last executing test programs: 1m11.877395814s ago: executing program 0 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1m11.768356874s ago: executing program 0 (id=1281): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mprotect(&(0x7f0000a64000/0x1000)=nil, 0x1000, 0x8) 1m11.226657845s ago: executing program 0 (id=1289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pivot_root(0x0, 0x0) 1m11.200822479s ago: executing program 0 (id=1290): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261) 1m11.125181645s ago: executing program 0 (id=1291): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1m10.742455051s ago: executing program 0 (id=1299): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x8003, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000280)={{0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 1m10.454756933s ago: executing program 32 (id=1299): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x8003, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000280)={{0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 21.892249357s ago: executing program 5 (id=2042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x4800) 21.804241866s ago: executing program 5 (id=2045): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 21.702777214s ago: executing program 5 (id=2048): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x22003, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 21.621032588s ago: executing program 5 (id=2049): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 21.446586126s ago: executing program 5 (id=2051): syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x1007734, 0x80, 0x3, 0x34f}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 21.262347707s ago: executing program 5 (id=2055): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 21.048065783s ago: executing program 33 (id=2055): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 6.938960458s ago: executing program 6 (id=2270): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x44, 0x0, r0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0, 0x8800}) io_uring_enter(r1, 0x59e5, 0x9642, 0xe, 0x0, 0x0) 6.747536632s ago: executing program 6 (id=2274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000340)={[{0x7ff, 0x0, 0x0, 0xd, 0x37, 0x7, 0x0, 0x7b, 0x8, 0xe9, 0x8, 0x1, 0x7}, {0x81, 0x8, 0x9, 0x9, 0x2, 0x2, 0x1, 0x9d, 0x61, 0x5, 0x1, 0x5, 0x9}, {0x0, 0x23, 0x5, 0x26, 0x9, 0x0, 0x5, 0x1, 0xcf, 0x3, 0x6, 0x70, 0x6}], 0x200}) 6.566608713s ago: executing program 6 (id=2277): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 6.377525473s ago: executing program 6 (id=2279): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b03, 0x0) 3.466912759s ago: executing program 6 (id=2303): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.502769578s ago: executing program 4 (id=2323): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) 2.340162402s ago: executing program 4 (id=2326): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.306316029s ago: executing program 3 (id=2328): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000000}) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) 2.201630449s ago: executing program 3 (id=2329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)) 2.129678733s ago: executing program 3 (id=2330): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400894e934fb2a0e22f709030", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32=r2], 0x44}}, 0x40000c0) 2.066406493s ago: executing program 3 (id=2331): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5}, 0x18}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r1, 0x3}, &(0x7f00000002c0)=0x8) 2.023697431s ago: executing program 3 (id=2333): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)={0x0, 0x31}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000a40)={0x20, 0x6}, 0x0, 0x0, &(0x7f0000000b00)={0xc0, 0xa1, 0x4, 0xe84a}, &(0x7f0000000b40)={0x40, 0xa0, 0x4, 0xab2a}, &(0x7f0000000b80)={0xc0, 0xa2, 0x2f, "f79ae3f50f9e1eb2f4f34e148892e3f18a32bfc4af5d109184f62a11b05ec48f3d9268c134832544e1d8855f602497"}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x40, 0x5, 0x35, "ccbaa9ffeee18f2d580ea6d47f0a09d2e7608584af249cef70e33eaf36df440e80fc20e97e38a48306c1a2f92261ea8adb0fc0f643"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x53}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000580)={0x40, 0xb, 0x2, '\'/'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="153baf55bbc7"}, &(0x7f0000000640)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "a3fe"}, 0x0, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xff}}) 1.881671306s ago: executing program 6 (id=2335): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) write$dsp(r1, &(0x7f0000000280)="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", 0x100000) 1.666017077s ago: executing program 2 (id=2336): r0 = semget$private(0x0, 0x6, 0x3b1) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x2, 0x31, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000000180)=[{0x2, 0x0, 0x400}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 1.561300948s ago: executing program 2 (id=2337): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x22, 0x0) 1.524331326s ago: executing program 4 (id=2338): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) 1.523635677s ago: executing program 2 (id=2339): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 1.478007153s ago: executing program 2 (id=2340): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) io_setup(0x9, &(0x7f0000001d00)=0x0) io_submit(r2, 0x3, &(0x7f0000000340)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x400, r1, &(0x7f0000000380)="dd634889887d6bd66b0ca988d4ed0066e4a4b70ef2052344f8fa716b2bacbdcd714aecc8da98d3e365fda3a8e4ad11e110bef7fedc619533f597851ecfa1174ff6730852c385d2b1", 0x48, 0x5, 0x0, 0x0, r1}, 0x0, 0x0]) 1.412569489s ago: executing program 4 (id=2341): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a", 0x86}], 0x1}, 0x20000004) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 1.372684794s ago: executing program 4 (id=2342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x80}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 487.198411ms ago: executing program 4 (id=2343): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 485.243061ms ago: executing program 1 (id=2344): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x7, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) close(0x4) write(r0, 0x0, 0x0) 452.154634ms ago: executing program 2 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 427.928262ms ago: executing program 2 (id=2346): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548010203010902ff0001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x0, 0x0}], 0x1}) 375.766325ms ago: executing program 1 (id=2347): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x34, r1, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 344.690878ms ago: executing program 1 (id=2348): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="611272000000000061137e0000000000bf2000000000000007020100180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7de"], 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 313.723917ms ago: executing program 1 (id=2349): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x47be, 0x1, 0x0, 0x0, 0x0) 198.256023ms ago: executing program 1 (id=2350): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r2, 0x4}) 34.068793ms ago: executing program 1 (id=2351): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x260}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=2352): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) kernel console output (not intermixed with test programs): ss `syz.1.1380'. [ 140.006715][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 140.199143][ T5828] Bluetooth: hci4: command tx timeout [ 140.298411][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 140.319367][ T5868] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 140.359325][ T30] audit: type=1400 audit(1768622082.655:438): avc: denied { append } for pid=8986 comm="syz.1.1386" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.360784][ T5868] imon:send_packet: packet tx failed (-71) [ 140.455436][ T5868] imon 5-1:0.0: panel buttons/knobs setup failed [ 140.529156][ T5828] block nbd2: Receive control failed (result -32) [ 140.540613][ T5868] rc_core: IR keymap rc-imon-pad not found [ 140.546730][ T5868] Registered IR keymap rc-empty [ 140.552679][ T5868] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 140.563207][ T5868] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 140.574833][ T5868] imon:send_packet: packet tx failed (-71) [ 140.610912][ T5868] imon 5-1:0.0: remote input dev register failed [ 140.617934][ T5868] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 140.657766][ T5868] imon 5-1:0.0: unable to initialize intf0, err 0 [ 140.665147][ T5868] imon:imon_probe: failed to initialize context! [ 140.671614][ T5868] imon 5-1:0.0: unable to register, err -19 [ 140.681593][ T5868] usb 5-1: USB disconnect, device number 11 [ 140.908333][ T30] audit: type=1400 audit(1768622083.232:439): avc: denied { create } for pid=9017 comm="syz.4.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.996618][ T30] audit: type=1326 audit(1768622083.232:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 141.031191][ T30] audit: type=1326 audit(1768622083.232:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 141.062821][ T30] audit: type=1326 audit(1768622083.232:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 141.118688][ T30] audit: type=1326 audit(1768622083.232:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 141.152368][ T30] audit: type=1326 audit(1768622083.232:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 141.176987][ T30] audit: type=1326 audit(1768622083.232:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 141.237240][ T30] audit: type=1326 audit(1768622083.232:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 141.484034][ T90] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 141.626871][ T90] usb 3-1: Using ep0 maxpacket: 32 [ 141.634362][ T90] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 141.643059][ T90] usb 3-1: config 0 has no interface number 0 [ 141.651154][ T90] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 141.660671][ T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.668830][ T90] usb 3-1: Product: syz [ 141.673292][ T90] usb 3-1: Manufacturer: syz [ 141.678132][ T90] usb 3-1: SerialNumber: syz [ 141.685458][ T90] usb 3-1: config 0 descriptor?? [ 141.693088][ T90] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 141.713023][ T5825] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 141.721332][ T5828] Bluetooth: hci5: command 0xfc11 tx timeout [ 141.874728][ T9049] mkiss: ax0: crc mode is auto. [ 141.896860][ T90] usb 3-1: qt2_attach - failed to power on unit: -71 [ 141.918472][ T90] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 141.938106][ T90] usb 3-1: USB disconnect, device number 12 [ 142.179699][ T5825] Bluetooth: hci4: command tx timeout [ 142.340910][ T9072] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 142.381673][ T1078] Bluetooth: hci5: Frame reassembly failed (-84) [ 142.388477][ T76] Bluetooth: hci5: Frame reassembly failed (-84) [ 142.424602][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 142.584332][ T90] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 142.627490][ T90] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 142.827367][ T90] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 142.914295][ T9086] hid-generic 0000:0000:0000.000D: pid 9086 passed too short report [ 142.989306][ T90] usb 4-1: Using ep0 maxpacket: 32 [ 142.996264][ T90] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 143.012072][ T90] usb 4-1: config 0 has no interface number 0 [ 143.027183][ T90] usb 4-1: config 0 interface 151 has no altsetting 0 [ 143.048660][ T90] usb 4-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 143.065496][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.073605][ T90] usb 4-1: Product: syz [ 143.083529][ T90] usb 4-1: Manufacturer: syz [ 143.090428][ T90] usb 4-1: SerialNumber: syz [ 143.101420][ T90] usb 4-1: config 0 descriptor?? [ 143.125134][ T90] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 143.293715][ T5876] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.439770][ T5876] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.449056][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.457156][ T5876] usb 2-1: Product: syz [ 143.461425][ T5876] usb 2-1: Manufacturer: syz [ 143.466137][ T5876] usb 2-1: SerialNumber: syz [ 143.478497][ T5876] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 143.498845][ T931] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 143.710512][ T90] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 143.718794][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.727422][ T90] sq905c 4-1:0.151: probe with driver sq905c failed with error -71 [ 143.735826][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.745733][ T90] usb 4-1: USB disconnect, device number 14 [ 143.961768][ T5876] usb 2-1: USB disconnect, device number 4 [ 144.265587][ T5897] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 144.303556][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 144.310095][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 144.408807][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 144.434321][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 144.434337][ T30] audit: type=1400 audit(1768622086.928:461): avc: denied { bind } for pid=9137 comm="syz.3.