last executing test programs: 1m51.658764516s ago: executing program 1 (id=565): r0 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) fcntl$dupfd(r0, 0x0, r0) 1m51.412460331s ago: executing program 1 (id=570): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x20, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}}}}}}}, 0x0) 1m51.341487421s ago: executing program 1 (id=572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000018"], 0x20) 1m50.861457136s ago: executing program 1 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m50.805534224s ago: executing program 1 (id=581): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x44c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x4, 0x9, 0x735152a5, 0x6, 0x2a9, 0xa7, 0x25, 0xcb8, 0x3, 0x7894, 0xffffffff, 0x7, 0x2, 0x100, 0x9, 0x1, 0x3, 0x0, 0x40000000, 0xff, 0x6, 0x7db0, 0x5, 0x3, 0x3, 0x4, 0x7, 0x3b4c, 0xc1fc, 0x4, 0x10000, 0x4, 0x5, 0x1, 0x57a, 0x65530070, 0x6, 0x7, 0x0, 0x8, 0x3, 0x3, 0xb2a, 0x8001, 0x1, 0x7, 0xa, 0x6a8, 0x5, 0x3, 0x8000, 0x7, 0x6, 0x10000, 0x1, 0x4, 0x7, 0x1, 0x4, 0x8, 0x6, 0x9, 0xffff7fff, 0x2, 0x0, 0x36, 0x4, 0x80, 0x5, 0xc6, 0x5, 0x4e5, 0xfffff169, 0x10000, 0x9, 0x6343, 0x81, 0x7, 0x7, 0x2cc, 0x9, 0xb, 0x200, 0x8, 0x4, 0xff, 0xffffff80, 0x4, 0x8, 0x0, 0x1000000, 0x3, 0x1, 0x1, 0x10000, 0x10, 0x5, 0xa10c, 0x83, 0x8001, 0x800, 0xfffffffe, 0x497, 0xffffbc00, 0x140, 0xfffffeff, 0x7c, 0x5202, 0x9, 0x3e, 0x3, 0x1, 0x8, 0x10, 0x10000, 0x2, 0x8001, 0x1, 0x2, 0x9, 0x6, 0x3, 0x999, 0xa, 0x1ad, 0x2, 0x4, 0x8001, 0x801ff, 0x1, 0x5, 0x10001, 0x6, 0x8ac, 0xcea, 0x6, 0x1, 0x1, 0x5, 0x8000004, 0x8000, 0x6, 0x8, 0xfffffff8, 0x0, 0x9, 0x80, 0x1, 0x650e, 0x1, 0xffff, 0x4, 0x5, 0x8001, 0x401b525b, 0xffff, 0x7f, 0x0, 0xf7, 0x0, 0xff, 0x7c, 0xeae1, 0x5, 0xfffffffa, 0x4, 0x7fff, 0x3, 0x9, 0xf8d, 0x9, 0x8, 0x9, 0x813c, 0x1, 0x5, 0x5, 0x7, 0xb, 0xaec, 0x0, 0x40, 0x2, 0xaec, 0x800, 0x8021, 0x8, 0x6, 0x7, 0x8e7, 0x101, 0x522b, 0x9, 0x77f, 0xffffffff, 0x8000, 0xffff, 0x7fff, 0x1, 0x5, 0x24, 0xd, 0xc, 0x1, 0x101, 0x9, 0x1, 0x1ff, 0xc5, 0x6, 0x3ff, 0x190, 0xd, 0xc, 0x0, 0x2, 0x10001, 0x3ff, 0x24cb, 0x8, 0x2, 0x6bed, 0x3, 0x1000, 0xfffffffe, 0x7, 0x72, 0x5, 0x3, 0xe328, 0x9, 0x7, 0x6, 0xe, 0x9, 0x5, 0xffffffff, 0x0, 0x68ec, 0x8, 0x5, 0x1000, 0xfffffc2f, 0x4, 0x4, 0x5, 0x3, 0x8, 0x3, 0x4, 0xfffffa03, 0x1ff, 0x10, 0x8, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x44c}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m50.409558211s ago: executing program 1 (id=593): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 1m50.197193788s ago: executing program 32 (id=593): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 1m26.5423948s ago: executing program 5 (id=1012): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) 1m26.466138396s ago: executing program 5 (id=1014): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000780), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000940)={'veth1_to_batadv', 0x32, 0x36}, 0x12) 1m26.340040834s ago: executing program 5 (id=1018): r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m26.24773567s ago: executing program 5 (id=1020): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1m26.145663008s ago: executing program 5 (id=1023): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000280"], 0x2c}}, 0x0) 1m25.769262709s ago: executing program 5 (id=1033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x203, 0x70bd26, 0x25dfdc01}, 0x14}}, 0x20000840) 1m25.54957128s ago: executing program 33 (id=1033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x203, 0x70bd26, 0x25dfdc01}, 0x14}}, 0x20000840) 28.771385273s ago: executing program 2 (id=2249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) 28.705526277s ago: executing program 2 (id=2252): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x2, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x1000}]}}]}]}, 0x34}}, 0x0) 28.590889621s ago: executing program 2 (id=2256): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x94c0, 0x3}, 0x8) 28.459568082s ago: executing program 2 (id=2260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 28.384514716s ago: executing program 2 (id=2262): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, &(0x7f0000000240)=""/160, 0xa0) close_range(r0, 0xffffffffffffffff, 0x0) 25.388859s ago: executing program 2 (id=2311): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c003780"], 0x44}}, 0x0) 25.157878929s ago: executing program 34 (id=2311): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c003780"], 0x44}}, 0x0) 3.804499128s ago: executing program 0 (id=2654): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.025276074s ago: executing program 4 (id=2666): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000140), 0x10) 2.891507859s ago: executing program 4 (id=2667): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00000e0000/0x4000)=nil, 0x4000, 0x15) 2.49577452s ago: executing program 4 (id=2668): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x46}, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.353173363s ago: executing program 4 (id=2670): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="330281000000fcdbdf251b00000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4044004}, 0x4000084) 2.195350616s ago: executing program 0 (id=2672): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) 2.104699196s ago: executing program 3 (id=2673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x1b, 0x5e, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0xce, 0x0}, @multicast2, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 2.093771091s ago: executing program 4 (id=2674): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f00005df000/0x1000)=nil, &(0x7f0000257000/0x4000)=nil, 0x1000, 0x2}) 2.046265943s ago: executing program 0 (id=2675): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x28) tkill(r0, 0x37) rt_sigsuspend(&(0x7f0000000240)={[0x10]}, 0x8) 1.988587369s ago: executing program 3 (id=2677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0xfd}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x3, 0xb, 0x0, 0x100, 0x8000000000020001, 0x0, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private0, @empty, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x150042, r2}) 1.94296228s ago: executing program 3 (id=2678): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) close(r0) 1.849562312s ago: executing program 4 (id=2680): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c40)={0x34, &(0x7f0000000080)={0x20, 0x3, 0x3, "86ef72"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.784096388s ago: executing program 3 (id=2682): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7fffffff, 0x0, 0x0, 0x0, 0xd, 0x22, 0x3, 0xe4}) 1.146107775s ago: executing program 0 (id=2689): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_setup(0x1, &(0x7f0000000000)) 1.085691s ago: executing program 3 (id=2691): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0) 1.02439077s ago: executing program 7 (id=2692): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x1200}, 0x0) 939.893355ms ago: executing program 0 (id=2693): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 841.339685ms ago: executing program 7 (id=2695): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) mknodat(0xffffffffffffffff, &(0x7f0000000180)='./file1/file0\x00', 0x80, 0x1f) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa70, 0x384, 0x1000, 0x0, 0x8, 0x0, {0x4}, {0x3}, {0xf4ef, 0xfffffff9}, {0x0, 0x0, 0x1000}, 0x0, 0x100, 0x8, 0x4, 0x0, 0x7f, 0x0, 0xfffffffe, 0x0, 0x3, 0x80, 0x0, 0x0, 0x4, 0x0, 0x6}) 742.660531ms ago: executing program 7 (id=2697): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 676.135967ms ago: executing program 3 (id=2698): syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 569.41023ms ago: executing program 7 (id=2700): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 532.087236ms ago: executing program 6 (id=2701): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 452.900524ms ago: executing program 7 (id=2702): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) mlockall(0x7) 442.668203ms ago: executing program 6 (id=2703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x20, 0x4, 0xe}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009602"]) 318.416241ms ago: executing program 7 (id=2704): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 291.071315ms ago: executing program 6 (id=2705): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x300, 0x0) read$FUSE(r2, &(0x7f00000018c0)={0x2020}, 0x2020) 221.184309ms ago: executing program 6 (id=2706): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x34, 0x1, 0x1, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0}, 0x40) 107.039488ms ago: executing program 6 (id=2707): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) 87.194063ms ago: executing program 0 (id=2708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) modify_ldt$read_default(0x2, 0x0, 0x0) 0s ago: executing program 6 (id=2709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) kernel console output (not intermixed with test programs): 6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.022084][ T8230] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.031218][ T8230] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.155716][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.162638][ T5878] usb 5-1: USB disconnect, device number 14 [ 137.174010][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.224176][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'. [ 137.238567][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.251723][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.252230][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1106'. [ 137.373381][ T8401] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 137.405247][ T8401] netlink: 'syz.2.1109': attribute type 2 has an invalid length. [ 137.574493][ T1133] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.584906][ T8411] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 137.679555][ T8407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.694094][ T8407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.774528][ T8422] serio: Serial port ttyS3 [ 137.956603][ T30] audit: type=1326 audit(1745366224.878:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.6.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfeb8e169 code=0x7ffc0000 [ 138.029822][ T30] audit: type=1326 audit(1745366224.878:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.6.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfeb8e169 code=0x7ffc0000 [ 138.087466][ T30] audit: type=1326 audit(1745366224.888:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.6.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f3dfeb8e169 code=0x7ffc0000 [ 138.161824][ T30] audit: type=1326 audit(1745366224.888:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.6.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfeb8e169 code=0x7ffc0000 [ 138.256807][ T30] audit: type=1326 audit(1745366224.888:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.6.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfeb8e169 code=0x7ffc0000 [ 138.559854][ T5833] Bluetooth: hci3: command tx timeout [ 138.621931][ T8452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.638156][ T8457] loop4: detected capacity change from 0 to 524255232 [ 138.644329][ T8459] loop6: detected capacity change from 0 to 524287999 [ 138.798677][ T8452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.938870][ T8452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.065332][ T8452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.103018][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1130'. [ 139.310814][ T8452] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.429706][ T8452] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.518972][ T8452] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.601058][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 139.601848][ T8452] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.901471][ T8526] loop4: detected capacity change from 0 to 524255232 [ 139.920036][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 140.079875][ T8533] serio: Serial port ttyS3 [ 140.637940][ T5833] Bluetooth: hci3: command tx timeout [ 140.747478][ T5874] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.917319][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 140.929593][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.941927][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.977251][ T5874] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 141.006689][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.035991][ T5874] usb 1-1: config 0 descriptor?? [ 141.235908][ T30] audit: type=1400 audit(1745366228.158:465): avc: denied { getopt } for pid=8563 comm="syz.2.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.386583][ T8571] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 141.447397][ T30] audit: type=1400 audit(1745366228.358:466): avc: denied { ioctl } for pid=8573 comm="syz.3.1163" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 141.469551][ T5874] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 141.487068][ T5874] cherry 0003:046A:0027.0009: unknown main item tag 0x6 [ 141.511833][ T5874] cherry 0003:046A:0027.0009: unknown main item tag 0x5 [ 141.536469][ T5874] cherry 0003:046A:0027.0009: unknown main item tag 0x4 [ 141.568815][ T5874] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 141.596159][ T5874] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 141.604470][ T5874] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 141.632287][ T5874] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 141.642138][ T5874] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 141.654285][ T5874] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 141.662213][ T5874] cherry 0003:046A:0027.0009: unknown global tag 0xd [ 141.684115][ T5874] cherry 0003:046A:0027.0009: item 0 4 1 13 parsing failed [ 141.703204][ T5874] cherry 0003:046A:0027.0009: probe with driver cherry failed with error -22 [ 141.747587][ T5874] usb 1-1: USB disconnect, device number 14 [ 141.879262][ T30] audit: type=1400 audit(1745366228.808:467): avc: denied { create } for pid=8597 comm="syz.3.1173" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.946897][ T30] audit: type=1400 audit(1745366228.828:468): avc: denied { write } for pid=8597 comm="syz.3.1173" name="file0" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.981570][ T30] audit: type=1400 audit(1745366228.828:469): avc: denied { open } for pid=8597 comm="syz.3.1173" path="/229/file0" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.038301][ T30] audit: type=1400 audit(1745366228.828:470): avc: denied { ioctl } for pid=8597 comm="syz.3.1173" path="/229/file0" dev="tmpfs" ino=1177 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.067743][ T30] audit: type=1400 audit(1745366228.848:471): avc: denied { unlink } for pid=5823 comm="syz-executor" name="file0" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.120348][ T30] audit: type=1400 audit(1745366229.048:472): avc: denied { name_bind } for pid=8603 