last executing test programs: 19.169364483s ago: executing program 4 (id=984): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2c2c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}, 0x45c) 18.619605256s ago: executing program 4 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000880000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8}]}], {0x14}}, 0x84}}, 0x0) 18.258547325s ago: executing program 4 (id=991): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) io_getevents(r1, 0x6, 0x6, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000000240)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000002e80)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x10000000000}]) 17.134528719s ago: executing program 4 (id=995): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) 16.730629699s ago: executing program 4 (id=997): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) 16.233610377s ago: executing program 4 (id=998): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 15.207124665s ago: executing program 3 (id=1000): socket$inet6(0xa, 0x5, 0x0) unshare(0x2c020400) unshare(0x22020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x45) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') 14.791583415s ago: executing program 3 (id=1001): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000540)=""/21, 0x15, 0x0, 0x1000000, 0x0, 0x0, 0x1}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) close(0x3) 12.205498292s ago: executing program 3 (id=1007): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0xffffff2e, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.193634542s ago: executing program 1 (id=1017): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 11.851368857s ago: executing program 1 (id=1008): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x7e6, 0x9) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) 11.48542729s ago: executing program 1 (id=1009): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 10.979338337s ago: executing program 1 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 10.480051764s ago: executing program 2 (id=1016): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) readv(r1, &(0x7f0000001640)=[{&(0x7f0000000080)=""/61, 0x3d}], 0x1) syz_usb_disconnect(r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10.280817174s ago: executing program 1 (id=1018): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 9.738910946s ago: executing program 3 (id=1019): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000017c0)=""/229, 0xe5}], 0x2, 0x0, 0x0) 9.647510728s ago: executing program 0 (id=1020): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000340)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x4000000, 0x0, 0x0, 0x0, 0xc8}, 0x9c) 9.542421792s ago: executing program 1 (id=1021): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x7, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012001, 0x0) 9.370917948s ago: executing program 0 (id=1022): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 7.783882408s ago: executing program 2 (id=1023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002555224082057d00993f000000010902230001000000000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 5.829526308s ago: executing program 0 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0x0, 0x0) 5.391222845s ago: executing program 0 (id=1025): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f00000000c0)=0xe32e1e722c60b15f) 4.799581485s ago: executing program 3 (id=1026): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xbf8, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.359415219s ago: executing program 2 (id=1027): r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f00000000c0)=0x8) listen(r0, 0x9) 4.111765234s ago: executing program 3 (id=1028): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000002ec0)={@private0, r2}, 0x14) 3.874589052s ago: executing program 2 (id=1029): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x7fff, 0x2) ppoll(&(0x7f0000000680)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.064658296s ago: executing program 2 (id=1030): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 2.650542515s ago: executing program 2 (id=1031): futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) 421.754981ms ago: executing program 0 (id=1032): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0xfe07) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2029}], 0x1, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 0 (id=1033): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="74020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542fc010880c8"], 0x274}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) kernel console output (not intermixed with test programs): no=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.847242][ T46] usb 2-1: config 1 has no interface number 0 [ 180.857866][ T46] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.876850][ T29] audit: type=1400 audit(1726760791.447:360): avc: denied { unlink } for pid=4655 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.903476][ T46] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 180.929697][ T46] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.950829][ T29] audit: type=1400 audit(1726760791.447:361): avc: denied { create } for pid=4655 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.965692][ T8] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 180.971469][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.988397][ T5236] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.003754][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.021754][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.037808][ T46] usb 2-1: Product: syz [ 181.047313][ T46] usb 2-1: Manufacturer: syz [ 181.057671][ T46] usb 2-1: SerialNumber: syz [ 181.170777][ T5236] usb 5-1: Using ep0 maxpacket: 32 [ 181.193427][ T5236] usb 5-1: config 0 has no interfaces? [ 181.201371][ T5236] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 181.232888][ T5236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.283759][ T5236] usb 5-1: config 0 descriptor?? [ 181.327668][ T5313] usb 3-1: USB disconnect, device number 10 [ 181.366947][ T5313] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 181.978392][ T5236] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 181.990423][ T46] cdc_ncm 2-1:1.1: bind() failure [ 182.192320][ T5236] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.229249][ T5236] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.284429][ T5236] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.308400][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.336615][ T5236] usb 4-1: SerialNumber: syz [ 182.382429][ T5313] usb 2-1: USB disconnect, device number 7 [ 182.474642][ T5285] usb 5-1: USB disconnect, device number 7 [ 182.628902][ T5236] usb 4-1: 0:2 : does not exist [ 182.666155][ T5236] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 182.800949][ T5236] usb 4-1: USB disconnect, device number 5 [ 183.647117][ T6454] team_slave_0: entered allmulticast mode [ 183.658567][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.918175][ T46] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.948402][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 183.980757][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.999023][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.028361][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.051305][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.072382][ T46] usb 1-1: config 0 descriptor?? [ 184.099056][ T6449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 184.129547][ T6460] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.470'. [ 184.690496][ T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 184.726385][ T46] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 184.755896][ T46] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 184.820130][ T5312] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 185.040704][ T5312] usb 3-1: Using ep0 maxpacket: 16 [ 185.064840][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.086447][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.125688][ T5312] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 185.163571][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.187622][ T5236] usb 1-1: USB disconnect, device number 7 [ 185.213441][ T5312] usb 3-1: config 0 descriptor?? [ 185.538628][ T5283] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 185.696666][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.726446][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.768247][ T5283] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.782200][ T5312] hid (null): unknown global tag 0xd [ 185.788281][ T5283] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.808455][ T5312] hid (null): unknown global tag 0xd [ 185.813827][ T5312] hid (null): report_id 40203 is invalid [ 185.830000][ T5312] hid (null): invalid report_size -1862471209 [ 185.836179][ T5312] hid (null): invalid report_size -1217885453 [ 185.875285][ T5312] hid (null): unknown global tag 0x36 [ 185.880893][ T5283] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.880933][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.880966][ T5283] usb 4-1: SerialNumber: syz [ 186.011768][ T5312] usb 3-1: string descriptor 0 read error: -71 [ 186.067720][ T5312] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 186.076041][ T5312] letsketch 0003:6161:4D15.0006: probe with driver letsketch failed with error -32 [ 186.093207][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 186.111170][ T5312] usb 3-1: USB disconnect, device number 11 [ 186.158336][ T6482] netlink: 332 bytes leftover after parsing attributes in process `syz.0.475'. [ 186.183064][ T6482] netlink: 652 bytes leftover after parsing attributes in process `syz.0.475'. [ 186.186258][ T5283] usb 4-1: 0:2 : does not exist [ 186.211943][ T5283] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 186.218709][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 186.274947][ T5283] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.298557][ T5285] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 186.362615][ T5283] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.408930][ T5283] usb 4-1: USB disconnect, device number 6 [ 186.517812][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.549851][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.570038][ T5285] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.598287][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.628852][ T5285] usb 5-1: config 0 descriptor?? [ 187.136521][ T5285] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 187.184538][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 187.213483][ T5285] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input12 [ 187.385650][ T5285] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 187.411143][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.431802][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.443612][ T5285] usb 5-1: USB disconnect, device number 8 [ 187.462211][ T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.488295][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.511815][ T8] usb 2-1: SerialNumber: syz [ 187.660656][ T5281] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 187.807611][ T8] usb 2-1: 0:2 : does not exist [ 187.869577][ T8] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 187.890134][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 187.902692][ T5281] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.943227][ T5281] usb 3-1: config 0 has no interface number 0 [ 187.983838][ T5281] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.028763][ T8] usb 2-1: USB disconnect, device number 8 [ 188.048705][ T5281] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 188.077040][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.127205][ T5281] usb 3-1: config 0 descriptor?? [ 188.157653][ T5281] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 188.539566][ T8] usb 3-1: USB disconnect, device number 12 [ 188.575686][ T8] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 189.423749][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 189.560928][ T6524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 189.608755][ T6524] netlink: 'syz.2.491': attribute type 7 has an invalid length. [ 189.637487][ T6524] netlink: 'syz.2.491': attribute type 8 has an invalid length. [ 189.665621][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 190.388824][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.499'. [ 190.450380][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.499'. [ 191.288505][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 191.478457][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 191.504438][ T46] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.528615][ T46] usb 4-1: config 0 has no interface number 0 [ 191.552953][ T46] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.591930][ T46] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.623504][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.650257][ T46] usb 4-1: config 0 descriptor?? [ 191.714440][ T46] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 192.054755][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.515'. [ 192.088489][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.515'. [ 192.141078][ T46] usb 4-1: USB disconnect, device number 7 [ 192.174079][ T46] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 192.608496][ T5236] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 192.812545][ T5236] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.832932][ T5236] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.866906][ T5236] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.885481][ T5236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.914623][ T5236] usb 5-1: SerialNumber: syz [ 193.245451][ T5236] usb 5-1: 0:2 : does not exist [ 193.274347][ T5236] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 193.318178][ T5236] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 193.413497][ T5236] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 193.449204][ T5236] usb 5-1: USB disconnect, device number 9 [ 193.856957][ T29] audit: type=1400 audit(1726760804.487:362): avc: denied { mount } for pid=6602 comm="syz.1.523" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 194.178507][ T6611] netlink: 'syz.2.529': attribute type 6 has an invalid length. [ 194.228318][ T6611] netlink: 'syz.2.529': attribute type 8 has an invalid length. [ 194.455477][ T29] audit: type=1400 audit(1726760805.077:363): avc: denied { bind } for pid=6618 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.526894][ T29] audit: type=1400 audit(1726760805.077:364): avc: denied { write } for pid=6618 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.778357][ T5281] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 194.932229][ T29] audit: type=1400 audit(1726760805.567:365): avc: denied { block_suspend } for pid=6634 comm="syz.2.539" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.998373][ T5281] usb 1-1: Using ep0 maxpacket: 32 [ 195.011342][ T5281] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 195.047050][ T5281] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 195.086932][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.128349][ T5281] usb 1-1: Product: syz [ 195.132608][ T5281] usb 1-1: Manufacturer: syz [ 195.157689][ T5281] usb 1-1: SerialNumber: syz [ 195.187838][ T5281] usb 1-1: config 0 descriptor?? [ 195.194379][ T6621] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.239774][ T5281] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.488650][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.547'. [ 195.714823][ T29] audit: type=1400 audit(1726760806.347:366): avc: denied { connect } for pid=6650 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.948724][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 195.984881][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.552'. [ 196.026930][ T6664] atomic_op ffff88802fba9998 conn xmit_atomic 0000000000000000 [ 196.062221][ T8] usb 1-1: USB disconnect, device number 8 [ 196.064390][ T6658] gtp0: entered promiscuous mode [ 196.104595][ T6658] gtp0: entered allmulticast mode [ 