last executing test programs: 10.772989912s ago: executing program 4 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000005200), &(0x7f0000000280)=@udp=r1}, 0x20) 10.488815212s ago: executing program 4 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv2(r3, &(0x7f0000000400)=[{&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f0000000240)=""/1, 0x1}], 0x3, 0x7, 0x6fe2, 0x4) syz_emit_ethernet(0x11b, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x10d, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0xf9, 0x0, @wg=@data={0x4, 0x0, 0x0, "d020593b25c16ea9fa9ace5eb09aa17d900529923766308dfea60fd7e60919b6f3c45947117d09de57a63963f9d6d0bc0aca002c124222d2a071caf48e5f20d274a86559d3a682739782533c04e1237b165f350ec0e53077bc586957064e7b8264156382294115aad9aa01c2611f0247753329de402141bce9253c1256051f24b48f06c59424427619efa186a6278fba8f12cf7cdcccc91db86ddd732f60839e0186b7fcc7081fa513dce086e15ab04b0bc64b0d364e02bfa722af69426061c2763245b5c8cc920b19a98a6ed6acaf7a4f9c6e2e2af726e5fb76970c311f28f7cc"}}}}}}, 0x0) r4 = gettid() r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000010000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x4, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022050000000357f15909"], 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_POLL(r9, &(0x7f0000000100)={0x18}, 0x18) tkill(r4, 0x16) ptrace$getregs(0xc, r4, 0x7f, &(0x7f00000002c0)=""/160) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c40000001900674c0000000000000000ff01098817c5d2d2353cd8d1f31a5656176e0000000000000010"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 9.480887658s ago: executing program 1 (id=467): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r1, &(0x7f00000005c0)=""/102384, 0x18ff0) getpid() 9.066083058s ago: executing program 3 (id=471): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0xfffffffc}) 6.644740091s ago: executing program 3 (id=478): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x80045017, 0x0) 6.520984855s ago: executing program 4 (id=480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x80003}) 5.637380665s ago: executing program 3 (id=482): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) 5.411599754s ago: executing program 3 (id=485): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004"], 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r1, 0xae71, &(0x7f00000003c0)) 5.292912179s ago: executing program 4 (id=486): userfaultfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)) 5.115829209s ago: executing program 1 (id=487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480), 0x208e26e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00100000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020"], 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 4.991738713s ago: executing program 4 (id=489): syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44000) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x1, 0x2}) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32], 0x24}}, 0x0) 4.952992943s ago: executing program 3 (id=490): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) 4.536649487s ago: executing program 1 (id=492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000180)={0xffffffff00000001}, &(0x7f0000000540)) r1 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x0, 0x6}}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, {0xa, 0xfffc, 0x8a, @mcast2}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, 0x0, 0x0, 0x24040890) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000), 0x4) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x101) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000000000000009279ff9b000000"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r7, &(0x7f0000000340)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 4.536484754s ago: executing program 2 (id=493): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110f"], 0x14) socket$inet6(0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c011c2074"], 0xf) 3.267587733s ago: executing program 4 (id=494): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200010000000009"], 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x15) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x47) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000300)={0x6, @raw_data="cf27184f0cc4f2f014af8a49fb22618800620165fa4353cc2ca72b8a16a8afba1c4f8974804c8deee70a415d940dbb667973f979fa3e782912d5a3984d3acd873400b61053764f47ad1cb235e5bd166e96f8722c45bfee138680d600a5d2c1f3316438fb74f6d3896214c7203788ac261d34c447680d2b3e214d78457b9e94aa1a5984546f92ad9f73d9166f49f0054d697513ff0823200507d7e2900bba510516dce6081dfaa823bf4d27a063df710009c78f0bf3137b6b5479cee8d5da99f9009e13a346744ed4"}) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(0xffffffffffffffff) 3.216353583s ago: executing program 1 (id=495): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1}}], 0x1, 0x2143, 0x0) 3.032921309s ago: executing program 2 (id=496): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) 2.976004102s ago: executing program 2 (id=497): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000a40)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000480)=""/139, 0x8b}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000300)=""/15, 0xf}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/31, 0x1f}], 0x6, &(0x7f00000006c0)}, 0x2}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/32, 0x20}, {&(0x7f0000000740)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/170, 0xaa}], 0x3, &(0x7f0000000940)=""/222, 0xde}, 0x5}], 0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet(0x2, 0x0, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, 0x0, 0x1) 2.91655459s ago: executing program 0 (id=498): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001480)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000180)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) 2.893006196s ago: executing program 1 (id=499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfc, 0x0, 0x0, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.974136776s ago: executing program 0 (id=500): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) 1.735891981s ago: executing program 2 (id=501): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x302, 0x0) 1.632134944s ago: executing program 0 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = io_uring_setup(0x497c, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 873.864138ms ago: executing program 1 (id=503): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) 696.746275ms ago: executing program 3 (id=504): syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44000) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x1, 0x2}) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32], 0x24}}, 0x0) 603.160722ms ago: executing program 0 (id=505): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fremovexattr(0xffffffffffffffff, 0x0) 487.150774ms ago: executing program 0 (id=506): r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x17, 0x20000000, 0x0) 347.70599ms ago: executing program 2 (id=507): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000002400000038002f800c00020000000000000000002800038008000100000000001c00038006000300000000000600010000000000080002000200000008000300", @ANYRES32=r3], 0x54}}, 0x0) 229.047268ms ago: executing program 0 (id=508): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r0, 0x80000001, 0x0) 0s ago: executing program 2 (id=509): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$inet6(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000840)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): 6734][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.355115][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.364157][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.372935][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.380585][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.392033][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.392301][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.406210][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.414720][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.414870][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.431292][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.432508][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.441026][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.447318][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.453835][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.463016][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.467390][ T5247] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.474643][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.486249][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.492467][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.497448][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.501703][ T29] audit: type=1400 audit(1722386550.212:105): avc: denied { create } for pid=5226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.509293][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.528787][ T29] audit: type=1400 audit(1722386550.212:106): avc: denied { read write } for pid=5226 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.537011][ T5247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.566537][ T29] audit: type=1400 audit(1722386550.212:107): avc: denied { open } for pid=5226 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.580975][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.597256][ T29] audit: type=1400 audit(1722386550.252:108): avc: denied { ioctl } for pid=5227 comm="syz-executor" path="socket:[3824]" dev="sockfs" ino=3824 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.599869][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.650901][ T29] audit: type=1400 audit(1722386550.612:109): avc: denied { read } for pid=5227 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.672458][ T29] audit: type=1400 audit(1722386550.612:110): avc: denied { open } for pid=5227 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.697623][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.698098][ T29] audit: type=1400 audit(1722386550.702:111): avc: denied { mounton } for pid=5227 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.727683][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.736096][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.360918][ T29] audit: type=1400 audit(1722386551.412:112): avc: denied { module_request } for pid=5227 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.562142][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 79.589890][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 79.615657][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 79.722793][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 79.746006][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 79.835383][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.842817][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.850885][ T5227] bridge_slave_0: entered allmulticast mode [ 79.858028][ T5227] bridge_slave_0: entered promiscuous mode [ 79.915110][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.922657][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.929937][ T5227] bridge_slave_1: entered allmulticast mode [ 79.936959][ T5227] bridge_slave_1: entered promiscuous mode [ 79.989123][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.996370][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.003877][ T5228] bridge_slave_0: entered allmulticast mode [ 80.011293][ T5228] bridge_slave_0: entered promiscuous mode [ 80.093927][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.101371][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.108597][ T5228] bridge_slave_1: entered allmulticast mode [ 80.116181][ T5228] bridge_slave_1: entered promiscuous mode [ 80.150514][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.157832][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.165963][ T5229] bridge_slave_0: entered allmulticast mode [ 80.173949][ T5229] bridge_slave_0: entered promiscuous mode [ 80.190699][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.233005][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.247390][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.257061][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.265382][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.272710][ T5229] bridge_slave_1: entered allmulticast mode [ 80.280610][ T5229] bridge_slave_1: entered promiscuous mode [ 80.301719][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.395742][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.403569][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.410949][ T5241] bridge_slave_0: entered allmulticast mode [ 80.417987][ T5241] bridge_slave_0: entered promiscuous mode [ 80.458589][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.472023][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.479125][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.487369][ T5226] bridge_slave_0: entered allmulticast mode [ 80.495548][ T5226] bridge_slave_0: entered promiscuous mode [ 80.503752][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.511577][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.518747][ T5226] bridge_slave_1: entered allmulticast mode [ 80.526049][ T5226] bridge_slave_1: entered promiscuous mode [ 80.536290][ T5227] team0: Port device team_slave_0 added [ 80.543343][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.552041][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.559226][ T5241] bridge_slave_1: entered allmulticast mode [ 80.566658][ T5241] bridge_slave_1: entered promiscuous mode [ 80.592272][ T5228] team0: Port device team_slave_0 added [ 80.603712][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.631063][ T5227] team0: Port device team_slave_1 added [ 80.657913][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.670088][ T5242] Bluetooth: hci3: command tx timeout [ 80.675904][ T5244] Bluetooth: hci1: command tx timeout [ 80.682097][ T5228] team0: Port device team_slave_1 added [ 80.682151][ T5233] Bluetooth: hci0: command tx timeout [ 