last executing test programs: 9.438061838s ago: executing program 0 (id=1682): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0xf, 0x6e, "0240cc30dc10efdb7aaf63cda8c15180fd798cf3c766ff825d44cb09e22534411b5672bd193be764580d28810527a6120d7e61ede394b4fa004ba49548007a5fa4bc593ba03d12f920e83739fced64b47a30f66ff216c47e5375b3ae2aafbfdbc6f04852fb96cc38aa036bd1a3f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 7.580404831s ago: executing program 3 (id=1692): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6", 0xa8, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000001010902240001000000000904000002ffffff0009"], 0x0) 6.333491032s ago: executing program 0 (id=1697): mkdirat(0xffffffffffffff9c, 0x0, 0x100) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x600c000) 6.228704009s ago: executing program 3 (id=1699): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) 5.454891453s ago: executing program 0 (id=1700): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080), 0x18) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}, 0x1, 0x0, 0x0, 0x480}, 0xee) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)=0x455853c1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="fa", 0x7ff}], 0x3e}}], 0x1, 0xc081) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) ioctl$VT_DISALLOCATE(r5, 0x5608) 4.725195154s ago: executing program 0 (id=1703): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.62745063s ago: executing program 3 (id=1704): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) userfaultfd(0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x305e, 0x0, &(0x7f0000000080), &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.872074036s ago: executing program 3 (id=1710): mkdirat(0xffffffffffffff9c, 0x0, 0x100) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x600c000) 3.153761968s ago: executing program 4 (id=1718): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read(r0, &(0x7f0000000380)=""/114, 0x72) 3.152906573s ago: executing program 2 (id=1719): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x840) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES8=r3], 0x1c}}, 0x0) socket$kcm(0x29, 0x4, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x70bd26, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 2.993824944s ago: executing program 3 (id=1720): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfe5d, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000280), 0x3, 0x389001) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x1ff}, {0x1, 0x9}, {0x9, 0x900}, {0x4, 0x2}, {0xd, 0x9}, {0xd, 0x5}, {0xb, 0x6481}, {0x4, 0xfffffff9}, {0xf, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28) 2.438033563s ago: executing program 1 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a80), 0x100, 0x0) read$FUSE(r2, &(0x7f0000002ac0)={0x2020}, 0x2020) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000440), 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) linkat(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1400) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) 2.160349799s ago: executing program 4 (id=1722): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000003000)={[{0x0, 0x0, 0x1, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.099713428s ago: executing program 2 (id=1723): write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002580)=ANY=[@ANYBLOB="040fdb3eed0408"], 0x7) 2.080222883s ago: executing program 1 (id=1724): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffdaf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.080094416s ago: executing program 4 (id=1725): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.004510301s ago: executing program 2 (id=1726): setxattr$security_capability(&(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000500)=@v1={0x1000000, [{0xa6b5, 0xa}]}, 0xc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 1.894059639s ago: executing program 1 (id=1727): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf68e, 0x10100, 0x0, 0x356}, &(0x7f00000008c0)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x70a, 0x41e3, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/247, 0xf7}], 0x1}, 0x3}], 0x1, 0x40010020, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) 1.885532128s ago: executing program 2 (id=1728): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0xc0145b0d, &(0x7f0000000040)) 1.64040361s ago: executing program 0 (id=1729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.640098289s ago: executing program 2 (id=1730): mkdirat(0xffffffffffffff9c, 0x0, 0x100) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x600c000) 1.199206757s ago: executing program 0 (id=1731): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6", 0xa8, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000001010902240001000000000904000002ffffff000905"], 0x0) 1.044657177s ago: executing program 4 (id=1732): socket(0x28, 0x5, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) rt_tgsigqueueinfo(0x0, 0x0, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 966.626685ms ago: executing program 1 (id=1733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYBLOB="08002600940900000400b8400800b7"], 0x30}}, 0x0) 938.397493ms ago: executing program 1 (id=1734): r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 604.252392ms ago: executing program 2 (id=1735): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x840) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES8=r2], 0x1c}}, 0x0) socket$kcm(0x29, 0x4, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x70bd26, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 466.193903ms ago: executing program 3 (id=1736): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x76de, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x10}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xb, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 170.928424ms ago: executing program 4 (id=1737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300", @ANYBLOB="08002600940900000400b8400800b7"], 0x30}}, 0x0) 111.042213ms ago: executing program 4 (id=1738): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffdaf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=1739): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x11}}], 0x1, 0x24008094) kernel console output (not intermixed with test programs): 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 121.334304][ T1164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.347562][ T1164] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 121.370990][ T1164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.379233][ T1164] usb 2-1: Product: syz [ 121.383454][ T1164] usb 2-1: Manufacturer: syz [ 121.388322][ T1164] usb 2-1: SerialNumber: syz [ 121.404969][ T1164] usb 2-1: config 0 descriptor?? [ 121.446045][ T1164] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.514657][ T1164] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 122.210516][ T1164] em28xx 2-1:0.0: chip ID is em28178 [ 122.256132][ T7241] blktrace: Concurrent blktraces are not allowed on loop3 [ 122.270448][ T7244] netlink: 68 bytes leftover after parsing attributes in process `syz.3.458'. [ 122.465568][ T7253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.456'. [ 122.513007][ T5901] usb 2-1: USB disconnect, device number 10 [ 122.589544][ T5901] em28xx 2-1:0.0: Disconnecting em28xx [ 122.687660][ T5901] em28xx 2-1:0.0: Freeing device [ 122.874088][ T7261] 9pnet_fd: Insufficient options for proto=fd [ 123.871011][ T7278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.469'. [ 123.894700][ T30] audit: type=1400 audit(1755636659.416:271): avc: denied { read } for pid=7274 comm="syz.3.469" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.974859][ T30] audit: type=1400 audit(1755636659.416:272): avc: denied { open } for pid=7274 comm="syz.3.469" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 124.039385][ T30] audit: type=1400 audit(1755636659.416:273): avc: denied { ioctl } for pid=7274 comm="syz.3.469" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 124.232508][ T30] audit: type=1400 audit(1755636659.416:274): avc: denied { map } for pid=7274 comm="syz.3.469" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 124.256059][ T30] audit: type=1400 audit(1755636659.416:275): avc: denied { execute } for pid=7274 comm="syz.3.469" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.348585][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 125.393959][ T5901] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.555147][ T5901] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.566484][ T5901] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.610973][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.638144][ T5901] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 125.704699][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.738374][ T5901] usb 5-1: config 0 descriptor?? [ 125.829222][ T7312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.481'. [ 126.267557][ T5901] zeroplus 0003:0C12:0005.0001: unknown main item tag 0x0 [ 126.300529][ T5901] zeroplus 0003:0C12:0005.0001: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0 [ 126.357050][ T5901] zeroplus 0003:0C12:0005.0001: no inputs found [ 126.522811][ T1164] usb 5-1: USB disconnect, device number 6 [ 126.968940][ T30] audit: type=1400 audit(1755636662.506:276): avc: denied { read write } for pid=7332 comm="syz.3.488" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 126.973118][ T5923] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.995066][ T30] audit: type=1400 audit(1755636662.506:277): avc: denied { open } for pid=7332 comm="syz.3.488" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 127.149830][ T5923] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.383349][ T7343] overlayfs: workdir and upperdir must reside under the same mount [ 127.474166][ T7344] random: crng reseeded on system resumption [ 128.068136][ T7352] 9pnet_fd: Insufficient options for proto=fd [ 128.736388][ T7377] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 128.744228][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.751775][ T7377] netlink: 224 bytes leftover after parsing attributes in process `syz.2.506'. [ 128.832480][ T30] audit: type=1400 audit(1755636664.366:278): avc: denied { write } for pid=7382 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.880064][ T7385] kAFS: No cell specified [ 128.885804][ T7385] overlayfs: overlapping lowerdir path [ 128.906474][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.926829][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.946848][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.960654][ T10] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 128.986370][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.998584][ T10] usb 4-1: config 0 descriptor?? [ 129.427146][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 129.433189][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 129.445727][ T10] usb 4-1: USB disconnect, device number 3 [ 129.630641][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 129.713434][ T7422] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.725095][ T30] audit: type=1400 audit(1755636665.246:279): avc: denied { append } for pid=7417 comm="syz.1.522" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 130.563765][ T30] audit: type=1400 audit(1755636666.096:280): avc: denied { open } for pid=7438 comm="syz.1.529" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 130.588680][ T7436] blktrace: Concurrent blktraces are not allowed on loop3 [ 130.601243][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 131.069248][ T30] audit: type=1800 audit(1755636666.536:281): pid=7450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.529" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 131.371657][ T7458] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.158889][ T30] audit: type=1400 audit(1755636667.696:282): avc: denied { bind } for pid=7453 comm="syz.3.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.191316][ T30] audit: type=1400 audit(1755636667.696:283): avc: denied { write } for pid=7453 comm="syz.3.534" path="socket:[14940]" dev="sockfs" ino=14940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.369439][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.385184][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.665748][ T7482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.541'. [ 132.834094][ T1164] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.895743][ T7492] random: crng reseeded on system resumption [ 133.544662][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 133.570585][ T1164] usb 4-1: config 1 has an invalid interface number: 5 but max is 2 [ 133.578865][ T1164] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.606696][ T1164] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.617908][ T1164] usb 4-1: config 1 has no interface number 1 [ 133.629158][ T1164] usb 4-1: config 1 interface 5 has no altsetting 0 [ 133.637212][ T1164] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.646830][ T1164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 133.656116][ T1164] usb 4-1: SerialNumber: syz [ 134.170858][ T1164] usb 4-1: 0:2 : does not exist [ 134.176099][ T1164] usb 4-1: unit 5 not found! [ 134.209189][ T1164] usb 4-1: USB disconnect, device number 4 [ 135.449235][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 135.941318][ T7546] netlink: 'syz.0.568': attribute type 1 has an invalid length. [ 135.993963][ T7546] netlink: 224 bytes leftover after parsing attributes in process `syz.0.568'. [ 138.042466][ T7590] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 138.051347][ T7590] netlink: 224 bytes leftover after parsing attributes in process `syz.2.582'. [ 138.331894][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 138.911650][ T7619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.595'. [ 139.245015][ T1164] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.441857][ T1164] usb 3-1: Using ep0 maxpacket: 32 [ 139.465799][ T1164] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 139.500186][ T1164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.535853][ T1164] usb 3-1: Product: syz [ 139.540029][ T1164] usb 3-1: Manufacturer: syz [ 139.548393][ T1164] usb 3-1: SerialNumber: syz [ 139.554946][ T1164] usb 3-1: config 0 descriptor?? [ 139.562266][ T1164] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 140.443397][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.608'. [ 141.661132][ T1164] gspca_ov534_9: sccb_read failed 1 [ 141.861522][ T1164] gspca_ov534_9: reg_w failed -71 [ 141.903063][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 142.302183][ T1164] gspca_ov534_9: Unknown sensor 0000 [ 142.302223][ T1164] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 142.637008][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.746404][ T1164] usb 3-1: USB disconnect, device number 3 [ 142.903954][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 142.915052][ T10] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 142.925714][ T10] usb 4-1: config 0 has