last executing test programs: 3m51.843690012s ago: executing program 1 (id=721): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0xe80, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m51.746207879s ago: executing program 1 (id=722): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) 3m51.72024053s ago: executing program 1 (id=723): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x800000008ec0, 0xa) 3m51.67939993s ago: executing program 1 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 3m51.636170279s ago: executing program 1 (id=726): socket(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3m51.382832596s ago: executing program 1 (id=729): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x800000, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 3m51.200172542s ago: executing program 32 (id=729): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x800000, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 3m16.953166048s ago: executing program 5 (id=1384): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000005c0)="189772000048f5c56a5feb00000000000bd87cc6fccdb76ba3017951b33b9a5aa5c288afd7879a4c5b00000000000000701837f5a54e5335a198cb440357000000000000000000762292815dba921d54f64ed2b5c8bb0dfc9f510551896b228f2f84bd6962065d6e04be2024847c640cc32519c782d657480de600483a511be72ff072278fb042f464632e8e487ead0ffc6f235369f8597efab686aa4776bf4a5eb34b8e57a1f085b81c3ee3ecea67e716621e7d42cc83f5fc9bd6ba5339be7ff9337ef9d04484af4ab8864b8259c90ce2bff28975f35a56a6ff08f3ff08ff815100a6f2e84f091661fe7ba7fb358182e135854a65577e93974d86e9e424d850cfc80351e5732a6793d420a54cbeea9873ffccdf8c7661fc7ba0234a2b0b4e6c597e915fce82431f04f56b30120529eb257c61df7d86", 0x136}, {&(0x7f0000000100)="4e3fec52e926e37b", 0x8}, {&(0x7f0000001600)="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", 0x49f}], 0x3}}], 0x1, 0x0) 3m16.746113009s ago: executing program 5 (id=1391): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) 3m16.511960844s ago: executing program 5 (id=1396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d4}, 0x4000800) 3m16.341639596s ago: executing program 5 (id=1400): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 3m16.095154831s ago: executing program 5 (id=1405): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000500)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x1, 0x2, 0x1000}) 3m15.784509733s ago: executing program 5 (id=1412): r0 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5}, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) 3m15.487907915s ago: executing program 33 (id=1412): r0 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5}, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) 2.319025529s ago: executing program 3 (id=5159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001600)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) 2.203221199s ago: executing program 3 (id=5163): r0 = socket(0x1e, 0x4, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0)=0x80000001, 0x4) 2.133517278s ago: executing program 3 (id=5166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x54}, {0x8, 0x6}}}, 0x24}}, 0x0) 1.961002304s ago: executing program 2 (id=5167): r0 = io_uring_setup(0x2ef1, &(0x7f0000000180)={0x0, 0x5712, 0x80, 0x5, 0x1}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r0, r1, 0x0) 1.960852646s ago: executing program 3 (id=5168): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.858875234s ago: executing program 3 (id=5169): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2, 0xfffffffb}, 0x8) 1.77529776s ago: executing program 2 (id=5170): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r1}, 0x10) 1.71333633s ago: executing program 2 (id=5171): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000380)={0x2000000, 0x0, 0xfeff, 0x18e3, 0x200000001, 0x0, 0xfffffffffffffffe, 0x3, 0xf}) 1.666270661s ago: executing program 2 (id=5172): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x8}) 1.604127357s ago: executing program 2 (id=5173): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 1.550268196s ago: executing program 2 (id=5175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 1.268436285s ago: executing program 0 (id=5185): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.23278776s ago: executing program 4 (id=5186): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1.104573092s ago: executing program 4 (id=5189): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="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", 0x10a}], 0x1, &(0x7f0000000340)=[@op={0x18}, @iv={0x3a, 0x117, 0x2, 0xae, "534130c9f0b463172a222ef750eb99092e3f08b55660313eb57bafa3f9228c1b7d2f3d390be5ced77c93e978bccea59b74d72a205099da0fe35f2909f9f1f5dc390b40fac8b0022af9447ac9708e1dbb8c3317d2e5933e14bfa4646e70a971572532c01a0116f6f36e27929a4761951f0094d865a76e575a7ea145e63d69afb26d877cdc0dc87bdfb50876a875e6f9ef48ebd29893940efba1b48eef0ed98795d37834acd0688c6cb84173c98a91"}], 0xe0, 0x24000810}], 0x1, 0x0) 1.042766011s ago: executing program 4 (id=5191): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="dce65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x80}}}}}}}}, 0x0) 1.036914558s ago: executing program 6 (id=5192): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa050102}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) 974.584128ms ago: executing program 4 (id=5193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sigaltstack(&(0x7f0000000080)={0x0}, 0x0) 964.278525ms ago: executing program 3 (id=5194): unshare(0x40020080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0x4) 963.993222ms ago: executing program 6 (id=5195): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 892.973442ms ago: executing program 4 (id=5196): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 856.679118ms ago: executing program 6 (id=5197): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) 739.30104ms ago: executing program 0 (id=5198): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000ff000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a"], 0xb0}}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 620.700316ms ago: executing program 6 (id=5199): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000394000/0x3000)=nil, 0x3000}, 0x1}) 509.600953ms ago: executing program 0 (id=5200): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket(0x11, 0x3, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 393.5751ms ago: executing program 0 (id=5201): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r2, 0x6, 0xffbc}, 0x8) 216.601652ms ago: executing program 0 (id=5202): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000200)={r2}) 211.390302ms ago: executing program 6 (id=5203): r0 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 122.503389ms ago: executing program 6 (id=5204): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000380)) 70.672376ms ago: executing program 0 (id=5205): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x4, 0x5, 0x0, 0x2, 0x0, 0x1000}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 0s ago: executing program 4 (id=5206): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) kernel console output (not intermixed with test programs): 203524][ T30] audit: type=1400 audit(1752108943.370:1007): avc: denied { accept } for pid=14158 comm="syz.3.3663" path=00001F4E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 262.211224][ T5912] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 262.249940][ T5843] em28xx 1-1:0.0: Binding DVB extension [ 262.264199][T13074] usb 1-1: USB disconnect, device number 40 [ 262.275230][T13074] em28xx 1-1:0.0: Disconnecting em28xx [ 262.300061][ T5912] cdc_wdm 3-1:1.0: Unknown control protocol [ 262.317428][ T5843] em28xx 1-1:0.0: Registering input extension [ 262.332489][T13074] em28xx 1-1:0.0: Closing input extension [ 262.362271][T13074] em28xx 1-1:0.0: Freeing device [ 262.459471][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 262.459788][ T5843] usb 7-1: USB disconnect, device number 16 [ 262.479415][ T5843] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 262.493849][ T5843] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 262.505809][ T5843] quatech2 7-1:0.51: device disconnected [ 262.599280][T14177] dvmrp1: tun_chr_ioctl cmd 1074025676 [ 262.606587][T14177] dvmrp1: owner set to 0 [ 262.641614][ T30] audit: type=1400 audit(1752108943.810:1008): avc: denied { read write } for pid=14178 comm="syz.0.3672" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 262.667854][T13074] usb 3-1: USB disconnect, device number 36 [ 262.676561][ T30] audit: type=1400 audit(1752108943.810:1009): avc: denied { open } for pid=14178 comm="syz.0.3672" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 262.850046][ T5843] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 263.000123][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 263.006494][ T5843] usb 5-1: config index 0 descriptor too short (expected 6683, got 27) [ 263.014789][ T5843] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 263.020161][T12815] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 263.022913][ T5843] usb 5-1: config 0 has no interface number 0 [ 263.036532][ T5843] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.047718][ T5843] usb 5-1: config 0 interface 85 has no altsetting 0 [ 263.050034][ T973] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 263.067838][ T5843] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 263.083765][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.093922][ T5843] usb 5-1: Product: syz [ 263.098131][ T5843] usb 5-1: Manufacturer: syz [ 263.110007][ T5843] usb 5-1: SerialNumber: syz [ 263.116682][ T5843] usb 5-1: config 0 descriptor?? [ 263.136693][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3678'. [ 263.210184][T12815] usb 1-1: Using ep0 maxpacket: 16 [ 263.215358][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 263.225647][T12815] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 263.248164][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.263761][T12815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 263.280167][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.300211][ T973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.313685][ T973] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 263.330312][T12815] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 263.339770][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.347995][T12815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.357505][T12815] usb 1-1: Product: syz [ 263.362406][ T973] usb 4-1: config 0 descriptor?? [ 263.367495][T12815] usb 1-1: Manufacturer: syz [ 263.372423][T12815] usb 1-1: SerialNumber: syz [ 263.384887][T12815] usb 1-1: config 0 descriptor?? [ 263.392999][T12815] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 263.405223][T12815] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 263.709508][T14210] mkiss: ax0: crc mode is auto. [ 263.744095][ T5843] appletouch 5-1:0.85: Geyser mode initialized. [ 263.753039][ T5843] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input48 [ 263.804472][ T973] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002C/input/input49 [ 263.885916][ T973] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 263.971359][ T5843] usb 5-1: USB disconnect, device number 36 [ 263.983520][ T5843] appletouch 5-1:0.85: input: appletouch disconnected [ 263.999228][T12815] em28xx 1-1:0.0: chip ID is em2874 [ 264.020251][T13074] usb 4-1: USB disconnect, device number 34 [ 264.236378][T13074] usb 1-1: USB disconnect, device number 41 [ 264.249426][T13074] em28xx 1-1:0.0: Disconnecting em28xx [ 264.258941][T13074] em28xx 1-1:0.0: Freeing device [ 264.266242][ T30] audit: type=1400 audit(1752108945.430:1010): avc: denied { append } for pid=14219 comm="syz.2.3691" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 264.618577][ T30] audit: type=1400 audit(1752108945.780:1011): avc: denied { read } for pid=14235 comm="syz.3.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 264.670048][ T5843] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 264.842847][ T5843] usb 3-1: unable to get BOS descriptor or descriptor too short [ 264.880598][ T5843] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 264.895842][ T5843] usb 3-1: config 6 has no interface number 0 [ 264.921481][ T5843] usb 3-1: config 6 interface 200 has no altsetting 0 [ 264.932227][ T5843] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 264.946258][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.962483][ T5843] usb 3-1: Product: syz [ 264.969660][ T5843] usb 3-1: Manufacturer: syz [ 264.988958][ T5843] usb 3-1: SerialNumber: syz [ 265.198342][T14262] vlan0: entered promiscuous mode [ 265.210214][T14262] bridge0: entered promiscuous mode [ 265.215582][T14262] vlan0: entered allmulticast mode [ 265.226134][T14262] bridge0: entered allmulticast mode [ 265.431225][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.445621][ T5843] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 265.570151][ T973] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 265.647222][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.657911][ T5843] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 265.666293][ T5843] usb 3-1: media controller created [ 265.695120][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.730225][ T973] usb 5-1: Using ep0 maxpacket: 8 [ 265.740915][ T973] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 265.749175][ T973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.770035][ T973] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.801068][ T973] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 265.810279][ T973] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 265.818358][ T973] usb 5-1: Product: syz [ 265.830287][ T973] usb 5-1: Manufacturer: syz [ 265.840807][ T973] usb 5-1: config 0 descriptor?? [ 265.846589][ T5843] dvb-usb: bulk message failed: -71 (6/0) [ 265.866218][ T5843] dvb-usb: bulk message failed: -71 (6/0) [ 265.882443][ T5843] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 265.904368][ T5843] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input50 [ 265.923056][ T5843] dvb-usb: schedule remote query interval to 150 msecs. [ 265.932612][ T5843] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 265.944768][ T5843] usb 3-1: USB disconnect, device number 37 [ 265.997619][ T5843] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 266.075259][ T973] usb 