last executing test programs: 18.68318534s ago: executing program 4 (id=4836): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@local, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) 18.37575962s ago: executing program 4 (id=4841): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) read$FUSE(r0, &(0x7f00000076c0)={0x2020}, 0x2020) 18.304218097s ago: executing program 4 (id=4844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) 18.18205027s ago: executing program 4 (id=4849): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') 18.105007475s ago: executing program 4 (id=4851): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) 17.713031989s ago: executing program 4 (id=4857): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r2, r3, 0x0, 0x2003, 0x100020, 0xddff, 0x10, 0x4000, 0x8, 0xffffffff, 0x200}) 17.533428138s ago: executing program 32 (id=4857): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r2, r3, 0x0, 0x2003, 0x100020, 0xddff, 0x10, 0x4000, 0x8, 0xffffffff, 0x200}) 3.385400747s ago: executing program 2 (id=5063): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000002"], 0x80}}, 0x0) 3.277113215s ago: executing program 2 (id=5064): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_gettime(r0, &(0x7f0000000000)) 2.96034943s ago: executing program 2 (id=5067): add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) setregid(0x0, 0xffffffffffffffff) wait4(r0, 0x0, 0x2, 0x0) 2.70666246s ago: executing program 2 (id=5072): bpf$PROG_LOAD(0x5, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r0, 0x9, 0x0) 2.607887642s ago: executing program 0 (id=5075): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r2, 0xfffffff0, 0x4, 0x9}, &(0x7f0000000140)=0x10) 2.488038796s ago: executing program 0 (id=5077): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) 2.01105657s ago: executing program 3 (id=5084): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x4f, 0xfffffffe}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$ppp(r0, &(0x7f00000001c0)='\x00\x00', 0x2) 1.686166705s ago: executing program 2 (id=5086): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 1.588834927s ago: executing program 3 (id=5089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) 1.520037745s ago: executing program 1 (id=5090): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.396412116s ago: executing program 3 (id=5092): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) shmdt(0x0) 1.176790261s ago: executing program 3 (id=5094): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001"], 0x1e4}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002"], 0x78}}, 0x0) 1.167813553s ago: executing program 1 (id=5095): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r0, 0xffffffffffffffff, 0x0) 1.130387548s ago: executing program 2 (id=5096): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 982.692097ms ago: executing program 1 (id=5098): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 899.667322ms ago: executing program 3 (id=5099): r0 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 864.65355ms ago: executing program 5 (id=5100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x2c, r2, 0x5, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}}, 0x40006) 776.977589ms ago: executing program 3 (id=5101): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0xca, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x4, 0x4}}}}}]}}]}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40095505, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 656.784292ms ago: executing program 5 (id=5102): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x26000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x30000, 0x600000, 0x8}) 640.678264ms ago: executing program 0 (id=5103): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 537.327311ms ago: executing program 0 (id=5104): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 468.988751ms ago: executing program 1 (id=5105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0x0, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0x11}, {0x5000, 0x7fffffe, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0xeeee0000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x8}, {0x80a0000, 0xdddd0000, 0x9, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0xf000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xdddd0000, 0x10000, 0xb, 0x0, 0xcd, 0x6, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0xfd, 0x81, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0xeeef0000, 0xff81}, 0x80000003, 0x0, 0xd000, 0x1a1, 0x5, 0xd01, 0xeeee8000, 0x0, [0xb, 0x2, 0x0, 0x2003]}) 438.364955ms ago: executing program 0 (id=5106): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 323.962084ms ago: executing program 0 (id=5107): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000200)=[{0x48, 0x4e, 0x0, 0xfdeffffd}, {0x6, 0x5e, 0x7e, 0x8}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000100)=0xfff) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 322.833789ms ago: executing program 5 (id=5108): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000002680)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000026c0), 0x2, &(0x7f0000004740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 319.118813ms ago: executing program 1 (id=5109): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 177.943673ms ago: executing program 5 (id=5110): r0 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x7e8a, 0x800, 0x1000, 0x29}, &(0x7f0000000400)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 136.864367ms ago: executing program 1 (id=5111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 86.117171ms ago: executing program 5 (id=5112): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 0s ago: executing program 5 (id=5113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a003400020202020202000008003501"], 0x74}}, 0x0) kernel console output (not intermixed with test programs): er=2 [ 284.549139][ T5885] usb 1-1: Product: syz [ 284.554834][ T5885] usb 1-1: Manufacturer: syz [ 284.564941][ T5885] usb 1-1: SerialNumber: syz [ 284.580540][ T5885] usb 1-1: config 0 descriptor?? [ 284.590887][ T5885] usb 1-1: selecting invalid altsetting 0 [ 284.818654][ T5810] usb 1-1: USB disconnect, device number 48 [ 285.089248][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 285.232598][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 285.251857][ T24] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 285.259953][ T24] usb 4-1: config 0 has no interface number 0 [ 285.282008][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 285.291155][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.308514][ T24] usb 4-1: Product: syz [ 285.312714][ T24] usb 4-1: Manufacturer: syz [ 285.317285][ T24] usb 4-1: SerialNumber: syz [ 285.338488][ T24] usb 4-1: config 0 descriptor?? [ 285.376265][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 285.565872][ T3719] usb 4-1: Failed to submit usb control message: -71 [ 285.566064][ T24] usb 4-1: USB disconnect, device number 38 [ 285.583730][ T3719] usb 4-1: unable to send the bmi data to the device: -71 [ 285.591489][ T3719] usb 4-1: unable to get target info from device [ 285.616603][ T3719] usb 4-1: could not get target info (-71) [ 285.639461][ T3719] usb 4-1: could not probe fw (-71) [ 285.697199][T14178] loop8: detected capacity change from 0 to 8 [ 285.725761][T14180] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3720'. [ 285.787546][T14178] Dev loop8: unable to read RDB block 8 [ 285.793154][T14178] loop8: unable to read partition table [ 285.821874][T14178] loop8: partition table beyond EOD, truncated [ 285.849756][T14178] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 286.289708][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 286.456088][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.477287][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 286.499673][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.517464][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.527210][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3734'. [ 286.535323][ T9] usb 1-1: Product: syz [ 286.545204][ T9] usb 1-1: Manufacturer: syz [ 286.555074][ T9] usb 1-1: SerialNumber: syz [ 286.766779][T14192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.832301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.841916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.850447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.859009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.489165][ T5885] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 287.550425][ T9] cdc_ncm 1-1:1.0: bind() failure [ 287.559344][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 287.567249][ T9] cdc_ncm 1-1:1.1: bind() failure [ 287.575932][ T9] usb 1-1: USB disconnect, device number 49 [ 287.661908][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.673861][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.675670][T14272] overlayfs: failed to clone upperpath [ 287.684800][ T5885] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 287.699094][ T5885] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 287.707113][ T5885] usb 5-1: Manufacturer: syz [ 287.714202][ T5885] usb 5-1: config 0 descriptor?? [ 288.577953][T14299] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 288.662188][T14303] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 288.683754][ T5885] uclogic 0003:256C:006D.002E: failed retrieving string descriptor #100: -71 [ 288.708700][ T5885] uclogic 0003:256C:006D.002E: failed retrieving pen parameters: -71 [ 288.736204][ T5885] uclogic 0003:256C:006D.002E: failed probing pen v1 parameters: -71 [ 288.763985][ T5885] uclogic 0003:256C:006D.002E: failed probing parameters: -71 [ 288.787866][ T5885] uclogic 0003:256C:006D.002E: probe with driver uclogic failed with error -71 [ 288.819249][ T5885] usb 5-1: USB disconnect, device number 44 [ 288.988104][T14309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3776'. [ 288.999837][T14309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3776'. [ 289.209336][T14317] syzkaller1: entered promiscuous mode [ 289.216014][T14317] syzkaller1: entered allmulticast mode [ 289.333576][T14320] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.3782'. [ 289.359225][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3783'. [ 290.015720][T14351] overlayfs: statfs failed on './file0' [ 290.405166][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 290.423937][ T5810] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 290.589838][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 290.606307][ T5810] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 290.617999][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 290.633964][ T5810] usb 4-1: config 0 has no interface number 0 [ 290.653159][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.662316][ T5810] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 290.680633][ T24] usb 3-1: config 0 descriptor?? [ 290.685900][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.695284][ T5810] usb 4-1: Product: syz [ 290.702059][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 290.711223][ T5810] usb 4-1: Manufacturer: syz [ 290.715881][ T5810] usb 4-1: SerialNumber: syz [ 290.740467][ T5810] usb 4-1: config 0 descriptor?? [ 290.751585][ T5810] usb-storage 4-1:0.20: USB Mass Storage device detected [ 290.780760][ T5810] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 291.040532][ T9] usb 4-1: USB disconnect, device number 39 [ 291.093604][T14384] lo: entered allmulticast mode [ 291.099918][T14384] lo: left allmulticast mode [ 291.669382][ T24] gspca_sunplus: reg_w_riv err -71 [ 291.676943][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 291.698251][ T24] usb 3-1: USB disconnect, device number 42 [ 291.890258][ T30] audit: type=1400 audit(1766959175.992:609): avc: denied { create } for pid=14418 comm="syz.0.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 291.927796][ T30] audit: type=1400 audit(1766959176.013:610): avc: denied { write } for pid=14418 comm="syz.0.