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.456003][ T5897] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.480258][ T5897] usb 6-1: config 0 has no interface number 0 [ 144.501938][ T5897] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 144.518802][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.519013][ T30] audit: type=1400 audit(1768622087.022:462): avc: denied { mounton } for pid=9141 comm="syz.3.1459" path="/proc/613" dev="proc" ino=25561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 144.541842][ T5897] usb 6-1: Product: syz [ 144.553993][ T5897] usb 6-1: Manufacturer: syz [ 144.558601][ T5897] usb 6-1: SerialNumber: syz [ 144.585080][ T5897] usb 6-1: config 0 descriptor?? [ 144.600955][ T5897] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 144.760433][ T931] usb 2-1: Service connection timeout for: 256 [ 144.777166][ T931] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 144.813358][ T5897] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 144.832452][ T931] ath9k_htc: Failed to initialize the device [ 144.856678][ T5897] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 144.866173][ T5876] usb 2-1: ath9k_htc: USB layer deinitialized [ 145.045942][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 100 [ 145.240014][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 145.249087][ T5876] usb 6-1: USB disconnect, device number 2 [ 145.261264][ T5876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 145.276118][ T5876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 145.288163][ T5876] quatech2 6-1:0.51: device disconnected [ 145.558781][ T30] audit: type=1326 audit(1768622088.114:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 145.637930][ T30] audit: type=1326 audit(1768622088.114:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 145.692275][ T30] audit: type=1326 audit(1768622088.125:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 145.727947][ T9192] syzkaller1: entered promiscuous mode [ 145.751328][ T9192] syzkaller1: entered allmulticast mode [ 145.762666][ T30] audit: type=1326 audit(1768622088.125:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 145.821844][ T30] audit: type=1326 audit(1768622088.125:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 145.871246][ T30] audit: type=1326 audit(1768622088.146:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 145.921674][ T30] audit: type=1326 audit(1768622088.146:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 145.976282][ T30] audit: type=1326 audit(1768622088.156:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 146.103670][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 146.256007][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 146.262972][ T5876] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.274921][ T5876] usb 6-1: config 0 has no interface number 0 [ 146.291160][ T5876] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 146.303424][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.324407][ T5876] usb 6-1: config 0 descriptor?? [ 146.344490][ T5876] hso 6-1:0.1: Failed to find BULK IN ep [ 146.525893][ T5876] usb 6-1: USB disconnect, device number 3 [ 146.939972][ T9223] blk_print_req_error: 54 callbacks suppressed [ 146.939990][ T9223] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.020253][ T9223] buffer_io_error: 54 callbacks suppressed [ 147.020275][ T9223] Buffer I/O error on dev nbd1, logical block 0, async page read [ 147.054751][ T9223] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.090850][ T9223] Buffer I/O error on dev nbd1, logical block 1, async page read [ 147.109175][ T9223] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.151062][ T9230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1494'. [ 147.172576][ T9223] Buffer I/O error on dev nbd1, logical block 2, async page read [ 147.180165][ T9230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1494'. [ 147.193632][ T9223] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.242882][ T9223] Buffer I/O error on dev nbd1, logical block 3, async page read [ 147.261097][ T9223] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.275231][ T9223] Buffer I/O error on dev nbd1, logical block 0, async page read [ 147.298688][ T9223] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.323735][ T9223] Buffer I/O error on dev nbd1, logical block 1, async page read [ 147.331556][ T9223] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.355658][ T9223] Buffer I/O error on dev nbd1, logical block 2, async page read [ 147.365409][ T9223] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.376451][ T9223] Buffer I/O error on dev nbd1, logical block 3, async page read [ 147.404639][ T9223] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.416627][ T9223] Buffer I/O error on dev nbd1, logical block 0, async page read [ 147.425652][ T9223] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.435982][ T9223] Buffer I/O error on dev nbd1, logical block 1, async page read [ 147.446837][ T9223] ldm_validate_partition_table(): Disk read failed. [ 147.457103][ T9223] Dev nbd1: unable to read RDB block 0 [ 147.463156][ T9223] nbd1: unable to read partition table [ 147.516156][ T5876] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 147.526663][ T9228] ldm_validate_partition_table(): Disk read failed. [ 147.558238][ T9228] Dev nbd1: unable to read RDB block 0 [ 147.613060][ T9228] nbd1: unable to read partition table [ 147.625477][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 147.643383][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=62, location=62 [ 147.654114][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=61, location=61 [ 147.663860][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=60, location=60 [ 147.677340][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 147.689923][ T5876] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 147.704359][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.715579][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 147.734211][ T5876] usb 3-1: Product: syz [ 147.738466][ T5876] usb 3-1: Manufacturer: syz [ 147.745586][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 147.755190][ T5876] usb 3-1: SerialNumber: syz [ 147.763538][ T5876] usb 3-1: config 0 descriptor?? [ 147.773566][ T5876] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 147.783185][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=30, location=30 [ 147.793154][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=29, location=29 [ 147.813431][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=28, location=28 [ 147.825144][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 147.843208][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 147.854373][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=14, location=14 [ 147.864407][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=13, location=13 [ 147.874997][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=12, location=12 [ 147.887106][ T9228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 147.897534][ T9228] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 148.070292][ T9268] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1510'. [ 148.085659][ T9268] IPVS: Error connecting to the multicast addr [ 148.112030][ T9267] mkiss: ax0: crc mode is auto. [ 148.214547][ T9276] input: syz1 as /devices/virtual/input/input19 [ 148.545446][ T5876] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 148.563149][ T5876] usb 3-1: USB disconnect, device number 13 [ 149.249658][ T9317] batadv_slave_0: entered promiscuous mode [ 149.266722][ T9316] batadv_slave_0: left promiscuous mode [ 149.476870][ T9333] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 149.513724][ T9333] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 149.538263][ T9333] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 149.548732][ T9333] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 149.559094][ T9333] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 149.569555][ T9333] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 149.579823][ T9333] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 149.589668][ T9333] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 149.599349][ T5958] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 149.607888][ T9333] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 149.753564][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.775725][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.798935][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.814217][ T5958] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.841893][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.860650][ T5958] usb 3-1: config 0 descriptor?? [ 150.130244][ T9367] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 150.143358][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 150.207774][ T9369] bridge0: port 3(syz_tun) entered blocking state [ 150.214728][ T9369] bridge0: port 3(syz_tun) entered disabled state [ 150.222248][ T9369] syz_tun: entered allmulticast mode [ 150.229334][ T9369] syz_tun: entered promiscuous mode [ 150.265052][ T5958] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 150.275122][ T90] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.289312][ T5958] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 150.447440][ T90] usb 5-1: Using ep0 maxpacket: 32 [ 150.454171][ T90] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.465213][ T5958] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 150.472904][ T90] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.482903][ T90] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 150.492610][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.506365][ T90] usb 5-1: config 0 descriptor?? [ 150.564788][ T931] usb 3-1: USB disconnect, device number 14 [ 150.646590][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 150.653113][ T5958] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 150.661301][ T5958] usb 4-1: config 0 has no interface number 0 [ 150.667461][ T5958] usb 4-1: config 0 interface 184 has no altsetting 0 [ 150.676143][ T5958] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 150.685346][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.694756][ T5958] usb 4-1: Product: syz [ 150.698931][ T5958] usb 4-1: Manufacturer: syz [ 150.703635][ T5958] usb 4-1: SerialNumber: syz [ 150.709811][ T5958] usb 4-1: config 0 descriptor?? [ 150.716477][ T5958] smsc75xx v1.0.0 [ 150.903495][ T90] aquacomputer_d5next 0003:0C70:F00E.000F: unknown main item tag 0x0 [ 150.912799][ T90] aquacomputer_d5next 0003:0C70:F00E.000F: unknown main item tag 0x0 [ 150.922564][ T90] aquacomputer_d5next 0003:0C70:F00E.000F: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.4-1/input0 [ 151.100631][ T90] usb 5-1: USB disconnect, device number 12 [ 151.475224][ T90] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.630062][ T90] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.643113][ T90] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.653052][ T90] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.667454][ T90] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.680797][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.689250][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 151.701318][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 151.711417][ T90] usb 2-1: config 0 descriptor?? [ 151.717561][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 151.730751][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 151.740722][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 151.751213][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 151.761327][ T5958] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 151.779341][ T5958] usb 4-1: USB disconnect, device number 15 [ 152.070900][ T9396] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1569'. [ 152.080697][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 152.088327][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 152.140120][ T90] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 152.450669][ T5958] usb 2-1: USB disconnect, device number 5 [ 152.660230][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1576'. [ 152.713637][ T5876] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 152.731549][ T6242] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.763391][ T6242] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.789601][ T6242] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.828184][ T9416] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.875342][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 152.883942][ T5876] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 152.893228][ T5876] usb 4-1: config 0 has no interface number 0 [ 152.911265][ T5876] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 152.930591][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.940272][ T5876] usb 4-1: Product: syz [ 152.949077][ T5876] usb 4-1: Manufacturer: syz [ 152.959835][ T5876] usb 4-1: SerialNumber: syz [ 152.977303][ T5876] usb 4-1: config 0 descriptor?? [ 152.998802][ T5876] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 153.197623][ T5876] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 153.229695][ T5876] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 153.679126][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 153.679332][ T5930] usb 4-1: USB disconnect, device number 16 [ 153.697065][ T5930] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 153.721434][ T5930] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 153.736274][ T5958] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.744084][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 153.746428][ T30] audit: type=1400 audit(1768622096.682:478): avc: denied { relabelfrom } for pid=9448 comm="syz.2.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 153.782277][ T5930] quatech2 4-1:0.51: device disconnected [ 153.791843][ T30] audit: type=1400 audit(1768622096.682:479): avc: denied { relabelto } for pid=9448 comm="syz.2.