ 315.799383][T14767] macsec0: entered promiscuous mode [ 315.872364][T14769] netlink: 'syz.3.3809': attribute type 21 has an invalid length. [ 315.948430][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3810'. [ 315.970289][T14771] netlink: 'syz.0.3810': attribute type 30 has an invalid length. [ 315.989967][ T6015] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 315.992426][T14771] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 316.006201][T14771] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.015178][T14771] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.024008][T14771] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.114451][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.125070][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.134697][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.145159][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.151055][ T6015] usb 3-1: Using ep0 maxpacket: 16 [ 316.160157][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.176834][ T6015] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.218503][ T6015] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.258865][ T6015] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.276162][ T6015] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 316.291630][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.302585][ T6015] usb 3-1: config 0 descriptor?? [ 316.493363][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.518224][T14777] chnl_net:caif_netlink_parms(): no params data found [ 316.594708][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.712423][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.720749][ T6015] apple 0003:05AC:0247.0032: unexpected long global item [ 316.725652][ T24] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 316.739538][ T6015] apple 0003:05AC:0247.0032: parse failed [ 316.749197][ T6015] apple 0003:05AC:0247.0032: probe with driver apple failed with error -22 [ 316.857458][T14777] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.867598][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.877825][T14777] bridge_slave_0: entered allmulticast mode [ 316.886715][T14777] bridge_slave_0: entered promiscuous mode [ 316.914273][T14777] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.946485][ T6015] usb 3-1: USB disconnect, device number 40 [ 316.946602][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 316.974771][T14777] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.984808][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 316.994650][T14777] bridge_slave_1: entered allmulticast mode [ 317.005696][T14777] bridge_slave_1: entered promiscuous mode [ 317.012018][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.030162][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.036652][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.047459][ T24] usb 2-1: config 0 descriptor?? [ 317.068776][T14791] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 317.137737][T14777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.161080][T14777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.247810][T14812] input input68: cannot allocate more than FF_MAX_EFFECTS effects [ 317.255436][T14777] team0: Port device team_slave_0 added [ 317.274059][T14777] team0: Port device team_slave_1 added [ 317.311271][ T59] bridge_slave_1: left allmulticast mode [ 317.316967][ T59] bridge_slave_1: left promiscuous mode [ 317.330229][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.347504][ T59] bridge_slave_0: left allmulticast mode [ 317.354899][ T59] bridge_slave_0: left promiscuous mode [ 317.360990][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.409646][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3827'. [ 317.527721][ T24] elan 0003:04F3:0755.0033: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 317.783607][ T5837] usb 2-1: USB disconnect, device number 48 [ 317.967060][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.978926][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.990508][ T59] bond0 (unregistering): Released all slaves [ 318.010627][T14777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.017817][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.044547][T14777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.092564][T14777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.111507][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.140422][T14777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.165009][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 318.175029][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 318.220235][ T5154] Bluetooth: hci4: command tx timeout [ 318.258631][T14835] ref_ctr_offset mismatch. inode: 0x744 offset: 0x0 ref_ctr_offset(old): 0x6c ref_ctr_offset(new): 0x0 [ 318.294223][T14777] hsr_slave_0: entered promiscuous mode [ 318.311804][T14777] hsr_slave_1: entered promiscuous mode [ 318.318026][T14777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.350532][T14777] Cannot create hsr debugfs directory [ 318.370848][T14841] input: syz0 as /devices/virtual/input/input69 [ 318.409955][ T48] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 318.548332][ T59] hsr_slave_0: left promiscuous mode [ 318.563162][ T59] hsr_slave_1: left promiscuous mode [ 318.568902][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.577406][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.585232][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.591800][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.592790][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.606544][ T48] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 318.620340][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.631644][ T48] usb 3-1: config 0 descriptor?? [ 318.636571][ T59] veth1_macvtap: left promiscuous mode [ 318.642346][ T59] veth0_macvtap: left promiscuous mode [ 318.650114][ T59] veth1_vlan: left promiscuous mode [ 318.655487][ T59] veth0_vlan: left promiscuous mode [ 318.810320][ T24] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 318.994344][ T24] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 319.004172][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.019613][ T24] usb 4-1: config 0 has no interface number 0 [ 319.027133][ T24] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 319.041023][ T24] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 319.055472][ T48] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor [ 319.065436][ T24] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.082255][ T48] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0034/input/input70 [ 319.094308][ T24] usb 4-1: config 0 interface 52 has no altsetting 0 [ 319.103191][ T24] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 319.112549][ T24] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 319.121102][ T24] usb 4-1: Product: syz [ 319.125346][ T24] usb 4-1: Manufacturer: syz [ 319.130453][ T24] usb 4-1: SerialNumber: syz [ 319.142240][ T24] usb 4-1: config 0 descriptor?? [ 319.222528][ T48] keytouch 0003:0926:3333.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 319.222837][ T59] team0 (unregistering): Port device team_slave_1 removed [ 319.282868][T14833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.291645][T14833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.325473][ T59] team0 (unregistering): Port device team_slave_0 removed [ 319.387431][ T24] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 319.405841][ T24] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5 [ 319.612051][ T48] usb 4-1: USB disconnect, device number 42 [ 319.719183][ T24] usb 3-1: USB disconnect, device number 41 [ 320.218817][T14860] syzkaller1: entered promiscuous mode [ 320.229643][T14860] syzkaller1: entered allmulticast mode [ 320.300425][ T5154] Bluetooth: hci4: command tx timeout [ 320.352928][ T30] audit: type=1400 audit(1751651991.811:1499): avc: denied { shutdown } for pid=14867 comm="syz.2.