5-1: USB disconnect, device number 37 [ 266.262553][T14309] netlink: 'syz.3.3733': attribute type 1 has an invalid length. [ 266.273842][T14309] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3733'. [ 266.283145][T14309] netlink: 'syz.3.3733': attribute type 1 has an invalid length. [ 266.460071][T12815] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 266.559148][T14331] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3740'. [ 266.620192][T12815] usb 1-1: Using ep0 maxpacket: 32 [ 266.643973][T12815] usb 1-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 266.666761][T12815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.680219][T12815] usb 1-1: Product: syz [ 266.684397][T12815] usb 1-1: Manufacturer: syz [ 266.693599][T12815] usb 1-1: SerialNumber: syz [ 266.703554][T12815] usb 1-1: config 0 descriptor?? [ 266.711879][T12815] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 266.807334][ T30] audit: type=1400 audit(1752108947.970:1012): avc: denied { write } for pid=14344 comm="syz.3.3749" path="socket:[46254]" dev="sockfs" ino=46254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 266.940144][ T973] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 267.101593][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 267.120061][ T973] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 267.140135][ T30] audit: type=1400 audit(1752108948.300:1013): avc: denied { read } for pid=14365 comm="syz.3.3757" path="socket:[47109]" dev="sockfs" ino=47109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 267.175063][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 267.198977][ T973] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 267.213426][ T973] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 267.232497][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.248173][ T973] usb 5-1: Product: syz [ 267.257463][ T973] usb 5-1: Manufacturer: syz [ 267.267739][ T973] usb 5-1: SerialNumber: syz [ 267.283493][ T973] usb 5-1: config 0 descriptor?? [ 267.294311][ T973] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 267.568616][T12815] gspca_sunplus: reg_w_riv err -71 [ 267.573905][T12815] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 267.596752][T12815] usb 1-1: USB disconnect, device number 42 [ 267.778516][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 267.809257][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3766'. [ 267.812162][ T973] scsi host1: usb-storage 5-1:0.0 [ 267.829225][ T973] usb 5-1: USB disconnect, device number 38 [ 268.430087][ T973] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 268.547809][ T5843] IPVS: starting estimator thread 0... [ 268.621251][ T973] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 268.629452][ T973] usb 3-1: config 0 has no interface number 0 [ 268.643255][ T973] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 268.654117][T14429] IPVS: using max 43 ests per chain, 103200 per kthread [ 268.670057][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.690028][ T973] usb 3-1: Product: syz [ 268.694202][ T973] usb 3-1: Manufacturer: syz [ 268.698796][ T973] usb 3-1: SerialNumber: syz [ 268.706603][ T973] usb 3-1: config 0 descriptor?? [ 268.827350][T14441] netlink: 'syz.4.3789': attribute type 1 has an invalid length. [ 268.938660][ T973] usb 3-1: probing VID:PID(2201:012C) [ 268.948084][ T973] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 268.969326][ T973] vub300 3-1:0.239: probe with driver vub300 failed with error -22 [ 268.983600][ T973] usb 3-1: USB disconnect, device number 38 [ 269.213221][ T30] audit: type=1400 audit(1752108950.370:1014): avc: denied { ioctl } for pid=14457 comm="syz.4.3797" path="socket:[46677]" dev="sockfs" ino=46677 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.346151][T14464] kvm: kvm [14463]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 269.640186][T13074] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 269.788164][T14489] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 269.808767][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.823925][T13074] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.843393][T13074] usb 1-1: config 0 interface 0 has no altsetting 0 [ 269.851230][T13074] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 269.862491][T13074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.873542][T13074] usb 1-1: config 0 descriptor?? [ 269.938161][T14498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.140316][ T5843] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 270.291203][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 270.305767][T13074] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.002D/input/input51 [ 270.318997][ T5843] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 270.327391][ T5843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.345187][T13074] sony 0003:054C:03D5.002D: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 270.357032][ T5843] usb 5-1: config 0 has no interface number 0 [ 270.372412][ T5843] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 270.384225][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.392783][ T5843] usb 5-1: Product: syz [ 270.400061][ T5843] usb 5-1: Manufacturer: syz [ 270.410031][ T5843] usb 5-1: SerialNumber: syz [ 270.416996][ T5843] usb 5-1: config 0 descriptor?? [ 270.529337][ T5950] usb 1-1: USB disconnect, device number 43 [ 270.630447][ T5843] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 270.640685][ T5843] usb 5-1: No valid video chain found. [ 270.702817][ T30] audit: type=1400 audit(1752108951.870:1015): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 270.803316][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.813320][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.826004][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.844056][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.851654][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.872751][ T30] audit: type=1400 audit(1752108952.040:1016): avc: denied { mounton } for pid=14524 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 270.878394][ T5950] usb 5-1: USB disconnect, device number 39 [ 270.894288][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.014859][T14534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.319647][T14552] binder: 14551:14552 ioctl c018620c 200000000000 returned -22 [ 271.320059][ T30] audit: type=1400 audit(1752108952.480:1017): avc: denied { set_context_mgr } for pid=14551 comm="syz.2.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 271.386756][T14524] chnl_net:caif_netlink_parms(): no params data found [ 271.527364][T14524] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.537995][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.547379][T14524] bridge_slave_0: entered allmulticast mode [ 271.556194][T14524] bridge_slave_0: entered promiscuous mode [ 271.565408][T14524] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.574123][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.583257][T14524] bridge_slave_1: entered allmulticast mode [ 271.591096][T14524] bridge_slave_1: entered promiscuous mode [ 271.632853][T14524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.652790][T14524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.723160][T14524] team0: Port device team_slave_0 added [ 271.731731][T14524] team0: Port device team_slave_1 added [ 271.801231][T14524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.808222][T14524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.866736][T14524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.878708][T14524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.889275][T14524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.915161][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.927656][T14524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.999342][T14524] hsr_slave_0: entered promiscuous mode [ 272.007856][T14524] hsr_slave_1: entered promiscuous mode [ 272.014063][T14524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.021716][T14524] Cannot create hsr debugfs directory [ 272.532442][T14608] netlink: 'syz.0.3866': attribute type 1 has an invalid length. [ 272.550283][T14608] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3866'. [ 272.755482][T14524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.779801][T14524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.821997][T14524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.844502][T14524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.938591][T14634] tun0: tun_chr_ioctl cmd 1074025678 [ 272.950213][ T5834] Bluetooth: hci2: command tx timeout [ 272.968010][T14634] tun0: group set to 0 [ 273.106946][T14524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.140251][T14524] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.175688][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.182864][ T8499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.201184][T14644] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3880'. [ 273.242711][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.249828][ T8485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.469801][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3884'. [ 273.499447][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3884'. [ 273.621987][T14524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.707009][T14524] veth0_vlan: entered promiscuous mode [ 273.731095][T14524] veth1_vlan: entered promiscuous mode [ 273.781995][T14524] veth0_macvtap: entered promiscuous mode [ 273.802997][T14524] veth1_macvtap: entered promiscuous mode [ 273.823105][T14524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.843259][T14524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.880255][T14524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.917108][T14524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.943064][T14524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.967076][T14524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.033718][T14672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3888'. [ 274.155843][T14678] netlink: 'syz.2.3893': attribute type 21 has an invalid length. [ 274.194484][T14678] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3893'. [ 274.206458][T14680] netlink: 'syz.2.3893': attribute type 21 has an invalid length. [ 274.226780][ T8485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.235557][T14680] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3893'. [ 274.254649][ T8485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.335354][ T8485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.337955][T14686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3896'. [ 274.344359][ T8485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.395584][ T30] audit: type=1400 audit(1752108955.560:1018): avc: denied { mounton } for pid=14524 comm="syz-executor" path="/root/syzkaller.RbcgAG/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 274.420548][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 274.439134][ T30] audit: type=1400 audit(1752108955.600:1019): avc: denied { mount } for pid=14524 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 274.467296][ T30] audit: type=1400 audit(1752108955.600:1020): avc: denied { mounton } for pid=14524 comm="syz-executor" path="/root/syzkaller.RbcgAG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 274.520228][ T30] audit: type=1400 audit(1752108955.600:1021): avc: denied { mounton } for pid=14524 comm="syz-executor" path="/root/syzkaller.RbcgAG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=49242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 274.560040][T13074] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 274.584384][ T30] audit: type=1400 audit(1752108955.600:1022): avc: denied { unmount } for pid=14524 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 274.621226][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 274.622241][T14696] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 274.643941][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 274.653895][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.669124][ T30] audit: type=1400 audit(1752108955.630:1023): avc: denied { mounton } for pid=14524 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 274.698711][ T30] audit: type=1400 audit(1752108955.630:1024): avc: denied { mounton } for pid=14524 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 274.740814][ T10] usb 1-1: config 0 descriptor?? [ 274.750840][T13074] usb 5-1: Using ep0 maxpacket: 32 [ 274.763262][T13074] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 274.794385][T13074] usb 5-1: config 0 has no interface number 0 [ 274.826686][T13074] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 274.852505][T13074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.875129][T13074] usb 5-1: Product: syz [ 274.886539][T13074] usb 5-1: Manufacturer: syz [ 274.899015][T13074] usb 5-1: SerialNumber: syz [ 274.915908][T13074] usb 5-1: config 0 descriptor?? [ 274.933355][T13074] smsc95xx v2.0.0 [ 274.957753][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 274.973094][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.991356][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 275.000149][ T10] usb 1-1: media controller created [ 275.028148][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.040294][ T5834] Bluetooth: hci2: command tx timeout [ 275.120387][T12817] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 275.166856][ T10] az6027: usb out operation failed. (-71) [ 275.173347][ T10] az6027: usb out operation failed. (-71) [ 275.179072][ T10] stb0899_attach: Driver disabled by Kconfig [ 275.200348][ T10] az6027: no front-end attached [ 275.200348][ T10] [ 275.220315][ T10] az6027: usb out operation failed. (-71) [ 275.226068][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 275.234834][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input52 [ 275.248386][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 275.255653][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 275.266655][ T10] usb 1-1: USB disconnect, device number 44 [ 275.283726][T12817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.294203][T12817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.309640][T12817] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 275.325054][T12817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.339725][T12817] usb 