196.285515][ T6667] syz.0.555[6667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.286141][ T6667] syz.0.555[6667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.691378][ T6697] loop0: detected capacity change from 0 to 128 [ 198.428475][ T5313] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 198.656117][ T5313] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 198.672795][ T5313] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 198.704073][ T5313] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 198.725063][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.763411][ T5313] usb 3-1: Product: syz [ 198.767747][ T5313] usb 3-1: Manufacturer: syz [ 198.780971][ T5313] usb 3-1: SerialNumber: syz [ 198.797150][ T5313] usb 3-1: config 0 descriptor?? [ 198.817256][ T6709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.838044][ T6709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.098940][ T6709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.113494][ T6709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.293808][ T54] block nbd4: Receive control failed (result -32) [ 199.299369][ T6720] block nbd4: shutting down sockets [ 199.453989][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.691263][ T8] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 199.708270][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.749476][ T8] usb 2-1: config 0 descriptor?? [ 199.868534][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 199.944714][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.952657][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.998973][ T5313] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 200.066099][ T5313] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 54:01:47:1e:47:20 [ 200.072956][ T46] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 200.078995][ T8] kaweth 2-1:0.0: Firmware present in device. [ 200.113023][ T5313] usb 3-1: USB disconnect, device number 13 [ 200.123259][ T5313] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 200.127084][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.198786][ T46] usb 5-1: config 0 descriptor?? [ 200.217466][ T46] cp210x 5-1:0.0: cp210x converter detected [ 200.261656][ T8] kaweth 2-1:0.0: Statistics collection: 0 [ 200.267551][ T8] kaweth 2-1:0.0: Multicast filter limit: 0 [ 200.275296][ T8] kaweth 2-1:0.0: MTU: 0 [ 200.290733][ T8] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 200.638459][ T46] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 200.799900][ T29] audit: type=1400 audit(1726760811.437:367): avc: denied { read write } for pid=6739 comm="syz.0.584" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 200.854965][ T5307] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 200.855082][ T8] kaweth 2-1:0.0: Error setting receive filter [ 200.862936][ T29] audit: type=1400 audit(1726760811.437:368): avc: denied { open } for pid=6739 comm="syz.0.584" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 200.863316][ T8] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 200.871642][ T29] audit: type=1400 audit(1726760811.507:369): avc: denied { ioctl } for pid=6737 comm="syz.2.585" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.921507][ T46] usb 5-1: cp210x converter now attached to ttyUSB0 [ 200.939305][ T8] usb 2-1: USB disconnect, device number 9 [ 200.991084][ T5307] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 201.007969][ T5307] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 201.023993][ T5307] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 201.039337][ T5307] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 201.047170][ T5307] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 201.058304][ T5307] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 201.064358][ T5281] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 201.077432][ T5307] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.02 Device [syz0] on syz1 [ 201.127965][ T5307] usb 5-1: USB disconnect, device number 10 [ 201.160769][ T5307] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 201.224673][ T5307] cp210x 5-1:0.0: device disconnected [ 201.282071][ T5281] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 201.298540][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.332941][ T5281] usb 3-1: config 0 descriptor?? [ 201.379079][ T5313] IPVS: starting estimator thread 0... [ 201.410732][ T6744] tipc: Started in network mode [ 201.415703][ T6744] tipc: Node identity ac1414aa, cluster identity 4711 [ 201.455663][ T6744] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.490264][ T6744] tipc: Enabled bearer , priority 10 [ 201.506938][ T6745] IPVS: using max 14 ests per chain, 33600 per kthread [ 201.591228][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.728599][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.788687][ T5281] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 201.827809][ T29] audit: type=1400 audit(1726760812.457:370): avc: denied { mount } for pid=6748 comm="syz.0.588" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 201.868271][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.914912][ T29] audit: type=1400 audit(1726760812.487:371): avc: denied { remount } for pid=6748 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 201.991597][ T29] audit: type=1400 audit(1726760812.627:372): avc: denied { read write } for pid=6752 comm="syz.4.590" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.008300][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 202.085025][ T29] audit: type=1400 audit(1726760812.627:373): avc: denied { open } for pid=6752 comm="syz.4.590" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.136341][ T6755] netlink: 'syz.0.591': attribute type 4 has an invalid length. [ 202.148782][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 202.192478][ T5281] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 202.218983][ T5281] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 202.258537][ T5307] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 202.288746][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 202.416471][ T46] usb 3-1: USB disconnect, device number 14 [ 202.428313][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 202.488180][ T5307] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 202.508825][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.533316][ T5307] usb 5-1: Product: syz [ 202.537555][ T5307] usb 5-1: Manufacturer: syz [ 202.555224][ T5307] usb 5-1: SerialNumber: syz [ 202.570874][ T5236] tipc: Node number set to 2886997162 [ 202.580138][ T5307] usb 5-1: config 0 descriptor?? [ 202.708302][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 202.978329][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.056983][ T5307] usb 5-1: USB disconnect, device number 11 [ 203.730879][ T6773] syz.2.598[6773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.731128][ T6773] syz.2.598[6773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.149222][ T5307] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 204.308475][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 204.327688][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 204.388330][ T5307] usb 2-1: Using ep0 maxpacket: 16 [ 204.403334][ T5307] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 204.428322][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=80, SerialNumber=233 [ 204.455658][ T5307] usb 2-1: Product: syz [ 204.474683][ T5307] usb 2-1: Manufacturer: syz [ 204.485790][ T5307] usb 2-1: SerialNumber: syz [ 204.510183][ T5307] r8152-cfgselector 2-1: Unknown version 0x0000 [ 204.516998][ T5307] r8152-cfgselector 2-1: config 0 descriptor?? [ 204.659330][ T6793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.608'. [ 204.955487][ T6798] netlink: 148 bytes leftover after parsing attributes in process `syz.2.609'. [ 204.967597][ T29] audit: type=1400 audit(1726760815.597:374): avc: denied { ioctl } for pid=6794 comm="syz.0.610" path="socket:[13299]" dev="sockfs" ino=13299 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 205.029057][ T6799] netlink: 'syz.4.611': attribute type 10 has an invalid length. [ 205.076022][ T5307] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 205.084592][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.095006][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.145013][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.152800][ T6799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.161713][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.169988][ T6799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.191474][ T6799] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 205.256109][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.263582][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.528377][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 205.708471][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 205.731693][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 205.760238][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 205.819315][ T46] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.887506][ T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 205.901266][ T46] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 205.914144][ T46] usb 1-1: Product: syz [ 205.921857][ T46] usb 1-1: Manufacturer: syz [ 205.928356][ T46] usb 1-1: SerialNumber: syz [ 205.941755][ T6803] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.979874][ T46] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input13 [ 206.018809][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 206.147208][ T29] audit: type=1400 audit(1726760816.777:375): avc: denied { read } for pid=6817 comm="syz.4.619" path="socket:[13830]" dev="sockfs" ino=13830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.310850][ T29] audit: type=1400 audit(1726760816.947:376): avc: denied { setopt } for pid=6819 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.569691][ T5307] usb 1-1: USB disconnect, device number 9 [ 206.606628][ T5307] appletouch 1-1:1.0: input: appletouch disconnected [ 206.638292][ C1] net_ratelimit: 3 callbacks suppressed [ 206.638317][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 207.678400][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.088376][ T5281] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 208.311796][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.343811][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.385379][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.438330][ T5307] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.447903][ T5281] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.480418][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.509724][ T5281] usb 3-1: config 0 descriptor?? [ 208.648382][ T5307] usb 5-1: Using ep0 maxpacket: 8 [ 208.670435][ T5307] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 208.707238][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.718287][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.735805][ T5307] usb 5-1: Product: syz [ 208.745946][ T5307] usb 5-1: Manufacturer: syz [ 208.756102][ T5307] usb 5-1: SerialNumber: syz [ 208.801301][ T5307] usb 5-1: config 0 descriptor?? [ 208.844544][ T5307] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 208.926587][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 208.956494][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 209.007108][ T5281] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 209.048373][ T5281] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 209.108990][ T5281] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 209.539123][ T5312] usb 3-1: USB disconnect, device number 15 [ 209.636192][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.668723][ T5243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.679128][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.694136][ T5243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.702751][ T5243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.712675][ T5243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.758291][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.800018][ T5307] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 209.854295][ T5307] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 209.929665][ T5307] usb 5-1: USB disconnect, device number 12 [ 210.751528][ T6855] chnl_net:caif_netlink_parms(): no params data found [ 210.798943][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.344086][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.368762][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.376193][ T6855] bridge_slave_0: entered allmulticast mode [ 211.423794][ T6855] bridge_slave_0: entered promiscuous mode [ 211.735761][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.759131][ T54] Bluetooth: hci6: command tx timeout [ 211.770871][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.839058][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.846878][ T6855] bridge_slave_1: entered allmulticast mode [ 211.855492][ T6855] bridge_slave_1: entered promiscuous mode [ 212.221664][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.553364][ T82] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.724718][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.878345][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.416359][ T82] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.624011][ T6855] team0: Port device team_slave_0 added [ 213.663756][ T6855] team0: Port device team_slave_1 added [ 213.837589][ T82] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.853420][ T54] Bluetooth: hci6: command tx timeout [ 213.918302][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.007050][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.018433][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.078886][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.143405][ T82] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.158578][ T5307] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 214.218459][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.225476][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.291892][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.343778][ T5307] usb 3-1: Using ep0 maxpacket: 32 [ 214.388644][ T5307] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 214.419365][ T5307] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 214.452177][ T5307] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.499987][ T5307] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 214.528427][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 214.567840][ T5307] usb 3-1: Product: syz [ 214.582922][ T5307] usb 3-1: Manufacturer: syz [ 214.585972][ T6855] hsr_slave_0: entered promiscuous mode [ 214.587679][ T5307] usb 3-1: SerialNumber: syz [ 214.644358][ T6855] hsr_slave_1: entered promiscuous mode [ 214.654349][ T6891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.687656][ T6855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.694393][ T5307] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input14 [ 214.705911][ T6855] Cannot create hsr debugfs directory [ 214.958531][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.145629][ T5313] usb 3-1: USB disconnect, device number 16 [ 215.174051][ T82] bridge_slave_1: left allmulticast mode [ 215.185923][ T5313] appletouch 3-1:1.0: input: appletouch disconnected [ 215.200235][ T82] bridge_slave_1: left promiscuous mode [ 215.207341][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.231623][ T82] bridge_slave_0: left allmulticast mode [ 215.237380][ T82] bridge_slave_0: left promiscuous mode [ 215.258971][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.920686][ T54] Bluetooth: hci6: command tx timeout [ 215.998343][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.388714][ T5313] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 216.638597][ T5313] usb 3-1: Using ep0 maxpacket: 8 [ 216.671301][ T5313] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 216.706606][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.767077][ T5313] usb 3-1: Product: syz [ 216.774076][ T5313] usb 3-1: Manufacturer: syz [ 216.779818][ T5313] usb 3-1: SerialNumber: syz [ 216.796420][ T5313] usb 3-1: config 0 descriptor?? [ 216.810002][ T5313] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 217.039163][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.274558][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.320283][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.357745][ T82] bond0 (unregistering): Released all slaves [ 217.735868][ T5313] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 217.762150][ T5313] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 217.818559][ T5313] usb 3-1: USB disconnect, device number 17 [ 218.013430][ T54] Bluetooth: hci6: command tx timeout [ 218.078491][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 218.414834][ T82] hsr_slave_0: left promiscuous mode [ 218.437328][ T82] hsr_slave_1: left promiscuous mode [ 218.449918][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.465860][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.500151][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.516085][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.548463][ T5282] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 218.629507][ T5313] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 218.677444][ T82] veth1_macvtap: left promiscuous mode [ 218.687680][ T82] veth0_macvtap: left promiscuous mode [ 218.721060][ T82] veth1_vlan: left promiscuous mode [ 218.726756][ T82] veth0_vlan: left promiscuous mode [ 218.786672][ T5282] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 218.808512][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.838304][ T5313] usb 5-1: Using ep0 maxpacket: 32 [ 218.846496][ T5282] usb 1-1: Product: syz [ 218.851068][ T5313] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 218.862032][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.873171][ T5282] usb 1-1: Manufacturer: syz [ 218.873718][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.889391][ T5282] usb 1-1: SerialNumber: syz [ 218.896138][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.908759][ T5313] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 218.926313][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.937066][ T5282] usb 1-1: config 0 descriptor?? [ 218.937283][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.951589][ T5313] usb 5-1: Product: syz [ 218.955802][ T5313] usb 5-1: Manufacturer: syz [ 218.969781][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.978882][ T5313] usb 5-1: SerialNumber: syz [ 218.983667][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.999181][ T5313] usb 5-1: config 0 descriptor?? [ 219.006195][ T6913] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 219.036347][ T5313] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.118793][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 219.473345][ T8] usb 1-1: USB disconnect, device number 10 [ 220.047035][ T5307] usb 5-1: USB disconnect, device number 13 [ 220.158293][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.521561][ T29] audit: type=1400 audit(1726760831.157:377): avc: denied { bind } for pid=6921 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.577284][ T29] audit: type=1400 audit(1726760831.187:378): avc: denied { name_bind } for pid=6921 comm="syz.2.657" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 220.628788][ T6924] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 220.635153][ T29] audit: type=1400 audit(1726760831.187:379): avc: denied { node_bind } for pid=6921 comm="syz.2.657" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 220.717850][ T29] audit: type=1400 audit(1726760831.187:380): avc: denied { read } for pid=6921 comm="syz.2.657" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.950260][ T6928] netlink: 'syz.0.661': attribute type 9 has an invalid length. [ 220.985830][ T6928] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.661'. [ 221.054678][ T5243] Bluetooth: hci5: command tx timeout [ 221.158070][ T82] team0 (unregistering): Port device team_slave_1 removed [ 221.198302][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.418721][ T82] team0 (unregistering): Port device team_slave_0 removed [ 221.938539][ T29] audit: type=1326 audit(1726760832.567:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c857def9 code=0x7ffc0000 [ 222.006743][ T29] audit: type=1326 audit(1726760832.607:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c857def9 code=0x7ffc0000 [ 222.068740][ T29] audit: type=1326 audit(1726760832.607:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f08c857def9 code=0x7ffc0000 [ 222.161040][ T29] audit: type=1326 audit(1726760832.607:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c857def9 code=0x7ffc0000 [ 222.238289][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.254041][ T29] audit: type=1326 audit(1726760832.607:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c857def9 code=0x7ffc0000 [ 222.338529][ T29] audit: type=1326 audit(1726760832.617:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f08c857def9 code=0x7ffc0000 [ 222.559436][ T6944] netlink: 'syz.2.670': attribute type 9 has an invalid length. [ 222.608520][ T6944] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.670'. [ 222.649758][ T54] Bluetooth: hci0: command 0x0c20 tx timeout [ 223.118779][ T54] Bluetooth: hci5: command tx timeout [ 223.288326][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 223.714123][ T6937] netlink: 'syz.0.666': attribute type 21 has an invalid length. [ 224.318281][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 224.969767][ T6969] netlink: 'syz.2.679': attribute type 9 has an invalid length. [ 224.977577][ T6969] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.679'. [ 225.204374][ T54] Bluetooth: hci5: command tx timeout [ 225.346832][ T6975] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.682'. [ 225.358313][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.384112][ T6975] openvswitch: netlink: IP tunnel dst address not specified [ 225.731653][ T6855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.827665][ T6855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.878607][ T6914] chnl_net:caif_netlink_parms(): no params data found [ 225.937152][ T6855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.030375][ T6855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.408306][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.149071][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.156350][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.180603][ T6914] bridge_slave_0: entered allmulticast mode [ 227.191336][ T6914] bridge_slave_0: entered promiscuous mode [ 227.220748][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.228001][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.259035][ T6914] bridge_slave_1: entered allmulticast mode [ 227.267656][ T6914] bridge_slave_1: entered promiscuous mode [ 227.278441][ T5241] Bluetooth: hci5: command tx timeout [ 227.448309][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.605688][ T5241] Bluetooth: hci1: command 0x0406 tx timeout [ 227.613788][ T5237] Bluetooth: hci3: command 0x0406 tx timeout [ 227.623450][ T5243] Bluetooth: hci4: command 0x0406 tx timeout [ 227.628699][ T5246] Bluetooth: hci0: command 0x0c20 tx timeout [ 227.775627][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.794826][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.478264][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.804609][ T6914] team0: Port device team_slave_0 added [ 229.011450][ T6914] team0: Port device team_slave_1 added [ 229.269681][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.276674][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.438297][ T6914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.513757][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.528584][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 229.538675][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.639945][ T6914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.680173][ T54] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 229.951522][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.997332][ T6914] hsr_slave_0: entered promiscuous mode [ 230.068844][ T6914] hsr_slave_1: entered promiscuous mode [ 230.089829][ T6914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.112125][ T6914] Cannot create hsr debugfs directory [ 230.313398][ T6855] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.558523][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.604272][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.611601][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.733925][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.741437][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.291768][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 231.291792][ T29] audit: type=1400 audit(1726760841.897:392): avc: denied { mount } for pid=7050 comm="syz.2.712" name="/" dev="autofs" ino=15062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 231.456356][ T29] audit: type=1400 audit(1726760842.087:393): avc: denied { unmount } for pid=5230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 231.548966][ T29] audit: type=1400 audit(1726760842.137:394): avc: denied { ioctl } for pid=7053 comm="syz.0.713" path="socket:[15073]" dev="sockfs" ino=15073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 231.594868][ T6914] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.608802][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.932719][ T6914] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.058009][ T29] audit: type=1400 audit(1726760842.687:395): avc: denied { mounton } for pid=7061 comm="syz.2.716" path="/183/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 232.280673][ T6914] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.299256][ T29] audit: type=1400 audit(1726760842.907:396): avc: denied { unmount } for pid=5230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 232.450044][ T29] audit: type=1400 audit(1726760843.087:397): avc: denied { bind } for pid=7069 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.638128][ T6914] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.655685][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 233.360591][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.404914][ T6914] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.452927][ T6914] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.491631][ T6914] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.663932][ T7088] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 233.680951][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 233.779785][ T6914] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.839632][ T7090] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 233.924984][ T29] audit: type=1400 audit(1726760844.557:398): avc: denied { read } for pid=7092 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 234.026014][ T6855] veth0_vlan: entered promiscuous mode [ 234.111175][ T6855] veth1_vlan: entered promiscuous mode [ 234.371693][ T29] audit: type=1400 audit(1726760844.997:399): avc: denied { ioctl } for pid=7098 comm="syz.2.731" path="/dev/ptp0" dev="devtmpfs" ino=1075 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 234.560881][ T6855] veth0_macvtap: entered promiscuous mode [ 234.623166][ T6855] veth1_macvtap: entered promiscuous mode [ 234.728564][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 234.840453][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.869070][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.898634][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.923930][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.955102][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.986585][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.008769][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.029616][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.070453][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.095884][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.119606][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.220142][ T6914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.232684][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.261515][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.277439][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.301938][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.320966][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.337201][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.368287][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.411630][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.425229][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.448378][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.470913][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.515568][ T6855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.538259][ T6855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.547035][ T6855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.580058][ T6855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.657386][ T6914] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.722862][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.730230][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.762811][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.951872][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.959268][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.148874][ T5281] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 236.207548][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.248316][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.370031][ T5281] usb 5-1: Using ep0 maxpacket: 16 [ 236.405031][ T5281] usb 5-1: config 65 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.448343][ T5281] usb 5-1: config 65 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.481362][ T5281] usb 5-1: config 65 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.559683][ T5281] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 236.598113][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.617948][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.668328][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.798460][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.095671][ T5281] hid (null): report_id 17819 is invalid [ 237.126118][ T5281] kye 0003:0458:5015.