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 153.888422][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.890247][ T5876] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 153.899643][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.910590][ T5876] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.937836][ T5958] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.967702][ T5958] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.988638][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.008890][ T5958] usb 2-1: config 0 descriptor?? [ 154.165547][ T9454] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1592'. [ 154.237773][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 154.262580][ T9416] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.284521][ T9416] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.401934][ T9459] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 154.408753][ T9459] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 154.424866][ T9459] vhci_hcd vhci_hcd.0: Device attached [ 154.453796][ T5958] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 154.471377][ T9460] vhci_hcd: cannot find the pending unlink 3 [ 154.477533][ T9460] vhci_hcd: connection closed [ 154.479420][ T6242] vhci_hcd vhci_hcd.3: stop threads [ 154.502962][ T6242] vhci_hcd vhci_hcd.3: release socket [ 154.508657][ T6242] vhci_hcd vhci_hcd.3: disconnect device [ 154.610244][ T9416] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.656774][ T9416] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.735337][ T931] usb 2-1: USB disconnect, device number 6 [ 154.787665][ T9416] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.821121][ T9416] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.859840][ T9470] hsr0: entered promiscuous mode [ 154.873939][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1597'. [ 154.884138][ T9470] hsr_slave_0: left promiscuous mode [ 154.895274][ T9470] hsr_slave_1: left promiscuous mode [ 154.919490][ T9470] hsr0 (unregistering): left promiscuous mode [ 154.926891][ T30] audit: type=1326 audit(1768622097.952:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 154.954260][ T30] audit: type=1326 audit(1768622097.984:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 154.981202][ T30] audit: type=1326 audit(1768622097.984:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 155.012928][ T30] audit: type=1326 audit(1768622097.984:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faea918df90 code=0x7ffc0000 [ 155.084639][ T3969] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.094798][ T30] audit: type=1326 audit(1768622097.984:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 155.096378][ T3969] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.118603][ T30] audit: type=1326 audit(1768622097.984:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 155.151305][ T30] audit: type=1326 audit(1768622097.984:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 155.209784][ T30] audit: type=1326 audit(1768622097.984:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea918f749 code=0x7ffc0000 [ 155.245515][ T3969] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.255442][ T3969] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.274572][ T3969] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.305283][ T3969] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.306263][ T9483] netlink: 'syz.2.1603': attribute type 83 has an invalid length. [ 155.333027][ T3969] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.356282][ T3969] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.420935][ T90] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 155.550909][ T9498] /dev/nullb0: Can't open blockdev [ 155.571439][ T90] usb 4-1: Using ep0 maxpacket: 8 [ 155.583274][ T90] usb 4-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 155.592451][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.607085][ T90] usb 4-1: Product: syz [ 155.611528][ T90] usb 4-1: Manufacturer: syz [ 155.623101][ T90] usb 4-1: SerialNumber: syz [ 155.643954][ T90] usb 4-1: config 0 descriptor?? [ 155.655745][ T90] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 155.814695][ T9511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1616'. [ 155.912149][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.932139][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.944185][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.951715][ T5930] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 155.954255][ T9517] Bluetooth: MGMT ver 1.23 [ 156.042165][ T9515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.126274][ T5930] usb 6-1: Using ep0 maxpacket: 16 [ 156.133814][ T5930] usb 6-1: config 0 has no interfaces? [ 156.140820][ T5930] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.150852][ T5930] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.160882][ T5930] usb 6-1: Manufacturer: syz [ 156.168070][ T5930] usb 6-1: config 0 descriptor?? [ 156.437488][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1613'. [ 156.461768][ T5876] usb 6-1: USB disconnect, device number 4 [ 156.651718][ T931] usb 4-1: USB disconnect, device number 17 [ 156.683774][ T9545] input: syz1 as /devices/virtual/input/input22 [ 156.749971][ C1] sd 0:0:1:0: [sda] tag#631 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 156.760328][ C1] sd 0:0:1:0: [sda] tag#631 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 156.810417][ T5876] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.971675][ T5876] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 156.991568][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.006767][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.016701][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 157.032955][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 157.042815][ T5876] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 157.051073][ T931] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 157.064885][ T5876] usb 2-1: Manufacturer: syz [ 157.079930][ T5876] usb 2-1: config 0 descriptor?? [ 157.213228][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.234937][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.256594][ T931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.273809][ T931] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.283823][ T931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.296390][ T931] usb 5-1: config 0 descriptor?? [ 157.448057][ T9515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.460796][ T9515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.469340][ T9573] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1643'. [ 157.490735][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1643'. [ 157.507907][ T5876] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 157.533629][ T5876] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 157.616377][ T9515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.627171][ T9515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.707445][ T931] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 157.716077][ T9515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.730048][ T9515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.772756][ T5930] usb 2-1: USB disconnect, device number 7 [ 157.774727][ T931] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 157.824391][ T2118] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.833061][ T2118] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.848422][ T2118] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.856885][ T2118] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.871134][ T2118] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.879578][ T2118] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.892874][ T2118] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.901602][ T2118] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.932223][ T931] usb 5-1: USB disconnect, device number 13 [ 158.247333][ T931] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 158.392286][ T931] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 158.404850][ T931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.415861][ T931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.425885][ T931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 158.440183][ T931] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 158.449422][ T931] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 158.457663][ T931] usb 3-1: Manufacturer: syz [ 158.464099][ T931] usb 3-1: config 0 descriptor?? [ 158.532944][ T5930] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.675855][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 158.684618][ T5930] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 158.698241][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.706460][ T5930] usb 2-1: Product: syz [ 158.710673][ T5930] usb 2-1: Manufacturer: syz [ 158.718349][ T5930] usb 2-1: SerialNumber: syz [ 158.725059][ T5930] usb 2-1: config 0 descriptor?? [ 158.732548][ T5930] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 158.741028][ T5930] pctv452e: pctv452e_power_ctrl: 1 [ 158.741028][ T5930] [ 158.748416][ T5930] usb 2-1: selecting invalid altsetting 3 [ 158.755323][ T5930] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 158.755323][ T5930] [ 158.765918][ T5930] dvb-usb: bulk message failed: -22 (5/0) [ 158.774279][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 158.784543][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.798619][ T5930] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 158.808070][ T5930] usb 2-1: media controller created [ 158.813812][ T5930] dvb-usb: bulk message failed: -22 (8/0) [ 158.821210][ T5930] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 158.829546][ T5930] dvb-usb: MAC address reading failed. [ 158.844959][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.865678][ T931] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 158.891920][ T931] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 158.905386][ T5930] DVB: Unable to find symbol stb0899_attach() [ 158.911474][ T5930] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 158.932111][ T9585] dvb-usb: bulk message failed: -22 (7/0) [ 158.938854][ T9585] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 158.952087][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.971363][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.992089][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.005249][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.016930][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.027452][ T24] usb 4-1: config 0 descriptor?? [ 159.047316][ T5930] rc_core: IR keymap rc-tt-1500 not found [ 159.053094][ T5930] Registered IR keymap rc-empty [ 159.060978][ T5930] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 159.074336][ T5930] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input24 [ 159.089629][ T5930] dvb-usb: schedule remote query interval to 100 msecs. [ 159.097230][ T5930] pctv452e: pctv452e_power_ctrl: 0 [ 159.097230][ T5930] [ 159.123080][ T5930] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 159.138941][ T5930] usb 2-1: USB disconnect, device number 8 [ 159.144668][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 159.173016][ T931] usb 3-1: USB disconnect, device number 15 [ 159.206116][ T5930] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 159.452025][ T24] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 159.478247][ T24] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 159.495122][ T5876] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 159.513133][ T9636] pim6reg1: entered promiscuous mode [ 159.519715][ T9636] pim6reg1: entered allmulticast mode [ 159.668405][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.689217][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.719544][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.733711][ T5876] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.736040][ T24] usb 4-1: USB disconnect, device number 18 [ 159.749001][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.769889][ T5876] usb 5-1: config 0 descriptor?? [ 159.845774][ T9654] loop7: detected capacity change from 0 to 7 [ 159.856160][ C1] blk_print_req_error: 130 callbacks suppressed [ 159.856178][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.872074][ C1] buffer_io_error: 118 callbacks suppressed [ 159.872091][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.887073][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.896714][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.904772][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.914435][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.924945][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.936991][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.946641][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.954984][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.964607][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.972599][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.972810][ T931] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.982252][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.998329][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.008085][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 160.015971][ T9654] ldm_validate_partition_table(): Disk read failed. [ 160.016628][ T5930] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 160.030365][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.039970][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 160.048063][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.057658][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 160.067022][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 160.075412][ T9654] Dev loop7: unable to read RDB block 0 [ 160.081731][ T9654] loop7: unable to read partition table [ 160.087707][ T9654] loop7: partition table beyond EOD, truncated [ 160.093879][ T9654] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 160.163557][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 160.172026][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 160.173536][ T931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 160.180071][ T5930] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.188386][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 160.198449][ T5930] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 160.208193][ T931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 160.237109][ T5876] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 160.255873][ T5930] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 160.278351][ T9657] hsr0: entered promiscuous mode [ 160.283505][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.292714][ T931] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 160.302276][ T931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.303181][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 160.310580][ T931] usb 2-1: Product: syz [ 160.319451][ T5930] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 160.323397][ T931] usb 2-1: Manufacturer: syz [ 160.336271][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.340234][ T931] usb 2-1: SerialNumber: syz [ 160.353049][ T9657] hsr_slave_0: left promiscuous mode [ 160.354867][ T931] usb 2-1: config 0 descriptor?? [ 160.359085][ T5930] usb 6-1: config 0 descriptor?? [ 160.365396][ T931] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 160.375329][ T9657] hsr_slave_1: left promiscuous mode [ 160.375498][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1680'. [ 160.420032][ T9657] hsr0 (unregistering): left promiscuous mode [ 160.506519][ T5959] usb 5-1: USB disconnect, device number 14 [ 160.566882][ T931] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 160.795327][ T931] usb 2-1: USB