last executing test programs: 10.679448151s ago: executing program 0 (id=3858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffe6000000000000000000000000000000007b352f5d4d8c2e78105c516c59a260f6cdd46c7ad8f88c565a57bc32c8d551f68b11b0bd29d0ba97771f8b804964d9dbba329b06ad84266017abe665e9a28f7d76bef05dbfa8341c0b3d759b773e13da7dd4cdbf54f7a49092a5df31a73687725c06d45543f145977f7837c6d6653459fc6a69e0283a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000900000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0xe5c, 0x80000) r5 = eventfd2(0x4001, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r10, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x7, 0x2, r5}) r11 = eventfd2(0x8, 0x80001) r12 = eventfd2(0x6, 0x80800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r12, 0x7, 0x2, r11}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 9.183844278s ago: executing program 0 (id=3860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x515041, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r5, &(0x7f0000004dc0)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, 0x0, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000040)={0x0, 0xffffff8d, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140a, 0xd01, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x3}, @sco={0x1f, @none}, @llc={0x1a, 0x205, 0x1, 0x2, 0x1, 0x9, @local}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x8000}) dup3(r1, 0xffffffffffffffff, 0x80000) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 7.523957396s ago: executing program 0 (id=3868): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fe800000000000000000000000000029fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000422020000c0a5c0faf5258e0d9aee55dcd54985679e3c562cdd563aa5997a30b5786c030d827897d39a272a55db5735198da27b4c76ef2da44000fa92d855304ff69619efc1c9b93d358377b75ea12cd6e72747771267aa558f6b974ca460c4ef3c19c492a2e2b43ad1321da6d8d1366b8de3763a463c557c1451c0a87de7eca6af6457bdba7abd5fd34c7b6dba914137b7a3bccf0a2c"], 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x4, 0x8, 0xfff8, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x4, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) 7.447899388s ago: executing program 4 (id=3870): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 6.063711563s ago: executing program 0 (id=3875): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x7fff, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) 5.657105469s ago: executing program 4 (id=3879): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x4f07, 0x7, 0x1, 0x16, 0x5, 0x5, 0xb, 0x3, 0xa, 0x2, 0x5, 0x1, 0x1, 0x1, 0x8, 0x7, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xca9f, 0x3, 0x20001e58, 0x249, 0x400e66, 0x3, 0x995d000, 0xc, 0x0, 0xffffff53]}) 5.33175601s ago: executing program 2 (id=3880): syz_io_uring_setup(0x1cc6, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x1, 0xffffffff}, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.434162556s ago: executing program 4 (id=3882): 4.396502263s ago: executing program 1 (id=3883): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, 0x0, 0x0) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) 4.395717087s ago: executing program 2 (id=3884): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_msg}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 3.671865799s ago: executing program 4 (id=3885): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x5, 0x0, 0x0) 3.396874675s ago: executing program 2 (id=3886): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfffffffffffffff4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48884}, 0x4090) 3.248016169s ago: executing program 1 (id=3887): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64]) 3.168236615s ago: executing program 2 (id=3888): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) tkill(0x0, 0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 3.165956669s ago: executing program 0 (id=3889): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x6, &(0x7f00000001c0)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 2.843794989s ago: executing program 4 (id=3890): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') getdents(0xffffffffffffffff, 0x0, 0x0) 2.831541753s ago: executing program 1 (id=3891): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000010801"], 0x14}}, 0x40) 2.823976768s ago: executing program 4 (id=3892): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) 2.743963991s ago: executing program 2 (id=3893): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2.667866197s ago: executing program 1 (id=3894): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 2.66761963s ago: executing program 2 (id=3895): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) 2.376663359s ago: executing program 1 (id=3896): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 1.322928502s ago: executing program 1 (id=3899): flock(0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.241717561s ago: executing program 0 (id=3900): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000b00)={0x34, &(0x7f0000000980)={0x20, 0x31, 0x1, "fd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 562.956192ms ago: executing program 3 (id=3905): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 507.300485ms ago: executing program 3 (id=3906): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="1400010014400000000000000000000000000000140002"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 303.61845ms ago: executing program 3 (id=3907): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0x10c6, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) 303.308914ms ago: executing program 3 (id=3908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000024d564b"]) 173.896028ms ago: executing program 3 (id=3909): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=3910): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x6, &(0x7f00000001c0)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) kernel console output (not intermixed with test programs): NKNOWN> HID v0.00 Device [syz1] on syz0 [ 768.083825][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'. [ 768.092721][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 772.974008][T13661] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 772.982924][T13661] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 774.710475][ T30] audit: type=1400 audit(1760655492.534:350): avc: denied { block_suspend } for pid=13666 comm="syz.1.2107" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 777.060296][T13710] overlayfs: missing 'lowerdir' [ 784.112320][T13798] No such timeout policy "syz0" [ 785.557228][T13810] gfs2: error -5 reading superblock [ 788.608214][T13844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2152'. [ 788.650813][T13844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2152'. [ 793.332308][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2165'. [ 798.214004][T13977] gfs2: error -5 reading superblock [ 805.330452][T14067] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 806.633484][T14083] gfs2: error -5 reading superblock [ 807.213762][ T5925] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 807.383538][T14096] gfs2: error -5 reading superblock [ 807.567927][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.583077][ T5925] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 807.593161][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.618494][ T5925] usb 3-1: config 0 descriptor?? [ 807.627316][ T5925] pwc: Askey VC010 type 2 USB webcam detected. [ 808.174807][ T5925] pwc: recv_control_msg error -32 req 02 val 2b00 [ 808.310945][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.338650][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.360140][T14109] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 808.366893][T14109] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 808.380611][T14085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2222'. [ 808.399200][T14109] vhci_hcd vhci_hcd.0: Device attached [ 808.601804][ T5925] pwc: recv_control_msg error -71 req 02 val 2700 [ 808.624095][ T5925] pwc: recv_control_msg error -71 req 02 val 2c00 [ 808.624269][ T5930] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 808.630888][ T5925] pwc: recv_control_msg error -71 req 04 val 1000 [ 808.654092][ T5925] pwc: recv_control_msg error -71 req 04 val 1300 [ 808.660987][ T5925] pwc: recv_control_msg error -71 req 04 val 1400 [ 808.680058][ T5925] pwc: recv_control_msg error -71 req 02 val 2000 [ 808.697769][ T5925] pwc: recv_control_msg error -71 req 02 val 2100 [ 808.713540][ T5887] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 808.714547][ T5925] pwc: recv_control_msg error -71 req 04 val 1500 [ 808.746156][ T5925] pwc: recv_control_msg error -71 req 02 val 2500 [ 808.756667][ T5925] pwc: recv_control_msg error -71 req 02 val 2400 [ 808.770949][ T5925] pwc: recv_control_msg error -71 req 02 val 2600 [ 808.785998][ T5925] pwc: recv_control_msg error -71 req 02 val 2900 [ 808.803690][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 808.809699][ T5925] pwc: recv_control_msg error -71 req 02 val 2800 [ 808.817487][ T5930] usb 4-1: config 0 has no interfaces? [ 808.833395][ T5925] pwc: recv_control_msg error -71 req 04 val 1100 [ 808.833721][ T5930] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 808.851828][ T5925] pwc: recv_control_msg error -71 req 04 val 1200 [ 808.866332][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.881061][ T5925] pwc: Registered as video103. [ 808.892020][ T5930] usb 4-1: config 0 descriptor?? [ 808.896680][ T5925] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 808.948550][ T5925] usb 3-1: USB disconnect, device number 9 [ 810.083986][ T5930] usb 4-1: USB disconnect, device number 7 [ 810.108071][T14114] vhci_hcd: connection reset by peer [ 810.125508][ T6012] vhci_hcd: stop threads [ 810.130374][ T6012] vhci_hcd: release socket [ 810.165973][ T6012] vhci_hcd: disconnect device [ 810.902795][T14148] tipc: Resetting bearer [ 811.032425][T14148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 812.046933][ T30] audit: type=1400 audit(1760655529.724:351): avc: denied { create } for pid=14166 comm="syz.3.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 812.563701][ T30] audit: type=1400 audit(1760655529.834:352): avc: denied { getopt } for pid=14166 comm="syz.3.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 812.591001][ T30] audit: type=1400 audit(1760655529.994:353): avc: denied { write } for pid=14166 comm="syz.3.2245" path="socket:[49242]" dev="sockfs" ino=49242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 812.615581][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.823578][ T5887] vhci_hcd: vhci_device speed not set [ 814.538435][T14197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 815.090154][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 816.930439][T14226] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 816.942262][T14226] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 819.819809][T14250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 832.238934][T14413] fuse: Unknown parameter 'fd0x000000000000000700000000000000000000' [ 833.633263][T14423] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 833.644978][T14423] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 834.292099][T14437] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2321'. [ 834.814816][T14440] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 835.576908][T14455] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2328'. [ 836.666280][T14460] No such timeout policy "syz0" [ 836.798988][T14467] qrtr: Invalid version 0 [ 840.413965][ T30] audit: type=1400 audit(1760655558.234:354): avc: denied { open } for pid=14500 comm="syz.4.2340" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 840.463111][ T30] audit: type=1400 audit(1760655558.284:355): avc: denied { mount } for pid=14500 comm="syz.4.2340" name="/" dev="autofs" ino=51259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 840.585691][ T30] audit: type=1400 audit(1760655558.414:356): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 840.754342][T14506] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 840.765886][T14506] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 841.901978][T14518] gfs2: error -5 reading superblock [ 842.889188][T14537] evm: overlay not supported [ 843.200302][T14538] No such timeout policy "syz0" [ 844.424551][T14550] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 847.040085][T14580] gfs2: error -5 reading superblock [ 848.783028][T14619] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2369'. [ 849.428503][ T30] audit: type=1400 audit(1760655567.254:357): avc: denied { create } for pid=14628 comm="syz.0.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 849.456171][T14629] netlink: 'syz.0.2372': attribute type 25 has an invalid length. [ 855.200460][T14707] gfs2: error -5 reading superblock [ 855.530759][T14712] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 855.984681][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 858.474947][T14754] gfs2: error -5 reading superblock [ 858.862551][T14759] fuse: Bad value for 'fd' [ 861.163980][T14788] gfs2: error -5 reading superblock [ 862.512791][T14807] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 865.482962][T14851] gfs2: error -5 reading superblock [ 866.129817][T14856] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 867.708456][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2443'. [ 868.233929][ T5926] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 868.509931][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.520791][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 868.532252][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 868.545514][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 868.570112][ T5926] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 868.580490][ T5926] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 868.589484][ T5926] usb 1-1: Manufacturer: syz [ 868.597055][ T5926] usb 1-1: config 0 descriptor?? [ 868.883682][ T5926] rc_core: IR keymap rc-hauppauge not found [ 868.891027][ T5926] Registered IR keymap rc-empty [ 868.911262][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 868.955236][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 868.994604][ T5926] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 869.500965][ T5926] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input59 [ 869.534116][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 869.565162][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 869.874570][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.880874][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.913996][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 869.963191][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 869.994162][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 870.024142][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 870.049852][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 870.103769][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 870.134539][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 870.261501][T14912] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 871.000874][ T5926] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 871.067065][ T5926] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 871.080812][ T5926] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 871.096545][ T5926] usb 1-1: USB disconnect, device number 9 [ 872.930573][T14935] fuse: Bad value for 'fd' [ 873.822955][ T30] audit: type=1400 audit(1760655591.644:358): avc: denied { write } for pid=14948 comm="syz.0.