no interface number 0 [ 142.932730][ T10] usb 4-1: config 0 interface 252 has no altsetting 0 [ 142.941393][ T10] usb 4-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=99.89 [ 142.950477][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.004870][ T10] usb 4-1: Product: syz [ 143.009741][ T10] usb 4-1: Manufacturer: syz [ 143.014354][ T10] usb 4-1: SerialNumber: syz [ 143.030777][ T10] usb 4-1: config 0 descriptor?? [ 143.074004][ T5963] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 143.131074][ T7713] netlink: 68 bytes leftover after parsing attributes in process `syz.1.627'. [ 143.341136][ T10] f81232 4-1:0.252: f81232 converter detected [ 143.589389][ T5895] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.597458][ T10] usb 4-1: f81232 converter now attached to ttyUSB0 [ 143.605064][ T10] usb 4-1: USB disconnect, device number 5 [ 143.615263][ T10] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 143.624040][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 143.629608][ T10] f81232 4-1:0.252: device disconnected [ 143.635734][ T5963] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 143.644547][ T5963] usb 5-1: config 0 has no interface number 0 [ 143.652687][ T5963] usb 5-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.729774][ T5963] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 143.739649][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.743948][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 143.747775][ T5963] usb 5-1: Product: syz [ 143.757321][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.784027][ T5963] usb 5-1: Manufacturer: syz [ 143.784705][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.788680][ T5963] usb 5-1: SerialNumber: syz [ 143.814143][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 143.857203][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 143.872372][ T5895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 143.883385][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 143.893733][ T5963] usb 5-1: config 0 descriptor?? [ 143.921569][ T5895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 143.934008][ T5895] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 143.943201][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.953155][ T5895] usb 3-1: Product: syz [ 143.957611][ T5895] usb 3-1: Manufacturer: syz [ 143.962263][ T5895] usb 3-1: SerialNumber: syz [ 143.981421][ T5895] usb 3-1: config 0 descriptor?? [ 143.987557][ T7715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.989151][ T30] audit: type=1400 audit(1755636679.526:284): avc: denied { mount } for pid=7718 comm="syz.3.631" name="/" dev="autofs" ino=16805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 143.997383][ T5895] usb 3-1: NFC: Reader power on cmd error -90 [ 144.023130][ T5895] pn533_usb 3-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 144.035651][ T5895] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 144.136307][ T30] audit: type=1400 audit(1755636679.676:285): avc: denied { ioctl } for pid=7704 comm="syz.4.626" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.173870][ T30] audit: type=1400 audit(1755636679.706:286): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 144.619578][ T5895] usb 3-1: USB disconnect, device number 4 [ 144.697635][ T30] audit: type=1400 audit(1755636680.236:287): avc: denied { read write } for pid=7731 comm="syz.0.635" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.722309][ T30] audit: type=1400 audit(1755636680.236:288): avc: denied { open } for pid=7731 comm="syz.0.635" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.985116][ T30] audit: type=1400 audit(1755636680.526:289): avc: denied { mounton } for pid=7734 comm="syz.3.636" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.923527][ T30] audit: type=1400 audit(1755636680.556:290): avc: denied { append } for pid=7734 comm="syz.3.636" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.004030][ T7736] comedi comedi2: reset error (fatal) [ 146.092944][ T5963] usb 5-1: USB disconnect, device number 7 [ 146.232326][ T7749] 9pnet_fd: Insufficient options for proto=fd [ 146.599774][ T7781] netlink: 1224 bytes leftover after parsing attributes in process `syz.2.656'. [ 146.973931][ T5963] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.183985][ T5963] usb 3-1: Using ep0 maxpacket: 32 [ 147.191068][ T5963] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.205856][ T5963] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.217552][ T5963] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 147.229251][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 147.241099][ T5963] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 147.252700][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 147.263170][ T5963] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 147.275289][ T5963] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 147.285490][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.293592][ T5963] usb 3-1: Product: syz [ 147.298657][ T5963] usb 3-1: Manufacturer: syz [ 147.303322][ T5963] usb 3-1: SerialNumber: syz [ 147.311068][ T5963] usb 3-1: config 0 descriptor?? [ 147.319474][ T7790] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 147.327603][ T5963] usb 3-1: NFC: Reader power on cmd error -90 [ 147.334865][ T5963] pn533_usb 3-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 147.342810][ T5963] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 147.536107][ T5963] usb 3-1: USB disconnect, device number 5 [ 147.800088][ T7812] binder: 7809:7812 ioctl c0306201 0 returned -14 [ 147.815527][ T7815] netlink: 1224 bytes leftover after parsing attributes in process `syz.1.669'. [ 147.989618][ T7818] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 148.937146][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 149.529183][ T30] audit: type=1400 audit(1755636685.066:291): avc: denied { write } for pid=7860 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 149.539544][ T7863] overlayfs: missing 'lowerdir' [ 149.654051][ T5901] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 149.695415][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 149.824017][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 149.831042][ T5901] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 149.844753][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.858831][ T5901] usb 4-1: config 0 descriptor?? [ 149.965018][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.692'. [ 150.117505][ T5901] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 150.962797][ T7898] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 152.150869][ T7936] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 152.171514][ T7936] netlink: 224 bytes leftover after parsing attributes in process `syz.0.716'. [ 152.268045][ T7943] netlink: 136 bytes leftover after parsing attributes in process `syz.2.720'. [ 152.289841][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.715'. [ 152.435235][ T5901] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 152.475138][ T5901] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 152.498529][ T5901] asix 4-1:0.0: probe with driver asix failed with error -71 [ 152.605154][ T5901] usb 4-1: USB disconnect, device number 6 [ 152.617378][ T30] audit: type=1400 audit(1755636688.156:292): avc: denied { name_bind } for pid=7956 comm="syz.0.725" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 153.147081][ T30] audit: type=1400 audit(1755636688.686:293): avc: denied { setattr } for pid=7961 comm="syz.4.727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 153.922613][ T5859] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 153.922768][ T5859] Bluetooth: hci3: Unknown advertising packet type: 0x72 [ 153.964172][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 154.067043][ T5859] Bluetooth: hci3: Malformed LE Event: 0x0d [ 154.667986][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.737'. [ 155.177513][ T8021] overlayfs: failed to resolve './file1': -2 [ 155.374268][ T8028] 9pnet_fd: Insufficient options for proto=fd [ 155.810476][ T30] audit: type=1400 audit(1755636690.856:294): avc: denied { listen } for pid=8025 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 155.929441][ T30] audit: type=1400 audit(1755636690.906:295): avc: denied { mounton } for pid=8025 comm="syz.3.746" path="/146/file0" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.994583][ T8034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.748'. [ 156.651765][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 156.873946][ T8055] overlayfs: failed to resolve './file1': -2 [ 156.881326][ T8054] overlay: Unknown parameter '/' [ 157.764399][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 157.781876][ T8066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.760'. [ 158.274393][ T8084] overlayfs: failed to resolve './file1': -2 [ 158.356287][ T8087] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.769'. [ 158.387447][ T8088] netlink: 60 bytes leftover after parsing attributes in process `syz.4.765'. [ 158.454100][ T5963] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 158.623999][ T5963] usb 2-1: Using ep0 maxpacket: 32 [ 158.641904][ T5963] usb 2-1: config 0 has no interfaces? [ 158.659480][ T5963] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 158.687283][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.697283][ T5963] usb 2-1: Product: syz [ 158.701476][ T5963] usb 2-1: Manufacturer: syz [ 158.706327][ T5963] usb 2-1: SerialNumber: syz [ 158.724246][ T5963] usb 2-1: config 0 descriptor?? [ 158.833008][ T30] audit: type=1400 audit(1755636694.366:296): avc: denied { write } for pid=8100 comm="syz.0.775" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 159.299411][ T5963] usb 2-1: USB disconnect, device number 11 [ 160.902181][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.782'. [ 161.164989][ T8141] overlayfs: failed to resolve './file0': -2 [ 161.496078][ T8153] 9pnet: Could not find request transport: fd0x0000000000000005 [ 163.681357][ T8199] netlink: 'syz.2.806': attribute type 1 has an invalid length. [ 163.691252][ T8199] netlink: 224 bytes leftover after parsing attributes in process `syz.2.806'. [ 164.273971][ T5895] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 164.524037][ T5895] usb 2-1: device descriptor read/64, error -71 [ 164.533325][ T5923] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.755460][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.766425][ T5923] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 164.776461][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.795953][ T5923] usb 3-1: config 0 descriptor?? [ 164.807263][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 164.834656][ T5895] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 164.983990][ T5895] usb 2-1: device descriptor read/64, error -71 [ 165.104274][ T5895] usb usb2-port1: attempt power cycle [ 165.255003][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 165.273527][ T5923] pwc: recv_control_msg error -32 req 02 val 2700 [ 165.280872][ T5923] pwc: recv_control_msg error -32 req 02 val 2c00 [ 165.316805][ T5923] pwc: recv_control_msg error -32 req 04 val 1000 [ 165.384993][ T5923] pwc: recv_control_msg error -32 req 04 val 1300 [ 165.391903][ T5923] pwc: recv_control_msg error -32 req 04 val 1400 [ 165.399905][ T5923] pwc: recv_control_msg error -32 req 02 val 2000 [ 165.407270][ T5923] pwc: recv_control_msg error -32 req 02 val 2100 [ 165.414404][ T5923] pwc: recv_control_msg error -32 req 04 val 1500 [ 165.421423][ T5923] pwc: recv_control_msg error -32 req 02 val 2500 [ 165.428817][ T5923] pwc: recv_control_msg error -32 req 02 val 2400 [ 165.436908][ T5923] pwc: recv_control_msg error -32 req 02 val 2600 [ 165.444156][ T5923] pwc: recv_control_msg error -32 req 02 val 2900 [ 165.450942][ T5923] pwc: recv_control_msg error -32 req 02 val 2800 [ 165.457406][ T5895] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 165.485161][ T5895] usb 2-1: device descriptor read/8, error -71 [ 165.667375][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 165.684832][ T5923] pwc: Registered as video103. [ 165.774160][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 165.783128][ T5859] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 165.783188][ T5859] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 165.791698][ T5859] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 165.800701][ T5859] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 165.807920][ T5859] Bluetooth: hci0: Malformed LE Event: 0x0d [ 166.022658][ T5895] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 167.089431][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 167.121107][ T5923] usb 3-1: USB disconnect, device number 6 [ 167.162199][ T5895] usb 2-1: device descriptor read/8, error -71 [ 167.183785][ T8248] netlink: 'syz.3.823': attribute type 1 has an invalid length. [ 167.192750][ T8248] netlink: 224 bytes leftover after parsing attributes in process `syz.3.823'. [ 167.276858][ T5895] usb usb2-port1: unable to enumerate USB device [ 167.323006][ T8256] overlayfs: failed to resolve './file1': -2 [ 169.013332][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.833'. [ 169.425540][ T30] audit: type=1400 audit(1755636704.956:297): avc: denied { create } for pid=8291 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.506828][ T30] audit: type=1400 audit(1755636704.956:298): avc: denied { bind } for pid=8291 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.679929][ T30] audit: type=1400 audit(1755636704.956:299): avc: denied { listen } for pid=8291 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.702377][ T8298] overlayfs: failed to resolve './file0': -2 [ 169.801614][ T30] audit: type=1400 audit(1755636704.956:300): avc: denied { connect } for pid=8291 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.850382][ T30] audit: type=1400 audit(1755636705.016:301): avc: denied { create } for pid=8291 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.449400][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 171.953301][ T8334] overlayfs: failed to resolve './file0': -2 [ 172.123487][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.014997][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 173.026174][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.034283][ T10] usb 4-1: config 0 has no interface number 0 [ 173.041897][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 173.051280][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.059721][ T10] usb 4-1: Product: syz [ 173.064416][ T10] usb 4-1: Manufacturer: syz [ 173.071735][ T10] usb 4-1: SerialNumber: syz [ 173.079836][ T10] usb 4-1: config 0 descriptor?? [ 173.088837][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 173.177822][ T8351] Bluetooth: hci5: Frame reassembly failed (-84) [ 173.191683][ T30] audit: type=1400 audit(1755636708.726:302): avc: denied { name_bind } for pid=8342 comm="syz.4.855" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 174.146550][ T8364] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.943034][ T10] gspca_spca1528: reg_r err -71 [ 174.948227][ T10] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 174.989148][ T10] usb 4-1: USB disconnect, device number 7 [ 175.024761][ T8385] netlink: 'syz.2.870': attribute type 1 has an invalid length. [ 175.032425][ T8385] netlink: 224 bytes leftover after parsing attributes in process `syz.2.870'. [ 175.233951][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 175.233989][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 175.678201][ T8395] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.008956][ T8426] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.452001][ T8434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.944794][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.891'. [ 179.194101][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 179.727070][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 179.736270][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.744387][ T10] usb 4-1: Product: syz [ 179.748960][ T10] usb 4-1: Manufacturer: syz [ 179.767231][ T10] usb 4-1: SerialNumber: syz [ 179.793521][ T10] usb 4-1: config 0 descriptor?? [ 180.058881][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 180.514033][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 180.520039][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 180.526173][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 180.532173][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 180.532198][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 181.695678][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 181.723048][ T10] usb 4-1: USB disconnect, device number 8 [ 181.884002][ T30] audit: type=1400 audit(1755636717.416:303): avc: denied { getopt } for pid=8496 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 182.343954][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 182.776632][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 182.880962][ T10] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 182.915924][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.376010][ T10] usb 3-1: Product: syz [ 183.380197][ T10] usb 3-1: Manufacturer: syz [ 183.384820][ T10] usb 3-1: SerialNumber: syz [ 183.598756][ T8532] ubi: mtd0 is already attached to ubi31 [ 183.610081][ T10] usb 3-1: selecting invalid altsetting 1 [ 183.623578][ T10] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 183.624997][ T10] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 183.679129][ T10] usb 3-1: USB disconnect, device number 7 [ 185.874776][ T8573] overlayfs: missing 'lowerdir' [ 186.403932][ T43] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 186.563999][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 186.570159][ T43] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 186.578418][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.588542][ T43] usb 2-1: config 0 has no interface number 0 [ 186.594634][ T43] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.605522][ T43] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 186.616678][ T43] usb 2-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.631740][ T43] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 186.640795][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.648798][ T43] usb 2-1: Product: syz [ 186.652942][ T43] usb 2-1: Manufacturer: syz [ 186.657526][ T43] usb 2-1: SerialNumber: syz [ 186.663299][ T43] usb 2-1: config 0 descriptor?? [ 186.669561][ T43] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 187.241274][ T8596] 9pnet_fd: Insufficient options for proto=fd [ 188.496200][ T8615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.993944][ T5895] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 189.144426][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 189.150620][ T5895] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 189.158896][ T5895] usb 4-1: config 0 has no interface number 0 [ 189.165162][ T5895] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.176634][ T5895] usb 4-1: config 0 interface 85 has no altsetting 0 [ 189.185421][ T5895] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 189.186080][ T9] usb 2-1: USB disconnect, device number 16 [ 189.196296][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.223368][ T5895] usb 4-1: Product: syz [ 189.228159][ T5895] usb 4-1: Manufacturer: syz [ 189.232846][ T5895] usb 4-1: SerialNumber: syz [ 189.239126][ T5895] usb 4-1: config 0 descriptor?? [ 189.319035][ T8628] 9pnet_fd: Insufficient options for proto=fd [ 189.623955][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 189.777023][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 189.786129][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.794143][ T9] usb 2-1: Product: syz [ 189.798325][ T9] usb 2-1: Manufacturer: syz [ 189.803452][ T9] usb 2-1: SerialNumber: syz [ 189.809279][ T9] usb 2-1: config 0 descriptor?? [ 189.862618][ T5895] appletouch 4-1:0.85: Geyser mode initialized. [ 189.869693][ T5895] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input7 [ 190.017169][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 190.081167][ T5895] usb 4-1: USB disconnect, device number 9 [ 190.097569][ T5895] appletouch 4-1:0.85: input: appletouch disconnected [ 190.403949][ T5923] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 190.553938][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 190.565595][ T5923] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 190.577946][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.586892][ T5923] usb 3-1: Product: syz [ 190.591179][ T5923] usb 3-1: Manufacturer: syz [ 190.600280][ T5923] usb 3-1: SerialNumber: syz [ 190.608618][ T5923] usb 3-1: config 0 descriptor?? [ 190.623837][ T5923] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 191.244709][ T5963] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 191.258218][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 191.277020][ T9] usb 2-1: USB disconnect, device number 17 [ 191.409599][ T5963] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 191.422696][ T5963] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 191.432319][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.442972][ T5963] usb 4-1: Product: syz [ 191.447898][ T5963] usb 4-1: Manufacturer: syz [ 191.452487][ T5963] usb 4-1: SerialNumber: syz [ 191.686951][ T5963] usb 4-1: selecting invalid altsetting 1 [ 191.714479][ T5963] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 191.714536][ T5963] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 191.732534][ T5963] usb 4-1: USB disconnect, device number 10 [ 192.660087][ T5923] gspca_ov534_9: reg_r err -71 [ 192.963918][ T5923] gspca_ov534_9: Unknown sensor 0000 [ 192.963979][ T5923] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 193.565056][ T5923] usb 3-1: USB disconnect, device number 8 [ 193.797364][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.803774][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.838591][ T8680] comedi comedi2: reset error (fatal) [ 194.781032][ T8705] overlayfs: missing 'lowerdir' [ 195.912365][ T30] audit: type=1400 audit(1755636731.446:304): avc: denied { listen } for pid=8718 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 195.932620][ T30] audit: type=1400 audit(1755636731.446:305): avc: denied { accept } for pid=8718 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.711594][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 196.718891][ T8724] Bluetooth: hci5: Frame reassembly failed (-84) [ 196.799201][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 198.279420][ T8765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1007'. [ 198.774812][ T5864] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 199.943474][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1019'. [ 199.995709][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 200.008570][ T5963] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.078317][ T8810] fido_id[8810]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.330075][ T8822] overlayfs: missing 'workdir' [ 200.978582][ T8833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1030'. [ 201.026867][ T30] audit: type=1400 audit(1755636736.566:306): avc: denied { getopt } for pid=8834 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.173968][ T5923] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 201.304009][ T5963] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.339204][ T5923] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 201.355254][ T5923] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 201.364513][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.379938][ T5923] usb 5-1: Product: syz [ 201.389562][ T5923] usb 5-1: Manufacturer: syz [ 201.394827][ T5923] usb 5-1: SerialNumber: syz [ 201.453915][ T5963] usb 3-1: Using ep0 maxpacket: 8 [ 201.460190][ T5963] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 201.468566][ T5963] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.479572][ T5963] usb 3-1: config 0 has no interface number 0 [ 201.486028][ T5963] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 201.498277][ T5963] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 201.507314][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.515311][ T5963] usb 3-1: Product: syz [ 201.519444][ T5963] usb 3-1: Manufacturer: syz [ 201.524051][ T5963] usb 3-1: SerialNumber: syz [ 201.529502][ T5963] usb 3-1: config 0 descriptor?? [ 201.537328][ T5963] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 201.603552][ T5923] usb 5-1: selecting invalid altsetting 1 [ 201.610067][ T5923] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 201.610103][ T5923] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 201.627652][ T5923] usb 5-1: USB disconnect, device number 8 [ 202.182625][ T8862] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 202.191447][ T8862] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 202.365019][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 202.369904][ T30] audit: type=1400 audit(1755636737.906:307): avc: denied { block_suspend } for pid=8866 comm="syz.4.1045" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.565376][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.723989][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 202.730221][ T43] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 202.738412][ T43] usb 4-1: config 0 has no interface number 0 [ 202.744511][ T43] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.762699][ T43] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 202.771786][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.779997][ T43] usb 4-1: Product: syz [ 202.784211][ T43] usb 4-1: Manufacturer: syz [ 202.789096][ T43] usb 4-1: SerialNumber: syz [ 202.797214][ T43] usb 4-1: config 0 descriptor?? [ 202.809538][ T43] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 202.822651][ T43] em28xx 4-1:0.132: Video interface 132 found: [ 203.145396][ T8876] overlayfs: missing 'lowerdir' [ 203.242904][ T43] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 203.276849][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 203.276871][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x5d [ 203.284077][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 203.291361][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 203.298479][ T5860] Bluetooth: hci2: Malformed LE Event: 0x0d [ 203.572569][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 203.784494][ T43] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 203.797218][ T43] em28xx 4-1:0.132: board has no eeprom [ 204.056851][ T43] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 204.064999][ T43] em28xx 4-1:0.132: analog set to bulk mode. [ 204.070999][ T5895] em28xx 4-1:0.132: Registering V4L2 extension [ 204.081167][ T5963] usb 3-1: USB disconnect, device number 9 [ 204.085153][ T43] usb 4-1: USB disconnect, device number 11 [ 204.105002][ T43] em28xx 4-1:0.132: Disconnecting em28xx [ 204.243056][ T5895] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 204.251445][ T5895] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 204.275098][ T5895] em28xx 4-1:0.132: No AC97 audio processor [ 204.300788][ T5895] usb 4-1: Decoder not found [ 204.563994][ T5895] em28xx 4-1:0.132: failed to create media graph [ 204.570461][ T5895] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 204.714437][ T5895] em28xx 4-1:0.132: Remote control support is not available for this card. [ 204.789769][ T43] em28xx 4-1:0.132: Closing input extension [ 204.848989][ T43] em28xx 4-1:0.132: Freeing device [ 205.155902][ T8913] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 205.164275][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.248203][ T8913] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 205.255890][ T8913] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 205.262710][ T8913] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 205.269885][ T8913] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 205.277999][ T8913] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 205.285301][ T8913] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 205.292875][ T8913] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 205.299840][ T8913] comedi comedi3: 8255: I/O port conflict (0x802,4) [ 205.300297][ T43] usb 4-1: device descriptor read/64, error -71 [ 205.313834][ T8913] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 205.323136][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'. [ 205.377586][ T8913] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 205.384935][ T8913] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 205.391509][ T8913] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 205.399351][ T8913] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 205.406447][ T8913] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 205.553959][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 205.700840][ T43] usb 4-1: device descriptor read/64, error -71 [ 205.821359][ T8922] binder_alloc: 8918: binder_alloc_buf, no vma [ 205.909435][ T43] usb usb4-port1: attempt power cycle [ 206.029702][ T5860] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 206.029728][ T5860] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 206.037055][ T5860] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 206.044796][ T5860] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 206.051874][ T5860] Bluetooth: hci0: Malformed LE Event: 0x0d [ 206.065873][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 206.274005][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 206.314424][ T43] usb 4-1: device descriptor read/8, error -71 [ 206.563978][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 206.594281][ T43] usb 4-1: device descriptor read/8, error -71 [ 206.663978][ T5963] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 206.704494][ T43] usb usb4-port1: unable to enumerate USB device [ 206.815901][ T5963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.828412][ T5963] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.842597][ T5963] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.849395][ T5963] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 206.859632][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.869323][ T5963] usb 2-1: config 0 descriptor?? [ 206.877253][ T5963] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 206.898595][ T30] audit: type=1400 audit(1755636742.436:308): avc: denied { setopt } for pid=8944 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.174030][ T5860] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 208.174056][ T5860] Bluetooth: hci4: Unknown advertising packet type: 0x5d [ 208.181155][ T5860] Bluetooth: hci4: Malformed LE Event: 0x0d [ 208.207630][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 209.060518][ T8987] Bluetooth: hci5: Frame reassembly failed (-84) [ 209.085803][ T3585] Bluetooth: hci5: Frame reassembly failed (-84) [ 209.481122][ T5901] usb 2-1: USB disconnect, device number 18 [ 209.637157][ T5963] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 209.770998][ T9006] overlayfs: missing 'workdir' [ 209.794094][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 210.121075][ T5963] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 210.152931][ T5963] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 210.249922][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 210.260531][ T5963] usb 4-1: Product: syz [ 210.265228][ T5963] usb 4-1: Manufacturer: syz [ 210.270059][ T5963] usb 4-1: SerialNumber: syz [ 210.276971][ T5963] usb 4-1: config 0 descriptor?? [ 210.289645][ T8994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.451501][ T5864] bt_err_ratelimited: 2 callbacks suppressed [ 210.451516][ T5864] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 210.457697][ T5864] Bluetooth: hci2: Unknown advertising packet type: 0x5d [ 210.464404][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 210.464969][ T5864] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 210.482774][ T5864] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 210.490400][ T5864] Bluetooth: hci2: Malformed LE Event: 0x0d [ 210.620161][ T5895] usb 4-1: USB disconnect, device number 16 [ 210.644753][ T9024] 9pnet_fd: Insufficient options for proto=fd [ 211.154841][ T5864] Bluetooth: hci5: command 0x1003 tx timeout [ 211.154978][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 211.466038][ T9044] ip6erspan0 speed is unknown, defaulting to 1000 [ 211.472719][ T9044] ip6erspan0 speed is unknown, defaulting to 1000 [ 211.479541][ T9044] ip6erspan0 speed is unknown, defaulting to 1000 [ 211.514844][ T9044] infiniband syz1: set active [ 211.519558][ T9044] infiniband syz1: added ip6erspan0 [ 211.526098][ T1164] ip6erspan0 speed is unknown, defaulting to 1000 [ 211.552967][ T9044] RDS/IB: syz1: added [ 211.557105][ T9044] smc: adding ib device syz1 with port count 1 [ 211.563229][ T9044] smc: ib device syz1 port 1 has pnetid [ 211.569386][ T9044] ip6erspan0 speed is unknown, defaulting to 1000 [ 211.605572][ T9044] ip6erspan0 speed is unknown, defaulting to 1000 [ 211.624715][ T1164] ip6erspan0 speed is unknown, defaulting to 1000 [ 211.655520][ T9044] ip6erspan0 speed is unknown, defaulting to 1000 [ 211.691865][ T9044] ip6erspan0 speed is unknown, defaulting to 1000 [ 211.728730][ T9044] ip6erspan0 speed is unknown, defaulting to 1000 [ 212.593994][ T5895] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 212.743950][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 212.750289][ T5895] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 212.769572][ T5895] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.790176][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.800357][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.811215][ T5895] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.824899][ T5895] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.834955][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.177190][ T5895] usb 4-1: usb_control_msg returned -32 [ 213.358160][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 213.358197][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x5d [ 213.366949][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 213.374625][ T5895] usbtmc 4-1:16.0: can't read capabilities [ 213.439928][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 213.439950][ T5860] Bluetooth: hci2: Malformed LE Event: 0x0d [ 213.473258][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 213.555846][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'. [ 213.789479][ T9083] Bluetooth: hci5: Frame reassembly failed (-84) [ 213.827852][ T3564] Bluetooth: hci5: Frame reassembly failed (-84) [ 215.069116][ T9108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1127'. [ 215.274698][ T9114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1129'. [ 215.314079][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 215.514860][ T1164] usb 4-1: USB disconnect, device number 17 [ 215.587417][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.600538][ T43] usb 3-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.620945][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.627900][ T43] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 215.638750][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.651488][ T43] usb 3-1: config 0 descriptor?? [ 215.663781][ T43] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 215.795429][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 215.871180][ T30] audit: type=1400 audit(1755636751.406:309): avc: denied { ioctl } for pid=9132 comm="syz.4.1138" path="socket:[23654]" dev="sockfs" ino=23654 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 216.143959][ T5963] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 216.304024][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 216.373658][ T5963] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 216.460768][ T5963] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 216.487485][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 216.506773][ T5963] usb 4-1: Product: syz [ 216.516132][ T5963] usb 4-1: Manufacturer: syz [ 216.525390][ T5963] usb 4-1: SerialNumber: syz [ 216.553419][ T5963] usb 4-1: config 0 descriptor?? [ 216.564735][ T9129] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 216.880088][ T3091] usb 4-1: USB disconnect, device number 18 [ 216.905857][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 218.133453][ T3091] usb 3-1: USB disconnect, device number 10 [ 219.004057][ T1164] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 219.163936][ T1164] usb 4-1: Using ep0 maxpacket: 32 [ 219.209664][ T1164] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 219.222860][ T1164] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 219.232737][ T1164] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 219.243229][ T1164] usb 4-1: Product: syz [ 219.247776][ T1164] usb 4-1: Manufacturer: syz [ 219.253286][ T1164] usb 4-1: SerialNumber: syz [ 219.262632][ T1164] usb 4-1: config 0 descriptor?? [ 219.269857][ T9209] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 219.636325][ T3091] usb 4-1: USB disconnect, device number 19 [ 220.472654][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 220.482179][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 221.276427][ T9262] Bluetooth: hci5: Frame reassembly failed (-84) [ 221.334193][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 221.357556][ T5864] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 221.357571][ T5864] Bluetooth: hci1: Unknown advertising packet type: 0x5d [ 221.364608][ T5864] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 221.371595][ T5864] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 221.378646][ T5864] Bluetooth: hci1: Malformed LE Event: 0x0d [ 221.922872][ T9273] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 221.951065][ T9273] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1187'. [ 223.313938][ T5864] Bluetooth: hci5: command 0x1003 tx timeout [ 223.319962][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 225.233975][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 225.383904][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 225.390779][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.403081][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.412992][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 225.426932][ T10] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 225.438249][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.451353][ T10] usb 3-1: config 0 descriptor?? [ 226.196402][ T9339] random: crng reseeded on system resumption [ 226.202685][ T30] audit: type=1400 audit(1755636761.736:310): avc: denied { read write } for pid=9338 comm="syz.2.1211" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 226.224342][ T10] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 226.237742][ T10] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 226.244750][ T10] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 226.251721][ T10] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 226.260199][ T10] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 226.268519][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 226.280616][ T30] audit: type=1400 audit(1755636761.736:311): avc: denied { ioctl } for pid=9338 comm="syz.2.1211" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 226.349429][ T10] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 226.388775][ T10] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 226.428206][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 226.478613][ T6804] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 226.504159][ T6804] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 226.515438][ T10] usb 3-1: USB disconnect, device number 11 [ 226.523795][ T6804] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 226.548928][ T6804] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 226.843915][ T3091] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 226.994024][ T3091] usb 4-1: Using ep0 maxpacket: 16 [ 227.000226][ T3091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.011301][ T3091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.021194][ T3091] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 227.034145][ T3091] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 227.043479][ T3091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.055004][ T3091] usb 4-1: config 0 descriptor?? [ 227.154554][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 227.193936][ T5901] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 227.303934][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 227.310651][ T10] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 227.318915][ T10] usb 3-1: config 0 has no interface number 0 [ 227.325013][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.325976][ T5901] usb 5-1: device descriptor read/64, error -71 [ 227.335909][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.353168][ T10] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.367823][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 227.376871][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.385519][ T10] usb 3-1: Product: syz [ 227.389817][ T10] usb 3-1: Manufacturer: syz [ 227.394649][ T10] usb 3-1: SerialNumber: syz [ 227.400587][ T10] usb 3-1: config 0 descriptor?? [ 227.407098][ T10] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 227.469249][ T3091] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 227.476532][ T3091] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 227.483465][ T3091] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 227.491086][ T3091] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 227.498149][ T3091] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 227.506259][ T3091] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 227.523747][ T3091] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 227.543043][ T3091] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 227.613948][ T5901] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 227.674631][ T9375] random: crng reseeded on system resumption [ 227.738853][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 227.754565][ T5895] usb 4-1: USB disconnect, device number 20 [ 227.763067][ T5901] usb 5-1: device descriptor read/64, error -71 [ 227.835893][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 227.858294][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 227.881058][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 227.900884][ T5901] usb usb5-port1: attempt power cycle [ 228.243992][ T5901] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 228.311069][ T5901] usb 5-1: device descriptor read/8, error -71 [ 228.638115][ T5901] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 228.675352][ T5901] usb 5-1: device descriptor read/8, error -71 [ 228.796708][ T5901] usb usb5-port1: unable to enumerate USB device [ 228.923931][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 229.084086][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 229.094947][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 229.106754][ T43] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 229.115814][ T43] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 229.125526][ T43] usb 4-1: Product: syz [ 229.129681][ T43] usb 4-1: Manufacturer: syz [ 229.134302][ T43] usb 4-1: SerialNumber: syz [ 229.139994][ T43] usb 4-1: config 0 descriptor?? [ 229.145475][ T9402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 229.458257][ T10] usb 4-1: USB disconnect, device number 21 [ 229.948871][ T10] usb 3-1: USB disconnect, device number 12 [ 230.037613][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 230.199192][ T9437] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 230.512957][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 230.543379][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1252'. [ 231.112090][ T6804] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 231.244367][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 231.338937][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 231.343001][ T5860] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 231.360932][ T5860] Bluetooth: hci1: Unknown advertising packet type: 0x5d [ 231.401176][ T5860] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 231.427194][ T5860] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 231.441948][ T6804] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 231.453893][ T5860] Bluetooth: hci1: Malformed LE Event: 0x0d [ 231.508653][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 231.664650][ T10] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 231.697034][ T6804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.732176][ T10] usb 3-1: config 0 has no interface number 0 [ 231.763635][ T6804] usb 5-1: Product: syz [ 231.782625][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.807676][ T6804] usb 5-1: Manufacturer: syz [ 231.834580][ T6804] usb 5-1: SerialNumber: syz [ 231.857103][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.900011][ T6804] usb 5-1: config 0 descriptor?? [ 231.957325][ T10] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.990552][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 232.060734][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.110559][ T10] usb 3-1: Product: syz [ 232.119693][ T10] usb 3-1: Manufacturer: syz [ 232.127723][ T10] usb 3-1: SerialNumber: syz [ 232.159048][ T6804] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 232.180199][ T10] usb 3-1: config 0 descriptor?? [ 232.185399][ T5963] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 232.248047][ T10] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 232.354183][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 232.361291][ T5963] usb 4-1: no configurations [ 232.377928][ T5963] usb 4-1: can't read configurations, error -22 [ 232.544006][ T5963] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 232.703937][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 232.710370][ T5963] usb 4-1: no configurations [ 232.715230][ T5963] usb 4-1: can't read configurations, error -22 [ 232.721631][ T5963] usb usb4-port1: attempt power cycle [ 232.766436][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 232.775623][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 233.073953][ T5963] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 233.096309][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 233.106946][ T5963] usb 4-1: no configurations [ 233.111599][ T5963] usb 4-1: can't read configurations, error -22 [ 233.253946][ T5963] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 233.285086][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 233.290893][ T5963] usb 4-1: no configurations [ 233.295893][ T5963] usb 4-1: can't read configurations, error -22 [ 233.302439][ T5963] usb usb4-port1: unable to enumerate USB device [ 233.572806][ T43] usb 3-1: USB disconnect, device number 13 [ 233.595576][ T6804] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 233.872613][ T6804] usb 5-1: USB disconnect, device number 13 [ 235.099354][ T9522] random: crng reseeded on system resumption [ 235.309458][ T9527] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 235.643052][ T9514] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1276'. [ 235.661220][ T9514] gretap0: entered promiscuous mode [ 235.738588][ T9519] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1276'. [ 235.748929][ T9519] 0ªî{X¹¦: renamed from gretap0 [ 235.767624][ T9519] 0ªî{X¹¦: left promiscuous mode [ 235.772915][ T9519] 0ªî{X¹¦: entered allmulticast mode [ 236.179039][ T9519] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 236.347083][ T30] audit: type=1400 audit(1755636771.876:312): avc: denied { read } for pid=9540 comm="syz.3.1286" path="socket:[24917]" dev="sockfs" ino=24917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 236.604404][ T5901] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 236.758924][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 236.815722][ T5901] usb 5-1: no configurations [ 236.821799][ T5901] usb 5-1: can't read configurations, error -22 [ 236.870571][ T9560] random: crng reseeded on system resumption [ 236.916217][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'. [ 237.049018][ T5901] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 237.241632][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 237.247915][ T5901] usb 5-1: no configurations [ 237.256114][ T5901] usb 5-1: can't read configurations, error -22 [ 237.262695][ T5901] usb usb5-port1: attempt power cycle [ 237.663977][ T5901] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 237.685023][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 237.690781][ T5901] usb 5-1: no configurations [ 237.696162][ T5901] usb 5-1: can't read configurations, error -22 [ 237.823963][ T5901] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 237.844347][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 237.850182][ T5901] usb 5-1: no configurations [ 237.855027][ T5901] usb 5-1: can't read configurations, error -22 [ 237.861542][ T5901] usb usb5-port1: unable to enumerate USB device [ 238.131908][ T9597] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 238.140268][ T9597] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1306'. [ 238.277834][ T9602] Bluetooth: hci5: Frame reassembly failed (-84) [ 238.320539][ T3585] Bluetooth: hci5: Frame reassembly failed (-84) [ 238.360365][ T3585] Bluetooth: hci5: Frame reassembly failed (-84) [ 239.286371][ T9615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1314'. [ 240.265672][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 240.354377][ T5864] Bluetooth: hci5: command 0x1003 tx timeout [ 240.360379][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 240.633962][ T5901] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 240.783930][ T5901] usb 2-1: device descriptor read/64, error -71 [ 240.835292][ T9651] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 241.154000][ T9469] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 241.154178][ T5901] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 241.293912][ T5901] usb 2-1: device descriptor read/64, error -71 [ 241.314000][ T9469] usb 5-1: Using ep0 maxpacket: 16 [ 241.324814][ T9469] usb 5-1: no configurations [ 241.329416][ T9469] usb 5-1: can't read configurations, error -22 [ 241.414192][ T5901] usb usb2-port1: attempt power cycle [ 241.493911][ T9469] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 241.653906][ T9469] usb 5-1: Using ep0 maxpacket: 16 [ 241.659625][ T9469] usb 5-1: no configurations [ 241.665385][ T9469] usb 5-1: can't read configurations, error -22 [ 241.671952][ T9469] usb usb5-port1: attempt power cycle [ 241.754121][ T5901] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 241.774335][ T5901] usb 2-1: device descriptor read/8, error -71 [ 242.014000][ T9469] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 242.023973][ T6804] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 242.034321][ T9469] usb 5-1: Using ep0 maxpacket: 16 [ 242.039916][ T9469] usb 5-1: no configurations [ 242.044562][ T5901] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 242.044575][ T9469] usb 5-1: can't read configurations, error -22 [ 242.074276][ T5901] usb 2-1: device descriptor read/8, error -71 [ 242.173904][ T6804] usb 3-1: Using ep0 maxpacket: 32 [ 242.180044][ T6804] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 242.184284][ T5901] usb usb2-port1: unable to enumerate USB device [ 242.188256][ T9469] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 242.202050][ T6804] usb 3-1: config 0 has no interface number 0 [ 242.208137][ T6804] usb 3-1: config 0 interface 196 has no altsetting 0 [ 242.216503][ T6804] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 242.225605][ T6804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.234413][ T6804] usb 3-1: Product: syz [ 242.238837][ T9469] usb 5-1: Using ep0 maxpacket: 16 [ 242.244034][ T6804] usb 3-1: Manufacturer: syz [ 242.248737][ T6804] usb 3-1: SerialNumber: syz [ 242.281257][ T9469] usb 5-1: no configurations [ 242.286440][ T9469] usb 5-1: can't read configurations, error -22 [ 242.293103][ T6804] usb 3-1: config 0 descriptor?? [ 242.298284][ T9469] usb usb5-port1: unable to enumerate USB device [ 242.380598][ T30] audit: type=1400 audit(1755636777.916:313): avc: denied { connect } for pid=9666 comm="syz.3.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 242.509983][ T6804] ipheth 3-1:0.196: Unable to find endpoints [ 242.517833][ T6804] usb 3-1: USB disconnect, device number 14 [ 243.034631][ T9672] syz.2.1336 uses obsolete (PF_INET,SOCK_PACKET) [ 243.224899][ T9679] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 243.233507][ T9679] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1339'. [ 243.520487][ T9692] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 244.337839][ T30] audit: type=1400 audit(1755636779.546:314): avc: denied { create } for pid=9699 comm="syz.1.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 244.363987][ T30] audit: type=1400 audit(1755636779.556:315): avc: denied { getopt } for pid=9699 comm="syz.1.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 244.383347][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.418267][ T9698] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1347'. [ 244.469330][ T9698] gretap0: entered promiscuous mode [ 244.511279][ T9698] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1347'. [ 244.543627][ T9698] 0ªî{X¹¦: renamed from gretap0 [ 244.551450][ T9698] 0ªî{X¹¦: left promiscuous mode [ 244.556668][ T9698] 0ªî{X¹¦: entered allmulticast mode [ 244.563729][ T9698] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 244.974159][ T5901] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 245.043917][ T9469] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 245.133943][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 245.140934][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 245.152931][ T5901] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 245.162025][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 245.170283][ T5901] usb 3-1: Product: syz [ 245.174487][ T5901] usb 3-1: Manufacturer: syz [ 245.179092][ T5901] usb 3-1: SerialNumber: syz [ 245.188839][ T5901] usb 3-1: config 0 descriptor?? [ 245.194149][ T9725] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 245.214003][ T9469] usb 4-1: Using ep0 maxpacket: 16 [ 245.226778][ T9469] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.237272][ T9469] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.249681][ T9469] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 245.259182][ T9469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.267875][ T9469] usb 4-1: Product: syz [ 245.272026][ T9469] usb 4-1: Manufacturer: syz [ 245.276631][ T9469] usb 4-1: SerialNumber: syz [ 245.281983][ T9469] usb 4-1: config 0 descriptor?? [ 245.509420][ T5895] usb 3-1: USB disconnect, device number 15 [ 245.963951][ T5895] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 246.100739][ T9751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1365'. [ 246.113916][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 246.120564][ T5895] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 246.133966][ T5895] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 246.143001][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 246.151837][ T5895] usb 2-1: Product: syz [ 246.156031][ T5895] usb 2-1: Manufacturer: syz [ 246.160621][ T5895] usb 2-1: SerialNumber: syz [ 246.166613][ T5895] usb 2-1: config 0 descriptor?? [ 246.172002][ T9748] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 246.249626][ T9757] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1367'. [ 246.260617][ T9757] batadv1: entered promiscuous mode [ 246.266494][ T9757] batadv1: entered allmulticast mode [ 246.426975][ T9762] netlink: 'syz.4.1369': attribute type 1 has an invalid length. [ 246.436524][ T9762] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1369'. [ 247.873585][ T9791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1376'. [ 247.886500][ T6804] usb 4-1: USB disconnect, device number 26 [ 248.553243][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 249.553088][ T5860] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 249.553178][ T5860] Bluetooth: hci3: Unknown advertising packet type: 0x5d [ 249.560355][ T5860] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 249.567491][ T5860] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 249.574652][ T5860] Bluetooth: hci3: Malformed LE Event: 0x0d [ 249.588588][ T6804] usb 2-1: USB disconnect, device number 23 [ 250.784070][ T5901] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 250.945536][ T5901] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.979512][ T5901] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.997485][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 251.004250][ T5901] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 251.013307][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.028026][ T5901] usb 3-1: config 0 descriptor?? [ 251.113923][ T6804] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 251.273902][ T6804] usb 4-1: Using ep0 maxpacket: 16 [ 251.280813][ T6804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.291936][ T6804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.302457][ T6804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 251.327349][ T6804] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 251.338303][ T6804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.352797][ T6804] usb 4-1: config 0 descriptor?? [ 251.439474][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 251.454670][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 251.474831][ T5901] usb 3-1: USB disconnect, device number 16 [ 251.763830][ T9826] random: crng reseeded on system resumption [ 252.426025][ T6804] usbhid 4-1:0.0: can't add hid device: -71 [ 252.432933][ T6804] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 252.487214][ T6804] usb 4-1: USB disconnect, device number 27 [ 252.505243][ T30] audit: type=1400 audit(1755636788.046:316): avc: denied { read write } for pid=9839 comm="syz.1.1394" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 252.531539][ T30] audit: type=1400 audit(1755636788.046:317): avc: denied { open } for pid=9839 comm="syz.1.1394" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 252.559118][ T30] audit: type=1400 audit(1755636788.066:318): avc: denied { ioctl } for pid=9839 comm="syz.1.1394" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 252.643645][ T30] audit: type=1400 audit(1755636788.176:319): avc: denied { create } for pid=9847 comm="syz.4.