comm="syz.4.1177" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 142.180508][ T30] audit: type=1400 audit(1745366229.108:473): avc: denied { read } for pid=8606 comm="syz.3.1176" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.182700][ T8607] autofs4:pid:8607:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 142.219729][ T30] audit: type=1400 audit(1745366229.108:474): avc: denied { open } for pid=8606 comm="syz.3.1176" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.267450][ T30] audit: type=1400 audit(1745366229.108:475): avc: denied { ioctl } for pid=8606 comm="syz.3.1176" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.293254][ T8607] autofs4:pid:8607:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 142.544330][ T8625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.727369][ T5871] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 142.888827][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 142.899952][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 142.911520][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 142.924333][ T5871] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 142.934458][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.942531][ T5871] usb 1-1: Product: syz [ 142.946702][ T5871] usb 1-1: Manufacturer: syz [ 142.951414][ T5871] usb 1-1: SerialNumber: syz [ 142.968795][ T5871] usb 1-1: config 0 descriptor?? [ 142.974358][ T8619] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.985706][ T8619] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.994280][ T5871] usb 1-1: ucan: probing device on interface #0 [ 143.203316][ T5871] usb 1-1: ucan: could not read protocol version, ret=-32 [ 143.211713][ T5871] usb 1-1: ucan: probe failed; try to update the device firmware [ 143.223751][ T5871] usb 1-1: USB disconnect, device number 15 [ 143.629107][ T8665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1203'. [ 143.659298][ T8665] bond0: invalid ARP target 0.0.0.0 specified for addition [ 143.666607][ T8665] bond0: option arp_ip_target: invalid value (0) [ 143.823938][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 143.833838][ T8679] netlink: 'syz.3.1211': attribute type 1 has an invalid length. [ 143.851580][ T8679] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1211'. [ 143.950266][ T8689] netlink: 'syz.4.1216': attribute type 5 has an invalid length. [ 144.017568][ T5872] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 144.137255][ T30] audit: type=1326 audit(1745366231.058:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8701 comm="syz.0.1222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca0af8e169 code=0x0 [ 144.182572][ T5872] usb 7-1: unable to get BOS descriptor or descriptor too short [ 144.191910][ T5872] usb 7-1: not running at top speed; connect to a high speed hub [ 144.231296][ T5872] usb 7-1: config 129 has an invalid interface number: 28 but max is 0 [ 144.247502][ T5872] usb 7-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 144.267325][ T5872] usb 7-1: config 129 has no interface number 0 [ 144.274918][ T5872] usb 7-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 144.291480][ T5872] usb 7-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 144.302241][ T5872] usb 7-1: config 129 interface 28 has no altsetting 0 [ 144.312381][ T5872] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 144.322678][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.346921][ T5872] usb 7-1: Product: syz [ 144.361779][ T5872] usb 7-1: Manufacturer: syz [ 144.366590][ T5872] usb 7-1: SerialNumber: syz [ 144.595569][ T5872] etas_es58x 7-1:129.28: Starting syz syz (Serial Number syz) [ 144.618562][ T5872] etas_es58x 7-1:129.28: could not retrieve the product info string [ 144.655495][ T5872] usb 7-1: USB disconnect, device number 2 [ 144.665248][ T5872] etas_es58x 7-1:129.28: Disconnecting syz syz [ 144.791650][ T8724] openvswitch: netlink: IP tunnel TTL not specified. [ 145.347298][ T5872] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.507813][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 145.531056][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.557334][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.567129][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 145.597776][ T909] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 145.605918][ T5872] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 145.623064][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.643507][ T5872] usb 4-1: config 0 descriptor?? [ 145.769880][ T909] usb 7-1: Using ep0 maxpacket: 16 [ 145.786352][ T909] usb 7-1: unable to get BOS descriptor or descriptor too short [ 145.798991][ T909] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 145.830908][ T909] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 145.857286][ T909] usb 7-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.881830][ T909] usb 7-1: config 1 interface 0 has no altsetting 0 [ 145.895984][ T909] usb 7-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 145.905472][ T909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.924069][ T909] usb 7-1: Product: syz [ 145.928632][ T909] usb 7-1: Manufacturer: syz [ 145.933306][ T909] usb 7-1: SerialNumber: syz [ 145.949137][ T8757] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 146.093887][ T5872] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000A/input/input19 [ 146.132109][ T5872] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000A/input/input20 [ 146.169314][ T909] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input21 [ 146.186173][ T5872] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 146.779700][ T8739] bcm5974 7-1:1.0: could not read from device [ 146.780094][ T5872] usb 7-1: USB disconnect, device number 3 [ 146.796087][ T5185] bcm5974 7-1:1.0: could not read from device [ 146.806588][ T909] usb 4-1: USB disconnect, device number 12 [ 147.083279][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 147.083295][ T30] audit: type=1400 audit(1745366234.008:489): avc: denied { bind } for pid=8845 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.165234][ T30] audit: type=1400 audit(1745366234.088:490): avc: denied { ioctl } for pid=8850 comm="syz.2.1290" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 147.367526][ T909] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 147.550790][ T909] usb 5-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 147.559946][ T909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.568096][ T909] usb 5-1: Product: syz [ 147.572533][ T909] usb 5-1: Manufacturer: syz [ 147.577144][ T909] usb 5-1: SerialNumber: syz [ 147.598112][ T909] usb 5-1: config 0 descriptor?? [ 147.618965][ T909] gspca_main: touptek-2.14.0 probing 0547:6801 [ 147.765612][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 147.860946][ T5878] usb 5-1: USB disconnect, device number 15 [ 147.911062][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.941632][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1309'. [ 147.947656][ T30] audit: type=1400 audit(1745366234.858:491): avc: denied { create } for pid=8890 comm="syz.6.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.320972][ T30] audit: type=1400 audit(1745366235.238:492): avc: denied { unmount } for pid=8905 comm="syz.6.1318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 148.547281][ T5878] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 148.618036][ T30] audit: type=1400 audit(1745366235.538:493): avc: denied { mounton } for pid=8933 comm="syz.2.1329" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 148.701237][ T5878] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 148.719908][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.735447][ T5878] usb 1-1: Product: syz [ 148.743157][ T5878] usb 1-1: Manufacturer: syz [ 148.754773][ T5878] usb 1-1: SerialNumber: syz [ 148.773468][ T5878] usb 1-1: config 0 descriptor?? [ 148.858107][ T8951] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 148.975411][ T8953] IPVS: length: 246 != 24 [ 149.201871][ T5878] usb 1-1: Firmware: major: 0, minor: 97, hardware type: ATUSB (0) [ 149.412553][ T5878] usb 1-1: failed to fetch extended address, random address set [ 149.413794][ T30] audit: type=1400 audit(1745366236.338:494): avc: denied { setopt } for pid=8965 comm="syz.2.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 149.427647][ T8965] delete_channel: no stack [ 149.489496][ T8972] loop9: detected capacity change from 0 to 8 [ 149.490242][ T5878] usb 1-1: USB disconnect, device number 16 [ 149.505853][ T8972] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 149.511789][ T8972] loop9: partition table partially beyond EOD, truncated [ 149.521441][ T8972] loop9: p1 size 81768186 extends beyond EOD, truncated [ 150.042427][ T9006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.068480][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.092306][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.487107][ T9037] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 150.876897][ T9071] dummy0: entered allmulticast mode [ 150.883443][ T30] audit: type=1400 audit(1745366237.798:495): avc: denied { ioctl } for pid=9070 comm="syz.3.1385" path="socket:[23822]" dev="sockfs" ino=23822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.015254][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 151.049679][ T30] audit: type=1400 audit(1745366237.978:496): avc: denied { connect } for pid=9076 comm="syz.6.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 151.205512][ T9095] Failed to get privilege flags for destination (handle=0x2:0x0) [ 151.747625][ T5874] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 151.797283][ T5878] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 151.909533][ T5874] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.925481][ T5874] usb 7-1: config 0 has no interface number 0 [ 151.932332][ T5874] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 151.943606][ T5874] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 151.954377][ T5874] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 151.957575][ T909] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 151.963798][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 151.976189][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.988520][ T5878] usb 5-1: unable to get BOS descriptor set [ 151.999175][ T5878] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 152.009723][ T5874] usb 7-1: config 0 descriptor?? [ 152.014864][ T5878] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 152.025638][ T9117] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 152.032899][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.045333][ T5874] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 152.057281][ T5878] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.066382][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.076158][ T5878] usb 5-1: Product: syz [ 152.080751][ T5878] usb 5-1: Manufacturer: syz [ 152.085383][ T5878] usb 5-1: SerialNumber: syz [ 152.131063][ T909] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.141230][ T909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.151252][ T909] usb 4-1: Product: syz [ 152.155446][ T909] usb 4-1: Manufacturer: syz [ 152.161859][ T909] usb 4-1: SerialNumber: syz [ 152.173173][ T909] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 152.193353][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 152.265824][ T909] usb 7-1: USB disconnect, device number 4 [ 152.315648][ T5878] usb 5-1: 0:2 : does not exist [ 152.348766][ T5878] usb 5-1: USB disconnect, device number 16 [ 152.483437][ T30] audit: type=1326 audit(1745366239.408:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc638e169 code=0x7ffc0000 [ 152.507811][ T30] audit: type=1326 audit(1745366239.408:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc638e169 code=0x7ffc0000 [ 152.531567][ T30] audit: type=1326 audit(1745366239.408:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0dc638e169 code=0x7ffc0000 [ 152.555596][ T30] audit: type=1326 audit(1745366239.408:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc638e169 code=0x7ffc0000 [ 152.588811][ T30] audit: type=1326 audit(1745366239.408:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc638e169 code=0x7ffc0000 [ 152.614008][ T30] audit: type=1326 audit(1745366239.408:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f0dc638e169 code=0x7ffc0000 [ 152.640470][ T30] audit: type=1326 audit(1745366239.418:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc638e169 code=0x7ffc0000 [ 152.664189][ T30] audit: type=1326 audit(1745366239.418:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc638e169 code=0x7ffc0000 [ 153.016927][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.041394][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.097242][ T5872] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 153.157974][ T30] audit: type=1400 audit(1745366240.078:505): avc: denied { create } for pid=9179 comm="syz.2.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 153.198156][ T9153] [U] . [ 153.240346][ T9186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1436'. [ 153.253676][ T30] audit: type=1400 audit(1745366240.168:506): avc: denied { write } for pid=9179 comm="syz.2.