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 875.548545][T14980] fuse: Bad value for 'fd' [ 881.430967][T15063] qrtr: Invalid version 0 [ 883.090080][T15086] gfs2: error -5 reading superblock [ 885.850845][T15115] No such timeout policy "syz0" [ 889.386207][T15148] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 889.517584][T15159] gfs2: error -5 reading superblock [ 891.443839][T15189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2526'. [ 892.591422][T15206] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 898.511306][T15263] No such timeout policy "syz0" [ 898.833536][ T9981] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 899.047941][ T9981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 899.079031][ T9981] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 899.107589][ T9981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.172305][ T9981] usb 3-1: config 0 descriptor?? [ 899.517044][ T30] audit: type=1400 audit(1760655617.344:359): avc: denied { read } for pid=15266 comm="syz.2.2549" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 899.643379][T15277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.653772][T15277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.855868][ T30] audit: type=1400 audit(1760655617.344:360): avc: denied { open } for pid=15266 comm="syz.2.2549" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 899.930225][ T30] audit: type=1400 audit(1760655617.424:361): avc: denied { ioctl } for pid=15266 comm="syz.2.2549" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 900.137841][ T30] audit: type=1400 audit(1760655617.434:362): avc: denied { ioctl } for pid=15266 comm="syz.2.2549" path="socket:[55835]" dev="sockfs" ino=55835 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 900.169288][ T9981] usbhid 3-1:0.0: can't add hid device: -71 [ 900.594674][ T9981] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 900.870992][ T9981] usb 3-1: USB disconnect, device number 10 [ 903.625922][ T5926] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 903.832202][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.855883][ T5926] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 903.873317][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.941743][ T5926] usb 3-1: config 0 descriptor?? [ 903.973999][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 904.659386][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'. [ 904.671645][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00 [ 904.782322][T15339] No such timeout policy "syz0" [ 905.258722][ T5926] pwc: recv_control_msg error -71 req 02 val 2700 [ 905.282435][ T5926] pwc: recv_control_msg error -71 req 02 val 2c00 [ 905.294565][ T5926] pwc: recv_control_msg error -71 req 04 val 1000 [ 905.301364][ T5926] pwc: recv_control_msg error -71 req 04 val 1300 [ 905.377604][ T5926] pwc: recv_control_msg error -71 req 04 val 1400 [ 905.444929][ T5926] pwc: recv_control_msg error -71 req 02 val 2000 [ 905.453507][ T5926] pwc: recv_control_msg error -71 req 02 val 2100 [ 905.478566][ T5926] pwc: recv_control_msg error -71 req 04 val 1500 [ 905.488146][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 905.495320][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 905.505601][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 905.513635][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 905.523673][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 905.555370][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 905.567472][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 905.619750][T15347] gfs2: error -5 reading superblock [ 905.680796][ T5926] pwc: Registered as video103. [ 905.718683][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input60 [ 905.757829][ T5926] usb 3-1: USB disconnect, device number 11 [ 906.230338][T15357] gfs2: error -5 reading superblock [ 906.840099][T15363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2577'. [ 907.010548][T15363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2577'. [ 908.091639][T15377] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 915.488714][T15460] fuse: Bad value for 'fd' [ 917.750603][ T30] audit: type=1400 audit(1760655635.564:363): avc: denied { accept } for pid=15486 comm="syz.4.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 919.323026][T15515] fuse: Bad value for 'fd' [ 920.607610][T15530] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 921.601755][T15543] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 922.064237][T15554] No such timeout policy "syz0" [ 924.695113][T15575] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 926.555562][T15595] tipc: Resetting bearer [ 926.571512][T15595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 929.116813][T15629] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 930.328733][T15653] tipc: Resetting bearer [ 930.334836][T15653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 931.191015][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.197589][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.263105][T15680] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 936.331707][T15710] gfs2: error -5 reading superblock [ 936.970691][T15712] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 940.645415][T15759] gfs2: error -5 reading superblock [ 940.686737][ T30] audit: type=1400 audit(1760655658.514:364): avc: denied { bind } for pid=15760 comm="syz.2.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 940.762277][T15761] lo speed is unknown, defaulting to 1000 [ 941.430980][T11745] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 941.605012][T11745] usb 3-1: config 0 has no interfaces? [ 941.612965][T11745] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 941.627308][T11745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.647744][T11745] usb 3-1: Product: syz [ 941.652979][T11745] usb 3-1: Manufacturer: syz [ 941.658270][T11745] usb 3-1: SerialNumber: syz [ 941.665366][T11745] usb 3-1: config 0 descriptor?? [ 942.194019][T15779] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 942.366181][T15761] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 944.078311][ T5887] usb 3-1: USB disconnect, device number 12 [ 944.380144][T15806] gfs2: error -5 reading superblock [ 944.424796][T15808] gfs2: error -5 reading superblock [ 944.865741][T15815] lo speed is unknown, defaulting to 1000 [ 945.126745][ T5925] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 945.565946][ T5925] usb 4-1: config 0 has no interfaces? [ 946.645444][ T5925] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 946.680199][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.755294][ T5925] usb 4-1: Product: syz [ 946.782091][ T5925] usb 4-1: Manufacturer: syz [ 946.795086][ T5925] usb 4-1: SerialNumber: syz [ 947.104951][ T5925] usb 4-1: config 0 descriptor?? [ 947.558602][T15815] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.596348][T15815] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 947.685000][T15852] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 947.822146][T15852] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 947.842442][ T5925] usb 4-1: USB disconnect, device number 8 [ 948.909772][T15866] lo speed is unknown, defaulting to 1000 [ 949.263611][ T5925] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 949.333046][T12058] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 949.982598][ T5925] usb 2-1: config 0 has no interfaces? [ 950.005000][ T5925] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 950.015023][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.023097][ T5925] usb 2-1: Product: syz [ 950.028024][ T5925] usb 2-1: Manufacturer: syz [ 950.032699][ T5925] usb 2-1: SerialNumber: syz [ 950.144555][ T5925] usb 2-1: config 0 descriptor?? [ 952.310603][ T5887] usb 2-1: USB disconnect, device number 12 [ 953.185052][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2727'. [ 953.204537][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2727'. [ 956.425773][T15975] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 959.765203][T16018] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 961.755335][ T9981] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 961.785703][ T9981] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 964.993855][T16078] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 966.135717][T16090] No control pipe specified [ 966.643330][T16102] gfs2: error -5 reading superblock [ 966.750914][T16105] overlayfs: missing 'lowerdir' [ 969.644724][T16139] No control pipe specified [ 971.620626][T16157] overlayfs: missing 'lowerdir' [ 975.092123][T16194] overlayfs: missing 'lowerdir' [ 975.172002][T16191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2795'. [ 976.138415][T16210] overlayfs: missing 'lowerdir' [ 978.311813][T16231] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 978.383130][T16231] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 981.061615][T16258] overlayfs: missing 'lowerdir' [ 981.658427][T16263] lo speed is unknown, defaulting to 1000 [ 981.743625][ T9981] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 981.981535][ T9981] usb 1-1: config 0 has no interfaces? [ 982.070024][ T9981] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 982.096800][ T30] audit: type=1400 audit(1760655699.884:365): avc: denied { accept } for pid=16269 comm="syz.4.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 982.185123][ T9981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.327327][ T9981] usb 1-1: Product: syz [ 982.415874][ T9981] usb 1-1: Manufacturer: syz [ 982.467487][ T9981] usb 1-1: SerialNumber: syz [ 982.552143][ T9981] usb 1-1: config 0 descriptor?? [ 984.263715][ T5887] usb 1-1: USB disconnect, device number 10 [ 984.650890][T16309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2828'. [ 984.669946][T16309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2828'. [ 987.540408][T16358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2842'. [ 987.715314][T16358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2842'. [ 988.055570][T16365] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 988.954896][T16379] netlink: 'syz.3.2844': attribute type 27 has an invalid length. [ 989.690698][T16381] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 989.921629][T16386] fuse: Bad value for 'fd' [ 990.874150][T16392] overlayfs: missing 'lowerdir' [ 991.219552][ T30] audit: type=1400 audit(1760655709.044:366): avc: denied { create } for pid=16395 comm="syz.0.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 991.256146][ T30] audit: type=1400 audit(1760655709.084:367): avc: denied { sys_admin } for pid=16395 comm="syz.0.2854" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 991.303870][ T30] audit: type=1400 audit(1760655709.114:368): avc: denied { remount } for pid=16395 comm="syz.0.2854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 991.414482][T16405] gfs2: error -5 reading superblock [ 992.002037][T16411] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 992.748082][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.755952][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.406904][T16429] fuse: Bad value for 'fd' [ 993.588760][T16436] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 993.846821][T16436] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 994.957436][T16462] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 995.015856][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'. [ 996.523829][T16480] fuse: Bad value for 'fd' [ 997.603080][T16485] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 997.614519][T16485] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 998.756555][T16501] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1001.823856][T11745] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1002.009982][T11745] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.240859][T11745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1002.254555][T11745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1002.270090][T11745] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1002.292670][T11745] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1002.391192][T11745] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1002.399581][T11745] usb 1-1: Manufacturer: syz [ 1002.407842][T11745] usb 1-1: config 0 descriptor?? [ 1002.833510][T11745] rc_core: IR keymap rc-hauppauge not found [ 1002.839474][T11745] Registered IR keymap rc-empty [ 1002.884832][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1002.914185][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1003.458686][T11745] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1003.476965][T11745] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input64 [ 1003.708727][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1003.733729][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1003.764856][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1003.805844][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1003.835089][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1003.875105][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1004.100896][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1004.404627][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1004.424491][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1004.547546][T11745] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1004.796263][T11745] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1004.811232][T11745] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1004.877162][T11745] usb 1-1: USB disconnect, device number 11 [ 1005.214743][T15860] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1005.879502][T16580] autofs: Unknown parameter '0x0000000000000000' [ 