80.739345][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.792419][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.806069][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.821438][ T5242] Bluetooth: hci2: command tx timeout [ 80.829934][ T5233] Bluetooth: hci4: command tx timeout [ 80.867437][ T5229] team0: Port device team_slave_0 added [ 80.877317][ T5229] team0: Port device team_slave_1 added [ 80.897485][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.904807][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.931352][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.947416][ T5241] team0: Port device team_slave_0 added [ 80.957575][ T5241] team0: Port device team_slave_1 added [ 80.965093][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.973026][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.999553][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.013198][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.020372][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.047225][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.088141][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.095446][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.121432][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.181316][ T5226] team0: Port device team_slave_0 added [ 81.191927][ T5226] team0: Port device team_slave_1 added [ 81.228722][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.236546][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.262668][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.276982][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.284126][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.310453][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.368611][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.375964][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.402278][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.414654][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.422289][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.448757][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.475621][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.482765][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.509096][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.550768][ T5228] hsr_slave_0: entered promiscuous mode [ 81.557263][ T5228] hsr_slave_1: entered promiscuous mode [ 81.586389][ T5227] hsr_slave_0: entered promiscuous mode [ 81.593252][ T5227] hsr_slave_1: entered promiscuous mode [ 81.600481][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.608474][ T5227] Cannot create hsr debugfs directory [ 81.615123][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.622604][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.648634][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.707771][ T5241] hsr_slave_0: entered promiscuous mode [ 81.714432][ T5241] hsr_slave_1: entered promiscuous mode [ 81.721187][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.728750][ T5241] Cannot create hsr debugfs directory [ 81.796485][ T5226] hsr_slave_0: entered promiscuous mode [ 81.803827][ T5226] hsr_slave_1: entered promiscuous mode [ 81.813644][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.821577][ T5226] Cannot create hsr debugfs directory [ 81.885345][ T5229] hsr_slave_0: entered promiscuous mode [ 81.892282][ T5229] hsr_slave_1: entered promiscuous mode [ 81.898663][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.906697][ T5229] Cannot create hsr debugfs directory [ 82.742834][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.746895][ T5233] Bluetooth: hci0: command tx timeout [ 82.758407][ T5242] Bluetooth: hci3: command tx timeout [ 82.759744][ T5233] Bluetooth: hci1: command tx timeout [ 82.798726][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.821547][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.865155][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.900057][ T5233] Bluetooth: hci2: command tx timeout [ 82.900105][ T5242] Bluetooth: hci4: command tx timeout [ 83.000795][ T5226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.015691][ T5226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.053764][ T5226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.068224][ T5226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.156794][ T5227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.175101][ T5227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.187244][ T5227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.217668][ T5227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.363531][ T5241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.376499][ T5241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.422982][ T5241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.435278][ T5241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.524298][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.604287][ T5229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.631353][ T5229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.646267][ T5229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.665610][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.678200][ T5229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.735935][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.792557][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.800136][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.842880][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.871196][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.878391][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.894695][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.901856][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.973989][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.009106][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.016312][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.136468][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.192433][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.199564][ T5235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.246313][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.328552][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.335968][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.348072][ T29] audit: type=1400 audit(1722386556.392:113): avc: denied { sys_module } for pid=5228 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.487307][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.626751][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.656112][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.738906][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.746250][ T5235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.759095][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.766364][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.793968][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.801148][ T5235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.820235][ T5242] Bluetooth: hci3: command tx timeout [ 84.825700][ T5242] Bluetooth: hci1: command tx timeout [ 84.831374][ T5233] Bluetooth: hci0: command tx timeout [ 84.871138][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.878360][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.924167][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.944479][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.980351][ T5242] Bluetooth: hci4: command tx timeout [ 84.986082][ T5242] Bluetooth: hci2: command tx timeout [ 85.013688][ T5229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.024182][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.158354][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.329256][ T5228] veth0_vlan: entered promiscuous mode [ 85.398479][ T5227] veth0_vlan: entered promiscuous mode [ 85.429545][ T5228] veth1_vlan: entered promiscuous mode [ 85.494653][ T5227] veth1_vlan: entered promiscuous mode [ 85.572241][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.597064][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.648832][ T5228] veth0_macvtap: entered promiscuous mode [ 85.668018][ T5226] veth0_vlan: entered promiscuous mode [ 85.708671][ T5228] veth1_macvtap: entered promiscuous mode [ 85.773240][ T5226] veth1_vlan: entered promiscuous mode [ 85.814009][ T5227] veth0_macvtap: entered promiscuous mode [ 85.845302][ T5227] veth1_macvtap: entered promiscuous mode [ 85.904712][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.976162][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.003131][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.014305][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.027370][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.042140][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.054549][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.063851][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.072999][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.094510][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.105432][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.120303][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.128509][ T5226] veth0_macvtap: entered promiscuous mode [ 86.167058][ T5226] veth1_macvtap: entered promiscuous mode [ 86.201503][ T5227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.211322][ T5227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.221676][ T5227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.232811][ T5227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.318829][ T5229] veth0_vlan: entered promiscuous mode [ 86.327100][ T5241] veth0_vlan: entered promiscuous mode [ 86.347649][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.358561][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.368984][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.381144][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.393951][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.452647][ T5241] veth1_vlan: entered promiscuous mode [ 86.463946][ T5229] veth1_vlan: entered promiscuous mode [ 86.473592][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.485146][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.495521][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.507426][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.518733][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.584651][ T5226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.593836][ T5226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.603786][ T5226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.613714][ T5226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.678385][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.698296][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.742941][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.755045][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.806352][ T5229] veth0_macvtap: entered promiscuous mode [ 86.838631][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.855166][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.881101][ T5229] veth1_macvtap: entered promiscuous mode [ 86.900148][ T5242] Bluetooth: hci1: command tx timeout [ 86.900192][ T5244] Bluetooth: hci0: command tx timeout [ 86.909198][ T29] audit: type=1400 audit(1722386558.952:114): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.02HV0J/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 86.937103][ T5233] Bluetooth: hci3: command tx timeout [ 86.945938][ T29] audit: type=1400 audit(1722386558.962:115): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.968152][ T29] audit: type=1400 audit(1722386558.962:116): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.02HV0J/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.995288][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.015312][ T29] audit: type=1400 audit(1722386558.962:117): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 87.023355][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.037420][ T29] audit: type=1400 audit(1722386558.972:118): avc: denied { unmount } for pid=5228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.037489][ T29] audit: type=1400 audit(1722386559.012:119): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 87.037551][ T29] audit: type=1400 audit(1722386559.012:120): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 87.053891][ T5241] veth0_macvtap: entered promiscuous mode [ 87.121399][ T5233] Bluetooth: hci4: command tx timeout [ 87.128642][ T5233] Bluetooth: hci2: command tx timeout [ 87.186540][ T5241] veth1_macvtap: entered promiscuous mode [ 87.208155][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.226317][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.246062][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.254821][ T29] audit: type=1400 audit(1722386559.292:121): avc: denied { read write } for pid=5228 comm="syz-executor" name="loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.259816][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.325849][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.339855][ T29] audit: type=1400 audit(1722386559.332:122): avc: denied { open } for pid=5228 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.348758][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.377636][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.410680][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.421436][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.432584][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.544197][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.719820][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.828289][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.953575][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.095435][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.208172][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.225291][ T52] cfg80211: failed to load regulatory.db [ 88.247781][ T5229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.288868][ T5229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.319880][ T5229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.333333][ T5229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.407920][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.423419][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.435162][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.446250][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.456509][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.467577][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.479162][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.490767][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.504019][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.587125][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.591841][ T5326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.602081][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.631194][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.646954][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.659328][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.672901][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.683761][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.694222][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.708321][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.727554][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.757281][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.789136][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.796265][ T5241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.812639][ T5241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.822567][ T5241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.830039][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 88.831414][ T5241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.848959][ T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 88.858485][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 88.872934][ T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 88.884821][ T9] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 88.909286][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 88.960312][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 88.969560][ T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 88.999763][ T9] usb 1-1: Product: syz [ 89.015315][ T9] usb 1-1: Manufacturer: syz [ 89.025193][ T9] usb 1-1: SerialNumber: syz [ 89.059037][ T9] usb 1-1: config 0 descriptor?? [ 89.096886][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 89.118463][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.139295][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.186417][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 89.364786][ T5282] usb 1-1: USB disconnect, device number 2 [ 89.376145][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.417008][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.421807][ T5282] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 89.472475][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 89.472493][ T29] audit: type=1400 audit(1722386561.512:144): avc: denied { mounton } for pid=5229 comm="syz-executor" path="/root/syzkaller.ozponK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.551649][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.559513][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.691846][ T29] audit: type=1400 audit(1722386561.732:145): avc: denied { create } for pid=5339 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.737260][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.759751][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.788147][ T29] audit: type=1400 audit(1722386561.762:146): avc: denied { setopt } for pid=5339 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.871370][ T29] audit: type=1400 audit(1722386561.882:147): avc: denied { bind } for pid=5341 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.981690][ T29] audit: type=1400 audit(1722386561.882:148): avc: denied { setopt } for pid=5341 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.274318][ T29] audit: type=1400 audit(1722386561.892:149): avc: denied { accept } for pid=5341 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.834438][ T29] audit: type=1400 audit(1722386561.912:150): avc: denied { write } for pid=5341 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.859798][ T29] audit: type=1400 audit(1722386562.162:151): avc: denied { prog_run } for pid=5343 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.939944][ T29] audit: type=1400 audit(1722386562.182:152): avc: denied { create } for pid=5343 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.960030][ C0] eth0: bad gso: type: 1, size: 1408 [ 90.980647][ T5316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.995837][ T29] audit: type=1400 audit(1722386562.192:153): avc: denied { connect } for pid=5343 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.640893][ T5244] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 91.662833][ T5244] Bluetooth: hci3: Injecting HCI hardware error event [ 91.673714][ T5233] Bluetooth: hci3: hardware error 0x00 [ 92.049991][ T5316] usb 2-1: Using ep0 maxpacket: 16 [ 92.071580][ T5316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.101580][ T5316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.122370][ T5316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.176172][ T5316] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.238267][ T5316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.301449][ T5316] usb 2-1: config 0 descriptor?? [ 92.983035][ T5278] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.031608][ T5382] serio: Serial port ptm0 [ 93.110866][ T5386] input: syz0 as /devices/virtual/input/input5 [ 93.201513][ T5278] usb 5-1: Using ep0 maxpacket: 32 [ 93.216762][ T5278] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 93.225712][ T5278] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 93.245839][ T5278] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 93.257651][ T5278] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 93.279759][ T5278] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.318593][ T5278] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 93.337959][ T5278] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 93.348625][ T5278] usb 5-1: Product: syz [ 93.356606][ T5278] usb 5-1: Manufacturer: syz [ 93.362179][ T5278] usb 5-1: SerialNumber: syz [ 93.384111][ T5278] usb 5-1: config 0 descriptor?? [ 93.403962][ T5278] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 93.462292][ T5278] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 93.861151][ T5233] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 94.011481][ T5316] usbhid 2-1:0.0: can't add hid device: -71 [ 94.017575][ T5316] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 94.043843][ T5316] usb 2-1: USB disconnect, device number 2 [ 94.607135][ T9] usb 5-1: USB disconnect, device number 2 [ 94.668034][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 95.694201][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 95.694221][ T29] audit: type=1400 audit(1722386567.742:186): avc: denied { ioctl } for pid=5390 comm="syz.3.28" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.877634][ T29] audit: type=1400 audit(1722386567.922:187): avc: denied { create } for pid=5408 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.972686][ T29] audit: type=1400 audit(1722386567.962:188): avc: denied { write } for pid=5408 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.082531][ T29] audit: type=1400 audit(1722386567.962:189): avc: denied { nlmsg_write } for pid=5408 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.083935][ T5411] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.316655][ T5418] misc userio: The device must be registered before sending interrupts [ 96.783217][ T5427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 97.645704][ T29] audit: type=1400 audit(1722386569.692:190): avc: denied { create } for pid=5425 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 97.667111][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 98.147482][ T29] audit: type=1400 audit(1722386570.182:191): avc: denied { read } for pid=5436 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 98.311522][ T29] audit: type=1400 audit(1722386570.242:192): avc: denied { mounton } for pid=5438 comm="syz.4.42" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.611277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.620238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.628993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.699757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.982033][ T29] audit: type=1400 audit(1722386570.902:193): avc: denied { write } for pid=5445 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.220173][ T5244] Bluetooth: hci4: command tx timeout [ 99.454927][ T29] audit: type=1326 audit(1722386570.912:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ddd77299 code=0x7ffc0000 [ 99.514898][ T29] audit: type=1326 audit(1722386570.922:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43ddd75cd0 code=0x7ffc0000 [ 101.213753][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 101.213773][ T29] audit: type=1400 audit(1722386573.262:227): avc: denied { connect } for pid=5474 comm="syz.3.55" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.315660][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 101.332252][ T29] audit: type=1400 audit(1722386573.302:228): avc: denied { setopt } for pid=5474 comm="syz.3.55" laddr=fe80::a8aa:aaff:feaa:aa16 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.376155][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 101.385627][ T5480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=5480 comm=syz.4.56 [ 101.431721][ T29] audit: type=1400 audit(1722386573.302:229): avc: denied { write } for pid=5474 comm="syz.3.55" path="socket:[7645]" dev="sockfs" ino=7645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.487724][ T29] audit: type=1400 audit(1722386573.432:230): avc: denied { write } for pid=5479 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 101.510084][ T5316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.526865][ T29] audit: type=1400 audit(1722386573.482:231): avc: denied { ioctl } for pid=5481 comm="syz.1.57" path="socket:[8298]" dev="sockfs" ino=8298 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.561077][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 101.776449][ T5316] usb 1-1: Using ep0 maxpacket: 16 [ 101.802138][ T5316] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 101.871225][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.892499][ T5316] usb 1-1: Product: syz [ 101.901948][ T5316] usb 1-1: Manufacturer: syz [ 101.966199][ T5491] futex_wake_op: syz.3.58 tries to shift op by 144; fix this program [ 102.263683][ T5480] bond0: (slave bond_slave_0): Releasing backup interface [ 102.710132][ T5316] usb 1-1: SerialNumber: syz [ 102.747829][ T5316] usb 1-1: config 0 descriptor?? [ 102.813374][ T5316] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 103.038202][ T29] audit: type=1326 audit(1722386574.952:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ddd77299 code=0x7ffc0000 [ 103.182366][ T5316] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 103.256895][ T29] audit: type=1326 audit(1722386574.962:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43ddd75cd0 code=0x7ffc0000 [ 103.395765][ T29] audit: type=1326 audit(1722386574.972:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f43ddd78a27 code=0x7ffc0000 [ 103.429392][ T29] audit: type=1326 audit(1722386574.972:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43ddd77299 code=0x7ffc0000 [ 103.466813][ T29] audit: type=1326 audit(1722386574.972:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f43ddd78a27 code=0x7ffc0000 [ 103.626607][ T5499] input: syz0 as /devices/virtual/input/input6 [ 104.109205][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 104.989195][ T5278] usb 1-1: USB disconnect, device number 3 [ 106.421008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.659023][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 106.659042][ T29] audit: type=1400 audit(1722386578.702:269): avc: denied { read } for pid=5535 comm="syz.0.73" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 106.725547][ T29] audit: type=1400 audit(1722386578.772:270): avc: denied { open } for pid=5535 comm="syz.0.73" path="/dev/input/mouse0" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 107.374857][ T29] audit: type=1400 audit(1722386579.402:271): avc: denied { create } for pid=5533 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.374927][ T29] audit: type=1400 audit(1722386579.412:272): avc: denied { connect } for pid=5533 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.442803][ T5551] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.890029][ T5561] warning: `syz.3.