disconnect, device number 9 [ 161.107495][ T5930] hid-thrustmaster 0003:044F:B65D.0018: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 161.298656][ T5930] hid-thrustmaster 0003:044F:B65D.0018: setup data couldn't be sent [ 161.310558][ C1] hid-thrustmaster 0003:044F:B65D.0018: URB to get model id failed with error -71 [ 161.330707][ T5930] usb 6-1: USB disconnect, device number 5 [ 161.499366][ T9691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1692'. [ 161.680027][ T931] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.830273][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.846677][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.857186][ T931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.870143][ T931] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.879346][ T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.889476][ T931] usb 2-1: config 0 descriptor?? [ 162.098861][ T9709] loop7: detected capacity change from 0 to 7 [ 162.108547][ T9709] ldm_validate_partition_table(): Disk read failed. [ 162.117862][ T9709] Dev loop7: unable to read RDB block 0 [ 162.127352][ T9709] loop7: unable to read partition table [ 162.133149][ T9709] loop7: partition table beyond EOD, truncated [ 162.163830][ T9709] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 162.199964][ T90] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 162.292595][ T931] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 162.306497][ T931] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 162.364139][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.375603][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.385630][ T90] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 162.394745][ T90] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.405184][ T90] usb 6-1: config 0 descriptor?? [ 162.495076][ T931] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 162.504094][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 162.504108][ T30] audit: type=1400 audit(1768622105.900:513): avc: denied { execute } for pid=9726 comm="syz.2.1706" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 162.544713][ T24] usb 2-1: USB disconnect, device number 10 [ 162.561783][ T5876] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 162.638318][ T931] usb 4-1: Using ep0 maxpacket: 32 [ 162.644915][ T931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.656032][ T931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.666057][ T931] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 162.678899][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.688758][ T931] usb 4-1: config 0 descriptor?? [ 162.705987][ T5876] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.717219][ T5876] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.727247][ T5876] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.736442][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.748805][ T9722] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 162.758673][ T5876] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.802386][ T90] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 162.809935][ T90] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 162.819778][ T90] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.001A/input/input28 [ 162.835807][ T90] cm6533_jd 0003:0D8C:0022.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 162.971547][ T5876] usb 5-1: USB disconnect, device number 15 [ 163.016418][ T5928] usb 6-1: USB disconnect, device number 6 [ 163.097311][ T931] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 163.264413][ T30] audit: type=1400 audit(1768622106.698:514): avc: denied { write } for pid=9733 comm="syz.1.1710" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.347497][ T30] audit: type=1400 audit(1768622106.698:515): avc: denied { open } for pid=9733 comm="syz.1.1710" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.374826][ T30] audit: type=1400 audit(1768622106.740:516): avc: denied { ioctl } for pid=9733 comm="syz.1.1710" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.401857][ T90] usb 4-1: USB disconnect, device number 19 [ 163.487998][ T30] audit: type=1400 audit(1768622106.940:517): avc: denied { write } for pid=9739 comm="syz.2.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.650048][ T9748] loop7: detected capacity change from 0 to 7 [ 163.651040][ T9750] input: syz0 as /devices/virtual/input/input29 [ 163.666443][ T9748] ldm_validate_partition_table(): Disk read failed. [ 163.683150][ T9748] Dev loop7: unable to read RDB block 0 [ 163.690277][ T9748] loop7: unable to read partition table [ 163.696285][ T9748] loop7: partition table beyond EOD, truncated [ 163.702641][ T9748] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 163.795867][ T30] audit: type=1400 audit(1768622107.265:518): avc: denied { read } for pid=9756 comm="syz.4.1721" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 164.259702][ T9786] team0 (unregistering): Port device team_slave_0 removed [ 164.269829][ T9786] team0 (unregistering): Port device team_slave_1 removed [ 164.304792][ T5928] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 164.409644][ T5930] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 164.419190][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 164.458935][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 164.466389][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 164.477287][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.489201][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 164.501515][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 164.514622][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 164.522165][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 164.533088][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.545138][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 164.556627][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 164.568929][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 164.571558][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 164.577075][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 164.592394][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.594711][ T5930] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.604279][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 164.625195][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 164.626658][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 164.641774][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.655214][ T5930] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.666827][ T5930] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.675919][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.684265][ T24] usb 5-1: Product: syz [ 164.687100][ T5928] usb 4-1: string descriptor 0 read error: -22 [ 164.692749][ T24] usb 5-1: Manufacturer: syz [ 164.696048][ T5928] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 164.700966][ T24] usb 5-1: SerialNumber: syz [ 164.712273][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.717953][ T9781] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 164.736086][ T24] usb 5-1: config 0 descriptor?? [ 164.751649][ T5930] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.767057][ T24] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 164.774647][ T5928] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 165.010407][ T931] usb 3-1: USB disconnect, device number 16 [ 165.066165][ T5876] usb 4-1: USB disconnect, device number 20 [ 165.078038][ T5928] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 165.101805][ T9806] netlink: 408 bytes leftover after parsing attributes in process `syz.5.1743'. [ 165.239995][ T5928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.250197][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.262251][ T5825] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 165.272158][ T5825] Bluetooth: hci3: Injecting HCI hardware error event [ 165.288195][ T5825] Bluetooth: hci3: hardware error 0x00 [ 165.304709][ T5928] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.314436][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.334261][ T5928] usb 2-1: SerialNumber: syz [ 165.544653][ T5928] usb 2-1: 0:2 : does not exist [ 165.549586][ T5928] usb 2-1: unit 255 not found! [ 165.562245][ T5928] usb 2-1: USB disconnect, device number 11 [ 165.818649][ T5930] usb 5-1: USB disconnect, device number 16 [ 165.924419][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 166.067034][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 166.075708][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.202718][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.220162][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.238976][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.259146][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.268481][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.487935][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 166.514620][ T24] usbtmc 4-1:16.0: can't read capabilities [ 166.676935][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 166.710353][ T931] usb 4-1: USB disconnect, device number 21 [ 166.774935][ T9857] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 166.807707][ T9857] bond2: entered promiscuous mode [ 166.814244][ T9857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.829230][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 166.836440][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 166.845481][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.856323][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.858553][ T9857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.868443][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.873414][ T9857] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 166.881064][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.891917][ T9857] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 166.895987][ T5928] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 166.900869][ T24] usb 2-1: Product: syz [ 166.920597][ T9857] bond2: (slave wireguard0): making interface the new active one [ 166.923510][ T24] usb 2-1: Manufacturer: syz [ 166.929167][ T9857] wireguard0: entered promiscuous mode [ 166.933817][ T24] usb 2-1: SerialNumber: syz [ 166.945540][ T9857] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 167.062681][ T5928] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.075101][ T5928] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.085383][ T5928] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.094657][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.106919][ T9851] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 167.233899][ T30] audit: type=1400 audit(1768622366.873:519): avc: denied { set_context_mgr } for pid=9872 comm="syz.3.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 167.256673][ T30] audit: type=1400 audit(1768622366.873:520): avc: denied { write } for pid=9872 comm="syz.3.1770" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.257864][ T5825] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 167.334603][ T24] usb 2-1: 0:2 : does not exist [ 167.353196][ T5897] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 167.505327][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 167.511978][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.523534][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.541941][ T5897] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.554928][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.567267][ T5897] usb 5-1: config 0 descriptor?? [ 167.574500][ T5897] hub 5-1:0.0: USB hub found [ 167.660222][ T9882] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1774'. [ 167.770212][ T5897] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 167.925981][ T24] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 167.970663][ T5928] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.972640][ T24] usb 2-1: USB disconnect, device number 12 [ 168.053802][ T5928] usb 6-1: USB disconnect, device number 7 [ 168.158109][ T5897] hid-generic 0003:046D:C31C.001C: unknown main item tag 0x0 [ 168.191242][ T5897] hid-generic 0003:046D:C31C.001C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 168.299289][ T9906] TCP: TCP_TX_DELAY enabled [ 168.364978][ T30] audit: type=1400 audit(1768622368.059:521): avc: denied { listen } for pid=9909 comm="syz.2.