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 237.170086][ T5281] kye 0003:0458:5015.000A: report_id 17819 is invalid [ 237.176946][ T5281] kye 0003:0458:5015.000A: item 0 2 1 8 parsing failed [ 237.219656][ T5281] kye 0003:0458:5015.000A: parse failed [ 237.238465][ T5281] kye 0003:0458:5015.000A: probe with driver kye failed with error -22 [ 237.415456][ T6914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.615201][ T46] usb 5-1: USB disconnect, device number 14 [ 237.655727][ T29] audit: type=1400 audit(1726760848.287:400): avc: denied { read } for pid=7142 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 237.751013][ T6914] veth0_vlan: entered promiscuous mode [ 237.814633][ T6914] veth1_vlan: entered promiscuous mode [ 237.838516][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.997127][ T6914] veth0_macvtap: entered promiscuous mode [ 238.042645][ T6914] veth1_macvtap: entered promiscuous mode [ 238.101030][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.128226][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.138103][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.168891][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.185682][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.208525][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.238949][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.278574][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.305587][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.341856][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.388115][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.419880][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.464902][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.609254][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.643483][ T7145] syz.2.747 (7145) used greatest stack depth: 19456 bytes left [ 238.651338][ T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 238.658675][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.694752][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.728336][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.763769][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.807184][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.844295][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.873288][ T7159] [U] [ 238.876087][ T7159] [U] [ 238.878847][ T7159] [U] [ 238.881623][ T7159] [U] [ 238.884748][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 238.888263][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.892296][ T7159] [U] [ 238.904234][ T7159] [U] [ 238.907005][ T7159] [U] [ 238.909772][ T7159] [U] [ 238.913050][ T7159] [U] [ 238.915815][ T7159] [U] [ 238.918582][ T7159] [U] [ 238.921358][ T7159] [U] [ 238.924453][ T7159] [U] [ 238.927248][ T7159] [U] [ 238.930012][ T7159] [U] [ 238.932778][ T7159] [U] [ 238.936155][ T7159] [U] [ 238.938920][ T7159] [U] [ 238.941680][ T7159] [U] [ 238.944446][ T7159] [U] [ 238.947582][ T7159] [U] [ 238.948327][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.950321][ T7159] [U] [ 238.963496][ T7159] [U] [ 238.966249][ T7159] [U] [ 238.972505][ T7159] [U] [ 238.975403][ T7159] [U] [ 238.978175][ T7159] [U] [ 238.980947][ T7159] [U] [ 238.983983][ T7159] [U] [ 238.986736][ T7159] [U] [ 238.989486][ T7159] [U] [ 238.992245][ T7159] [U] [ 238.995307][ T7159] [U] [ 238.998061][ T7159] [U] [ 239.000895][ T7159] [U] [ 239.003645][ T7159] [U] [ 239.006654][ T7159] [U] [ 239.009416][ T7159] [U] [ 239.011748][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.012143][ T7159] [U] [ 239.024678][ T7159] [U] [ 239.027767][ T7159] [U] [ 239.030539][ T7159] [U] [ 239.033303][ T7159] [U] [ 239.036063][ T7159] [U] [ 239.039904][ T7159] [U] [ 239.042681][ T7159] [U] [ 239.045452][ T7159] [U] [ 239.048206][ T7159] [U] [ 239.051381][ T7159] [U] [ 239.054136][ T7159] [U] [ 239.056884][ T7159] [U] [ 239.059646][ T7159] [U] [ 239.062665][ T7159] [U] [ 239.065422][ T7159] [U] [ 239.068185][ T7159] [U] [ 239.070941][ T7159] [U] [ 239.076127][ T7159] [U] [ 239.078905][ T7159] [U] [ 239.081661][ T7159] [U] [ 239.082592][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.084404][ T7159] [U] [ 239.084762][ T7159] [U] [ 239.100270][ T7159] [U] [ 239.102999][ T7159] [U] [ 239.105724][ T7159] [U] [ 239.108871][ T7159] [U] [ 239.111641][ T7159] [U] [ 239.114401][ T7159] [U] [ 239.117146][ T7159] [U] [ 239.120228][ T7159] [U] [ 239.122964][ T7159] [U] [ 239.125702][ T7159] [U] [ 239.128428][ T7159] [U] [ 239.131460][ T7159] [U] [ 239.134240][ T7159] [U] [ 239.136990][ T7159] [U] [ 239.139743][ T7159] [U] [ 239.142783][ T7159] [U] [ 239.145538][ T7159] [U] [ 239.148282][ T7159] [U] [ 239.151044][ T7159] [U] [ 239.154141][ T7159] [U] [ 239.156896][ T7159] [U] [ 239.159645][ T7159] [U] [ 239.162405][ T7159] [U] [ 239.165415][ T7159] [U] [ 239.168189][ T7159] [U] [ 239.170956][ T7159] [U] [ 239.173698][ T7159] [U] [ 239.179064][ T7159] [U] [ 239.181848][ T7159] [U] [ 239.184606][ T7159] [U] [ 239.187356][ T7159] [U] [ 239.190409][ T7159] [U] [ 239.193184][ T7159] [U] [ 239.195940][ T7159] [U] [ 239.198704][ T7159] [U] [ 239.201841][ T7159] [U] [ 239.203301][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.204580][ T7159] [U] [ 239.217108][ T7159] [U] [ 239.219842][ T7159] [U] [ 239.223120][ T7159] [U] [ 239.225896][ T7159] [U] [ 239.228655][ T7159] [U] [ 239.231418][ T7159] [U] [ 239.234514][ T7159] [U] [ 239.237252][ T7159] [U] [ 239.240033][ T7159] [U] [ 239.242756][ T7159] [U] [ 239.245896][ T7159] [U] [ 239.248669][ T7159] [U] [ 239.251428][ T7159] [U] [ 239.254191][ T7159] [U] [ 239.257258][ T7159] [U] [ 239.260112][ T7159] [U] [ 239.262874][ T7159] [U] [ 239.265626][ T7159] [U] [ 239.268720][ T7159] [U] [ 239.271475][ T7159] [U] [ 239.274251][ T7159] [U] [ 239.276992][ T7159] [U] [ 239.282242][ T7159] [U] [ 239.285087][ T7159] [U] [ 239.287844][ T7159] [U] [ 239.290594][ T7159] [U] [ 239.294858][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.296202][ T7159] [U] [ 239.304837][ T7159] [U] [ 239.307615][ T7159] [U] [ 239.311511][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 239.340043][ T46] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 239.351044][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.369514][ T6914] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.370826][ T7157] [U] [ 239.380716][ T46] usb 4-1: Product: syz [ 239.387457][ T46] usb 4-1: Manufacturer: syz [ 239.392216][ T46] usb 4-1: SerialNumber: syz [ 239.398595][ T6914] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.407439][ T6914] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.419576][ T46] usb 4-1: config 0 descriptor?? [ 239.430808][ T46] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 239.447527][ T6914] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.773864][ T46] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 239.795074][ T29] audit: type=1400 audit(1726760850.427:401): avc: denied { create } for pid=7168 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 239.871104][ T29] audit: type=1400 audit(1726760850.477:402): avc: denied { ioctl } for pid=7168 comm="syz.0.759" path="socket:[15964]" dev="sockfs" ino=15964 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 239.918271][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 239.970417][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.977715][ T29] audit: type=1400 audit(1726760850.477:403): avc: denied { write } for pid=7168 comm="syz.0.759" name="kcm" dev="proc" ino=4026534069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 240.012019][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.094851][ T29] audit: type=1400 audit(1726760850.537:404): avc: denied { write } for pid=7168 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 240.309744][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.348318][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.952876][ T7196] netlink: 'syz.0.766': attribute type 9 has an invalid length. [ 240.968282][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 240.982172][ T7196] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.766'. [ 241.150545][ T29] audit: type=1400 audit(1726760851.787:405): avc: denied { shutdown } for pid=7189 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.223444][ T29] audit: type=1400 audit(1726760851.807:406): avc: denied { read } for pid=7189 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.580097][ T5283] usb 4-1: USB disconnect, device number 8 [ 241.849949][ T29] audit: type=1400 audit(1726760852.487:407): avc: denied { getopt } for pid=7212 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.008304][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 242.072383][ T29] audit: type=1400 audit(1726760852.707:408): avc: denied { create } for pid=7217 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.172170][ T29] audit: type=1400 audit(1726760852.747:409): avc: denied { write } for pid=7217 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.327436][ T7221] ======================================================= [ 242.327436][ T7221] WARNING: The mand mount option has been deprecated and [ 242.327436][ T7221] and is ignored by this kernel. Remove the mand [ 242.327436][ T7221] option from the mount to silence this warning. [ 242.327436][ T7221] ======================================================= [ 243.048309][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 243.669882][ T7248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.790'. [ 243.718312][ T7248] netlink: 'syz.2.790': attribute type 7 has an invalid length. [ 243.726037][ T7248] netlink: 'syz.2.790': attribute type 8 has an invalid length. [ 243.758513][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'. [ 243.817535][ T7248] gretap0: entered promiscuous mode [ 243.833816][ T7248] batadv_slave_1: entered promiscuous mode [ 243.868676][ T7248] gretap0: left promiscuous mode [ 243.918397][ T7248] batadv_slave_1: left promiscuous mode [ 244.079912][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 244.118471][ T5281] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 244.337709][ T5281] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 244.368000][ T5281] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 244.389045][ T5281] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 244.401557][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.709536][ T5281] usb 4-1: string descriptor 0 read error: -22 [ 245.006494][ T8] usb 4-1: USB disconnect, device number 9 [ 245.088118][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 245.088141][ T29] audit: type=1326 audit(1726760855.717:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d1197def9 code=0x0 [ 245.128297][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 246.158267][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 246.408550][ T5247] Bluetooth: hci7: command 0x1003 tx timeout [ 246.408677][ T54] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 247.198316][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 247.518444][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 247.686558][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.815'. [ 247.728328][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 247.740540][ T8] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 247.765877][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.784862][ T8] usb 3-1: Product: syz [ 247.794593][ T8] usb 3-1: Manufacturer: syz [ 247.804634][ T8] usb 3-1: SerialNumber: syz [ 247.822492][ T8] usb 3-1: config 0 descriptor?? [ 247.842471][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 248.238313][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 248.323769][ T7307] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 248.810536][ T8] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 249.278454][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 249.307761][ T8] gspca_se401: read req failed req 0x06 error -71 [ 249.321167][ T8] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 249.356072][ T8] usb 3-1: USB disconnect, device number 18 [ 249.360055][ T7320] netlink: 176 bytes leftover after parsing attributes in process `syz.0.823'. [ 249.389173][ T7320] netlink: 176 bytes leftover after parsing attributes in process `syz.0.823'. [ 249.611110][ T29] audit: type=1400 audit(1726760860.237:414): avc: denied { mount } for pid=7321 comm="syz.3.824" name="/" dev="ramfs" ino=16290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 249.731636][ T29] audit: type=1400 audit(1726760860.367:415): avc: denied { execute } for pid=7321 comm="syz.3.824" name="file0" dev="ramfs" ino=16294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 249.787657][ T29] audit: type=1400 audit(1726760860.387:416): avc: denied { execute_no_trans } for pid=7321 comm="syz.3.824" path="/file0" dev="ramfs" ino=16294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 250.169652][ T29] audit: type=1400 audit(1726760860.807:417): avc: denied { create } for pid=7330 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 250.248409][ T29] audit: type=1400 audit(1726760860.807:418): avc: denied { sys_admin } for pid=7330 comm="syz.4.828" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 250.318268][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 250.738372][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 250.769854][ T29] audit: type=1400 audit(1726760861.407:419): avc: denied { search } for pid=4655 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.949298][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 250.980601][ T46] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 251.008365][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.044424][ T46] usb 1-1: config 0 descriptor?? [ 251.087721][ T46] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 251.359757][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 251.398350][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 251.602163][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 251.717574][ T8] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 251.758738][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.788349][ T8] usb 4-1: Product: syz [ 251.792604][ T8] usb 4-1: Manufacturer: syz [ 251.797268][ T8] usb 4-1: SerialNumber: syz [ 251.859063][ T8] usb 4-1: config 0 descriptor?? [ 251.907557][ T8] redrat3 4-1:0.0: Couldn't find all endpoints [ 252.006795][ T5247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.025934][ T5247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.036038][ T5247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.048989][ T5247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.057833][ T5247] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 252.066697][ T5247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 252.192108][ T46] gspca_vc032x: reg_w err -71 [ 252.196869][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.208251][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.213685][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.219757][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.225149][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.230583][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.235990][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.242006][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.247428][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.257537][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.262983][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.279359][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.284705][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.302195][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.307572][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.338326][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.349288][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.373494][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 252.391928][ T46] gspca_vc032x: Unknown sensor... [ 252.397156][ T46] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 252.409223][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 252.476349][ T46] usb 1-1: USB disconnect, device number 11 [ 253.138814][ T5283] usb 4-1: USB disconnect, device number 10 [ 253.251872][ T7355] chnl_net:caif_netlink_parms(): no params data found [ 253.438282][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 253.846592][ T7355] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.885621][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.905965][ T7355] bridge_slave_0: entered allmulticast mode [ 253.928713][ T7355] bridge_slave_0: entered promiscuous mode [ 253.971793][ T7355] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.997086][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.019925][ T7355] bridge_slave_1: entered allmulticast mode [ 254.044806][ T7355] bridge_slave_1: entered promiscuous mode [ 254.158754][ T5247] Bluetooth: hci7: command tx timeout [ 254.200558][ T7391] loop0: detected capacity change from 0 to 7 [ 254.249955][ T7391] Dev loop0: unable to read RDB block 7 [ 254.283046][ T7391] loop0: AHDI p3 [ 254.286795][ T7391] loop0: partition table partially beyond EOD, truncated [ 254.365511][ T7355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.426427][ T7355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.478532][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 254.833077][ T5238] syz_tun (unregistering): left promiscuous mode [ 254.985891][ T7355] team0: Port device team_slave_0 added [ 255.061515][ T7355] team0: Port device team_slave_1 added [ 255.134712][ T7406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.502961][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.518320][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 255.527712][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.599469][ T7355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.638895][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.645911][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.722130][ T7355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.073342][ T7355] hsr_slave_0: entered promiscuous mode [ 256.074117][ T29] audit: type=1400 audit(1726760866.687:420): avc: denied { sqpoll } for pid=7411 comm="syz.2.