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.091242][ T5284] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.294917][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 108.316676][ T5284] usb 3-1: config 0 has no interfaces? [ 108.316941][ T29] audit: type=1400 audit(1722386580.362:273): avc: denied { write } for pid=5568 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.345160][ T5284] usb 3-1: config 0 has no interfaces? [ 108.361615][ T5284] usb 3-1: config 0 has no interfaces? [ 108.364463][ T52] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.378794][ T5284] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 108.400562][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.423893][ T5284] usb 3-1: SerialNumber: syz [ 108.460138][ T5284] usb 3-1: config 0 descriptor?? [ 108.559772][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 108.567609][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.582486][ T52] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.593750][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.611203][ T52] usb 4-1: Product: syz [ 108.620031][ T52] usb 4-1: Manufacturer: syz [ 108.629789][ T52] usb 4-1: SerialNumber: syz [ 108.658181][ T52] usb 4-1: config 0 descriptor?? [ 108.694085][ T52] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.729796][ T52] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 108.834057][ T5557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.866779][ T5557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.887396][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 108.941975][ T5576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=5576 comm=syz.4.84 [ 108.974964][ T5578] hfsplus: unable to find HFS+ superblock [ 109.007649][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 109.251963][ T5284] usb 3-1: USB disconnect, device number 2 [ 109.421256][ T52] em28xx 4-1:0.0: chip ID is em2884 [ 110.077311][ T52] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 110.232029][ T52] em28xx 4-1:0.0: board has no eeprom [ 110.270260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.280811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.389490][ T5593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.449812][ T52] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 110.458199][ T5597] netlink: 'syz.0.89': attribute type 13 has an invalid length. [ 110.481032][ T52] em28xx 4-1:0.0: dvb set to bulk mode. [ 110.487042][ T5283] em28xx 4-1:0.0: Binding DVB extension [ 110.513351][ T5597] veth0_macvtap: left promiscuous mode [ 110.552371][ T52] usb 4-1: USB disconnect, device number 2 [ 110.590997][ T5597] macvtap0: entered allmulticast mode [ 110.605833][ T52] em28xx 4-1:0.0: Disconnecting em28xx [ 110.671835][ T5597] macvtap0: refused to change device tx_queue_len [ 110.757838][ T5283] em28xx 4-1:0.0: Registering input extension [ 110.854429][ T29] audit: type=1326 audit(1722386582.902:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.3.91" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1362b77299 code=0x0 [ 110.959594][ T29] audit: type=1400 audit(1722386582.982:275): avc: denied { read } for pid=5603 comm="syz.2.92" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 110.992138][ T5283] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 111.004972][ T29] audit: type=1400 audit(1722386582.982:276): avc: denied { open } for pid=5603 comm="syz.2.92" path="/14/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 111.019742][ T5283] Registered IR keymap rc-empty [ 111.034926][ T5604] sd 0:0:1:0: PR command failed: 1026 [ 111.057113][ T29] audit: type=1400 audit(1722386583.052:277): avc: denied { ioctl } for pid=5603 comm="syz.2.92" path="/14/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 111.064645][ T5604] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 111.090896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.121506][ T5604] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 111.124726][ T5283] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 111.353001][ T5283] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 111.363981][ T29] audit: type=1400 audit(1722386583.202:278): avc: denied { bind } for pid=5612 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.436321][ T5616] Zero length message leads to an empty skb [ 111.602625][ T5244] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 111.611915][ T5244] Bluetooth: hci1: Injecting HCI hardware error event [ 111.626155][ T5244] Bluetooth: hci1: hardware error 0x00 [ 112.297484][ T5283] em28xx 4-1:0.0: Input extension successfully initialized [ 112.341854][ T52] em28xx 4-1:0.0: Closing input extension [ 112.676861][ T52] em28xx 4-1:0.0: Freeing device [ 112.930417][ T5278] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.044197][ T5634] hfsplus: unable to find HFS+ superblock [ 113.082225][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 113.082243][ T29] audit: type=1400 audit(1722386585.132:282): avc: denied { write } for pid=5624 comm="syz.0.97" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.134925][ T5627] kvm: kvm [5624]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0xc2) = 0x1 [ 113.152238][ T5278] usb 5-1: Using ep0 maxpacket: 16 [ 113.161282][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.181493][ T5627] kvm: kvm [5624]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x186) = 0x1 [ 113.191214][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.223969][ T5627] kvm: kvm [5624]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 113.252001][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.255829][ T5627] kvm: kvm [5624]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 113.295504][ T5278] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.295885][ T5627] kvm: kvm [5624]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 113.324932][ T5627] kvm: kvm [5624]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 113.338993][ T5627] kvm: kvm [5624]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 113.365132][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.367581][ T5627] kvm: kvm [5624]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 113.394591][ T5278] usb 5-1: config 0 descriptor?? [ 113.405555][ T5627] kvm: kvm [5624]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 113.426278][ T5627] kvm: kvm [5624]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 113.860811][ T5233] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 114.020142][ T5244] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 114.479828][ T5278] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 114.631217][ T5278] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 114.679898][ T5278] microsoft 0003:045E:07DA.0001: no inputs found [ 114.709776][ T5278] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 114.723716][ T29] audit: type=1400 audit(1722386586.762:283): avc: denied { setopt } for pid=5647 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.769068][ T29] audit: type=1400 audit(1722386586.792:284): avc: denied { write } for pid=5647 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.776148][ T5278] usb 5-1: USB disconnect, device number 3 [ 115.197379][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.670328][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 115.693353][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.738051][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.758260][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.775754][ T5659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.807498][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.854072][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.874696][ T29] audit: type=1400 audit(1722386587.912:285): avc: denied { bind } for pid=5660 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.907548][ T25] usb 2-1: config 0 descriptor?? [ 115.974361][ T29] audit: type=1400 audit(1722386587.912:286): avc: denied { node_bind } for pid=5660 comm="syz.0.108" saddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 116.112536][ T5278] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.212945][ T29] audit: type=1326 audit(1722386588.252:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.4.109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb38d177299 code=0x0 [ 116.250135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.299902][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 116.322059][ T5278] usb 3-1: config 0 has an invalid interface number: 240 but max is 0 [ 116.332814][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.349876][ T5283] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.372290][ T5278] usb 3-1: config 0 has no interface number 0 [ 116.379505][ T5278] usb 3-1: config 0 interface 240 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 116.430553][ T5278] usb 3-1: config 0 interface 240 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 116.442024][ T5278] usb 3-1: config 0 interface 240 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 116.452219][ T5278] usb 3-1: config 0 interface 240 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 116.468542][ T5278] usb 3-1: New USB device found, idVendor=046d, idProduct=69b5, bcdDevice=ee.15 [ 116.477814][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.487158][ T5278] usb 3-1: Product: syz [ 116.504090][ T5278] usb 3-1: Manufacturer: syz [ 116.524048][ T5278] usb 3-1: SerialNumber: syz [ 116.540404][ T5278] usb 3-1: config 0 descriptor?? [ 116.580148][ T5283] usb 1-1: Using ep0 maxpacket: 16 [ 116.639156][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.708850][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.791011][ T5283] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 116.833871][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.872480][ T5281] usb 3-1: USB disconnect, device number 3 [ 116.971970][ T5283] usb 1-1: config 0 descriptor?? [ 117.060763][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 117.104377][ T5679] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=5679 comm=syz.4.112 [ 117.121570][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 117.549964][ T5278] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.609732][ C1] hrtimer: interrupt took 107272 ns [ 117.944002][ T5283] hid-rmi 0003:17EF:6085.0002: unknown main item tag 0x0 [ 118.033942][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 118.045430][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.063069][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 118.077443][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.091012][ T25] usb 2-1: USB disconnect, device number 3 [ 118.097073][ T5278] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 118.110082][ T5283] hid-rmi 0003:17EF:6085.0002: item fetching failed at offset 3/5 [ 118.110585][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.131112][ T5278] usb 5-1: config 0 descriptor?? [ 118.221013][ T5283] hid-rmi 0003:17EF:6085.0002: parse failed [ 118.255799][ T5283] hid-rmi 0003:17EF:6085.0002: probe with driver hid-rmi failed with error -22 [ 118.360846][ T5283] usb 1-1: USB disconnect, device number 4 [ 119.416528][ T5278] asus 0003:048D:CE50.0003: unknown main item tag 0xd [ 119.535547][ T5278] asus 0003:048D:CE50.0003: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.4-1/input0 [ 119.582480][ T29] audit: type=1400 audit(1722386591.632:288): avc: denied { read } for pid=5704 comm="syz.2.122" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.590068][ T5278] asus 0003:048D:CE50.0003: Asus input not registered [ 119.685731][ T5278] asus 0003:048D:CE50.0003: probe with driver asus failed with error -12 [ 119.696456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 119.731636][ T29] audit: type=1400 audit(1722386591.632:289): avc: denied { open } for pid=5704 comm="syz.2.122" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.768011][ T5278] usb 5-1: USB disconnect, device number 4 [ 119.783299][ T29] audit: type=1400 audit(1722386591.692:290): avc: denied { mount } for pid=5704 comm="syz.2.122" name="/" dev="autofs" ino=8781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 119.880960][ T29] audit: type=1400 audit(1722386591.702:291): avc: denied { ioctl } for pid=5704 comm="syz.2.122" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.918736][ T29] audit: type=1400 audit(1722386591.832:292): avc: denied { unmount } for pid=5241 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 119.944796][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.960074][ T5715] input: syz0 as /devices/virtual/input/input9 [ 119.987971][ T29] audit: type=1400 audit(1722386591.962:293): avc: denied { create } for pid=5713 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 120.034128][ T29] audit: type=1400 audit(1722386592.022:294): avc: denied { setopt } for pid=5713 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 120.130611][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 120.138408][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.176877][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.241966][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.297695][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.361654][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.403236][ T25] usb 1-1: config 0 descriptor?? [ 120.781360][ T52] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.781777][ T29] audit: type=1400 audit(1722386592.832:295): avc: denied { create } for pid=5727 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.839988][ T29] audit: type=1400 audit(1722386592.882:296): avc: denied { setopt } for pid=5727 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.887430][ T25] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 120.905404][ T5722] kvm_pr_unimpl_wrmsr: 14 callbacks suppressed [ 120.905433][ T5722] kvm: kvm [5721]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0xc2) = 0x1 [ 120.931610][ T25] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 120.953643][ T25] microsoft 0003:045E:07DA.0004: no inputs found [ 120.963790][ T25] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 120.973688][ T5722] kvm: kvm [5721]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x186) = 0x1 [ 121.027718][ T5722] kvm: kvm [5721]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 121.036275][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 121.049215][ T52] usb 5-1: config 0 has an invalid interface number: 240 but max is 0 [ 121.061480][ T5722] kvm: kvm [5721]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 121.068408][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.081489][ T52] usb 5-1: config 0 has no interface number 0 [ 121.101011][ T52] usb 5-1: config 0 interface 240 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 121.127089][ T5722] kvm: kvm [5721]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 121.137895][ T52] usb 5-1: config 0 interface 240 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 121.160163][ T52] usb 5-1: config 0 interface 240 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 121.172280][ T52] usb 5-1: config 0 interface 240 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 121.202788][ T5722] kvm: kvm [5721]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 121.222070][ T52] usb 5-1: New USB device found, idVendor=046d, idProduct=69b5, bcdDevice=ee.15 [ 121.259882][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.299179][ T52] usb 5-1: Product: syz [ 121.309316][ T52] usb 5-1: Manufacturer: syz [ 121.325589][ T52] usb 5-1: SerialNumber: syz [ 121.347680][ T5316] usb 1-1: USB disconnect, device number 5 [ 121.356538][ T29] audit: type=1400 audit(1722386593.402:297): avc: denied { execute } for pid=5731 comm="syz.1.130" path="/29/hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.361333][ T52] usb 5-1: config 0 descriptor?? [ 122.749878][ T5289] usb 5-1: USB disconnect, device number 5 [ 