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.368869][ T9912] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 168.420093][ T5928] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 168.515201][ T90] usb 5-1: USB disconnect, device number 17 [ 168.583996][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 168.592337][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short [ 168.602844][ T5928] usb 6-1: config 8 has an invalid interface number: 255 but max is 0 [ 168.628392][ T5928] usb 6-1: config 8 has no interface number 0 [ 168.637833][ T5928] usb 6-1: config 8 interface 255 has no altsetting 0 [ 168.652472][ T5928] usb 6-1: string descriptor 0 read error: -22 [ 168.659326][ T5928] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 168.671297][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.762790][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 168.915074][ T931] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 168.983250][ T30] audit: type=1326 audit(1768622368.710:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 169.007980][ T30] audit: type=1326 audit(1768622368.710:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 169.032861][ T30] audit: type=1326 audit(1768622368.742:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5cf058f783 code=0x7ffc0000 [ 169.057098][ T30] audit: type=1326 audit(1768622368.742:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5cf058f783 code=0x7ffc0000 [ 169.081451][ T30] audit: type=1326 audit(1768622368.742:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 169.105150][ T30] audit: type=1326 audit(1768622368.742:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 169.135637][ T931] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 169.143918][ T931] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 169.153937][ T30] audit: type=1326 audit(1768622368.742:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 169.178556][ T931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 169.187433][ T30] audit: type=1326 audit(1768622368.742:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 169.211944][ T931] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 169.221585][ T931] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 169.230852][ T931] usb 2-1: Product: syz [ 169.235041][ T931] usb 2-1: Manufacturer: syz [ 169.239817][ T931] usb 2-1: SerialNumber: syz [ 169.246030][ T30] audit: type=1326 audit(1768622368.742:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf058f749 code=0x7ffc0000 [ 169.276867][ T931] usb 2-1: config 0 descriptor?? [ 169.289253][ T931] hub 2-1:0.0: bad descriptor, ignoring hub [ 169.297486][ T931] hub 2-1:0.0: probe with driver hub failed with error -5 [ 169.308913][ T931] usb 2-1: selecting invalid altsetting 0 [ 169.333425][ T9935] netlink: 'syz.2.1799': attribute type 1 has an invalid length. [ 169.464404][ T5928] catc 6-1:8.255: Couldn't detect memory size, assuming 32k [ 169.662653][ T5928] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.5-1, 00:00:00:00:00:00. [ 169.696721][ T5928] usb 6-1: USB disconnect, device number 8 [ 169.980842][ T9971] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 170.005978][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 170.182508][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 170.203275][ T24] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 170.219480][ T24] usb 3-1: config 179 has no interface number 0 [ 170.237866][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 170.252906][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 170.266517][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.266572][ T9990] netlink: 'syz.3.1823': attribute type 10 has an invalid length. [ 170.277807][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 170.321766][ T9990] veth0_vlan: left promiscuous mode [ 170.329807][ T24] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 170.351247][ T9990] veth0_vlan: entered promiscuous mode [ 170.364211][ T24] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 170.379770][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.385726][ T9990] team0: Device veth0_vlan failed to register rx_handler [ 170.397830][ T9956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.563803][ T5876] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 170.643581][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input31 [ 170.716970][ T5876] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.728030][ T5876] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.738503][ T5876] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.747643][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.758143][ T9995] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 170.767882][ T5876] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.791701][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 170.791940][ T5928] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 170.842448][ T5876] usb 3-1: USB disconnect, device number 17 [ 170.842486][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 170.857262][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 170.934512][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 170.940922][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 170.952785][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.954155][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 170.966485][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.978526][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.988297][ T5928] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 170.988795][ T24] usb 4-1: Product: syz [ 171.002118][ T24] usb 4-1: Manufacturer: syz [ 171.005972][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.006733][ T24] usb 4-1: SerialNumber: syz [ 171.021744][ T5928] usb 6-1: config 0 descriptor?? [ 171.029604][ T5930] usb 5-1: USB disconnect, device number 18 [ 171.041567][ T24] usb 4-1: config 0 descriptor?? [ 171.054275][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 171.064397][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 171.222348][ T5928] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 171.231312][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.245996][ T5928] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 171.253344][ T5928] usb 6-1: media controller created [ 171.265298][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.304659][ T5928] DVB: Unable to find symbol dib7000p_attach() [ 171.311078][ T5928] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 171.372811][ T5928] rc_core: IR keymap rc-dib0700-rc5 not found [ 171.386880][ T5928] Registered IR keymap rc-empty [ 171.392532][ T5928] dvb-usb: could not initialize remote control. [ 171.398812][ T5928] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 171.628817][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 171.636105][ T24] em28xx 4-1:0.0: Config register raw data: 0x41 [ 171.908832][ T5928] usb 4-1: USB disconnect, device number 22 [ 171.915455][ T5928] em28xx 4-1:0.0: Disconnecting em28xx [ 171.937360][ T5928] em28xx 4-1:0.0: Freeing device [ 172.126988][ T24] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 172.279647][ T24] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 172.289079][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.299717][ T24] usb 3-1: config 0 descriptor?? [ 172.658758][ T931] usb 2-1: USB disconnect, device number 13 [ 172.860005][ T5928] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 173.021562][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 173.028385][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.040884][ T5928] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 173.050134][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.061623][ T5928] usb 5-1: config 0 descriptor?? [ 173.272295][ T24] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 173.294017][T10068] bridge1: entered promiscuous mode [ 173.297451][ T24] usb 3-1: USB disconnect, device number 18 [ 173.299952][T10068] bridge1: entered allmulticast mode [ 173.435759][T10074] gre0: entered promiscuous mode [ 173.441214][T10074] gre0: entered allmulticast mode [ 173.463106][ T5928] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 173.505481][T10078] input: syz0 as /devices/virtual/input/input33 [ 173.650785][ T24] usb 5-1: USB disconnect, device number 19 [ 173.921699][T10099] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1872'. [ 173.951227][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 173.951242][ T30] audit: type=1400 audit(1768622373.917:538): avc: denied { watch_mount } for pid=10100 comm="syz.2.1873" path="/396" dev="tmpfs" ino=2036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 173.981738][T10103] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1874'. [ 173.991121][T10103] nbd: must specify at least one socket [ 174.606986][ T30] audit: type=1400 audit(1768622374.610:539): avc: denied { name_bind } for pid=10130 comm="syz.4.1887" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 174.648612][T10134] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.656215][T10134] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.763608][T10138] netlink: 'syz.2.1890': attribute type 10 has an invalid length. [ 174.802133][T10138] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 174.958019][ T30] audit: type=1400 audit(1768622374.983:540): avc: denied { listen } for pid=10143 comm="syz.1.1892" laddr=fe80::13 lport=44214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.999282][ T30] audit: type=1400 audit(1768622374.983:541): avc: denied { accept } for pid=10143 comm="syz.1.1892" laddr=fe80::13 lport=44214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.036624][T10152] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1897'. [ 175.068923][ T30] audit: type=1400 audit(1768622375.088:542): avc: denied { mounton } for pid=10153 comm="syz.4.1898" path="/proc/929/cgroup" dev="proc" ino=30495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 175.101417][ T30] audit: type=1400 audit(1768622375.088:543): avc: denied { remount } for pid=10153 comm="syz.4.1898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 175.182920][ T5930] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 175.356020][ T5930] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 175.364331][ T5930] usb 3-1: config 4 has no interface number 0 [ 175.386696][ T5930] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 175.395804][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.411987][ T5930] usb 3-1: Product: syz [ 175.416175][ T5930] usb 3-1: Manufacturer: syz [ 175.420762][ T5930] usb 3-1: SerialNumber: syz [ 175.430484][ T5930] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 175.440181][ T24] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 175.614166][ T24] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 175.633419][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.660823][ T24] usb 5-1: config 0 descriptor?? [ 175.670766][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 175.708334][T10169] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1904'. [ 175.841383][ T5930] vp7045: USB control message 'in' went wrong. [ 175.847780][ T5930] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 175.859932][ T5930] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 175.872252][ T5930] usb 3-1: USB disconnect, device number 19 [ 176.055094][ T5897] hid-generic 0005:0002:5508.001E: item fetching failed at offset 0/1 [ 176.065178][ T5897] hid-generic 0005:0002:5508.001E: probe with driver hid-generic failed with error -22 [ 176.270070][ T24] gp8psk: usb out operation failed. [ 176.275334][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 176.293669][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 176.304717][ T24] usb 5-1: USB disconnect, device number 20 [ 176.333991][ T5897] usb 6-1: USB disconnect, device number 9 [ 176.387556][ T5897] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 176.708174][ T5928] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 176.859507][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 176.872624][ T5928] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 176.884189][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.893070][ T30] audit: type=1400 audit(1768622377.020:544): avc: denied { ioctl } for pid=10214 comm="syz.4.1925" path="socket:[31544]" dev="sockfs" ino=31544 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.936968][ T5928] pvrusb2: Hardware description: Terratec Grabster AV400 [ 176.962495][ T5928] pvrusb2: ********** [ 176.972964][ T5928] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 177.002759][ T5928] pvrusb2: Important functionality might not be entirely working. [ 177.029567][ T5928] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 177.070098][ T5928] pvrusb2: ********** [ 177.134243][ T30] audit: type=1400 audit(1768622377.261:545): avc: denied { setopt } for pid=10188 comm="syz.1.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.159992][ T2339] pvrusb2: Invalid write control endpoint [ 177.175223][ T5928] usb 2-1: USB disconnect, device number 14 [ 177.191690][ T30] audit: type=1400 audit(1768622377.293:546): avc: denied { ioctl } for pid=10188 comm="syz.1.1912" path="socket:[30710]" dev="sockfs" ino=30710 ioctlcmd=0x6100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.277798][ T2339] pvrusb2: Invalid write control endpoint [ 177.313413][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 177.329703][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 177.339288][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 177.353571][ T2339] pvrusb2: Device being rendered inoperable [ 177.362075][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 177.373302][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 177.428739][ T2339] pvrusb2: Attached sub-driver cx25840 [ 177.444171][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 177.457316][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 177.637276][ T30] audit: type=1326 audit(1768622377.797:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.5.1940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5d818f749 code=0x0 [ 177.669932][ T931] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 177.731066][T10258] evm: overlay not supported [ 177.831329][ T931] usb 5-1: Using ep0 maxpacket: 8 [ 177.838960][ T931] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 177.850868][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 177.860782][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.875100][ T931] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 177.885051][ T931] usb 5-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 177.900013][ T931] usb 5-1: Product: syz [ 177.908226][ T931] usb 5-1: Manufacturer: syz [ 177.915145][ T931] usb 5-1: SerialNumber: syz [ 177.926781][ T931] usb 5-1: config 0 descriptor?? [ 177.940750][ T931] smsusb:smsusb_probe: board id=2, interface number 0 [ 177.953815][ T931] smsusb:smsusb_probe: Device initialized with return code -19 [ 178.167122][ T931] usb 5-1: USB disconnect, device number 21 [ 178.320748][T10279] tipc: Enabling of bearer rejected, failed to enable media [ 178.747403][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 178.748054][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 178.770270][ T24] hid-generic 0005:0006:5508.001F: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 179.146539][T10317] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 179.167761][T10321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1967'. [ 179.215597][T10321] netlink: 'syz.3.1967': attribute type 7 has an invalid length. [ 179.224611][T10319] nvme_fabrics: missing parameter 'transport=%s' [ 179.234059][T10319] nvme_fabrics: missing parameter 'nqn=%s' [ 179.242199][T10321] netlink: 'syz.3.1967': attribute type 8 has an invalid length. [ 179.257088][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'. [ 179.294717][T10321] erspan0: entered promiscuous mode [ 179.311809][T10321] gretap0: entered promiscuous mode [ 179.349735][T10321] erspan0: left promiscuous mode [ 179.363932][T10321] gretap0: left promiscuous mode [ 179.756307][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'. [ 179.772234][T10352] netlink: 'syz.1.1981': attribute type 5 has an invalid length. [ 180.247238][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'. [ 180.256997][T10388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1995'. [ 180.267523][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 180.267539][ T30] audit: type=1400 audit(1768622380.547:549): avc: denied { load_policy } for pid=10381 comm="syz.3.1994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 