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 292.261032][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 292.343082][ T30] audit: type=1800 audit(1766959176.465:611): pid=14444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3832" name="nullb0" dev="tmpfs" ino=4504 res=0 errno=0 [ 292.454902][ T24] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 292.470546][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.488736][ T30] audit: type=1400 audit(1766959176.559:612): avc: denied { kexec_image_load } for pid=14441 comm="syz.2.3830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 292.510892][ T24] usb 1-1: config 0 descriptor?? [ 292.725095][ T24] kaweth 1-1:0.0: Firmware present in device. [ 292.738055][ T30] audit: type=1400 audit(1766959176.885:613): avc: denied { mounton } for pid=14457 comm="syz.1.3838" path="/955/file0" dev="tmpfs" ino=4885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 292.909704][ T24] kaweth 1-1:0.0: Statistics collection: 0 [ 292.915547][ T24] kaweth 1-1:0.0: Multicast filter limit: 0 [ 292.931802][ T24] kaweth 1-1:0.0: MTU: 0 [ 292.945570][ T24] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 292.996490][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 293.156379][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 293.163419][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 293.173761][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.212998][ T9] usb 5-1: config 0 descriptor?? [ 293.230555][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 293.292946][ T24] kaweth 1-1:0.0: Error setting SOFS wait [ 293.300996][ T24] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 293.331216][ T24] usb 1-1: USB disconnect, device number 50 [ 293.424630][ T30] audit: type=1400 audit(1766959177.599:614): avc: denied { ioctl } for pid=14475 comm="syz.3.3846" path="socket:[48622]" dev="sockfs" ino=48622 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 294.035460][ T9] gspca_sunplus: reg_r err -71 [ 294.040325][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 294.051014][ T9] usb 5-1: USB disconnect, device number 45 [ 294.890495][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 295.053545][ T24] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 295.073402][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 295.097477][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 295.114124][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 295.122630][ T24] usb 4-1: Product: syz [ 295.126896][ T24] usb 4-1: Manufacturer: syz [ 295.131685][ T24] usb 4-1: SerialNumber: syz [ 295.142970][ T24] usb 4-1: config 0 descriptor?? [ 295.404049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 295.545892][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 295.565764][ T24] usb 4-1: Please update to version 0.2 or newer [ 295.584824][ T24] usb 4-1: Firmware: build [ 295.718874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 295.809737][ T24] usb 4-1: USB disconnect, device number 40 [ 295.881127][ T30] audit: type=1400 audit(1766959180.171:615): avc: denied { write } for pid=14536 comm="syz.1.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 295.980967][T14541] FAT-fs (loop1): unable to read boot sector [ 296.238485][T14442] kexec: Could not allocate control_code_buffer [ 296.321627][ T30] audit: type=1400 audit(1766959180.633:616): avc: denied { create } for pid=14548 comm="syz.2.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 296.413871][ T30] audit: type=1400 audit(1766959180.633:617): avc: denied { sys_admin } for pid=14548 comm="syz.2.3877" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 296.537719][T14557] i2c i2c-0: Invalid block write size 58 [ 296.617201][T14565] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.744609][T14622] FAT-fs (loop7): unable to read boot sector [ 297.798473][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3904'. [ 297.833087][T14624] chnl_net:caif_netlink_parms(): no params data found [ 297.866011][ T5815] Bluetooth: Frame is too long (len 24, expected len 4) [ 297.980950][ T30] audit: type=1400 audit(1766959182.376:618): avc: denied { mounton } for pid=14633 comm="syz.0.3909" path="/710/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 298.023354][ T30] audit: type=1400 audit(1766959182.418:619): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 298.098814][T14641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3911'. [ 298.291011][T11061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.303363][T11061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.311682][ T5863] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 298.323037][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.359698][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.423828][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 298.472301][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.488920][ T5863] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.509284][ T5863] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.520083][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.544053][ T5863] usb 4-1: config 0 descriptor?? [ 298.588146][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 298.599347][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.621730][ T24] usb 1-1: config 0 descriptor?? [ 298.630335][ T24] cp210x 1-1:0.0: cp210x converter detected [ 298.642611][ T5863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.775595][T14665] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 298.776108][T14639] netlink: 'syz.3.3913': attribute type 5 has an invalid length. [ 298.784743][T14639] netlink: 'syz.3.3913': attribute type 1 has an invalid length. [ 298.846810][ T5863] usb 4-1: USB disconnect, device number 41 [ 299.018926][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 299.203819][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3934'. [ 299.255857][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 299.486806][ T5863] usb 1-1: USB disconnect, device number 51 [ 299.495977][ T5863] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 299.515846][ T5863] cp210x 1-1:0.0: device disconnected [ 300.312082][T14736] input: syz0 as /devices/virtual/input/input52 [ 300.492540][T14741] serio: Serial port ptm0 [ 301.413989][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 301.481057][ T5810] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 301.586249][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 301.601488][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.625505][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.637217][T14795] IPVS: Scheduler module ip_vs_sip not found [ 301.645775][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 301.648581][T14795] IPVS: length: 141 != 8 [ 301.655139][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 301.665355][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.674556][ T5810] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.686513][ T5810] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 301.699025][ T24] usb 3-1: config 0 descriptor?? [ 301.705080][ T5810] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.720893][ T5810] usb 4-1: config 1 interface 0 has no altsetting 0 [ 301.734849][ T5810] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 301.765182][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.775010][ T5810] usb 4-1: Product: syz [ 301.780658][ T5810] usb 4-1: Manufacturer: syz [ 301.786845][ T5810] usb 4-1: SerialNumber: syz [ 301.839664][T14805] netlink: 'syz.0.3984': attribute type 4 has an invalid length. [ 302.001732][ T5810] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 302.124427][ T24] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x0 [ 302.133250][ T24] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x0 [ 302.141750][ T24] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x0 [ 302.150681][ T24] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x0 [ 302.157896][ T24] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x0 [ 302.167239][ T24] koneplus 0003:1E7D:2D51.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 302.223661][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.244996][ T5810] usb 4-1: USB disconnect, device number 42 [ 302.256486][ T5810] usblp0: removed [ 302.284609][ T30] audit: type=1400 audit(1766959186.901:620): avc: denied { name_bind } for pid=14823 comm="syz.0.3993" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 302.590568][ T5810] usb 3-1: USB disconnect, device number 43 [ 302.682135][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 302.695013][ T30] audit: type=1400 audit(1766959187.331:621): avc: denied { create } for pid=14834 comm="syz.4.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.747692][ T30] audit: type=1400 audit(1766959187.352:622): avc: denied { setopt } for pid=14834 comm="syz.4.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.808741][ T30] audit: type=1400 audit(1766959187.384:623): avc: denied { read } for pid=14834 comm="syz.4.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.852193][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 302.874550][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 302.890564][ T30] audit: type=1400 audit(1766959187.426:624): avc: denied { write } for pid=14834 comm="syz.4.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.910261][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.940318][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.962139][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.977288][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.000480][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.019807][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.149334][T14851] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input53 [ 303.228029][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 303.240421][ T9] usbtmc 1-1:16.0: can't read capabilities [ 303.364264][T14865] tmpfs: Too small a size for current use [ 303.423217][ T9] usb 1-1: USB disconnect, device number 52 [ 303.561105][ T30] audit: type=1400 audit(1766959188.234:625): avc: denied { remount } for pid=14878 comm="syz.2.4016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 303.626966][ T30] audit: type=1400 audit(1766959188.308:626): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 303.866812][T14900] 9p: Bad value for 'wfdno' [ 304.168550][ T30] audit: type=1400 audit(1766959188.885:627): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 304.293493][T14922] io-wq is not configured for unbound workers [ 304.537519][ T30] audit: type=1400 audit(1766959189.263:628): avc: denied { accept } for pid=14933 comm="syz.0.4041" path="socket:[50609]" dev="sockfs" ino=50609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.697223][T14940] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 304.876025][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4054'. [ 305.186556][T14975] IPv6: sit1: Disabled Multicast RS [ 305.213835][T14975] sit1: entered allmulticast mode [ 305.328861][T14979] ip6tnl0: Caught tx_queue_len zero misconfig [ 305.491350][T14991] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4064'. [ 305.502353][T14991] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4064'. [ 305.710235][ T30] audit: type=1326 audit(1766959190.502:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21eb8f749 code=0x7ffc0000 [ 305.765674][ T30] audit: type=1326 audit(1766959190.502:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21eb8f749 code=0x7ffc0000 [ 305.803746][ T30] audit: type=1326 audit(1766959190.534:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb21eb8f749 code=0x7ffc0000 [ 305.894482][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 305.946653][T15019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4078'. [ 305.973918][T15025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4082'. [ 306.088722][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.107210][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.123405][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.139321][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.169266][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.179760][ T24] usb 4-1: config 0 descriptor?? [ 306.219663][ T9] kernel read not supported for file 1585/task/1586/auxv (pid: 9 comm: kworker/0:0) [ 306.428675][T15052] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4094'. [ 306.566654][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 306.583619][ T24] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 306.602014][ T24] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 306.605654][ T5863] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 306.712840][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.722188][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.730321][ T9] usb 5-1: Product: syz [ 306.734480][ T9] usb 5-1: Manufacturer: syz [ 306.739208][ T9] usb 5-1: SerialNumber: syz [ 306.748470][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 306.763834][ T5885] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 306.773524][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 306.780317][ T5863] usb 1-1: config 0 has an invalid interface number: 140 but max is 0 [ 306.794583][ T5863] usb 1-1: config 0 has no interface number 0 [ 306.804360][ T5863] usb 1-1: New USB device found, idVendor=03f0, idProduct=0b39, bcdDevice=dd.d8 [ 306.814544][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.822603][ T5863] usb 1-1: Product: syz [ 306.826824][ T5863] usb 1-1: Manufacturer: syz [ 306.831444][ T5863] usb 1-1: SerialNumber: syz [ 306.837976][ T5863] usb 1-1: config 0 descriptor?? [ 306.845204][ T5863] pl2303 1-1:0.140: required interrupt-in endpoint missing [ 306.867924][ T24] usb 4-1: USB disconnect, device number 43 [ 307.050906][ T24] usb 1-1: USB disconnect, device number 53 [ 307.557252][ T24] usb 5-1: USB disconnect, device number 46 [ 307.628531][T15090] bond1: option downdelay: invalid value (18446744073709551615) [ 307.636425][T15090] bond1: option downdelay: allowed values 0 - 2147483647 [ 307.647067][T15090] bond1 (unregistering): Released all slaves [ 308.211716][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4125'. [ 308.325607][ T5885] usb 5-1: Service connection timeout for: 259 [ 308.347848][ T5885] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 308.382098][ T5885] ath9k_htc: Failed to initialize the device [ 308.399930][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 308.643584][ T5810] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 