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 153.281179][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 153.300841][ T5872] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 153.322306][ T24] ath9k_htc: Failed to initialize the device [ 153.335452][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.341192][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.357667][ T5872] usb 7-1: config 0 descriptor?? [ 153.366668][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.374604][ T5872] gspca_main: spca508-2.14.0 probing 8086:0110 [ 153.400326][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 153.413143][ T5878] usb 4-1: USB disconnect, device number 13 [ 153.578537][ T5872] gspca_spca508: reg_read err -32 [ 153.795967][ T5872] gspca_spca508: reg_read err -71 [ 153.801966][ T5872] gspca_spca508: reg_read err -71 [ 153.817703][ T5872] gspca_spca508: reg_read err -71 [ 153.823099][ T5872] gspca_spca508: reg write: error -71 [ 153.832189][ T5872] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 153.843399][ T5872] usb 7-1: USB disconnect, device number 5 [ 154.160451][ T9234] netlink: 'syz.3.1460': attribute type 11 has an invalid length. [ 154.176560][ T9234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1460'. [ 154.338258][ T9250] bpf: Bad value for 'gid' [ 154.724080][ T9279] netlink: 368 bytes leftover after parsing attributes in process `syz.0.1482'. [ 154.957666][ T5874] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 155.131530][ T5874] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.145094][ T5874] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 155.147354][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 155.156763][ T5874] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 155.171864][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.187816][ T5874] usb 7-1: config 0 descriptor?? [ 155.204439][ T5874] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 155.214708][ T5874] dvb-usb: bulk message failed: -22 (3/0) [ 155.231893][ T5874] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 155.248586][ T5874] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 155.260037][ T5874] usb 7-1: media controller created [ 155.271605][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.289170][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 155.295269][ T5874] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 155.318729][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 155.330505][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.339132][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input24 [ 155.346224][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.363320][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 155.378776][ T24] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 155.382614][ T5874] dvb-usb: schedule remote query interval to 150 msecs. [ 155.389002][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.394889][ T5874] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 155.404907][ T24] usb 1-1: config 0 descriptor?? [ 155.422757][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.439120][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.513194][ T5872] usb 7-1: USB disconnect, device number 6 [ 155.548978][ T5872] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 155.662876][ T9310] netlink: 'syz.4.1497': attribute type 9 has an invalid length. [ 155.671966][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 155.694814][ T9310] hsr0: entered promiscuous mode [ 155.707843][ T9310] macvlan2: entered promiscuous mode [ 155.717511][ T9310] macvlan2: entered allmulticast mode [ 155.726352][ T9310] hsr0: entered allmulticast mode [ 155.731552][ T9310] bond0: entered allmulticast mode [ 155.738520][ T9310] bond_slave_0: entered allmulticast mode [ 155.744332][ T9310] bond_slave_1: entered allmulticast mode [ 155.750627][ T9310] batadv0: entered allmulticast mode [ 155.758489][ T9310] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.774850][ T9315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.784629][ T9315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.898210][ T24] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 155.906348][ T24] shield 0003:0955:7214.000B: reserved main item tag 0xe [ 155.925529][ T24] shield 0003:0955:7214.000B: item fetching failed at offset 4/5 [ 155.944369][ T24] shield 0003:0955:7214.000B: Parse failed [ 155.957429][ T24] shield 0003:0955:7214.000B: probe with driver shield failed with error -22 [ 156.112695][ T5878] usb 1-1: USB disconnect, device number 17 [ 156.178493][ T5874] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 156.335407][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1512'. [ 156.345904][ T5874] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 156.354354][ T5874] usb 5-1: config 0 has no interface number 0 [ 156.366810][ T5874] usb 5-1: config 0 interface 41 has no altsetting 0 [ 156.376509][ T5874] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 156.390710][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.400348][ T5874] usb 5-1: Product: syz [ 156.404541][ T5874] usb 5-1: Manufacturer: syz [ 156.409298][ T5874] usb 5-1: SerialNumber: syz [ 156.424774][ T5874] usb 5-1: config 0 descriptor?? [ 156.600592][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.609468][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.248794][ T5874] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 157.275949][ T5874] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 157.301348][ T5874] usb 5-1: USB disconnect, device number 17 [ 157.420800][ T1204] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 157.577368][ T1204] usb 4-1: Using ep0 maxpacket: 8 [ 157.592586][ T1204] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 157.603578][ T1204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.613686][ T1204] usb 4-1: config 0 descriptor?? [ 157.831195][ T1204] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 157.882772][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 157.962624][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 157.962642][ T30] audit: type=1400 audit(1745366244.888:515): avc: denied { ioctl } for pid=9425 comm="syz.4.1551" path="socket:[25744]" dev="sockfs" ino=25744 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 158.092052][ T9434] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.101089][ T9434] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.284548][ T30] audit: type=1400 audit(1745366245.198:516): avc: denied { connect } for pid=9441 comm="syz.2.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.435905][ T1204] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 158.467252][ T1204] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 158.497698][ T1204] asix 4-1:0.0: probe with driver asix failed with error -71 [ 158.517404][ T1204] usb 4-1: USB disconnect, device number 14 [ 158.665230][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1572'. [ 158.729331][ T9473] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1574'. [ 159.199932][ T9503] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 159.402258][ T30] audit: type=1400 audit(1745366246.328:517): avc: denied { mounton } for pid=9515 comm="syz.2.1594" path="/330/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 159.433119][ T9519] QAT: Device 7 not found [ 159.647386][ T30] audit: type=1326 audit(1745366246.568:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.6.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfeb8e169 code=0x7fc00000 [ 159.678327][ T9532] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 159.719232][ T30] audit: type=1326 audit(1745366246.568:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.6.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3dfeb8e169 code=0x7fc00000 [ 159.742452][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.747560][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 159.784770][ T30] audit: type=1326 audit(1745366246.568:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.6.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfeb8e169 code=0x7fc00000 [ 159.808088][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.815846][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1604'. [ 159.834013][ T30] audit: type=1326 audit(1745366246.568:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.6.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfeb8e169 code=0x7fc00000 [ 159.857342][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.924111][ T30] audit: type=1326 audit(1745366246.568:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.6.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfeb8e169 code=0x7fc00000 [ 159.969388][ T30] audit: type=1326 audit(1745366246.568:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.6.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfeb8e169 code=0x7fc00000 [ 159.992691][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.016392][ T30] audit: type=1326 audit(1745366246.568:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.6.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfeb8e169 code=0x7fc00000 [ 160.039714][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.352247][ T9569] netlink: 'syz.0.1618': attribute type 21 has an invalid length. [ 160.369791][ T9569] netlink: 'syz.0.1618': attribute type 20 has an invalid length. [ 160.470390][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1622'. [ 160.486113][ T9578] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1622'. [ 161.373354][ T909] kernel write not supported for file [eventfd] (pid: 909 comm: kworker/1:2) [ 161.401780][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 161.503460][ T9649] kernel read not supported for file /eth0 (pid: 9649 comm: syz.2.1654) [ 161.589651][ T24] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 161.613417][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.623409][ T24] usb 4-1: Product: syz [ 161.628492][ T24] usb 4-1: Manufacturer: syz [ 161.633680][ T24] usb 4-1: SerialNumber: syz [ 161.640908][ T24] usb 4-1: config 0 descriptor?? [ 161.649723][ T24] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 161.654397][ T9661] 9p: Unknown access argument c: -22 [ 162.483977][ T24] usb 4-1: USB disconnect, device number 15 [ 162.577284][ T1204] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 162.690115][ T9722] blkio.reset_stats is deprecated [ 162.728430][ T1204] usb 1-1: Using ep0 maxpacket: 32 [ 162.741953][ T1204] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.753478][ T1204] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 162.770223][ T1204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.781761][ T1204] usb 1-1: Product: syz [ 162.786083][ T1204] usb 1-1: Manufacturer: syz [ 162.793238][ T1204] usb 1-1: SerialNumber: syz [ 162.803233][ T1204] usb 1-1: config 0 descriptor?? [ 163.232539][ T1204] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 163.419103][ T5874] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 163.474238][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 163.581359][ T5874] usb 5-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 163.583068][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 163.583086][ T30] audit: type=1400 audit(1745366250.508:539): avc: denied { append } for pid=9772 comm="syz.2.1705" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 163.621239][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.621281][ T5874] usb 5-1: Product: syz [ 163.621296][ T5874] usb 5-1: Manufacturer: syz [ 163.621312][ T5874] usb 5-1: SerialNumber: syz [ 163.625188][ T9773] random: crng reseeded on system resumption [ 163.652044][ T30] audit: type=1400 audit(1745366250.548:540): avc: denied { open } for pid=9772 comm="syz.2.1705" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 163.653120][ T1204] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 163.675354][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.693778][ T5874] usb 5-1: config 0 descriptor?? [ 163.706699][ T5874] go7007 5-1:0.0: Sensoray 2250 found [ 163.712801][ T5874] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 163.753332][ T1204] usb 1-1: USB disconnect, device number 18 [ 163.884182][ T30] audit: type=1400 audit(1745366250.808:541): avc: denied { ioctl } for pid=9772 comm="syz.2.1705" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 163.909014][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.920137][ T30] audit: type=1400 audit(1745366250.848:542): avc: denied { write } for pid=9781 comm="syz.6.1709" path="socket:[27656]" dev="sockfs" ino=27656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 163.943337][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.968826][ T5874] usb 5-1: USB disconnect, device number 18 [ 164.028088][ T30] audit: type=1400 audit(1745366250.958:543): avc: denied { map } for pid=9787 comm="syz.6.1712" path="socket:[26479]" dev="sockfs" ino=26479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 164.056143][ T30] audit: type=1400 audit(1745366250.958:544): avc: denied { setopt } for pid=9787 comm="syz.6.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.409918][ T53] Bluetooth: hci5: Frame reassembly failed (-84) [ 165.107567][ T5874] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 165.250889][ T9864] : renamed from bond0 (while UP) [ 165.283554][ T5874] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.292971][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.313977][ T5874] usb 4-1: Product: syz [ 165.321645][ T5874] usb 4-1: Manufacturer: syz [ 165.326851][ T9866] ALSA: mixer_oss: invalid OSS volume '' [ 165.336165][ T5874] usb 4-1: SerialNumber: syz [ 165.346382][ T5874] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 165.370368][ T5878] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 165.501788][ T30] audit: type=1400 audit(1745366252.428:545): avc: denied { write } for pid=9875 comm="syz.2.1753" path="socket:[27797]" dev="sockfs" ino=27797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 165.575511][ T9879] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 165.601084][ T30] audit: type=1400 audit(1745366252.528:546): avc: denied { read } for pid=9847 comm="syz.3.1740" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 165.629447][ T9880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.631132][ T30] audit: type=1400 audit(1745366252.528:547): avc: denied { open } for pid=9847 comm="syz.3.1740" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 165.649545][ T9880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.882832][ T9893] bridge_slave_0: default FDB implementation only supports local addresses [ 166.038022][ T909] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 166.059703][ T5874] usb 4-1: USB disconnect, device number 16 [ 166.208118][ T909] usb 7-1: Using ep0 maxpacket: 8 [ 166.221103][ T909] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 166.232722][ T909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.244205][ T909] usb 7-1: Product: syz [ 166.252120][ T909] usb 7-1: Manufacturer: syz [ 166.256875][ T909] usb 7-1: SerialNumber: syz [ 166.264298][ T909] usb 7-1: config 0 descriptor?? [ 166.365490][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.375389][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.397539][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 166.484167][ T909] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 166.637332][ T5878] usb 4-1: Service connection timeout for: 256 [ 166.643635][ T5878] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 166.655209][ T5878] ath9k_htc: Failed to initialize the device [ 166.669787][ T5874] usb 4-1: ath9k_htc: USB layer deinitialized [ 166.942488][ T30] audit: type=1400 audit(1745366253.868:548): avc: denied { bind } for pid=9943 comm="syz.2.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.085107][ T909] gspca_sunplus: reg_w_riv err -71 [ 167.092854][ T909] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 167.112375][ T909] usb 7-1: USB disconnect, device number 7 [ 167.591919][ T9987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.780414][T10001] loop7: detected capacity change from 0 to 2 [ 167.800454][T10001] Dev loop7: unable to read RDB block 2 [ 167.813231][T10001] loop7: unable to read partition table [ 167.823616][T10001] loop7: partition table beyond EOD, truncated [ 167.846441][T10001] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 167.846441][T10001] ) failed (rc=-5) [ 168.065287][T10022] input: syz0 as /devices/virtual/input/input25 [ 168.088096][ T909] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 168.263898][ T909] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.273140][ T909] usb 7-1: config 0 has no interface number 0 [ 168.288776][ T909] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 168.301075][ T909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.341227][ T909] usb 7-1: Product: syz [ 168.345777][ T909] usb 7-1: Manufacturer: syz [ 168.354376][ T909] usb 7-1: SerialNumber: syz [ 168.365200][ T909] usb 7-1: config 0 descriptor?? [ 168.587735][ T909] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 168.609322][ T909] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.621726][ T909] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 168.630246][ T909] usb 7-1: media controller created [ 168.652626][ T909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.719249][T10061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.732563][T10061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.789023][ T909] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 168.819792][ T909] usb 7-1: USB disconnect, device number 8 [ 169.380940][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 169.380956][ T30] audit: type=1400 audit(1745366256.308:550): avc: denied { shutdown } for pid=10076 comm="syz.6.1846" laddr=::1 lport=255 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.645418][T10097] bond0: (slave bond1): Error -95 calling ndo_bpf [ 169.653607][T10097] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.940558][ T30] audit: type=1400 audit(1745366256.872:551): avc: denied { getopt } for pid=10108 comm="syz.4.