1008.123522][T11745] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1008.835290][T11745] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.871569][T11745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1008.929629][T11745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1008.968957][T11745] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1008.985393][T11745] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1008.995565][T11745] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1009.003867][T11745] usb 4-1: Manufacturer: syz [ 1009.249478][T11745] usb 4-1: config 0 descriptor?? [ 1010.133473][T11745] rc_core: IR keymap rc-hauppauge not found [ 1010.141610][T11745] Registered IR keymap rc-empty [ 1010.174841][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1010.233824][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1010.336536][T11745] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1010.401968][T11745] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input65 [ 1010.568312][T12058] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1010.586850][T12058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1010.595940][T12058] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1010.605218][T12058] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1010.833600][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1010.840498][T12058] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1010.875461][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1010.904059][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1010.915762][ T30] audit: type=1400 audit(1760655728.744:369): avc: denied { mounton } for pid=16630 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1010.940624][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1011.055262][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1011.084042][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1011.362296][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1011.404448][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1011.414110][T16630] lo speed is unknown, defaulting to 1000 [ 1011.433979][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1011.535031][T11745] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1011.583940][T11745] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1011.600126][T11745] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1011.667811][T11745] usb 4-1: USB disconnect, device number 9 [ 1013.011251][T12058] Bluetooth: hci1: command tx timeout [ 1013.268849][ T30] audit: type=1400 audit(1760655730.884:370): avc: denied { module_request } for pid=16630 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1013.512516][T16630] chnl_net:caif_netlink_parms(): no params data found [ 1014.048450][T16680] fuse: Bad value for 'fd' [ 1015.026440][T12058] Bluetooth: hci1: command tx timeout [ 1015.102352][T16630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.160484][T16630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.191533][T16630] bridge_slave_0: entered allmulticast mode [ 1015.251561][T16630] bridge_slave_0: entered promiscuous mode [ 1015.299010][T16630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.340922][T16630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.393736][T16630] bridge_slave_1: entered allmulticast mode [ 1015.419675][T16630] bridge_slave_1: entered promiscuous mode [ 1015.500720][T16704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1015.834891][T11007] bridge_slave_1: left allmulticast mode [ 1015.847339][T11007] bridge_slave_1: left promiscuous mode [ 1015.875165][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.005316][T11007] bridge_slave_0: left allmulticast mode [ 1016.013672][T11007] bridge_slave_0: left promiscuous mode [ 1016.019436][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.103888][T12058] Bluetooth: hci1: command tx timeout [ 1017.169231][ T5926] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1017.198953][ T5926] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1017.296683][T16735] fuse: Bad value for 'fd' [ 1017.862861][T11007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.966319][T11007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.016335][T11007] bond0 (unregistering): Released all slaves [ 1018.092673][T16630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.332946][T16630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.363797][T11007] tipc: Disabling bearer [ 1018.380916][T11007] tipc: Left network mode [ 1019.198924][T12058] Bluetooth: hci1: command tx timeout [ 1019.532286][T16630] team0: Port device team_slave_0 added [ 1020.696159][T16630] team0: Port device team_slave_1 added [ 1020.818834][T16759] gfs2: error -5 reading superblock [ 1021.691097][T16630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.699884][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.765701][T16630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.800444][T16630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.809189][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.836195][T16630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.923911][T16795] fuse: Bad value for 'fd' [ 1023.614342][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1023.619321][T16630] hsr_slave_0: entered promiscuous mode [ 1023.632376][T16630] hsr_slave_1: entered promiscuous mode [ 1023.643582][ T5926] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1023.648902][T16630] debugfs: 'hsr0' already exists in 'hsr' [ 1023.661236][T16630] Cannot create hsr debugfs directory [ 1026.287069][T16837] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1027.307965][T11007] hsr_slave_0: left promiscuous mode [ 1027.330881][T11007] hsr_slave_1: left promiscuous mode [ 1027.357465][T11007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.377793][T11007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.276125][T11007] team0 (unregistering): Port device team_slave_1 removed [ 1028.329341][T11007] team0 (unregistering): Port device team_slave_0 removed [ 1031.102204][ T30] audit: type=1400 audit(1760655748.884:371): avc: denied { map } for pid=16908 comm="syz.2.2978" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1031.219194][T16630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1031.556121][T16630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1031.636603][T16630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1031.691627][T16630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1032.571371][T16945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1032.583586][T16945] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1032.802757][T16630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.027160][T16630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.061846][T16630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1033.176491][T16956] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1033.443410][T16630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1033.457511][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.464741][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.479465][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.486701][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.600795][T16960] lo speed is unknown, defaulting to 1000 [ 1033.744164][ T49] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1034.317500][T16630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.517506][ T49] usb 3-1: config 0 has no interfaces? [ 1034.528062][ T49] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1034.549368][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.559865][ T49] usb 3-1: Product: syz [ 1034.569294][ T49] usb 3-1: Manufacturer: syz [ 1034.578646][ T49] usb 3-1: SerialNumber: syz [ 1034.598514][ T49] usb 3-1: config 0 descriptor?? [ 1034.615429][T16630] veth0_vlan: entered promiscuous mode [ 1034.630959][T16630] veth1_vlan: entered promiscuous mode [ 1034.820765][T16630] veth0_macvtap: entered promiscuous mode [ 1034.830784][T16630] veth1_macvtap: entered promiscuous mode [ 1034.850334][T16630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.319850][T16630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.357862][ T6013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.474478][ T6013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.578830][ T6013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.734252][ T6013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.533768][ T6013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.541912][ T6013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.581202][ T49] usb 3-1: USB disconnect, device number 13 [ 1037.592556][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.693016][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.176247][ T30] audit: type=1400 audit(1760655755.914:372): avc: denied { mount } for pid=16630 comm="syz-executor" name="/" dev="gadgetfs" ino=6974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1039.588039][T14817] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1039.856903][T14817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1039.998508][T14817] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1040.111018][T14817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.284251][T14817] usb 5-1: config 0 descriptor?? [ 1040.709492][T17052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.720842][T17052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.133877][T15860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1041.147026][T15860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1041.155881][T15860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1041.165898][T15860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1041.174187][T15860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1041.199402][T14817] usbhid 5-1:0.0: can't add hid device: -71 [ 1041.208284][T14817] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1041.225367][T14817] usb 5-1: USB disconnect, device number 9 [ 1041.463981][T17054] lo speed is unknown, defaulting to 1000 [ 1043.154328][T17083] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1043.273006][T15860] Bluetooth: hci3: command tx timeout [ 1043.407898][ T5887] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1043.419764][T17054] chnl_net:caif_netlink_parms(): no params data found [ 1043.575302][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1044.550735][ T5887] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1044.561597][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.582950][ T5887] usb 2-1: config 0 descriptor?? [ 1045.880139][T15860] Bluetooth: hci3: command tx timeout [ 1046.410104][T17111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.484301][T17111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.436250][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.453848][ T5887] usbhid 2-1:0.0: can't add hid device: -71 [ 1047.464271][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1047.486805][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.500003][ T5887] usb 2-1: USB disconnect, device number 13 [ 1047.511454][ T36] bond0 (unregistering): Released all slaves [ 1047.594854][ T36] : left promiscuous mode [ 1047.850744][ T36] tipc: Disabling bearer [ 1047.860808][ T36] tipc: Left network mode [ 1047.886558][T17054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.895029][T17054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.902215][T17054] bridge_slave_0: entered allmulticast mode [ 1047.903478][T15860] Bluetooth: hci3: command tx timeout [ 1047.909901][T17054] bridge_slave_0: entered promiscuous mode [ 1047.933145][T17054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.997862][T17054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.005383][T17054] bridge_slave_1: entered allmulticast mode [ 1048.012882][T17054] bridge_slave_1: entered promiscuous mode [ 1048.231210][T17054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.525957][T17054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.262673][T17054] team0: Port device team_slave_0 added [ 1049.281874][T17054] team0: Port device team_slave_1 added [ 1049.468402][T17054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.476952][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.819552][T17054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.975400][T17054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.982434][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.013402][T15860] Bluetooth: hci3: command tx timeout [ 1050.131525][T17054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.172229][ T36] hsr_slave_0: left promiscuous mode [ 1050.180596][ T36] hsr_slave_1: left promiscuous mode [ 1050.187342][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.780005][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.828558][ T30] audit: type=1400 audit(1760655769.654:373): avc: denied { create } for pid=17178 comm="syz.0.