308.663049][ T6323] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 308.798021][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 308.811969][ T5810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.824627][ T5810] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 308.836208][ T6323] usb 4-1: Using ep0 maxpacket: 32 [ 308.843684][ T5810] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 308.856094][ T6323] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 308.868269][ T6323] usb 4-1: config 0 has no interface number 0 [ 308.877964][ T6323] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 308.889492][ T6323] usb 4-1: config 0 interface 196 has no altsetting 0 [ 308.889907][ T5810] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.906790][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.915290][ T5810] usb 1-1: Product: syz [ 308.920365][ T5810] usb 1-1: Manufacturer: syz [ 308.925175][ T5810] usb 1-1: SerialNumber: syz [ 308.930727][ T6323] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 308.941293][ T6323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.950370][ T6323] usb 4-1: Product: syz [ 308.954921][ T6323] usb 4-1: Manufacturer: syz [ 308.965646][ T6323] usb 4-1: SerialNumber: syz [ 308.970666][T15130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 308.986698][ T6323] usb 4-1: config 0 descriptor?? [ 308.994175][T15134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 309.530636][T15192] vcan0: tx drop: invalid sa for name 0x0080000000000000 [ 309.601324][ T6323] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 309.621301][ T6323] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 309.784076][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 309.784091][ T30] audit: type=1400 audit(1766959194.775:646): avc: denied { read } for pid=15204 comm="syz.4.4165" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 309.786688][ T6323] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 309.821611][ T30] audit: type=1400 audit(1766959194.807:647): avc: denied { open } for pid=15204 comm="syz.4.4165" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 309.866523][ T24] usb 4-1: USB disconnect, device number 44 [ 309.919541][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.927844][ T24] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 309.964380][T15209] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4166'. [ 310.012575][ T5810] cdc_ncm 1-1:1.0: bind() failure [ 310.028486][ T6323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 310.040213][ T5810] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 310.053664][ T6323] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 310.075240][ T5810] usb 1-1: USB disconnect, device number 54 [ 310.081180][ T6323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.102740][ T6323] usb 3-1: config 0 descriptor?? [ 310.108950][T15195] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 310.122400][T15214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4168'. [ 310.149016][T15214] netlink: 'syz.4.4168': attribute type 7 has an invalid length. [ 310.156883][T15214] netlink: 'syz.4.4168': attribute type 8 has an invalid length. [ 310.169599][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4168'. [ 310.184541][T15214] erspan0: entered promiscuous mode [ 310.191115][T15214] gretap0: entered promiscuous mode [ 310.480813][ T30] audit: type=1400 audit(1766959195.500:648): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 310.532466][ T6323] elan 0003:04F3:0755.0031: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 310.670275][ T30] audit: type=1400 audit(1766959195.699:649): avc: denied { create } for pid=15238 comm="syz.4.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 310.696789][ T30] audit: type=1400 audit(1766959195.731:650): avc: denied { write } for pid=15238 comm="syz.4.4180" path="socket:[51554]" dev="sockfs" ino=51554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 310.756110][ T5885] usb 3-1: USB disconnect, device number 44 [ 310.920714][ T30] audit: type=1400 audit(1766959195.962:651): avc: denied { validate_trans } for pid=15247 comm="syz.0.4184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 311.529928][T15281] input: syz1 as /devices/virtual/input/input55 [ 311.663531][ T5885] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 311.712634][T15284] 9pnet: p9_errstr2errno: server reported unknown error [ 311.824719][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 311.836427][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.870893][ T5885] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 311.921843][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.947480][ T5885] usb 5-1: Product: syz [ 311.952695][ T5885] usb 5-1: Manufacturer: syz [ 311.970495][ T5885] usb 5-1: SerialNumber: syz [ 311.997962][ T5885] usb 5-1: config 0 descriptor?? [ 312.158576][ T5863] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 312.227048][ T30] audit: type=1400 audit(1766959197.327:652): avc: denied { mounton } for pid=15315 comm="syz.3.4215" path="/781/file0" dev="tmpfs" ino=4018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 312.283530][ T30] audit: type=1400 audit(1766959197.327:653): avc: denied { mounton } for pid=15315 comm="syz.3.4215" path="/781/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 312.360705][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 312.373375][ T5863] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 312.384412][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.412946][ T5863] usb 3-1: Product: syz [ 312.424323][ T5863] usb 3-1: Manufacturer: syz [ 312.429357][ T5863] usb 3-1: SerialNumber: syz [ 312.445920][ T5863] usb 3-1: config 0 descriptor?? [ 312.471105][ T5885] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 312.496001][ T5885] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 312.535274][ T5885] usb 5-1: USB disconnect, device number 47 [ 312.665912][ T5863] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 045 [ 312.734463][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4224'. [ 312.743853][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4224'. [ 312.944108][T15296] i2c i2c-1: failure reading data [ 312.953410][ T9] usb 3-1: USB disconnect, device number 45 [ 312.974182][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 312.986087][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.146111][T15355] misc userio: Begin command sent, but we're already running [ 313.219258][T15357] vivid-007: disconnect [ 313.224521][T15356] vivid-007: reconnect [ 313.324785][ T30] audit: type=1400 audit(1766959198.492:654): avc: denied { module_load } for pid=15362 comm="syz.4.4234" path="/820/bus" dev="tmpfs" ino=4175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 313.995177][ T30] audit: type=1400 audit(1766959199.195:655): avc: denied { set_context_mgr } for pid=15396 comm="syz.4.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 314.091146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 314.376745][ T5885] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 314.521304][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 314.537972][ T5885] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 314.592737][ T5885] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 314.648908][ T5885] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 314.668589][ T5885] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 314.686878][ T5885] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 314.712277][ T5885] usb 3-1: config 1 interface 0 has no altsetting 0 [ 314.718927][ T5885] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 314.743932][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.758491][ T5885] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 314.862450][ T5810] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 314.965935][ T5885] scsi host1: usb-storage 3-1:1.0 [ 315.016513][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 315.023064][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 315.036646][ T5810] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 315.045765][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.057360][ T5810] usb 1-1: Product: syz [ 315.061537][ T5810] usb 1-1: Manufacturer: syz [ 315.066257][ T5810] usb 1-1: SerialNumber: syz [ 315.072801][ T5810] usb 1-1: config 0 descriptor?? [ 315.160790][ T5885] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 315.194940][ T9] usb 3-1: USB disconnect, device number 46 [ 315.333357][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 315.350702][ T5885] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 315.360084][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.370601][ T5885] usb 5-1: config 0 descriptor?? [ 315.470102][ T5810] gs_usb 1-1:0.0: Configuring for 256 interfaces [ 315.477575][ T5810] gs_usb 1-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 315.487044][ T5810] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 315.594708][T15467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.607405][T15469] input: syz1 as /devices/virtual/input/input57 [ 315.638137][T15467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.684048][ T9] usb 1-1: USB disconnect, device number 55 [ 315.781216][ T5885] logitech 0003:046D:CA03.0032: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.4-1/input0 [ 315.803642][ T5885] logitech 0003:046D:CA03.0032: no inputs found [ 315.999247][ T9] usb 5-1: USB disconnect, device number 48 [ 316.075322][T15487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4287'. [ 316.110751][T15487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4287'. [ 316.304827][T15499] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4293'. [ 316.318229][T15498] tipc: Enabled bearer , priority 7 [ 316.324162][ T9] IPVS: starting estimator thread 0... [ 316.424593][T15500] IPVS: using max 38 ests per chain, 91200 per kthread [ 317.022803][T15528] sctp: [Deprecated]: syz.2.4304 (pid 15528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.022803][T15528] Use struct sctp_sack_info instead [ 317.273854][T15537] Bluetooth: hci5: Frame reassembly failed (-84) [ 317.486720][T15551] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4312'. [ 317.536194][T15553] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 317.768287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 317.825423][ T5810] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 318.006418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.017452][ T5810] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 318.027339][ T5810] usb 5-1: config 0 has no interface number 0 [ 318.033562][ T5810] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 318.055816][ T5810] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 318.079003][ T5810] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.102808][ T5810] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 318.127468][ T5810] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 318.154059][ T5810] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 318.163322][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.168575][ T9] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 318.178364][ T5810] usb 5-1: Product: syz [ 318.187415][ T5810] usb 5-1: Manufacturer: syz [ 318.197456][ T5810] usb 5-1: SerialNumber: syz [ 318.213376][ T5810] usb 5-1: config 0 descriptor?? [ 318.225818][T15555] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 318.246318][ T5810] iguanair 5-1:0.255: probe with driver iguanair failed with error -12 [ 318.252337][T15581] sctp: [Deprecated]: syz.3.4328 (pid 15581) Use of int in max_burst socket option. [ 318.252337][T15581] Use struct sctp_assoc_value instead [ 318.342856][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 318.353855][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 318.377478][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 318.386544][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.416921][ T9] usb 1-1: config 0 descriptor?? [ 318.422517][T15576] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 318.465685][ T5810] usb 5-1: USB disconnect, device number 49 [ 318.626278][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 318.632338][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 318.641915][ T9] usb 1-1: USB disconnect, device number 56 [ 319.043851][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 319.081306][T15602] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4338'. [ 319.216969][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 319.224282][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 319.238449][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 319.259573][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 319.269476][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.288431][ T9] usb 1-1: config 0 descriptor?? [ 319.293737][ T5885] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 319.466458][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.491357][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.513150][ T5885] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 319.529432][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.569620][ T5885] usb 5-1: config 0 descriptor?? [ 319.707920][ T9] hid-rmi 0003:06CB:81A7.0033: item fetching failed at offset 3/5 [ 319.725772][ T9] hid-rmi 0003:06CB:81A7.0033: parse failed [ 319.738797][ T9] hid-rmi 0003:06CB:81A7.0033: probe with driver hid-rmi failed with error -22 [ 319.989573][ T9] usb 1-1: USB disconnect, device number 57 [ 320.054920][ T5885] logitech-djreceiver 0003:046D:C71F.0034: unknown main item tag 0x7 [ 320.072972][ T5885] logitech-djreceiver 0003:046D:C71F.0034: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 320.091868][ T5810] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 320.201664][T15633] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.4351'. [ 320.255320][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.286442][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 320.298201][ T6323] usb 5-1: USB disconnect, device number 50 [ 320.313304][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 320.323902][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.337508][ T5810] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.347838][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.360592][ T5810] usb 3-1: config 0 descriptor?? [ 320.436458][ T30] audit: type=1326 audit(1766959205.957:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.3.