122.936648][ T5753] ubi0: attaching mtd0 [ 122.954286][ T5753] ubi0: scanning is finished [ 122.959040][ T5753] ubi0: empty MTD device detected [ 123.617805][ T5753] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 124.439748][ T52] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.922664][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.934855][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 124.934875][ T29] audit: type=1400 audit(1722386596.982:338): avc: denied { bind } for pid=5778 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.961895][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.979212][ T52] usb 3-1: New USB device found, idVendor=2001, idProduct=3a04, bcdDevice=15.4e [ 124.989556][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.008323][ T52] usb 3-1: Product: syz [ 125.016737][ T52] usb 3-1: Manufacturer: syz [ 125.021928][ T52] usb 3-1: SerialNumber: syz [ 125.041320][ T52] usb 3-1: config 0 descriptor?? [ 125.050374][ T52] usb 3-1: Could not find all expected endpoints [ 125.109039][ T29] audit: type=1400 audit(1722386597.142:339): avc: denied { mounton } for pid=5765 comm="syz.3.141" path="/30/file0" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.225923][ T29] audit: type=1400 audit(1722386597.272:340): avc: denied { read } for pid=5782 comm="syz.1.145" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 125.279200][ T52] usb 3-1: USB disconnect, device number 4 [ 125.307267][ T29] audit: type=1400 audit(1722386597.282:341): avc: denied { open } for pid=5782 comm="syz.1.145" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 125.419801][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.446675][ T29] audit: type=1400 audit(1722386597.492:342): avc: denied { create } for pid=5788 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 125.582816][ T29] audit: type=1400 audit(1722386597.632:343): avc: denied { unlink } for pid=5788 comm="syz.3.148" name="#1" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.609122][ T29] audit: type=1400 audit(1722386597.652:344): avc: denied { mount } for pid=5788 comm="syz.3.148" name="/" dev="overlay" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 125.638624][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 125.653049][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 125.726745][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 125.746150][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.759498][ T25] usb 5-1: Product: syz [ 125.799595][ T25] usb 5-1: Manufacturer: syz [ 125.819699][ T25] usb 5-1: SerialNumber: syz [ 125.847685][ T25] usb 5-1: config 0 descriptor?? [ 125.897498][ T25] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 126.111622][ T25] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 126.577541][ T29] audit: type=1400 audit(1722386598.222:345): avc: denied { accept } for pid=5793 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.929763][ T29] audit: type=1326 audit(1722386598.242:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87e8b77299 code=0x0 [ 127.126363][ T5805] ubi0: attaching mtd0 [ 127.141002][ T5805] ubi0: scanning is finished [ 127.466622][ T25] em28xx 5-1:0.0: chip ID is em2884 [ 127.627242][ T5805] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 127.750011][ T5278] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.785720][ T25] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 127.799722][ T25] em28xx 5-1:0.0: board has no eeprom [ 127.829082][ T5816] tipc: Started in network mode [ 127.834699][ T5316] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.842500][ T5816] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 127.856535][ T5816] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 127.866561][ T5816] tipc: Enabled bearer , priority 10 [ 127.899968][ T25] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 127.928446][ T25] em28xx 5-1:0.0: dvb set to bulk mode. [ 127.939293][ T3070] em28xx 5-1:0.0: Binding DVB extension [ 127.950261][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 128.002569][ T5278] usb 2-1: config 0 has an invalid interface number: 240 but max is 0 [ 128.020845][ T25] usb 5-1: USB disconnect, device number 6 [ 128.027985][ T25] em28xx 5-1:0.0: Disconnecting em28xx [ 128.033750][ T5316] usb 3-1: Using ep0 maxpacket: 8 [ 128.039442][ T5278] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.070778][ T5278] usb 2-1: config 0 has no interface number 0 [ 128.070937][ T5316] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 128.092901][ T5278] usb 2-1: config 0 interface 240 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 128.135507][ T5316] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.149731][ T5278] usb 2-1: config 0 interface 240 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 128.172330][ T5316] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.196015][ T5278] usb 2-1: config 0 interface 240 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 128.207964][ T3070] em28xx 5-1:0.0: Registering input extension [ 128.215728][ T5316] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.232634][ T5278] usb 2-1: config 0 interface 240 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 128.246817][ T5316] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.294202][ T5316] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.320060][ T5278] usb 2-1: New USB device found, idVendor=046d, idProduct=69b5, bcdDevice=ee.15 [ 128.329467][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.350868][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.360602][ T5278] usb 2-1: Product: syz [ 128.369253][ T5278] usb 2-1: Manufacturer: syz [ 128.386078][ T5278] usb 2-1: SerialNumber: syz [ 128.413128][ T3070] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 128.423878][ T5278] usb 2-1: config 0 descriptor?? [ 128.434912][ T3070] Registered IR keymap rc-empty [ 128.481076][ T3070] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 128.505300][ T3070] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 128.579455][ T3070] em28xx 5-1:0.0: Input extension successfully initialized [ 128.600917][ T25] em28xx 5-1:0.0: Closing input extension [ 128.618283][ T5316] usb 3-1: GET_CAPABILITIES returned 0 [ 128.646373][ T5316] usbtmc 3-1:16.0: can't read capabilities [ 128.751674][ T25] em28xx 5-1:0.0: Freeing device [ 128.798533][ T5316] usb 2-1: USB disconnect, device number 4 [ 128.931658][ T3070] usb 3-1: USB disconnect, device number 5 [ 129.018297][ T5281] tipc: Node number set to 1 [ 129.072146][ T29] audit: type=1400 audit(1722386601.112:347): avc: denied { execute } for pid=5835 comm="syz.0.164" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 130.128964][ T5850] ubi0: attaching mtd0 [ 130.144368][ T5850] ubi0: scanning is finished [ 130.365562][ T5848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.165'. [ 130.417336][ T5850] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 130.425443][ T5850] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 130.433060][ T5850] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 130.440242][ T5850] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 130.447983][ T5850] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 130.456032][ T5850] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 130.465154][ T5850] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 6468469 [ 130.475125][ T5850] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 130.514476][ T5852] ubi0: background thread "ubi_bgt0d" started, PID 5852 [ 131.178373][ T5861] syz.0.170 uses obsolete (PF_INET,SOCK_PACKET) [ 133.545102][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.553901][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.741502][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 133.741522][ T29] audit: type=1400 audit(1722386605.792:349): avc: denied { map } for pid=5880 comm="syz.0.179" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 133.781361][ T52] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.865043][ T29] audit: type=1400 audit(1722386605.882:350): avc: denied { create } for pid=5880 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.941986][ T29] audit: type=1400 audit(1722386605.952:351): avc: denied { getopt } for pid=5880 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.032491][ T5889] ubi: mtd0 is already attached to ubi0 [ 134.784952][ T29] audit: type=1400 audit(1722386605.962:352): avc: denied { getopt } for pid=5880 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 134.819512][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 134.857491][ T52] usb 3-1: config 0 has an invalid interface number: 240 but max is 0 [ 134.873585][ T29] audit: type=1400 audit(1722386606.862:353): avc: denied { bind } for pid=5880 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.626376][ T52] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.643398][ T52] usb 3-1: config 0 has no interface number 0 [ 135.651626][ T52] usb 3-1: config 0 interface 240 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 135.693302][ T52] usb 3-1: config 0 interface 240 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 135.705758][ T52] usb 3-1: config 0 interface 240 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 135.719130][ T52] usb 3-1: config 0 interface 240 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 135.786924][ T52] usb 3-1: New USB device found, idVendor=046d, idProduct=69b5, bcdDevice=ee.15 [ 135.803828][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.824747][ T52] usb 3-1: Product: syz [ 135.828971][ T52] usb 3-1: Manufacturer: syz [ 135.833769][ T52] usb 3-1: SerialNumber: syz [ 135.842107][ T52] usb 3-1: config 0 descriptor?? [ 136.041618][ T29] audit: type=1400 audit(1722386608.082:354): avc: denied { create } for pid=5903 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.071389][ T29] audit: type=1400 audit(1722386608.112:355): avc: denied { write } for pid=5903 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.227347][ T5908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.183'. [ 136.336626][ T5910] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 136.426404][ T5281] usb 3-1: USB disconnect, device number 6 [ 137.153549][ T5932] ubi: mtd0 is already attached to ubi0 [ 138.362839][ T5281] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.599836][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 138.663670][ T5281] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 138.727760][ T5281] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 138.789791][ T5281] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.812334][ T5281] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.829904][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.847706][ T5281] usb 1-1: Product: syz [ 138.853984][ T5281] usb 1-1: Manufacturer: syz [ 138.859041][ T5281] usb 1-1: SerialNumber: syz [ 138.969458][ T5939] sd 0:0:1:0: PR command failed: 1026 [ 138.984074][ T5939] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 139.003824][ T5939] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 139.106054][ T5281] usb 1-1: 0:2 : does not exist [ 139.359440][ T5281] usb 1-1: USB disconnect, device number 6 [ 139.747342][ T5708] udevd[5708]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.841259][ T5955] tipc: Started in network mode [ 139.846211][ T5955] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 139.902558][ T5955] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 139.951743][ T5955] tipc: Enabled bearer , priority 10 [ 140.492557][ T29] audit: type=1400 audit(1722386612.532:356): avc: denied { ioctl } for pid=5964 comm="syz.2.204" path="socket:[10463]" dev="sockfs" ino=10463 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.709776][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.967549][ T9] usb 5-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 140.991146][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.023848][ T9] usb 5-1: Product: syz [ 141.034063][ T9] usb 5-1: Manufacturer: syz [ 141.050888][ T9] usb 5-1: SerialNumber: syz [ 141.094583][ T5316] tipc: Node number set to 1 [ 141.906682][ T9] usb 5-1: config 0 descriptor?? [ 141.924116][ T9] gspca_main: touptek-2.14.0 probing 0547:6801 [ 142.225104][ T9] usb 5-1: USB disconnect, device number 7 [ 142.900377][ T29] audit: type=1400 audit(1722386615.001:357): avc: denied { listen } for pid=5993 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.629527][ T29] audit: type=1400 audit(1722386615.052:358): avc: denied { accept } for pid=5993 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.819121][ T6006] netlink: 172 bytes leftover after parsing attributes in process `syz.4.215'. [ 145.832778][ T5994] sctp: failed to load transform for md5: -4 [ 146.677046][ T29] audit: type=1400 audit(1722386618.436:359): avc: denied { nlmsg_read } for pid=6018 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 147.586881][ T6029] input: syz0 as /devices/virtual/input/input12 [ 147.873119][ T29] audit: type=1400 audit(1722386620.101:360): avc: denied { read } for pid=6034 comm="syz.4.224" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 147.968162][ T29] audit: type=1400 audit(1722386620.132:361): avc: denied { open } for pid=6034 comm="syz.4.224" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 148.263086][ T5283] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.476136][ T5283] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 148.612309][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.651247][ T5283] usb 2-1: Product: syz [ 149.430721][ T5283] usb 2-1: Manufacturer: syz [ 149.458832][ T5283] usb 2-1: SerialNumber: syz [ 149.474744][ T5283] usb 2-1: config 0 descriptor?? [ 149.531625][ T5283] gspca_main: touptek-2.14.0 probing 0547:6801 [ 149.626072][ T29] audit: type=1400 audit(1722386621.875:362): avc: denied { execute } for pid=6051 comm="syz.4.229" path="/dev/dsp" dev="devtmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 150.028283][ T52] usb 2-1: USB disconnect, device number 5 [ 150.476220][ T29] audit: type=1400 audit(1722386622.719:363): avc: denied { setopt } for pid=6058 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.200597][ T29] audit: type=1400 audit(1722386623.492:364): avc: denied { ioctl } for pid=6066 