180.272666][T10388] geneve2: entered promiscuous mode [ 180.346411][T10388] geneve2: entered allmulticast mode [ 180.359158][T10383] SELinux: failed to load policy [ 180.403140][ T90] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 180.474582][ T30] audit: type=1400 audit(1768622380.778:550): avc: denied { setopt } for pid=10391 comm="syz.5.1996" lport=42804 faddr=::ffff:172.20.255.187 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 180.501940][ T30] audit: type=1400 audit(1768622380.778:551): avc: denied { read } for pid=10392 comm="syz.2.1998" path="socket:[32164]" dev="sockfs" ino=32164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.530789][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'. [ 180.595344][ T90] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.618605][ T90] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.636640][T10399] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 180.638695][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.661650][ T90] usb 2-1: config 0 descriptor?? [ 180.678979][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 180.694736][ T90] pwc: Askey VC010 type 2 USB webcam detected. [ 180.728371][T10403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2002'. [ 181.044050][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 181.079842][ T90] pwc: recv_control_msg error -32 req 02 val 2b00 [ 181.249336][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.269753][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.289300][ T90] pwc: recv_control_msg error -71 req 02 val 2c00 [ 181.296676][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.310403][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.319265][ T90] pwc: recv_control_msg error -71 req 04 val 1000 [ 181.327559][ T24] usb 4-1: SerialNumber: syz [ 181.332558][ T90] pwc: recv_control_msg error -71 req 04 val 1300 [ 181.340658][ T90] pwc: recv_control_msg error -71 req 04 val 1400 [ 181.351584][ T90] pwc: recv_control_msg error -71 req 02 val 2000 [ 181.358861][ T90] pwc: recv_control_msg error -71 req 02 val 2100 [ 181.365901][ T90] pwc: recv_control_msg error -71 req 04 val 1500 [ 181.375367][ T90] pwc: recv_control_msg error -71 req 02 val 2500 [ 181.382212][ T90] pwc: recv_control_msg error -71 req 02 val 2400 [ 181.389271][ T90] pwc: recv_control_msg error -71 req 02 val 2600 [ 181.396236][ T90] pwc: recv_control_msg error -71 req 02 val 2900 [ 181.403494][ T90] pwc: recv_control_msg error -71 req 02 val 2800 [ 181.410682][ T90] pwc: recv_control_msg error -71 req 04 val 1100 [ 181.424711][ T90] pwc: recv_control_msg error -71 req 04 val 1200 [ 181.436280][ T90] pwc: Registered as video103. [ 181.445964][ T90] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 181.461770][ T90] usb 2-1: USB disconnect, device number 15 [ 181.553621][ T24] usb 4-1: 0:2 : does not exist [ 181.574462][ T24] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 181.600386][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 181.617586][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 181.631872][ T24] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 181.648820][ T24] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 181.661629][ T24] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 181.675074][ T24] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 181.699115][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 181.717950][ T24] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 181.739616][ T24] usb 4-1: USB disconnect, device number 23 [ 181.832987][ T30] audit: type=1400 audit(1768622382.206:552): avc: denied { create } for pid=10469 comm="syz.2.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 181.853337][ T30] audit: type=1400 audit(1768622382.206:553): avc: denied { connect } for pid=10469 comm="syz.2.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 181.904236][ T30] audit: type=1400 audit(1768622382.279:554): avc: denied { listen } for pid=10469 comm="syz.2.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 182.174166][ T90] hid-generic 0005:0006:5508.0020: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 182.407562][ T5825] Bluetooth: hci5: sending frame failed (-49) [ 182.417465][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 182.632219][ T90] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 182.643182][T10510] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 182.672868][T10510] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 182.686598][T10510] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2046'. [ 182.730103][ T30] audit: type=1400 audit(1768622383.140:555): avc: denied { read write } for pid=10513 comm="syz.5.2048" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 182.784486][ T30] audit: type=1400 audit(1768622383.140:556): avc: denied { ioctl open } for pid=10513 comm="syz.5.2048" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 182.813030][ T90] usb 5-1: Using ep0 maxpacket: 8 [ 182.896603][ T90] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.919627][ T90] usb 5-1: config index 0 descriptor too short (expected 255, got 18) [ 182.937926][ T90] usb 5-1: config 4 interface 0 has no altsetting 0 [ 182.953582][ T90] usb 5-1: string descriptor 0 read error: -22 [ 182.960194][ T90] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 182.984816][ T90] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.005692][ T90] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 183.025006][ T90] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.044000][ T90] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 183.051268][ T90] usb 5-1: media controller created [ 183.095133][ T90] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.121984][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.137077][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 183.161843][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.249203][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.270367][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.338611][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.356099][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.374897][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.409547][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.422589][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.437347][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.454920][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.469542][ T24] usb 3-1: config 0 descriptor?? [ 183.556082][ T30] audit: type=1400 audit(1768622384.011:557): avc: denied { read } for pid=10527 comm="syz.3.2057" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.593075][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.614801][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.771541][ T12] bridge_slave_1: left allmulticast mode [ 183.777908][ T12] bridge_slave_1: left promiscuous mode [ 183.783954][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.793598][ T12] bridge_slave_0: left allmulticast mode [ 183.799929][ T12] bridge_slave_0: left promiscuous mode [ 183.807044][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.902638][ T24] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 183.950508][T10537] SELinux: failed to load policy [ 184.154401][ T5928] usb 3-1: USB disconnect, device number 20 [ 184.158806][T10495] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 184.170195][ T90] zl10353_read_register: readreg error (reg=127, ret==0) [ 184.183816][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.201833][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.218792][ T12] bond0 (unregistering): Released all slaves [ 184.225364][ T90] usb 5-1: USB disconnect, device number 22 [ 184.485814][ T12] hsr_slave_0: left promiscuous mode [ 184.491757][ T12] hsr_slave_1: left promiscuous mode [ 184.497564][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.504970][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.512789][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.520259][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.535621][ T12] veth1_vlan: left promiscuous mode [ 184.542120][ T12] veth0_vlan: left promiscuous mode [ 184.935988][ T12] team0 (unregistering): Port device team_slave_1 removed [ 184.966479][ T12] team0 (unregistering): Port device team_slave_0 removed [ 185.382101][T10561] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 185.396039][T10561] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 185.565084][T10572] netlink: 'syz.4.2076': attribute type 10 has an invalid length. [ 185.589219][T10572] team0: Port device dummy0 removed [ 185.598089][T10572] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 185.662166][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2078'. [ 185.673629][T10576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.680586][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.682814][T10528] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 185.725858][T10576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.729507][ T30] audit: type=1400 audit(1768622386.289:558): avc: denied { read } for pid=10579 comm="syz.1.2080" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 185.757045][ T30] audit: type=1400 audit(1768622386.289:559): avc: denied { open } for pid=10579 comm="syz.1.2080" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 186.219702][T10528] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 186.230165][T10528] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 186.241515][T10528] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.247699][T10528] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 186.258253][T10528] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.264354][T10528] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 186.285916][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.296651][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.308183][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.317972][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.338298][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.377140][T10588] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2082'. [ 186.444606][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 186.594792][ T5928] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 186.724519][T10533] chnl_net:caif_netlink_parms(): no params data found [ 186.757056][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 186.764784][ T5928] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.780571][ T5928] usb 3-1: config 0 has no interface number 0 [ 186.785935][T10602] netlink: 'syz.3.2088': attribute type 10 has an invalid length. [ 186.794743][ T5928] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.807084][ T5928] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.818558][ T5928] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 186.827749][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.838569][ T5928] usb 3-1: config 0 descriptor?? [ 186.857295][T10602] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.958517][T10533] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.965670][T10533] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.980883][T10533] bridge_slave_0: entered allmulticast mode [ 186.998101][T10533] bridge_slave_0: entered promiscuous mode [ 187.006810][T10533] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.021111][T10533] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.031384][T10533] bridge_slave_1: entered allmulticast mode [ 187.046907][T10533] bridge_slave_1: entered promiscuous mode [ 187.109612][T10533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.130476][T10615] tap0: tun_chr_ioctl cmd 1074025675 [ 187.136426][T10615] tap0: persist enabled [ 187.143236][T10533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.166221][T10615] tap0: tun_chr_ioctl cmd 1074025675 [ 187.171741][T10615] tap0: persist enabled [ 187.220583][T10533] team0: Port device team_slave_0 added [ 187.246913][T10533] team0: Port device team_slave_1 added [ 187.363409][T10533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.373883][ T5897] IPVS: starting estimator thread 0... [ 187.373970][T10617] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 187.391920][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.425511][T10533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.432416][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.443564][T10533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.453428][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.458276][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.480893][T10620] IPVS: using max 42 ests per chain, 100800 per kthread [ 187.526724][T10533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.592089][ T5928] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0022/input/input35 [ 187.615062][ T30] audit: type=1400 audit(1768622388.274:560): avc: denied { read } for pid=5172 comm="acpid" name="mouse1" dev="devtmpfs" ino=3056 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.662977][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.677482][T10533] hsr_slave_0: entered promiscuous mode [ 187.679196][ T30] audit: type=1400 audit(1768622388.295:561): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3056 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.710127][ T5928] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0022/input/input36 [ 187.725375][ T5928] uclogic 0003:28BD:0071.0022: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 187.738431][ T30] audit: type=1400 audit(1768622388.326:562): avc: denied { write } for pid=10623 comm="syz.1.2094" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 187.739084][T10533] hsr_slave_1: entered promiscuous mode [ 187.764578][ T30] audit: type=1400 audit(1768622388.326:563): avc: denied { ioctl } for pid=10623 comm="syz.1.2094" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 187.814196][T10533] debugfs: 'hsr0' already exists in 'hsr' [ 187.825755][ T5928] usb 3-1: USB disconnect, device number 21 [ 187.836453][ T30] audit: type=1400 audit(1768622388.368:564): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3056 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.886313][T10533] Cannot create hsr debugfs directory [ 187.954639][T10631] netlink: 'syz.3.2095': attribute type 12 has an invalid length. [ 187.972365][T10631] netlink: 'syz.3.2095': attribute type 29 has an invalid length. [ 187.980526][T10631] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2095'. [ 