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 170.267708][ T5871] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 170.348440][ T5878] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 170.397620][ T5874] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 170.419237][ T5871] usb 5-1: config 129 has an invalid interface number: 112 but max is 0 [ 170.447765][ T5871] usb 5-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 170.467264][ T5871] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 170.480368][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 170.482521][ T5871] usb 5-1: config 129 has no interface number 0 [ 170.496326][ T5871] usb 5-1: config 129 interface 112 has no altsetting 0 [ 170.504142][ T5871] usb 5-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=62.bd [ 170.513917][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.527791][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 170.545234][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.574028][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 170.595886][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 170.601275][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.612440][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.640226][ T5874] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 170.648551][ T5874] usb 4-1: config 0 has no interface number 0 [ 170.654903][ T5874] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.664285][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1872'. [ 170.666421][ T5874] usb 4-1: config 0 interface 85 has no altsetting 0 [ 170.684609][ T5878] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 170.696113][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.704937][ T5878] usb 1-1: Product: syz [ 170.711715][ T5878] usb 1-1: Manufacturer: syz [ 170.716471][ T5874] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 170.725917][ T5878] usb 1-1: SerialNumber: syz [ 170.735586][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.744358][ T5878] usb 1-1: config 0 descriptor?? [ 170.760580][ T5874] usb 4-1: Product: syz [ 170.764879][ T5874] usb 4-1: Manufacturer: syz [ 170.770419][ T5878] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 170.790904][ T5874] usb 4-1: SerialNumber: syz [ 170.793581][ T909] usb 5-1: USB disconnect, device number 19 [ 170.803383][ T5874] usb 4-1: config 0 descriptor?? [ 170.968596][ T5878] imon:send_packet: packet tx failed (-71) [ 170.998688][ T5878] imon 1-1:0.0: panel buttons/knobs setup failed [ 171.077439][ T5878] rc_core: IR keymap rc-imon-pad not found [ 171.083367][ T5878] Registered IR keymap rc-empty [ 171.091428][ T5878] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 171.101778][ T5878] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 171.113271][ T5878] imon:send_packet: packet tx failed (-71) [ 171.137366][ T5878] imon 1-1:0.0: remote input dev register failed [ 171.145603][ T5878] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 171.180951][ T5878] imon 1-1:0.0: unable to initialize intf0, err 0 [ 171.189881][ T5878] imon:imon_probe: failed to initialize context! [ 171.196959][ T5878] imon 1-1:0.0: unable to register, err -19 [ 171.206572][ T5878] usb 1-1: USB disconnect, device number 19 [ 171.312944][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'. [ 171.431127][ T5874] appletouch 4-1:0.85: Geyser mode initialized. [ 171.447320][ T5874] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input27 [ 171.723366][ T5874] usb 4-1: USB disconnect, device number 17 [ 171.748167][ T5874] appletouch 4-1:0.85: input: appletouch disconnected [ 171.756008][T10173] nvme_fabrics: missing parameter 'transport=%s' [ 171.766364][T10173] nvme_fabrics: missing parameter 'nqn=%s' [ 171.838291][ T5871] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 172.027861][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 172.040115][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.046873][ T5871] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 172.073621][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.099727][ T5871] usb 1-1: config 0 descriptor?? [ 172.521750][ T5871] hid (null): unknown global tag 0xd [ 172.798820][ T909] usb 1-1: USB disconnect, device number 20 [ 173.377941][ T909] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 173.526634][ T5872] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz1 [ 173.538514][ T909] usb 7-1: Using ep0 maxpacket: 32 [ 173.552094][ T909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.572640][ T909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.588264][ T909] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 173.604611][ T909] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 173.616521][ T909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.629419][ T909] usb 7-1: config 0 descriptor?? [ 173.692194][ T30] audit: type=1400 audit(1745366260.622:552): avc: denied { ioctl } for pid=10270 comm="syz.0.1930" path="socket:[30804]" dev="sockfs" ino=30804 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.871679][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 173.964027][T10282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1936'. [ 174.074509][ T909] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000E/input/input29 [ 174.103368][ T30] audit: type=1400 audit(1745366261.032:553): avc: denied { watch_reads } for pid=10290 comm="syz.3.1939" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.127448][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.154052][ T909] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000E/input/input30 [ 174.193123][ T909] kye 0003:0458:5011.000E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 174.367591][ T909] usb 7-1: USB disconnect, device number 9 [ 174.700162][T10326] random: crng reseeded on system resumption [ 175.018704][T10334] nvme_fabrics: missing parameter 'transport=%s' [ 175.025223][T10334] nvme_fabrics: missing parameter 'nqn=%s' [ 176.200169][ T30] audit: type=1400 audit(1745366263.122:554): avc: denied { bind } for pid=10367 comm="syz.0.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.303043][T10380] loop6: detected capacity change from 0 to 524287999 [ 176.400598][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1981'. [ 176.512625][ T30] audit: type=1400 audit(1745366263.442:555): avc: denied { create } for pid=10395 comm="syz.4.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 176.578491][ T30] audit: type=1400 audit(1745366263.462:556): avc: denied { append } for pid=10395 comm="syz.4.1989" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.612361][ T30] audit: type=1400 audit(1745366263.472:557): avc: denied { write } for pid=10395 comm="syz.4.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 176.722934][ T30] audit: type=1400 audit(1745366263.652:558): avc: denied { bind } for pid=10407 comm="syz.4.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 176.824049][T10412] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 176.829887][T10412] pim6reg0: persist disabled [ 176.847346][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 176.997332][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 177.007865][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 177.020887][ T24] usb 1-1: config 0 has no interface number 0 [ 177.042694][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 177.056123][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 177.075062][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.089854][ T24] usb 1-1: Product: syz [ 177.127310][ T24] usb 1-1: Manufacturer: syz [ 177.132012][ T24] usb 1-1: SerialNumber: syz [ 177.139832][ T24] usb 1-1: config 0 descriptor?? [ 177.148311][ T24] smsc75xx v1.0.0 [ 177.151999][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 177.179182][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 177.402058][ T24] usb 1-1: USB disconnect, device number 21 [ 178.106266][T10450] rtc_cmos 00:00: Alarms can be up to one day in the future [ 178.137241][ T30] audit: type=1800 audit(1745366265.062:559): pid=10445 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2009" name="cgroup.controllers" dev="tmpfs" ino=2291 res=0 errno=0 [ 178.249720][T10456] input: syz0 as /devices/virtual/input/input31 [ 178.486539][T10466] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.622892][T10469] veth0_to_team: entered promiscuous mode [ 178.637528][T10469] veth0_to_team: entered allmulticast mode [ 178.917669][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'. [ 178.945236][ T30] audit: type=1400 audit(1745366265.872:560): avc: denied { map } for pid=10491 comm="syz.3.2032" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 178.979056][T10490] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 178.996233][T10490] macsec2: entered allmulticast mode [ 179.012432][T10490] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 179.021125][ T5878] rtc_cmos 00:00: Alarms can be up to one day in the future [ 179.027665][ T909] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 179.037525][ T5878] rtc_cmos 00:00: Alarms can be up to one day in the future [ 179.047980][ T5878] rtc_cmos 00:00: Alarms can be up to one day in the future [ 179.055787][T10490] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 179.063129][ T5878] rtc_cmos 00:00: Alarms can be up to one day in the future [ 179.063170][ T5878] rtc rtc0: __rtc_set_alarm: err=-22 [ 179.081447][T10490] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 179.239258][ T909] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 179.260734][ T909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.290416][ T909] usb 7-1: Product: syz [ 179.294611][ T909] usb 7-1: Manufacturer: syz [ 179.310214][ T909] usb 7-1: SerialNumber: syz [ 179.324062][ T909] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 179.353096][ T5871] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 179.691386][T10517] input: syz0 as /devices/virtual/input/input32 [ 179.812084][ T30] audit: type=1400 audit(1745366266.742:561): avc: denied { ioctl } for pid=10524 comm="syz.2.2049" path="socket:[31270]" dev="sockfs" ino=31270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 179.832469][ T909] usb 7-1: USB disconnect, device number 10 [ 179.847707][ T53] wlan1: Trigger new scan to find an IBSS to join [ 179.874376][ T30] audit: type=1326 audit(1745366266.772:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.0.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0af8e169 code=0x7fc00000 [ 180.398126][ T5871] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 180.405602][ T5871] ath9k_htc: Failed to initialize the device [ 180.438707][ T909] usb 7-1: ath9k_htc: USB layer deinitialized [ 180.523327][ T30] audit: type=1400 audit(1745366267.452:563): avc: denied { setopt } for pid=10566 comm="syz.6.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.535468][T10576] lo speed is unknown, defaulting to 1000 [ 180.556806][T10576] lo speed is unknown, defaulting to 1000 [ 180.587042][T10576] lo speed is unknown, defaulting to 1000 [ 180.625058][T10576] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 180.675374][T10576] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 180.726496][T10576] lo speed is unknown, defaulting to 1000 [ 180.735700][T10576] lo speed is unknown, defaulting to 1000 [ 180.742805][T10576] lo speed is unknown, defaulting to 1000 [ 180.751863][T10576] lo speed is unknown, defaulting to 1000 [ 180.759115][T10576] lo speed is unknown, defaulting to 1000 [ 180.863679][T10588] SELinux: failed to load policy [ 181.107569][ T5878] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 181.136057][T10611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.279091][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 181.308098][ T5878] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 181.320122][ T5878] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.357750][ T5878] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.377132][ T5878] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.407330][ T5878] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.434570][ T5878] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 181.452305][ T5878] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.485372][ T5878] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.511890][ T5878] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.538389][ T5878] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.561882][ T5878] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 181.569393][ T5878] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.593851][ T5878] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.636969][ T5878] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.659032][ T5878] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.690166][ T5878] usb 5-1: string descriptor 0 read error: -22 [ 181.696548][ T5878] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 181.712630][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.739096][ T5878] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 181.756705][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2097'. [ 181.958238][ T909] usb 5-1: USB disconnect, device number 20 [ 182.030574][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 182.041443][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'. [ 182.159788][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'. [ 182.596722][T10677] xt_hashlimit: size too large, truncated to 1048576 [ 182.874096][T10701] vivid-002: disconnect [ 182.893017][ T36] wlan1: Trigger new scan to find an IBSS to join [ 183.059547][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.067184][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.237247][ T909] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 183.418454][ T909] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 183.428229][ T909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.448400][ T909] usb 1-1: config 0 descriptor?? [ 183.458305][ T909] cp210x 1-1:0.0: cp210x converter detected [ 183.633232][T10694] vivid-002: reconnect [ 183.895858][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 183.895877][ T30] audit: type=1400 audit(1745366270.822:567): avc: denied { nlmsg_write } for pid=10733 comm="syz.2.