comm="syz.2.234" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.065373][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.469835][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.539904][ T6090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.698917][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 152.751186][ T9] usb 5-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 152.763385][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.809453][ T9] usb 5-1: Product: syz [ 152.817154][ T9] usb 5-1: Manufacturer: syz [ 152.864145][ T9] usb 5-1: SerialNumber: syz [ 152.895001][ T9] usb 5-1: config 0 descriptor?? [ 154.196944][ T9] mxuport 5-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 154.236244][ T9] mxuport 5-1:0.0: probe with driver mxuport failed with error -5 [ 154.348379][ T9] usb 5-1: USB disconnect, device number 8 [ 154.761650][ T29] audit: type=1326 audit(1722386627.094:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.1.249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43ddd77299 code=0x0 [ 156.048188][ T6125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.001602][ T29] audit: type=1400 audit(1722386629.371:366): avc: denied { create } for pid=6119 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.178282][ T6131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.547672][ T6133] kvm: emulating exchange as write [ 157.567212][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.257'. [ 158.672772][ T3070] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 158.705768][ T29] audit: type=1400 audit(1722386631.079:367): avc: denied { create } for pid=6147 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.944332][ T3070] usb 3-1: config 0 has an invalid interface number: 254 but max is 0 [ 158.980750][ T3070] usb 3-1: config 0 has no interface number 0 [ 159.005124][ T3070] usb 3-1: config 0 interface 254 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 159.038307][ T3070] usb 3-1: config 0 interface 254 has no altsetting 0 [ 159.068504][ T3070] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=68.d1 [ 159.088317][ T3070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.100736][ T3070] usb 3-1: Product: syz [ 159.104961][ T3070] usb 3-1: Manufacturer: syz [ 159.114272][ T3070] usb 3-1: SerialNumber: syz [ 159.129747][ T3070] usb 3-1: config 0 descriptor?? [ 159.317145][ T5316] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 161.006766][ T29] audit: type=1326 audit(1722386633.391:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.4.263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb38d177299 code=0x0 [ 161.078052][ T6171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.175052][ T5316] usb 2-1: Using ep0 maxpacket: 8 [ 161.470576][ T5316] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.556258][ T5316] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 161.629179][ T5316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.700694][ T5316] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.035671][ T29] audit: type=1400 audit(1722386634.450:369): avc: denied { mount } for pid=6134 comm="syz.2.257" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 163.891834][ T29] audit: type=1400 audit(1722386634.530:370): avc: denied { read } for pid=6172 comm="syz.4.268" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.643489][ T29] audit: type=1400 audit(1722386637.059:371): avc: denied { unmount } for pid=5229 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 164.694070][ T5316] usb 2-1: string descriptor 0 read error: -71 [ 164.700494][ T5316] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 164.770385][ T5316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.784884][ T3070] usb 3-1: USB disconnect, device number 7 [ 164.801382][ T29] audit: type=1400 audit(1722386637.230:372): avc: denied { unmount } for pid=5241 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 164.836347][ T5316] usb 2-1: config 0 descriptor?? [ 164.879672][ T5316] usb 2-1: can't set config #0, error -71 [ 164.931541][ T5316] usb 2-1: USB disconnect, device number 6 [ 167.296506][ T5278] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.525403][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 167.533138][ T5278] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 167.548836][ T5278] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.575642][ T5278] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.654225][ T5278] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.688073][ T5278] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.711341][ T5278] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.726260][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.952419][ T5278] usb 5-1: usb_control_msg returned -32 [ 168.966958][ T5278] usbtmc 5-1:16.0: can't read capabilities [ 169.585378][ T29] audit: type=1400 audit(1722386642.038:373): avc: denied { ioctl } for pid=6227 comm="syz.1.286" path="socket:[10999]" dev="sockfs" ino=10999 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.081178][ T5233] Bluetooth: hci5: sending frame failed (-49) [ 170.089709][ T5244] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 170.199621][ T29] audit: type=1400 audit(1722386642.661:374): avc: denied { write } for pid=6238 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 170.338951][ T9] usb 5-1: USB disconnect, device number 9 [ 170.576606][ T29] audit: type=1400 audit(1722386643.033:375): avc: denied { read } for pid=6245 comm="syz.1.290" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.297029][ T29] audit: type=1400 audit(1722386643.746:376): avc: denied { create } for pid=6260 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.529688][ T6264] netlink: 268 bytes leftover after parsing attributes in process `syz.3.294'. [ 172.122592][ T29] audit: type=1400 audit(1722386643.746:377): avc: denied { getopt } for pid=6260 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.224168][ T6254] ======================================================= [ 172.224168][ T6254] WARNING: The mand mount option has been deprecated and [ 172.224168][ T6254] and is ignored by this kernel. Remove the mand [ 172.224168][ T6254] option from the mount to silence this warning. [ 172.224168][ T6254] ======================================================= [ 172.383673][ T29] audit: type=1400 audit(1722386644.489:378): avc: denied { sys_module } for pid=6260 comm="syz.3.294" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 172.506118][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.295'. [ 172.523898][ T29] audit: type=1400 audit(1722386644.901:379): avc: denied { mount } for pid=6247 comm="syz.4.291" name="/" dev="ramfs" ino=11095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 172.873330][ T29] audit: type=1400 audit(1722386645.353:380): avc: denied { read write } for pid=6268 comm="syz.1.295" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.813625][ T29] audit: type=1400 audit(1722386645.353:381): avc: denied { open } for pid=6268 comm="syz.1.295" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.954183][ T29] audit: type=1400 audit(1722386645.353:382): avc: denied { ioctl } for pid=6268 comm="syz.1.295" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.179908][ T5278] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 174.503351][ T5278] usb 2-1: config 0 has an invalid interface number: 254 but max is 0 [ 174.597723][ T5278] usb 2-1: config 0 has no interface number 0 [ 174.639032][ T5278] usb 2-1: config 0 interface 254 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 175.370130][ T5278] usb 2-1: config 0 interface 254 has no altsetting 0 [ 175.464109][ T5278] usb 2-1: string descriptor 0 read error: -71 [ 175.481889][ T5278] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=68.d1 [ 175.503319][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.527443][ T5278] usb 2-1: config 0 descriptor?? [ 175.533471][ T5278] usb 2-1: can't set config #0, error -71 [ 175.547936][ T5278] usb 2-1: USB disconnect, device number 7 [ 175.593656][ T5708] udevd[5708]: setting owner of /dev/bus/usb/002/007 to uid=0, gid=0 failed: No such file or directory [ 175.661156][ T29] audit: type=1400 audit(1722386648.153:383): avc: denied { unmount } for pid=5229 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 175.855359][ T5242] Bluetooth: hci4: command 0x0405 tx timeout [ 176.018081][ T52] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 176.031529][ T29] audit: type=1400 audit(1722386648.514:384): avc: denied { create } for pid=6302 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 176.141787][ T29] audit: type=1400 audit(1722386648.594:385): avc: denied { connect } for pid=6305 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.237440][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 176.785964][ T29] audit: type=1400 audit(1722386649.266:386): avc: denied { write } for pid=6302 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 176.811344][ T52] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 176.850251][ T52] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.904098][ T52] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.939222][ T52] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.966958][ T52] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.022770][ T52] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.035859][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.314228][ T52] usb 1-1: usb_control_msg returned -32 [ 177.330166][ T52] usbtmc 1-1:16.0: can't read capabilities [ 177.413724][ T5244] Bluetooth: hci5: command 0x1003 tx timeout [ 177.413757][ T5233] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 177.633190][ T5278] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 177.855079][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.315'. [ 178.054172][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.065723][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.076311][ T5278] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 178.085499][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.098303][ T5278] usb 3-1: config 0 descriptor?? [ 178.963659][ T5316] usb 1-1: USB disconnect, device number 7 [ 178.998716][ T5278] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 179.034545][ T5278] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 179.077355][ T5278] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 179.086157][ T5278] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 179.542962][ T5278] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 179.945145][ T5283] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 179.962529][ T5278] holtek 0003:1241:5015.0005: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 179.979767][ T5278] holtek 0003:1241:5015.0005: no inputs found [ 180.298924][ T5278] usb 3-1: USB disconnect, device number 8 [ 180.303205][ T5283] usb 5-1: config 0 has an invalid interface number: 254 but max is 0 [ 180.345976][ T5283] usb 5-1: config 0 has no interface number 0 [ 180.357449][ T5283] usb 5-1: config 0 interface 254 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 180.377097][ T5283] usb 5-1: config 0 interface 254 has no altsetting 0 [ 180.393425][ T5283] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=68.d1 [ 180.529740][ T6356] netlink: 268 bytes leftover after parsing attributes in process `syz.0.319'. [ 180.987905][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.005141][ T5283] usb 5-1: Product: syz [ 181.015233][ T5283] usb 5-1: Manufacturer: syz [ 181.019914][ T5283] usb 5-1: SerialNumber: syz [ 181.066082][ T5283] usb 5-1: config 0 descriptor?? [ 181.122820][ T5283] usb 5-1: can't set config #0, error -71 [ 181.185271][ T5283] usb 5-1: USB disconnect, device number 10 [ 182.400206][ T2954] Bluetooth: hci5: Frame reassembly failed (-84) [ 182.426757][ T6375] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 184.437196][ T5233] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 186.936247][ T6415] sched: RT throttling activated [ 187.132164][ T5281] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 187.301877][ T29] audit: type=1400 audit(1722386659.810:387): avc: denied { setopt } for pid=6419 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.371906][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 187.386208][ T5281] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=de.43 [ 188.243691][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.265894][ T5281] usb 5-1: Product: syz [ 188.271187][ T5281] usb 5-1: Manufacturer: syz [ 188.275974][ T5281] usb 5-1: SerialNumber: syz [ 188.308809][ T5281] usb 5-1: config 0 descriptor?? [ 188.370928][ T5281] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 188.388278][ T5281] usb 5-1: selecting invalid altsetting 1 [ 188.588874][ T5281] gspca_stk014: reg_r err -71 [ 188.608209][ T5281] stk014 5-1:0.0: probe with driver stk014 failed with error -71 [ 188.640320][ T5281] usb 5-1: USB disconnect, device number 11 [ 190.109655][ T5281] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 190.307819][ T5281] usb 4-1: Using ep0 maxpacket: 16 [ 190.330800][ T5281] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 190.345654][ T5281] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.434101][ T5281] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.468320][ T5281] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.547628][ T5281] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 190.710275][ T5281] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 190.855790][ T5281] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 191.014030][ T5281] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 191.177017][ T5281] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.206780][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 191.214838][ T5281] usb 4-1: SerialNumber: syz [ 191.249266][ T5281] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 191.280770][ T5281] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 191.370117][ T6459] netlink: 'syz.0.349': attribute type 8 has an invalid length. [ 191.486460][ T3070] usb 4-1: USB disconnect, device number 3 [ 191.606119][ T52] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 191.805875][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 191.824484][ T52] usb 2-1: config index 0 descriptor too short (expected 16914, got 18) [ 191.837517][ T52] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 