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1051.944708][ T30] audit: type=1400 audit(1760655769.764:374): avc: denied { write } for pid=17178 comm="syz.0.3028" path="socket:[69965]" dev="sockfs" ino=69965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1052.841759][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1052.951171][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1053.349461][ T5925] lo speed is unknown, defaulting to 1000 [ 1053.370380][ T5925] infiniband syz2: ib_query_port failed (-19) [ 1053.528071][T17054] hsr_slave_0: entered promiscuous mode [ 1053.544312][T17054] hsr_slave_1: entered promiscuous mode [ 1053.550519][T17054] debugfs: 'hsr0' already exists in 'hsr' [ 1053.564890][T17054] Cannot create hsr debugfs directory [ 1054.068038][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.075035][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.736785][T17054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1055.765133][T17054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1055.810034][T17054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1055.880595][T17054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1056.885353][T17054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.906657][T17054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.977577][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.984759][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.371852][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.379034][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.155094][T17054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.269904][T17054] veth0_vlan: entered promiscuous mode [ 1060.357473][T17054] veth1_vlan: entered promiscuous mode [ 1060.427526][T17054] veth0_macvtap: entered promiscuous mode [ 1060.437368][T17054] veth1_macvtap: entered promiscuous mode [ 1060.462139][T17054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.482447][T17054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.521591][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.531077][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.604064][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.630737][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.922944][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.937893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.653584][ T9723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.713744][ T9723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.868731][ T9981] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1062.133882][ T9981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1062.164401][ T9981] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1062.813326][ T9981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.837464][ T9981] usb 4-1: config 0 descriptor?? [ 1063.273509][T17342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.283777][T17342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.027554][ T9981] usbhid 4-1:0.0: can't add hid device: -71 [ 1064.033567][ T9981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1064.073091][ T9981] usb 4-1: USB disconnect, device number 10 [ 1065.649114][T12058] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1065.670540][T12058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1065.680581][T12058] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1065.690313][T12058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1065.700338][T12058] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1067.781828][T12058] Bluetooth: hci5: command tx timeout [ 1067.894330][T17391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1068.227671][T17366] chnl_net:caif_netlink_parms(): no params data found [ 1069.488862][T17366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.497683][T17366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.505606][T17366] bridge_slave_0: entered allmulticast mode [ 1069.512763][T17366] bridge_slave_0: entered promiscuous mode [ 1069.520852][T17366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.529347][T17366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.537476][T17366] bridge_slave_1: entered allmulticast mode [ 1069.824902][T12058] Bluetooth: hci5: command tx timeout [ 1070.028354][T17366] bridge_slave_1: entered promiscuous mode [ 1070.080300][T17366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.106180][T17366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.387380][T17366] team0: Port device team_slave_0 added [ 1070.493805][T17366] team0: Port device team_slave_1 added [ 1070.774754][T17366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.781725][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.845785][T17366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.862604][T17366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.870693][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.902247][T17366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.209513][T17366] hsr_slave_0: entered promiscuous mode [ 1071.216889][T17366] hsr_slave_1: entered promiscuous mode [ 1071.225952][T17366] debugfs: 'hsr0' already exists in 'hsr' [ 1071.232421][T17366] Cannot create hsr debugfs directory [ 1071.903625][T12058] Bluetooth: hci5: command tx timeout [ 1072.367492][T17441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1072.547203][T17442] netlink: 'syz.2.3077': attribute type 27 has an invalid length. [ 1073.994789][T12058] Bluetooth: hci5: command tx timeout [ 1074.509793][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.824237][T17472] netlink: 'syz.2.3084': attribute type 27 has an invalid length. [ 1074.831008][T17473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1074.867223][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.877521][ T6013] bond0 (unregistering): Released all slaves [ 1074.883134][T17479] netlink: 'syz.1.3086': attribute type 25 has an invalid length. [ 1074.997727][ T6013] tipc: Disabling bearer [ 1075.013053][ T6013] tipc: Left network mode [ 1077.119031][T17512] trusted_key: encrypted_key: keylen parameter is missing [ 1077.773745][ T5866] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1078.054747][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1078.073777][ T5866] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1078.085724][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.099442][ T5866] usb 3-1: config 0 descriptor?? [ 1079.409612][T17547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.422467][T17547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.063487][T17366] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1081.247947][ T5866] usbhid 3-1:0.0: can't add hid device: -71 [ 1081.747189][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1081.758281][ T5866] usb 3-1: USB disconnect, device number 14 [ 1081.923614][T17366] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1081.961019][T17366] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1081.970334][T17573] gfs2: error -5 reading superblock [ 1081.990440][T17366] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1082.738920][ T6013] hsr_slave_0: left promiscuous mode [ 1082.755101][ T6013] hsr_slave_1: left promiscuous mode [ 1082.769081][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.889942][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.069634][T17599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1084.378995][ T6013] team0 (unregistering): Port device team_slave_1 removed [ 1084.430795][ T6013] team0 (unregistering): Port device team_slave_0 removed [ 1084.629435][T17605] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1085.410484][T17610] fuse: Bad value for 'fd' [ 1086.427048][T17366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.443775][T17366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.455421][T15633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.462539][T15633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.627888][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.635368][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.628320][T17366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1088.510416][T17366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.891293][T17366] veth0_vlan: entered promiscuous mode [ 1088.908168][T17366] veth1_vlan: entered promiscuous mode [ 1089.012576][T17366] veth0_macvtap: entered promiscuous mode [ 1089.045352][T17366] veth1_macvtap: entered promiscuous mode [ 1089.120322][T17366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.257634][T17656] overlayfs: missing 'lowerdir' [ 1089.665660][T17366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.680516][ T6012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.722504][ T6012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.742827][ T6012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.763957][ T6012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.783774][ T9981] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1089.978007][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.297270][ T9981] usb 3-1: config 0 has no interfaces? [ 1090.935970][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.945974][ T9981] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1090.955788][ T9981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.963892][ T9981] usb 3-1: Product: syz [ 1090.968136][ T9981] usb 3-1: Manufacturer: syz [ 1090.972768][ T9981] usb 3-1: SerialNumber: syz [ 1090.980320][ T9981] usb 3-1: config 0 descriptor?? [ 1091.012648][T15633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.038515][T15633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.708966][T17683] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1092.865182][ T5887] usb 3-1: USB disconnect, device number 15 [ 1092.878475][T15860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1092.887801][T15860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1092.898117][T15860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1093.013671][T15860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1093.060033][T15860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1093.365415][T17697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1094.966638][ T6012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.048994][T17706] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1095.325807][T15860] Bluetooth: hci0: command tx timeout [ 1095.930801][ T6012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.767201][T17724] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3134'. [ 1096.840407][T17688] chnl_net:caif_netlink_parms(): no params data found [ 1097.263930][ T6012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.352352][T15860] Bluetooth: hci0: command tx timeout [ 1099.102653][ T6012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.513611][T15860] Bluetooth: hci0: command tx timeout [ 1099.884434][T17688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.892533][T17688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.900241][T17688] bridge_slave_0: entered allmulticast mode [ 1099.909418][T17688] bridge_slave_0: entered promiscuous mode [ 1099.934232][T17688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.953545][T17688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.960872][T17688] bridge_slave_1: entered allmulticast mode [ 1099.975218][T17688] bridge_slave_1: entered promiscuous mode [ 1100.388264][T17688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.488978][T17688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.787944][T17688] team0: Port device team_slave_0 added [ 1100.800317][T17688] team0: Port device team_slave_1 added [ 1100.871323][T15860] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1101.349801][T17688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.367977][T17688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.425465][T17688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.448450][T17688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.485973][T17688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.547586][T17688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.585197][T15860] Bluetooth: hci0: command tx timeout [ 1101.770375][T17769] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1102.327617][T17771] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1104.833813][ T6012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.875752][ T6012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.895519][ T6012] bond0 (unregistering): Released all slaves [ 1105.086247][T17688] hsr_slave_0: entered promiscuous mode [ 1105.093994][T17688] hsr_slave_1: entered promiscuous mode [ 1105.100179][T17688] debugfs: 'hsr0' already exists in 'hsr' [ 1105.106502][T17688] Cannot create hsr debugfs directory [ 1105.407369][ T6012] : left promiscuous mode [ 1105.743769][T15860] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1105.989735][ T6012] tipc: Disabling bearer [ 1106.002249][ T6012] tipc: Left network mode [ 1106.885890][T17834] usb usb8: usbfs: process 17834 (syz.3.3163) did not claim interface 0 before use [ 1108.495425][ T5887] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1109.693802][ T5887] usb 4-1: config 0 has no interfaces? [ 1109.702242][ T5887] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1109.717313][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.727584][ T5887] usb 4-1: Product: syz [ 1109.731788][ T5887] usb 4-1: Manufacturer: syz [ 1109.739492][ T5887] usb 4-1: SerialNumber: syz [ 1109.786471][ T5887] usb 4-1: config 0 descriptor?? [ 1109.865852][T17870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3172'. [ 1109.895024][T17870] bridge_slave_1: left allmulticast mode [ 1109.900920][T17870] bridge_slave_1: left promiscuous mode [ 1109.929125][T17870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.001460][T17870] bridge_slave_0: left allmulticast mode [ 1110.007856][T17870] bridge_slave_0: left promiscuous mode [ 1110.014396][T17870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.561456][ T6012] hsr_slave_0: left promiscuous mode [ 1110.649289][T17891] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1110.843476][ T6012] hsr_slave_1: left promiscuous mode [ 1110.861938][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.882800][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.969947][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.977442][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.014768][ T6012] veth1_macvtap: left promiscuous mode [ 1111.515750][ T6012] veth0_macvtap: left promiscuous mode [ 1111.521909][ T6012] veth1_vlan: left promiscuous mode [ 1111.606289][ T9981] usb 4-1: USB disconnect, device number 11 [ 1112.440614][ T30] audit: type=1400 audit(1760655830.264:375): avc: denied { ioctl } for pid=17920 comm="syz.3.3182" path="socket:[75101]" dev="sockfs" ino=75101 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1112.666040][T17925] usb usb8: usbfs: process 17925 (syz.0.3183) did not claim interface 0 before use [ 1114.807164][T17940] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1115.894205][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.900543][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.280867][ T6012] team0 (unregistering): Port device team_slave_1 removed [ 1116.358169][ T6012] team0 (unregistering): Port device team_slave_0 removed [ 1118.632797][T17688] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1118.680670][T17975] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3195'. [ 1119.052824][T17688] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1119.262407][T17688] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1119.760565][T17688] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1120.535096][T17688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.633484][ T5887] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1120.675008][T17688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.787407][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.794603][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.803996][T15860] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 1121.155355][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.185029][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.192224][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.202712][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1121.220096][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1121.416799][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1121.481681][ T5887] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1121.532508][ T5887] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1121.565756][ T5887] usb 2-1: Manufacturer: syz [ 1121.573712][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'. [ 1121.634834][ T5887] usb 2-1: config 0 descriptor?? [ 1121.681870][T18002] syz_tun: entered promiscuous mode [ 1122.007818][T18011] overlayfs: missing 'lowerdir' [ 1122.014405][ T5887] rc_core: IR keymap rc-hauppauge not found [ 1122.020338][ T5887] Registered IR keymap rc-empty [ 1122.038033][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1122.103507][T18012] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1122.395409][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1122.452216][T17688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.507078][ T5887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1122.550415][ T5887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input66 [ 1122.631331][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1122.663469][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1122.706289][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1122.725299][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1122.913931][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1122.934230][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1123.436127][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1123.463941][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1123.483660][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1123.513734][ T5887] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1123.548149][ T5887] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1123.608658][ T5887] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1123.625439][ T5887] usb 2-1: USB disconnect, device number 14 [ 1123.641661][T17688] veth0_vlan: entered promiscuous mode [ 1123.660499][T17688] veth1_vlan: entered promiscuous mode [ 1123.714236][T17688] veth0_macvtap: entered promiscuous mode [ 1123.748221][T17688] veth1_macvtap: entered promiscuous mode [ 1123.796986][T17688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.841274][T17688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.072499][T18035] overlayfs: missing 'lowerdir' [ 1124.079898][T18034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.096832][T18035] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1124.727616][ T9723] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.736431][ T9723] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.759106][ T9723] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.792225][ T9723] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.530144][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.566157][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.657986][ T9723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.670900][ T9723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.011447][T12058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1127.021493][T12058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1127.031748][T12058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1127.039840][T12058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1127.048023][T12058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1127.254083][ T49] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1128.854467][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1128.873552][ T49] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1128.882755][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.990808][ T49] usb 3-1: config 0 descriptor?? [ 1129.103817][T18086] Bluetooth: hci4: command tx timeout [ 1129.134682][T18083] chnl_net:caif_netlink_parms(): no params data found [ 1129.198263][T17594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.963256][ T49] usbhid 3-1:0.0: can't add hid device: -71 [ 1130.053572][ T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1130.065866][ T49] usb 3-1: USB disconnect, device number 16 [ 1130.368025][T18116] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1130.414071][T17594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.625279][T17594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.877123][T18083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.884475][T18083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.891654][T18083] bridge_slave_0: entered allmulticast mode [ 1130.905653][T18083] bridge_slave_0: entered promiscuous mode [ 1131.069584][T18083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.162435][T18083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.191336][T18083] bridge_slave_1: entered allmulticast mode [ 1131.191412][T18086] Bluetooth: hci4: command tx timeout [ 1131.194372][T18083] bridge_slave_1: entered promiscuous mode [ 1131.434551][T18083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.479701][T18083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.219687][T18083] team0: Port device team_slave_0 added [ 1132.270214][T18083] team0: Port device team_slave_1 added [ 1132.444018][T18148] usb usb8: usbfs: process 18148 (syz.4.3234) did not claim interface 0 before use [ 1133.129648][T18083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.150467][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.301029][T18086] Bluetooth: hci4: command tx timeout [ 1133.650782][T18083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.233933][T18083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.240915][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.513526][T18083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.385843][T18086] Bluetooth: hci4: command tx timeout [ 1136.664637][T17594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.692758][T17594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.712586][T17594] bond0 (unregistering): Released all slaves [ 1136.936630][T17594] tipc: Left network mode [ 1137.014067][T18083] hsr_slave_0: entered promiscuous mode [ 1137.022686][T18083] hsr_slave_1: entered promiscuous mode [ 1137.034145][T18083] debugfs: 'hsr0' already exists in 'hsr' [ 1137.050058][T18083] Cannot create hsr debugfs directory [ 1138.064061][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1138.232736][T18222] usb usb8: usbfs: process 18222 (syz.4.3250) did not claim interface 0 before use [ 1139.399252][ T30] audit: type=1400 audit(1760655857.224:376): avc: denied { setopt } for pid=18235 comm="syz.4.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1139.875512][T17594] hsr_slave_0: left promiscuous mode [ 1139.899353][T17594] hsr_slave_1: left promiscuous mode [ 1139.908112][T17594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1139.915904][T17594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1139.930176][T17594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1139.944728][T17594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.965584][T17594] veth1_macvtap: left promiscuous mode [ 1139.971173][T17594] veth0_macvtap: left promiscuous mode [ 1139.978923][T17594] veth1_vlan: left promiscuous mode [ 1140.795644][T17594] team0 (unregistering): Port device team_slave_1 removed [ 1140.844442][T17594] team0 (unregistering): Port device team_slave_0 removed [ 1142.087321][T18083] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1142.140531][T18083] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1142.157695][T18083] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1142.178713][T18083] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1142.435349][T18083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.467139][T18083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.594848][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.601989][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.686690][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.693869][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1143.102859][T18306] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3267'. [ 1143.598493][T18083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.378198][T18083] veth0_vlan: entered promiscuous mode [ 1145.175078][T18083] veth1_vlan: entered promiscuous mode [ 1145.214433][T18083] veth0_macvtap: entered promiscuous mode [ 1145.239947][T18083] veth1_macvtap: entered promiscuous mode [ 1145.266130][T18083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.349934][T18083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.365747][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.395673][T11745] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1145.405893][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.463512][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.495667][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.565910][T11745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1145.603176][T11745] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1145.653083][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.662032][T11745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.680800][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.694314][T11745] usb 1-1: config 0 descriptor?? [ 1145.996806][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.027056][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.325988][T18339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.333676][T18338] fuse: Bad value for 'fd' [ 1146.347892][T18339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.978952][T11745] usbhid 1-1:0.0: can't add hid device: -71 [ 1147.985037][T11745] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1147.994942][T11745] usb 1-1: USB disconnect, device number 12 [ 1148.432152][T18364] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3280'. [ 1156.029779][T18459] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1159.873727][T11745] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1160.092162][T11745] usb 2-1: config 0 has no interfaces? [ 1160.114876][T11745] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1160.167898][T11745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.256021][T11745] usb 2-1: Product: syz [ 1160.690918][T11745] usb 2-1: Manufacturer: syz [ 1160.704337][T11745] usb 2-1: SerialNumber: syz [ 1160.722597][T11745] usb 2-1: config 0 descriptor?? [ 1160.735187][T18503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1161.293888][ T5866] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1161.478810][T18492] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.525027][ T5866] usb 1-1: config 0 has no interfaces? [ 1161.532271][ T5866] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1161.545047][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.551693][T11745] usb 2-1: USB disconnect, device number 15 [ 1161.556026][ T5866] usb 1-1: Product: syz [ 1161.568642][ T5866] usb 1-1: Manufacturer: syz [ 1161.574490][ T5866] usb 1-1: SerialNumber: syz [ 1161.589794][ T5866] usb 1-1: config 0 descriptor?? [ 1163.037879][T18533] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1163.502862][T18507] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.055908][T18086] Bluetooth: hci3: command 0x0406 tx timeout [ 1165.442363][ T9981] usb 1-1: USB disconnect, device number 13 [ 1166.152511][T18580] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3333'. [ 1166.856778][T18594] netlink: 'syz.3.3339': attribute type 27 has an invalid length. [ 1170.367621][T18642] usb usb8: usbfs: process 18642 (syz.1.3351) did not claim interface 0 before use [ 1171.144171][T18648] netlink: 'syz.2.3352': attribute type 27 has an invalid length. [ 1172.041952][T18658] netlink: 'syz.2.3355': attribute type 25 has an invalid length. [ 1172.498602][T18668] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1176.951411][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.958146][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.092336][T18730] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1179.942904][T18763] usb usb8: usbfs: process 18763 (syz.1.3383) did not claim interface 0 before use [ 1181.950985][T18775] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1183.121153][T18785] 9pnet_virtio: no channels available for device syz [ 1186.783510][T18811] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1189.584397][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 1192.131721][ T30] audit: type=1400 audit(1760655909.904:377): avc: denied { setopt } for pid=18866 comm="syz.0.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1192.353245][T18086] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1193.714468][T18900] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1198.573612][ T30] audit: type=1400 audit(1760655916.274:378): avc: denied { setopt } for pid=18958 comm="syz.0.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1198.700482][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c1ae000: rx timeout, send abort [ 1198.738548][ T30] audit: type=1400 audit(1760655916.554:379): avc: denied { read } for pid=5164 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1198.943530][ T30] audit: type=1400 audit(1760655916.554:380): avc: denied { search } for pid=5164 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1199.003401][ T30] audit: type=1400 audit(1760655916.554:381): avc: denied { search } for pid=5164 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1199.090067][ T30] audit: type=1400 audit(1760655916.554:382): avc: denied { add_name } for pid=5164 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1199.183378][ T30] audit: type=1400 audit(1760655916.564:383): avc: denied { create } for pid=5164 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1199.204277][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055971000: rx timeout, send abort [ 1199.212498][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c1ae000: abort rx timeout. Force session deactivation [ 1199.233483][ T30] audit: type=1400 audit(1760655916.564:384): avc: denied { append open } for pid=5164 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1199.271468][ T30] audit: type=1400 audit(1760655916.564:385): avc: denied { getattr } for pid=5164 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1199.603077][ T30] audit: type=1400 audit(1760655917.424:386): avc: denied { write } for pid=18971 comm="syz.0.