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.380224][ T30] audit: type=1400 audit(1751651991.811:1500): avc: denied { write } for pid=14867 comm="syz.2.3850" path="socket:[51871]" dev="sockfs" ino=51871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.403701][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.495358][ T30] audit: type=1400 audit(1751651991.951:1501): avc: denied { read } for pid=14875 comm="syz.2.3854" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 320.519752][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.528381][ T30] audit: type=1400 audit(1751651991.951:1502): avc: denied { open } for pid=14875 comm="syz.2.3854" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 320.553163][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.559760][ T30] audit: type=1400 audit(1751651991.951:1503): avc: denied { write } for pid=14875 comm="syz.2.3854" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 320.590259][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 320.597556][ T30] audit: type=1400 audit(1751651991.951:1504): avc: denied { ioctl } for pid=14875 comm="syz.2.3854" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 320.720076][ T6015] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 320.761591][ T24] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 320.781100][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.807970][T14777] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.814919][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 320.826635][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 320.841214][T14777] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.848455][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.866165][T14777] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 320.878178][T14777] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.879846][ T6015] usb 1-1: Using ep0 maxpacket: 16 [ 320.885110][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.900129][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.911692][ T24] usb 4-1: config 0 descriptor?? [ 320.914584][ T6015] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 320.920320][T14866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 320.934314][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.952555][ T6015] usb 1-1: Product: syz [ 320.956822][ T6015] usb 1-1: Manufacturer: syz [ 320.969344][ T6015] usb 1-1: SerialNumber: syz [ 320.976924][ T6015] usb 1-1: config 0 descriptor?? [ 320.986133][ T6015] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 320.995267][ T5921] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 321.046142][T14777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.066249][T14777] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.078558][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.085731][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.102812][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.110010][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.150148][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 321.164134][ T5921] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 321.177237][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.196245][ T6015] gp8psk: usb in 128 operation failed. [ 321.204596][ T5921] usb 3-1: Product: syz [ 321.209134][ T5921] usb 3-1: Manufacturer: syz [ 321.216352][ T5921] usb 3-1: SerialNumber: syz [ 321.221954][ T6015] gp8psk: usb in 137 operation failed. [ 321.227949][ T6015] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.240188][ T5921] usb 3-1: config 0 descriptor?? [ 321.248062][ T5921] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 321.258518][ T6015] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 321.268674][ T6015] usb 1-1: media controller created [ 321.297228][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.318656][ T6015] gp8psk_fe: Frontend revision 1 attached [ 321.324617][ T6015] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 321.332988][ T6015] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 321.374422][T14777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.385785][ T24] plantronics 0003:047F:FFFF.0035: reserved main item tag 0xd [ 321.401946][ T24] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 321.453649][ T5921] gp8psk: usb in 128 operation failed. [ 321.461646][ T5921] gp8psk: usb in 137 operation failed. [ 321.467165][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.479371][ T5921] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 321.492799][ T5921] usb 3-1: media controller created [ 321.515144][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.538593][ T5921] gp8psk_fe: Frontend revision 1 attached [ 321.544744][ T5921] usb 3-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 321.555520][ T5921] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 321.582410][ T6015] gp8psk: usb in 138 operation failed. [ 321.589855][ T6015] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 321.628756][ T6015] gp8psk: found Genpix USB device pID = 201 (hex) [ 321.639278][ T6015] usb 1-1: USB disconnect, device number 45 [ 321.674637][T14777] veth0_vlan: entered promiscuous mode [ 321.691253][T14777] veth1_vlan: entered promiscuous mode [ 321.719512][T14777] veth0_macvtap: entered promiscuous mode [ 321.739306][T14777] veth1_macvtap: entered promiscuous mode [ 321.746366][ T6015] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 321.748381][ T24] usb 4-1: USB disconnect, device number 43 [ 321.788655][T14777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.813010][ T5921] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 321.813048][T14777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.826900][ T5921] gp8psk: found Genpix USB device pID = 201 (hex) [ 321.842845][T14777] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.852905][T14777] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.862588][T14777] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.872635][T14777] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.933247][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.941994][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.965459][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.975249][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.084383][ T48] usb 3-1: USB disconnect, device number 42 [ 322.134758][ T48] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 322.554901][T14918] sp0: Synchronizing with TNC [ 322.607254][T14918] sp0: Synchronizing with TNC [ 322.612245][ T48] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 322.620268][ T917] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 322.791213][ T917] usb 4-1: Using ep0 maxpacket: 16 [ 322.801620][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.818521][ T48] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 322.828535][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.838631][ T917] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 322.847942][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.858169][ T917] usb 4-1: Product: syz [ 322.868530][ T48] usb 2-1: config 0 descriptor?? [ 322.874198][ T917] usb 4-1: Manufacturer: syz [ 322.881786][ T48] pwc: Askey VC010 type 2 USB webcam detected. [ 322.888362][ T917] usb 4-1: SerialNumber: syz [ 322.896295][ T917] usb 4-1: config 0 descriptor?? [ 323.292024][ T48] pwc: recv_control_msg error -32 req 02 val 2b00 [ 323.300357][ T48] pwc: recv_control_msg error -32 req 02 val 2700 [ 323.315417][ T917] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 323.326361][ T917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 323.337291][ T917] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 323.347285][ T917] usb 4-1: media controller created [ 323.361870][ T917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.516071][ T48] pwc: recv_control_msg error -71 req 04 val 1000 [ 323.536147][ T48] pwc: recv_control_msg error -71 req 04 val 1300 [ 323.555478][ T48] pwc: recv_control_msg error -71 req 04 val 1400 [ 323.562713][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 323.580661][ T48] pwc: recv_control_msg error -71 req 02 val 2000 [ 323.600938][ T48] pwc: recv_control_msg error -71 req 02 val 2100 [ 323.615715][ T3518] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.627414][ T48] pwc: recv_control_msg error -71 req 04 val 1500 [ 323.636653][ T48] pwc: recv_control_msg error -71 req 02 val 2500 [ 323.650961][ T48] pwc: recv_control_msg error -71 req 02 val 2400 [ 323.662790][ T48] pwc: recv_control_msg error -71 req 02 val 2600 [ 323.676716][ T48] pwc: recv_control_msg error -71 req 02 val 2900 [ 323.684987][ T48] pwc: recv_control_msg error -71 req 02 val 2800 [ 323.692150][ T48] pwc: recv_control_msg error -71 req 04 val 1100 [ 323.698908][ T48] pwc: recv_control_msg error -71 req 04 val 1200 [ 323.707070][ T48] pwc: Registered as video103. [ 323.714248][ T48] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input73 [ 323.727222][ T48] usb 2-1: USB disconnect, device number 49 [ 323.753437][ T24] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 323.762697][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.773546][ T24] usb 3-1: Product: syz [ 323.777785][ T24] usb 3-1: Manufacturer: syz [ 323.782668][ T24] usb 3-1: SerialNumber: syz [ 323.788707][ T24] usb 3-1: config 0 descriptor?? [ 323.912179][T14911] dtv5100: wlen = 0, aborting. [ 323.912488][ T917] zl10353_read_register: readreg error (reg=127, ret==0) [ 323.924646][ T917] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 323.932905][ T917] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 323.948456][ T917] usb 4-1: USB disconnect, device number 44 [ 323.966057][ T917] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 324.437185][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.448787][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.459841][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.471871][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.479469][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.831148][T14948] chnl_net:caif_netlink_parms(): no params data found [ 324.844901][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 324.868490][ T24] asix 3-1:0.0: probe with driver asix failed with error -71 [ 324.899786][ T24] usb 3-1: USB disconnect, device number 43 [ 324.937307][ T3518] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.963572][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 325.095059][T14948] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.113199][T14948] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.143132][T14948] bridge_slave_0: entered allmulticast mode [ 325.159542][T14948] bridge_slave_0: entered promiscuous mode [ 325.168111][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 325.175706][ T10] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 325.189589][T14948] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.207409][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 325.226768][T14948] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.242320][T14948] bridge_slave_1: entered allmulticast mode [ 325.248480][ T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 325.271521][T14948] bridge_slave_1: entered promiscuous mode [ 325.277970][ T10] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 325.293499][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.325079][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 325.338248][ T3518] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.349380][ T10] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 325.358167][ T10] usb 1-1: Product: syz [ 325.367231][ T10] usb 1-1: Manufacturer: syz [ 325.372074][ T10] usb 1-1: SerialNumber: syz [ 325.391919][ T10] usb 1-1: config 0 descriptor?? [ 325.413734][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 325.437155][T14948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.461101][ T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 325.527417][ T3518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.566180][T14948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.618465][ T10] usb 1-1: USB disconnect, device number 46 [ 325.634327][ T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 325.708325][T14948] team0: Port device team_slave_0 added [ 325.745891][T14948] team0: Port device team_slave_1 added [ 325.856599][T14948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.864513][T14948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.929940][T14948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.960859][T14948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.983166][T14948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.009095][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.089412][T14948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.316337][ T3518] bridge_slave_1: left allmulticast mode [ 326.340645][ T3518] bridge_slave_1: left promiscuous mode [ 326.346439][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.379138][ T3518] bridge_slave_0: left allmulticast mode [ 326.397501][ T3518] bridge_slave_0: left promiscuous mode [ 326.410694][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.559789][ T5844] Bluetooth: hci4: command tx timeout [ 326.972606][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.984161][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.994596][ T3518] bond0 (unregistering): Released all slaves [ 327.024496][T14948] hsr_slave_0: entered promiscuous mode [ 327.035706][T14948] hsr_slave_1: entered promiscuous mode [ 327.042234][T14948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.060520][T14948] Cannot create hsr debugfs directory [ 327.358922][ T3518] hsr_slave_0: left promiscuous mode [ 327.365328][ T24] IPVS: starting estimator thread 0... [ 327.373160][T15016] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 327.373414][ T3518] hsr_slave_1: left promiscuous mode [ 327.400042][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.408520][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.424307][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.432073][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.469053][ T3518] veth1_macvtap: left promiscuous mode [ 327.478881][ T3518] veth0_macvtap: left promiscuous mode [ 327.486589][ T3518] veth1_vlan: left promiscuous mode [ 327.499960][ T3518] veth0_vlan: left promiscuous mode [ 327.504788][T15021] IPVS: using max 43 ests per chain, 103200 per kthread [ 327.651566][T15027] Bluetooth: MGMT ver 1.23 [ 327.771228][T15031] virtiofs: Unknown parameter 'always 1 V3 [ 327.771228][T15031] 010000E0 1 0:00000000 0 [ 327.771228][T15031] 21 vxcan0 : 1 V3 [ 327.771228][T15031] 010000E0 1 0:00000000 0 [ 327.771228][T15031] 22 vxcan1 : 1 V3 [ 327.771228][T15031] 010000E0 1 0:00000000 0 [ 327.771228][T15031] 23 veth0 : 1 V3 [ 327.771228][T15031] 010000E0 1 0:00000000 0 [ 327.771228][T15031] 24 veth1 : 1 V3 [ 327.771228][T15031] 010000E0 1 0:00000000 0 [ 327.771228][T15031] 25 wg0 : 1 V3 [ 327.771228][T15031] 010000E0 1 0:00000000 0 [ 327.771228][T15031] 26 wg1 : 1 V3 [ 327.771228][T15031] 010000E0 1 0:00000000 0 [ 327.771228][T15031] 27 wg2 : 1 V3 [ 327.771228][T15031] 010000E0 1 0:00000000 0 [ 327.771228][T15031] 28 veth0_to_bridge: 1 V3 [ 327.771228][T15031] 010000E0 1 0:00000000 0 [ 327.771228][T15031] 29 bridge_slave_0: Z' [ 328.630316][ T5154] Bluetooth: hci4: command tx timeout [ 328.699947][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 328.876119][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 328.923455][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 328.955972][ T5907] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 328.980115][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 329.133807][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 329.136283][ T10] usb 4-1: config 0 has no interfaces? [ 329.141874][ T5907] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 329.166285][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.166630][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 329.174486][ T5907] usb 2-1: Product: syz [ 329.187526][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.187839][ T5907] usb 2-1: Manufacturer: syz [ 329.196015][ T10] usb 4-1: Product: syz [ 329.196037][ T10] usb 4-1: Manufacturer: syz [ 329.196051][ T10] usb 4-1: SerialNumber: syz [ 329.211983][ T5907] usb 2-1: SerialNumber: syz [ 329.229637][ T10] usb 4-1: config 0 descriptor?? [ 329.243415][ T5907] usb 2-1: config 0 descriptor?? [ 329.251818][ T5907] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 329.509516][T15070] veth1_to_bond: entered allmulticast mode [ 329.531898][ T10] usb 4-1: USB disconnect, device number 45 [ 329.540743][T15073] veth1_to_bond: entered promiscuous mode [ 329.552445][T15069] veth1_to_bond: left promiscuous mode [ 329.559323][T15069] veth1_to_bond: left allmulticast mode [ 330.184912][ T30] audit: type=1400 audit(1751652001.641:1505): avc: denied { read } for pid=15086 comm="syz.0.3932" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 330.286346][ T5907] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 330.304980][ T5907] usb 2-1: USB disconnect, device number 50 [ 330.336298][T15088] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.353271][T14948] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.360000][T15088] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 