4-1: SerialNumber: syz [ 275.345342][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 275.359209][T12817] usb 4-1: 0:2 : does not exist [ 275.528682][ T10] kernel write not supported for file /sysvipc/sem (pid: 10 comm: kworker/0:1) [ 275.750830][T13074] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 275.791673][T13074] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 275.810943][T13074] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 275.825354][T13074] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 275.842454][T13074] usb 5-1: USB disconnect, device number 40 [ 276.170107][ T5941] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 276.332426][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.356761][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.376161][T13074] usb 4-1: USB disconnect, device number 35 [ 276.392537][ T5941] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 276.418909][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.444738][ T5941] usb 1-1: config 0 descriptor?? [ 276.455373][T14735] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 276.474158][T14737] netlink: 'syz.4.3919': attribute type 3 has an invalid length. [ 276.482253][T14737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.580683][ T10] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 276.745927][ T10] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 276.765160][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.794393][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 276.810038][ T10] usb 3-1: config 1 has no interface number 1 [ 276.827997][ T10] usb 3-1: string descriptor 0 read error: -22 [ 276.834792][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.849591][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.876837][ T5941] steelseries 0003:1038:12B6.002E: unknown main item tag 0x3 [ 276.893187][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.902986][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.905328][ T5941] steelseries 0003:1038:12B6.002E: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 276.909953][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 277.059762][T14762] netlink: 'syz.6.3929': attribute type 1 has an invalid length. [ 277.118760][ T5834] Bluetooth: hci2: command tx timeout [ 277.181579][ T10] usb 3-1: USB disconnect, device number 39 [ 277.229028][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 277.291933][T12817] usb 1-1: USB disconnect, device number 45 [ 277.452509][T14784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3940'. [ 277.472085][T14784] vlan2: entered allmulticast mode [ 277.477243][T14784] geneve1: entered allmulticast mode [ 277.870252][T14802] netlink: 'syz.2.3949': attribute type 15 has an invalid length. [ 277.890153][T13074] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 277.992779][ T30] audit: type=1400 audit(1752108959.160:1025): avc: denied { execute } for pid=14805 comm="syz.3.3950" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 278.081440][T13074] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 278.089643][T13074] usb 7-1: config 0 has no interface number 0 [ 278.113838][T13074] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 278.123044][T13074] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.140132][T13074] usb 7-1: Product: syz [ 278.144307][T13074] usb 7-1: Manufacturer: syz [ 278.148905][T13074] usb 7-1: SerialNumber: syz [ 278.184549][T13074] usb 7-1: config 0 descriptor?? [ 278.813731][T13074] asix 7-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 278.846386][T13074] asix 7-1:0.251: probe with driver asix failed with error -524 [ 279.042478][T13074] usb 7-1: USB disconnect, device number 17 [ 279.190653][ T5834] Bluetooth: hci2: command tx timeout [ 279.200063][T12817] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 279.253133][T14852] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 279.262862][T14852] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 279.371671][T12817] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 279.382160][T12817] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 279.400180][T12817] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 279.417223][T12817] usb 5-1: config 220 has no interface number 2 [ 279.431278][T12817] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 279.443664][T14860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=14860 comm=syz.3.3974 [ 279.451382][T12817] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 279.496728][T12817] usb 5-1: config 220 interface 0 has no altsetting 0 [ 279.504003][T12817] usb 5-1: config 220 interface 76 has no altsetting 0 [ 279.511983][T12817] usb 5-1: config 220 interface 1 has no altsetting 0 [ 279.522595][T12817] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 279.537996][T12817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.547933][T12817] usb 5-1: Product: syz [ 279.552267][T12817] usb 5-1: Manufacturer: syz [ 279.556942][T12817] usb 5-1: SerialNumber: syz [ 279.735094][T14876] can0: slcan on ttyS3. [ 279.775545][T12817] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 279.784767][T12817] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 279.792344][T14876] can0 (unregistered): slcan off ttyS3. [ 279.798629][T12817] usb 5-1: No valid video chain found. [ 279.810063][T12817] usb 5-1: selecting invalid altsetting 0 [ 279.829396][T12817] usb 5-1: selecting invalid altsetting 0 [ 279.849503][T12817] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 279.870352][T12817] usb 5-1: USB disconnect, device number 41 [ 279.926910][ T30] audit: type=1400 audit(1752108961.090:1026): avc: denied { execute } for pid=14879 comm="syz.6.3984" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 279.930667][ T973] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 280.065211][ T5950] kernel write not supported for file [eventfd] (pid: 5950 comm: kworker/0:5) [ 280.120214][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 280.127054][ T973] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.134655][ T973] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 280.160831][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.186516][ T973] usb 4-1: config 0 descriptor?? [ 280.198340][ T30] audit: type=1400 audit(1752108961.360:1027): avc: denied { open } for pid=14887 comm="syz.6.3989" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 280.296306][ T30] audit: type=1400 audit(1752108961.460:1028): avc: denied { ioctl } for pid=14893 comm="syz.0.3991" path="socket:[48966]" dev="sockfs" ino=48966 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 280.609867][ T973] ryos 0003:1E7D:31CE.002F: hidraw0: USB HID v0.07 Device [HID 1e7d:31ce] on usb-dummy_hcd.3-1/input0 [ 280.901936][ T5912] usb 4-1: USB disconnect, device number 36 [ 281.574808][ T30] audit: type=1400 audit(1752108962.740:1029): avc: denied { bind } for pid=14948 comm="syz.6.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.937833][T14972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.292000][ T30] audit: type=1400 audit(1752108963.460:1030): avc: denied { setopt } for pid=14988 comm="syz.2.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.506497][ T30] audit: type=1400 audit(1752108963.670:1031): avc: denied { read } for pid=15001 comm="syz.3.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 282.673320][ T30] audit: type=1400 audit(1752108963.840:1032): avc: denied { read } for pid=15010 comm="syz.6.4044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 282.741588][ T30] audit: type=1400 audit(1752108963.890:1033): avc: denied { setopt } for pid=15010 comm="syz.6.4044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 283.164377][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4056'. [ 283.190536][T15042] Falling back ldisc for ttyS3. [ 283.297780][T15060] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4064'. [ 283.985691][T15104] netlink: 'syz.0.4084': attribute type 1 has an invalid length. [ 283.997282][T15104] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4084'. [ 284.112030][T12817] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 284.130055][ T973] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 284.270301][T12817] usb 4-1: Using ep0 maxpacket: 8 [ 284.277068][T12817] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 284.285575][ T973] usb 7-1: Using ep0 maxpacket: 16 [ 284.294391][T12817] usb 4-1: config 0 has no interface number 0 [ 284.303944][ T973] usb 7-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 284.321971][T12817] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.322817][T15117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4090'. [ 284.334555][ T973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.356837][T12817] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 284.369682][T12817] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 284.385364][ T973] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 284.397881][T12817] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 16384, setting to 1024 [ 284.413436][ T973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 63672, setting to 1024 [ 284.425591][T12817] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.439300][ T973] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 284.452697][ T973] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.466742][ T973] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 284.478494][ T973] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 284.486827][ T973] usb 7-1: Manufacturer: syz [ 284.492190][T12817] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 284.501403][T12817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.511549][ T973] usb 7-1: config 0 descriptor?? [ 284.516688][T12817] usb 4-1: Product: syz [ 284.521472][T12817] usb 4-1: Manufacturer: syz [ 284.527951][T12817] usb 4-1: SerialNumber: syz [ 284.535054][T12817] usb 4-1: config 0 descriptor?? [ 284.540140][ T30] audit: type=1326 audit(1752108965.700:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.2.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16038e929 code=0x7fc00000 [ 284.774432][T12817] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 284.801407][T12817] usb 4-1: USB disconnect, device number 37 [ 284.820069][ T973] rc_core: IR keymap rc-hauppauge not found [ 284.826131][ T973] Registered IR keymap rc-empty [ 284.840058][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 284.871537][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 284.910940][ T973] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 284.928452][ T973] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input53 [ 284.968464][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 284.995942][T15149] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 285.001476][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 285.030526][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 285.060309][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 285.080743][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 285.103922][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 285.130395][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 285.150496][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 285.170403][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 285.190429][ T973] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 285.196428][T15159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.211496][ T973] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 285.219792][ T973] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 285.221909][ T5941] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 285.235581][ T973] usb 7-1: USB disconnect, device number 18 [ 285.320122][ T5912] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 285.404122][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 285.413083][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 285.429340][ T5941] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 285.444969][ T5941] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 285.458714][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.467735][ T5941] usb 1-1: Product: syz [ 285.477167][ T5941] usb 1-1: Manufacturer: syz [ 285.480378][ T30] audit: type=1400 audit(1752108966.640:1035): avc: denied { setcurrent } for pid=15172 comm="syz.6.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 285.481913][ T5941] usb 1-1: SerialNumber: syz [ 285.516067][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 285.530637][ T5941] usb 1-1: config 0 descriptor?? [ 285.554678][ T5941] hub 1-1:0.0: bad descriptor, ignoring hub [ 285.565638][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.581791][ T5941] hub 1-1:0.0: probe with driver hub failed with error -5 [ 285.594652][ T5941] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input54 [ 285.603810][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.614652][ T5912] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.629703][ T5941] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 285.640836][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.648884][ T5912] usb 5-1: Product: syz [ 285.653444][ T5912] usb 5-1: Manufacturer: syz [ 285.667000][ T5941] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 285.677995][ T5912] usb 5-1: SerialNumber: syz [ 285.860331][ T5941] usb 1-1: USB disconnect, device number 46 [ 285.893320][ T5912] usb 5-1: 0:2 : does not exist [ 285.904705][ T5912] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 285.949306][ T5912] usb 5-1: USB disconnect, device number 42 [ 285.987407][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4129'. [ 286.004162][T15200] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4128'. [ 286.023445][T15200] NCSI netlink: No device for ifindex 0 [ 286.125540][ T30] audit: type=1400 audit(1752108967.290:1036): avc: denied { mounton } for pid=15206 comm="syz.6.4133" path="/622/bus" dev="tmpfs" ino=3186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 286.148588][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.474228][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4141'. [ 287.031408][ T5843] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 287.232744][ T5843] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.260692][ T5843] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 287.275577][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.291765][ T5843] usb 4-1: Product: syz [ 287.300155][ T5843] usb 4-1: Manufacturer: syz [ 287.309171][ T5843] usb 4-1: SerialNumber: syz [ 287.321593][ T5843] usb 4-1: config 0 descriptor?? [ 287.535304][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4164'. [ 287.640064][ T5843] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 287.661537][ T30] audit: type=1326 audit(1752108968.820:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.0.