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712cd8f749 code=0x7ffc0000 [ 320.520210][ T30] audit: type=1326 audit(1766959205.957:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.3.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712cd8f749 code=0x7ffc0000 [ 320.544541][ T30] audit: type=1326 audit(1766959205.957:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.3.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f712cd8f749 code=0x7ffc0000 [ 320.575420][ T30] audit: type=1326 audit(1766959205.957:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.3.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712cd8f749 code=0x7ffc0000 [ 320.612257][ T30] audit: type=1326 audit(1766959205.957:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.3.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712cd8f749 code=0x7ffc0000 [ 320.796576][ T5810] plantronics 0003:047F:FFFF.0035: ignoring exceeding usage max [ 320.835177][ T5810] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 320.939000][T15654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.415399][ T5810] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 321.571043][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 321.587802][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 321.609896][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 321.639668][ T5810] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 321.653085][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.663584][ T5810] usb 1-1: Product: syz [ 321.667827][ T5810] usb 1-1: Manufacturer: syz [ 321.673404][ T5810] usb 1-1: SerialNumber: syz [ 321.680528][ T5810] usb 1-1: config 0 descriptor?? [ 321.686521][T15667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 321.693834][T15667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 321.702951][ T5810] usb 1-1: ucan: probing device on interface #0 [ 322.329791][ T5810] ucan 1-1:0.0 can0: registered device [ 322.488054][ T5810] ucan 1-1:0.0 can0: firmware string: ¹i™ü“c±.èöÌ©râ. -Ócí® [ 322.719325][ T5810] usb 1-1: USB disconnect, device number 58 [ 322.899173][ T5885] usb 3-1: USB disconnect, device number 47 [ 323.676012][ T5885] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 323.836748][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 323.845651][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 323.859842][ T5885] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 323.874578][ T5885] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 323.884840][ T5885] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 323.896951][ T5885] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 323.907345][ T5885] usb 5-1: config 1 interface 0 has no altsetting 0 [ 323.923031][ T5885] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 323.935904][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.949349][ T5810] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 323.959246][ T5885] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 324.001334][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4410'. [ 324.101524][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 324.115858][ T5810] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 324.127006][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.143313][ T5810] usb 4-1: Product: syz [ 324.155035][ T5810] usb 4-1: Manufacturer: syz [ 324.163813][ T5885] scsi host1: usb-storage 5-1:1.0 [ 324.168889][ T5810] usb 4-1: SerialNumber: syz [ 324.171331][ T5810] usb 4-1: config 0 descriptor?? [ 324.193008][ T30] audit: type=1400 audit(1766959209.905:661): avc: denied { listen } for pid=15781 comm="syz.0.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 324.198959][ T5810] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 324.399142][T15788] netlink: zone id is out of range [ 324.400587][ T5885] usb 5-1: USB disconnect, device number 51 [ 324.404442][T15788] netlink: zone id is out of range [ 324.418299][T15788] netlink: zone id is out of range [ 324.423593][T15788] netlink: zone id is out of range [ 324.429869][T15788] netlink: zone id is out of range [ 324.445660][T15788] netlink: zone id is out of range [ 324.450915][T15788] netlink: zone id is out of range [ 324.458041][T15788] netlink: zone id is out of range [ 324.468154][T15788] netlink: zone id is out of range [ 324.474112][T15788] netlink: zone id is out of range [ 324.772707][ T5810] gspca_vc032x: reg_r err -71 [ 324.778037][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.783563][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.789849][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.795167][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.815753][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.822872][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.828250][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.833531][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.843707][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.851358][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.858013][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.863304][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.869652][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.882635][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.886030][ T5885] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 324.888328][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.902973][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.908299][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.914410][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.919731][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.926311][ T5810] gspca_vc032x: Unknown sensor... [ 324.949923][ T5810] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 324.973573][ T5810] usb 4-1: USB disconnect, device number 45 [ 325.035882][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 325.045373][ T5885] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 325.064291][ T5885] usb 1-1: config 0 has no interface number 0 [ 325.078757][ T5885] usb 1-1: config 0 interface 184 has no altsetting 0 [ 325.103596][ T5885] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 325.139447][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.156247][ T5885] usb 1-1: Product: syz [ 325.176313][ T5885] usb 1-1: Manufacturer: syz [ 325.191302][ T5885] usb 1-1: SerialNumber: syz [ 325.216880][ T5885] usb 1-1: config 0 descriptor?? [ 325.224551][ T5885] smsc75xx v1.0.0 [ 325.716910][ T30] audit: type=1400 audit(1766959211.500:662): avc: denied { map } for pid=15837 comm="syz.1.4454" path="socket:[54880]" dev="sockfs" ino=54880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 325.768114][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.195661][ T5885] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 326.207182][ T5885] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 326.217095][ T5885] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 326.228932][ T5885] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 326.238991][ T5885] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 326.249315][ T5885] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 326.259500][ T5885] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 326.271030][ T5885] usb 1-1: USB disconnect, device number 59 [ 326.569781][ T5810] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 326.578724][T15865] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4457'. [ 326.632945][T15869] overlayfs: failed to clone upperpath [ 326.656267][T15872] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4458'. [ 326.671441][T15867] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4458'. [ 326.688212][T15874] input: syz0 as /devices/virtual/input/input59 [ 326.720646][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 326.727519][ T5810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 326.737402][ T5810] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 326.747387][ T5810] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 326.757890][ T5810] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 326.770949][ T5810] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 326.802429][ T5810] usb 4-1: config 1 interface 0 has no altsetting 0 [ 326.815877][ T5810] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 326.848104][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.890313][ T5810] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 326.937504][T15889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4467'. [ 326.946712][T15889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4467'. [ 326.972260][T15892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4468'. [ 327.030288][T15894] input: syz0 as /devices/virtual/input/input60 [ 327.098414][ T5810] scsi host1: usb-storage 4-1:1.0 [ 327.293331][T15911] input: syz1 as /devices/virtual/input/input61 [ 327.312587][T15911] input: failed to attach handler leds to device input61, error: -6 [ 327.315384][ T5810] usb 4-1: USB disconnect, device number 46 [ 328.204665][ T30] audit: type=1400 audit(1766959214.115:663): avc: denied { setattr } for pid=15963 comm="syz.2.4486" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.568901][ T5810] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 328.759673][ T5810] usb 1-1: Using ep0 maxpacket: 16 [ 328.771848][ T5810] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 328.796097][ T5810] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 328.844507][ T5810] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 328.884093][ T5810] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 328.884685][T16007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.917995][ T5810] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 328.952731][ T5810] usb 1-1: config 1 interface 0 has no altsetting 0 [ 328.969703][ T5810] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 328.971547][T16013] input: syz1 as /devices/virtual/input/input62 [ 328.984436][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.001652][T16013] input: failed to attach handler leds to device input62, error: -6 [ 329.024386][ T30] audit: type=1400 audit(1766959214.965:664): avc: denied { remount } for pid=16014 comm="syz.3.4503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 329.056554][ T5815] Bluetooth: hci2: command 0x0c1a tx timeout [ 329.064892][ T5810] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 329.071831][ T6323] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 329.080813][ T6323] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 329.258140][ T5810] scsi host1: usb-storage 1-1:1.0 [ 329.352266][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4509'. [ 329.468035][ T9] usb 1-1: USB disconnect, device number 60 [ 329.654710][T16052] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4515'. [ 329.958465][ T30] audit: type=1400 audit(1766959215.952:665): avc: denied { relabelfrom } for pid=16064 comm="syz.2.4519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 330.055364][ T30] audit: type=1400 audit(1766959215.952:666): avc: denied { relabelto } for pid=16064 comm="syz.2.4519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 330.597032][ T30] audit: type=1400 audit(1766959216.614:667): avc: denied { mount } for pid=16094 comm="syz.4.4527" name="/" dev="autofs" ino=55386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 330.707829][ T30] audit: type=1400 audit(1766959216.666:668): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 330.730671][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 330.800812][ T30] audit: type=1400 audit(1766959216.845:669): avc: denied { create } for pid=16100 comm="syz.4.4529" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 330.807333][ T5810] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 330.831445][T16101] ./file0: Can't lookup blockdev [ 330.865818][ T30] audit: type=1400 audit(1766959216.876:670): avc: denied { mounton } for pid=16100 comm="syz.4.4529" path="/877/file0/file0" dev="hugetlbfs" ino=55395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 330.903972][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 