330.386479][T14948] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.391271][T15088] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 330.414416][T14948] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.436975][T14948] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.540962][T14948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.566148][T14948] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.585846][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.593041][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.608153][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.615292][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.856258][T14948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.243874][T15133] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 331.271191][ T30] audit: type=1400 audit(1751652002.721:1506): avc: denied { bind } for pid=15134 comm="syz.3.3945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 331.276220][T14948] veth0_vlan: entered promiscuous mode [ 331.307835][T14948] veth1_vlan: entered promiscuous mode [ 331.412793][T14948] veth0_macvtap: entered promiscuous mode [ 331.446060][T14948] veth1_macvtap: entered promiscuous mode [ 331.517134][T14948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.544110][T14948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.565603][T14948] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.608874][T14948] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.624720][T14948] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.639133][T14948] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.723797][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.742063][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.750329][ T5907] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 331.787811][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.799289][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.899955][ T5837] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 331.904149][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 331.924764][ T5907] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 331.934893][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.949790][ T5907] usb 3-1: config 0 descriptor?? [ 331.963908][T15143] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 332.028847][T15159] syzkaller1: entered promiscuous mode [ 332.036944][T15159] syzkaller1: entered allmulticast mode [ 332.073452][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.085686][ T5837] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 332.095530][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.104258][ T5837] usb 1-1: Product: syz [ 332.108490][ T5837] usb 1-1: Manufacturer: syz [ 332.119746][ T5837] usb 1-1: SerialNumber: syz [ 332.130559][ T5837] usb 1-1: config 0 descriptor?? [ 332.159587][ T5837] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 332.346697][ T5837] usb 1-1: USB disconnect, device number 47 [ 332.385076][ T5907] elan 0003:04F3:0755.0036: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 332.606035][ T6015] usb 3-1: USB disconnect, device number 44 [ 332.739876][ T5907] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 332.889914][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 332.905797][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 332.924512][ T5907] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 332.970610][ T5907] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 333.006825][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.019743][ T5907] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.029112][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.038576][ T5907] usb 2-1: Product: syz [ 333.049801][ T5907] usb 2-1: Manufacturer: syz [ 333.060264][ T5907] usb 2-1: SerialNumber: syz [ 333.108423][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.202156][ T30] audit: type=1326 audit(1751652004.661:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2857d2ab19 code=0x7ffc0000 [ 333.331553][ T30] audit: type=1326 audit(1751652004.661:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2857d8e929 code=0x7ffc0000 [ 333.439753][ T30] audit: type=1326 audit(1751652004.661:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2857d2ab19 code=0x7ffc0000 [ 333.521051][ T5907] usb 2-1: 0:2 : does not exist [ 333.527747][ T30] audit: type=1326 audit(1751652004.661:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2857d2ab19 code=0x7ffc0000 [ 333.553883][ T30] audit: type=1326 audit(1751652004.661:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2857d2ab19 code=0x7ffc0000 [ 333.629806][ T30] audit: type=1326 audit(1751652004.661:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2857d2ab19 code=0x7ffc0000 [ 333.660165][ T30] audit: type=1326 audit(1751652004.661:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2857d2ab19 code=0x7ffc0000 [ 333.684978][ T30] audit: type=1326 audit(1751652004.661:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2857d2ab19 code=0x7ffc0000 [ 333.751967][ T5907] usb 2-1: USB disconnect, device number 51 [ 334.222776][T15196] pim6reg1: entered promiscuous mode [ 334.228163][T15196] pim6reg1: entered allmulticast mode [ 334.354770][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.367394][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.378964][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.408091][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.418588][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.423845][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.619022][T15219] TCP: TCP_TX_DELAY enabled [ 334.640609][ T6015] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 334.697890][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.786831][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.803228][ T6015] usb 2-1: Using ep0 maxpacket: 16 [ 334.814184][ T6015] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 334.830039][ T6015] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.840777][ T6015] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.847799][T15199] chnl_net:caif_netlink_parms(): no params data found [ 334.851759][ T6015] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.858925][ T917] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 334.866183][ T6015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.885042][ T6015] usb 2-1: Product: syz [ 334.889318][ T6015] usb 2-1: Manufacturer: syz [ 334.895247][ T6015] usb 2-1: SerialNumber: syz [ 335.011917][T15199] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.019069][T15199] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.035599][T15199] bridge_slave_0: entered allmulticast mode [ 335.043487][T15199] bridge_slave_0: entered promiscuous mode [ 335.050557][ T917] usb 3-1: Using ep0 maxpacket: 32 [ 335.058280][T15199] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.070100][T15199] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.081851][ T917] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 335.098834][T15199] bridge_slave_1: entered allmulticast mode [ 335.105247][ T917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.118622][T15199] bridge_slave_1: entered promiscuous mode [ 335.124945][ T917] usb 3-1: Product: syz [ 335.129135][ T917] usb 3-1: Manufacturer: syz [ 335.146196][ T917] usb 3-1: SerialNumber: syz [ 335.162230][ T917] usb 3-1: config 0 descriptor?? [ 335.260685][ T59] bridge_slave_1: left allmulticast mode [ 335.276503][ T59] bridge_slave_1: left promiscuous mode [ 335.290080][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.314304][ T59] bridge_slave_0: left allmulticast mode [ 335.326064][ T6015] usb 2-1: 0:2 : does not exist [ 335.329765][ T59] bridge_slave_0: left promiscuous mode [ 335.341065][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.384452][ T917] peak_usb 3-1:0.0: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 335.545693][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 335.545727][ T30] audit: type=1400 audit(1751652007.001:1666): avc: denied { append } for pid=15241 comm="syz.3.3988" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 335.599437][ T917] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 335.608105][ T917] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 335.642967][ T917] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 335.947317][ T6015] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 335.998771][ T6015] usb 2-1: USB disconnect, device number 52 [ 336.017192][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.028462][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.038949][ T59] bond0 (unregistering): Released all slaves [ 336.058826][T15199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.111209][ T917] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 336.113480][T15199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.127831][ T917] usb 3-1: USB disconnect, device number 45 [ 336.192296][T15199] team0: Port device team_slave_0 added [ 336.218253][T15199] team0: Port device team_slave_1 added [ 336.278833][T15199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.286131][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.313807][T15199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.335693][T15199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.350311][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.384189][T15199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.406795][ T59] hsr_slave_0: left promiscuous mode [ 336.413233][ T59] hsr_slave_1: left promiscuous mode [ 336.423104][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.436311][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.444629][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.452168][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.469564][ T59] veth1_macvtap: left promiscuous mode [ 336.479894][ T59] veth0_macvtap: left promiscuous mode [ 336.485659][ T59] veth1_vlan: left promiscuous mode [ 336.496635][ T59] veth0_vlan: left promiscuous mode [ 336.540893][ T5844] Bluetooth: hci4: command tx timeout [ 336.686643][T15262] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3997'. [ 337.023568][ T917] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 337.203450][ T59] team0 (unregistering): Port device team_slave_1 removed [ 337.214301][ T917] usb 4-1: Using ep0 maxpacket: 16 [ 337.225594][ T917] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 337.249819][ T917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.260791][ T917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.277827][ T59] team0 (unregistering): Port device team_slave_0 removed [ 337.291895][ T917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.305094][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.319845][ T917] usb 4-1: Product: syz [ 337.324069][ T917] usb 4-1: Manufacturer: syz [ 337.339225][ T917] usb 4-1: SerialNumber: syz [ 337.770413][ T917] usb 4-1: 0:2 : does not exist [ 338.183086][T15199] hsr_slave_0: entered promiscuous mode [ 338.197758][T15199] hsr_slave_1: entered promiscuous mode [ 338.207982][T15199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.217465][T15199] Cannot create hsr debugfs directory [ 338.441419][ T917] usb 4-1: USB disconnect, device number 46 [ 338.620390][ T5844] Bluetooth: hci4: command tx timeout [ 339.258595][ T30] audit: type=1400 audit(1751652010.711:1667): avc: denied { override_creds } for pid=15315 comm="syz.2.4020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 339.262601][T15199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 339.323058][T15199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 339.368010][T15199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 339.399217][T15199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 339.654664][T15199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.694589][T15199] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.716992][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.724216][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.742908][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.750064][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.885531][T15347] ref_ctr_offset mismatch. inode: 0x1034 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa04 [ 340.143925][T15199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.655283][T15391] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 340.662456][T15391] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.711086][ T5844] Bluetooth: hci4: command tx timeout [ 340.721676][T15391] vhci_hcd vhci_hcd.0: Device attached [ 340.743264][T15199] veth0_vlan: entered promiscuous mode [ 340.754492][T15199] veth1_vlan: entered promiscuous mode [ 340.787029][T15199] veth0_macvtap: entered promiscuous mode [ 340.805709][T15199] veth1_macvtap: entered promiscuous mode [ 340.836097][T15199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.861469][T15199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.894690][T15199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.906069][T15199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.915817][T15199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.925275][T15199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.940158][ T5837] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 340.949796][ T917] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 341.027929][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.040265][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.075412][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.084210][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.123438][ T5837] usb 1-1: config 0 has no interfaces? [ 341.129304][ T5837] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 341.155286][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.175865][ T5837] usb 1-1: config 0 descriptor?? [ 341.326750][T15405] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.4050'. [ 341.405118][ T5837] usb 1-1: USB disconnect, device number 48 [ 341.411748][T15392] vhci_hcd: connection closed [ 341.415544][ T13] vhci_hcd: stop threads [ 341.430209][ T13] vhci_hcd: release socket [ 341.460612][ T13] vhci_hcd: disconnect device [ 341.469865][ T917] vhci_hcd: vhci_device speed not set [ 341.760074][ T5921] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 341.929945][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 341.951128][ T5921] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.983576][ T5921] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 342.010367][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.018384][ T5921] usb 3-1: Product: syz [ 342.064491][ T5921] usb 3-1: Manufacturer: syz [ 342.069198][ T5921] usb 3-1: SerialNumber: syz [ 342.100186][ T5921] usb 3-1: config 0 descriptor?? [ 342.122322][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.230336][ T5907] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 342.382267][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 342.388706][ T5907] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 342.397003][ T5907] usb 4-1: config 0 has no interface number 0 [ 342.403499][ T5907] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.415041][ T5907] usb 4-1: config 0 interface 85 has no altsetting 0 [ 342.423712][ T5907] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 342.432938][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.441284][ T5907] usb 4-1: Product: syz [ 342.445451][ T5907] usb 4-1: Manufacturer: syz [ 342.450087][ T5907] usb 4-1: SerialNumber: syz [ 342.457332][ T5907] usb 4-1: config 0 descriptor?? [ 342.523991][ T5921] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 342.603346][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.945472][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4064'. [ 342.965218][ T5921] usb 3-1: USB disconnect, device number 46 [ 342.974002][T15435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4064'. [ 342.987147][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4064'. [ 342.996495][T15435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4064'. [ 343.066793][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.073597][ T5907] appletouch 4-1:0.85: Geyser mode initialized. [ 343.114693][ T5907] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input74 [ 343.188187][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.216882][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.228184][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.238994][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.251991][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.261089][T15439] syzkaller1: entered promiscuous mode [ 343.269024][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.271648][T15439] syzkaller1: entered allmulticast