187.991465][T10631] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2095'. [ 188.005087][ T30] audit: type=1400 audit(1768622388.683:565): avc: denied { execute } for pid=10632 comm="syz.4.2099" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 188.207549][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 188.213909][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 188.280707][ T51] Bluetooth: hci4: command tx timeout [ 188.382002][T10533] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 188.419602][T10533] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 188.446396][T10533] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 188.465162][T10533] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 188.538922][ T90] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 188.593917][T10533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.619474][T10533] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.640162][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.647379][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.660440][ T30] audit: type=1400 audit(1768622389.365:566): avc: denied { mounton } for pid=10660 comm="syz.4.2107" path="/468/file1" dev="tmpfs" ino=2400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 188.686846][ T2131] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.694012][ T2131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.704491][ T90] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.717803][ T90] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 188.728171][ T90] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.739656][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.754154][T10642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.771176][ T90] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.780382][T10533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.793817][T10533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.807198][T10664] IPv6: addrconf: prefix option has invalid lifetime [ 188.925558][T10671] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 189.006239][ T90] usb 2-1: USB disconnect, device number 16 [ 189.014938][T10533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.270075][T10533] veth0_vlan: entered promiscuous mode [ 189.282987][T10533] veth1_vlan: entered promiscuous mode [ 189.311690][T10533] veth0_macvtap: entered promiscuous mode [ 189.318453][T10687] tipc: Started in network mode [ 189.324428][T10687] tipc: Node identity 1, cluster identity 4711 [ 189.331105][T10687] tipc: Node number set to 1 [ 189.341064][T10533] veth1_macvtap: entered promiscuous mode [ 189.359372][T10533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.372236][T10533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.390161][ T2131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.401643][ T2131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.412789][ T2131] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.429766][ T2131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.465128][ T90] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 189.516298][ T30] audit: type=1400 audit(1768622390.268:567): avc: denied { setopt } for pid=10692 comm="syz.4.2118" laddr=172.20.20.170 lport=3254 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.548891][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.573823][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.595934][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.603773][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.625106][ T90] usb 4-1: Using ep0 maxpacket: 32 [ 189.631721][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.643186][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.671553][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.699502][T10691] SELinux: failed to load policy [ 189.707530][ T90] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 189.759131][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.798868][ T90] usb 4-1: config 0 descriptor?? [ 189.869828][T10709] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 190.176430][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 190.185398][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 190.186307][ T5958] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 190.216777][ T90] savu 0003:1E7D:2D5A.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 190.262062][ T51] Bluetooth: hci4: command tx timeout [ 190.376532][ T5958] usb 7-1: Using ep0 maxpacket: 32 [ 190.384211][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.412296][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.437008][ T5958] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 190.449411][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.461493][ T5958] usb 7-1: config 0 descriptor?? [ 190.561572][ T5928] usb 4-1: USB disconnect, device number 24 [ 190.792488][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.869205][ T5958] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 190.876281][ T5958] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 191.068782][ T5958] ft260 0003:0403:6030.0024: failed to retrieve chip version [ 191.079149][ T5958] ft260 0003:0403:6030.0024: probe with driver ft260 failed with error -71 [ 191.096936][ T5958] usb 7-1: USB disconnect, device number 2 [ 191.139034][T10735] syzkaller1: entered promiscuous mode [ 191.154793][T10735] syzkaller1: entered allmulticast mode [ 191.347940][ T90] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 191.492334][ T90] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.503592][ T90] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.513624][ T90] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.522755][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.532927][T10737] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 191.542114][ T90] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.780833][ T5928] usb 4-1: USB disconnect, device number 25 [ 192.042818][T10767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2150'. [ 192.247778][ T51] Bluetooth: hci4: command tx timeout [ 192.338844][T10780] SELinux: failed to load policy [ 192.532391][T10796] loop8: detected capacity change from 0 to 8 [ 192.564601][T10796] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 192.571640][T10796] loop8: partition table partially beyond EOD, truncated [ 192.586629][T10796] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 192.759921][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 192.759940][ T30] audit: type=1400 audit(1768622393.669:592): avc: denied { getopt } for pid=10812 comm="syz.2.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 192.910150][ T90] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 193.081770][ T90] usb 7-1: Using ep0 maxpacket: 16 [ 193.102310][ T90] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 193.120040][ T90] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.140188][ T90] usb 7-1: Product: syz [ 193.146703][ T90] usb 7-1: Manufacturer: syz [ 193.169555][ T90] usb 7-1: SerialNumber: syz [ 193.181250][ T90] usb 7-1: config 0 descriptor?? [ 193.198062][ T90] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 193.216148][ T90] usb 7-1: Detected FT-X [ 193.224567][ T5928] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 193.340539][T10845] syzkaller1: entered promiscuous mode [ 193.346115][T10845] syzkaller1: entered allmulticast mode [ 193.383974][ T5928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.387238][ T90] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 193.401057][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.417079][ T5928] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.427571][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.435791][ T5928] usb 3-1: SerialNumber: syz [ 193.652080][ T5928] usb 3-1: 0:2 : does not exist [ 193.669581][ T5928] usb 3-1: unit 255 not found! [ 193.687902][ T5928] usb 3-1: USB disconnect, device number 22 [ 193.798904][ T90] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 193.906578][T10869] Invalid ELF header len 8 [ 193.906817][ T30] audit: type=1400 audit(1768622394.877:593): avc: denied { module_load } for pid=10868 comm="syz.3.2194" path="/420/bus" dev="tmpfs" ino=2139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 193.954350][T10871] input: syz1 as /devices/virtual/input/input37 [ 194.013934][ T5928] usb 7-1: USB disconnect, device number 3 [ 194.024111][ T5928] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 194.035543][ T5928] ftdi_sio 7-1:0.0: device disconnected [ 194.229173][ T51] Bluetooth: hci4: command tx timeout [ 194.272253][ T90] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 194.415224][ T90] usb 2-1: Using ep0 maxpacket: 32 [ 194.427958][ T90] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 194.438626][ T90] usb 2-1: config 0 has no interface number 0 [ 194.452982][ T90] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 194.470671][ T90] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 194.479978][ T90] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.491060][ T90] usb 2-1: Product: syz [ 194.495503][ T90] usb 2-1: Manufacturer: syz [ 194.500156][ T90] usb 2-1: SerialNumber: syz [ 194.507236][ T90] usb 2-1: config 0 descriptor?? [ 194.519571][T10877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.739399][T10877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.886652][ T30] audit: type=1400 audit(1768622395.906:594): avc: denied { search } for pid=10927 comm="syz.2.2221" name="/" dev="configfs" ino=1221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 194.977899][ T30] audit: type=1400 audit(1768622395.906:595): avc: denied { setattr } for pid=10927 comm="syz.2.2221" name="/" dev="configfs" ino=1221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.048892][ T30] audit: type=1400 audit(1768622395.990:596): avc: denied { watch } for pid=10931 comm="syz.2.2223" path="/475/file0" dev="tmpfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 195.094399][ T30] audit: type=1400 audit(1768622395.990:597): avc: denied { watch_sb watch_reads } for pid=10931 comm="syz.2.2223" path="/475/file0" dev="tmpfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 195.211418][ T30] audit: type=1400 audit(1768622396.241:598): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 195.333034][ T90] asix 2-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 195.537209][ T90] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.566528][ T90] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 195.598808][T10977] syzkaller1: entered promiscuous mode [ 195.604378][T10977] syzkaller1: entered allmulticast mode [ 195.606194][ T90] asix 2-1:0.188: probe with driver asix failed with error -71 [ 195.620942][T10977] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 195.650018][T10979] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.2238'. [ 195.690735][ T90] usb 2-1: USB disconnect, device number 17 [ 196.352898][ T30] audit: type=1400 audit(1768622397.449:599): avc: denied { mount } for pid=11000 comm="syz.1.2252" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 196.379528][T11001] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 196.386670][ T30] audit: type=1400 audit(1768622397.470:600): avc: denied { mounton } for pid=11000 comm="syz.1.2252" path="/394/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 196.464750][ T30] audit: type=1400 audit(1768622397.564:601): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 196.587234][ T931] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 196.770859][ T931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.806597][ T931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 196.832175][T11020] overlayfs: failed to verify upper root origin [ 196.845865][ T931] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 196.866491][ T931] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 196.913776][ T931] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.941373][ T931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.971916][ T931] usb 3-1: Product: syz [ 196.976106][ T931] usb 3-1: Manufacturer: syz [ 196.996339][ T931] usb 3-1: SerialNumber: syz [ 197.011506][T11005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 197.238830][T11005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 197.246827][T11005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 197.844235][T11005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 197.863881][T11005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.025475][ T5897] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 198.077891][ T931] cdc_ncm 3-1:1.0: failed to get mac address [ 198.087980][ T931] cdc_ncm 3-1:1.0: bind() failure [ 198.097594][ T931] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 198.106877][ T931] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 198.116099][ T931] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 198.128865][ T931] usb 3-1: USB disconnect, device number 23 [ 198.200075][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.211179][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.222363][ T5897] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.244634][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.256063][ T5897] usb 5-1: SerialNumber: syz [ 198.263835][ T5958] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 198.446762][ T5958] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.472094][ T5897] usb 5-1: 0:2 : does not exist [ 198.479343][ T5958] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.506221][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 198.506236][ T30] audit: type=1400 audit(1768622399.706:603): avc: denied { create } for pid=11085 comm="syz.3.