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 256.146850][ T7355] hsr_slave_1: entered promiscuous mode [ 256.197374][ T7355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.238256][ T7355] Cannot create hsr debugfs directory [ 256.253742][ T5247] Bluetooth: hci7: command tx timeout [ 256.558316][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 257.293412][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.306106][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.316994][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.326281][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.336142][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 257.344184][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.475454][ T7355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.598297][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 257.912021][ T7355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.246666][ T7355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.332710][ T5246] Bluetooth: hci2: command 0x0406 tx timeout [ 258.340110][ T5247] Bluetooth: hci7: command tx timeout [ 258.638270][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 258.638585][ T7355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.856500][ T7447] Bluetooth: MGMT ver 1.23 [ 259.448868][ T54] Bluetooth: hci3: command tx timeout [ 259.612710][ T7426] chnl_net:caif_netlink_parms(): no params data found [ 259.688301][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 259.743998][ T7355] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 259.933945][ T7355] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.066304][ T7355] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.199311][ T7355] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.398939][ T54] Bluetooth: hci7: command tx timeout [ 260.601491][ T7467] IPv6: Can't replace route, no match found [ 260.662128][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.694064][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.714417][ T7426] bridge_slave_0: entered allmulticast mode [ 260.730117][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 260.751217][ T7426] bridge_slave_0: entered promiscuous mode [ 260.781115][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.808482][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.815940][ T7426] bridge_slave_1: entered allmulticast mode [ 260.850885][ T7426] bridge_slave_1: entered promiscuous mode [ 260.961920][ T82] bridge_slave_1: left allmulticast mode [ 260.978888][ T82] bridge_slave_1: left promiscuous mode [ 260.986471][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.061836][ T82] bridge_slave_0: left allmulticast mode [ 261.067558][ T82] bridge_slave_0: left promiscuous mode [ 261.097876][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.269272][ T29] audit: type=1326 audit(1726760871.887:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1197def9 code=0x7ffc0000 [ 261.344671][ T29] audit: type=1326 audit(1726760871.907:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1197def9 code=0x7ffc0000 [ 261.396372][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.410832][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.488375][ T29] audit: type=1326 audit(1726760871.907:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2d1197def9 code=0x7ffc0000 [ 261.523840][ T54] Bluetooth: hci3: command tx timeout [ 261.572870][ T29] audit: type=1326 audit(1726760871.907:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1197def9 code=0x7ffc0000 [ 261.620236][ T7489] netlink: 596 bytes leftover after parsing attributes in process `syz.3.890'. [ 261.768273][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 262.798297][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 262.877148][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.917963][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.944125][ T82] bond0 (unregistering): Released all slaves [ 263.123235][ T7426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.168741][ T7485] netlink: 'syz.3.890': attribute type 29 has an invalid length. [ 263.422823][ T29] audit: type=1400 audit(1726760874.057:425): avc: denied { watch_mount } for pid=7501 comm="syz.0.897" path="/184" dev="tmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 263.598415][ T54] Bluetooth: hci3: command tx timeout [ 263.630441][ T7426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.838298][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 264.140406][ T7426] team0: Port device team_slave_0 added [ 264.306626][ T7426] team0: Port device team_slave_1 added [ 264.508998][ T82] hsr_slave_0: left promiscuous mode [ 264.530043][ T82] hsr_slave_1: left promiscuous mode [ 264.546277][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.574466][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.629592][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.655323][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.781506][ T82] veth1_macvtap: left promiscuous mode [ 264.807570][ T82] veth0_macvtap: left promiscuous mode [ 264.817889][ T82] veth1_vlan: left promiscuous mode [ 264.841091][ T82] veth0_vlan: left promiscuous mode [ 264.878303][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 265.678995][ T54] Bluetooth: hci3: command tx timeout [ 265.928255][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 266.968253][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 267.695122][ T82] team0 (unregistering): Port device team_slave_1 removed [ 267.881368][ T82] team0 (unregistering): Port device team_slave_0 removed [ 268.008252][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 269.048377][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 269.624774][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.658216][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.768581][ T7426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.820829][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.827930][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.913598][ T7426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.949700][ T29] audit: type=1400 audit(1726760880.587:426): avc: denied { map } for pid=7565 comm="syz.2.919" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 270.078432][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 270.339761][ T7426] hsr_slave_0: entered promiscuous mode [ 270.370469][ T7426] hsr_slave_1: entered promiscuous mode [ 270.404369][ T7426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.424619][ T7426] Cannot create hsr debugfs directory [ 271.052989][ T29] audit: type=1400 audit(1726760881.687:427): avc: denied { map } for pid=7579 comm="syz.0.924" path="/dev/video3" dev="devtmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 271.118781][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.443775][ T7586] 9pnet_fd: p9_fd_create_tcp (7586): problem binding to privport [ 271.464987][ T7355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.676239][ T7426] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.902603][ T7426] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.996142][ T7355] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.158265][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.221147][ T7426] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.333458][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.340771][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.393931][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.401312][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.552040][ T7426] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.935765][ T29] audit: type=1400 audit(1726760883.567:428): avc: denied { ioctl } for pid=7605 comm="syz.2.936" path="socket:[17787]" dev="sockfs" ino=17787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 272.994478][ T7607] team0: entered promiscuous mode [ 273.038638][ T7607] team_slave_0: entered promiscuous mode [ 273.059086][ T7607] team_slave_1: entered promiscuous mode [ 273.111483][ T7607] team0: left promiscuous mode [ 273.126590][ T7607] team_slave_0: left promiscuous mode [ 273.137056][ T7607] team_slave_1: left promiscuous mode [ 273.198251][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.601793][ T7426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.640879][ T7426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.709538][ T7426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.773878][ T7426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.883271][ T7355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.056653][ T7627] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 274.067532][ T29] audit: type=1400 audit(1726760884.687:429): avc: denied { read } for pid=7622 comm="syz.0.941" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 274.159617][ T29] audit: type=1400 audit(1726760884.687:430): avc: denied { open } for pid=7622 comm="syz.0.941" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 274.238353][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 274.261931][ T7623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.290777][ T7623] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 274.348582][ T7623] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 274.358052][ T7355] veth0_vlan: entered promiscuous mode [ 274.370818][ T7623] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 274.418503][ T7623] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 274.427550][ T7623] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.446782][ T7623] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 274.524106][ T7355] veth1_vlan: entered promiscuous mode [ 274.544020][ T7623] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 274.646615][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.696777][ T7623] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 274.719082][ T7623] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 274.760763][ T7623] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 274.806543][ T7426] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.822264][ T7623] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 274.855040][ T7623] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 274.925696][ T7623] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 274.930964][ T7355] veth0_macvtap: entered promiscuous mode [ 274.953020][ T7623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.972814][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.980126][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.001950][ T7623] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.024720][ T7623] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.071561][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.078844][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.132676][ T7355] veth1_macvtap: entered promiscuous mode [ 275.278245][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 275.302926][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.342140][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.378315][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.408234][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.418109][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.480151][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.528588][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.558526][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.587693][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.630315][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.660165][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.688704][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.726169][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.835060][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.884550][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.902327][ T29] audit: type=1400 audit(1726760886.537:431): avc: denied { mount } for pid=7643 comm="syz.2.950" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 275.918052][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.950672][ T29] audit: type=1400 audit(1726760886.577:432): avc: denied { mounton } for pid=7643 comm="syz.2.950" path="/264/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 276.001248][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.030348][ T29] audit: type=1400 audit(1726760886.617:433): avc: denied { read } for pid=7643 comm="syz.2.950" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 276.030680][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.100024][ T29] audit: type=1400 audit(1726760886.617:434): avc: denied { open } for pid=7643 comm="syz.2.950" path="/264/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 276.118252][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.143298][ T29] audit: type=1400 audit(1726760886.647:435): avc: denied { ioctl } for pid=7643 comm="syz.2.950" path="/264/file0" dev="overlay" ino=2 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 276.178326][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.187342][ T7646] netlink: 'syz.3.951': attribute type 11 has an invalid length. [ 276.228214][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.258226][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.278201][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.297510][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.308133][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.318965][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 276.328972][ T5246] Bluetooth: hci1: command 0x0406 tx timeout [ 276.335465][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.337960][ T29] audit: type=1400 audit(1726760886.967:436): avc: denied { unmount } for pid=5230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 276.371749][ T7355] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.380854][ T7355] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.391028][ T7355] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.400090][ T5246] Bluetooth: hci4: command 0x0406 tx timeout [ 276.406398][ T7355] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.478418][ T5246] Bluetooth: hci2: command 0x0406 tx timeout [ 276.486018][ T54] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 276.694323][ T7649] netlink: 'syz.2.952': attribute type 2 has an invalid length. [ 276.711524][ T7649] netlink: 'syz.2.952': attribute type 2 has an invalid length. [ 276.734319][ T5246] Bluetooth: hci6: command 0x0c1a tx timeout [ 276.879390][ T5246] Bluetooth: hci7: command 0x0c1a tx timeout [ 276.968478][ T5246] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.134783][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.197666][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.358854][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 277.361114][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.400129][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.528285][ T5236] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 277.731342][ T5236] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.764424][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 277.818426][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 277.834524][ T7426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.857477][ T5236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.906776][ T5236] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.956797][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.019506][ T5236] usb 4-1: config 0 descriptor?? [ 278.028926][ T7654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 278.398745][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.405966][ T5246] Bluetooth: hci1: command 0x0406 tx timeout [ 278.478802][ T5246] Bluetooth: hci4: command 0x0406 tx timeout [ 278.568698][ T54] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 278.576853][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 278.694721][ T5236] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 278.735644][ T5236] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 278.764419][ T5236] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 278.808598][ T54] Bluetooth: hci6: command 0x0c1a tx timeout [ 278.962799][ T54] Bluetooth: hci7: command 0x0c1a tx timeout [ 279.038523][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.279165][ T7426] veth0_vlan: entered promiscuous mode [ 279.337154][ T7426] veth1_vlan: entered promiscuous mode [ 279.438255][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.511933][ T5283] usb 4-1: USB disconnect, device number 11 [ 279.525067][ T7426] veth0_macvtap: entered promiscuous mode [ 279.538663][ T5236] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 279.591141][ T7426] veth1_macvtap: entered promiscuous mode [ 279.714368][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.744362][ T5236] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.777250][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.786542][ T5236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.807818][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.836318][ T5236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 279.838488][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.883658][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.897109][ T5236] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.914678][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.933996][ T5236] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.954013][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.978219][ T5236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.020769][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.035247][ T5236] usb 3-1: config 0 descriptor?? [ 280.092265][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.142575][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.188514][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.222827][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.268567][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.296850][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.341531][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.374083][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.425261][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.468339][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.488472][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 280.498720][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.528221][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.573445][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.602580][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.638875][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 280.645007][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.645042][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.645069][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.645091][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.645115][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.645138][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.645161][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.647792][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.662656][ T5236] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 280.880514][ T54] Bluetooth: hci6: command 0x0c1a tx timeout [ 280.955066][ T7426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.001793][ T5236] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 281.010344][ T7426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.038388][ T54] Bluetooth: hci7: command 0x0c1a tx timeout [ 281.042742][ T7426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.078426][ T7426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.087709][ T5236] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 281.118613][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 281.238728][ T5236] usb 3-1: USB disconnect, device number 19 [ 281.376226][ T7689] netlink: 'syz.1.965': attribute type 4 has an invalid length. [ 281.518382][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 281.598528][ T7694] netlink: 'syz.1.965': attribute type 17 has an invalid length. [ 281.725010][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.758549][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.951526][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.978207][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.568522][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.713298][ T29] audit: type=1400 audit(1726760893.337:437): avc: denied { create } for pid=7712 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.800532][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 282.999577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 283.461252][ T7726] loop4: detected capacity change from 0 to 2 [ 283.515475][ T7727] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.598492][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.871041][ T29] audit: type=1400 audit(1726760894.507:438): avc: denied { ioctl } for pid=7731 comm="syz.4.984" path="/dev/uinput" dev="devtmpfs" ino=837 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 283.948864][ T7733] input: syz1 as /devices/virtual/input/input17 [ 284.639206][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.878422][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 285.678995][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 285.930044][ T46] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 286.166815][ T29] audit: type=1400 audit(1726760896.797:439): avc: denied { unmount } for pid=6855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.228497][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.265093][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.318243][ T46] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 286.358115][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.421871][ T46] usb 3-1: config 0 descriptor?? [ 286.718550][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.913921][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.027399][ T46] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 287.065340][ T46] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 287.097744][ T46] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 287.113967][ T46] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 287.157648][ T46] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 287.189735][ T46] cm6533_jd 0003:0D8C:0022.000D: No inputs registered, leaving [ 287.261929][ T46] cm6533_jd 0003:0D8C:0022.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 287.306847][ T46] usb 3-1: USB disconnect, device number 20 [ 287.393821][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.681947][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.758550][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.963219][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.078383][ T5283] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 288.298334][ T5283] usb 1-1: Using ep0 maxpacket: 32 [ 288.310313][ T5283] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 288.324731][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.368287][ T5283] usb 1-1: Product: syz [ 288.377596][ T5283] usb 1-1: Manufacturer: syz [ 288.388297][ T5283] usb 1-1: SerialNumber: syz [ 288.400429][ T5283] usb 1-1: config 0 descriptor?? [ 288.433809][ T5283] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 288.457832][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.496740][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.514817][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.543323][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.574477][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.602530][ T63] bridge_slave_1: left allmulticast mode [ 288.610442][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.628397][ T63] bridge_slave_1: left promiscuous mode [ 288.637608][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.655090][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.685059][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.721938][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.734780][ T5283] gspca_stk1135: reg_w 0x0 err -71 [ 288.751442][ T5283] gspca_stk1135: serial bus timeout: status=0x00 [ 288.758079][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.766163][ T5281] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 288.779669][ T63] bridge_slave_0: left allmulticast mode [ 288.784165][ T5283] gspca_stk1135: Sensor write failed [ 288.785364][ T63] bridge_slave_0: left promiscuous mode [ 288.798457][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 288.799496][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.825136][ T5283] gspca_stk1135: serial bus timeout: status=0x00 [ 288.833343][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.842752][ T5283] gspca_stk1135: Sensor write failed [ 288.858373][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.888435][ T5283] gspca_stk1135: serial bus timeout: status=0x00 [ 288.894865][ T5283] gspca_stk1135: Sensor read failed [ 288.921747][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 288.945980][ T5283] gspca_stk1135: serial bus timeout: status=0x00 [ 288.956085][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 289.006101][ T5283] gspca_stk1135: Sensor read failed [ 289.012760][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 289.021826][ T5281] usb 4-1: config 0 has no interfaces? [ 289.027445][ T5281] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 289.041936][ T5283] gspca_stk1135: Detected sensor type unknown (0x0) [ 289.061873][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.070147][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 289.081881][ T5283] gspca_stk1135: serial bus timeout: status=0x00 [ 289.098012][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.102127][ T5283] gspca_stk1135: Sensor read failed [ 289.111210][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 289.122729][ T5281] usb 4-1: config 0 descriptor?? [ 289.122795][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.137574][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 289.146040][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.166091][ T5283] gspca_stk1135: serial bus timeout: status=0x00 [ 289.179237][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.190478][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 289.199187][ T5283] gspca_stk1135: Sensor read failed [ 289.199642][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.204559][ T5283] gspca_stk1135: serial bus timeout: status=0x00 [ 289.255620][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 289.293973][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 289.302815][ T5283] gspca_stk1135: Sensor write failed [ 289.308647][ T5283] gspca_stk1135: serial bus timeout: status=0x00 [ 289.315151][ T5285] hid-generic 0000:1000000:0000.000E: unknown main item tag 0x0 [ 289.323091][ T5283] gspca_stk1135: Sensor write failed [ 289.331495][ T5283] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 289.339922][ T5285] hid-generic 0000:1000000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 289.355778][ T5283] usb 1-1: USB disconnect, device number 12 [ 289.838501][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 289.856917][ T5307] usb 4-1: USB disconnect, device number 12 [ 290.878397][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 291.102506][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.186061][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.236072][ T63] bond0 (unregistering): Released all slaves [ 291.358589][ T54] Bluetooth: hci3: command tx timeout [ 291.925828][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.918460][ T5236] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 293.043420][ T63] hsr_slave_0: left promiscuous mode [ 293.053802][ T63] hsr_slave_1: left promiscuous mode [ 293.078901][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.086473][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.131527][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.159908][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.179457][ T5236] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 293.198304][ T5236] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 293.228453][ T5236] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 293.237676][ T5236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.263242][ T7817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 293.293288][ T5236] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.324295][ T63] veth1_macvtap: left promiscuous mode [ 293.355246][ T63] veth0_macvtap: left promiscuous mode [ 293.380505][ T63] veth1_vlan: left promiscuous mode [ 293.398811][ T63] veth0_vlan: left promiscuous mode [ 293.438508][ T54] Bluetooth: hci3: command tx timeout [ 293.669803][ T5282] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 293.677264][ T5282] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 293.691984][ T29] audit: type=1400 audit(1726760904.327:440): avc: denied { read } for pid=7824 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.744293][ T5282] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 293.772860][ T5282] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 293.801484][ T5282] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 293.914377][ T1169] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 293.952226][ T5282] usb 3-1: USB disconnect, device number 21 [ 293.979944][ T5236] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 294.110290][ T1169] usb 4-1: Using ep0 maxpacket: 8 [ 294.145147][ T1169] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.197160][ T1169] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 294.197599][ T5236] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 294.217422][ T1169] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 294.257138][ T1169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.263994][ T5236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.277773][ T1169] usb 4-1: config 0 descriptor?? [ 294.288069][ T5236] usb 1-1: Product: syz [ 294.306391][ T5236] usb 1-1: Manufacturer: syz [ 294.316500][ T5236] usb 1-1: SerialNumber: syz [ 294.361001][ T5236] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 294.553510][ T5282] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 294.887906][ T46] usb 4-1: USB disconnect, device number 13 [ 295.518596][ T54] Bluetooth: hci3: command tx timeout [ 295.778334][ T1169] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 295.994471][ T1169] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.038636][ T1169] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 296.089042][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.240486][ T1169] usb 3-1: config 0 descriptor?? [ 296.314650][ T1169] usb 3-1: interface 1 not found [ 296.883718][ T1169] usb 3-1: USB disconnect, device number 22 [ 297.598731][ T54] Bluetooth: hci3: command tx timeout [ 298.572061][ T5282] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 305.711260][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.721388][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.730279][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.743112][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.754447][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 305.762447][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.838407][ T5246] Bluetooth: hci0: command tx timeout [ 308.703579][ T63] team0 (unregistering): Port device team_slave_1 removed [ 309.918549][ T5246] Bluetooth: hci0: command tx timeout [ 311.359942][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.391879][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.400598][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.411141][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.419771][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 311.427441][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.998584][ T54] Bluetooth: hci0: command tx timeout [ 313.518718][ T54] Bluetooth: hci5: command tx timeout [ 314.098353][ T54] Bluetooth: hci0: command tx timeout [ 315.179029][ T5246] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 315.191184][ T5246] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 315.200982][ T5246] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 315.210407][ T5246] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 315.219217][ T5246] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 315.226848][ T5246] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 315.604363][ T5246] Bluetooth: hci5: command tx timeout [ 315.899534][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 315.911779][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 315.920547][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 