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552138e929 code=0x7ffc0000 [ 287.684998][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.737294][ T30] audit: type=1326 audit(1752108968.820:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.0.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552138e929 code=0x7ffc0000 [ 287.800627][ T5843] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 287.809698][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.810968][ T30] audit: type=1326 audit(1752108968.860:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.0.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f552138e929 code=0x7ffc0000 [ 287.851944][ T30] audit: type=1326 audit(1752108968.860:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.0.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552138e929 code=0x7ffc0000 [ 287.890732][ T5843] usb 3-1: config 0 descriptor?? [ 287.911202][ T30] audit: type=1326 audit(1752108968.860:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.0.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552138e929 code=0x7ffc0000 [ 287.934671][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.014691][ T30] audit: type=1326 audit(1752108968.860:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.0.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f552138e929 code=0x7ffc0000 [ 288.047509][ T973] usb 4-1: USB disconnect, device number 38 [ 288.059442][ T30] audit: type=1326 audit(1752108968.880:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.0.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552138e929 code=0x7ffc0000 [ 288.082909][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.100904][T15291] tipc: Started in network mode [ 288.105775][T15291] tipc: Node identity ff, cluster identity 4711 [ 288.113309][T15291] tipc: Enabling of bearer rejected, failed to enable media [ 288.209274][T15297] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 288.330213][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 288.480206][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 288.486802][ T10] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.500382][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 288.507171][ T10] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 288.516626][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.527456][ T10] usb 5-1: config 0 descriptor?? [ 288.743621][ T5843] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 288.757087][ T5843] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 288.810359][ T5843] asix 3-1:0.0: probe with driver asix failed with error -71 [ 288.824651][ T5843] usb 3-1: USB disconnect, device number 40 [ 288.960243][ T10] nzxt-smart2 0003:1E71:2009.0030: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 289.381539][ T10] usb 5-1: USB disconnect, device number 43 [ 289.613516][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 289.613533][ T30] audit: type=1400 audit(1752108970.780:1049): avc: denied { read } for pid=15320 comm="syz.2.4186" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 289.677419][ T30] audit: type=1400 audit(1752108970.780:1050): avc: denied { open } for pid=15320 comm="syz.2.4186" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 289.701074][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.718412][ T30] audit: type=1400 audit(1752108970.780:1051): avc: denied { ioctl } for pid=15320 comm="syz.2.4186" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 289.758590][T15328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4189'. [ 289.819403][T15332] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4192'. [ 289.951386][ T5912] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 290.036147][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4195'. [ 290.120241][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 290.132165][ T5912] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.150034][ T5912] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.167146][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 290.173937][ T5912] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 290.183354][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.193506][ T5912] usb 3-1: config 0 descriptor?? [ 290.233944][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 290.241083][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 290.406555][T15324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.440541][T15324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.584563][ T30] audit: type=1326 audit(1752108971.750:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.3.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd498e929 code=0x7fc00000 [ 290.658882][ T5912] hid (null): bogus close delimiter [ 290.685683][ T5912] hid (null): global environment stack overflow [ 290.709740][ T5912] hid (null): invalid report_count 18947 [ 290.720991][ T5912] hid (null): report_id 0 is invalid [ 290.859876][ T973] usb 3-1: USB disconnect, device number 41 [ 291.182196][ T30] audit: type=1400 audit(1752108972.350:1053): avc: denied { connect } for pid=15397 comm="syz.0.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 291.419496][T15413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4227'. [ 291.894580][T15434] loop8: detected capacity change from 0 to 8 [ 291.970167][T15434] loop8: detected capacity change from 8 to 6 [ 291.994613][ C0] blk_print_req_error: 138 callbacks suppressed [ 291.994631][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.010083][ C0] buffer_io_error: 138 callbacks suppressed [ 292.010096][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 292.050873][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.060088][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 292.068190][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.077444][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 292.087753][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.096941][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 292.104939][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.114136][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 292.122122][T15434] ldm_validate_partition_table(): Disk read failed. [ 292.153474][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.162656][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 292.172540][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.181729][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 292.195144][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.204309][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 292.220022][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.229161][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 292.237014][T15434] Dev loop8: unable to read RDB block 0 [ 292.252159][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.261358][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 292.271107][T15434] loop8: unable to read partition table [ 292.293176][T15434] loop8: partition table beyond EOD, truncated [ 292.308472][T15434] loop_reread_partitions: partition scan of loop8 (©›í^êÃÓ{Z~ÙâP’Ž[‹]ÞM,+„-Ô`Ê1(6ÞÏ$ÐÑ~ [ 292.308472][T15434] ö¤øæÛ…«òýå6þÍÁ) failed (rc=-5) [ 292.481160][T15451] syz_tun: entered allmulticast mode [ 292.490041][ T5912] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 292.497777][T15451] syz_tun: left allmulticast mode [ 292.601440][T15456] CIFS mount error: No usable UNC path provided in device string! [ 292.601440][T15456] [ 292.637908][T15456] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 292.666350][ T5912] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.667917][T15462] Cannot find del_set index 0 as target [ 292.677474][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 292.677508][ T5912] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 292.677529][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.701428][ T5912] usb 3-1: config 0 descriptor?? [ 292.714646][ T5941] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 292.893588][ T5941] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 292.906574][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.935939][ T5941] usb 1-1: Product: syz [ 292.952074][ T5941] usb 1-1: Manufacturer: syz [ 292.958793][ T5941] usb 1-1: SerialNumber: syz [ 292.966080][ T5941] usb 1-1: config 0 descriptor?? [ 292.973963][ T5941] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 047 [ 293.046510][ T30] audit: type=1400 audit(1752108975.201:1054): avc: denied { mounton } for pid=15475 comm="syz.4.4256" path="/864/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 293.097831][ T30] audit: type=1400 audit(1752108975.231:1055): avc: denied { mount } for pid=15475 comm="syz.4.4256" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 293.167278][ T5912] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0032/input/input55 [ 293.204308][ T5912] sony 0003:054C:03D5.0032: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 293.340050][T13074] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 293.394421][ T5941] (null): failure reading functionality [ 293.429805][ T5843] usb 3-1: USB disconnect, device number 42 [ 293.448905][ T5941] i2c i2c-1: connected i2c-tiny-usb device [ 293.540288][T13074] usb 7-1: Using ep0 maxpacket: 8 [ 293.552440][T13074] usb 7-1: unable to get BOS descriptor or descriptor too short [ 293.581183][T13074] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 293.591548][T13074] usb 7-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 293.623106][T13074] usb 7-1: No eUSB2 isoc ep 7 companion for config 7 interface 0 altsetting 0 [ 293.641764][ T973] usb 1-1: USB disconnect, device number 47 [ 293.648847][T13074] usb 7-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.687875][T13074] usb 7-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 293.715570][T13074] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.723609][T13074] usb 7-1: Product: syz [ 293.727792][T13074] usb 7-1: Manufacturer: syz [ 293.736416][T13074] usb 7-1: SerialNumber: syz [ 293.741142][ T30] audit: type=1400 audit(1752108975.891:1056): avc: denied { unmount } for pid=14524 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 293.900160][ T5950] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 293.973788][T13074] usb 7-1: USB disconnect, device number 19 [ 294.015410][T15509] input: syz0 as /devices/virtual/input/input56 [ 294.052064][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 294.067307][ T5950] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 294.076594][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.095010][ T5950] usb 5-1: config 0 descriptor?? [ 294.105825][T15496] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 294.431292][T15536] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4286'. [ 294.502316][T15540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4288'. [ 294.514351][T15540] netem: unknown loss type 13 [ 294.519768][T15540] netem: change failed [ 294.531702][ T5950] zeroplus 0003:0C12:0030.0033: unknown main item tag 0x0 [ 294.542721][ T5950] zeroplus 0003:0C12:0030.0033: item fetching failed at offset 3/5 [ 294.560048][ T5941] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 294.565064][ T5950] zeroplus 0003:0C12:0030.0033: parse failed [ 294.579767][ T5950] zeroplus 0003:0C12:0030.0033: probe with driver zeroplus failed with error -22 [ 294.608427][T15544] input: syz0 as /devices/virtual/input/input57 [ 294.725920][ T5941] usb 1-1: unable to get BOS descriptor or descriptor too short [ 294.751840][ T5941] usb 1-1: not running at top speed; connect to a high speed hub [ 294.777970][ T5941] usb 1-1: config 0 has an invalid interface number: 164 but max is 0 [ 294.784191][ T5950] usb 5-1: USB disconnect, device number 44 [ 294.786991][ T5941] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 294.822439][ T5941] usb 1-1: config 0 has no interface number 0 [ 294.828526][ T5941] usb 1-1: config 0 interface 164 has no altsetting 0 [ 294.856850][ T5941] usb 1-1: string descriptor 0 read error: -22 [ 294.863447][ T5941] usb 1-1: New USB device found, idVendor=02c7, idProduct=d349, bcdDevice=8a.42 [ 294.880039][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.897192][ T5941] usb 1-1: config 0 descriptor?? [ 294.904520][ T5941] cdc_acm 1-1:0.164: invalid descriptor buffer length [ 295.148306][ T5941] usb 1-1: USB disconnect, device number 48 [ 295.466321][ T30] audit: type=1400 audit(1752108977.621:1057): avc: denied { watch } for pid=15579 comm="syz.6.4307" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 295.510853][ T30] audit: type=1400 audit(1752108977.621:1058): avc: denied { watch_sb watch_reads } for pid=15579 comm="syz.6.4307" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 295.780033][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 295.935613][T15612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4321'. [ 295.940106][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 295.954418][ T10] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 295.963820][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.977399][ T10] usb 7-1: config 0 descriptor?? [ 295.982745][ T5950] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 296.080089][T13074] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 296.140127][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 296.146605][ T5950] usb 3-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 296.158734][ T5950] usb 3-1: config 0 interface 0 has no altsetting 0 [ 296.165406][ T5950] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 296.174471][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.183958][ T5950] usb 3-1: config 0 descriptor?? [ 296.198358][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 296.206908][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.216641][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 296.223845][ T10] usb 7-1: media controller created [ 296.230304][T13074] usb 