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.733979][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 252.893961][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 252.900845][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 252.912856][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 252.922105][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 252.930383][ T10] usb 3-1: Product: syz [ 252.953124][ T10] usb 3-1: Manufacturer: syz [ 252.982279][ T10] usb 3-1: SerialNumber: syz [ 253.014056][ T10] usb 3-1: config 0 descriptor?? [ 253.025009][ T9838] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 253.572533][ T9871] ======================================================= [ 253.572533][ T9871] WARNING: The mand mount option has been deprecated and [ 253.572533][ T9871] and is ignored by this kernel. Remove the mand [ 253.572533][ T9871] option from the mount to silence this warning. [ 253.572533][ T9871] ======================================================= [ 253.572556][ T30] audit: type=1400 audit(1755636789.106:320): avc: denied { mounton } for pid=9870 comm="syz.0.1406" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 253.607415][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.183907][ T3091] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 254.345432][ T3091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.358939][ T3091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.369970][ T3091] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.380288][ T3091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.393189][ T3091] usb 2-1: config 0 descriptor?? [ 254.744125][ T9882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1410'. [ 255.235274][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.242083][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.497021][ T3091] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 255.525251][ T43] usb 3-1: USB disconnect, device number 17 [ 255.534666][ T3091] usb 2-1: USB disconnect, device number 24 [ 255.833922][ T6804] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 255.986678][ T6804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.997600][ T6804] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 256.016582][ T6804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.037951][ T6804] usb 4-1: config 0 descriptor?? [ 256.050352][ T6804] pwc: Askey VC010 type 2 USB webcam detected. [ 256.050661][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1421'. [ 256.439051][ T9928] ubi: mtd0 is already attached to ubi31 [ 256.459211][ T6804] pwc: recv_control_msg error -32 req 02 val 2b00 [ 256.473089][ T6804] pwc: recv_control_msg error -32 req 02 val 2700 [ 256.485152][ T9927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1427'. [ 256.485382][ T6804] pwc: recv_control_msg error -32 req 02 val 2c00 [ 256.518165][ T6804] pwc: recv_control_msg error -32 req 04 val 1000 [ 256.525190][ T6804] pwc: recv_control_msg error -32 req 04 val 1300 [ 256.532016][ T6804] pwc: recv_control_msg error -32 req 04 val 1400 [ 256.542811][ T6804] pwc: recv_control_msg error -32 req 02 val 2000 [ 256.549829][ T6804] pwc: recv_control_msg error -32 req 02 val 2100 [ 256.557286][ T6804] pwc: recv_control_msg error -32 req 04 val 1500 [ 256.564445][ T6804] pwc: recv_control_msg error -32 req 02 val 2500 [ 256.571655][ T6804] pwc: recv_control_msg error -32 req 02 val 2400 [ 256.578591][ T6804] pwc: recv_control_msg error -32 req 02 val 2600 [ 256.585476][ T6804] pwc: recv_control_msg error -32 req 02 val 2900 [ 256.792785][ T6804] pwc: recv_control_msg error -71 req 04 val 1100 [ 256.799887][ T6804] pwc: recv_control_msg error -71 req 04 val 1200 [ 256.807438][ T6804] pwc: Registered as video103. [ 256.812708][ T6804] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 256.833893][ T6804] usb 4-1: USB disconnect, device number 28 [ 256.884509][ T43] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 257.083942][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 257.093592][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.111705][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.122800][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 257.137038][ T43] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 257.146134][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.161015][ T43] usb 2-1: config 0 descriptor?? [ 257.332938][ T3091] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 257.586474][ T3091] usb 3-1: Using ep0 maxpacket: 8 [ 257.595374][ T3091] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 257.606297][ T3091] usb 3-1: config 0 has no interface number 0 [ 257.613623][ T3091] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 257.625096][ T3091] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 257.637091][ T3091] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 257.648270][ T3091] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 257.658508][ T9934] random: crng reseeded on system resumption [ 257.707989][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 257.713986][ T3091] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.733408][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 257.786080][ T3091] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 257.796589][ T43] usb 2-1: USB disconnect, device number 25 [ 257.816576][ T3091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.835702][ T3091] usb 3-1: Product: syz [ 257.851168][ T3091] usb 3-1: Manufacturer: syz [ 257.858549][ T3091] usb 3-1: SerialNumber: syz [ 257.875391][ T3091] usb 3-1: config 0 descriptor?? [ 258.092873][ T3091] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 258.113824][ T3091] usb 3-1: USB disconnect, device number 18 [ 258.331960][ T9971] netlink: 'syz.1.1444': attribute type 1 has an invalid length. [ 258.339798][ T9971] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1444'. [ 259.103911][ T3091] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 259.253902][ T3091] usb 3-1: Using ep0 maxpacket: 16 [ 259.260186][ T3091] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.270337][ T3091] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 259.280757][ T3091] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 259.289829][ T3091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.297885][ T3091] usb 3-1: Product: syz [ 259.302039][ T3091] usb 3-1: Manufacturer: syz [ 259.306639][ T3091] usb 3-1: SerialNumber: syz [ 259.312434][ T3091] usb 3-1: config 0 descriptor?? [ 259.653414][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 259.653438][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x5d [ 259.660531][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 259.667596][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 259.674639][ T5860] Bluetooth: hci2: Malformed LE Event: 0x0d [ 259.690263][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 259.935431][T10005] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1457'. [ 262.282649][ T43] usb 3-1: USB disconnect, device number 19 [ 262.703904][ T43] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 262.744495][ T30] audit: type=1400 audit(1755636797.936:321): avc: denied { execute } for pid=10059 comm="syz.4.1475" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 262.770657][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.350367][ T30] audit: type=1400 audit(1755636798.886:322): avc: denied { setopt } for pid=10070 comm="syz.1.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.379992][T10071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1478'. [ 263.486680][ T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 263.502715][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.581714][ T43] usb 3-1: Product: syz [ 263.585959][ T43] usb 3-1: Manufacturer: syz [ 263.590877][ T43] usb 3-1: SerialNumber: syz [ 263.596714][ T43] usb 3-1: config 0 descriptor?? [ 263.604053][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 263.890328][ T43] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 264.708336][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 264.722582][ T10] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.736894][T10089] random: crng reseeded on system resumption [ 264.749730][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 264.756472][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 264.767358][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.791745][ T10] usb 4-1: config 0 descriptor?? [ 264.881360][T10090] Bluetooth: hci5: Frame reassembly failed (-84) [ 265.773286][ T43] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 265.821443][ T43] usb 3-1: USB disconnect, device number 20 [ 266.149771][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1493'. [ 266.558808][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 266.585791][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 266.605714][ T10] usb 4-1: USB disconnect, device number 29 [ 266.914026][ T5864] Bluetooth: hci5: command 0x1003 tx timeout [ 266.914654][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 267.284018][ T5895] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 267.544479][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 267.551052][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.562289][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.608504][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 267.620762][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 267.632735][ T5895] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 267.646516][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 267.665365][ T5895] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 267.674626][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.682762][ T5895] usb 2-1: Product: syz [ 267.687900][ T5895] usb 2-1: Manufacturer: syz [ 267.692643][ T5895] usb 2-1: SerialNumber: syz [ 267.708537][ T5895] usb 2-1: config 0 descriptor?? [ 267.715489][T10129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 267.742047][ T5895] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 267.914838][ T6804] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 267.998845][ T5895] usb 2-1: USB disconnect, device number 26 [ 268.063896][ T6804] usb 3-1: Using ep0 maxpacket: 16 [ 268.071171][ T6804] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.083061][ T6804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 268.090264][ T6804] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 268.099989][ T6804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.121552][ T6804] usb 3-1: config 0 descriptor?? [ 268.596047][T10159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1508'. [ 268.852250][ T6804] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 268.945106][ T6804] usb 3-1: USB disconnect, device number 21 [ 270.024399][ T5895] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 270.202772][ T5895] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 270.217493][ T5895] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 270.247267][ T5895] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 270.262113][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.708028][ T5895] usb 4-1: Product: syz [ 271.712369][ T5895] usb 4-1: Manufacturer: syz [ 271.717395][ T5895] usb 4-1: SerialNumber: syz [ 271.966885][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1524'. [ 272.254085][ T3091] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 272.255028][ T6804] usb 4-1: USB disconnect, device number 30 [ 272.424693][T10212] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1527'. [ 272.448338][T10212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.464073][ T3091] usb 5-1: Using ep0 maxpacket: 8 [ 272.472660][ T3091] usb 5-1: config index 0 descriptor too short (expected 13959, got 36) [ 272.482302][ T3091] usb 5-1: config 181 has too many interfaces: 100, using maximum allowed: 32 [ 272.493894][ T3091] usb 5-1: config 181 has an invalid descriptor of length 254, skipping remainder of the config [ 272.505996][ T3091] usb 5-1: config 181 has 0 interfaces, different from the descriptor's value: 100 [ 272.521469][ T3091] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 272.531198][ T3091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 272.539254][ T3091] usb 5-1: SerialNumber: syz [ 272.592464][T10203] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 272.598562][T10203] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 272.609063][T10203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.615172][T10203] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 272.652008][T10203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.663262][T10203] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 272.671280][T10203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.677505][T10203] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 272.710016][T10203] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 272.716283][T10203] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 272.753477][ T3091] usb 5-1: USB disconnect, device number 22 [ 273.449928][ T3091] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 273.583908][ T5895] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 273.603905][ T3091] usb 3-1: Using ep0 maxpacket: 16 [ 273.613935][ T72] Bluetooth: hci5: Frame reassembly failed (-84) [ 273.634107][ T3091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.645403][T10242] Bluetooth: hci5: Frame reassembly failed (-84) [ 273.657950][ T3091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.668645][ T3091] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.682188][ T3091] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 273.691471][ T3091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.704457][ T3091] usb 3-1: config 0 descriptor?? [ 273.733913][ T5895] usb 5-1: device descriptor read/64, error -71 [ 273.873910][ T5864] Bluetooth: hci0: command 0x0406 tx timeout [ 273.944023][ T5901] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 273.993936][ T5895] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 274.103913][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 274.111887][ T5901] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 274.121060][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.129105][ T5895] usb 5-1: device descriptor read/64, error -71 [ 274.135400][ T5901] usb 2-1: Product: syz [ 274.137562][T10236] random: crng reseeded on system resumption [ 274.139560][ T5901] usb 2-1: Manufacturer: syz [ 274.150263][ T5901] usb 2-1: SerialNumber: syz [ 274.156077][ T3091] usbhid 3-1:0.0: can't add hid device: -71 [ 274.162095][ T3091] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 274.170222][ T5901] usb 2-1: config 0 descriptor?? [ 274.179992][ T3091] usb 3-1: USB disconnect, device number 22 [ 274.254100][ T5895] usb usb5-port1: attempt power cycle [ 274.593905][ T5895] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 274.614312][ T5895] usb 5-1: device descriptor read/8, error -71 [ 274.673953][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 274.679973][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 274.686016][ T5864] Bluetooth: hci3: command 0x0406 tx timeout [ 274.727363][T10248] No control pipe specified [ 274.753956][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 274.884773][ T5895] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 274.904734][ T5895] usb 5-1: device descriptor read/8, error -71 [ 275.014257][ T5895] usb usb5-port1: unable to enumerate USB device [ 275.643928][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 275.644200][ T5858] Bluetooth: hci5: command 0x1003 tx timeout [ 276.757796][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 276.803863][T10265] comedi comedi2: reset error (fatal) [ 276.822365][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 276.828805][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 276.835267][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 276.844851][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 276.876799][ T6804] usb 2-1: USB disconnect, device number 27 [ 277.216899][T10283] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 277.267505][ T3091] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 277.276056][ T30] audit: type=1400 audit(1755636812.756:323): avc: denied { ioctl } for pid=10279 comm="syz.1.1551" path="socket:[28855]" dev="sockfs" ino=28855 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 277.276137][ T9469] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 277.334784][T10283] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 277.494662][T10283] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 