315.930988][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 315.940554][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 315.948339][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 317.358468][ T5246] Bluetooth: hci8: command tx timeout [ 317.688275][ T5246] Bluetooth: hci5: command tx timeout [ 318.079194][ T5246] Bluetooth: hci9: command tx timeout [ 319.444975][ T5246] Bluetooth: hci8: command tx timeout [ 319.768309][ T5246] Bluetooth: hci5: command tx timeout [ 320.158820][ T5246] Bluetooth: hci9: command tx timeout [ 321.518710][ T5246] Bluetooth: hci8: command tx timeout [ 322.223787][ T63] team0 (unregistering): Port device team_slave_0 removed [ 322.238707][ T5246] Bluetooth: hci9: command tx timeout [ 322.804244][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.810740][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.598432][ T5246] Bluetooth: hci8: command tx timeout [ 324.319216][ T5246] Bluetooth: hci9: command tx timeout [ 331.160848][ C1] hrtimer: interrupt took 16919500 ns [ 348.444708][ T5282] ath9k_htc: Failed to initialize the device [ 350.050000][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 350.054683][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 350.055851][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 350.057551][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 350.060377][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 350.061010][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 352.158779][ T54] Bluetooth: hci10: command tx timeout [ 354.249143][ T54] Bluetooth: hci10: command tx timeout [ 356.321590][ T54] Bluetooth: hci10: command tx timeout [ 358.398415][ T54] Bluetooth: hci10: command tx timeout [ 366.779277][ T5246] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 366.792578][ T5246] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 366.802635][ T5246] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 366.880933][ T5246] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 366.901898][ T5246] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 366.909777][ T5246] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 369.048404][ T5246] Bluetooth: hci11: command tx timeout [ 371.128584][ T5246] Bluetooth: hci11: command tx timeout [ 372.061300][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 372.073058][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 372.107653][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 372.118481][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 372.127254][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 372.136683][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 373.198452][ T54] Bluetooth: hci11: command tx timeout [ 374.248387][ T54] Bluetooth: hci12: command tx timeout [ 375.298398][ T54] Bluetooth: hci11: command tx timeout [ 375.591723][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.611406][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.638462][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.658423][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.666714][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 375.677502][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.318916][ T5246] Bluetooth: hci12: command tx timeout [ 376.408355][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 376.420785][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 376.430056][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 376.439431][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 376.447641][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 376.455958][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 377.768540][ T54] Bluetooth: hci3: command tx timeout [ 378.398940][ T54] Bluetooth: hci12: command tx timeout [ 378.558593][ T54] Bluetooth: hci6: command tx timeout [ 379.838331][ T54] Bluetooth: hci3: command tx timeout [ 380.501360][ T54] Bluetooth: hci12: command tx timeout [ 380.646935][ T54] Bluetooth: hci6: command tx timeout [ 381.922172][ T54] Bluetooth: hci3: command tx timeout [ 382.727204][ T54] Bluetooth: hci6: command tx timeout [ 383.998352][ T54] Bluetooth: hci3: command tx timeout [ 384.251770][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.258426][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.798661][ T54] Bluetooth: hci6: command tx timeout [ 411.459990][ T5246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 411.472517][ T5246] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 411.480931][ T5246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 411.499730][ T5246] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 411.507962][ T5246] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 411.519925][ T5246] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 413.608324][ T54] Bluetooth: hci7: command tx timeout [ 415.678558][ T54] Bluetooth: hci7: command tx timeout [ 417.758608][ T54] Bluetooth: hci7: command tx timeout [ 419.838604][ T54] Bluetooth: hci7: command tx timeout [ 427.349584][ T5246] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 427.363290][ T5246] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 427.371988][ T5246] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 427.388492][ T5246] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 427.396884][ T5246] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 427.404745][ T5246] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 429.528303][ T5246] Bluetooth: hci13: command tx timeout [ 431.600621][ T54] Bluetooth: hci13: command tx timeout [ 432.408270][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 433.061657][ T5247] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 433.072340][ T5247] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 433.081849][ T5247] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 433.111118][ T5247] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 433.121734][ T5247] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 433.131603][ T5247] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 433.678249][ T5246] Bluetooth: hci13: command tx timeout [ 435.198597][ T5246] Bluetooth: hci14: command tx timeout [ 435.699322][ T5247] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 435.714670][ T5247] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 435.724002][ T5247] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 435.733707][ T5247] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 435.742594][ T5247] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 435.751939][ T5247] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 435.763420][ T5247] Bluetooth: hci13: command tx timeout [ 437.059191][ T5248] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 437.076373][ T5248] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 437.085048][ T5248] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 437.095582][ T5248] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 437.104422][ T5248] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 437.114028][ T5248] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 437.288409][ T5248] Bluetooth: hci14: command tx timeout [ 437.531028][ T5248] Bluetooth: hci5: command 0x0406 tx timeout [ 437.537142][ T5248] Bluetooth: hci8: command 0x0406 tx timeout [ 437.838511][ T5246] Bluetooth: hci15: command tx timeout [ 439.203760][ T54] Bluetooth: hci16: command tx timeout [ 439.358482][ T54] Bluetooth: hci14: command tx timeout [ 439.938426][ T54] Bluetooth: hci15: command tx timeout [ 441.288246][ T5246] Bluetooth: hci16: command tx timeout [ 441.448503][ T5246] Bluetooth: hci14: command tx timeout [ 441.998376][ T5246] Bluetooth: hci15: command tx timeout [ 442.648420][ T5246] Bluetooth: hci9: command 0x0406 tx timeout [ 443.358463][ T5246] Bluetooth: hci16: command tx timeout [ 444.079594][ T5246] Bluetooth: hci15: command tx timeout [ 445.443079][ T54] Bluetooth: hci16: command tx timeout [ 445.695762][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.704930][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.959108][ T30] INFO: task syz.0.1033:7855 blocked for more than 143 seconds. [ 446.966832][ T30] Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 447.088583][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.097337][ T30] task:syz.0.1033 state:D stack:26640 pid:7855 tgid:7854 ppid:5594 flags:0x00000004 [ 447.188504][ T30] Call Trace: [ 447.191864][ T30] [ 447.194835][ T30] __schedule+0xe37/0x5490 [ 447.328678][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 447.334082][ T30] ? unwind_get_return_address+0x45/0xe0 [ 447.455858][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 447.518362][ T30] ? __pfx___schedule+0x10/0x10 [ 447.523344][ T30] ? schedule+0x298/0x350 [ 447.527823][ T30] ? __pfx_lock_release+0x10/0x10 [ 447.598984][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 447.603764][ T30] ? __mutex_trylock_common+0x78/0x250 [ 447.648243][ T30] schedule+0xe7/0x350 [ 447.652430][ T30] schedule_preempt_disabled+0x13/0x30 [ 447.675473][ T29] audit: type=1400 audit(1726761058.307:441): avc: denied { write } for pid=4655 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.737986][ T30] __mutex_lock+0x5b8/0x9c0 [ 447.743090][ T30] ? wg_set_device+0xce/0x13e0 [ 447.747941][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 447.808515][ T30] ? dev_get_by_name+0x278/0x400 [ 447.813574][ T30] ? wg_set_device+0xce/0x13e0 [ 447.819216][ T29] audit: type=1400 audit(1726761058.307:442): avc: denied { remove_name } for pid=4655 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.868382][ T30] wg_set_device+0xce/0x13e0 [ 447.873089][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 447.926970][ T30] ? __pfx_wg_set_device+0x10/0x10 [ 447.947524][ T29] audit: type=1400 audit(1726761058.307:443): avc: denied { add_name } for pid=4655 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.994042][ T30] ? __nla_parse+0x40/0x60 [ 448.018520][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 448.026005][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 448.108446][ T30] genl_family_rcv_msg_doit+0x202/0x2f0 [ 448.114128][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 448.161846][ T30] ? bpf_lsm_capable+0x9/0x10 [ 448.166619][ T30] ? security_capable+0x7e/0x260 [ 448.198286][ T30] ? ns_capable+0xd7/0x110 [ 448.202804][ T30] genl_rcv_msg+0x565/0x800 [ 448.207380][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.278743][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 448.284057][ T30] ? __pfx_wg_set_device+0x10/0x10 [ 448.338978][ T30] netlink_rcv_skb+0x16b/0x440 [ 448.343848][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.380063][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 448.385483][ T30] ? down_read+0xc9/0x330 [ 448.465771][ T30] ? __pfx_down_read+0x10/0x10 [ 448.473662][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 448.519801][ T30] genl_rcv+0x28/0x40 [ 448.523885][ T30] netlink_unicast+0x53c/0x7f0 [ 448.558989][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 448.564391][ T30] netlink_sendmsg+0x8b8/0xd70 [ 448.614227][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.648282][ T30] ? __import_iovec+0x1fd/0x6e0 [ 448.653280][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 448.689429][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 448.695001][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.738259][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 448.743569][ T30] ? try_to_wake_up+0xc08/0x13e0 [ 448.785449][ T30] ___sys_sendmsg+0x135/0x1e0 [ 448.808204][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.813506][ T30] ? find_held_lock+0x2d/0x110 [ 448.857037][ T30] ? __pfx_futex_wake+0x10/0x10 [ 448.880251][ T30] ? debug_check_no_obj_freed+0x328/0x600 [ 448.887518][ T30] ? __fget_light+0x173/0x210 [ 448.929867][ T30] __sys_sendmsg+0x117/0x1f0 [ 448.934569][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 448.999487][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 449.004562][ T30] do_syscall_64+0xcd/0x250 [ 449.060054][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.066063][ T30] RIP: 0033:0x7f2d1197def9 [ 449.098276][ T30] RSP: 002b:00007f2d127f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.106795][ T30] RAX: ffffffffffffffda RBX: 00007f2d11b35f80 RCX: 00007f2d1197def9 [ 449.176310][ T30] RDX: 0000000020000010 RSI: 0000000020001000 RDI: 0000000000000004 [ 449.238278][ T30] RBP: 00007f2d119f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 449.246346][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.318505][ T30] R13: 0000000000000000 R14: 00007f2d11b35f80 R15: 00007ffef78228c8 [ 449.326692][ T30] [ 449.358745][ T30] [ 449.358745][ T30] Showing all locks held in the system: [ 449.366546][ T30] 3 locks held by kworker/u8:0/11: [ 449.438300][ T30] #0: ffff88802efce948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 449.490213][ T30] #1: ffffc90000107d80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 449.558453][ T30] #2: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 449.606391][ T30] 1 lock held by khungtaskd/30: [ 449.648246][ T30] #0: ffffffff8ddba6a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 449.688214][ T30] 3 locks held by kworker/u8:2/35: [ 449.693405][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 449.778850][ T30] #1: ffffc90000ab7d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 449.828195][ T30] #2: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 449.837444][ T30] 8 locks held by kworker/1:1/46: [ 449.911827][ T30] 4 locks held by kworker/u8:4/63: [ 449.917023][ T30] #0: ffff88801bae3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 449.988492][ T30] #1: ffffc900015e7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 450.028251][ T30] #2: ffffffff8fab4590 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 450.037732][ T30] #3: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x22/0x3d0 [ 450.140462][ T30] 5 locks held by kworker/u8:7/1115: [ 450.145837][ T30] 3 locks held by kworker/0:2/1169: [ 450.191833][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 450.238216][ T30] #1: ffffc90004347d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 450.287230][ T30] #2: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 450.338287][ T30] 5 locks held by kworker/u8:10/2959: [ 450.343746][ T30] 2 locks held by getty/4979: [ 450.408181][ T30] #0: ffff88823bd980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 450.468545][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 450.508265][ T30] 3 locks held by kworker/1:3/5236: [ 450.513572][ T30] 2 locks held by kworker/1:4/5282: [ 450.589379][ T30] 6 locks held by kworker/1:5/5307: [ 450.594654][ T30] 2 locks held by syz.2.48/5430: [ 450.631455][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 450.668869][ T30] #1: ffffffff8dc5e4d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x53b/0x1e40 [ 450.732648][ T30] 1 lock held by syz.3.196/5808: [ 450.737727][ T30] 1 lock held by syz.1.621/6822: [ 450.769943][ T30] 1 lock held by syz-executor/7779: [ 450.775217][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 450.833452][ T30] 1 lock held by syz.1.1021/7824: [ 450.868207][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 450.877336][ T30] 1 lock held by syz.3.1028/7846: [ 450.958480][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 450.967590][ T30] 3 locks held by syz.0.1033/7855: [ 451.008247][ T30] #0: ffffffff8fb686f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 451.016581][ T30] #1: ffffffff8fb687a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x580/0x800 [ 451.126957][ T30] #2: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: wg_set_device+0xce/0x13e0 [ 451.168187][ T30] 1 lock held by syz-executor/7857: [ 451.173468][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 451.228190][ T30] 1 lock held by syz-executor/7860: [ 451.233470][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 451.314034][ T30] 1 lock held by syz-executor/7864: [ 451.344310][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 451.398232][ T30] 1 lock held by syz-executor/7866: [ 451.403515][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 451.468184][ T30] 1 lock held by syz-executor/7869: [ 451.473470][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 451.538602][ T30] 1 lock held by syz-executor/7872: [ 