1-1: Using ep0 maxpacket: 16 [ 296.242427][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.244519][T13074] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 296.260204][ T973] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 296.265761][T13074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.276199][T13074] usb 1-1: Product: syz [ 296.280623][T13074] usb 1-1: Manufacturer: syz [ 296.285217][T13074] usb 1-1: SerialNumber: syz [ 296.292026][T13074] usb 1-1: config 0 descriptor?? [ 296.299525][T13074] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 296.379688][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.387446][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.395018][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.403614][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.411371][ T10] az6027: usb out operation failed. (-71) [ 296.417159][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.424655][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 296.430145][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.437729][ T10] az6027: usb out operation failed. (-71) [ 296.443649][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.451211][ T10] stb0899_attach: Driver disabled by Kconfig [ 296.457380][ T10] az6027: no front-end attached [ 296.457380][ T10] [ 296.464539][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.472217][ T973] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 296.480768][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.488215][ T10] az6027: usb out operation failed. (-71) [ 296.494020][ T973] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 296.502716][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.505128][T13074] gspca_sn9c2028: read1 error -32 [ 296.510154][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 296.511691][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input58 [ 296.519542][T13074] gspca_sn9c2028: read1 error -32 [ 296.522542][ T973] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 296.547784][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.556115][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.564049][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 296.571107][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.578508][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 296.586580][ T973] usb 4-1: config 1 has no interface number 0 [ 296.592712][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.603300][ T10] usb 7-1: USB disconnect, device number 20 [ 296.611115][ T5950] petalynx 0003:18B1:0037.0035: unknown main item tag 0x0 [ 296.618259][ T5950] petalynx 0003:18B1:0037.0035: unknown main item tag 0x0 [ 296.625418][ T973] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.630133][ T5941] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 296.636436][T12817] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 296.651853][ T973] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 296.663448][ T5950] petalynx 0003:18B1:0037.0035: unknown main item tag 0x0 [ 296.678967][T12817] hid-generic 00A0:0006:0003.0034: hidraw0: HID v0.05 Device [syz1] on syz0 [ 296.693903][ T5950] petalynx 0003:18B1:0037.0035: unknown main item tag 0x0 [ 296.701743][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 296.710201][ T973] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 296.723992][ T5950] petalynx 0003:18B1:0037.0035: unknown main item tag 0x0 [ 296.732092][ T973] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 296.741968][ T5950] petalynx 0003:18B1:0037.0035: unknown main item tag 0x0 [ 296.749095][ T5950] petalynx 0003:18B1:0037.0035: unknown main item tag 0x0 [ 296.756515][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.771730][T15616] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 296.774801][ T5950] petalynx 0003:18B1:0037.0035: hidraw1: USB HID v0.03 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 296.797344][ T973] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 296.798322][T13074] usb 1-1: USB disconnect, device number 49 [ 296.817662][ T5950] usb 3-1: USB disconnect, device number 43 [ 296.832548][ T5941] usb 5-1: config 0 has no interfaces? [ 296.838041][ T5941] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 296.847407][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.857019][ T5941] usb 5-1: config 0 descriptor?? [ 296.995477][T15616] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 297.004384][ T973] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 297.080366][ T973] usb 5-1: USB disconnect, device number 45 [ 297.247248][ T5941] usb 4-1: USB disconnect, device number 39 [ 297.254702][ T5941] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 297.361057][T15625] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 297.369916][T15625] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 297.380948][T15625] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 297.388685][T15625] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 297.401461][T15625] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 297.410173][T15625] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 297.418568][T15625] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 297.426375][T15625] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 297.463720][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4339'. [ 297.522660][ T30] audit: type=1400 audit(1752108979.671:1059): avc: denied { write } for pid=15630 comm="syz.0.4330" path="socket:[52879]" dev="sockfs" ino=52879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 297.880333][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 298.064403][ T10] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 298.092405][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.116054][ T10] usb 5-1: Product: syz [ 298.119069][ T30] audit: type=1326 audit(1752108980.271:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.2.4345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb16038e929 code=0x0 [ 298.130030][ T10] usb 5-1: Manufacturer: syz [ 298.157952][ T10] usb 5-1: SerialNumber: syz [ 298.164770][ T10] usb 5-1: config 0 descriptor?? [ 298.391315][ T10] usb 5-1: f81604_read: reg: 105 failed: -EPIPE [ 298.406826][ T10] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 298.414862][ T10] f81604 5-1:0.0: probe with driver f81604 failed with error -32 [ 298.456282][T15682] netlink: 'syz.6.4354': attribute type 39 has an invalid length. [ 298.471852][T15680] block device autoloading is deprecated and will be removed. [ 299.155369][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4371'. [ 299.178341][T15719] macsec1: entered allmulticast mode [ 299.183823][T15719] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 299.213822][T15719] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 299.390867][ T5941] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 299.541678][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.562058][ T5941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.591172][ T5941] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 299.600331][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 299.608330][ T5941] usb 4-1: SerialNumber: syz [ 299.825161][ T5941] usb 4-1: 0:2 : does not exist [ 299.848594][ T5941] usb 4-1: USB disconnect, device number 40 [ 300.077980][T15757] kvm: kvm [15755]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 300.212803][ T30] audit: type=1326 audit(1752108982.371:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16038e929 code=0x7ffc0000 [ 300.244406][ T30] audit: type=1326 audit(1752108982.391:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16038e929 code=0x7ffc0000 [ 300.293666][ T30] audit: type=1326 audit(1752108982.391:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16038e929 code=0x7ffc0000 [ 300.323041][ T30] audit: type=1326 audit(1752108982.401:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16038e929 code=0x7ffc0000 [ 300.370276][ T30] audit: type=1326 audit(1752108982.401:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16038e929 code=0x7ffc0000 [ 300.437684][ T30] audit: type=1326 audit(1752108982.421:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16038e929 code=0x7ffc0000 [ 300.610414][ T5843] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 300.667285][ T10] usb 5-1: USB disconnect, device number 46 [ 300.779492][T15794] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4406'. [ 300.790155][ T5950] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 300.791457][ T5843] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 300.818605][T15796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4407'. [ 300.834664][ T5843] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 300.859663][ T5843] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 300.874465][ T5843] usb 7-1: config 220 has no interface number 2 [ 300.889044][ T5843] usb 7-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 300.915601][ T5843] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 300.936247][ T5843] usb 7-1: config 220 interface 0 has no altsetting 0 [ 300.945075][ T5843] usb 7-1: config 220 interface 76 has no altsetting 0 [ 300.955156][ T5843] usb 7-1: config 220 interface 1 has no altsetting 0 [ 300.964099][ T5950] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 300.972330][ T5843] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 300.973273][ T5950] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.996816][ T5950] usb 1-1: config 0 has no interface number 0 [ 301.002107][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.004302][ T5950] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 301.023238][ T5843] usb 7-1: Product: syz [ 301.027927][ T5843] usb 7-1: Manufacturer: syz [ 301.037311][ T5843] usb 7-1: SerialNumber: syz [ 301.041376][ T5950] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.057911][ T5950] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 301.071838][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.079881][ T5950] usb 1-1: Product: syz [ 301.085744][ T5950] usb 1-1: Manufacturer: syz [ 301.093411][ T5950] usb 1-1: SerialNumber: syz [ 301.105528][ T5950] usb 1-1: config 0 descriptor?? [ 301.267525][ T5843] uvcvideo 7-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 301.278174][ T5843] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 301.298010][ T5843] usb 7-1: No valid video chain found. [ 301.303904][ T5843] usb 7-1: selecting invalid altsetting 0 [ 301.321947][ T5843] usb 7-1: selecting invalid altsetting 0 [ 301.327868][ T5843] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 301.345801][ T5843] usb 7-1: USB disconnect, device number 21 [ 301.480613][T13074] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 301.595055][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4427'. [ 301.650046][T13074] usb 3-1: Using ep0 maxpacket: 32 [ 301.661471][T13074] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 301.669491][T13074] usb 3-1: config 0 has no interface number 0 [ 301.685691][T13074] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 301.696755][T13074] usb 3-1: Dual-Role OTG device on HNP port [ 301.703057][T13074] usb 3-1: New USB device found, idVendor=0424, idProduct=4913, bcdDevice=84.04 [ 301.714989][T13074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.734464][ T5950] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.117/input/input59 [ 301.735955][T13074] usb 3-1: config 0 descriptor?? [ 301.762077][T13074] hub 3-1:0.4: bad descriptor, ignoring hub [ 301.768007][T13074] hub 3-1:0.4: probe with driver hub failed with error -5 [ 301.901379][T15848] xt_CT: No such helper "snmp" [ 301.988253][ T5950] usb 1-1: USB disconnect, device number 50 [ 302.140241][T13074] usb 3-1: USB disconnect, device number 44 [ 302.325332][ T5912] kernel read not supported for file /dsp (pid: 5912 comm: kworker/1:6) [ 302.490151][T13074] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 302.660038][T13074] usb 5-1: Using ep0 maxpacket: 16 [ 302.667868][T13074] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 302.695740][T13074] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 302.707253][T13074] usb 5-1: Manufacturer: syz [ 302.740796][T13074] usb 5-1: config 0 descriptor?? [ 302.833785][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4451'. [ 302.909821][T15897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4455'. [ 302.963665][T13074] usb 5-1: Limiting number of CPorts to U8_MAX [ 302.977803][T13074] usb 5-1: Not enough endpoints found in device, aborting! [ 303.130968][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 303.130984][ T30] audit: type=1400 audit(1752108985.281:1072): avc: denied { getopt } for pid=15909 comm="syz.2.4460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 303.194477][ T5950] usb 5-1: USB disconnect, device number 47 [ 303.697415][T15924] Bluetooth: MGMT ver 1.23 [ 304.020043][T13074] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 304.173064][T13074] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 304.190067][T13074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.215988][T13074] usb 5-1: Product: syz [ 304.240077][T13074] usb 5-1: Manufacturer: syz [ 304.244757][T13074] usb 5-1: SerialNumber: syz [ 304.256057][T13074] usb 5-1: config 0 descriptor?? [ 304.373838][ T30] audit: type=1400 audit(1752108986.521:1073): avc: denied { kexec_image_load } for pid=15935 comm="syz.6.