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1199.704336][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055971000: abort rx timeout. Force session deactivation [ 1199.863441][T11745] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1200.113349][T11745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1200.225485][T11745] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1200.267332][T11745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.298347][T11745] usb 2-1: config 0 descriptor?? [ 1201.546066][T19003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.559281][T19003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.607917][T11745] usbhid 2-1:0.0: can't add hid device: -71 [ 1202.613963][T11745] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1202.629315][T11745] usb 2-1: USB disconnect, device number 16 [ 1205.354721][T19030] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3455'. [ 1205.793348][T19043] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1211.238291][T19098] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1214.583861][T19139] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3486'. [ 1214.840778][T18086] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1214.946338][T19150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1219.998042][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1220.253401][ T9981] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1221.303503][ T9981] usb 1-1: Using ep0 maxpacket: 32 [ 1221.324162][ T9981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.335226][ T9981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.359567][ T9981] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1221.403877][ T9981] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1222.061754][ T9981] usb 1-1: Manufacturer: syz [ 1222.249068][ T9981] usb 1-1: config 0 descriptor?? [ 1222.665429][T19220] 9pnet_virtio: no channels available for device syz [ 1223.573652][ T9981] ft260 0003:0403:6030.0015: unknown main item tag 0x7 [ 1224.026353][ T9981] ft260 0003:0403:6030.0015: chip code: 6424 8183 [ 1224.037435][ T9981] ft260 0003:0403:6030.0015: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1224.374493][ T9981] ft260 0003:0403:6030.0015: failed to retrieve status: -71, no wakeup [ 1224.389421][ T9981] ft260 0003:0403:6030.0015: failed to retrieve status: -71 [ 1224.397534][ T9981] ft260 0003:0403:6030.0015: failed to reset I2C controller: -71 [ 1224.456604][ T9981] usb 1-1: USB disconnect, device number 14 [ 1226.213536][ T49] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1227.161544][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1227.244783][ T49] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1227.317604][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.472474][ T49] usb 1-1: config 0 descriptor?? [ 1228.378291][T19267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1228.840294][T19270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.852521][T19270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.031793][ T52] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1229.234144][ T49] usbhid 1-1:0.0: can't add hid device: -71 [ 1229.240160][ T49] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1229.274187][ T49] usb 1-1: USB disconnect, device number 15 [ 1231.886209][T19316] netlink: 'syz.4.3539': attribute type 25 has an invalid length. [ 1232.136388][T19320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1236.578961][ T30] audit: type=1326 audit(1760655954.404:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.0.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b478eec9 code=0x7ffc0000 [ 1236.602686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.677510][ T30] audit: type=1326 audit(1760655954.404:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.0.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b478eec9 code=0x7ffc0000 [ 1236.700978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.073541][ T30] audit: type=1326 audit(1760655954.404:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.0.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47b478eec9 code=0x7ffc0000 [ 1237.245778][ T30] audit: type=1326 audit(1760655954.404:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.0.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b478eec9 code=0x7ffc0000 [ 1237.269180][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.298432][ T30] audit: type=1326 audit(1760655954.444:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.0.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f47b478eec9 code=0x7ffc0000 [ 1237.347536][ T30] audit: type=1326 audit(1760655954.444:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.0.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b478eec9 code=0x7ffc0000 [ 1237.370924][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.388351][ T30] audit: type=1326 audit(1760655954.444:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.0.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f47b478eec9 code=0x7ffc0000 [ 1237.423349][ T30] audit: type=1326 audit(1760655954.444:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.0.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b478eec9 code=0x7ffc0000 [ 1237.957472][ T30] audit: type=1326 audit(1760655954.444:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.0.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b478eec9 code=0x7ffc0000 [ 1237.980939][ T30] audit: type=1326 audit(1760655954.444:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.0.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f47b478eec9 code=0x7ffc0000 [ 1238.414489][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.427646][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.650410][T19432] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3572'. [ 1242.663824][ T5887] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1242.679421][ T5887] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1245.733570][ T9981] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1246.053489][ T9981] usb 5-1: Using ep0 maxpacket: 32 [ 1246.655446][ T9981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.724569][ T9981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.827475][ T9981] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1246.852986][ T9981] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1246.894999][ T9981] usb 5-1: Manufacturer: syz [ 1247.220746][ T9981] usb 5-1: config 0 descriptor?? [ 1247.457989][T19505] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1247.476612][ T5926] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1247.527346][ T5926] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1247.680307][ T9981] ft260 0003:0403:6030.0018: unknown main item tag 0x7 [ 1248.063977][ T9981] ft260 0003:0403:6030.0018: chip code: 6424 8183 [ 1248.356429][ T9981] ft260 0003:0403:6030.0018: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1248.562117][ T9981] ft260 0003:0403:6030.0018: failed to retrieve status: -32, no wakeup [ 1248.631986][ T9981] ft260 0003:0403:6030.0018: failed to retrieve status: -71 [ 1248.693247][ T9981] ft260 0003:0403:6030.0018: failed to reset I2C controller: -71 [ 1248.753741][ T9981] usb 5-1: USB disconnect, device number 10 [ 1250.716803][T18086] Bluetooth: hci4: command 0x0406 tx timeout [ 1252.983478][T19579] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3609'. [ 1253.224914][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1253.224929][ T30] audit: type=1400 audit(1760655971.054:459): avc: denied { ioctl } for pid=19574 comm="syz.3.3613" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1254.426154][ T5887] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1254.524775][ T5887] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1257.706993][T19612] Process accounting resumed [ 1258.982262][T19646] fuse: Bad value for 'group_id' [ 1259.007443][T19646] fuse: Bad value for 'group_id' [ 1259.576996][ T52] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1262.212126][T11745] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1262.474919][T11745] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1264.100735][ T30] audit: type=1400 audit(1760655981.924:460): avc: denied { setopt } for pid=19703 comm="syz.4.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1264.882165][ T30] audit: type=1400 audit(1760655981.994:461): avc: denied { ioctl } for pid=19703 comm="syz.4.3647" path="socket:[89460]" dev="sockfs" ino=89460 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1266.859578][T19718] Process accounting resumed [ 1267.798509][T14817] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1267.815396][T14817] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1269.072979][T19757] Bluetooth: MGMT ver 1.23 [ 1270.857048][T19777] Process accounting resumed [ 1278.245833][T19863] Bluetooth: MGMT ver 1.23 [ 1279.167103][T19875] 9pnet_virtio: no channels available for device syz [ 1281.166927][T19880] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1281.896755][ T9981] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1281.929753][ T9981] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1284.256968][T19916] netlink: 'syz.0.3708': attribute type 25 has an invalid length. [ 1286.107903][T19933] Process accounting resumed [ 1287.723833][T19957] binder: 19955:19957 ioctl 541b 0 returned -22 [ 1287.732971][ T30] audit: type=1400 audit(1760656005.534:462): avc: denied { write } for pid=19952 comm="syz.3.3719" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1287.804208][ T30] audit: type=1400 audit(1760656005.544:463): avc: denied { open } for pid=19952 comm="syz.3.3719" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1287.844301][ T30] audit: type=1400 audit(1760656005.584:464): avc: denied { unmount } for pid=16630 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1287.872035][T19964] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3723'. [ 1288.673395][ T49] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1288.862083][ T30] audit: type=1400 audit(1760656006.684:465): avc: denied { read } for pid=19987 comm="syz.1.3732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1288.916086][ T30] audit: type=1400 audit(1760656006.734:466): avc: denied { write } for pid=19987 comm="syz.1.3732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1288.950465][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 1289.013207][ T49] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1289.793026][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1289.995172][ T49] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1290.039155][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.125978][T20001] random: crng reseeded on system resumption [ 1290.141626][ T49] usb 5-1: Product: syz [ 1290.145983][ T30] audit: type=1400 audit(1760656007.954:467): avc: denied { write } for pid=20000 comm="syz.1.3735" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1290.170664][ T49] usb 5-1: Manufacturer: syz [ 1290.231838][ T49] usb 5-1: SerialNumber: syz [ 1290.265942][ T49] usb 5-1: config 0 descriptor?? [ 1290.304473][ T30] audit: type=1400 audit(1760656008.134:468): avc: denied { ioctl } for pid=20000 comm="syz.1.3735" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1290.333807][ T49] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1290.343097][ T49] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1291.131239][ T30] audit: type=1400 audit(1760656008.884:469): avc: denied { append } for pid=20009 comm="syz.0.3739" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1291.494846][ T49] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1291.501412][ T49] em28xx 5-1:0.0: Config register raw data: 0xfd [ 1291.509967][ T49] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 1291.520404][ T49] em28xx 5-1:0.0: No AC97 audio processor [ 1292.679325][ T49] usb 5-1: USB disconnect, device number 11 [ 1293.123369][ T49] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1293.243399][T14817] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1293.253371][T11745] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1293.261025][ T9981] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1293.273359][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 1293.277642][ T49] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1293.288062][ T49] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1293.296210][ T49] usb 3-1: Product: syz [ 1293.300445][ T49] usb 3-1: Manufacturer: syz [ 1293.305173][ T49] usb 3-1: SerialNumber: syz [ 1293.311348][ T49] usb 3-1: config 0 descriptor?? [ 1293.396516][T14817] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1293.405896][T14817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.414271][T14817] usb 5-1: Product: syz [ 1293.418464][T14817] usb 5-1: Manufacturer: syz [ 1293.423032][T14817] usb 5-1: SerialNumber: syz [ 1293.430550][ T9981] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1293.434331][T14817] usb 5-1: config 0 descriptor?? [ 1293.449151][ T9981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1293.454051][T14817] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1293.460978][ T9981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1293.472050][T14817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1293.479390][ T9981] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1293.489122][T14817] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1293.502379][ T9981] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1293.502493][T11745] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1293.510702][T14817] usb 5-1: media controller created [ 1293.534908][T11745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.538615][ T49] usb 3-1: USB disconnect, device number 17 [ 1293.542966][T11745] usb 2-1: Product: syz [ 1293.562573][T11745] usb 2-1: Manufacturer: syz [ 1293.567509][ T9981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.575951][T11745] usb 2-1: SerialNumber: syz [ 1293.594074][ T9981] usb 1-1: config 0 descriptor?? [ 1293.608905][T14817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1293.615356][T11745] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1293.672187][T14817] DVB: Unable to find symbol mt352_attach() [ 1293.680349][ T30] audit: type=1400 audit(1760656011.514:470): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1293.717396][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1293.738323][T14817] DVB: Unable to find symbol nxt6000_attach() [ 1293.744761][T14817] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1293.758965][T14817] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input68 [ 1293.777102][T14817] dvb-usb: schedule remote query interval to 1000 msecs. [ 1293.784221][T14817] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1293.794456][T14817] dvb-usb: bulk message failed: -22 (7/0) [ 1293.800187][T14817] dvb-usb: bulk message failed: -22 (7/0) [ 1293.813614][T14817] usb 5-1: USB disconnect, device number 12 [ 1293.963163][T14817] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1294.087223][T20052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1294.198891][ T49] usb 2-1: USB disconnect, device number 17 [ 1294.254616][ T9981] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1294.262088][ T9981] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1294.275613][ T9981] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1294.284182][ T9981] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1294.291617][ T9981] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1294.362074][ T9981] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1294.370164][ T9981] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1294.379784][ T9981] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1294.388095][ T9981] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1294.396332][ T9981] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1294.403413][ T30] audit: type=1400 audit(1760656012.224:471): avc: denied { create } for pid=20055 comm="syz.2.3753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1294.433725][ T30] audit: type=1400 audit(1760656012.254:472): avc: denied { create } for pid=20057 comm="syz.3.3754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1294.455675][ T9981] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1294.533550][ T9981] usb 1-1: USB disconnect, device number 16 [ 1294.594740][T20059] fido_id[20059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1294.675558][ T52] Bluetooth: hci0: unexpected event for opcode 0x202f [ 1294.786533][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1294.796673][ T9] ath9k_htc: Failed to initialize the device [ 1294.805792][ T49] usb 2-1: ath9k_htc: USB layer deinitialized [ 1294.933473][ T30] audit: type=1400 audit(1760656012.754:473): avc: denied { execmem } for pid=20068 comm="syz.0.