191.847709][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.875009][ T52] usb 2-1: config 0 descriptor?? [ 191.906962][ T52] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 192.514787][ T29] audit: type=1400 audit(1722386665.027:388): avc: denied { getopt } for pid=6497 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.631783][ T5281] usb 2-1: USB disconnect, device number 8 [ 192.800645][ T52] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 194.195452][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 194.882707][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.301813][ T52] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 195.312468][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.315612][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 195.358535][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.396786][ T29] audit: type=1400 audit(1722386667.910:389): avc: denied { ioctl } for pid=6507 comm="syz.2.364" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12783 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.452156][ T52] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.563829][ T52] usb 5-1: unable to read config index 1 descriptor/start: -71 [ 195.584077][ T52] usb 5-1: can't read configurations, error -71 [ 196.111373][ T52] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 196.623498][ T29] audit: type=1400 audit(1722386668.831:390): avc: denied { shutdown } for pid=6518 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.740696][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 196.759423][ T52] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 196.789288][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.880994][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.910589][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.946982][ T52] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 197.001295][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 197.053019][ T52] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 197.096813][ T52] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 197.136473][ T52] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.149517][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.159665][ T52] usb 5-1: SerialNumber: syz [ 197.208873][ T52] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 197.254984][ T52] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 197.278355][ T29] audit: type=1400 audit(1722386669.802:391): avc: denied { rename } for pid=4655 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.371492][ T29] audit: type=1400 audit(1722386669.802:392): avc: denied { unlink } for pid=4655 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.397392][ T29] audit: type=1400 audit(1722386669.802:393): avc: denied { create } for pid=4655 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.729317][ T5289] usb 5-1: USB disconnect, device number 13 [ 198.179971][ T5278] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 198.439408][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 198.453508][ T5278] usb 2-1: config 0 has an invalid interface number: 104 but max is 2 [ 198.482497][ T5278] usb 2-1: config 0 has an invalid interface number: 104 but max is 2 [ 198.535549][ T5278] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.576958][ T5278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 198.632894][ T5278] usb 2-1: config 0 has no interface number 0 [ 198.651355][ T5278] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 198.761565][ T5278] usb 2-1: config 0 interface 104 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 198.821385][ T29] audit: type=1400 audit(1722386671.293:394): avc: denied { search } for pid=4887 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.823023][ T5278] usb 2-1: config 0 interface 104 has no altsetting 1 [ 198.923424][ T5278] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 7.36 [ 198.939477][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=255, SerialNumber=255 [ 198.949888][ T5278] usb 2-1: Product: syz [ 198.965531][ T29] audit: type=1400 audit(1722386671.293:395): avc: denied { read } for pid=4887 comm="dhcpcd" name="n68" dev="tmpfs" ino=3014 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.989178][ T5278] usb 2-1: Manufacturer: syz [ 199.001053][ T5278] usb 2-1: SerialNumber: syz [ 199.048999][ T29] audit: type=1400 audit(1722386671.293:396): avc: denied { open } for pid=4887 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=3014 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.073154][ T5278] usb 2-1: config 0 descriptor?? [ 199.214571][ T29] audit: type=1400 audit(1722386671.293:397): avc: denied { getattr } for pid=4887 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=3014 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.343924][ T5278] asix 2-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 199.426051][ T29] audit: type=1400 audit(1722386671.933:398): avc: denied { read } for pid=6570 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.449756][ T5278] asix 2-1:0.104: probe with driver asix failed with error -71 [ 199.569459][ T29] audit: type=1400 audit(1722386671.933:399): avc: denied { open } for pid=6570 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.638801][ T5278] usb 2-1: USB disconnect, device number 9 [ 199.664461][ T29] audit: type=1400 audit(1722386671.933:400): avc: denied { getattr } for pid=6570 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.752637][ T29] audit: type=1400 audit(1722386672.083:401): avc: denied { search } for pid=4655 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.036626][ T6573] syzkaller0: entered promiscuous mode [ 200.100775][ T6573] syzkaller0: entered allmulticast mode [ 200.219650][ T29] audit: type=1400 audit(1722386672.734:402): avc: denied { write } for pid=6564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.205242][ T29] audit: type=1400 audit(1722386672.734:403): avc: denied { add_name } for pid=6564 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.943378][ T5242] Bluetooth: hci2: command 0x0406 tx timeout [ 201.969383][ T5242] Bluetooth: hci4: command 0x0405 tx timeout [ 202.806841][ T5281] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 202.818288][ T52] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 203.012638][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 203.029048][ T5281] usb 3-1: config index 0 descriptor too short (expected 16914, got 18) [ 203.051209][ T5281] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 203.069564][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.080505][ T52] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 203.098170][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.115147][ T5281] usb 3-1: config 0 descriptor?? [ 203.127806][ T52] usb 4-1: config 0 descriptor?? [ 203.134718][ T5281] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 203.149909][ T52] cp210x 4-1:0.0: cp210x converter detected [ 203.619133][ T52] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 203.632325][ T52] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 203.650598][ T52] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 203.663462][ T52] usb 4-1: cp210x converter now attached to ttyUSB0 [ 203.697987][ T52] usb 4-1: USB disconnect, device number 4 [ 203.726152][ T52] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 203.749114][ T52] cp210x 4-1:0.0: device disconnected [ 203.920146][ T5281] usb 3-1: USB disconnect, device number 9 [ 204.624197][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 204.624215][ T29] audit: type=1400 audit(1722386677.147:410): avc: denied { setopt } for pid=6642 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.654369][ T52] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 207.860351][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 207.863037][ T52] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 207.863179][ T52] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.863221][ T52] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.863256][ T52] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.863289][ T52] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 207.863325][ T52] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 207.863357][ T52] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 207.863391][ T52] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 207.866317][ T52] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.866353][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 207.866377][ T52] usb 2-1: SerialNumber: syz [ 207.924587][ T52] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 207.927924][ T52] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 208.241676][ T6683] Bluetooth: MGMT ver 1.23 [ 208.267946][ T29] audit: type=1400 audit(1722386680.798:411): avc: denied { read } for pid=6685 comm="syz.4.409" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 208.268025][ T29] audit: type=1400 audit(1722386680.798:412): avc: denied { open } for pid=6685 comm="syz.4.409" path="/dev/ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 208.388882][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.410'. [ 208.389804][ T52] usb 2-1: USB disconnect, device number 10 [ 209.384472][ T6692] syzkaller0: entered allmulticast mode [ 209.631109][ T29] audit: type=1400 audit(1722386682.159:413): avc: denied { read } for pid=6703 comm="syz.1.414" name="usbmon0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.713452][ T29] audit: type=1400 audit(1722386682.189:414): avc: denied { open } for pid=6703 comm="syz.1.414" path="/dev/usbmon0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.794895][ T29] audit: type=1400 audit(1722386682.199:415): avc: denied { ioctl } for pid=6703 comm="syz.1.414" path="/dev/usbmon0" dev="devtmpfs" ino=702 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 211.234942][ T5283] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 211.476468][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.518604][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.593205][ T5283] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.626746][ T5283] usb 4-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 211.642544][ T52] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 211.660208][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.726291][ T5283] usb 4-1: config 0 descriptor?? [ 211.852574][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 211.853030][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 211.891935][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 211.921991][ T52] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 211.962775][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.995503][ T52] usb 3-1: config 0 descriptor?? [ 212.062503][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 212.106359][ T25] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.00 [ 212.121361][ T25] usb 5-1: New USB device strings: Mfr=16, Product=1, SerialNumber=1 [ 212.150477][ T25] usb 5-1: Product: syz [ 212.160470][ T25] usb 5-1: Manufacturer: syz [ 212.180416][ T25] usb 5-1: SerialNumber: syz [ 212.205443][ T25] usb 5-1: config 0 descriptor?? [ 212.223147][ T25] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 212.237920][ T5283] wacom 0003:056A:0043.0006: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 212.262451][ T25] usb 5-1: Detected SIO [ 212.282565][ T25] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 212.294929][ T5283] wacom 0003:056A:0043.0006: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.3-1/input0 [ 212.349635][ T5283] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0043.0006/input/input13 [ 212.558504][ T5283] usb 4-1: USB disconnect, device number 5 [ 212.715074][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.732662][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.805174][ T52] hid (null): invalid report_count -1744830464 [ 212.823591][ T52] hid (null): bogus close delimiter [ 212.829021][ T52] hid (null): bogus close delimiter [ 212.845793][ T52] hid (null): unknown global tag 0xe [ 212.851971][ T52] hid (null): unknown global tag 0xe [ 212.871206][ T52] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 212.879559][ T52] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 212.889742][ T52] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 212.903308][ T52] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 212.911014][ T52] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 212.918834][ T52] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 212.931871][ T52] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 212.941435][ T52] hid-generic 0003:0158:0100.0007: invalid report_count -1744830464 [ 212.953865][ T52] hid-generic 0003:0158:0100.0007: item 0 4 1 9 parsing failed [ 212.968777][ T52] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 213.004939][ T52] usb 3-1: USB disconnect, device number 10 [ 213.280798][ T29] audit: type=1400 audit(1722386685.810:416): avc: denied { mount } for pid=6737 comm="syz.0.425" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 213.449785][ T29] audit: type=1400 audit(1722386685.980:417): avc: denied { unmount } for pid=5228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 213.575600][ T29] audit: type=1400 audit(1722386686.110:418): avc: denied { nlmsg_write } for pid=6745 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 213.614808][ T29] audit: type=1400 audit(1722386686.110:419): avc: denied { bind } for pid=6745 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.678054][ T29] audit: type=1400 audit(1722386686.110:420): avc: denied { setopt } for pid=6745 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.392478][ T5316] usb 5-1: USB disconnect, device number 14 [ 214.437091][ T5316] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 214.483118][ T5316] ftdi_sio 5-1:0.0: device disconnected [ 215.553757][ T3070] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 215.751408][ T3070] usb 3-1: Using ep0 maxpacket: 8 [ 215.751610][ T29] audit: type=1326 audit(1722386688.281:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6770 comm="syz.1.439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43ddd77299 code=0x0 [ 215.808742][ T3070] usb 3-1: config 0 has no interfaces? [ 215.825225][ T3070] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 