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 304.442880][T15963] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4484'. [ 304.469590][T13074] usb-storage 5-1:0.0: USB Mass Storage device detected [ 304.709358][T13074] usb 5-1: USB disconnect, device number 48 [ 304.950273][ T5843] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 304.990199][ T5941] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 305.120047][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 305.126538][ T5843] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 305.134999][ T5843] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 305.146133][ T5843] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 305.157301][ T5843] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 305.170505][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 305.175791][ T5843] usb 1-1: config 0 interface 0 has no altsetting 0 [ 305.184788][ T5843] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 305.194211][ T5843] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 305.203427][ T5941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.213832][ T5843] usb 1-1: Product: syz [ 305.218019][ T5843] usb 1-1: Manufacturer: syz [ 305.222686][ T5941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.231585][ T5843] usb 1-1: SerialNumber: syz [ 305.239321][ T5941] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.248726][ T5843] usb 1-1: config 0 descriptor?? [ 305.253715][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.262206][ T5941] usb 3-1: Product: syz [ 305.268399][ T5843] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 305.277993][ T5941] usb 3-1: Manufacturer: syz [ 305.284166][ T5941] usb 3-1: SerialNumber: syz [ 305.288900][ T5843] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 305.465698][T15998] xt_CT: No such helper "snmp" [ 305.514062][ T5941] usb 3-1: 0:2 : does not exist [ 305.524212][ T5941] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 305.551288][ T5941] usb 3-1: USB disconnect, device number 45 [ 305.650946][ T973] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 305.822907][ T973] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 305.832050][ T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.840140][ T5950] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 305.847879][ T973] usb 7-1: Product: syz [ 305.853662][ T973] usb 7-1: Manufacturer: syz [ 305.858316][ T973] usb 7-1: SerialNumber: syz [ 305.867718][ T973] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 305.878021][ T30] audit: type=1400 audit(1752108988.041:1074): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 305.887740][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 305.903963][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.990197][ T5843] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 306.010680][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 306.018415][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.036203][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.046129][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 306.057747][ T5950] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 306.070243][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.081463][ T5950] usb 5-1: config 0 descriptor?? [ 306.181373][ T5843] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 306.189710][ T5843] usb 4-1: config 0 has no interface number 0 [ 306.195847][ T5843] usb 4-1: config 0 interface 41 has no altsetting 0 [ 306.204937][ T5843] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 306.214204][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.224765][ T5843] usb 4-1: Product: syz [ 306.228927][ T5843] usb 4-1: Manufacturer: syz [ 306.233582][ T5843] usb 4-1: SerialNumber: syz [ 306.242892][ T5843] usb 4-1: config 0 descriptor?? [ 306.296500][T16001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.305326][T16001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.335629][ T5941] usb 7-1: USB disconnect, device number 22 [ 306.521392][ T5950] hid (null): bogus close delimiter [ 306.528382][ T5950] hid (null): global environment stack overflow [ 306.534889][ T5950] hid (null): invalid report_count 18947 [ 306.540572][ T5950] hid (null): report_id 0 is invalid [ 306.736099][ T5912] usb 5-1: USB disconnect, device number 49 [ 306.861378][ T5843] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 306.877266][ T5843] usb 4-1: USB disconnect, device number 41 [ 306.896142][ T30] audit: type=1400 audit(1752108989.051:1075): avc: denied { setopt } for pid=16011 comm="syz.2.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.916810][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.954455][T16016] xt_hashlimit: size too large, truncated to 1048576 [ 307.204226][ T10] usb 7-1: Service connection timeout for: 256 [ 307.220098][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 307.229837][ T10] ath9k_htc: Failed to initialize the device [ 307.237205][ T5941] usb 7-1: ath9k_htc: USB layer deinitialized [ 307.287547][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4512'. [ 307.333883][ T30] audit: type=1400 audit(1752108989.491:1076): avc: denied { mounton } for pid=16029 comm="syz.4.4513" path="/888/file0" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 307.734380][ T5950] usb 1-1: USB disconnect, device number 51 [ 307.752873][ T5950] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 307.774190][T16057] netlink: 'syz.3.4526': attribute type 10 has an invalid length. [ 307.820081][ T10] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 307.871174][T16057] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 307.985548][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 307.999582][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.016653][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.026655][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 308.069999][ T10] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 308.140279][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.165888][ T10] usb 3-1: config 0 descriptor?? [ 308.331802][T16086] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 308.421164][T16094] netlink: 'syz.6.4544': attribute type 2 has an invalid length. [ 308.431162][T16094] netlink: 'syz.6.4544': attribute type 8 has an invalid length. [ 308.452930][T16094] netlink: 1148 bytes leftover after parsing attributes in process `syz.6.4544'. [ 308.568235][T16102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.611905][ T10] hid (null): invalid report_count 903462111 [ 308.629602][ T10] waltop 0003:172F:0502.0037: invalid report_count 903462111 [ 308.640755][ T10] waltop 0003:172F:0502.0037: item 0 4 1 9 parsing failed [ 308.648521][ T10] waltop 0003:172F:0502.0037: probe with driver waltop failed with error -22 [ 308.814921][ T10] usb 3-1: USB disconnect, device number 46 [ 308.860193][ T5941] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 308.869411][T16116] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4553'. [ 309.010036][ T5941] usb 7-1: Using ep0 maxpacket: 16 [ 309.016516][ T5941] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 309.029815][ T5941] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 309.038976][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.048251][ T5941] usb 7-1: config 0 descriptor?? [ 309.055641][ T5941] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input60 [ 309.264353][ T5187] bcm5974 7-1:0.0: could not read from device [ 309.281943][ T5941] bcm5974 7-1:0.0: could not read from device [ 309.294361][ T5187] bcm5974 7-1:0.0: could not read from device [ 309.310634][ T30] audit: type=1400 audit(1752108991.471:1077): avc: denied { accept } for pid=16123 comm="syz.3.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 309.310782][ T5941] input: failed to attach handler mousedev to device input60, error: -5 [ 309.368586][ T5187] bcm5974 7-1:0.0: could not read from device [ 309.369823][ T5941] usb 7-1: USB disconnect, device number 23 [ 309.690835][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 309.860801][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 309.873253][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.896385][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.917215][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.928380][ T10] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 309.937595][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.947882][ T10] usb 3-1: config 0 descriptor?? [ 310.412346][ T10] cougar 0003:060B:500A.0038: unexpected long global item [ 310.427004][ T10] cougar 0003:060B:500A.0038: parse failed [ 310.433458][ T10] cougar 0003:060B:500A.0038: probe with driver cougar failed with error -22 [ 310.584252][ T10] usb 3-1: USB disconnect, device number 47 [ 311.010405][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 311.180777][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 311.201170][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 311.232309][ T10] usb 1-1: config 0 has no interface number 0 [ 311.240579][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 311.259783][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.273873][T16215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.284353][ T10] usb 1-1: Product: syz [ 311.298725][ T10] usb 1-1: Manufacturer: syz [ 311.304620][ T10] usb 1-1: SerialNumber: syz [ 311.316899][ T10] usb 1-1: config 0 descriptor?? [ 311.332029][ T10] smsc95xx v2.0.0 [ 311.495429][T16219] pimreg: entered allmulticast mode [ 311.524810][T16219] pimreg: left allmulticast mode [ 311.872369][ T30] audit: type=1400 audit(1752108994.031:1078): avc: denied { execute_no_trans } for pid=16229 comm="syz.2.4608" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=56491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 312.180354][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 312.204008][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 312.226317][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 312.248217][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 312.281006][ T10] usb 1-1: USB disconnect, device number 52 [ 312.529489][T16263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.532359][ T30] audit: type=1400 audit(1752108994.681:1079): avc: denied { setopt } for pid=16262 comm="syz.3.4624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 312.598338][T16266] xt_hashlimit: size too large, truncated to 1048576 [ 312.631289][T16268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.659012][T16270] C: renamed from lo (while UP) [ 312.677809][T16270] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 312.984292][T16288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.002287][T16288] bond0: (slave bond1): Enslaving as an active interface with an up link [ 313.060210][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 313.150419][ T5843] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 313.242236][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 313.262469][ T10] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.283935][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 313.300276][ T10] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 313.319579][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.320369][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.335994][T12815] IPVS: starting estimator thread 0... [ 313.343920][ T10] usb 1-1: config 0 descriptor?? [ 313.367872][ T5843] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 313.390661][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.420797][ T5843] usb 3-1: config 0 descriptor?? [ 313.450142][T16308] IPVS: using max 43 ests per chain, 103200 per kthread [ 313.730236][T12815] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 313.789033][ T10] nzxt-smart2 0003:1E71:2009.0039: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 313.846569][ T5843] lg-g15 0003:046D:C222.003A: unbalanced collection at end of report description [ 313.870894][ T5843] lg-g15 0003:046D:C222.003A: probe with driver lg-g15 failed with error -22 [ 313.896444][ T30] audit: type=1400 audit(1752108996.051:1080): avc: denied { mount } for pid=16324 comm="syz.3.4651" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 313.919138][T12815] usb 5-1: Using ep0 maxpacket: 32 [ 313.926581][T12815] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 313.936612][T12815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.971685][T12815] usb 5-1: config 0 descriptor?? [ 313.979474][T12815] gspca_main: sunplus-2.14.0 probing 041e:400b [ 314.057936][ T5843] usb 3-1: USB disconnect, device number 48 [ 314.223255][ T5941] usb 1-1: USB disconnect, device number 53 [ 314.784954][T12815] gspca_sunplus: reg_r err -71 [ 314.830107][T12815] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 314.850422][T12815] usb 5-1: USB disconnect, device number 50 [ 314.970570][T16352] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 315.384117][T16360] netlink: 'syz.0.4666': attribute type 4 has an invalid length. [ 315.644671][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4669'. [ 315.670206][T16369] delete_channel: no stack [ 315.710884][ T30] audit: type=1400 audit(1752108997.861:1081): avc: denied { setopt } for pid=16368 comm="syz.6.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 315.734378][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4669'. [ 315.930751][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4675'. [ 316.196728][T16390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.205063][T16390] bond0: (slave bond1): Enslaving as an active interface with an up link [ 316.575361][T16415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4691'. [ 316.640293][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.696332][ T30] audit: type=1400 audit(1752108998.851:1082): avc: denied { ioctl } for pid=16417 comm="syz.4.4693" path="socket:[56801]" dev="sockfs" ino=56801 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 316.934066][T16426] netlink: 'syz.4.4695': attribute type 10 has an invalid length. [ 316.975366][T16426] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 317.047460][ T30] audit: type=1400 audit(1752108999.201:1083): avc: denied { write } for pid=16431 comm="syz.0.4699" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 317.137635][ T30] audit: type=1326 audit(1752108999.291:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.6.4700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5c498e929 code=0x0 [ 317.188540][T16413] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.4690'. [ 317.217333][T16413] netlink: get zone limit has 8 unknown bytes [ 317.715713][T16468] syz.2.4716: attempt to access beyond end of device [ 317.715713][T16468] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 317.733001][T16468] FAT-fs (loop5): unable to read boot sector [ 317.942981][T16476] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4719'. [ 318.043110][T12815] kernel read not supported for file /dsp (pid: 12815 comm: kworker/0:10) [ 318.580032][ T5843] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 318.752490][ T5843] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 318.770054][ T5843] usb 1-1: config 0 has no interface number 0 [ 318.784289][ T5843] usb 1-1: config 0 interface 41 has no altsetting 0 [ 318.803447][ T5843] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 318.812807][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.820980][ T5843] usb 1-1: Product: syz [ 318.825250][ T5843] usb 1-1: Manufacturer: syz [ 318.837105][ T5843] usb 1-1: SerialNumber: syz [ 318.860811][ T5843] usb 1-1: config 0 descriptor?? [ 319.008774][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4737'. [ 319.017028][ T30] audit: type=1400 audit(1752109001.161:1085): avc: denied { bind } for pid=16512 comm="syz.6.