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 184.065003][ T909] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 184.073932][ T909] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 184.102244][ T909] usb 1-1: cp210x converter now attached to ttyUSB0 [ 184.139731][ T909] usb 1-1: USB disconnect, device number 22 [ 184.159796][ T909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.188076][ T909] cp210x 1-1:0.0: device disconnected [ 184.483304][ T30] audit: type=1400 audit(1745366271.412:568): avc: denied { getattr } for pid=10750 comm="syz.6.2153" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=32828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.500737][T10754] sg_read: process 1050 (syz.2.2154) changed security contexts after opening file descriptor, this is not allowed. [ 184.544467][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'. [ 184.874835][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 184.953996][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2171'. [ 185.165956][T10793] rdma_rxe: rxe_newlink: failed to add lo [ 185.325627][ T30] audit: type=1400 audit(1745366272.252:569): avc: denied { remount } for pid=10812 comm="syz.6.2182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 185.448267][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 185.548549][ T5871] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 185.597260][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 185.610754][ T24] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 185.627295][ T24] usb 4-1: config 0 has no interface number 0 [ 185.643646][ T24] usb 4-1: config 0 interface 2 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.656346][ T24] usb 4-1: config 0 interface 2 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.676365][ T24] usb 4-1: config 0 interface 2 has no altsetting 0 [ 185.696579][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.08 [ 185.716650][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 185.722008][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.738295][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.746838][ T5871] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 185.754684][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 185.758342][ T24] usb 4-1: config 0 descriptor?? [ 185.780232][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.797506][ T5871] usb 1-1: Product: syz [ 185.804477][ T5871] usb 1-1: Manufacturer: syz [ 185.809392][ T5871] usb 1-1: SerialNumber: syz [ 185.816363][ T5871] usb 1-1: config 0 descriptor?? [ 185.847950][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.218670][ T24] logitech-djreceiver 0003:046D:C517.000F: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.3-1/input2 [ 186.254766][ T5871] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 186.441264][ T1204] usb 4-1: USB disconnect, device number 18 [ 186.588182][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2200'. [ 186.656754][ T5871] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 186.674901][ T5871] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 186.686149][ T5871] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 186.699502][ T5871] usb 1-1: USB disconnect, device number 23 [ 186.842121][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 186.980381][ T5878] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 187.137339][ T5878] usb 7-1: Using ep0 maxpacket: 32 [ 187.157900][ T5878] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 187.171692][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.195147][ T5878] usb 7-1: config 0 descriptor?? [ 187.218433][ T5878] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 187.505193][T10897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.550478][T10883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.577627][T10883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.794345][T10913] block device autoloading is deprecated and will be removed. [ 187.809865][ T30] audit: type=1400 audit(1745366274.742:570): avc: denied { mounton } for pid=10914 comm="syz.4.2231" path=2F3437352FE91F7189591E9233614B dev="tmpfs" ino=2445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 187.827473][T10913] syz.0.2230: attempt to access beyond end of device [ 187.827473][T10913] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 187.834581][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.854162][ T5878] gspca_nw80x: reg_w err -71 [ 187.863270][ T5878] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 187.872640][ T5878] usb 7-1: USB disconnect, device number 11 [ 188.079571][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2239'. [ 188.088731][T10932] netlink: 'syz.0.2239': attribute type 5 has an invalid length. [ 188.185597][T10936] lo speed is unknown, defaulting to 1000 [ 188.209288][T10941] netlink: 'syz.0.2242': attribute type 13 has an invalid length. [ 188.335985][T10941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.507132][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2248'. [ 188.880703][ T30] audit: type=1400 audit(1745366275.802:571): avc: denied { mounton } for pid=10973 comm="syz.3.2261" path="/441/file0" dev="pstore" ino=3648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 188.903426][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.914885][T10979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.919189][T10976] Invalid source name [ 189.316731][T11002] netlink: 'syz.0.2271': attribute type 3 has an invalid length. [ 189.339402][ T30] audit: type=1400 audit(1745366276.272:572): avc: denied { ioctl } for pid=11003 comm="syz.6.2272" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 189.507937][ T5872] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 189.567576][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 189.667259][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 189.674991][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.692294][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.702429][ T5872] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 189.711731][ T5871] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 189.725660][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.737379][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 189.751586][ T24] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 189.762819][ T5872] usb 5-1: config 0 descriptor?? [ 189.768043][ T24] usb 4-1: config 8 has no interface number 0 [ 189.774475][ T24] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 189.787862][ T24] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 189.791015][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2279'. [ 189.800321][ T24] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 189.818824][ T24] usb 4-1: config 8 interface 39 has no altsetting 0 [ 189.831438][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 189.852327][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.861445][ T24] usb 4-1: Product: syz [ 189.865682][ T24] usb 4-1: Manufacturer: syz [ 189.871033][ T24] usb 4-1: SerialNumber: syz [ 189.897828][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 189.905784][ T5871] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 189.919639][ T5871] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 189.929423][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 189.937787][ T5871] usb 1-1: Product: syz [ 189.942065][ T5871] usb 1-1: Manufacturer: syz [ 189.946695][ T5871] usb 1-1: SerialNumber: syz [ 189.955397][ T5871] usb 1-1: config 0 descriptor?? [ 189.962061][T11012] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 189.970799][ T5871] hub 1-1:0.0: bad descriptor, ignoring hub [ 189.976829][ T5871] hub 1-1:0.0: probe with driver hub failed with error -5 [ 190.177928][T11012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.186716][T11012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.219172][T11030] loop8: detected capacity change from 0 to 1 [ 190.220183][ T5872] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0010/input/input33 [ 190.226030][T11030] Dev loop8: unable to read RDB block 1 [ 190.242421][ T5872] sony 0003:054C:03D5.0010: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 190.254238][T11030] loop8: unable to read partition table [ 190.260063][T11030] loop8: partition table beyond EOD, truncated [ 190.266207][T11030] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 190.309989][ T9] usb 1-1: USB disconnect, device number 24 [ 190.434846][ T5872] usb 5-1: USB disconnect, device number 21 [ 190.484830][ T24] ipheth 4-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 190.504478][ T24] ipheth 4-1:8.39: Apple iPhone USB Ethernet device attached [ 190.521297][ T24] usb 4-1: USB disconnect, device number 19 [ 190.568334][ T24] ipheth 4-1:8.39: Apple iPhone USB Ethernet now disconnected [ 191.198070][ T5836] Bluetooth: hci2: command 0x0401 tx timeout [ 191.199386][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 191.204115][ T5140] Bluetooth: hci4: command 0x0406 tx timeout [ 191.866924][T11087] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.2310'. [ 191.880322][ T5871] usb 3-1: USB disconnect, device number 10 [ 192.076085][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.214854][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.265132][T11103] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 192.404530][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.496175][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.514262][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.526399][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.536769][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.545403][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.572451][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.646791][T11115] lo speed is unknown, defaulting to 1000 [ 192.657492][ T5871] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 192.766853][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'. [ 192.817636][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 192.829355][ T5871] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 192.883789][ T5871] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 192.917365][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.925406][ T5871] usb 7-1: Product: syz [ 192.963265][ T5871] usb 7-1: Manufacturer: syz [ 192.976635][ T5871] usb 7-1: SerialNumber: syz [ 192.992600][ T5871] usb 7-1: config 0 descriptor?? [ 193.008150][T11113] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 193.020656][ T5871] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input34 [ 193.133788][T11115] chnl_net:caif_netlink_parms(): no params data found [ 193.171976][T11140] sp0: Synchronizing with TNC [ 193.253896][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 193.375190][ T30] audit: type=1400 audit(1745366280.302:573): avc: denied { append } for pid=11147 comm="syz.4.2338" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.426339][ T24] usb 7-1: USB disconnect, device number 12 [ 193.432878][ C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 193.447850][ T62] bridge_slave_1: left allmulticast mode [ 193.458408][ T62] bridge_slave_1: left promiscuous mode [ 193.474510][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.506602][ T62] bridge_slave_0: left allmulticast mode [ 193.514885][ T62] bridge_slave_0: left promiscuous mode [ 193.522854][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.903323][ T62]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.914181][ T62]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.923938][ T62]  (unregistering): Released all slaves [ 193.929809][ T5871] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 194.028563][T11115] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.035907][T11115] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.046043][T11115] bridge_slave_0: entered allmulticast mode [ 194.053723][T11115] bridge_slave_0: entered promiscuous mode [ 194.065027][T11115] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.072342][T11115] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.082153][T11115] bridge_slave_1: entered allmulticast mode [ 194.089726][T11115] bridge_slave_1: entered promiscuous mode [ 194.121432][ T5871] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.145700][ T5871] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.172704][ T5871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.195838][ T5871] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.235698][ T5871] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.236539][T11115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.261775][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.261803][ T5871] usb 1-1: Product: syz [ 194.261816][ T5871] usb 1-1: Manufacturer: syz [ 194.271272][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.277437][T11115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.287319][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.319163][ T5871] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 194.409417][T11115] team0: Port device team_slave_0 added [ 194.482209][T11115] team0: Port device team_slave_1 added [ 194.563324][ T62] hsr_slave_0: left promiscuous mode [ 194.579706][ T62] hsr_slave_1: left promiscuous mode [ 194.585631][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.598306][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 194.608227][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.616187][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.650368][ T5827] Bluetooth: hci2: command tx timeout [ 194.660986][ T62] veth1_macvtap: left promiscuous mode [ 194.669608][ T62] veth0_macvtap: left promiscuous mode [ 194.675248][ T62] veth1_vlan: left promiscuous mode [ 194.681202][ T62] veth0_vlan: left promiscuous mode [ 194.770566][ T9] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 194.778986][ T9] usb 5-1: config 0 has no interface number 0 [ 194.795574][ T9] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 194.821801][ T9] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.845845][ T9] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 194.857367][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.891713][ T9] usb 5-1: Product: syz [ 194.896053][ T9] usb 5-1: Manufacturer: syz [ 194.907224][ T9] usb 5-1: SerialNumber: syz [ 194.921305][ T9] usb 5-1: config 0 descriptor?? [ 194.928027][T11170] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.939587][ T9] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 194.962369][ T9] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 195.385530][ T5872] usb 5-1: USB disconnect, device number 22 [ 195.399455][ T5872] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 195.425140][ T5872] cyberjack 5-1:0.69: device disconnected [ 195.492734][ T62] team0 (unregistering): Port device team_slave_1 removed [ 195.560244][ T62] team0 (unregistering): Port device team_slave_0 removed [ 195.599764][T11190] raw_sendmsg: syz.6.2353 forgot to set AF_INET. Fix it! [ 195.677041][ T30] audit: type=1400 audit(1745366282.602:574): avc: denied { append } for pid=11191 comm="syz.6.2354" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 196.062130][T11115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.071488][T11115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.100203][T11115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.113676][T11115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.124855][ T5871] lo speed is unknown, defaulting to 1000 [ 196.127885][T11115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.161731][ T5871] infiniband syz2: ib_query_port failed (-19) [ 196.166887][T11115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.169650][ T5871] usb 1-1: USB disconnect, device number 25 [ 196.193184][T11185] netlink: 'syz.3.2351': attribute type 1 has an invalid length. [ 196.237697][ T1204] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 196.320525][T11115] hsr_slave_0: entered promiscuous mode [ 196.329922][T11115] hsr_slave_1: entered promiscuous mode [ 196.340517][T11115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.355888][T11115] Cannot create hsr debugfs directory [ 196.376063][ T30] audit: type=1400 audit(1745366283.302:575): avc: denied { listen } for pid=11205 comm="syz.3.