215.841612][ T3070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 215.858071][ T3070] usb 3-1: SerialNumber: syz [ 215.876967][ T3070] usb 3-1: config 0 descriptor?? [ 216.122245][ T3070] usb 3-1: USB disconnect, device number 11 [ 217.849046][ T29] audit: type=1326 audit(1722386690.381:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.0.456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87e8b77299 code=0x0 [ 217.872219][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.078353][ T6834] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 218.301313][ T29] audit: type=1400 audit(1722386690.831:423): avc: denied { connect } for pid=6837 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 218.470866][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 219.024293][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.073537][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.120419][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 219.160568][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.203394][ T25] usb 5-1: config 0 descriptor?? [ 219.617808][ T6835] syz.4.460[6835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.618052][ T6835] syz.4.460[6835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.699955][ T25] konepure 0003:1E7D:2DB4.0008: unknown main item tag 0x0 [ 219.771507][ T25] konepure 0003:1E7D:2DB4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 220.038653][ T52] usb 5-1: USB disconnect, device number 15 [ 222.055317][ T6887] process 'syz.0.477' launched './file0' with NULL argv: empty string added [ 222.069801][ T29] audit: type=1400 audit(1722386694.602:424): avc: denied { execute_no_trans } for pid=6883 comm="syz.0.477" path="/110/file0" dev="tmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 222.847566][ T6889] No such timeout policy "syz0" [ 223.230065][ T52] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 223.473268][ T52] usb 1-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 223.491295][ T52] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.505350][ T52] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 223.525013][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 223.550968][ T52] usb 1-1: SerialNumber: syz [ 223.706630][ T6912] netlink: 4076 bytes leftover after parsing attributes in process `syz.1.487'. [ 223.838008][ T52] usb 1-1: 0:2 : does not exist [ 223.856309][ T52] usb 1-1: unit 255 not found! [ 223.883626][ T52] usb 1-1: 5:0: cannot get min/max values for control 17 (id 5) [ 223.968293][ T52] usb 1-1: USB disconnect, device number 8 [ 225.110226][ T5244] Bluetooth: hci4: unexpected event for opcode 0x201c [ 225.156118][ T5708] udevd[5708]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.429845][ T6937] trusted_key: syz.1.495 sent an empty control message without MSG_MORE. [ 225.649712][ T52] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 226.015844][ T52] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.049310][ T52] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 226.095055][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.250311][ T52] usb 5-1: Product: syz [ 226.359165][ T52] usb 5-1: Manufacturer: syz [ 226.494231][ T52] usb 5-1: SerialNumber: syz [ 226.549846][ T52] usb 5-1: config 0 descriptor?? [ 227.008884][ T29] audit: type=1400 audit(1722386699.543:425): avc: denied { shutdown } for pid=6955 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.600037][ T29] audit: type=1400 audit(1722386700.083:426): avc: denied { read append } for pid=6957 comm="syz.0.502" name="sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 227.652749][ T29] audit: type=1400 audit(1722386700.083:427): avc: denied { open } for pid=6957 comm="syz.0.502" path="/dev/sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 227.697336][ T6960] evm: overlay not supported [ 227.711695][ T29] audit: type=1400 audit(1722386700.133:428): avc: denied { watch watch_reads } for pid=6934 comm="syz.4.494" path="/93/file1" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 228.908284][ T6981] ------------[ cut here ]------------ [ 228.914737][ T6981] WARNING: CPU: 1 PID: 6981 at include/net/mac80211.h:6993 minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 228.926649][ T6981] Modules linked in: [ 228.930867][ T6981] CPU: 1 UID: 0 PID: 6981 Comm: syz.2.509 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 228.941717][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 228.952366][ T6981] RIP: 0010:minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 228.960052][ T6981] Code: 03 0f 8e 49 07 00 00 44 89 f6 89 df 45 8b 6c 24 10 e8 6a b1 e8 f6 44 39 f3 0f 8c dc f3 ff ff 4c 8b 64 24 10 e8 17 b7 e8 f6 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 38 48 c1 ea 03 [ 228.979900][ T6981] RSP: 0018:ffffc9000391f1b0 EFLAGS: 00010287 [ 228.986227][ T6981] RAX: 000000000000503a RBX: 000000000000000c RCX: ffffc9000ab0f000 [ 228.994500][ T6981] RDX: 0000000000040000 RSI: ffffffff8aa1c419 RDI: 0000000000000004 [ 229.003922][ T6981] RBP: dffffc0000000000 R08: 0000000000000004 R09: 000000000000000c [ 229.012917][ T6981] R10: 000000000000000c R11: 0000000000000000 R12: ffff88807b3a5c38 [ 229.021851][ T6981] R13: 0000000000000000 R14: 000000000000000c R15: ffffed100f67461c [ 229.033915][ T6981] FS: 00007f93b8aef6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 229.043971][ T6981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.051892][ T6981] CR2: 00007f6d20a5c018 CR3: 0000000028e10000 CR4: 00000000003506f0 [ 229.062051][ T6981] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 229.070438][ T6981] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 229.079245][ T6981] Call Trace: [ 229.082796][ T6981] [ 229.085793][ T6981] ? show_regs+0x8c/0xa0 [ 229.090259][ T6981] ? __warn+0xe5/0x3c0 [ 229.094566][ T6981] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 229.101630][ T6981] ? report_bug+0x3c0/0x580 [ 229.106295][ T6981] ? handle_bug+0x3d/0x70 [ 229.111908][ T6981] ? exc_invalid_op+0x17/0x50 [ 229.116866][ T6981] ? asm_exc_invalid_op+0x1a/0x20 [ 229.122144][ T6981] ? minstrel_ht_update_caps.constprop.0+0xff9/0x1a90 [ 229.129126][ T6981] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 229.136116][ T6981] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 229.141909][ T6981] rate_control_rate_init+0x2fa/0x690 [ 229.147539][ T6981] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 229.154213][ T6981] sta_apply_parameters+0xb6e/0x1740 [ 229.159899][ T6981] ieee80211_add_station+0x3fa/0x6c0 [ 229.165432][ T6981] nl80211_new_station+0x146d/0x1bf0 [ 229.170974][ T6981] ? __rtnl_unlock+0x68/0xf0 [ 229.175777][ T6981] ? __pfx_nl80211_new_station+0x10/0x10 [ 229.181850][ T6981] ? ref_tracker_alloc+0x2ef/0x5b0 [ 229.187113][ T6981] ? nl80211_pre_doit+0x1b0/0xb10 [ 229.192883][ T6981] genl_family_rcv_msg_doit+0x202/0x2f0 [ 229.198677][ T6981] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 229.205082][ T6981] ? ns_capable+0xd7/0x110 [ 229.209908][ T6981] genl_rcv_msg+0x565/0x800 [ 229.214621][ T6981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.219882][ T6981] ? __pfx___lock_acquire+0x10/0x10 [ 229.225244][ T6981] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 229.230855][ T6981] ? __pfx_nl80211_new_station+0x10/0x10 [ 229.236813][ T6981] ? __pfx_nl80211_post_doit+0x10/0x10 [ 229.243483][ T6981] netlink_rcv_skb+0x16b/0x440 [ 229.248481][ T6981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.253895][ T6981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.261878][ T6981] ? down_read+0xc9/0x330 [ 229.266368][ T6981] ? __pfx_down_read+0x10/0x10 [ 229.271382][ T6981] ? netlink_deliver_tap+0x1ae/0xd90 [ 229.276885][ T6981] genl_rcv+0x28/0x40 [ 229.282326][ T6981] netlink_unicast+0x544/0x830 [ 229.287253][ T6981] ? __pfx_netlink_unicast+0x10/0x10 [ 229.292872][ T6981] netlink_sendmsg+0x8b8/0xd70 [ 229.298057][ T6981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.303732][ T6981] ? __import_iovec+0x1fd/0x6e0 [ 229.308798][ T6981] ____sys_sendmsg+0xab5/0xc90 [ 229.313898][ T6981] ? copy_msghdr_from_user+0x10b/0x160 [ 229.319881][ T6981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.326270][ T6981] ? __pfx___futex_wait+0x10/0x10 [ 229.331675][ T6981] ? __pfx___lock_acquire+0x10/0x10 [ 229.337210][ T6981] ___sys_sendmsg+0x135/0x1e0 [ 229.343898][ T6981] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.349901][ T6981] ? __fget_light+0x173/0x210 [ 229.354756][ T6981] __sys_sendmsg+0x117/0x1f0 [ 229.359643][ T6981] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.365052][ T6981] ? __x64_sys_futex+0x1e1/0x4c0 [ 229.370275][ T6981] do_syscall_64+0xcd/0x250 [ 229.374987][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.381660][ T6981] RIP: 0033:0x7f93b7d77299 [ 229.386837][ T6981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.406813][ T6981] RSP: 002b:00007f93b8aef048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.415878][ T6981] RAX: ffffffffffffffda RBX: 00007f93b7f06058 RCX: 00007f93b7d77299 [ 229.425885][ T6981] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 229.434098][ T6981] RBP: 00007f93b7de48e6 R08: 0000000000000000 R09: 0000000000000000 [ 229.445881][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.456867][ T6981] R13: 000000000000006e R14: 00007f93b7f06058 R15: 00007ffe40894f18 [ 229.468992][ T6981] [ 229.472087][ T6981] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 229.479554][ T6981] CPU: 1 UID: 0 PID: 6981 Comm: syz.2.509 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 229.490180][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 229.500429][ T6981] Call Trace: [ 229.503724][ T6981] [ 229.506669][ T6981] dump_stack_lvl+0x3d/0x1f0 [ 229.511392][ T6981] panic+0x6f5/0x7a0 [ 229.515314][ T6981] ? __pfx_panic+0x10/0x10 [ 229.519757][ T6981] ? show_trace_log_lvl+0x363/0x500 [ 229.525001][ T6981] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 229.531807][ T6981] check_panic_on_warn+0xab/0xb0 [ 229.536778][ T6981] __warn+0xf1/0x3c0 [ 229.540702][ T6981] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 229.547509][ T6981] report_bug+0x3c0/0x580 [ 229.551878][ T6981] handle_bug+0x3d/0x70 [ 229.556064][ T6981] exc_invalid_op+0x17/0x50 [ 229.560769][ T6981] asm_exc_invalid_op+0x1a/0x20 [ 229.565651][ T6981] RIP: 0010:minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 229.573068][ T6981] Code: 03 0f 8e 49 07 00 00 44 89 f6 89 df 45 8b 6c 24 10 e8 6a b1 e8 f6 44 39 f3 0f 8c dc f3 ff ff 4c 8b 64 24 10 e8 17 b7 e8 f6 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 38 48 c1 ea 03 [ 229.592795][ T6981] RSP: 0018:ffffc9000391f1b0 EFLAGS: 00010287 [ 229.598892][ T6981] RAX: 000000000000503a RBX: 000000000000000c RCX: ffffc9000ab0f000 [ 229.606882][ T6981] RDX: 0000000000040000 RSI: ffffffff8aa1c419 RDI: 0000000000000004 [ 229.614872][ T6981] RBP: dffffc0000000000 R08: 0000000000000004 R09: 000000000000000c [ 229.622950][ T6981] R10: 000000000000000c R11: 0000000000000000 R12: ffff88807b3a5c38 [ 229.630942][ T6981] R13: 0000000000000000 R14: 000000000000000c R15: ffffed100f67461c [ 229.639046][ T6981] ? minstrel_ht_update_caps.constprop.0+0xff9/0x1a90 [ 229.645859][ T6981] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 229.651270][ T6981] rate_control_rate_init+0x2fa/0x690 [ 229.656671][ T6981] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 229.662945][ T6981] sta_apply_parameters+0xb6e/0x1740 [ 229.668263][ T6981] ieee80211_add_station+0x3fa/0x6c0 [ 229.673585][ T6981] nl80211_new_station+0x146d/0x1bf0 [ 229.678912][ T6981] ? __rtnl_unlock+0x68/0xf0 [ 229.683532][ T6981] ? __pfx_nl80211_new_station+0x10/0x10 [ 229.689209][ T6981] ? ref_tracker_alloc+0x2ef/0x5b0 [ 229.694474][ T6981] ? nl80211_pre_doit+0x1b0/0xb10 [ 229.699539][ T6981] genl_family_rcv_msg_doit+0x202/0x2f0 [ 229.705123][ T6981] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 229.711226][ T6981] ? ns_capable+0xd7/0x110 [ 229.715687][ T6981] genl_rcv_msg+0x565/0x800 [ 229.720237][ T6981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.725462][ T6981] ? __pfx___lock_acquire+0x10/0x10 [ 229.730702][ T6981] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 229.736105][ T6981] ? __pfx_nl80211_new_station+0x10/0x10 [ 229.741773][ T6981] ? __pfx_nl80211_post_doit+0x10/0x10 [ 229.747275][ T6981] netlink_rcv_skb+0x16b/0x440 [ 229.752067][ T6981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.757123][ T6981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.762438][ T6981] ? down_read+0xc9/0x330 [ 229.766795][ T6981] ? __pfx_down_read+0x10/0x10 [ 229.771593][ T6981] ? netlink_deliver_tap+0x1ae/0xd90 [ 229.776920][ T6981] genl_rcv+0x28/0x40 [ 229.780932][ T6981] netlink_unicast+0x544/0x830 [ 229.785726][ T6981] ? __pfx_netlink_unicast+0x10/0x10 [ 229.791213][ T6981] netlink_sendmsg+0x8b8/0xd70 [ 229.796011][ T6981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.801326][ T6981] ? __import_iovec+0x1fd/0x6e0 [ 229.806222][ T6981] ____sys_sendmsg+0xab5/0xc90 [ 229.811102][ T6981] ? copy_msghdr_from_user+0x10b/0x160 [ 229.816598][ T6981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.821914][ T6981] ? __pfx___futex_wait+0x10/0x10 [ 229.826974][ T6981] ? __pfx___lock_acquire+0x10/0x10 [ 229.832303][ T6981] ___sys_sendmsg+0x135/0x1e0 [ 229.837108][ T6981] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.842351][ T6981] ? __fget_light+0x173/0x210 [ 229.847073][ T6981] __sys_sendmsg+0x117/0x1f0 [ 229.851790][ T6981] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.856945][ T6981] ? __x64_sys_futex+0x1e1/0x4c0 [ 229.862003][ T6981] do_syscall_64+0xcd/0x250 [ 229.866535][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.872465][ T6981] RIP: 0033:0x7f93b7d77299 [ 229.876899][ T6981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.896640][ T6981] RSP: 002b:00007f93b8aef048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.905089][ T6981] RAX: ffffffffffffffda RBX: 00007f93b7f06058 RCX: 00007f93b7d77299 [ 229.913085][ T6981] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 229.921081][ T6981] RBP: 00007f93b7de48e6 R08: 0000000000000000 R09: 0000000000000000 [ 229.929075][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.937069][ T6981] R13: 000000000000006e R14: 00007f93b7f06058 R15: 00007ffe40894f18 [ 229.945153][ T6981] [ 229.948300][ T6981] Kernel Offset: disabled [ 229.952742][ T6981] Rebooting in 86400 seconds..