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.189764][T16527] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 319.360051][ T973] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 319.411465][ T30] audit: type=1400 audit(1752109001.571:1086): avc: denied { ioctl } for pid=16532 comm="syz.6.4745" path="socket:[57726]" dev="sockfs" ino=57726 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 319.447602][ T30] audit: type=1400 audit(1752109001.591:1087): avc: denied { write } for pid=16532 comm="syz.6.4745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 319.468978][ T30] audit: type=1400 audit(1752109001.591:1088): avc: denied { read } for pid=16532 comm="syz.6.4745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 319.525692][ T5843] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 319.538254][ T5843] usb 1-1: USB disconnect, device number 54 [ 319.554699][ T973] usb 4-1: config 7 interface 0 has no altsetting 0 [ 319.565727][ T973] usb 4-1: string descriptor 0 read error: -22 [ 319.574636][ T973] usb 4-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 319.590160][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.614369][ T973] usb 4-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 319.623891][ T973] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 319.642917][ T973] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 319.656807][ T30] audit: type=1400 audit(1752109001.811:1089): avc: denied { bind } for pid=16540 comm="syz.2.4748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 319.690342][ T973] usb 4-1: media controller created [ 319.718253][ T973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.827980][ T973] usb 4-1: USB disconnect, device number 42 [ 320.000941][T16556] syz.4.4755 (16556): /proc/16555/oom_adj is deprecated, please use /proc/16555/oom_score_adj instead. [ 320.349715][T16579] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.533995][ T30] audit: type=1400 audit(1752109002.691:1090): avc: denied { getopt } for pid=16585 comm="syz.4.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 320.772994][T16594] netlink: 'syz.6.4772': attribute type 5 has an invalid length. [ 321.980147][ T5912] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 322.161558][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.192260][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 322.215792][ T5912] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 322.235615][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.254171][ T5912] usb 4-1: config 0 descriptor?? [ 322.398979][T16667] 9pnet_fd: Insufficient options for proto=fd [ 322.480374][ T5941] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 322.640038][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 322.646753][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 322.662778][ T5941] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 322.677683][ T5912] kovaplus 0003:1E7D:2D50.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 322.690428][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.716770][ T5941] usb 3-1: config 0 descriptor?? [ 322.730111][ T5941] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input61 [ 322.938580][ T5941] bcm5974 3-1:0.0: could not read from device [ 322.952044][ T5187] bcm5974 3-1:0.0: could not read from device [ 322.969552][ T5941] input: failed to attach handler mousedev to device input61, error: -5 [ 322.983487][ T5941] usb 3-1: USB disconnect, device number 49 [ 322.986403][ T5187] bcm5974 3-1:0.0: could not read from device [ 323.074470][ T5912] kovaplus 0003:1E7D:2D50.003B: couldn't init struct kovaplus_device [ 323.082617][ T5912] kovaplus 0003:1E7D:2D50.003B: couldn't install mouse [ 323.090805][ T5912] kovaplus 0003:1E7D:2D50.003B: probe with driver kovaplus failed with error -71 [ 323.101723][ T5912] usb 4-1: USB disconnect, device number 43 [ 323.509928][ T30] audit: type=1400 audit(1752109005.661:1091): avc: denied { mount } for pid=16705 comm="syz.6.4820" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 323.722446][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4825'. [ 323.979543][ T30] audit: type=1400 audit(1752109006.131:1092): avc: denied { getopt } for pid=16729 comm="syz.2.4831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 324.003328][T16728] netlink: 'syz.6.4830': attribute type 1 has an invalid length. [ 324.011163][T16728] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4830'. [ 324.446337][T16757] netlink: 'syz.4.4844': attribute type 1 has an invalid length. [ 324.558593][ T30] audit: type=1400 audit(1752109006.711:1093): avc: denied { mount } for pid=16763 comm="syz.0.4848" name="/" dev="pstore" ino=1796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 324.616938][ T30] audit: type=1400 audit(1752109006.771:1094): avc: denied { mounton } for pid=16769 comm="syz.4.4851" path="/969/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 324.651976][ T30] audit: type=1400 audit(1752109006.801:1095): avc: denied { remount } for pid=16769 comm="syz.4.4851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 324.814736][T16782] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4857'. [ 324.886243][T16784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.894527][T16784] bond1: entered promiscuous mode [ 324.899704][T16784] bond1: entered allmulticast mode [ 324.907404][T16784] bond0: (slave bond1): Enslaving as an active interface with an up link [ 325.126135][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4866'. [ 325.340204][ T5941] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 325.501084][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 325.522081][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.545371][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.575659][ T5941] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 325.599320][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.623393][ T5941] usb 5-1: config 0 descriptor?? [ 326.057992][ T5941] hid-picolcd 0003:04D8:F002.003C: unknown main item tag 0x0 [ 326.109054][ T30] audit: type=1800 audit(1752109008.261:1096): pid=16839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4883" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 326.131765][ T5941] hid-picolcd 0003:04D8:F002.003C: No report with id 0xf4 found [ 326.139455][ T5941] hid-picolcd 0003:04D8:F002.003C: No report with id 0xf3 found [ 326.260921][ T5941] usb 5-1: USB disconnect, device number 51 [ 326.337042][T16850] netlink: 'syz.2.4890': attribute type 1 has an invalid length. [ 326.369655][T16850] netlink: 75 bytes leftover after parsing attributes in process `syz.2.4890'. [ 326.632066][T16863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4894'. [ 326.830579][T16876] 9pnet_fd: Insufficient options for proto=fd [ 326.972087][ T30] audit: type=1400 audit(1752109009.121:1097): avc: denied { map } for pid=16879 comm="syz.2.4900" path="socket:[59426]" dev="sockfs" ino=59426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 327.197185][T16895] bond0: left allmulticast mode [ 327.202796][T16895] bond_slave_0: left allmulticast mode [ 327.208785][T16895] bond_slave_1: left allmulticast mode [ 327.214635][T16895] bond1: left allmulticast mode [ 328.079649][T16932] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4924'. [ 328.175268][T16938] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 328.191417][T12815] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 328.360106][T12815] usb 5-1: Using ep0 maxpacket: 32 [ 328.366801][T12815] usb 5-1: config index 0 descriptor too short (expected 6683, got 27) [ 328.376403][T16946] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4931'. [ 328.385782][T12815] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 328.394185][T12815] usb 5-1: config 0 has no interface number 0 [ 328.404325][T12815] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.415524][T16946] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4931'. [ 328.431231][T12815] usb 5-1: config 0 interface 85 has no altsetting 0 [ 328.451552][T12815] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 328.470077][T12815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.484826][T12815] usb 5-1: Product: syz [ 328.489095][T12815] usb 5-1: Manufacturer: syz [ 328.497758][T12815] usb 5-1: SerialNumber: syz [ 328.509565][T12815] usb 5-1: config 0 descriptor?? [ 328.546955][T16958] netem: incorrect gi model size [ 328.552901][T16958] netem: change failed [ 328.590063][ T973] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 328.754861][ T973] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 328.776405][ T973] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 328.786418][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 328.810058][ T973] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 328.829381][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.852667][T16948] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 328.864779][ T973] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 328.960035][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 328.962284][ T10] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 328.962308][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.962326][ T10] usb 4-1: config 0 has no interface number 0 [ 328.962359][ T10] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 328.962401][ T10] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.971858][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 328.971885][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.971904][ T10] usb 4-1: Product: syz [ 328.971939][ T10] usb 4-1: Manufacturer: syz [ 328.971954][ T10] usb 4-1: SerialNumber: syz [ 328.974515][ T10] usb 4-1: config 0 descriptor?? [ 328.986256][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 329.013170][ T10] snd-usb-audio 4-1:0.16: probe with driver snd-usb-audio failed with error -2 [ 329.086192][ T10] usb 3-1: USB disconnect, device number 50 [ 329.125489][T12815] appletouch 5-1:0.85: Geyser mode initialized. [ 329.214102][T13074] usb 4-1: USB disconnect, device number 44 [ 329.221448][T12815] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input62 [ 329.370416][ T10] usb 5-1: USB disconnect, device number 52 [ 329.389268][ T10] appletouch 5-1:0.85: input: appletouch disconnected [ 330.330540][T13074] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 330.510859][T13074] usb 3-1: Using ep0 maxpacket: 8 [ 330.522899][T13074] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 330.541213][T13074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.558163][T13074] usb 3-1: Product: syz [ 330.570148][T13074] usb 3-1: Manufacturer: syz [ 330.577597][T13074] usb 3-1: SerialNumber: syz [ 330.600825][T13074] usb 3-1: config 0 descriptor?? [ 330.626926][T13074] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 330.649381][T13074] usb 3-1: setting power ON [ 330.654041][T13074] dvb-usb: bulk message failed: -22 (2/0) [ 330.672064][T13074] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 330.692842][T13074] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 330.705257][T13074] usb 3-1: media controller created [ 330.729841][T13074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.828113][T13074] usb 3-1: selecting invalid altsetting 6 [ 330.850491][T13074] usb 3-1: digital interface selection failed (-22) [ 330.857143][T13074] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 330.857160][T17020] dvb-usb: bulk message failed: -22 (4/0) [ 330.892759][T13074] usb 3-1: setting power OFF [ 330.905844][T13074] dvb-usb: bulk message failed: -22 (2/0) [ 330.913376][T13074] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 330.927282][T13074] (NULL device *): no alternate interface [ 330.931535][T17049] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4980'. [ 330.975901][T17049] netem: invalid attributes len -4 [ 330.984292][T13074] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 330.994333][T17049] netem: change failed [ 331.019274][T13074] usb 3-1: USB disconnect, device number 51 [ 331.025593][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4983'. [ 331.275931][ T30] audit: type=1400 audit(1752109013.431:1098): avc: denied { remount } for pid=17072 comm="syz.4.4992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 331.542169][T17092] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 331.730031][ T5843] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 331.818384][T17109] openvswitch: netlink: IP tunnel TTL not specified. [ 331.884904][ T5843] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.907187][ T5843] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.926533][ T5843] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.946574][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.955055][ T5843] usb 7-1: SerialNumber: syz [ 331.965056][ T30] audit: type=1400 audit(1752109014.121:1099): avc: denied { bind } for pid=17114 comm="syz.0.