mode [ 343.317363][ T5907] usb 4-1: USB disconnect, device number 47 [ 343.334396][ T5907] appletouch 4-1:0.85: input: appletouch disconnected [ 343.471000][ T59] bridge_slave_1: left allmulticast mode [ 343.476698][ T59] bridge_slave_1: left promiscuous mode [ 343.487769][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.497323][ T59] bridge_slave_0: left allmulticast mode [ 343.509818][ T59] bridge_slave_0: left promiscuous mode [ 343.515665][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.254654][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.259802][ T5907] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 344.275981][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.287417][ T59] bond0 (unregistering): Released all slaves [ 344.440770][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 344.447688][T15440] chnl_net:caif_netlink_parms(): no params data found [ 344.452836][ T5907] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 344.480040][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.488557][ T5907] usb 2-1: Product: syz [ 344.493291][ T5907] usb 2-1: Manufacturer: syz [ 344.497929][ T5907] usb 2-1: SerialNumber: syz [ 344.506137][ T5907] usb 2-1: config 0 descriptor?? [ 344.529482][ T5907] as10x_usb: device has been detected [ 344.549907][ T5907] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 344.582444][ T5907] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 344.698968][T15491] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4086'. [ 344.709101][T15489] unknown channel width for channel at 909000KHz? [ 344.732449][T15473] random: crng reseeded on system resumption [ 344.759758][ T30] audit: type=1400 audit(1751652016.211:1668): avc: denied { firmware_load } for pid=5907 comm="kworker/1:5" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 344.799994][ T5907] as10x_usb: error during firmware upload part1 [ 344.814982][ T5907] Registered device Sky IT Digital Key (green led) [ 344.833659][ T5907] usb 2-1: USB disconnect, device number 53 [ 344.877371][ T5907] Unregistered device Sky IT Digital Key (green led) [ 344.893059][ T5907] as10x_usb: device has been disconnected [ 345.091570][ T59] hsr_slave_0: left promiscuous mode [ 345.127455][ T59] hsr_slave_1: left promiscuous mode [ 345.134374][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.143184][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.170601][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.178175][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.206403][ T59] veth1_macvtap: left promiscuous mode [ 345.212864][ T59] veth0_macvtap: left promiscuous mode [ 345.218549][ T59] veth1_vlan: left promiscuous mode [ 345.224343][ T59] veth0_vlan: left promiscuous mode [ 345.350327][ T5844] Bluetooth: hci4: command tx timeout [ 345.692556][T15520] input: syz1 as /devices/virtual/input/input75 [ 345.862361][ T59] team0 (unregistering): Port device team_slave_1 removed [ 345.909575][ T59] team0 (unregistering): Port device team_slave_0 removed [ 346.064098][T15529] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 346.349988][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 346.431578][T15507] gretap0: entered promiscuous mode [ 346.438472][T15507] batman_adv: batadv0: Adding interface: macvlan2 [ 346.445209][T15507] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 346.465858][T15507] batman_adv: batadv0: Interface activated: macvlan2 [ 346.509854][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 346.521741][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 346.539654][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 346.549143][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.557762][ T10] usb 2-1: Product: syz [ 346.562097][ T10] usb 2-1: Manufacturer: syz [ 346.566709][ T10] usb 2-1: SerialNumber: syz [ 346.577740][ T10] usb 2-1: config 0 descriptor?? [ 346.585923][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 346.595531][ T10] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 346.611650][T15440] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.618789][T15440] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.645788][T15440] bridge_slave_0: entered allmulticast mode [ 346.661251][T15440] bridge_slave_0: entered promiscuous mode [ 346.687259][T15440] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.707334][T15440] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.727861][T15440] bridge_slave_1: entered allmulticast mode [ 346.744878][T15440] bridge_slave_1: entered promiscuous mode [ 346.822863][ T30] audit: type=1400 audit(1751652018.281:1669): avc: denied { search } for pid=15544 comm="syz.2.4107" name="/" dev="configfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 346.863867][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 346.865380][T15440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.935746][T15440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.944471][ T10] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 346.974680][ T10] em28xx 2-1:0.0: board has no eeprom [ 347.054364][ T10] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 347.063551][T15440] team0: Port device team_slave_0 added [ 347.076566][T15440] team0: Port device team_slave_1 added [ 347.091749][ T10] em28xx 2-1:0.0: dvb set to bulk mode. [ 347.121537][ T5921] em28xx 2-1:0.0: Binding DVB extension [ 347.146281][ T30] audit: type=1400 audit(1751652018.591:1670): avc: denied { mounton } for pid=15553 comm="syz.0.4112" path="/875/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 347.182980][T15440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.182978][ T10] usb 2-1: USB disconnect, device number 54 [ 347.183001][T15440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.191671][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 347.264703][ T5921] em28xx 2-1:0.0: Registering input extension [ 347.272900][ T10] em28xx 2-1:0.0: Closing input extension [ 347.296984][ T10] em28xx 2-1:0.0: Freeing device [ 347.302535][T15440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.364882][T15440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.420036][ T5844] Bluetooth: hci4: command tx timeout [ 347.425971][T15440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.451859][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.459961][T15440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.508403][T15440] hsr_slave_0: entered promiscuous mode [ 347.514824][T15440] hsr_slave_1: entered promiscuous mode [ 347.522213][T15440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.536925][T15440] Cannot create hsr debugfs directory [ 347.882401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 347.891015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 347.900080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 348.028812][T15577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.200041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 348.289992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 348.595049][ T30] audit: type=1326 audit(1751652020.051:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15550 comm="syz.2.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f452ab19 code=0x7ffc0000 [ 348.683205][ T30] audit: type=1326 audit(1751652020.111:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15550 comm="syz.2.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f452ab19 code=0x7ffc0000 [ 348.791097][ T30] audit: type=1326 audit(1751652020.111:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15550 comm="syz.2.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f452ab19 code=0x7ffc0000 [ 348.817239][ T30] audit: type=1326 audit(1751652020.111:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15550 comm="syz.2.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f452ab19 code=0x7ffc0000 [ 348.949446][ T30] audit: type=1326 audit(1751652020.111:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15550 comm="syz.2.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f452ab19 code=0x7ffc0000 [ 349.063839][ T30] audit: type=1326 audit(1751652020.111:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15550 comm="syz.2.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f452ab19 code=0x7ffc0000 [ 349.113190][T15440] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 349.120244][ T30] audit: type=1326 audit(1751652020.111:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15550 comm="syz.2.