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 198.511293][ T5897] usb 5-1: USB disconnect, device number 23 [ 198.521233][ T5958] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.550835][ T30] audit: type=1400 audit(1768622399.758:604): avc: denied { sys_admin } for pid=11085 comm="syz.3.2286" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 198.552855][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.657634][ T30] audit: type=1400 audit(1768622399.863:605): avc: denied { sys_nice } for pid=11085 comm="syz.3.2286" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 198.713326][ T30] audit: type=1400 audit(1768622399.863:606): avc: denied { ioctl } for pid=11090 comm="syz.1.2288" path="socket:[36422]" dev="sockfs" ino=36422 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.793614][ T5958] usb 7-1: usb_control_msg returned -32 [ 198.809232][ T5958] usbtmc 7-1:16.0: can't read capabilities [ 200.911316][ T5928] usb 7-1: USB disconnect, device number 4 [ 201.117928][T11141] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2311'. [ 201.199131][ T5897] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 201.260532][T11151] input: syz1 as /devices/virtual/input/input38 [ 201.302410][ T5928] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 201.347984][T11156] netlink: 'syz.4.2318': attribute type 5 has an invalid length. [ 201.371766][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.384370][ T5897] usb 3-1: not running at top speed; connect to a high speed hub [ 201.402030][ T5897] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.410463][ T30] audit: type=1400 audit(1768622402.750:607): avc: denied { getopt } for pid=11152 comm="syz.3.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.416204][ T5897] usb 3-1: config 1 interface 0 has no altsetting 0 [ 201.446290][ T5897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 201.455916][T11158] netlink: 'syz.4.2318': attribute type 5 has an invalid length. [ 201.455962][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.472124][ T5897] usb 3-1: Product: syz [ 201.476559][ T5928] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.487620][ T5928] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.497645][ T5897] usb 3-1: Manufacturer: syz [ 201.502288][ T5897] usb 3-1: SerialNumber: syz [ 201.507010][ T5928] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.518720][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.531872][T11132] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 201.544174][ T5928] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.730639][ T5897] usb 3-1: USB disconnect, device number 24 [ 201.771084][ T5958] usb 7-1: USB disconnect, device number 5 [ 201.849230][T11162] sp0: Synchronizing with TNC [ 201.915839][T11168] all (unregistering): Released all slaves [ 202.017621][ T30] audit: type=1326 audit(1768622403.391:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.4.2326" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cf058f749 code=0x0 [ 202.617006][ T5958] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 202.769167][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 202.778204][ T5958] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 202.788818][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.796909][ T5958] usb 4-1: Product: syz [ 202.801216][ T5958] usb 4-1: Manufacturer: syz [ 202.805816][ T5958] usb 4-1: SerialNumber: syz [ 202.822914][ T5958] usb 4-1: config 0 descriptor?? [ 203.230278][ T5958] airspy 4-1:0.0: Board ID: 00 [ 203.235290][ T5958] airspy 4-1:0.0: Firmware version: [ 203.522141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.530962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.810920][ T5958] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 203.821839][ T5958] airspy 4-1:0.0: Registered as swradio24 [ 203.828476][ T5958] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 203.850757][ T5958] usb 4-1: USB disconnect, device number 26 [ 204.112717][ T931] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 204.122419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.130742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.226935][ T5958] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 204.277498][ T931] usb 5-1: Using ep0 maxpacket: 32 [ 204.285093][ T931] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 204.296509][ T931] usb 5-1: config 0 has no interface number 0 [ 204.302612][ T931] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.314118][ T931] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 204.326235][ T931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.335709][ T931] usb 5-1: Product: syz [ 204.340109][ T931] usb 5-1: Manufacturer: syz [ 204.345174][ T931] usb 5-1: SerialNumber: syz [ 204.353394][ T931] usb 5-1: config 0 descriptor?? [ 204.371202][ T931] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 204.381688][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 204.388851][ T5958] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.396598][ T931] em28xx 5-1:0.132: Video interface 132 found: [ 204.404388][ T5958] usb 3-1: config index 0 descriptor too short (expected 255, got 18) [ 204.421466][ T51] ================================================================== [ 204.429836][ T51] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xe47/0x1010 [ 204.437832][ T51] Read of size 8 at addr ffff888031ee6480 by task kworker/u9:0/51 [ 204.445645][ T51] [ 204.447973][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.448004][ T51] Tainted: [L]=SOFTLOCKUP [ 204.448012][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.448027][ T51] Workqueue: hci1 hci_rx_work [ 204.448052][ T51] Call Trace: [ 204.448059][ T51] [ 204.448066][ T51] dump_stack_lvl+0x116/0x1f0 [ 204.448093][ T51] print_report+0xcd/0x630 [ 204.448116][ T51] ? __virt_addr_valid+0x81/0x610 [ 204.448133][ T51] ? __phys_addr+0xe8/0x180 [ 204.448149][ T51] ? l2cap_connect_cfm+0xe47/0x1010 [ 204.448169][ T51] kasan_report+0xe0/0x110 [ 204.448190][ T51] ? l2cap_connect_cfm+0xe47/0x1010 [ 204.448212][ T51] l2cap_connect_cfm+0xe47/0x1010 [ 204.448234][ T51] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 204.448256][ T51] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 204.448275][ T51] le_conn_complete_evt+0x1991/0x1fa0 [ 204.448299][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 204.448321][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 204.448342][ T51] hci_le_meta_evt+0x357/0x610 [ 204.448361][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 204.448377][ T51] hci_event_packet+0x685/0x1210 [ 204.448392][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 204.448409][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 204.448424][ T51] ? kcov_remote_start+0x399/0x680 [ 204.448439][ T51] ? lockdep_hardirqs_on+0x7c/0x110 [ 204.448460][ T51] hci_rx_work+0x2c9/0x1020 [ 204.448479][ T51] process_one_work+0x9ba/0x1b20 [ 204.448500][ T51] ? __pfx_process_one_work+0x10/0x10 [ 204.448546][ T51] ? assign_work+0x1a0/0x250 [ 204.448565][ T51] worker_thread+0x6c8/0xf10 [ 204.448586][ T51] ? __pfx_worker_thread+0x10/0x10 [ 204.448607][ T51] kthread+0x3c5/0x780 [ 204.448624][ T51] ? __pfx_kthread+0x10/0x10 [ 204.448641][ T51] ? rcu_is_watching+0x12/0xc0 [ 204.448655][ T51] ? __pfx_kthread+0x10/0x10 [ 204.448673][ T51] ret_from_fork+0x983/0xb10 [ 204.448690][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 204.448705][ T51] ? __switch_to+0x7af/0x10d0 [ 204.448722][ T51] ? __pfx_kthread+0x10/0x10 [ 204.448739][ T51] ret_from_fork_asm+0x1a/0x30 [ 204.448764][ T51] [ 204.448769][ T51] [ 204.662464][ T51] Allocated by task 51: [ 204.666600][ T51] kasan_save_stack+0x33/0x60 [ 204.671265][ T51] kasan_save_track+0x14/0x30 [ 204.675924][ T51] __kasan_kmalloc+0xaa/0xb0 [ 204.680498][ T51] l2cap_chan_create+0x44/0x930 [ 204.685337][ T51] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 204.691131][ T51] l2cap_sock_new_connection_cb+0x101/0x240 [ 204.697010][ T51] l2cap_connect_cfm+0x4f0/0x1010 [ 204.702014][ T51] le_conn_complete_evt+0x1991/0x1fa0 [ 204.707496][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 204.713018][ T51] hci_le_meta_evt+0x357/0x610 [ 204.717775][ T51] hci_event_packet+0x685/0x1210 [ 204.722695][ T51] hci_rx_work+0x2c9/0x1020 [ 204.727176][ T51] process_one_work+0x9ba/0x1b20 [ 204.732100][ T51] worker_thread+0x6c8/0xf10 [ 204.736687][ T51] kthread+0x3c5/0x780 [ 204.740734][ T51] ret_from_fork+0x983/0xb10 [ 204.745302][ T51] ret_from_fork_asm+0x1a/0x30 [ 204.750052][ T51] [ 204.752372][ T51] Freed by task 11230: [ 204.756411][ T51] kasan_save_stack+0x33/0x60 [ 204.761077][ T51] kasan_save_track+0x14/0x30 [ 204.765736][ T51] kasan_save_free_info+0x3b/0x60 [ 204.770735][ T51] __kasan_slab_free+0x5f/0x80 [ 204.775478][ T51] kfree+0x2f8/0x6e0 [ 204.779349][ T51] l2cap_chan_put+0x1bb/0x310 [ 204.784010][ T51] l2cap_sock_cleanup_listen+0x4d/0x2f0 [ 204.789539][ T51] l2cap_sock_release+0x69/0x280 [ 204.794462][ T51] __sock_release+0xb3/0x270 [ 204.799031][ T51] sock_close+0x1c/0x30 [ 204.803165][ T51] __fput+0x402/0xb70 [ 204.807120][ T51] task_work_run+0x150/0x240 [ 204.811690][ T51] exit_to_user_mode_loop+0xfb/0x540 [ 204.816959][ T51] do_syscall_64+0x4ee/0xf80 [ 204.821537][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.827414][ T51] [ 204.829721][ T51] The buggy address belongs to the object at ffff888031ee6000 [ 204.829721][ T51] which belongs to the cache kmalloc-2k of size 2048 [ 204.843766][ T51] The buggy address is located 1152 bytes inside of [ 204.843766][ T51] freed 2048-byte region [ffff888031ee6000, ffff888031ee6800) [ 204.857715][ T51] [ 204.860023][ T51] The buggy address belongs to the physical page: [ 204.866442][ T51] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31ee0 [ 204.875185][ T51] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 204.883661][ T51] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 204.891620][ T51] page_type: f5(slab) [ 204.895578][ T51] raw: 00fff00000000040 ffff88813ff27000 0000000000000000 0000000000000001 [ 204.904147][ T51] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 204.912756][ T51] head: 00fff00000000040 ffff88813ff27000 0000000000000000 0000000000000001 [ 204.921449][ T51] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 204.930110][ T51] head: 00fff00000000003 ffffea0000c7b801 00000000ffffffff 00000000ffffffff [ 204.938766][ T51] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 204.947424][ T51] page dumped because: kasan: bad access detected [ 204.953836][ T51] page_owner tracks the page as allocated [ 204.959532][ T51] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 90, tgid 90 (kworker/1:2), ts 190586078093, free_ts 190512950385 [ 204.980612][ T51] post_alloc_hook+0x1af/0x220 [ 204.985378][ T51] get_page_from_freelist+0xd0b/0x31a0 [ 204.990837][ T51] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 204.996727][ T51] alloc_pages_mpol+0x1fb/0x550 [ 205.001570][ T51] new_slab+0x2c3/0x430 [ 205.005720][ T51] ___slab_alloc+0xe18/0x1c90 [ 205.010394][ T51] __slab_alloc.constprop.0+0x63/0x110 [ 205.015854][ T51] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 205.022784][ T51] kmalloc_reserve+0xef/0x2c0 [ 205.027472][ T51] __alloc_skb+0x186/0x410 [ 205.031890][ T51] mld_newpack.isra.0+0x18e/0xa20 [ 205.036915][ T51] add_grhead+0x299/0x340 [ 205.041237][ T51] add_grec+0x11b5/0x1720 [ 205.045576][ T51] mld_send_initial_cr+0x151/0x320 [ 205.050858][ T51] mld_dad_work+0x32/0x1f0 [ 205.055265][ T51] process_one_work+0x9ba/0x1b20 [ 205.060200][ T51] page last free pid 10729 tgid 10729 stack trace: [ 205.066710][ T51] __free_frozen_pages+0x7df/0x1170 [ 205.071920][ T51] __put_partials+0x130/0x170 [ 205.076577][ T51] qlist_free_all+0x4c/0xf0 [ 205.081072][ T51] kasan_quarantine_reduce+0x195/0x1e0 [ 205.086513][ T51] __kasan_slab_alloc+0x69/0x90 [ 205.091375][ T51] kmem_cache_alloc_noprof+0x25e/0x770 [ 205.096815][ T51] vm_area_dup+0x27/0x8d0 [ 205.101127][ T51] __split_vma+0x18e/0x1050 [ 205.105607][ T51] vma_modify+0x18d1/0x2360 [ 205.110090][ T51] vma_modify_flags+0x24c/0x3c0 [ 205.114918][ T51] mprotect_fixup+0x3a1/0xb80 [ 205.119587][ T51] do_mprotect_pkey+0x9bc/0xd40 [ 205.124421][ T51] __x64_sys_mprotect+0x78/0xc0 [ 205.129255][ T51] do_syscall_64+0xcd/0xf80 [ 205.133738][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.139608][ T51] [ 205.141911][ T51] Memory state around the buggy address: [ 205.147516][ T51] ffff888031ee6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.155561][ T51] ffff888031ee6400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.163604][ T51] >ffff888031ee6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.171638][ T51] ^ [ 205.175695][ T51] ffff888031ee6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.183735][ T51] ffff888031ee6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.191769][ T51] ================================================================== [ 205.210916][ T51] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 205.218150][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 205.229008][ T51] Tainted: [L]=SOFTLOCKUP [ 205.233333][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.243432][ T51] Workqueue: hci1 hci_rx_work [ 205.248143][ T51] Call Trace: [ 205.251420][ T51] [ 205.254347][ T51] dump_stack_lvl+0x3d/0x1f0 [ 205.258943][ T51] vpanic+0x640/0x6f0 [ 205.262933][ T51] panic+0xca/0xd0 [ 205.266659][ T51] ? __pfx_panic+0x10/0x10 [ 205.271073][ T51] ? l2cap_connect_cfm+0xe47/0x1010 [ 205.276269][ T51] ? preempt_schedule_common+0x44/0xc0 [ 205.281761][ T51] ? preempt_schedule_thunk+0x16/0x30 [ 205.287121][ T51] check_panic_on_warn+0xab/0xb0 [ 205.292044][ T51] end_report+0x107/0x160 [ 205.296357][ T51] kasan_report+0xee/0x110 [ 205.301015][ T51] ? l2cap_connect_cfm+0xe47/0x1010 [ 205.306201][ T51] l2cap_connect_cfm+0xe47/0x1010 [ 205.311211][ T51] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 205.316654][ T51] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 205.322092][ T51] le_conn_complete_evt+0x1991/0x1fa0 [ 205.327446][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 205.333147][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 205.338690][ T51] hci_le_meta_evt+0x357/0x610 [ 205.343437][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 205.349485][ T51] hci_event_packet+0x685/0x1210 [ 205.354401][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 205.359666][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 205.365025][ T51] ? kcov_remote_start+0x399/0x680 [ 205.370113][ T51] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.375301][ T51] hci_rx_work+0x2c9/0x1020 [ 205.379794][ T51] process_one_work+0x9ba/0x1b20 [ 205.384720][ T51] ? __pfx_process_one_work+0x10/0x10 [ 205.390078][ T51] ? assign_work+0x1a0/0x250 [ 205.394655][ T51] worker_thread+0x6c8/0xf10 [ 205.399232][ T51] ? __pfx_worker_thread+0x10/0x10 [ 205.404334][ T51] kthread+0x3c5/0x780 [ 205.408386][ T51] ? __pfx_kthread+0x10/0x10 [ 205.412970][ T51] ? rcu_is_watching+0x12/0xc0 [ 205.417716][ T51] ? __pfx_kthread+0x10/0x10 [ 205.422298][ T51] ret_from_fork+0x983/0xb10 [ 205.426877][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 205.431969][ T51] ? __switch_to+0x7af/0x10d0 [ 205.436626][ T51] ? __pfx_kthread+0x10/0x10 [ 205.441198][ T51] ret_from_fork_asm+0x1a/0x30 [ 205.445956][ T51] [ 205.449243][ T51] Kernel Offset: disabled [ 205.453559][ T51] Rebooting in 86400 seconds..