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 332.190539][ T5843] usb 7-1: 0:2 : does not exist [ 332.212950][ T5843] usb 7-1: USB disconnect, device number 24 [ 332.310197][T13074] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 332.327924][T17129] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5018'. [ 332.531854][T13074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 332.560009][T13074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.569781][T13074] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 332.611420][T13074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.675037][T13074] usb 3-1: config 0 descriptor?? [ 332.750496][T12815] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 332.912518][T12815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 332.924300][T12815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.934200][T12815] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 332.943338][T12815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.953600][T12815] usb 5-1: config 0 descriptor?? [ 333.102170][T13074] bigben 0003:146B:0902.003D: unexpected rdesc, please submit for review [ 333.120742][ T973] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 333.130482][T13074] bigben 0003:146B:0902.003D: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 333.170097][T13074] bigben 0003:146B:0902.003D: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 333.179360][T13074] bigben 0003:146B:0902.003D: no output report found [ 333.280345][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 333.298690][ T973] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 333.313345][ T973] usb 4-1: config 0 has no interface number 0 [ 333.324097][ T973] usb 4-1: config 0 interface 184 has no altsetting 0 [ 333.334867][ T973] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 333.347694][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.352631][T13074] usb 3-1: USB disconnect, device number 52 [ 333.356415][ T973] usb 4-1: Product: syz [ 333.366978][ T973] usb 4-1: Manufacturer: syz [ 333.383563][T12815] savu 0003:1E7D:2D5A.003E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 333.399381][ T973] usb 4-1: SerialNumber: syz [ 333.406379][ T973] usb 4-1: config 0 descriptor?? [ 333.415235][ T973] smsc75xx v1.0.0 [ 333.419019][ T973] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 333.429494][ T973] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 333.558803][T17176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.560912][T17177] netlink: 566 bytes leftover after parsing attributes in process `syz.0.5040'. [ 333.643579][ T973] usb 5-1: USB disconnect, device number 53 [ 333.672042][ T10] usb 4-1: USB disconnect, device number 45 [ 334.209435][ T30] audit: type=1400 audit(1752109016.361:1100): avc: denied { listen } for pid=17204 comm="syz.0.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 334.314968][ T30] audit: type=1326 audit(1752109016.451:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c498e929 code=0x7fc00000 [ 334.352021][ T30] audit: type=1326 audit(1752109016.451:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5c498e929 code=0x7fc00000 [ 334.395158][ T30] audit: type=1326 audit(1752109016.451:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c498e929 code=0x7fc00000 [ 334.461284][ T30] audit: type=1326 audit(1752109016.451:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c498e929 code=0x7fc00000 [ 334.485183][T17218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.566174][ T30] audit: type=1326 audit(1752109016.451:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c498e929 code=0x7fc00000 [ 334.648819][ T30] audit: type=1326 audit(1752109016.451:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c498e929 code=0x7fc00000 [ 334.675417][ T30] audit: type=1326 audit(1752109016.451:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c498e929 code=0x7fc00000 [ 335.434247][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5083'. [ 335.460571][T17273] chnl_net:caif_netlink_parms(): no params data found [ 335.904159][T17293] loop2: detected capacity change from 0 to 7 [ 335.917139][T17293] Dev loop2: unable to read RDB block 7 [ 335.930149][T17293] loop2: AHDI p1 p2 p3 [ 335.940031][T17293] loop2: partition table partially beyond EOD, truncated [ 335.951151][T17293] loop2: p1 start 1601398130 is beyond EOD, truncated [ 335.968139][T17293] loop2: p2 start 1702059890 is beyond EOD, truncated [ 336.015236][T17299] 9pnet_fd: Insufficient options for proto=fd [ 336.980333][ T10] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 337.141390][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.160044][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 337.177676][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 337.197609][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 337.217761][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 337.227372][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 337.239504][ T10] usb 4-1: Manufacturer: syz [ 337.250086][ T10] usb 4-1: config 0 descriptor?? [ 337.366694][T12815] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 337.533693][T12815] usb 5-1: Using ep0 maxpacket: 16 [ 337.550136][ T10] rc_core: IR keymap rc-hauppauge not found [ 337.571569][ T10] Registered IR keymap rc-empty [ 337.577106][T12815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.598876][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 337.608609][T12815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.633901][T12815] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 337.647080][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 337.657104][T12815] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 337.664869][T17377] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 337.679355][T12815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.688159][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 337.707416][T12815] usb 5-1: config 0 descriptor?? [ 337.711239][T17380] input: syz1 as /devices/virtual/input/input64 [ 337.713639][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input63 [ 337.752454][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 337.791805][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 337.810372][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 337.830428][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 337.850358][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 337.870338][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 337.890143][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 337.912241][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 337.930150][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 337.956936][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 338.001856][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 338.021897][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 338.048795][ T10] usb 4-1: USB disconnect, device number 46 [ 338.169140][T12815] HID 045e:07da: Invalid code 65791 type 1 [ 338.194990][T12815] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.003F/input/input65 [ 338.247078][T12815] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 338.476759][ T5912] usb 5-1: USB disconnect, device number 54 [ 339.329284][T17451] 9pnet_fd: Insufficient options for proto=fd [ 339.545286][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 339.545302][ T30] audit: type=1326 audit(1752109021.701:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17457 comm="syz.6.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c498e929 code=0x7fc00000 [ 340.185502][T17502] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5181'. [ 340.223145][ T30] audit: type=1326 audit(1752109022.381:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17457 comm="syz.6.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5c498e929 code=0x7fc00000 [ 340.301224][T13074] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 340.454717][T17517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5188'. [ 340.466767][T13074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.484851][T13074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.495466][T13074] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 340.512201][T13074] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.523213][T13074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.561859][T13074] usb 3-1: config 0 descriptor?? [ 340.778232][ T30] audit: type=1400 audit(1752109022.931:1127): avc: denied { write } for pid=17535 comm="syz.6.5197" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 341.007759][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.026951][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.050320][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.064496][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.072433][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.079884][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.087549][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.113148][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.122324][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.129749][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.139524][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.148782][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.158952][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.168883][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.178357][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.199922][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.209005][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.217586][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.233423][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.242669][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.259314][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.274690][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.307441][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.329911][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.357948][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.388156][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.426967][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.467027][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.480474][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.487883][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.513488][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.529045][T13074] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 341.545101][T17556] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 341.557166][T17556] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 341.565572][T17556] CPU: 1 UID: 0 PID: 17556 Comm: syz.0.5205 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 341.575899][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.585958][T17556] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 341.592914][T17556] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 341.612524][T17556] RSP: 0018:ffffc9000fc87300 EFLAGS: 00010202 [ 341.618591][T17556] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc900049e2000 [ 341.626549][T17556] RDX: 000000000000000b RSI: ffffffff89931e9c RDI: 0000000000000058 [ 341.634507][T17556] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 341.642467][T17556] R10: 00000000000a0009 R11: 0000000000000001 R12: ffffffff8ce8ce60 [ 341.650435][T17556] R13: 0000000000000058 R14: ffffffff8ce8ce40 R15: ffff888054b37000 [ 341.658406][T17556] FS: 00007f55221cd6c0(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 341.667330][T17556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.673908][T17556] CR2: 0000200000000240 CR3: 000000004213e000 CR4: 00000000003526f0 [ 341.681875][T17556] Call Trace: [ 341.685145][T17556] [ 341.688152][T17556] drr_qlen_notify+0x24/0x150 [ 341.692837][T17556] qdisc_tree_reduce_backlog+0x221/0x500 [ 341.698459][T17556] hhf_change+0x892/0xde0 [ 341.702783][T17556] ? __pfx_hhf_change+0x10/0x10 [ 341.707624][T17556] ? __pfx_qdisc_get_stab+0x10/0x10 [ 341.712821][T17556] hhf_init+0x2f1/0x8c0 [ 341.716974][T17556] ? __pfx_hhf_init+0x10/0x10 [ 341.721642][T17556] qdisc_create+0x457/0xfc0 [ 341.726135][T17556] tc_modify_qdisc+0x12bb/0x2130 [ 341.731075][T17556] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 341.736363][T17556] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 341.741636][T17556] rtnetlink_rcv_msg+0x3c9/0xe90 [ 341.746563][T17556] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.752015][T17556] ? __lock_acquire+0x622/0x1c90 [ 341.756943][T17556] netlink_rcv_skb+0x155/0x420 [ 341.761699][T17556] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.767160][T17556] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 341.772436][T17556] ? netlink_deliver_tap+0x1ae/0xd30 [ 341.777721][T17556] ? is_vmalloc_addr+0x86/0xa0 [ 341.782476][T17556] netlink_unicast+0x53a/0x7f0 [ 341.787259][T17556] ? __pfx_netlink_unicast+0x10/0x10 [ 341.792531][T17556] netlink_sendmsg+0x8d1/0xdd0 [ 341.797290][T17556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.802564][T17556] ____sys_sendmsg+0xa95/0xc70 [ 341.807312][T17556] ? copy_msghdr_from_user+0x10a/0x160 [ 341.812759][T17556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.818027][T17556] ? __pfx_futex_wake_mark+0x10/0x10 [ 341.823298][T17556] ___sys_sendmsg+0x134/0x1d0 [ 341.827977][T17556] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.833163][T17556] ? __lock_acquire+0x622/0x1c90 [ 341.838094][T17556] __sys_sendmsg+0x16d/0x220 [ 341.842672][T17556] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.847773][T17556] ? __x64_sys_futex+0x1e0/0x4c0 [ 341.852706][T17556] do_syscall_64+0xcd/0x4c0 [ 341.857206][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.863094][T17556] RIP: 0033:0x7f552138e929 [ 341.867494][T17556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.887087][T17556] RSP: 002b:00007f55221cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.895483][T17556] RAX: ffffffffffffffda RBX: 00007f55215b5fa0 RCX: 00007f552138e929 [ 341.903439][T17556] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 341.911395][T17556] RBP: 00007f5521410b39 R08: 0000000000000000 R09: 0000000000000000 [ 341.919348][T17556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.927300][T17556] R13: 0000000000000000 R14: 00007f55215b5fa0 R15: 00007ffda15cde78 [ 341.935260][T17556] [ 341.938261][T17556] Modules linked in: [ 341.942186][T17556] ---[ end trace 0000000000000000 ]--- [ 341.947638][T17556] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 341.954613][T17556] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 341.974250][T17556] RSP: 0018:ffffc9000fc87300 EFLAGS: 00010202 [ 341.980334][T17556] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc900049e2000 [ 341.988287][T17556] RDX: 000000000000000b RSI: ffffffff89931e9c RDI: 0000000000000058 [ 341.996276][T17556] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 342.004339][T17556] R10: 00000000000a0009 R11: 0000000000000001 R12: ffffffff8ce8ce60 [ 342.012300][T17556] R13: 0000000000000058 R14: ffffffff8ce8ce40 R15: ffff888054b37000 [ 342.020276][T17556] FS: 00007f55221cd6c0(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 342.029306][T17556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.035918][T17556] CR2: 0000200000000240 CR3: 000000004213e000 CR4: 00000000003526f0 [ 342.043913][T17556] Kernel panic - not syncing: Fatal exception in interrupt [ 342.051278][T17556] Kernel Offset: disabled [ 342.055581][T17556] Rebooting in 86400 seconds..