330.915048][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.953107][ T9] usb 1-1: config 0 has no interfaces? [ 330.980613][ T9] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 331.009814][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.027768][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 331.039424][ T6323] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 331.040669][ T9] usb 1-1: Product: syz [ 331.046492][ T6323] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 331.057078][ T9] usb 1-1: Manufacturer: syz [ 331.068845][ T5810] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.068971][ T9] usb 1-1: SerialNumber: syz [ 331.087684][ T9] usb 1-1: config 0 descriptor?? [ 331.098277][ T5810] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 331.147508][ T5810] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.171157][ T5810] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 331.183141][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4536'. [ 331.190945][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.203838][ T5810] usb 4-1: config 0 descriptor?? [ 331.360241][T16090] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4526'. [ 331.372546][ T9] usb 1-1: USB disconnect, device number 61 [ 331.827282][ T30] audit: type=1400 audit(1766959217.926:671): avc: denied { getopt } for pid=16153 comm="syz.2.4551" lport=36016 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 332.117361][ T30] audit: type=1326 audit(1766959218.220:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16167 comm="syz.2.4557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67c078f749 code=0x0 [ 332.257795][ T5810] usb 4-1: USB disconnect, device number 47 [ 332.480799][ C1] net_ratelimit: 44 callbacks suppressed [ 332.480819][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.692532][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 332.856489][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 332.875925][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.890170][ T9] usb 1-1: config 0 descriptor?? [ 332.973701][T16193] Set syz1 is full, maxelem 1023 reached [ 333.083111][ T5815] Bluetooth: hci4: command 0x0405 tx timeout [ 333.084516][ T6323] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 333.095463][ T6323] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 333.247141][ T5885] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 333.274689][ T30] audit: type=1400 audit(1766959219.438:673): avc: denied { write } for pid=16204 comm="syz.2.4573" path="socket:[56484]" dev="sockfs" ino=56484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 333.399082][ T5885] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 333.416583][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.439791][ T5885] usb 5-1: config 0 descriptor?? [ 333.889110][ T9] usb 1-1: Cannot set autoneg [ 333.904218][ T9] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 333.974646][ T9] usb 1-1: USB disconnect, device number 62 [ 334.166274][T16234] tmpfs: Bad value for 'mpol' [ 334.412530][ T5885] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 334.434076][ T5885] usb 5-1: USB disconnect, device number 52 [ 334.502458][ T5878] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 334.660918][ T5878] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.680332][ T5878] usb 4-1: config 0 has no interface number 0 [ 334.699547][ T5878] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 334.718653][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.730033][ T5878] usb 4-1: Product: syz [ 334.735869][ T5878] usb 4-1: Manufacturer: syz [ 334.743124][ T5878] usb 4-1: SerialNumber: syz [ 334.749885][ T5878] usb 4-1: config 0 descriptor?? [ 334.912088][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4601'. [ 334.952909][T16268] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.4602'. [ 334.964744][ T5878] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 334.985324][ T5878] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 335.015010][ T5878] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 335.023231][ T5878] usb 4-1: media controller created [ 335.056958][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.198019][ T5878] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 335.505096][T16295] ref_ctr_offset mismatch. inode: 0x11c2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2 [ 335.874371][ T6323] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 336.028897][ T6323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.048700][ T6323] usb 5-1: config 0 interface 0 has no altsetting 0 [ 336.067899][ T6323] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 336.081713][ T6323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.097403][ T6323] usb 5-1: Product: syz [ 336.106010][ T6323] usb 5-1: Manufacturer: syz [ 336.115595][ T6323] usb 5-1: SerialNumber: syz [ 336.127126][ T6323] usb 5-1: config 0 descriptor?? [ 336.140559][ T6323] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 336.157055][ T6323] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 336.170545][ T6323] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 336.186069][ T6323] usb 5-1: media controller created [ 336.221885][ T5878] usb 4-1: USB disconnect, device number 48 [ 336.229241][ T6323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.323618][ T6323] DVB: Unable to find symbol tda10046_attach() [ 336.368842][ T6323] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 336.378545][ T6323] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 336.838082][ T30] audit: type=1326 audit(1766959223.186:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.2.4632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67c078f749 code=0x0 [ 336.969165][ T6323] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 337.009201][ T6323] usb 5-1: USB disconnect, device number 53 [ 337.123508][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4637'. [ 337.228286][ T30] audit: type=1400 audit(1766959223.585:675): avc: denied { name_bind } for pid=16356 comm="syz.1.4639" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 337.760914][ T5885] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 337.865123][ T6323] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 337.927811][ T5885] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 337.947478][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.965890][ T5885] usb 3-1: Product: syz [ 337.978725][ T5885] usb 3-1: Manufacturer: syz [ 337.983379][ T5885] usb 3-1: SerialNumber: syz [ 338.016838][ T6323] usb 4-1: Using ep0 maxpacket: 16 [ 338.018340][ T5885] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 338.023745][ T6323] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 338.058129][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 338.066246][ T6323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 338.124185][ T6323] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 338.133604][ T6323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.144118][ T6323] usb 4-1: Product: syz [ 338.148312][ T6323] usb 4-1: Manufacturer: syz [ 338.169478][ T6323] usb 4-1: SerialNumber: syz [ 338.184926][ T6323] usb 4-1: config 0 descriptor?? [ 338.203406][ T6323] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 338.223978][ T6323] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 338.287937][ C0] usb 3-1: ath9k_htc: invalid pkt_len (fedb) [ 338.488037][ T5878] usb 3-1: USB disconnect, device number 48 [ 338.673780][ T5885] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 338.778692][ T6323] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 338.785409][ T6323] em28xx 4-1:0.0: Config register raw data: 0x41 [ 338.816724][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 338.823264][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 338.835076][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 338.844945][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 338.857973][ T5885] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 338.867141][ T5885] usb 5-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 338.875408][ T5885] usb 5-1: Product: syz [ 338.879563][ T5885] usb 5-1: Manufacturer: syz [ 338.884290][ T5885] usb 5-1: SerialNumber: syz [ 338.890319][ T5885] usb 5-1: config 0 descriptor?? [ 338.897482][ T5885] smsusb:smsusb_probe: board id=2, interface number 0 [ 338.905365][ T5885] smsusb:smsusb_probe: Device initialized with return code -19 [ 338.981059][ T6323] usb 4-1: USB disconnect, device number 49 [ 338.988734][ T6323] em28xx 4-1:0.0: Disconnecting em28xx [ 338.999194][ T6323] em28xx 4-1:0.0: Freeing device [ 339.026458][ T30] audit: type=1400 audit(1766959225.475:676): avc: denied { bind } for pid=16407 comm="syz.2.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 339.026512][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 339.086138][ T9] ath9k_htc: Failed to initialize the device [ 339.122204][ T5878] usb 3-1: ath9k_htc: USB layer deinitialized [ 339.287552][ T5853] usb 5-1: USB disconnect, device number 54 [ 340.089601][T16458] netlink: 'syz.0.4683': attribute type 12 has an invalid length. [ 340.097695][T16458] netlink: 'syz.0.4683': attribute type 29 has an invalid length. [ 340.105681][T16458] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4683'. [ 340.121576][T16458] netlink: 59 bytes leftover after parsing attributes in process `syz.0.4683'. [ 340.638098][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4695'. [ 340.663559][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4695'. [ 341.073634][T16512] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 341.082321][ T30] audit: type=1400 audit(1766959227.627:677): avc: denied { create } for pid=16509 comm="syz.0.4706" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 341.190166][ T30] audit: type=1400 audit(1766959227.627:678): avc: denied { associate } for pid=16509 comm="syz.0.4706" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 341.289250][ T30] audit: type=1400 audit(1766959227.638:679): avc: denied { mounton } for pid=16509 comm="syz.0.4706" path="/826/file0" dev="tmpfs" ino=4229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 341.407074][ T30] audit: type=1400 audit(1766959227.648:680): avc: denied { add_name } for pid=16509 comm="syz.0.4706" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 341.514238][ T30] audit: type=1400 audit(1766959227.648:681): avc: denied { setattr } for pid=16509 comm="syz.0.4706" name="work" dev="tmpfs" ino=4230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 341.611624][ T9] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 341.807525][ T30] audit: type=1400 audit(1766959227.659:682): avc: denied { write open } for pid=16509 comm="syz.0.4706" path=2F202864656C6574656429 dev="tmpfs" ino=4231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 341.807898][ T30] audit: type=1400 audit(1766959227.659:683): avc: denied { create } for pid=16509 comm="syz.0.4706" name="#19" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 341.876237][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 342.019447][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 342.032064][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.091161][ T30] audit: type=1400 audit(1766959227.669:684): avc: denied { remove_name } for pid=16509 comm="syz.0.4706" name="#19" dev="tmpfs" ino=4232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 342.091531][ T30] audit: type=1400 audit(1766959227.669:685): avc: denied { rename } for pid=16509 comm="syz.0.4706" name="#19" dev="tmpfs" ino=4232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 342.102377][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 342.283800][ T30] audit: type=1400 audit(1766959227.669:686): avc: denied { unlink } for pid=16509 comm="syz.0.4706" name="#19" dev="tmpfs" ino=4233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 342.285906][ T30] audit: type=1400 audit(1766959227.669:687): avc: denied { unlink } for pid=16509 comm="syz.0.4706" name="#1a" dev="tmpfs" ino=4232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 342.445997][ T30] audit: type=1400 audit(1766959227.953:688): avc: denied { rmdir } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=4229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 342.684722][ T30] audit: type=1400 audit(1766959228.646:689): avc: denied { bind } for pid=16532 comm="syz.1.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 342.720950][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 342.781004][ T30] audit: type=1326 audit(1766959229.223:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.2.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c078f749 code=0x7ffc0000 [ 342.867971][ T30] audit: type=1326 audit(1766959229.223:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.2.