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1295.020174][T14817] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1295.629806][T20060] comedi comedi3: reset error (fatal) [ 1295.638431][T14817] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1295.647128][T14817] usb 5-1: config 0 has no interface number 0 [ 1295.653364][T14817] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1295.676260][ T49] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1295.686977][T14817] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1295.703622][T14817] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1295.717236][T14817] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1295.737063][T20073] capability: warning: `syz.3.3759' uses deprecated v2 capabilities in a way that may be insecure [ 1295.742471][T14817] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1295.756647][T14817] usb 5-1: Product: syz [ 1295.760821][T14817] usb 5-1: SerialNumber: syz [ 1295.774015][T14817] usb 5-1: config 0 descriptor?? [ 1295.840108][T14817] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1295.860642][T14817] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input69 [ 1295.903439][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 1295.938093][ T49] usb 2-1: config index 0 descriptor too short (expected 61476, got 36) [ 1295.966860][ T49] usb 2-1: config 224 has an invalid interface number: 61 but max is -1 [ 1295.998674][ T49] usb 2-1: config 224 has 1 interface, different from the descriptor's value: 0 [ 1296.018897][ T49] usb 2-1: config 224 has no interface number 0 [ 1296.025939][ T49] usb 2-1: config 224 interface 61 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1296.052160][ T49] usb 2-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice=1e.fa [ 1296.072447][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.086583][ T49] usb 2-1: Product: syz [ 1296.086623][ T49] usb 2-1: Manufacturer: syz [ 1296.086638][ T49] usb 2-1: SerialNumber: syz [ 1296.196997][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1296.197129][ T9] usb 5-1: USB disconnect, device number 13 [ 1296.203994][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1296.244711][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1296.338437][ T30] audit: type=1400 audit(1760656014.164:474): avc: denied { write } for pid=20091 comm="syz.3.3767" lport=55969 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1296.361822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1296.368794][ T30] audit: type=1400 audit(1760656014.204:475): avc: denied { setopt } for pid=20091 comm="syz.3.3767" lport=55969 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1296.448305][T20101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1296.497160][ T30] audit: type=1400 audit(1760656014.294:476): avc: denied { name_connect } for pid=20095 comm="syz.2.3769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1296.578214][ T30] audit: type=1400 audit(1760656014.374:477): avc: denied { listen } for pid=20095 comm="syz.2.3769" lport=52010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1297.265225][ T5887] usb 2-1: USB disconnect, device number 18 [ 1297.391086][T20113] comedi comedi3: pcl724: I/O port conflict (0x84f27,4) [ 1298.097948][ T30] audit: type=1400 audit(1760656015.514:478): avc: denied { setopt } for pid=20114 comm="syz.3.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1299.239983][ T30] audit: type=1400 audit(1760656016.114:479): avc: denied { shutdown } for pid=20119 comm="syz.0.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1299.264490][ T30] audit: type=1400 audit(1760656016.184:480): avc: denied { mount } for pid=20119 comm="syz.0.3777" name="/" dev="configfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1299.427134][T20125] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1299.958626][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.968200][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.891077][T20147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3786'. [ 1300.891732][ T30] audit: type=1326 audit(1760656018.714:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20148 comm="syz.1.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4958eec9 code=0x7ffc0000 [ 1300.923540][ C0] vkms_vblank_simulate: vblank timer overrun [ 1301.483530][ T30] audit: type=1326 audit(1760656018.714:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20148 comm="syz.1.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4958eec9 code=0x7ffc0000 [ 1301.506940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1301.513668][ T30] audit: type=1326 audit(1760656018.784:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20148 comm="syz.1.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f5a4958eec9 code=0x7ffc0000 [ 1301.539015][ T30] audit: type=1326 audit(1760656018.784:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20148 comm="syz.1.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4958eec9 code=0x7ffc0000 [ 1301.565947][ T30] audit: type=1326 audit(1760656018.784:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20148 comm="syz.1.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4958eec9 code=0x7ffc0000 [ 1301.907785][ T30] audit: type=1400 audit(1760656019.604:486): avc: denied { write } for pid=20152 comm="syz.4.3788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1302.063473][ T30] audit: type=1400 audit(1760656019.604:487): avc: denied { nlmsg_write } for pid=20152 comm="syz.4.3788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1303.485243][T14817] libceph: connect (1)[c::]:6789 error -101 [ 1303.507727][T14817] libceph: mon0 (1)[c::]:6789 connect error [ 1303.951796][T20182] ceph: No mds server is up or the cluster is laggy [ 1303.969311][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 1303.985162][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 1304.166612][ T52] Bluetooth: hci1: unexpected event for opcode 0x202f [ 1307.096032][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3810'. [ 1307.195390][T20234] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3810'. [ 1307.226783][T20237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3811'. [ 1307.721844][T20247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1308.429913][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1308.790886][ T30] audit: type=1400 audit(1760656026.584:488): avc: denied { ioctl } for pid=20256 comm="syz.3.3818" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1310.730757][ T30] audit: type=1400 audit(1760656028.194:489): avc: denied { getopt } for pid=20287 comm="syz.3.3830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1311.740415][T20305] warning: `syz.1.3832' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1311.807643][T20306] syzkaller0: refused to change device tx_queue_len [ 1311.836144][T20308] netlink: 'syz.1.3836': attribute type 10 has an invalid length. [ 1311.867104][T20308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.881798][T20308] bond0: (slave team0): Enslaving as an active interface with an up link [ 1311.924748][ T49] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1311.968996][T20310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.983517][T20316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3839'. [ 1311.996450][T20310] batadv_slave_0: entered promiscuous mode [ 1312.091563][ T49] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1312.120367][T20320] ip6gretap1: entered promiscuous mode [ 1312.126028][ T49] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1312.153239][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1312.203384][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1312.436460][ T30] audit: type=1400 audit(1760656030.094:490): avc: denied { read } for pid=20327 comm="syz.3.3844" lport=39330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1312.456946][ C0] vkms_vblank_simulate: vblank timer overrun [ 1312.551473][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1312.564723][ T49] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1312.573411][ T9981] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1312.574093][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.602535][ T49] usb 3-1: config 0 descriptor?? [ 1312.623937][T20298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1312.686296][T20348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1312.743389][ T9981] usb 2-1: Using ep0 maxpacket: 8 [ 1312.769495][ T9981] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1312.789690][ T9981] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1312.809957][ T9981] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1312.835925][ T9981] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1312.856189][ T9981] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1312.888996][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1312.913575][ T9981] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1312.932756][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3857'. [ 1312.945347][ T9981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.048121][ T49] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd [ 1313.083628][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1313.109329][ T49] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1313.123665][ T9] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 1313.141118][ T9] usb 5-1: config 0 has no interface number 0 [ 1313.157788][ T9] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1313.184073][ T9981] usb 2-1: usb_control_msg returned -32 [ 1313.212464][ T9] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1313.232937][ T9981] usbtmc 2-1:16.0: can't read capabilities [ 1313.298642][ T9] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1313.320371][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.340639][ T9] usb 5-1: Product: syz [ 1314.126568][ T49] usb 3-1: USB disconnect, device number 18 [ 1314.139993][T20364] fuse: Unknown parameter 'group_id00000000000000000000' [ 1314.169104][ T9] usb 5-1: Manufacturer: syz [ 1314.179046][ T9] usb 5-1: SerialNumber: syz [ 1314.203196][ T9] usb 5-1: config 0 descriptor?? [ 1314.235064][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1315.134893][T20379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1315.233429][ T9] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input71 [ 1315.293418][ T30] audit: type=1400 audit(1760656033.104:491): avc: denied { read write } for pid=20375 comm="syz.3.3862" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1315.656832][ T30] audit: type=1400 audit(1760656033.104:492): avc: denied { open } for pid=20375 comm="syz.3.3862" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1315.695677][ T9] usb 5-1: USB disconnect, device number 14 [ 1315.726241][T14817] usb 2-1: USB disconnect, device number 19 [ 1316.583361][T14817] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1316.844904][T14817] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1316.853523][T14817] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1316.862404][T14817] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.893361][T17658] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1316.906494][T14817] usb 5-1: config 220 has no interface number 2 [ 1316.924431][T14817] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1316.981473][T14817] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1317.006457][T14817] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1317.034897][T14817] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1317.077013][T14817] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1317.087397][T14817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.095778][T14817] usb 5-1: Product: syz [ 1317.100608][T17658] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1317.110177][T17658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.128448][T14817] usb 5-1: Manufacturer: syz [ 1317.148721][T17658] usb 2-1: Product: syz [ 1317.152910][T17658] usb 2-1: Manufacturer: syz [ 1317.157760][T14817] usb 5-1: SerialNumber: syz [ 1317.184438][T17658] usb 2-1: SerialNumber: syz [ 1317.203727][T17658] usb 2-1: config 0 descriptor?? [ 1317.215730][T17658] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1317.264696][T17658] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1317.296198][T17658] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1317.305688][T17658] usb 2-1: media controller created [ 1317.337960][T17658] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1317.410266][T14817] usb 5-1: selecting invalid altsetting 0 [ 1317.425158][T14817] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1317.443139][T14817] uvcvideo 5-1:220.0: No valid video chain found. [ 1317.602784][T17658] DVB: Unable to find symbol mt352_attach() [ 1317.612460][T14817] usb 5-1: selecting invalid altsetting 0 [ 1317.619439][T14817] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1317.648192][T14817] usb 5-1: USB disconnect, device number 15 [ 1317.691235][T17658] DVB: Unable to find symbol nxt6000_attach() [ 1317.737366][T17658] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1317.757204][T17658] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input72 [ 1317.789218][T17658] dvb-usb: schedule remote query interval to 1000 msecs. [ 1317.796425][T17658] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1317.811448][T17658] dvb-usb: bulk message failed: -22 (7/0) [ 1317.820999][T17658] dvb-usb: bulk message failed: -22 (7/0) [ 1317.850263][T17658] usb 2-1: USB disconnect, device number 20 [ 