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 196.417967][ T1204] usb 5-1: Using ep0 maxpacket: 16 [ 196.446445][ T1204] usb 5-1: config 0 has an invalid interface number: 198 but max is 0 [ 196.469056][ T1204] usb 5-1: config 0 has no interface number 0 [ 196.498833][ T1204] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d [ 196.515430][ T1204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.557387][ T1204] usb 5-1: Product: syz [ 196.561597][ T1204] usb 5-1: Manufacturer: syz [ 196.566208][ T1204] usb 5-1: SerialNumber: syz [ 196.597601][ T62] IPVS: stop unused estimator thread 0... [ 196.617958][ T1204] usb 5-1: config 0 descriptor?? [ 196.624424][ T30] audit: type=1400 audit(1745366283.552:576): avc: denied { create } for pid=11214 comm="syz.3.2363" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.629929][ T1204] usb_ehset_test 5-1:0.198: probe with driver usb_ehset_test failed with error -32 [ 196.663999][ T30] audit: type=1400 audit(1745366283.582:577): avc: denied { setattr } for pid=11214 comm="syz.3.2363" name="file0" dev="tmpfs" ino=2366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.717365][ T5827] Bluetooth: hci2: command tx timeout [ 196.769829][T11217] kvm: kvm [11216]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 196.834506][T11115] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 196.861981][T11115] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 196.891701][T11115] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 196.929067][T11115] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.939442][ T5878] usb 5-1: USB disconnect, device number 23 [ 197.039062][T11115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.117886][T11115] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.132559][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.139724][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.183811][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.190993][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.281860][T11115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.484518][T11115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.814592][T11115] veth0_vlan: entered promiscuous mode [ 197.836167][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2377'. [ 197.840966][T11115] veth1_vlan: entered promiscuous mode [ 197.892959][T11115] veth0_macvtap: entered promiscuous mode [ 197.916023][T11115] veth1_macvtap: entered promiscuous mode [ 197.945048][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.956223][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.967768][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.978558][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.990806][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.005632][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.015556][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.029887][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.041189][T11115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.070204][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.090896][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.112961][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.129378][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.149482][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.176419][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.203079][T11115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.243124][T11115] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.262858][T11115] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.280257][T11115] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.305163][T11115] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.509645][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.524682][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.554724][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.578938][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.759277][ T30] audit: type=1400 audit(1745366285.692:578): avc: denied { read } for pid=11292 comm="syz.3.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.800153][ T5827] Bluetooth: hci2: command tx timeout [ 198.860988][T11295] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2316'. [ 198.910502][T11301] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2395'. [ 199.462353][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 199.491300][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2413'. [ 199.511910][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2413'. [ 199.639053][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.657410][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 199.693392][T11346] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2416'. [ 199.697194][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.727504][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 199.748770][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 199.773655][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2417'. [ 199.790089][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.817215][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.836395][ T9] usb 1-1: Product: syz [ 199.847278][ T9] usb 1-1: Manufacturer: syz [ 199.858298][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 199.863553][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 199.880907][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 199.886927][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 200.092570][T11362] input: syz0 as /devices/virtual/input/input35 [ 200.121327][ T5872] usb 1-1: USB disconnect, device number 26 [ 200.397979][ T1133] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 200.712752][ T24] kernel write not supported for file /sequencer2 (pid: 24 comm: kworker/1:0) [ 200.838552][ T5871] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 200.857327][ T5872] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 200.877549][ T5827] Bluetooth: hci2: command tx timeout [ 200.997253][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 201.008801][ T5871] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 201.017897][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 201.033661][ T5871] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 201.033778][ T5872] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 201.055314][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 201.072852][ T5871] usb 5-1: config 1 has no interface number 0 [ 201.079567][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.090252][ T5871] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.101308][ T5872] usb 4-1: Product: syz [ 201.108056][ T5872] usb 4-1: Manufacturer: syz [ 201.112757][ T5871] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 201.128211][ T5872] usb 4-1: SerialNumber: syz [ 201.138091][ T5872] usb 4-1: config 0 descriptor?? [ 201.147640][ T5871] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 201.157121][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.168888][ T5872] gspca_main: se401-2.14.0 probing 047d:5003 [ 201.182143][ T5871] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 201.395934][ T5871] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 201.578685][ T5872] gspca_se401: ExtraFeatures: 255 [ 201.583811][ T5872] gspca_se401: Too many frame sizes [ 201.783840][ T5871] usb 4-1: USB disconnect, device number 20 [ 201.832541][ T5872] usb 5-1: USB disconnect, device number 24 [ 201.839915][ T5872] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 201.954220][ T30] audit: type=1400 audit(1745366288.883:579): avc: denied { create } for pid=11441 comm="syz.6.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 201.979022][ T30] audit: type=1400 audit(1745366288.913:580): avc: denied { write } for pid=11441 comm="syz.6.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 201.998410][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.099418][ T30] audit: type=1400 audit(1745366289.033:581): avc: denied { accept } for pid=11448 comm="syz.6.2462" lport=45473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.184630][ T5874] kernel write not supported for file /input/event2 (pid: 5874 comm: kworker/0:4) [ 202.270080][ T1204] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 202.427261][ T1204] usb 1-1: Using ep0 maxpacket: 32 [ 202.436627][ T1204] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 202.455093][ T1204] usb 1-1: config 0 has no interface number 1 [ 202.464467][ T1204] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 202.476207][ T1204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.487026][ T1204] usb 1-1: Product: syz [ 202.494059][ T1204] usb 1-1: Manufacturer: syz [ 202.499899][ T1204] usb 1-1: SerialNumber: syz [ 202.506883][ T1204] usb 1-1: config 0 descriptor?? [ 202.545167][ T30] audit: type=1400 audit(1745366289.473:582): avc: denied { accept } for pid=11468 comm="syz.3.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.564554][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.599746][ T1204] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 202.607310][ T5872] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 202.663811][T11476] openvswitch: netlink: IPv4 tun info is not correct [ 202.769409][ T5872] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 202.798442][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.818158][ T5873] usb 1-1: USB disconnect, device number 27 [ 202.826287][ T5872] usb 7-1: config 0 descriptor?? [ 202.840063][ T5872] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 202.992858][ T30] audit: type=1326 audit(1745366289.923:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.3.2480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb27d8e169 code=0x0 [ 203.015769][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.035232][ T9] IPVS: starting estimator thread 0... [ 203.038641][T11486] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 203.056419][ T5872] gp8psk: usb in 128 operation failed. [ 203.138854][T11495] overlayfs: failed to clone upperpath [ 203.147228][T11492] IPVS: using max 40 ests per chain, 96000 per kthread [ 203.263938][ T5872] gp8psk: usb in 146 operation failed. [ 203.269502][ T5872] gp8psk: failed to get FW version [ 203.276871][ T5872] gp8psk: FPGA Version = 245 [ 203.287256][ T1204] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 203.422634][T11505] could not open pipe file descriptor [ 203.456660][ T1204] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.469835][ T1204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 203.482158][ T5872] gp8psk: usb in 138 operation failed. [ 203.485590][ T1204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.497271][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 203.504208][ T5872] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 203.505058][ T1204] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.521657][ T5872] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 203.542926][ T1204] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 203.552346][ T1204] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 203.560000][ T5872] usb 7-1: USB disconnect, device number 13 [ 203.563241][ T1204] usb 5-1: Manufacturer: syz [ 203.574688][ T1204] usb 5-1: config 0 descriptor?? [ 203.647618][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 203.662884][ T24] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 203.673439][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.694331][ T24] usb 8-1: Product: syz [ 203.700066][ T24] usb 8-1: Manufacturer: syz [ 203.705391][ T24] usb 8-1: SerialNumber: syz [ 203.713454][ T24] usb 8-1: config 0 descriptor?? [ 203.722118][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 203.733074][ T24] usb 8-1: setting power ON [ 203.738691][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 203.749056][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.760774][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 203.769449][ T24] usb 8-1: media controller created [ 203.794921][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.839955][ T24] usb 8-1: selecting invalid altsetting 6 [ 203.871414][ T24] usb 8-1: digital interface selection failed (-22) [ 203.887332][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 203.887424][ T1204] rc_core: IR keymap rc-hauppauge not found [ 203.912772][ T24] usb 8-1: setting power OFF [ 203.923313][ T1204] Registered IR keymap rc-empty [ 203.927261][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 203.933501][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.962772][T11501] dvb-usb: bulk message failed: -22 (3/0) [ 203.969145][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 203.981282][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.988648][T11501] usb 8-1: gpio_write failed. [ 203.993881][ T24] (NULL device *): no alternate interface [ 204.001425][T11501] dvb-usb: bulk message failed: -22 (4/0) [ 204.037628][T11501] cxusb: i2c read failed [ 204.047990][ T1204] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 204.085304][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 204.098718][ T1204] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 204.135895][ T24] usb 8-1: USB disconnect, device number 2 [ 204.137482][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.237097][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.267410][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.281039][T11527] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2497'. [ 204.298453][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.317304][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.347348][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.360367][T11531] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2499'. [ 