451.543879][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 451.618591][ T30] 1 lock held by syz-executor/7875: [ 451.623863][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 451.687329][ T30] 1 lock held by syz-executor/7879: [ 451.708249][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 451.717809][ T30] 1 lock held by syz-executor/7881: [ 451.798482][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 451.808038][ T30] 1 lock held by syz-executor/7890: [ 451.857404][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 451.897077][ T30] 1 lock held by syz-executor/7893: [ 451.932177][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 451.988196][ T30] 1 lock held by syz-executor/7896: [ 451.993473][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 452.058266][ T30] 1 lock held by syz-executor/7900: [ 452.108231][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 452.117788][ T30] 1 lock held by syz-executor/7902: [ 452.188400][ T30] #0: ffffffff8fac9f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 452.247542][ T30] [ 452.258598][ T30] ============================================= [ 452.258598][ T30] [ 452.291149][ T30] NMI backtrace for cpu 0 [ 452.295636][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 452.305838][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 452.316025][ T30] Call Trace: [ 452.319340][ T30] [ 452.322302][ T30] dump_stack_lvl+0x116/0x1f0 [ 452.327036][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 452.332052][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 452.338109][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 452.344194][ T30] watchdog+0xf0c/0x1240 [ 452.348588][ T30] ? __pfx_watchdog+0x10/0x10 [ 452.353402][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.358675][ T30] ? __kthread_parkme+0x148/0x220 [ 452.363755][ T30] ? __pfx_watchdog+0x10/0x10 [ 452.368479][ T30] kthread+0x2c1/0x3a0 [ 452.372597][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.377856][ T30] ? __pfx_kthread+0x10/0x10 [ 452.382588][ T30] ret_from_fork+0x45/0x80 [ 452.387065][ T30] ? __pfx_kthread+0x10/0x10 [ 452.391707][ T30] ret_from_fork_asm+0x1a/0x30 [ 452.396553][ T30] [ 452.401316][ T30] Sending NMI from CPU 0 to CPUs 1: [ 452.406668][ C1] NMI backtrace for cpu 1 [ 452.406688][ C1] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 452.406720][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 452.406738][ C1] Workqueue: usb_hub_wq hub_event [ 452.406774][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70 [ 452.406821][ C1] Code: cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 d4 ff 77 7e <65> 8b 05 d5 ff 77 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 [ 452.406847][ C1] RSP: 0018:ffffc90000a178b0 EFLAGS: 00000046 [ 452.406866][ C1] RAX: 0000000080010105 RBX: ffffc90000a17938 RCX: ffffffff813d0dbe [ 452.406885][ C1] RDX: ffff888021ad8000 RSI: 0000000000000004 RDI: 0000000000000001 [ 452.406902][ C1] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000004 [ 452.406923][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff9110d1aa [ 452.406940][ C1] R13: ffffc90000a18c68 R14: 0000000000000001 R15: 0000000000000001 [ 452.406957][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 452.406983][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.407002][ C1] CR2: 0000001b30d06ff8 CR3: 0000000028260000 CR4: 00000000003506f0 [ 452.407019][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 452.407035][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 452.407052][ C1] Call Trace: [ 452.407060][ C1] [ 452.407070][ C1] ? show_regs+0x8c/0xa0 [ 452.407111][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 452.407152][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 452.407191][ C1] ? nmi_handle+0x1a9/0x5c0 [ 452.407217][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 452.407260][ C1] ? default_do_nmi+0x6a/0x160 [ 452.407294][ C1] ? exc_nmi+0x170/0x1e0 [ 452.407327][ C1] ? end_repeat_nmi+0xf/0x53 [ 452.407356][ C1] ? unwind_next_frame+0xebe/0x23a0 [ 452.407384][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 452.407428][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 452.407471][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 452.407514][ C1] [ 452.407522][ C1] [ 452.407530][ C1] unwind_next_frame+0x1b21/0x23a0 [ 452.407558][ C1] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0xb7f/0x12f0 [ 452.407606][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 452.407642][ C1] arch_stack_walk+0x100/0x170 [ 452.407675][ C1] ? mac80211_hwsim_tx_frame+0x1eb/0x2a0 [ 452.407721][ C1] stack_trace_save+0x95/0xd0 [ 452.407754][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 452.407790][ C1] ? hlock_class+0x4e/0x130 [ 452.407819][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 452.407861][ C1] kasan_save_stack+0x33/0x60 [ 452.407902][ C1] ? kasan_save_stack+0x33/0x60 [ 452.407947][ C1] ? kasan_save_track+0x14/0x30 [ 452.407986][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 452.408023][ C1] ? dummy_urb_enqueue+0x8d/0x8a0 [ 452.408063][ C1] ? usb_hcd_submit_urb+0x2d1/0x2090 [ 452.408107][ C1] ? usb_submit_urb+0x87c/0x1730 [ 452.408139][ C1] ? ath9k_hif_usb_rx_cb+0xb93/0x15f0 [ 452.408176][ C1] ? __usb_hcd_giveback_urb+0x389/0x6e0 [ 452.408222][ C1] ? usb_hcd_giveback_urb+0x396/0x450 [ 452.408268][ C1] ? dummy_timer+0x17c3/0x38d0 [ 452.408313][ C1] ? __hrtimer_run_queues+0x20c/0xcc0 [ 452.408346][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 452.408379][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 452.408412][ C1] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 452.408459][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.408510][ C1] ? unwind_next_frame+0xdd9/0x23a0 [ 452.408541][ C1] ? arch_stack_walk+0x100/0x170 [ 452.408573][ C1] ? stack_trace_save+0x95/0xd0 [ 452.408612][ C1] ? kasan_save_stack+0x33/0x60 [ 452.408652][ C1] ? kasan_save_track+0x14/0x30 [ 452.408691][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 452.408714][ C1] ? kmem_cache_alloc_node_noprof+0x153/0x310 [ 452.408758][ C1] ? __alloc_skb+0x2b1/0x380 [ 452.408792][ C1] ? skb_copy+0x1c9/0x3a0 [ 452.408826][ C1] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0xb7f/0x12f0 [ 452.408892][ C1] kasan_save_track+0x14/0x30 [ 452.408939][ C1] __kasan_kmalloc+0xaa/0xb0 [ 452.408980][ C1] dummy_urb_enqueue+0x8d/0x8a0 [ 452.409020][ C1] ? usb_hcd_map_urb_for_dma+0x39e/0x1190 [ 452.409066][ C1] usb_hcd_submit_urb+0x2d1/0x2090 [ 452.409112][ C1] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 452.409154][ C1] ? lock_acquire+0x1b1/0x560 [ 452.409197][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 452.409236][ C1] ? find_held_lock+0x2d/0x110 [ 452.409269][ C1] ? ath9k_hif_usb_rx_cb+0xb86/0x15f0 [ 452.409305][ C1] usb_submit_urb+0x87c/0x1730 [ 452.409338][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 452.409368][ C1] ath9k_hif_usb_rx_cb+0xb93/0x15f0 [ 452.409404][ C1] ? find_held_lock+0x2d/0x110 [ 452.409436][ C1] ? usb_unanchor_urb+0x93/0xc0 [ 452.409465][ C1] ? __pfx_ath9k_hif_usb_rx_cb+0x10/0x10 [ 452.409504][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 452.409532][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 452.409576][ C1] __usb_hcd_giveback_urb+0x389/0x6e0 [ 452.409620][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 452.409665][ C1] dummy_timer+0x17c3/0x38d0 [ 452.409708][ C1] ? debug_object_deactivate+0x1f0/0x370 [ 452.409741][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 452.409787][ C1] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 452.409816][ C1] ? __pfx_lock_release+0x10/0x10 [ 452.409857][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 452.409896][ C1] ? timerqueue_del+0x83/0x150 [ 452.409940][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 452.409978][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 452.410015][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 452.410045][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 452.410090][ C1] hrtimer_interrupt+0x31b/0x800 [ 452.410130][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 452.410160][ C1] sysvec_apic_timer_interrupt+0x43/0xb0 [ 452.410202][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.410245][ C1] RIP: 0010:unwind_next_frame+0xdd9/0x23a0 [ 452.410274][ C1] Code: 84 37 f6 ff ff e8 27 cc 4e 00 48 8b 7c 24 28 e8 6d e6 ff ff 48 8b 0c 24 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 <0f> 85 2c 12 00 00 48 8b 54 24 10 48 89 43 48 48 b8 00 00 00 00 00 [ 452.410300][ C1] RSP: 0018:ffffc90000a185a8 EFLAGS: 00000246 [ 452.410320][ C1] RAX: ffffffff8b17fdb5 RBX: ffffc90000a18628 RCX: 1ffff920001430ce [ 452.410338][ C1] RDX: dffffc0000000000 RSI: ffffffff813cf339 RDI: ffffc90000a18ff0 [ 452.410356][ C1] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 452.410372][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff90af5f36 [ 452.410389][ C1] R13: ffffc90000a18ff8 R14: ffffffff90af5f3a R15: 0000000000000001 [ 452.410412][ C1] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 452.410453][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 452.410483][ C1] ? unwind_next_frame+0xdc3/0x23a0 [ 452.410511][ C1] ? irq_exit_rcu+0xbb/0x120 [ 452.410542][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 452.410578][ C1] arch_stack_walk+0x100/0x170 [ 452.410611][ C1] ? irq_exit_rcu+0xbb/0x120 [ 452.410643][ C1] stack_trace_save+0x95/0xd0 [ 452.410677][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 452.410713][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 452.410746][ C1] ? __pfx_mark_lock+0x10/0x10 [ 452.410782][ C1] ? hlock_class+0x4e/0x130 [ 452.410812][ C1] ? mark_lock+0xb5/0xc60 [ 452.410849][ C1] kasan_save_stack+0x33/0x60 [ 452.410888][ C1] ? kasan_save_stack+0x33/0x60 [ 452.410931][ C1] ? kasan_save_track+0x14/0x30 [ 452.410969][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 452.410993][ C1] ? kmem_cache_alloc_node_noprof+0x153/0x310 [ 452.411036][ C1] ? __alloc_skb+0x2b1/0x380 [ 452.411068][ C1] ? skb_copy+0x1c9/0x3a0 [ 452.411102][ C1] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0xb7f/0x12f0 [ 452.411145][ C1] ? mac80211_hwsim_tx_frame+0x1eb/0x2a0 [ 452.411186][ C1] ? mac80211_hwsim_beacon_tx+0x592/0xa00 [ 452.411227][ C1] ? __iterate_interfaces+0x2d0/0x5d0 [ 452.411265][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 452.411310][ C1] ? mac80211_hwsim_beacon+0x105/0x200 [ 452.411343][ C1] ? __hrtimer_run_queues+0x20c/0xcc0 [ 452.411371][ C1] ? hrtimer_run_softirq+0x17d/0x350 [ 452.411399][ C1] ? handle_softirqs+0x216/0x8f0 [ 452.411426][ C1] ? irq_exit_rcu+0xbb/0x120 [ 452.411479][ C1] kasan_save_track+0x14/0x30 [ 452.411520][ C1] __kasan_slab_alloc+0x89/0x90 [ 452.411546][ C1] kmem_cache_alloc_node_noprof+0x153/0x310 [ 452.411589][ C1] ? __alloc_skb+0x2b1/0x380 [ 452.411627][ C1] __alloc_skb+0x2b1/0x380 [ 452.411662][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 452.411695][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 452.411734][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.411776][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 452.411807][ C1] skb_copy+0x1c9/0x3a0 [ 452.411845][ C1] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb7f/0x12f0 [ 452.411896][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl.isra.0+0x10/0x10 [ 452.411949][ C1] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 452.411986][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.412027][ C1] ? read_tsc+0x9/0x20 [ 452.412058][ C1] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 452.412103][ C1] ? mac80211_hwsim_monitor_rx+0x1cd/0x850 [ 452.412147][ C1] mac80211_hwsim_tx_frame+0x1eb/0x2a0 [ 452.412197][ C1] mac80211_hwsim_beacon_tx+0x592/0xa00 [ 452.412244][ C1] ? find_held_lock+0x2d/0x110 [ 452.412279][ C1] __iterate_interfaces+0x2d0/0x5d0 [ 452.412322][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 452.412371][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 452.412413][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 452.412447][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 452.412495][ C1] mac80211_hwsim_beacon+0x105/0x200 [ 452.412532][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 452.412568][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 452.412599][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 452.412644][ C1] hrtimer_run_softirq+0x17d/0x350 [ 452.412676][ C1] handle_softirqs+0x216/0x8f0 [ 452.412709][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 452.412744][ C1] irq_exit_rcu+0xbb/0x120 [ 452.412772][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 452.412814][ C1] [ 452.412822][ C1] [ 452.412831][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.412874][ C1] RIP: 0010:free_unref_page_commit+0x68e/0xfe0 [ 452.412940][ C1] Code: 0f bf 73 58 44 89 e8 45 31 db c1 e0 05 39 c6 89 f2 0f 8d 2f fc ff ff 41 83 fe 1f 0f 86 fa fb ff ff e9 15 9f 2f 09 43 8d 04 76 <44> 01 e8 89 44 24 24 48 98 48 83 f8 0e 0f 87 38 07 00 00 48 8d 50 [ 452.412966][ C1] RSP: 0018:ffffc90000b67600 EFLAGS: 00000293 [ 452.412985][ C1] RAX: 0000000000000000 RBX: ffff8880b8944b40 RCX: 0000000000000000 [ 452.413002][ C1] RDX: 0000000000000005 RSI: ffff8880b8944b40 RDI: ffff8880b8944b95 [ 452.413020][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffea0001053b40 [ 452.413037][ C1] R10: ffffffff969cd707 R11: 0000000000000000 R12: ffff88813fffa740 [ 452.413054][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88813fffa740 [ 452.413090][ C1] free_unref_page+0x74d/0xe40 [ 452.413121][ C1] __put_partials+0x14c/0x170 [ 452.413164][ C1] qlist_free_all+0x4e/0x140 [ 452.413204][ C1] ? usb_alloc_urb+0x69/0xa0 [ 452.413228][ C1] kasan_quarantine_reduce+0x192/0x1e0 [ 452.413271][ C1] __kasan_kmalloc+0x8a/0xb0 [ 452.413313][ C1] __kmalloc_noprof+0x1e8/0x400 [ 452.413342][ C1] usb_alloc_urb+0x69/0xa0 [ 452.413368][ C1] usb_control_msg+0x1d4/0x4b0 [ 452.413399][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 452.413428][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 452.413465][ C1] ? __pfx_process_timeout+0x10/0x10 [ 452.413504][ C1] hub_ext_port_status+0x14e/0x670 [ 452.413539][ C1] hub_port_debounce+0x1a3/0x3d0 [ 452.413573][ C1] ? sysvec_error_interrupt+0x80/0xb0 [ 452.413617][ C1] ? __pfx_hub_port_debounce+0x10/0x10 [ 452.413656][ C1] ? kfree_const+0x55/0x60 [ 452.413696][ C1] ? kobject_put+0x210/0x5a0 [ 452.413730][ C1] hub_event+0x3461/0x4e10 [ 452.413784][ C1] ? __pfx_hub_event+0x10/0x10 [ 452.413820][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 452.413860][ C1] ? __pfx_lock_release+0x10/0x10 [ 452.413908][ C1] process_one_work+0x9c5/0x1b40 [ 452.413947][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 452.413987][ C1] ? __pfx_process_one_work+0x10/0x10 [ 452.414035][ C1] ? assign_work+0x1a0/0x250 [ 452.414076][ C1] worker_thread+0x6c8/0xf00 [ 452.414111][ C1] ? __pfx_worker_thread+0x10/0x10 [ 452.414136][ C1] kthread+0x2c1/0x3a0 [ 452.414165][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.414205][ C1] ? __pfx_kthread+0x10/0x10 [ 452.414236][ C1] ret_from_fork+0x45/0x80 [ 452.414275][ C1] ? __pfx_kthread+0x10/0x10 [ 452.414306][ C1] ret_from_fork_asm+0x1a/0x30 [ 452.414355][ C1] [ 455.268454][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 455.275461][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 455.285653][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 455.295760][ T30] Call Trace: [ 455.299066][ T30] [ 455.302023][ T30] dump_stack_lvl+0x3d/0x1f0 [ 455.306664][ T30] panic+0x6dc/0x7c0 [ 455.310633][ T30] ? __pfx_panic+0x10/0x10 [ 455.315104][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 455.320522][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 455.326554][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 455.331971][ T30] ? watchdog+0xd76/0x1240 [ 455.336426][ T30] ? watchdog+0xd69/0x1240 [ 455.340897][ T30] watchdog+0xd87/0x1240 [ 455.345204][ T30] ? __pfx_watchdog+0x10/0x10 [ 455.349928][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 455.355198][ T30] ? __kthread_parkme+0x148/0x220 [ 455.360281][ T30] ? __pfx_watchdog+0x10/0x10 [ 455.365004][ T30] kthread+0x2c1/0x3a0 [ 455.369121][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.374385][ T30] ? __pfx_kthread+0x10/0x10 [ 455.379030][ T30] ret_from_fork+0x45/0x80 [ 455.383509][ T30] ? __pfx_kthread+0x10/0x10 [ 455.388147][ T30] ret_from_fork_asm+0x1a/0x30 [ 455.392989][ T30] [ 455.396967][ T30] Kernel Offset: disabled [ 455.401301][ T30] Rebooting in 86400 seconds..