277.537082][ T3091] usb 3-1: Using ep0 maxpacket: 16 [ 277.543783][ C0] Illegal XDP return value 16128 on prog (id 158) dev veth0_to_bridge, expect packet loss! [ 277.571623][ T3091] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.641011][ T9469] usb 4-1: Using ep0 maxpacket: 16 [ 277.641738][ T3091] usb 3-1: config 0 interface 0 has no altsetting 0 [ 277.652969][ T3091] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 277.728395][ T9469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.747499][ T9469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.765353][ T9469] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 277.869602][T10293] Bluetooth: hci5: Frame reassembly failed (-84) [ 277.890592][ T3546] Bluetooth: hci5: Frame reassembly failed (-84) [ 277.894665][ T9469] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 277.961488][ T9469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.961624][ T3091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.018631][ T3091] usb 3-1: config 0 descriptor?? [ 278.036136][ T9469] usb 4-1: config 0 descriptor?? [ 278.254147][ T5901] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 279.093247][ T5901] usb 5-1: device descriptor read/64, error -71 [ 279.112433][T10277] random: crng reseeded on system resumption [ 279.161319][ T9469] usbhid 4-1:0.0: can't add hid device: -71 [ 279.167327][ T9469] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 279.184217][ T9469] usb 4-1: USB disconnect, device number 31 [ 279.310307][ T3091] usbhid 3-1:0.0: can't add hid device: -71 [ 279.374018][ T5901] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 279.388432][ T3091] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 279.475305][ T3091] usb 3-1: USB disconnect, device number 23 [ 279.553984][ T5901] usb 5-1: device descriptor read/64, error -71 [ 279.667605][ T5901] usb usb5-port1: attempt power cycle [ 279.823909][ T5895] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 279.956328][ T5895] usb 2-1: device descriptor read/64, error -71 [ 279.963997][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 279.964932][ T5858] Bluetooth: hci5: command 0x1003 tx timeout [ 280.013986][ T5901] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 280.304524][ T5901] usb 5-1: device descriptor read/8, error -71 [ 280.384269][ T9469] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 280.483928][ T5895] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 280.633945][ T5901] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 280.635061][ T9469] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.652213][ T9469] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 280.653939][ T5895] usb 2-1: device descriptor read/64, error -71 [ 280.668084][ T5901] usb 5-1: device descriptor read/8, error -71 [ 280.681011][ T9469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.690177][ T9469] usb 3-1: config 0 descriptor?? [ 280.709839][ T9469] pwc: Askey VC010 type 2 USB webcam detected. [ 280.774822][ T5895] usb usb2-port1: attempt power cycle [ 280.784263][ T5901] usb usb5-port1: unable to enumerate USB device [ 281.068322][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1574'. [ 281.594071][ T9469] pwc: recv_control_msg error -32 req 02 val 2b00 [ 281.606270][ T9469] pwc: recv_control_msg error -32 req 02 val 2700 [ 281.623332][ T9469] pwc: recv_control_msg error -32 req 02 val 2c00 [ 281.634450][ T9469] pwc: recv_control_msg error -32 req 04 val 1000 [ 281.641333][ T9469] pwc: recv_control_msg error -32 req 04 val 1300 [ 281.648208][ T9469] pwc: recv_control_msg error -32 req 04 val 1400 [ 281.656691][ T9469] pwc: recv_control_msg error -32 req 02 val 2000 [ 281.663480][ T9469] pwc: recv_control_msg error -32 req 02 val 2100 [ 281.664049][ T5895] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 281.670334][ T9469] pwc: recv_control_msg error -32 req 04 val 1500 [ 281.684633][ T9469] pwc: recv_control_msg error -32 req 02 val 2500 [ 281.691411][ T9469] pwc: recv_control_msg error -32 req 02 val 2400 [ 281.698234][ T9469] pwc: recv_control_msg error -32 req 02 val 2600 [ 281.704797][ T5895] usb 2-1: device descriptor read/8, error -71 [ 281.706314][ T9469] pwc: recv_control_msg error -32 req 02 val 2900 [ 281.918558][ T9469] pwc: recv_control_msg error -71 req 04 val 1100 [ 281.926247][ T9469] pwc: recv_control_msg error -71 req 04 val 1200 [ 281.933151][ T9469] pwc: Registered as video103. [ 281.939442][ T9469] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 281.949065][ T5895] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 281.970050][ T9469] usb 3-1: USB disconnect, device number 24 [ 281.974270][ T5895] usb 2-1: device descriptor read/8, error -71 [ 282.084241][ T5895] usb usb2-port1: unable to enumerate USB device [ 282.157193][ T30] audit: type=1400 audit(1755637073.697:324): avc: denied { sys_module } for pid=10354 comm="syz.4.1576" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 282.444275][ T5895] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 282.617024][ T5895] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 282.633900][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.677014][ T5895] usb 5-1: config 0 has no interface number 0 [ 282.766977][ T5895] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 282.779462][ T5858] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 282.779479][ T5858] Bluetooth: hci2: Unknown advertising packet type: 0x5d [ 282.788283][ T5858] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 282.796048][ T5858] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 282.803193][ T5858] Bluetooth: hci2: Malformed LE Event: 0x0d [ 283.100050][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 283.129742][ T5895] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.160117][ T5895] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 283.183324][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.207643][ T5895] usb 5-1: Product: syz [ 283.218971][ T5895] usb 5-1: Manufacturer: syz [ 283.231799][ T5895] usb 5-1: SerialNumber: syz [ 283.245380][ T5895] usb 5-1: config 0 descriptor?? [ 283.573274][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1584'. [ 283.683996][ T43] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 283.704769][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'. [ 284.474038][ T43] usb 3-1: device descriptor read/64, error -71 [ 284.541775][ T5895] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.117/input/input12 [ 284.713904][ T43] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 285.533913][ T6804] usb 5-1: USB disconnect, device number 31 [ 285.593891][ T43] usb 3-1: device descriptor read/64, error -71 [ 285.654698][T10392] comedi comedi2: reset error (fatal) [ 285.714105][ T43] usb usb3-port1: attempt power cycle [ 286.026989][T10409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1595'. [ 286.053916][ T5895] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 286.065037][ T43] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 286.084462][ T43] usb 3-1: device descriptor read/8, error -71 [ 286.223970][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 286.230301][ T5895] usb 2-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 286.240685][ T5895] usb 2-1: too many endpoints for config 0 interface 0 altsetting 62: 95, using maximum allowed: 30 [ 286.251487][ T5895] usb 2-1: config 0 interface 0 altsetting 62 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 286.265218][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 286.272537][ T5895] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 286.281601][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 286.289613][ T5895] usb 2-1: SerialNumber: syz [ 286.295166][ T5895] usb 2-1: config 0 descriptor?? [ 286.323903][ T43] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 286.344366][ T43] usb 3-1: device descriptor read/8, error -71 [ 286.471873][ T43] usb usb3-port1: unable to enumerate USB device [ 286.508726][ T5895] hso 2-1:0.0: Not our interface [ 286.532108][ T5895] usb 2-1: USB disconnect, device number 32 [ 286.632345][ T5858] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 286.632369][ T5858] Bluetooth: hci1: Unknown advertising packet type: 0x5d [ 286.640137][ T5858] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 286.647306][ T5858] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 286.654998][ T5858] Bluetooth: hci1: Malformed LE Event: 0x0d [ 286.669498][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'. [ 286.804171][ T9469] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 286.973982][ T9469] usb 4-1: Using ep0 maxpacket: 8 [ 286.980990][ T9469] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 286.989266][ T9469] usb 4-1: config 0 has no interface number 0 [ 286.995404][ T9469] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.006476][ T9469] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 287.022555][ T9469] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 287.033758][ T9469] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 287.051358][ T9469] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.101515][ T9469] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 287.113907][ T9469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.130584][ T9469] usb 4-1: Product: syz [ 287.136290][ T9469] usb 4-1: Manufacturer: syz [ 287.140955][ T9469] usb 4-1: SerialNumber: syz [ 287.148032][ T9469] usb 4-1: config 0 descriptor?? [ 287.183002][ T30] audit: type=1400 audit(1755637334.715:325): avc: denied { connect } for pid=10437 comm="syz.1.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 287.325780][ T30] audit: type=1400 audit(1755637334.835:326): avc: denied { write } for pid=10437 comm="syz.1.1607" path="socket:[30254]" dev="sockfs" ino=30254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 287.349344][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.989713][ T9469] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 288.201972][ T5895] usb 4-1: USB disconnect, device number 32 [ 288.250742][T10446] Bluetooth: hci5: Frame reassembly failed (-84) [ 288.274061][ T72] Bluetooth: hci5: Frame reassembly failed (-84) [ 288.353927][ T5916] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 288.506937][ T5916] usb 3-1: device descriptor read/64, error -71 [ 288.754763][ T5916] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 288.923920][ T5916] usb 3-1: device descriptor read/64, error -71 [ 289.084173][ T5916] usb usb3-port1: attempt power cycle [ 289.698596][ T5916] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 289.725248][ T5916] usb 3-1: device descriptor read/8, error -71 [ 289.843544][ T5860] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 289.843569][ T5860] Bluetooth: hci3: Unknown advertising packet type: 0x5d [ 289.857594][ T5860] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 289.864926][ T5860] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 289.872206][ T5860] Bluetooth: hci3: Malformed LE Event: 0x0d [ 289.886121][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 289.973905][ T5916] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 289.994310][ T5916] usb 3-1: device descriptor read/8, error -71 [ 290.114602][ T5916] usb usb3-port1: unable to enumerate USB device [ 290.400730][ T5858] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 290.406865][ T5860] Bluetooth: hci5: command 0x1003 tx timeout [ 290.764561][ T5916] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 290.953910][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 290.962925][ T5916] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 290.973552][ T5916] usb 2-1: config 0 has no interface number 0 [ 290.979762][ T5916] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 290.993982][ T5916] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 291.008033][ T5916] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 291.023945][ T5916] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 291.034473][ T5916] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.049191][ T5916] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 291.059182][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.067339][ T5916] usb 2-1: Product: syz [ 291.883889][ T5916] usb 2-1: Manufacturer: syz [ 291.888546][ T5916] usb 2-1: SerialNumber: syz [ 291.894454][ T5916] usb 2-1: config 0 descriptor?? [ 292.027162][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 292.671859][ T5916] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 292.859030][ T6804] usb 2-1: USB disconnect, device number 33 [ 292.943723][ T3564] Bluetooth: hci5: Frame reassembly failed (-84) [ 292.964428][T10521] Bluetooth: hci5: Frame reassembly failed (-84) [ 294.524063][ T9469] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 294.684132][ T9469] usb 2-1: Using ep0 maxpacket: 32 [ 294.697799][ T9469] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 294.718019][ T9469] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 294.729054][ T9469] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 294.742122][ T9469] usb 2-1: Product: syz [ 294.748421][ T9469] usb 2-1: Manufacturer: syz [ 294.753432][ T9469] usb 2-1: SerialNumber: syz [ 294.781595][ T9469] usb 2-1: config 0 descriptor?? [ 294.809448][T10536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 294.993897][ T5858] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 294.994101][ T5860] Bluetooth: hci5: command 0x1003 tx timeout [ 295.562047][T10556] netlink: 'syz.3.1646': attribute type 10 has an invalid length. [ 295.699927][T10556] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 296.071954][T10558] kvm: pic: non byte write [ 296.092014][T10558] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 296.782051][ T30] audit: type=1400 audit(1755637600.314:327): avc: denied { create } for pid=10572 comm="syz.3.1652" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 296.803090][ T30] audit: type=1400 audit(1755637600.324:328): avc: denied { mounton } for pid=10572 comm="syz.3.1652" path="/326/file0" dev="tmpfs" ino=1714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 297.332544][ T5895] usb 2-1: USB disconnect, device number 34 [ 297.564777][ T5916] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 297.695284][ T5916] usb 4-1: device descriptor read/64, error -71 [ 298.311545][ T5916] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 298.584219][ T5916] usb 4-1: device descriptor read/64, error -71 [ 298.705727][ T5916] usb usb4-port1: attempt power cycle [ 298.823760][T10607] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 299.054048][ T5916] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 299.095696][ T5916] usb 4-1: device descriptor read/8, error -71 [ 299.236325][ T5858] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 299.236345][ T5858] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 299.243578][ T5858] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 299.250960][ T5858] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 299.258723][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1663'. [ 299.278029][ T5858] Bluetooth: hci0: Malformed LE