204.387323][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.417413][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.447408][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.463289][T11538] netlink: 'syz.3.2502': attribute type 4 has an invalid length. [ 204.471728][T11538] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2502'. [ 204.493211][ T1204] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.503075][T11538] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 204.527952][ T1204] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 204.539287][ T1204] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 204.554600][ T1204] usb 5-1: USB disconnect, device number 25 [ 204.560894][ T5874] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 204.717398][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 204.728306][ T5874] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.742727][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.775563][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 204.801266][ T5874] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 204.811100][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.829011][ T5874] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 204.859243][ T5874] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 204.879328][ T5874] usb 7-1: Manufacturer: syz [ 204.892309][ T5874] usb 7-1: config 0 descriptor?? [ 205.159525][ T5874] rc_core: IR keymap rc-hauppauge not found [ 205.171643][ T5874] Registered IR keymap rc-empty [ 205.186591][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.219500][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.247931][ T5874] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 205.278566][ T5874] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input37 [ 205.320486][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.328482][ T1204] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 205.370828][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.407424][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.447635][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.486567][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.529056][ T1204] usb 1-1: Using ep0 maxpacket: 32 [ 205.536902][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.547284][ T1204] usb 1-1: config 0 has no interfaces? [ 205.552790][ T1204] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 205.563427][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.574574][ T1204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.583830][ T1204] usb 1-1: config 0 descriptor?? [ 205.588947][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.617780][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.648345][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 205.657019][T11591] netlink: 'syz.3.2526': attribute type 2 has an invalid length. [ 205.665550][T11591] netlink: 'syz.3.2526': attribute type 1 has an invalid length. [ 205.674160][ T5874] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 205.683399][T11591] nbd: illegal input index 65544 [ 205.688508][ T5874] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 205.700389][ T5874] usb 7-1: USB disconnect, device number 14 [ 205.707379][ T5878] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 205.812969][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.822372][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.832895][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.841578][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.852065][ T1204] usb 1-1: USB disconnect, device number 28 [ 205.867219][ T5878] usb 8-1: Using ep0 maxpacket: 8 [ 205.875257][ T5878] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 205.884866][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.893046][ T5878] usb 8-1: Product: syz [ 205.898350][ T5878] usb 8-1: Manufacturer: syz [ 205.902958][ T5878] usb 8-1: SerialNumber: syz [ 205.908937][ T5878] usb 8-1: config 0 descriptor?? [ 205.915506][ T5878] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 205.977327][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 206.127206][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 206.133793][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 206.150991][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 206.164402][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.176571][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.192103][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.202669][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.282371][ T30] audit: type=1326 audit(1745366293.213:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7653d8e169 code=0x7ffc0000 [ 206.308323][ T1204] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 206.357292][ T30] audit: type=1326 audit(1745366293.213:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7653d8e169 code=0x7ffc0000 [ 206.401256][ T30] audit: type=1326 audit(1745366293.213:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7653d8e169 code=0x7ffc0000 [ 206.435423][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 206.442973][ T24] usbtmc 4-1:16.0: can't read capabilities [ 206.451047][ T30] audit: type=1326 audit(1745366293.213:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7653d8e169 code=0x7ffc0000 [ 206.480359][ T30] audit: type=1326 audit(1745366293.213:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7653d8e169 code=0x7ffc0000 [ 206.560105][T11603] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.566815][T11603] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 206.577041][T11603] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 206.585125][T11603] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 206.594771][T11603] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.600884][T11603] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 206.610453][T11603] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 206.618222][T11603] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.624235][T11603] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 206.631017][T11603] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 206.644792][ T5874] usb 4-1: USB disconnect, device number 21 [ 206.927598][ T5878] gspca_sonixj: reg_w1 err -71 [ 207.018018][ T5878] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 207.036398][ T5878] usb 8-1: USB disconnect, device number 3 [ 207.409656][T11643] pim6reg1: entered promiscuous mode [ 207.415010][T11643] pim6reg1: entered allmulticast mode [ 207.538571][ T1204] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 207.689376][ T1204] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.697576][ T5878] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 207.712506][ T1204] usb 7-1: config 0 has no interface number 0 [ 207.719626][ T1204] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 207.731408][ T1204] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 207.742318][ T1204] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 207.751418][ T1204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.761594][ T1204] usb 7-1: config 0 descriptor?? [ 207.771558][T11637] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 207.784106][ T1204] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 207.857938][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 207.864821][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.885656][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.895522][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.908661][ T5878] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 207.919677][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.932871][ T5878] usb 5-1: config 0 descriptor?? [ 207.938105][T11665] vlan2: entered promiscuous mode [ 207.943557][T11665] veth1_virt_wifi: entered promiscuous mode [ 208.004913][ T24] usb 7-1: USB disconnect, device number 15 [ 208.057375][ T1204] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 208.217258][ T1204] usb 8-1: Using ep0 maxpacket: 32 [ 208.232537][ T1204] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.245947][ T1204] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 208.278778][ T1204] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.306675][ T1204] usb 8-1: config 0 descriptor?? [ 208.368767][ T5878] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 208.384800][ T5878] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 208.392246][ T5878] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 208.399429][ T5878] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 208.406423][ T5878] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 208.416620][ T5878] input: HID 0955:7214 Haptics as /devices/virtual/input/input38 [ 208.446600][ T5878] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 208.454923][ T5878] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 208.561929][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 208.620728][ T9] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 208.632483][ T5874] usb 5-1: USB disconnect, device number 26 [ 208.638151][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 208.638659][ T5140] Bluetooth: hci4: command 0x0406 tx timeout [ 208.644611][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.677420][ T9] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.706124][ T9] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.718106][ T9] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.735401][ T1204] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 208.967767][ T5873] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 209.021963][ T5872] usb 8-1: USB disconnect, device number 4 [ 209.130017][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.141654][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.152374][ T5873] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 209.161686][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.172908][ T5873] usb 7-1: config 0 descriptor?? [ 209.437447][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 209.444600][ T5833] Bluetooth: hci5: command 0x1003 tx timeout [ 209.496080][T11693] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 209.592111][ T5873] hid-thrustmaster 0003:044F:B65D.0013: collection stack underflow [ 209.612298][ T5873] hid-thrustmaster 0003:044F:B65D.0013: item 0 4 0 12 parsing failed [ 209.622042][ T5873] hid-thrustmaster 0003:044F:B65D.0013: parse failed with error -22 [ 209.630691][ T5873] hid-thrustmaster 0003:044F:B65D.0013: probe with driver hid-thrustmaster failed with error -22 [ 209.649891][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 209.649905][ T30] audit: type=1400 audit(1745366296.573:601): avc: denied { write } for pid=11699 comm="syz.3.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.814986][ T5872] usb 7-1: USB disconnect, device number 16 [ 209.893984][ T30] audit: type=1400 audit(1745366296.823:602): avc: denied { write } for pid=11711 comm="syz.7.2581" path="socket:[38633]" dev="sockfs" ino=38633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 210.257583][ T5874] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 210.337265][T11740] delete_channel: no stack [ 210.432446][ T5874] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.452531][ T5874] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.486180][ T5874] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.502880][ T5874] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 50824, setting to 1024 [ 210.525121][ T5874] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.562431][ T5874] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.572140][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.583704][ T5874] usb 4-1: Product: syz [ 210.588146][ T5874] usb 4-1: Manufacturer: syz [ 210.592870][ T5874] usb 4-1: SerialNumber: syz [ 210.651329][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 210.717373][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.723482][ T5833] Bluetooth: hci3: command 0x0405 tx timeout [ 210.723491][ T5140] Bluetooth: hci4: command 0x0406 tx timeout [ 210.829802][T11723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.849304][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 210.930729][T11768] syzkaller1: entered promiscuous mode [ 210.957359][T11768] syzkaller1: entered allmulticast mode [ 210.999595][ T1204] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 211.029594][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.041650][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.051601][ T9] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 211.062658][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.076077][ T9] usb 8-1: config 0 descriptor?? [ 211.162735][ T1204] usb 1-1: config 0 interface 0 has no altsetting 0 [ 211.172301][ T1204] usb 1-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 211.186245][ T1204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.201722][T11782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2613'. [ 211.211766][ T1204] usb 1-1: config 0 descriptor?? [ 211.230841][T11782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2613'. [ 211.442983][ T1204] usbhid 1-1:0.0: can't add hid device: -71 [ 211.449267][T11723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.450929][ T1204] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 211.476643][ T1204] usb 1-1: USB disconnect, device number 30 [ 211.494045][ T9] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 211.503533][ T9] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 211.512696][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0014/input/input39 [ 211.532920][ T9] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 211.670270][ T5874] cdc_ncm 4-1:1.0: bind() failure [ 211.680904][ T5874] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 211.693843][ T5874] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 211.703131][ T5874] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 211.715127][ T5874] usb 4-1: USB disconnect, device number 22 [ 211.732302][ T5872] usb 8-1: USB disconnect, device number 5 [ 211.818402][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2624'. [ 211.914698][T11808] loop8: detected capacity change from 0 to 8 [ 211.922668][T11808] Dev loop8: unable to read RDB block 8 [ 211.929522][T11808] loop8: unable to read partition table [ 211.935298][T11808] loop8: partition table beyond EOD, truncated [ 211.943023][T11808] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 212.297385][T11819] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2632'. [ 212.321562][T11819] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 212.349170][ T30] audit: type=1400 audit(1745366299.283:603): avc: denied { shutdown } for pid=11820 comm="syz.6.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 212.797514][ T5827] Bluetooth: hci3: command 0x0405 tx timeout [ 212.803665][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.096938][ T30] audit: type=1400 audit(1745366300.023:604): avc: denied { listen } for pid=11845 comm="syz.3.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 213.294450][T11852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.567922][ T30] audit: type=1400 audit(1745366300.493:605): avc: denied { create } for pid=11867 comm="syz.4.