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c078f749 code=0x7ffc0000 [ 342.949987][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 342.956109][T16554] netlink: 'syz.3.4726': attribute type 10 has an invalid length. [ 342.962844][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 342.987497][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.018843][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 343.046234][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 343.073951][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 343.083242][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 343.099957][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.115391][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 343.127416][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 343.145448][ T9] usb 5-1: string descriptor 0 read error: -22 [ 343.179335][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 343.200680][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.242968][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 343.468723][T16582] overlayfs: failed to clone lowerpath [ 343.483516][ T9] usb 5-1: USB disconnect, device number 55 [ 343.542693][T16586] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4741'. [ 343.552915][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4741'. [ 343.663829][T16594] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4745'. [ 343.829682][T16604] random: crng reseeded on system resumption [ 344.474365][ T5863] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 344.618982][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.651816][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.683405][ T5863] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 344.698064][ T5863] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 344.717795][ T5863] usb 1-1: Manufacturer: syz [ 344.734584][ T5863] usb 1-1: config 0 descriptor?? [ 345.082894][T16642] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 345.100225][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 345.131631][ T5863] pyra 0003:1E7D:2CF6.0037: unknown main item tag 0x0 [ 345.138450][ T5863] pyra 0003:1E7D:2CF6.0037: unknown main item tag 0x0 [ 345.174169][ T5863] pyra 0003:1E7D:2CF6.0037: item fetching failed at offset 2/7 [ 345.183328][ T5863] pyra 0003:1E7D:2CF6.0037: parse failed [ 345.190302][ T5863] pyra 0003:1E7D:2CF6.0037: probe with driver pyra failed with error -22 [ 345.297287][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 345.312651][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.331853][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 345.351375][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.357282][ T5853] usb 1-1: USB disconnect, device number 63 [ 345.372890][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 345.388880][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 345.406830][ T9] usb 4-1: Product: syz [ 345.412427][ T9] usb 4-1: Manufacturer: syz [ 345.436701][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 345.451964][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 345.466105][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 345.482129][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 345.731421][ T5853] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 345.859776][ T9] usb 4-1: USB disconnect, device number 50 [ 345.895233][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.895265][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.895287][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.895323][ T5853] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 345.895343][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.909008][ T5853] usb 3-1: config 0 descriptor?? [ 346.301833][ T5853] acrux 0003:1A34:0802.0038: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 346.301870][ T5853] acrux 0003:1A34:0802.0038: no inputs found [ 346.301885][ T5853] acrux 0003:1A34:0802.0038: Failed to enable force feedback support, error: -19 [ 346.303026][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 346.515228][ T5853] usb 3-1: USB disconnect, device number 49 [ 346.576731][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.593383][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.605864][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.609343][T16681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4785'. [ 346.628757][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.638854][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.654611][ T9] usb 1-1: config 0 descriptor?? [ 346.961098][ T5853] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 347.063910][ T9] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 347.113379][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4798'. [ 347.124679][T16707] netlink: 'syz.2.4798': attribute type 30 has an invalid length. [ 347.134796][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4798'. [ 347.143691][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 347.145283][ T5853] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 347.180226][ T5853] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.200736][ T5853] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.224633][ T5853] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 347.249881][T16712] o2cb: This node has not been configured. [ 347.255755][ T5853] usb 5-1: config 7 interface 0 has no altsetting 0 [ 347.255804][ T5853] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 347.255824][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.303204][T16712] o2cb: Cluster check failed. Fix errors before retrying. [ 347.310413][T16712] (syz.2.4800,16712,1):user_dlm_register:674 ERROR: status = -22 [ 347.345494][T16712] (syz.2.4800,16712,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 347.707767][ T5853] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.003A/input/input63 [ 347.788937][ T9] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 347.804969][ T5853] kye 0003:0458:5010.003A: input,hiddev1,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 347.947214][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 347.968324][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 347.981145][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 347.991238][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 348.000733][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 348.009635][ T9] usb 4-1: Product: syz [ 348.013933][ T9] usb 4-1: Manufacturer: syz [ 348.020843][ T9] usb 4-1: SerialNumber: syz [ 348.028434][ T9] usb 4-1: config 0 descriptor?? [ 348.039481][ T9] usb 4-1: selecting invalid altsetting 0 [ 348.176537][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 348.185624][T16734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4810'. [ 348.201790][T16734] geneve2: entered promiscuous mode [ 348.207040][T16734] geneve2: entered allmulticast mode [ 348.242248][T16725] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 348.252720][ T5853] usb 4-1: USB disconnect, device number 51 [ 348.394638][ T6323] usb 5-1: USB disconnect, device number 56 [ 348.579348][ T5853] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 348.635863][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 348.635875][ T30] audit: type=1400 audit(1766959235.565:725): avc: denied { read } for pid=16750 comm="syz.1.4818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 348.733499][ T5853] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.755547][ T5853] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 348.766760][ T5853] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 348.781271][ T5853] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.791097][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.801792][ T5853] usb 3-1: Product: syz [ 348.806024][ T5853] usb 3-1: Manufacturer: syz [ 348.811597][ T5853] usb 3-1: SerialNumber: syz [ 348.821184][ T5853] cdc_mbim 3-1:1.0: skipping garbage [ 348.826574][ T5853] cdc_mbim 3-1:1.0: skipping garbage [ 349.021788][T16738] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 349.037446][T16738] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 349.129827][ T5878] usb 1-1: USB disconnect, device number 64 [ 349.576674][T16774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16774 comm=syz.1.4829 [ 349.638263][T16738] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 349.645530][T16738] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 349.696964][ T5853] cdc_mbim 3-1:1.0: dwNtbInMaxSize=512 is too small. Using 2048 [ 349.737927][ T5853] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 349.890451][ T5853] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 349.920342][ T5853] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 349.951219][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4834'. [ 349.970521][ T5853] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 349.994129][ T5853] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 350.021382][ T5853] usb 3-1: USB disconnect, device number 50 [ 350.379558][T16810] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 350.693789][ T5853] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 350.764804][ T30] audit: type=1400 audit(1766959237.801:726): avc: denied { sys_module } for pid=16830 comm="syz.1.4856" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 350.884303][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 350.901102][ T5853] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.939020][ T5853] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.950479][ T5853] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.958074][ T5853] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 350.967359][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.986709][ T5853] usb 1-1: config 0 descriptor?? [ 351.024951][ T3719] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.178237][ T3719] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.272564][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.283507][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.292084][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.301387][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.310578][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.337166][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.348766][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.350635][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4861'. [ 351.367741][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.380583][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.388163][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.401034][T16818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.415220][T16818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.442923][ T3719] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.526826][ T5853] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 351.539532][T16842] hsr0: entered promiscuous mode [ 351.551241][ T5853] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 351.559928][T16847] hsr_slave_0: left promiscuous mode [ 351.578413][ T5853] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 351.590855][T16847] hsr_slave_1: left promiscuous mode [ 351.608662][ T5853] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 351.615626][ T5853] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 351.632825][ T5853] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 351.641744][T16847] hsr0 (unregistering): left promiscuous mode [ 351.649540][ T5853] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 351.661336][ T5853] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 351.674461][ T5853] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 351.704698][ T5853] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 351.734633][ T5853] cougar 0003:060B:500A.003B: unexpected long global item [ 351.755552][ T3719] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.761486][ T5853] cougar 0003:060B:500A.003B: parse failed [ 351.794777][ T5853] cougar 0003:060B:500A.003B: probe with driver cougar failed with error -22 [ 351.831594][ T5853] usb 1-1: USB disconnect, device number 65 [ 352.037074][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 352.104693][ T3719] bridge_slave_0: left allmulticast mode [ 352.111261][ T3719] bridge_slave_0: left promiscuous mode [ 352.128086][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4874'. [ 352.132099][ T3719] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.182718][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 352.206013][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.229056][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 352.250559][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 352.271481][ T9] usb 4-1: Manufacturer: syz [ 352.281054][ T9] usb 4-1: config 0 descriptor?? [ 352.353228][ T9] rc_core: IR keymap rc-hauppauge not found [ 352.359222][ T9] Registered IR keymap rc-empty [ 352.381173][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 352.401570][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input64 [ 352.436815][ T3719] erspan0 (unregistering): left promiscuous mode [ 352.483715][ T3719] gretap0 (unregistering): left promiscuous mode [ 352.516436][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 352.536472][ T5878] usb 4-1: USB disconnect, device number 52 [ 352.560600][ T9] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 352.724660][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.733090][ T9] usb 1-1: config 0 has no interface number 0 [ 352.739290][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 352.751974][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 352.762976][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 352.772127][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.784122][ T9] usb 1-1: config 0 descriptor?? [ 352.790151][T16882] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 352.801033][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 352.951555][ T3719] bond1 (unregistering): Released all slaves [ 352.993166][T16840] chnl_net:caif_netlink_parms(): no params data found [ 353.003337][ T9] usb 1-1: USB disconnect, device number 66 [ 353.351566][ T5821] Bluetooth: hci2: command tx timeout [ 353.358006][T16840] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.386775][T16840] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.401994][T16840] bridge_slave_0: entered allmulticast mode [ 353.419663][T16840] bridge_slave_0: entered promiscuous mode [ 353.506762][T16909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.522641][T16909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.564695][T16840] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.571976][T16840] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.579122][T16840] bridge_slave_1: entered allmulticast mode [ 353.587124][T16840] bridge_slave_1: entered promiscuous mode [ 353.664956][T16909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.676922][T16909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.752043][T16840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.764953][T16840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.805743][T16909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.816612][T16909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.826908][ T5878] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 353.901228][ T3719] hsr_slave_0: left promiscuous mode [ 353.907645][ T3719] hsr_slave_1: left promiscuous mode [ 353.921927][ T3719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.930327][ T3719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.939645][ T3719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.948304][ T3719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.988088][ T5878] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.993784][ T3719] veth1_macvtap: left promiscuous mode [ 354.008656][ T9] IPVS: starting estimator thread 0... [ 354.020922][ T3719] veth0_macvtap: left promiscuous mode [ 354.029425][ T5878] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.051542][ T5878] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 354.078044][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 354.094905][T16932] IPVS: using max 34 ests per chain, 81600 per kthread [ 354.098746][ T5878] usb 4-1: SerialNumber: syz [ 354.318881][ T5878] usb 4-1: 0:2 : does not exist [ 354.339532][ T5878] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 354.363332][ T5878] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 354.384233][ T5878] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 354.409017][ T5878] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 354.432009][ T5878] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 354.473851][ T5878] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 354.488485][ T5878] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 354.510562][ T5878] usb 4-1: USB disconnect, device number 53 [ 354.664602][ T3719] team0 (unregistering): Port device team_slave_1 removed [ 354.718457][ T3719] team0 (unregistering): Port device team_slave_0 removed [ 355.333697][ T5821] Bluetooth: hci2: command tx timeout [ 355.520640][T16909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.531721][T16909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.555172][T16840] team0: Port device team_slave_0 added [ 355.576846][T16840] team0: Port device team_slave_1 added [ 355.637119][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.672804][T16840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.689859][T16840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.724488][T16840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.754527][T16840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.767722][T16840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.806019][T16840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.899182][ T6163] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.913420][ T6163] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.982512][ T6163] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.004551][ T6163] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.086069][ T6324] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.096674][ T6324] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.125593][ T3719] IPVS: stop unused estimator thread 0... [ 356.166219][T16840] hsr_slave_0: entered promiscuous mode [ 356.190801][T16840] hsr_slave_1: entered promiscuous mode [ 356.197011][T16840] debugfs: 'hsr0' already exists in 'hsr' [ 356.229214][T16840] Cannot create hsr debugfs directory [ 356.242495][ T6163] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.261251][ T6163] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.628140][ T5878] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 356.649306][T16840] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 356.677143][T16840] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 356.702788][T16840] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 356.718698][T16840] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 356.781920][ T5878] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 356.800667][ T5878] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 356.827431][ T5878] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 356.864087][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.896199][T16997] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 356.928412][ T5878] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.022973][T16840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.030918][ T30] audit: type=1400 audit(1766959244.384:727): avc: denied { map } for pid=17022 comm="syz.3.4933" path="socket:[59900]" dev="sockfs" ino=59900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 357.078291][T16840] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.102127][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.109310][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.127064][ T6323] usb 3-1: USB disconnect, device number 51 [ 357.159992][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.167171][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.313596][ T5821] Bluetooth: hci2: command tx timeout [ 357.408649][ T30] audit: type=1400 audit(1766959244.772:728): avc: denied { watch } for pid=17043 comm="syz.3.4940" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 357.456021][ T30] audit: type=1400 audit(1766959244.814:729): avc: denied { watch_sb watch_reads } for pid=17043 comm="syz.3.4940" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 357.528120][T16840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.706683][ T30] audit: type=1400 audit(1766959245.087:730): avc: denied { mounton } for pid=17055 comm="syz.3.4944" path="/" dev="ramfs" ino=59346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 357.865193][T17063] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 358.057802][T16840] veth0_vlan: entered promiscuous mode [ 358.102177][T16840] veth1_vlan: entered promiscuous mode [ 358.301993][T16840] veth0_macvtap: entered promiscuous mode [ 358.346636][T16840] veth1_macvtap: entered promiscuous mode [ 358.403045][T16840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.435945][T16840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.451066][ T6163] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.469321][ T6163] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.506337][ T6163] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.535778][ T6163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.689756][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.703201][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.905215][ T6163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.914486][ T6163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.954814][ T30] audit: type=1400 audit(1766959246.400:731): avc: denied { mounton } for pid=16840 comm="syz-executor" path="/root/syzkaller.rFKrVI/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 359.044026][ T30] audit: type=1400 audit(1766959246.442:732): avc: denied { mounton } for pid=16840 comm="syz-executor" path="/root/syzkaller.rFKrVI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 359.101522][ T30] audit: type=1400 audit(1766959246.442:733): avc: denied { mounton } for pid=16840 comm="syz-executor" path="/root/syzkaller.rFKrVI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=60122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 359.174376][ T30] audit: type=1400 audit(1766959246.463:734): avc: denied { mounton } for pid=16840 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 359.296957][ T5821] Bluetooth: hci2: command tx timeout [ 359.472834][T17128] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.4971'. [ 359.904064][ T6323] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 360.067376][ T6323] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 360.084736][ T6323] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 360.111004][ T6323] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 360.125656][ T6323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.143760][ T6323] usb 6-1: Product: syz [ 360.154647][ T6323] usb 6-1: Manufacturer: syz [ 360.163092][ T6323] usb 6-1: SerialNumber: syz [ 360.176048][ T6323] usb 6-1: config 0 descriptor?? [ 360.186069][T17140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 360.193827][T17140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 360.258736][T17169] sp0: Synchronizing with TNC [ 360.457871][T17140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 360.485728][T17140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 360.629054][ T30] audit: type=1400 audit(1766959504.166:735): avc: denied { name_bind 0x1000000 } for pid=17173 comm="syz.2.4991" path="socket:[60917]" dev="sockfs" ino=60917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 361.294254][ T6323] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 361.343071][ T6323] dm9601 6-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, a2:79:44:f4:fd:5c [ 361.343822][ T30] audit: type=1326 audit(1766959504.911:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.2.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c078f749 code=0x7fc00000 [ 361.365885][ T6323] usb 6-1: USB disconnect, device number 2 [ 361.392202][ T6323] dm9601 6-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 361.943134][ T30] audit: type=1326 audit(1766959505.541:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.2.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67c072b829 code=0x7fc00000 [ 362.286910][ T30] audit: type=1326 audit(1766959505.898:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.5.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398f749 code=0x7ffc0000 [ 362.376873][ T30] audit: type=1326 audit(1766959505.930:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.5.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398f749 code=0x7ffc0000 [ 362.434324][ T30] audit: type=1326 audit(1766959505.930:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.5.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f738398f749 code=0x7ffc0000 [ 362.523321][ T30] audit: type=1326 audit(1766959505.930:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.5.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398f749 code=0x7ffc0000 [ 362.586853][ T30] audit: type=1326 audit(1766959505.961:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.5.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f738398f749 code=0x7ffc0000 [ 362.638061][ T30] audit: type=1326 audit(1766959505.961:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.5.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398f749 code=0x7ffc0000 [ 362.687411][ T30] audit: type=1326 audit(1766959505.961:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.5.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398f749 code=0x7ffc0000 [ 362.756027][ T30] audit: type=1326 audit(1766959505.961:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.5.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f738398f749 code=0x7ffc0000 [ 362.806854][ T30] audit: type=1326 audit(1766959505.961:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.5.