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f452ab19 code=0x7ffc0000 [ 349.156877][T15440] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 349.184624][T15440] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 349.221868][T15440] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 349.365240][T15440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.399421][T15628] loop6: detected capacity change from 0 to 524287999 [ 349.416614][T15440] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.433779][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.440989][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.449440][T15630] loop5: detected capacity change from 0 to 2839 [ 349.484207][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.491432][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.500347][ T5844] Bluetooth: hci4: command tx timeout [ 349.510864][T15631] loop5: detected capacity change from 2839 to 4391 [ 349.658761][T15639] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4145'. [ 349.802626][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 349.802644][ T30] audit: type=1400 audit(1751652021.261:1798): avc: denied { create } for pid=15645 comm="syz.1.4147" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 349.829751][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.872379][ T30] audit: type=1400 audit(1751652021.301:1799): avc: denied { mounton } for pid=15645 comm="syz.1.4147" path="/849/file0" dev="tmpfs" ino=4340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 349.895588][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.899596][T15649] input: syz0 as /devices/virtual/input/input77 [ 350.000004][T15653] random: crng reseeded on system resumption [ 350.005133][T15440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.024007][ T30] audit: type=1400 audit(1751652021.471:1800): avc: denied { ioctl } for pid=15652 comm="syz.0.4150" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 350.049104][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.235228][T15662] bridge0: port 3(vlan2) entered blocking state [ 350.260742][T15662] bridge0: port 3(vlan2) entered disabled state [ 350.267244][T15662] vlan2: entered allmulticast mode [ 350.300281][T15665] vivid-001: disconnect [ 350.301527][T15662] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 350.306433][T15664] vivid-001: reconnect [ 350.333441][T15662] vlan2: entered promiscuous mode [ 350.338857][T15662] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 350.360458][ T5921] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 350.521623][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.534981][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.549401][T15440] veth0_vlan: entered promiscuous mode [ 350.568959][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.583084][T15440] veth1_vlan: entered promiscuous mode [ 350.597113][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 350.635516][ T5921] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 350.649578][T15440] veth0_macvtap: entered promiscuous mode [ 350.656293][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.675932][T15440] veth1_macvtap: entered promiscuous mode [ 350.704407][T15440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.713374][ T5921] usb 3-1: config 0 descriptor?? [ 350.742929][T15440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.759042][T15440] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.793489][T15440] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.818577][T15440] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.850754][T15440] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.870207][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 350.934452][ T5921] usbhid 3-1:0.0: can't add hid device: -71 [ 350.948316][ T5921] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 350.970070][ T5921] usb 3-1: USB disconnect, device number 47 [ 351.009495][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.020542][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 351.030989][ T24] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 351.042221][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.050132][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.078154][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.090210][ T24] usb 4-1: config 0 descriptor?? [ 351.095311][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.112710][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 351.284594][T15689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4164'. [ 351.293913][T15689] netlink: 'syz.0.4164': attribute type 7 has an invalid length. [ 351.302103][T15689] netlink: 'syz.0.4164': attribute type 8 has an invalid length. [ 351.311397][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4164'. [ 351.324730][T15689] gretap0: entered promiscuous mode [ 351.332048][T15689] gretap0: left promiscuous mode [ 351.399860][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 351.511534][ T24] gspca_nw80x: reg_r err -71 [ 351.516213][ T24] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 351.539371][ T24] usb 4-1: USB disconnect, device number 48 [ 351.559902][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 351.572865][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.609903][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.621277][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.651363][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 351.669236][ T9] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 351.687328][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.710078][ T9] usb 3-1: config 0 descriptor?? [ 352.138758][ T9] betop 0003:20BC:5500.0037: unknown main item tag 0x0 [ 352.172247][ T9] betop 0003:20BC:5500.0037: unknown main item tag 0x0 [ 352.179258][ T9] betop 0003:20BC:5500.0037: unknown main item tag 0x0 [ 352.230453][ T9] betop 0003:20BC:5500.0037: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.2-1/input0 [ 352.242462][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.259727][ T9] betop 0003:20BC:5500.0037: no inputs found [ 352.372831][ T5907] usb 3-1: USB disconnect, device number 48 [ 352.637581][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.915525][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.034342][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.133527][ T12] bridge_slave_1: left allmulticast mode [ 353.139213][ T12] bridge_slave_1: left promiscuous mode [ 353.145025][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.155054][ T12] bridge_slave_0: left allmulticast mode [ 353.162537][ T12] bridge_slave_0: left promiscuous mode [ 353.168249][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.264071][ T30] audit: type=1400 audit(1751652024.721:1801): avc: denied { watch_mount } for pid=15713 comm="syz.0.4173" path="/901" dev="tmpfs" ino=4618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 353.278155][T15720] binder: 15719:15720 ioctl c0306201 200000000080 returned -14 [ 353.616586][ T30] audit: type=1400 audit(1751652025.071:1802): avc: denied { write } for pid=15729 comm="syz.3.4181" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 353.641651][ T5907] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 353.720586][ T5921] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 353.765680][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.778621][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.798325][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.806474][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.821530][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.828494][T15734] SELinux: ebitmap start bit (2099205) is not a multiple of the map unit size (64) [ 353.834575][T15734] SELinux: failed to load policy [ 353.838087][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.853374][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.883942][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 353.888863][ T5907] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.898503][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.906771][ T5907] usb 2-1: Product: syz [ 353.907519][ T5921] usb 3-1: config 0 has no interfaces? [ 353.911113][ T5907] usb 2-1: Manufacturer: syz [ 353.921500][ T5907] usb 2-1: SerialNumber: syz [ 353.927713][ T5921] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 353.947593][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.964314][ T5921] usb 3-1: Product: syz [ 353.968609][ T5921] usb 3-1: Manufacturer: syz [ 353.974257][ T5921] usb 3-1: SerialNumber: syz [ 353.984062][ T5921] usb 3-1: config 0 descriptor?? [ 354.134734][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.149472][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.160393][ T12] bond0 (unregistering): Released all slaves [ 354.216514][ T10] usb 3-1: USB disconnect, device number 49 [ 354.259821][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 354.420054][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 354.426741][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.438940][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.451823][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.453611][T15735] chnl_net:caif_netlink_parms(): no params data found [ 354.462315][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.462366][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.492480][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.524649][ T12] hsr_slave_0: left promiscuous mode [ 354.532004][ T12] hsr_slave_1: left promiscuous mode [ 354.538109][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.546497][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.555573][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.563592][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.584201][ T12] veth1_macvtap: left promiscuous mode [ 354.590137][ T12] veth0_macvtap: left promiscuous mode [ 354.595991][ T12] veth1_vlan: left promiscuous mode [ 354.601640][ T12] veth0_vlan: left promiscuous mode [ 354.728531][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 354.735420][ T9] usbtmc 4-1:16.0: can't read capabilities [ 354.920555][ T30] audit: type=1400 audit(1751652026.371:1803): avc: denied { bind } for pid=15746 comm="syz.2.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 354.957825][ T5907] cdc_ncm 2-1:1.0: bind() failure [ 354.982947][ T5907] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 355.016031][ T24] usb 4-1: USB disconnect, device number 49 [ 355.024578][ T5907] usb 2-1: USB disconnect, device number 55 [ 355.178543][T15750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'. [ 355.270579][ T12] team0 (unregistering): Port device team_slave_1 removed [ 355.317718][ T12] team0 (unregistering): Port device team_slave_0 removed [ 355.868415][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4192'. [ 355.890240][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4192'. [ 355.901760][ T5154] Bluetooth: hci4: command tx timeout [ 356.217205][T15735] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.235209][T15735] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.242726][T15735] bridge_slave_0: entered allmulticast mode [ 356.254141][T15735] bridge_slave_0: entered promiscuous mode [ 356.266459][T15735] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.274031][T15735] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.281463][T15735] bridge_slave_1: entered allmulticast mode [ 356.288848][T15735] bridge_slave_1: entered promiscuous mode [ 356.297323][T15781] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 356.309432][T15781] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 356.317851][T15781] CPU: 0 UID: 0 PID: 15781 Comm: syz.3.4199 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 356.329905][T15781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.339963][T15781] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 356.346907][T15781] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 356.366520][T15781] RSP: 0018:ffffc90004f5f2e8 EFLAGS: 00010202 [ 356.372581][T15781] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000dd80000 [ 356.380538][T15781] RDX: 000000000000000b RSI: ffffffff8993652c RDI: 0000000000000058 [ 356.388513][T15781] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 356.396472][T15781] R10: 00000000000a0000 R11: 0000000000000001 R12: ffffffff8ce8c620 [ 356.404429][T15781] R13: 0000000000000058 R14: ffffffff8ce8c600 R15: ffff888056a8d000 [ 356.412383][T15781] FS: 00007f2858c0c6c0(0000) GS:ffff888124717000(0000) knlGS:0000000000000000 [ 356.421301][T15781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.427871][T15781] CR2: 00007f2858c0bf98 CR3: 000000005d39a000 CR4: 00000000003526f0 [ 356.435830][T15781] Call Trace: [ 356.439109][T15781] [ 356.442031][T15781] drr_qlen_notify+0x24/0x150 [ 356.446703][T15781] qdisc_tree_reduce_backlog+0x224/0x500 [ 356.452327][T15781] pie_change+0x86e/0xe70 [ 356.456646][T15781] ? __debug_object_init+0x2de/0x3d0 [ 356.461920][T15781] ? __pfx___debug_object_init+0x10/0x10 [ 356.467537][T15781] ? __pfx_pie_change+0x10/0x10 [ 356.472382][T15781] ? __pfx_pie_timer+0x10/0x10 [ 356.477137][T15781] ? lockdep_init_map_type+0x5c/0x280 [ 356.482506][T15781] pie_init+0x364/0x470 [ 356.486659][T15781] ? __pfx_pie_init+0x10/0x10 [ 356.491333][T15781] qdisc_create+0x457/0xfc0 [ 356.495826][T15781] tc_modify_qdisc+0x12bb/0x2130 [ 356.500752][T15781] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 356.506034][T15781] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 356.511306][T15781] rtnetlink_rcv_msg+0x3c9/0xe90 [ 356.516242][T15781] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 356.521693][T15781] ? ref_tracker_free+0x37c/0x830 [ 356.526708][T15781] netlink_rcv_skb+0x158/0x420 [ 356.531456][T15781] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 356.536905][T15781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.542177][T15781] ? netlink_deliver_tap+0x1ae/0xd30 [ 356.547542][T15781] netlink_unicast+0x53a/0x7f0 [ 356.552294][T15781] ? __pfx_netlink_unicast+0x10/0x10 [ 356.557577][T15781] netlink_sendmsg+0x8d1/0xdd0 [ 356.562328][T15781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.567608][T15781] ____sys_sendmsg+0xa95/0xc70 [ 356.572355][T15781] ? copy_msghdr_from_user+0x10a/0x160 [ 356.577802][T15781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.583083][T15781] ? page_table_check_set+0x631/0x750 [ 356.588447][T15781] ___sys_sendmsg+0x134/0x1d0 [ 356.593113][T15781] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.598347][T15781] ? __lock_acquire+0x622/0x1c90 [ 356.603393][T15781] __sys_sendmsg+0x16d/0x220 [ 356.607980][T15781] ? __pfx___sys_sendmsg+0x10/0x10 [ 356.613079][T15781] ? find_held_lock+0x2b/0x80 [ 356.617747][T15781] ? do_user_addr_fault+0x843/0x1370 [ 356.623024][T15781] do_syscall_64+0xcd/0x4c0 [ 356.627516][T15781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.633393][T15781] RIP: 0033:0x7f2857d8e929 [ 356.637796][T15781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.657388][T15781] RSP: 002b:00007f2858c0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.665795][T15781] RAX: ffffffffffffffda RBX: 00007f2857fb6080 RCX: 00007f2857d8e929 [ 356.673761][T15781] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 356.681714][T15781] RBP: 00007f2857e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 356.689666][T15781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.697624][T15781] R13: 0000000000000001 R14: 00007f2857fb6080 R15: 00007ffde4e72858 [ 356.705595][T15781] [ 356.708598][T15781] Modules linked in: [ 356.712533][T15781] ---[ end trace 0000000000000000 ]--- [ 356.718004][T15781] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 356.725011][T15781] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 356.744657][T15781] RSP: 0018:ffffc90004f5f2e8 EFLAGS: 00010202 [ 356.750783][T15781] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000dd80000 [ 356.757855][ T30] audit: type=1400 audit(1751652028.171:1804): avc: denied { write } for pid=5816 comm="syz-executor" path="pipe:[3620]" dev="pipefs" ino=3620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 356.758744][T15781] RDX: 000000000000000b RSI: ffffffff8993652c RDI: 0000000000000058 [ 356.789883][T15781] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 356.797868][T15781] R10: 00000000000a0000 R11: 0000000000000001 R12: ffffffff8ce8c620 [ 356.805897][T15781] R13: 0000000000000058 R14: ffffffff8ce8c600 R15: ffff888056a8d000 [ 356.813926][T15781] FS: 00007f2858c0c6c0(0000) GS:ffff888124717000(0000) knlGS:0000000000000000 [ 356.822913][T15781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.829522][T15781] CR2: 00007f2858c0bf98 CR3: 000000005d39a000 CR4: 00000000003526f0 [ 356.837592][T15781] Kernel panic - not syncing: Fatal exception in interrupt [ 356.845136][T15781] Kernel Offset: disabled [ 356.849480][T15781] Rebooting in 86400 seconds..