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 213.639731][ T30] audit: type=1400 audit(1745366300.533:606): avc: denied { sys_admin } for pid=11867 comm="syz.4.2655" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 213.738976][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2658'. [ 213.767224][ T30] audit: type=1400 audit(1745366300.693:607): avc: denied { setopt } for pid=11874 comm="syz.6.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.797963][T11873] 8021q: adding VLAN 0 to HW filter on device team1 [ 213.798588][ T5874] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 213.999469][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 214.036029][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 214.076610][ T5874] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 214.107749][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.127257][ T5874] usb 1-1: config 0 descriptor?? [ 214.138487][ T5874] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input40 [ 214.235804][T11892] Bluetooth: hci5: Frame reassembly failed (-84) [ 214.257442][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 214.353453][ T5185] bcm5974 1-1:0.0: could not read from device [ 214.385696][ T5874] bcm5974 1-1:0.0: could not read from device [ 214.424553][ T5185] bcm5974 1-1:0.0: could not read from device [ 214.486580][ T5874] input: failed to attach handler mousedev to device input40, error: -5 [ 214.515057][ T5185] bcm5974 1-1:0.0: could not read from device [ 214.516705][ T5874] usb 1-1: USB disconnect, device number 31 [ 214.534016][ T5185] bcm5974 1-1:0.0: could not read from device [ 214.861692][T11899] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 214.983808][ T30] audit: type=1400 audit(1745366301.913:608): avc: denied { getopt } for pid=11900 comm="syz.3.2669" lport=51031 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 215.088485][T11903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2670'. [ 215.103218][ T30] audit: type=1400 audit(1745366302.033:609): avc: denied { allowed } for pid=11904 comm="syz.3.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 215.405432][ T30] audit: type=1400 audit(1745366302.333:610): avc: denied { search } for pid=11920 comm="syz.7.2679" name="/" dev="configfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.427619][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.439888][ T30] audit: type=1400 audit(1745366302.373:611): avc: denied { mounton } for pid=11920 comm="syz.7.2679" path="/" dev="configfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.563529][ T30] audit: type=1400 audit(1745366302.493:612): avc: denied { ioctl } for pid=11923 comm="syz.4.2680" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.644674][ T30] audit: type=1400 audit(1745366302.573:613): avc: denied { read write } for pid=11115 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.688985][ T30] audit: type=1400 audit(1745366302.573:614): avc: denied { open } for pid=11115 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.689551][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 215.713080][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.751957][ T30] audit: type=1400 audit(1745366302.573:615): avc: denied { ioctl } for pid=11115 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.777537][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.805144][ T30] audit: type=1400 audit(1745366302.693:616): avc: denied { read } for pid=11934 comm="syz.7.2684" dev="nsfs" ino=4026533500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 215.826284][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.835487][ T30] audit: type=1400 audit(1745366302.693:617): avc: denied { open } for pid=11934 comm="syz.7.2684" path="net:[4026533500]" dev="nsfs" ino=4026533500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 215.858713][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.881026][ T24] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 215.896237][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.916160][T11939] input: syz0 as /devices/virtual/input/input41 [ 215.916247][ T24] usb 5-1: Product: syz [ 215.932810][ T24] usb 5-1: Manufacturer: syz [ 215.937676][ T24] usb 5-1: SerialNumber: syz [ 215.945884][ T24] usb 5-1: config 0 descriptor?? [ 215.968599][ T24] ch341 5-1:0.0: ch341-uart converter detected [ 216.032804][T11941] overlayfs: upper fs does not support file handles, falling back to index=off. [ 216.065953][T11941] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 216.223612][T11947] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 216.232524][T11947] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 216.317554][ T5833] Bluetooth: hci5: command 0x1003 tx timeout [ 216.324595][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 216.779316][ T24] usb 5-1: failed to send control message: -71 [ 216.785720][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 216.813594][ T24] usb 5-1: USB disconnect, device number 27 [ 216.836528][ T24] ch341 5-1:0.0: device disconnected [ 322.257115][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 322.264096][ C1] rcu: 0-...!: (1 GPs behind) idle=7964/1/0x4000000000000000 softirq=47517/47521 fqs=3 [ 322.274626][ C1] rcu: (detected by 1, t=10502 jiffies, g=36425, q=292 ncpus=2) [ 322.282338][ C1] Sending NMI from CPU 1 to CPUs 0: [ 322.282364][ C0] NMI backtrace for cpu 0 [ 322.282375][ C0] CPU: 0 UID: 0 PID: 11984 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 322.282391][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.282398][ C0] RIP: 0010:check_preemption_disabled+0x0/0xe0 [ 322.282422][ C0] Code: c0 75 0f 65 8b 05 cc 5e 34 08 85 c0 74 04 90 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 54 55 53 48 83 ec 08 65 8b 1d 85 24 34 08 65 8b 05 7a 24 34 08 [ 322.282434][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00000046 [ 322.282445][ C0] RAX: 0000000000000001 RBX: ffff88803267d410 RCX: 0000000000000001 [ 322.282452][ C0] RDX: 0000000000000000 RSI: ffffffff8dbca29f RDI: ffffffff8bf465c0 [ 322.282460][ C0] RBP: ffff88805af4c300 R08: 0000000000000005 R09: 0000000000000000 [ 322.282468][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803267c880 [ 322.282475][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000004 [ 322.282483][ C0] FS: 0000555575797500(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 322.282496][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.282504][ C0] CR2: 00007fca0af17b30 CR3: 000000005d888000 CR4: 00000000003526f0 [ 322.282512][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 322.282519][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 322.282527][ C0] Call Trace: [ 322.282531][ C0] [ 322.282536][ C0] lock_is_held_type+0xdf/0x150 [ 322.282554][ C0] ? __pfx_advance_sched+0x10/0x10 [ 322.282567][ C0] advance_sched+0x7b1/0xc80 [ 322.282579][ C0] ? find_held_lock+0x2b/0x80 [ 322.282596][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 322.282611][ C0] ? __pfx_advance_sched+0x10/0x10 [ 322.282622][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 322.282639][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 322.282652][ C0] ? read_tsc+0x9/0x20 [ 322.282672][ C0] hrtimer_interrupt+0x397/0x8e0 [ 322.282690][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 322.282707][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 322.282722][ C0] [ 322.282726][ C0] [ 322.282730][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.282745][ C0] RIP: 0010:qlist_free_all+0x29/0x120 [ 322.282765][ C0] Code: 90 41 57 41 56 41 55 41 54 55 53 48 8b 2f 48 85 ed 0f 84 c9 00 00 00 49 89 fe 49 89 f5 eb 38 48 63 83 c0 00 00 00 4c 8b 65 00 <48> 89 df 48 29 c5 48 89 ee e8 79 eb ff ff 49 89 c7 66 90 48 89 ee [ 322.282775][ C0] RSP: 0018:ffffc9000c617a10 EFLAGS: 00000246 [ 322.282784][ C0] RAX: 0000000000000108 RBX: ffff8881432fe3c0 RCX: ffffea0000000000 [ 322.282792][ C0] RDX: 0000000000000000 RSI: ffffffff816b84a6 RDI: 0000000000000007 [ 322.282800][ C0] RBP: ffff888079658248 R08: 0000000000000007 R09: 0000000000000000 [ 322.282807][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888066f2ef80 [ 322.282814][ C0] R13: 0000000000000000 R14: ffffc9000c617a48 R15: ffff888066f2ef40 [ 322.282829][ C0] ? __phys_addr+0xc6/0x150 [ 322.282849][ C0] ? tomoyo_encode2+0x100/0x3e0 [ 322.282869][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 322.282881][ C0] __kasan_slab_alloc+0x69/0x90 [ 322.282895][ C0] __kmalloc_noprof+0x1d4/0x510 [ 322.282910][ C0] tomoyo_encode2+0x100/0x3e0 [ 322.282928][ C0] tomoyo_encode+0x29/0x50 [ 322.282944][ C0] tomoyo_path_perm+0x3a5/0x460 [ 322.282959][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 322.282973][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 322.282988][ C0] ? d_add+0x47a/0x780 [ 322.283007][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 322.283022][ C0] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 322.283039][ C0] ? lookup_dcache+0x66/0x170 [ 322.283055][ C0] tomoyo_path_symlink+0x97/0xe0 [ 322.283065][ C0] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 322.283076][ C0] ? find_held_lock+0x2b/0x80 [ 322.283090][ C0] ? __might_fault+0xe3/0x190 [ 322.283104][ C0] security_path_symlink+0x152/0x2e0 [ 322.283121][ C0] do_symlinkat+0x10d/0x310 [ 322.283134][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 322.283146][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 322.283163][ C0] __x64_sys_symlinkat+0x93/0xc0 [ 322.283176][ C0] do_syscall_64+0xcd/0x260 [ 322.283192][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.283204][ C0] RIP: 0033:0x7fca0af8d6e7 [ 322.283215][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.283226][ C0] RSP: 002b:00007fff8898cdd8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 322.283236][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fca0af8d6e7 [ 322.283244][ C0] RDX: 00007fca0b0122bd RSI: 00000000ffffff9c RDI: 00007fca0b010e2b [ 322.283252][ C0] RBP: 00007fff8898ce1c R08: 0000000000000000 R09: 0000000000000000 [ 322.283259][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000215 [ 322.283267][ C0] R13: 00000000000927c0 R14: 000000000003500f R15: 00007fff8898ce70 [ 322.283279][ C0] [ 322.283359][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g36425 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 322.785906][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 322.795864][ C1] rcu: RCU grace-period kthread stack dump: [ 322.801736][ C1] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 322.815223][ C1] Call Trace: [ 322.818489][ C1] [ 322.821415][ C1] __schedule+0x116f/0x5de0 [ 322.825919][ C1] ? find_held_lock+0x2b/0x80 [ 322.830593][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 322.835525][ C1] ? __pfx___schedule+0x10/0x10 [ 322.840383][ C1] ? find_held_lock+0x2b/0x80 [ 322.845056][ C1] ? schedule+0x2d7/0x3a0 [ 322.849413][ C1] schedule+0xe7/0x3a0 [ 322.853499][ C1] schedule_timeout+0x123/0x290 [ 322.858346][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 322.863711][ C1] ? __pfx_process_timeout+0x10/0x10 [ 322.868994][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 322.874793][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 322.880279][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 322.885083][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 322.890378][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 322.895224][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 322.901028][ C1] rcu_gp_kthread+0x270/0x380 [ 322.905694][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 322.910879][ C1] ? rcu_is_watching+0x12/0xc0 [ 322.915639][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 322.920835][ C1] ? __kthread_parkme+0x19e/0x250 [ 322.925858][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 322.931043][ C1] kthread+0x3c2/0x780 [ 322.935103][ C1] ? __pfx_kthread+0x10/0x10 [ 322.939682][ C1] ? __pfx_kthread+0x10/0x10 [ 322.944260][ C1] ? __pfx_kthread+0x10/0x10 [ 322.948839][ C1] ? __pfx_kthread+0x10/0x10 [ 322.953418][ C1] ? rcu_is_watching+0x12/0xc0 [ 322.958175][ C1] ? __pfx_kthread+0x10/0x10 [ 322.962755][ C1] ret_from_fork+0x45/0x80 [ 322.967163][ C1] ? __pfx_kthread+0x10/0x10 [ 322.971743][ C1] ret_from_fork_asm+0x1a/0x30 [ 322.976518][ C1] [ 322.979527][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 322.985838][ C1] CPU: 1 UID: 0 PID: 8230 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 322.997975][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 323.008019][ C1] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 323.014688][ C1] Code: 89 ee e8 be 12 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 5d 17 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 323.034285][ C1] RSP: 0018:ffffc9000c20f8b8 EFLAGS: 00000293 [ 323.040343][ C1] RAX: 0000000000000000 RBX: ffff8880b8441720 RCX: ffffffff81af38b9 [ 323.048317][ C1] RDX: ffff88807dd70000 RSI: ffffffff81af3893 RDI: 0000000000000005 [ 323.056277][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 323.064238][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170882e5 [ 323.072197][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b853b040 [ 323.080160][ C1] FS: 000055555df78500(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 323.089079][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.095651][ C1] CR2: 00007f3dff8e56c0 CR3: 000000005142c000 CR4: 00000000003526f0 [ 323.103613][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 323.111575][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 323.119536][ C1] Call Trace: [ 323.122804][ C1] [ 323.125735][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 323.130923][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 323.136029][ C1] flush_tlb_mm_range+0x322/0x1780 [ 323.141129][ C1] ? find_held_lock+0x2b/0x80 [ 323.145801][ C1] ? copy_process+0x7947/0x91a0 [ 323.150652][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 323.156186][ C1] ? up_write+0x1b2/0x520 [ 323.160508][ C1] copy_process+0x7961/0x91a0 [ 323.165199][ C1] ? __pfx_copy_process+0x10/0x10 [ 323.170228][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 323.175256][ C1] kernel_clone+0xfc/0x960 [ 323.179669][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 323.184698][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 323.189980][ C1] __do_sys_clone+0xce/0x120 [ 323.194567][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 323.199774][ C1] ? do_user_addr_fault+0x843/0x1370 [ 323.205057][ C1] do_syscall_64+0xcd/0x260 [ 323.209558][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.215442][ C1] RIP: 0033:0x7f3dfeb849d3 [ 323.219847][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 323.239445][ C1] RSP: 002b:00007ffe215b7448 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 323.247848][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3dfeb849d3 [ 323.255806][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 323.263783][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 323.271774][ C1] R10: 000055555df787d0 R11: 0000000000000246 R12: 0000000000000000 [ 323.279743][ C1] R13: 00000000000927c0 R14: 000000000003506c R15: 00007ffe215b75e0 [ 323.287727][ C1]