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398f749 code=0x7ffc0000 [ 362.848123][ T5810] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 363.035374][ T5810] usb 6-1: Using ep0 maxpacket: 32 [ 363.076424][ T5810] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 363.085113][ T5810] usb 6-1: config 0 has no interface number 0 [ 363.110269][ T5810] usb 6-1: config 0 interface 29 has no altsetting 0 [ 363.134745][ T5810] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 363.148937][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.181270][ T5810] usb 6-1: Product: syz [ 363.185494][ T5810] usb 6-1: Manufacturer: syz [ 363.190081][ T5810] usb 6-1: SerialNumber: syz [ 363.224414][ T5810] usb 6-1: config 0 descriptor?? [ 363.458161][ T5810] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 363.573482][ C1] hrtimer: interrupt took 11441 ns [ 363.628595][ T5853] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 363.649189][ T5810] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 363.656087][ T5810] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 363.696121][ T5810] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 363.755954][ T5810] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -22 [ 363.773425][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 363.807388][ T5853] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 363.832361][ T5853] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.857539][ T5853] usb 1-1: config 0 has no interface number 0 [ 363.865837][ T9] usb 6-1: USB disconnect, device number 3 [ 363.876304][ T5853] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 363.924115][ T5853] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 363.942684][ T5853] usb 1-1: config 0 interface 98 has no altsetting 0 [ 363.989927][ T5853] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 364.016315][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.033901][ T5853] usb 1-1: Product: syz [ 364.044448][ T5853] usb 1-1: Manufacturer: syz [ 364.055088][ T5853] usb 1-1: SerialNumber: syz [ 364.066572][ T5853] usb 1-1: config 0 descriptor?? [ 364.082881][T17264] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 364.091903][T17264] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 364.319083][T17264] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 364.319990][T17292] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.5045'. [ 364.335763][T17264] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 364.430536][ T5863] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 364.590956][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 364.597635][ T5863] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 364.619062][ T5863] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.634749][ T5863] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.648487][ T5863] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.657946][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.665944][ T5863] usb 4-1: Product: syz [ 364.670931][ T5863] usb 4-1: Manufacturer: syz [ 364.675535][ T5863] usb 4-1: SerialNumber: syz [ 364.703569][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5051'. [ 364.809758][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 364.964471][ T9] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 364.995210][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 365.020641][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.029001][ T9] usb 6-1: Product: syz [ 365.033294][ T9] usb 6-1: Manufacturer: syz [ 365.038186][ T9] usb 6-1: SerialNumber: syz [ 365.045469][T17323] 9p: Bad value for 'rfdno' [ 365.093172][ T5863] usb 4-1: 0:2 : does not exist [ 365.120701][ T5853] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 365.142956][ T5853] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 365.169433][ T5853] asix 1-1:0.98: probe with driver asix failed with error -71 [ 365.184780][ T5853] usb 1-1: USB disconnect, device number 67 [ 365.257726][ T5821] Bluetooth: hci2: Unknown advertising packet type: 0x1e [ 365.257801][ T5821] Bluetooth: hci2: Malformed LE Event: 0x0d [ 365.291016][ T9] as10x_usb: device has been detected [ 365.297328][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 365.318008][ T9] usb 6-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 365.358220][ T9] as10x_usb: error during firmware upload part1 [ 365.365360][ T9] Registered device Elgato EyeTV DTT Deluxe [ 365.367681][ T9] usb 6-1: USB disconnect, device number 4 [ 365.401322][ T9] Unregistered device Elgato EyeTV DTT Deluxe [ 365.411618][ T9] as10x_usb: device has been disconnected [ 365.677700][ T5863] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 365.716007][ T5863] usb 4-1: USB disconnect, device number 54 [ 366.400809][ T5853] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 366.562890][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 366.569410][ T5853] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 366.613376][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.630317][ T5853] usb 1-1: config 0 descriptor?? [ 366.844664][ T5853] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 366.854485][ T5853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.874498][ T5853] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 366.893595][ T5853] usb 1-1: media controller created [ 366.927891][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.059451][ T5853] DVB: Unable to find symbol dib7000p_attach() [ 367.083520][ T5853] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 367.093515][T17393] sock: sock_set_timeout: `syz.3.5089' (pid 17393) tries to set negative timeout [ 367.210278][ T5853] rc_core: IR keymap rc-dib0700-rc5 not found [ 367.216410][ T5853] Registered IR keymap rc-empty [ 367.227653][ T5853] dvb-usb: could not initialize remote control. [ 367.240907][ T5853] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 367.298511][ T5853] usb 1-1: USB disconnect, device number 68 [ 367.323285][ T5853] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 367.512995][T17410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5094'. [ 368.002791][T17414] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x3f9d pfn:0x4ec67 [ 368.045577][T17414] memcg:ffff888033c98d40 [ 368.077213][T17414] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 368.084973][T17414] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 368.094746][ T5863] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 368.115142][T17414] raw: 0000000000003f9d 0000000000000000 00000001ffffffff ffff888033c98d40 [ 368.172990][T17414] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 368.220361][T17414] page_owner tracks the page as allocated [ 368.227092][T17414] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 17414, tgid 17411 (syz.2.5096), ts 368002753409, free_ts 367996851370 [ 368.267668][T17414] post_alloc_hook+0x1af/0x220 [ 368.282619][T17414] get_page_from_freelist+0xd0b/0x31a0 [ 368.291971][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0 [ 368.305926][ T5863] usb 4-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 368.314992][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.321155][T17414] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 368.339666][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 368.339681][ T30] audit: type=1400 audit(1766959512.250:765): avc: denied { mounton } for pid=17435 comm="syz.5.5108" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 368.374463][ T5863] usb 4-1: config 0 descriptor?? [ 368.397013][T17414] alloc_pages_mpol+0x1fb/0x550 [ 368.413412][T17414] folio_alloc_noprof+0x20/0x2d0 [ 368.429458][T17414] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 368.437213][T17414] filemap_alloc_folio_noprof+0x5e/0x80 [ 368.463725][T17414] page_cache_ra_order+0x571/0xed0 [ 368.473569][T17414] filemap_fault+0x16ac/0x29d0 [ 368.483340][T17414] __do_fault+0x10d/0x490 [ 368.490023][T17414] do_fault+0xae4/0x1ad0 [ 368.494317][T17414] __handle_mm_fault+0x1919/0x2bb0 [ 368.518799][T17414] handle_mm_fault+0x3fe/0xad0 [ 368.523615][T17414] __get_user_pages+0x54e/0x3590 [ 368.535444][T17414] populate_vma_page_range+0x267/0x3f0 [ 368.540948][T17414] __mm_populate+0x1d8/0x380 [ 368.541892][T17448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5111'. [ 368.547118][T17414] page last free pid 17412 tgid 17411 stack trace: [ 368.562474][T17414] free_unref_folios+0xa22/0x1610 [ 368.567632][T17414] folios_put_refs+0x4be/0x750 [ 368.577081][T17414] truncate_inode_pages_range+0x326/0xe40 [ 368.583066][T17414] set_blocksize+0x2b8/0x500 [ 368.587737][T17414] blkdev_bszset+0x19b/0x240 [ 368.594137][T17414] blkdev_ioctl+0x2ef/0x6e0 [ 368.598789][T17414] __x64_sys_ioctl+0x18e/0x210 [ 368.603772][T17414] do_syscall_64+0xcd/0xf80 [ 368.608401][T17414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.614648][T17414] ------------[ cut here ]------------ [ 368.620649][T17414] kernel BUG at mm/filemap.c:858! [ 368.632638][T17450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 368.661156][T17450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.669468][T17414] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 368.675909][T17414] CPU: 1 UID: 0 PID: 17414 Comm: syz.2.5096 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.686853][T17414] Tainted: [L]=SOFTLOCKUP [ 368.691172][T17414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.701231][T17414] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 368.707221][T17414] Code: 97 c6 ff 48 c7 c6 80 ed 99 8b 4c 89 ef e8 0f 74 11 00 90 0f 0b e8 07 97 c6 ff 48 c7 c6 e0 ed 99 8b 4c 89 ef e8 f8 73 11 00 90 <0f> 0b e8 f0 96 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 e2 96 c6 ff 48 [ 368.726838][T17414] RSP: 0018:ffffc90000be7490 EFLAGS: 00010246 [ 368.732915][T17414] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000d5b9000 [ 368.740888][T17414] RDX: 0000000000080000 RSI: ffffffff81f84fc8 RDI: ffff88805679ce04 [ 368.748852][T17414] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000001 [ 368.756812][T17414] R10: ffffffff9088b4d7 R11: 0000000000000000 R12: 0000000000000004 [ 368.764772][T17414] R13: ffffea00013b19c0 R14: 0000000000000000 R15: 0000000000000000 [ 368.772722][T17414] FS: 00007f67c15406c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 368.781634][T17414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.788201][T17414] CR2: 00007f712aff4fe0 CR3: 00000000423b1000 CR4: 00000000003526f0 [ 368.796150][T17414] Call Trace: [ 368.799408][T17414] [ 368.802318][T17414] ? __pfx___filemap_add_folio+0x10/0x10 [ 368.807938][T17414] filemap_add_folio+0x19a/0x610 [ 368.812853][T17414] ? __lock_acquire+0x436/0x2890 [ 368.817769][T17414] ? __pfx_filemap_add_folio+0x10/0x10 [ 368.823200][T17414] ? __pfx_filemap_get_entry+0x10/0x10 [ 368.828643][T17414] page_cache_ra_order+0x637/0xed0 [ 368.833745][T17414] filemap_fault+0x16ac/0x29d0 [ 368.838497][T17414] ? __pfx_filemap_fault+0x10/0x10 [ 368.843593][T17414] ? __pfx_filemap_map_pages+0x10/0x10 [ 368.849029][T17414] __do_fault+0x10d/0x490 [ 368.853337][T17414] ? __pfx_filemap_map_pages+0x10/0x10 [ 368.858774][T17414] do_fault+0xae4/0x1ad0 [ 368.862997][T17414] ? __pfx_filemap_map_pages+0x10/0x10 [ 368.868434][T17414] __handle_mm_fault+0x1919/0x2bb0 [ 368.873531][T17414] ? __pfx___handle_mm_fault+0x10/0x10 [ 368.878987][T17414] handle_mm_fault+0x3fe/0xad0 [ 368.883739][T17414] __get_user_pages+0x54e/0x3590 [ 368.888662][T17414] ? __pfx___get_user_pages+0x10/0x10 [ 368.894017][T17414] populate_vma_page_range+0x267/0x3f0 [ 368.899461][T17414] ? __pfx_populate_vma_page_range+0x10/0x10 [ 368.905426][T17414] ? __pfx_find_vma_intersection+0x10/0x10 [ 368.911210][T17414] ? do_mmap+0x69c/0x1210 [ 368.915521][T17414] __mm_populate+0x1d8/0x380 [ 368.920098][T17414] ? __pfx___mm_populate+0x10/0x10 [ 368.925189][T17414] ? up_write+0x282/0x4e0 [ 368.929501][T17414] vm_mmap_pgoff+0x37f/0x470 [ 368.934073][T17414] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 368.939167][T17414] ? __fget_files+0x20e/0x3c0 [ 368.943833][T17414] ksys_mmap_pgoff+0x32c/0x5c0 [ 368.948589][T17414] __x64_sys_mmap+0x125/0x190 [ 368.953250][T17414] do_syscall_64+0xcd/0xf80 [ 368.957739][T17414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.963609][T17414] RIP: 0033:0x7f67c078f749 [ 368.968005][T17414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.987595][T17414] RSP: 002b:00007f67c1540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 368.995991][T17414] RAX: ffffffffffffffda RBX: 00007f67c09e6090 RCX: 00007f67c078f749 [ 369.003941][T17414] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 369.011891][T17414] RBP: 00007f67c0813f91 R08: 0000000000000004 R09: 000000002c93a000 [ 369.019842][T17414] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 369.027789][T17414] R13: 00007f67c09e6128 R14: 00007f67c09e6090 R15: 00007fffbfe6bba8 [ 369.035759][T17414] [ 369.038771][T17414] Modules linked in: [ 369.043430][T17414] ---[ end trace 0000000000000000 ]--- [ 369.044088][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5113'. [ 369.077204][T17414] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 369.083225][T17414] Code: 97 c6 ff 48 c7 c6 80 ed 99 8b 4c 89 ef e8 0f 74 11 00 90 0f 0b e8 07 97 c6 ff 48 c7 c6 e0 ed 99 8b 4c 89 ef e8 f8 73 11 00 90 <0f> 0b e8 f0 96 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 e2 96 c6 ff 48 [ 369.114140][T17414] RSP: 0018:ffffc90000be7490 EFLAGS: 00010246 [ 369.140553][T17414] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000d5b9000 [ 369.166411][T17414] RDX: 0000000000080000 RSI: ffffffff81f84fc8 RDI: ffff88805679ce04 [ 369.229218][T17414] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000001 [ 369.245656][T17414] R10: ffffffff9088b4d7 R11: 0000000000000000 R12: 0000000000000004 [ 369.253835][T17414] R13: ffffea00013b19c0 R14: 0000000000000000 R15: 0000000000000000 [ 369.261979][T17414] FS: 00007f67c15406c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 369.270988][T17414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.277736][T17414] CR2: 000056323dc36ad8 CR3: 00000000423b1000 CR4: 00000000003526f0 [ 369.285722][T17414] Kernel panic - not syncing: Fatal exception [ 369.292075][T17414] Kernel Offset: disabled [ 369.296387][T17414] Rebooting in 86400 seconds..