Event: 0x0d [ 299.355155][ T5916] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 299.374763][ T5916] usb 4-1: device descriptor read/8, error -71 [ 299.572508][ T5916] usb usb4-port1: unable to enumerate USB device [ 300.428903][T10634] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1672'. [ 300.703887][ T6804] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 300.963880][ T6804] usb 2-1: Using ep0 maxpacket: 8 [ 301.082992][ T6804] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 301.104194][ T6804] usb 2-1: config 0 has no interface number 0 [ 301.117985][ T6804] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.470503][ T6804] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 301.482199][ T6804] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 301.493689][ T6804] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 301.514852][ T30] audit: type=1400 audit(1755637604.884:329): avc: denied { read } for pid=10650 comm="syz.2.1676" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 301.555173][ T6804] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.599134][ T30] audit: type=1400 audit(1755637604.884:330): avc: denied { open } for pid=10650 comm="syz.2.1676" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 301.626985][ T30] audit: type=1400 audit(1755637604.894:331): avc: denied { ioctl } for pid=10650 comm="syz.2.1676" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 301.679895][ T6804] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 301.689989][ T6804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.698142][ T6804] usb 2-1: Product: syz [ 301.706790][ T6804] usb 2-1: Manufacturer: syz [ 301.716574][ T6804] usb 2-1: SerialNumber: syz [ 301.743808][ T6804] usb 2-1: config 0 descriptor?? [ 302.024493][T10660] netlink: 'syz.3.1677': attribute type 3 has an invalid length. [ 302.033049][T10660] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1677'. [ 302.307172][ T6804] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 302.323987][ T6804] usb 2-1: USB disconnect, device number 35 [ 303.123954][ T9469] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 303.323916][ T9469] usb 3-1: Using ep0 maxpacket: 16 [ 303.330110][ T9469] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.340556][ T9469] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.350043][ T9469] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 303.359289][ T9469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.370338][ T9469] usb 3-1: config 0 descriptor?? [ 303.824678][T10684] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 304.388501][T10693] random: crng reseeded on system resumption [ 305.003948][ T5916] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 305.018565][ T30] audit: type=1400 audit(1755637608.554:332): avc: denied { write } for pid=10702 comm="syz.1.1693" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.051044][ T30] audit: type=1400 audit(1755637608.584:333): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 305.164438][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 305.171016][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.181260][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.194896][ T5916] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 305.203935][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 305.212335][ T5916] usb 4-1: SerialNumber: syz [ 305.217801][ T5916] usb 4-1: config 0 descriptor?? [ 305.224463][ T5916] hso 4-1:0.0: Can't find BULK IN endpoint [ 305.364793][ T9469] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 305.428921][ T5916] usb 4-1: USB disconnect, device number 37 [ 305.449294][ T30] audit: type=1400 audit(1755637608.984:334): avc: denied { bind } for pid=10708 comm="syz.4.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 305.468796][ T30] audit: type=1400 audit(1755637608.984:335): avc: denied { connect } for pid=10708 comm="syz.4.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 305.488398][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.514593][ T9469] usb 2-1: Using ep0 maxpacket: 8 [ 305.520785][ T9469] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 305.532051][ T9469] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 305.542185][ T9469] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 305.552076][ T9469] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.565143][ T9469] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 305.574243][ T9469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.786785][ T9469] usb 2-1: GET_CAPABILITIES returned 0 [ 305.792309][ T9469] usbtmc 2-1:16.0: can't read capabilities [ 305.934113][ T5901] usb 3-1: USB disconnect, device number 33 [ 306.757855][ T5901] usb 2-1: USB disconnect, device number 36 [ 306.766428][ T30] audit: type=1400 audit(1755637610.294:336): avc: denied { write } for pid=10706 comm="syz.1.1695" name="usbtmc0" dev="devtmpfs" ino=3064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 307.007121][T10732] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.935899][ T5858] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 307.935923][ T5858] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 307.942995][ T5858] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 307.950123][ T5858] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 307.961239][ T5858] Bluetooth: hci0: Malformed LE Event: 0x0d [ 307.979652][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'. [ 308.832501][T10763] overlayfs: failed to resolve './file1': -2 [ 308.947675][T10769] autofs: Unknown parameter './file0' [ 309.214539][T10783] netlink: 'syz.2.1719': attribute type 10 has an invalid length. [ 309.331296][T10783] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 309.636371][ T6911] Bluetooth: hci5: Frame reassembly failed (-84) [ 309.661732][T10786] Bluetooth: hci5: Frame reassembly failed (-84) [ 310.096792][ T5860] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 310.226651][T10802] autofs: Unknown parameter './file0' [ 311.233698][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1733'. [ 311.634744][ T5858] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 311.732284][T10830] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 312.051395][T10835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1737'. [ 312.212069][ T30] audit: type=1400 audit(1755637615.744:337): avc: denied { setopt } for pid=10838 comm="syz.1.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 312.213932][T10839] ------------[ cut here ]------------ [ 312.234758][ T30] audit: type=1400 audit(1755637615.744:338): avc: denied { write } for pid=10838 comm="syz.1.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 312.237218][T10839] 'send_pkt()' returns 0, but 65536 expected [ 312.256620][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.269802][T10839] WARNING: CPU: 0 PID: 10839 at net/vmw_vsock/virtio_transport_common.c:426 virtio_transport_send_pkt_info+0x91d/0x1020 [ 312.282696][T10839] Modules linked in: [ 312.286925][T10839] CPU: 0 UID: 0 PID: 10839 Comm: syz.1.1739 Not tainted syzkaller #0 PREEMPT(full) [ 312.296469][T10839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.306630][T10839] RIP: 0010:virtio_transport_send_pkt_info+0x91d/0x1020 [ 312.313548][T10839] Code: a9 16 48 f6 84 db 75 26 e8 c0 1b 48 f6 c6 05 72 35 20 05 01 90 48 8b 54 24 10 44 89 ee 48 c7 c7 00 4b 13 8d e8 24 bc 06 f6 90 <0f> 0b 90 90 e8 9a 1b 48 f6 31 ff 44 89 e6 e8 d0 16 48 f6 45 85 e4 [ 312.333302][T10839] RSP: 0018:ffffc900043cf730 EFLAGS: 00010282 [ 312.339439][T10839] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000b3f9000 [ 312.347415][T10839] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 312.355383][T10839] RBP: ffff888035abe000 R08: 0000000000000001 R09: 0000000000000000 [ 312.363325][T10839] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000010000 [ 312.371297][T10839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000010000 [ 312.379769][T10839] FS: 00007f0f892c56c0(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 312.389069][T10839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.395658][T10839] CR2: 00007fa0fb096bf2 CR3: 0000000053be9000 CR4: 00000000003526f0 [ 312.403603][T10839] Call Trace: [ 312.406870][T10839] [ 312.409781][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.414533][T10839] virtio_transport_seqpacket_enqueue+0x13c/0x1c0 [ 312.420925][T10839] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 312.427854][T10839] ? virtio_transport_stream_has_space+0x10a/0x150 [ 312.434371][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.439116][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.443870][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.448614][T10839] vsock_connectible_sendmsg+0xfa1/0x1280 [ 312.454328][T10839] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 312.460458][T10839] ? __pfx_woken_wake_function+0x10/0x10 [ 312.466079][T10839] ____sys_sendmsg+0xa95/0xc70 [ 312.470818][T10839] ? copy_msghdr_from_user+0x10a/0x160 [ 312.476318][T10839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.481820][T10839] ? futex_unqueue+0x133/0x2c0 [ 312.486767][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.491507][T10839] ? lock_release+0x201/0x2f0 [ 312.496184][T10839] ___sys_sendmsg+0x134/0x1d0 [ 312.500832][T10839] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.506016][T10839] ? __pfx___futex_wait+0x10/0x10 [ 312.511021][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.515801][T10839] __sys_sendmmsg+0x200/0x420 [ 312.520451][T10839] ? __pfx___sys_sendmmsg+0x10/0x10 [ 312.525641][T10839] ? vsock_connectible_setsockopt+0x226/0x770 [ 312.531713][T10839] ? __pfx_do_futex+0x10/0x10 [ 312.536414][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.541182][T10839] ? xfd_validate_state+0x61/0x180 [ 312.546333][T10839] ? __sys_setsockopt+0x1c0/0x230 [ 312.551350][T10839] __x64_sys_sendmmsg+0x9c/0x100 [ 312.556322][T10839] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 312.562284][T10839] do_syscall_64+0xcd/0x4c0 [ 312.566798][T10839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.572665][T10839] RIP: 0033:0x7f0f8838ebe9 [ 312.577068][T10839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.596915][T10839] RSP: 002b:00007f0f892c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 312.605554][T10839] RAX: ffffffffffffffda RBX: 00007f0f885b5fa0 RCX: 00007f0f8838ebe9 [ 312.613496][T10839] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 312.621446][T10839] RBP: 00007f0f88411e19 R08: 0000000000000000 R09: 0000000000000000 [ 312.629400][T10839] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 312.637352][T10839] R13: 00007f0f885b6038 R14: 00007f0f885b5fa0 R15: 00007ffdeb5cdc28 [ 312.645326][T10839] [ 312.648322][T10839] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 312.655571][T10839] CPU: 0 UID: 0 PID: 10839 Comm: syz.1.1739 Not tainted syzkaller #0 PREEMPT(full) [ 312.664908][T10839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.674932][T10839] Call Trace: [ 312.678183][T10839] [ 312.681086][T10839] dump_stack_lvl+0x3d/0x1f0 [ 312.685651][T10839] vpanic+0x6e8/0x7a0 [ 312.689623][T10839] ? __pfx_vpanic+0x10/0x10 [ 312.694102][T10839] ? virtio_transport_send_pkt_info+0x91d/0x1020 [ 312.700406][T10839] panic+0xca/0xd0 [ 312.704112][T10839] ? __pfx_panic+0x10/0x10 [ 312.708507][T10839] check_panic_on_warn+0xab/0xb0 [ 312.713413][T10839] __warn+0xf6/0x3c0 [ 312.717274][T10839] ? preempt_schedule_notrace+0x62/0xe0 [ 312.722790][T10839] ? virtio_transport_send_pkt_info+0x91d/0x1020 [ 312.729093][T10839] report_bug+0x3c3/0x580 [ 312.733399][T10839] ? virtio_transport_send_pkt_info+0x91d/0x1020 [ 312.739700][T10839] handle_bug+0x184/0x210 [ 312.744001][T10839] exc_invalid_op+0x17/0x50 [ 312.748478][T10839] asm_exc_invalid_op+0x1a/0x20 [ 312.753299][T10839] RIP: 0010:virtio_transport_send_pkt_info+0x91d/0x1020 [ 312.760207][T10839] Code: a9 16 48 f6 84 db 75 26 e8 c0 1b 48 f6 c6 05 72 35 20 05 01 90 48 8b 54 24 10 44 89 ee 48 c7 c7 00 4b 13 8d e8 24 bc 06 f6 90 <0f> 0b 90 90 e8 9a 1b 48 f6 31 ff 44 89 e6 e8 d0 16 48 f6 45 85 e4 [ 312.779794][T10839] RSP: 0018:ffffc900043cf730 EFLAGS: 00010282 [ 312.785831][T10839] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000b3f9000 [ 312.793770][T10839] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 312.801719][T10839] RBP: ffff888035abe000 R08: 0000000000000001 R09: 0000000000000000 [ 312.809666][T10839] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000010000 [ 312.817613][T10839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000010000 [ 312.825568][T10839] ? __warn_printk+0x1a5/0x350 [ 312.830330][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.835068][T10839] virtio_transport_seqpacket_enqueue+0x13c/0x1c0 [ 312.841460][T10839] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 312.848370][T10839] ? virtio_transport_stream_has_space+0x10a/0x150 [ 312.854845][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.859582][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.864320][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.869055][T10839] vsock_connectible_sendmsg+0xfa1/0x1280 [ 312.874753][T10839] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 312.880883][T10839] ? __pfx_woken_wake_function+0x10/0x10 [ 312.886494][T10839] ____sys_sendmsg+0xa95/0xc70 [ 312.891242][T10839] ? copy_msghdr_from_user+0x10a/0x160 [ 312.896675][T10839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.901935][T10839] ? futex_unqueue+0x133/0x2c0 [ 312.906674][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.911416][T10839] ? lock_release+0x201/0x2f0 [ 312.916075][T10839] ___sys_sendmsg+0x134/0x1d0 [ 312.920741][T10839] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.925917][T10839] ? __pfx___futex_wait+0x10/0x10 [ 312.930919][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.935659][T10839] __sys_sendmmsg+0x200/0x420 [ 312.940323][T10839] ? __pfx___sys_sendmmsg+0x10/0x10 [ 312.945490][T10839] ? vsock_connectible_setsockopt+0x226/0x770 [ 312.951540][T10839] ? __pfx_do_futex+0x10/0x10 [ 312.956199][T10839] ? rcu_is_watching+0x12/0xc0 [ 312.960938][T10839] ? xfd_validate_state+0x61/0x180 [ 312.966025][T10839] ? __sys_setsockopt+0x1c0/0x230 [ 312.971017][T10839] __x64_sys_sendmmsg+0x9c/0x100 [ 312.975924][T10839] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 312.981873][T10839] do_syscall_64+0xcd/0x4c0 [ 312.986357][T10839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.992221][T10839] RIP: 0033:0x7f0f8838ebe9 [ 312.996607][T10839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.016183][T10839] RSP: 002b:00007f0f892c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 313.024565][T10839] RAX: ffffffffffffffda RBX: 00007f0f885b5fa0 RCX: 00007f0f8838ebe9 [ 313.032506][T10839] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 313.040450][T10839] RBP: 00007f0f88411e19 R08: 0000000000000000 R09: 0000000000000000 [ 313.048393][T10839] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 313.056333][T10839] R13: 00007f0f885b6038 R14: 00007f0f885b5fa0 R15: 00007ffdeb5cdc28 [ 313.064279][T10839] [ 313.067478][T10839] Kernel Offset: disabled [ 313.071778][T10839] Rebooting in 86400 seconds..