1318.096223][T17658] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1319.174589][T20433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3881'. [ 1319.201000][T20433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3881'. [ 1319.236291][T20427] comedi comedi3: reset error (fatal) [ 1320.081780][ T30] audit: type=1400 audit(1760656037.904:493): avc: denied { bind } for pid=20440 comm="syz.1.3883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1320.936914][T20458] veth2: entered promiscuous mode [ 1320.942184][T20458] veth2: entered allmulticast mode [ 1321.083630][T17658] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1321.333043][T17658] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1321.379022][T17658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.388740][T17658] usb 1-1: Product: syz [ 1321.392911][T17658] usb 1-1: Manufacturer: syz [ 1321.397732][T17658] usb 1-1: SerialNumber: syz [ 1321.405584][T17658] usb 1-1: config 0 descriptor?? [ 1321.414328][T17658] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1321.436251][T17658] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1321.448396][T17658] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1321.463519][T17658] usb 1-1: media controller created [ 1321.494629][T17658] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1321.553378][T14817] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1321.593182][T17658] DVB: Unable to find symbol mt352_attach() [ 1321.640030][T17658] DVB: Unable to find symbol nxt6000_attach() [ 1321.648403][T17658] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1321.663146][T17658] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input73 [ 1321.703402][T14817] usb 3-1: Using ep0 maxpacket: 32 [ 1321.710851][T14817] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.721708][T14817] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1321.757416][T17658] dvb-usb: schedule remote query interval to 1000 msecs. [ 1321.767218][T17658] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1321.778794][T14817] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1321.802938][T17658] dvb-usb: bulk message failed: -22 (7/0) [ 1321.815124][T14817] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1321.828445][T17658] dvb-usb: bulk message failed: -22 (7/0) [ 1321.840564][T17658] usb 1-1: USB disconnect, device number 17 [ 1321.847147][T14817] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1321.857315][T14817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.866892][T14817] usb 3-1: Product: syz [ 1321.871292][T14817] usb 3-1: Manufacturer: syz [ 1321.876251][T14817] usb 3-1: SerialNumber: syz [ 1322.299386][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1322.388523][T17658] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1322.399583][T14817] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input74 [ 1322.542538][T14817] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1322.602850][T14817] (id 0x00) [ 1322.734613][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1322.744252][T14817] rc_core: IR keymap rc-imon-pad not found [ 1322.750203][ T30] audit: type=1400 audit(1760656040.574:494): avc: denied { ioctl } for pid=20522 comm="syz.3.3901" path="socket:[93370]" dev="sockfs" ino=93370 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1322.776483][T14817] Registered IR keymap rc-empty [ 1322.781895][T14817] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1322.803608][T14817] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1322.834264][T14817] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1322.847756][T14817] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input75 [ 1322.868462][T14817] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:19> initialized [ 1322.883457][ T5887] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1322.904112][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1322.910978][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.928507][T20301] udevd[20301]: failed to send result of seq 18956 to main daemon: Connection refused [ 1322.931514][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.972518][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1323.054694][ T9] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1323.068097][ T30] audit: type=1400 audit(1760656040.894:495): avc: denied { read } for pid=20528 comm="syz.3.3904" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1323.095757][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.112938][ T9] usb 2-1: config 0 descriptor?? [ 1323.118065][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 1323.126219][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1323.149757][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1323.202717][ T5887] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1323.229762][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.237831][ T5887] usb 1-1: Product: syz [ 1323.263438][ T5887] usb 1-1: Manufacturer: syz [ 1323.268174][ T5887] usb 1-1: SerialNumber: syz [ 1323.297259][ T5887] usb 1-1: config 0 descriptor?? [ 1323.304981][ T5887] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1323.314357][ T5887] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1323.326315][T20533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3906'. [ 1323.422986][ T30] audit: type=1400 audit(1760656041.244:496): avc: denied { append } for pid=20537 comm="syz.3.3908" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1323.445892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1323.571315][T20511] random: crng reseeded on system resumption [ 1323.589360][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input76 [ 1323.626854][ T9] shield 0003:0955:7214.001F: Registered Thunderstrike controller [ 1323.662839][ T9] shield 0003:0955:7214.001F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1323.808955][ T9981] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1323.809190][T14817] usb 2-1: USB disconnect, device number 21 [ 1323.820503][ T9981] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1323.838271][T14817] ------------[ cut here ]------------ [ 1323.838323][ T9981] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1323.843745][T14817] workqueue: work disable count underflowed [ 1323.843818][T14817] WARNING: CPU: 1 PID: 14817 at kernel/workqueue.c:4355 enable_work+0x2f8/0x340 [ 1323.843855][T14817] Modules linked in: [ 1323.843885][T14817] CPU: 1 UID: 0 PID: 14817 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 1323.843906][T14817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1323.843919][T14817] Workqueue: usb_hub_wq hub_event [ 1323.843945][T14817] RIP: 0010:enable_work+0x2f8/0x340 [ 1323.843974][T14817] Code: 89 ee e8 0b b7 38 00 45 84 ed 0f 85 29 fe ff ff e8 1d bc 38 00 c6 05 97 3a e7 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 27 44 a1 00 e9 aa fe ff ff [ 1323.843992][T14817] RSP: 0018:ffffc90020f3f3b0 EFLAGS: 00010086 [ 1323.844007][T14817] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90019ea9000 [ 1323.844019][T14817] RDX: 0000000000100000 RSI: ffffffff817b6ef5 RDI: 0000000000000001 [ 1323.844030][T14817] RBP: ffff888054050738 R08: 0000000000000001 R09: 0000000000000000 [ 1323.844041][T14817] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920041e7e77 [ 1323.844053][T14817] R13: 0000000000000000 R14: ffff888054050698 R15: ffff888054050730 [ 1323.844065][T14817] FS: 0000000000000000(0000) GS:ffff888124ad6000(0000) knlGS:0000000000000000 [ 1323.844082][T14817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1323.844095][T14817] CR2: 000000110c42ffe0 CR3: 000000005e33e000 CR4: 00000000003526f0 [ 1323.844107][T14817] Call Trace: [ 1323.844113][T14817] [ 1323.844123][T14817] ? __pfx_enable_work+0x10/0x10 [ 1323.844154][T14817] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 1323.844183][T14817] __cancel_work_sync+0xe7/0x130 [ 1323.844221][T14817] thermal_zone_device_unregister+0x28e/0x4d0 [ 1323.844245][T14817] ? __pfx_shield_remove+0x10/0x10 [ 1323.844272][T14817] power_supply_unregister+0x10a/0x150 [ 1323.844295][T14817] shield_remove+0x75/0x130 [ 1323.844315][T14817] ? __pfx_shield_remove+0x10/0x10 [ 1323.844336][T14817] hid_device_remove+0xd1/0x260 [ 1323.844353][T14817] ? __pfx_hid_device_remove+0x10/0x10 [ 1323.844371][T14817] device_remove+0xcb/0x170 [ 1323.844390][T14817] device_release_driver_internal+0x44b/0x620 [ 1323.857201][ T9981] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1323.861269][T14817] bus_remove_device+0x22f/0x420 [ 1323.924576][ T5887] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1323.929420][T14817] device_del+0x396/0x9f0 [ 1323.938128][ T5887] em28xx 1-1:0.0: Config register raw data: 0xfd [ 1323.945343][T14817] ? __pfx_device_del+0x10/0x10 [ 1323.945371][T14817] ? do_raw_spin_lock+0x12c/0x2b0 [ 1323.945403][T14817] hid_destroy_device+0x19c/0x240 [ 1323.945424][T14817] usbhid_disconnect+0xa0/0xe0 [ 1323.945447][T14817] usb_unbind_interface+0x1dd/0x9e0 [ 1323.945479][T14817] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 1323.945504][T14817] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1323.945530][T14817] device_remove+0x125/0x170 [ 1323.945546][T14817] device_release_driver_internal+0x44b/0x620 [ 1323.945572][T14817] bus_remove_device+0x22f/0x420 [ 1323.945604][T14817] device_del+0x396/0x9f0 [ 1323.945626][T14817] ? __pfx_device_del+0x10/0x10 [ 1323.945645][T14817] ? kobject_put+0x210/0x5a0 [ 1323.945676][T14817] usb_disable_device+0x355/0x7d0 [ 1323.945710][T14817] usb_disconnect+0x2e1/0x9c0 [ 1323.945739][T14817] hub_event+0x1c81/0x4fe0 [ 1323.945784][T14817] ? __lock_acquire+0xb8a/0x1c90 [ 1323.945811][T14817] ? __pfx_hub_event+0x10/0x10 [ 1323.945846][T14817] ? put_objects.isra.0+0x130/0x1f0 [ 1323.945891][T14817] ? rcu_is_watching+0x12/0xc0 [ 1323.945913][T14817] process_one_work+0x9cf/0x1b70 [ 1323.945952][T14817] ? __pfx_process_one_work+0x10/0x10 [ 1323.945992][T14817] ? assign_work+0x1a0/0x250 [ 1323.946019][T14817] worker_thread+0x6c8/0xf10 [ 1323.946055][T14817] ? __kthread_parkme+0x19e/0x250 [ 1323.946078][T14817] ? __pfx_worker_thread+0x10/0x10 [ 1323.946105][T14817] kthread+0x3c5/0x780 [ 1323.946130][T14817] ? __pfx_kthread+0x10/0x10 [ 1323.946157][T14817] ? rcu_is_watching+0x12/0xc0 [ 1323.946174][T14817] ? __pfx_kthread+0x10/0x10 [ 1323.946200][T14817] ret_from_fork+0x675/0x7d0 [ 1323.946222][T14817] ? __pfx_kthread+0x10/0x10 [ 1323.946246][T14817] ret_from_fork_asm+0x1a/0x30 [ 1323.946281][T14817] [ 1323.946291][T14817] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1323.946304][T14817] CPU: 1 UID: 0 PID: 14817 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 1323.946324][T14817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1323.946337][T14817] Workqueue: usb_hub_wq hub_event [ 1323.946357][T14817] Call Trace: [ 1323.946364][T14817] [ 1323.946370][T14817] dump_stack_lvl+0x3d/0x1f0 [ 1323.946390][T14817] vpanic+0x640/0x6f0 [ 1323.946411][T14817] ? enable_work+0x2f8/0x340 [ 1323.946434][T14817] panic+0xca/0xd0 [ 1323.946452][T14817] ? __pfx_panic+0x10/0x10 [ 1323.946482][T14817] check_panic_on_warn+0xab/0xb0 [ 1323.946503][T14817] __warn+0xf6/0x3c0 [ 1323.946521][T14817] ? __pfx_vprintk_emit+0x10/0x10 [ 1323.946537][T14817] ? enable_work+0x2f8/0x340 [ 1323.946561][T14817] report_bug+0x3c3/0x580 [ 1323.946579][T14817] ? enable_work+0x2f8/0x340 [ 1323.946603][T14817] handle_bug+0x184/0x210 [ 1323.946626][T14817] exc_invalid_op+0x17/0x50 [ 1323.946649][T14817] asm_exc_invalid_op+0x1a/0x20 [ 1323.946664][T14817] RIP: 0010:enable_work+0x2f8/0x340 [ 1323.946688][T14817] Code: 89 ee e8 0b b7 38 00 45 84 ed 0f 85 29 fe ff ff e8 1d bc 38 00 c6 05 97 3a e7 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 27 44 a1 00 e9 aa fe ff ff [ 1323.946704][T14817] RSP: 0018:ffffc90020f3f3b0 EFLAGS: 00010086 [ 1323.946717][T14817] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90019ea9000 [ 1323.946727][T14817] RDX: 0000000000100000 RSI: ffffffff817b6ef5 RDI: 0000000000000001 [ 1323.946738][T14817] RBP: ffff888054050738 R08: 0000000000000001 R09: 0000000000000000 [ 1323.946748][T14817] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920041e7e77 [ 1323.946758][T14817] R13: 0000000000000000 R14: ffff888054050698 R15: ffff888054050730 [ 1323.946776][T14817] ? __warn_printk+0x1a5/0x350 [ 1323.946800][T14817] ? __pfx_enable_work+0x10/0x10 [ 1323.946826][T14817] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 1323.946850][T14817] __cancel_work_sync+0xe7/0x130 [ 1323.946877][T14817] thermal_zone_device_unregister+0x28e/0x4d0 [ 1323.946896][T14817] ? __pfx_shield_remove+0x10/0x10 [ 1323.946916][T14817] power_supply_unregister+0x10a/0x150 [ 1323.946935][T14817] shield_remove+0x75/0x130 [ 1323.946953][T14817] ? __pfx_shield_remove+0x10/0x10 [ 1323.946976][T14817] hid_device_remove+0xd1/0x260 [ 1323.946992][T14817] ? __pfx_hid_device_remove+0x10/0x10 [ 1323.947009][T14817] device_remove+0xcb/0x170 [ 1323.947026][T14817] device_release_driver_internal+0x44b/0x620 [ 1323.947050][T14817] bus_remove_device+0x22f/0x420 [ 1323.947078][T14817] device_del+0x396/0x9f0 [ 1323.947097][T14817] ? __pfx_device_del+0x10/0x10 [ 1323.947114][T14817] ? do_raw_spin_lock+0x12c/0x2b0 [ 1323.947143][T14817] hid_destroy_device+0x19c/0x240 [ 1323.947160][T14817] usbhid_disconnect+0xa0/0xe0 [ 1323.947181][T14817] usb_unbind_interface+0x1dd/0x9e0 [ 1323.947208][T14817] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 1323.947228][T14817] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1323.947252][T14817] device_remove+0x125/0x170 [ 1323.947269][T14817] device_release_driver_internal+0x44b/0x620 [ 1323.947293][T14817] bus_remove_device+0x22f/0x420 [ 1323.947321][T14817] device_del+0x396/0x9f0 [ 1323.947340][T14817] ? __pfx_device_del+0x10/0x10 [ 1323.947356][T14817] ? kobject_put+0x210/0x5a0 [ 1323.947383][T14817] usb_disable_device+0x355/0x7d0 [ 1323.947410][T14817] usb_disconnect+0x2e1/0x9c0 [ 1323.947435][T14817] hub_event+0x1c81/0x4fe0 [ 1323.947474][T14817] ? __lock_acquire+0xb8a/0x1c90 [ 1323.947497][T14817] ? __pfx_hub_event+0x10/0x10 [ 1323.947516][T14817] ? put_objects.isra.0+0x130/0x1f0 [ 1323.947551][T14817] ? rcu_is_watching+0x12/0xc0 [ 1323.947571][T14817] process_one_work+0x9cf/0x1b70 [ 1323.947603][T14817] ? __pfx_process_one_work+0x10/0x10 [ 1323.947633][T14817] ? assign_work+0x1a0/0x250 [ 1323.947656][T14817] worker_thread+0x6c8/0xf10 [ 1323.947687][T14817] ? __kthread_parkme+0x19e/0x250 [ 1323.947706][T14817] ? __pfx_worker_thread+0x10/0x10 [ 1323.947729][T14817] kthread+0x3c5/0x780 [ 1323.947750][T14817] ? __pfx_kthread+0x10/0x10 [ 1323.947773][T14817] ? rcu_is_watching+0x12/0xc0 [ 1323.947789][T14817] ? __pfx_kthread+0x10/0x10 [ 1323.947811][T14817] ret_from_fork+0x675/0x7d0 [ 1323.947830][T14817] ? __pfx_kthread+0x10/0x10 [ 1323.947851][T14817] ret_from_fork_asm+0x1a/0x30 [ 1323.947882][T14817] [ 1323.954455][T14817] Kernel Offset: disabled