last executing test programs: 1m59.521388448s ago: executing program 0 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) 1m59.43952658s ago: executing program 0 (id=1345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 1m59.204158508s ago: executing program 0 (id=1349): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) flistxattr(r0, 0x0, 0x0) 1m59.186159529s ago: executing program 0 (id=1351): r0 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) 1m59.088181905s ago: executing program 0 (id=1352): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m59.062221345s ago: executing program 0 (id=1353): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 1m43.951078473s ago: executing program 32 (id=1353): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 58.488361705s ago: executing program 1 (id=2281): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006"], 0xd0}}, 0x0) 58.321912112s ago: executing program 1 (id=2284): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) 57.46871697s ago: executing program 1 (id=2292): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000040)='\x00') 57.287724696s ago: executing program 1 (id=2295): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 57.124142232s ago: executing program 1 (id=2298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 56.664643006s ago: executing program 1 (id=2307): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x149040, 0x2) fcntl$setlease(r0, 0x400, 0x0) close(0x3) truncate(&(0x7f0000000080)='./file0\x00', 0x4) 56.371817868s ago: executing program 33 (id=2307): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x149040, 0x2) fcntl$setlease(r0, 0x400, 0x0) close(0x3) truncate(&(0x7f0000000080)='./file0\x00', 0x4) 31.864040512s ago: executing program 5 (id=2664): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) 31.803389353s ago: executing program 5 (id=2666): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x10000}, {0x6, 0x60, 0x6}]}) write$ppp(r0, &(0x7f00000008c0)='\x00\x00', 0x2) 31.620207486s ago: executing program 5 (id=2669): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 31.518086808s ago: executing program 5 (id=2670): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 31.347448975s ago: executing program 5 (id=2673): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x4, 0x0) 30.28314805s ago: executing program 5 (id=2690): r0 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0xafd4, 0x1000, 0x5, 0x2d2}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r1 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x253f, 0x10000, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 29.93419285s ago: executing program 34 (id=2690): r0 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0xafd4, 0x1000, 0x5, 0x2d2}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r1 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x253f, 0x10000, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 4.489376914s ago: executing program 7 (id=3043): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60, {0xfffffff8}}) 4.382982186s ago: executing program 6 (id=3047): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) 4.223353107s ago: executing program 7 (id=3050): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4.120701038s ago: executing program 6 (id=3052): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000039c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001f80)={0x2, 0x8003, 0xb, 0x6}, &(0x7f0000003b40)=0x10) 4.118899228s ago: executing program 7 (id=3053): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\x13:'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 3.989828365s ago: executing program 6 (id=3055): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000340)={0x0, 0x8, 0x1a, "d0c19333c785d6099ff8a59b9da4d6303f7cdad73a101f5b7a7c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.974705154s ago: executing program 7 (id=3056): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) 3.47217001s ago: executing program 7 (id=3070): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.461601151s ago: executing program 7 (id=3081): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x20, 0x5, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x6, "1eaca8e76da6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.065921551s ago: executing program 4 (id=3093): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvtap0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) 1.994898143s ago: executing program 4 (id=3095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564dff, 0x0, 0x3}]}) 1.937878022s ago: executing program 6 (id=3098): r0 = memfd_create(&(0x7f0000000040)='R\x17\bK\x85X\xa3\x1b\xc7p\x13\x10\xa8F\xb4.\'\x19\x8b\xe2\xd8\xf8\xa21{.;0\x17\x11\n\x8d\xfa\xa8\x05\x1b\xdd*\xf8\xf3_\x1a\xd1F\x16\x88N#\xc2\xb1\x1c\x05\x00\x00\x00\x00\x00\x00\a!\xcd\x84;\x13\x9d\xe7\x03\xe6\x1d8\x9f\xa8A', 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x44a7e, 0x90) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r0, r1, 0x0, 0xfffffff2) 1.79419394s ago: executing program 4 (id=3101): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.731568789s ago: executing program 4 (id=3103): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) 1.708810934s ago: executing program 6 (id=3105): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.586949879s ago: executing program 4 (id=3108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 1.533554357s ago: executing program 4 (id=3110): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.256617779s ago: executing program 2 (id=3119): syz_open_dev$sndctrl(&(0x7f0000000700), 0x0, 0x180000) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000340)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000000)) io_uring_enter(r0, 0x48eb, 0x1158, 0x2, 0x0, 0x0) 1.232167349s ago: executing program 2 (id=3121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.116573172s ago: executing program 2 (id=3123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) 1.106787706s ago: executing program 2 (id=3125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="63ecedda41c3903803ed69d8d41f", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.045334s ago: executing program 2 (id=3126): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x6c}}, 0x20000000) 622.086053ms ago: executing program 2 (id=3129): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]}) close_range(r0, 0xffffffffffffffff, 0x0) 413.118588ms ago: executing program 3 (id=3132): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 356.550093ms ago: executing program 3 (id=3133): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 323.990973ms ago: executing program 3 (id=3134): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 239.485688ms ago: executing program 3 (id=3135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 238.877442ms ago: executing program 3 (id=3136): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x5) 168.022081ms ago: executing program 3 (id=3137): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) 0s ago: executing program 6 (id=3138): r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f00000044c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="e8", 0x1}], 0x1}}], 0x1, 0x11) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): ot:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.831466][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1784'. [ 173.980200][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 174.040650][ T793] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 174.049412][ T29] audit: type=1400 audit(1774874187.610:843): avc: denied { module_request } for pid=9890 comm="syz.1.1791" kmod="ipt_CLUSTERIP" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 174.109116][ T9901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.226775][ T793] usb 5-1: Using ep0 maxpacket: 16 [ 174.233838][ T793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.260470][ T793] usb 5-1: config 0 has no interfaces? [ 174.292862][ T793] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 174.322361][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.347692][ T793] usb 5-1: Product: syz [ 174.363476][ T793] usb 5-1: Manufacturer: syz [ 174.368111][ T793] usb 5-1: SerialNumber: syz [ 174.376988][ T29] audit: type=1400 audit(1774874187.940:844): avc: denied { getopt } for pid=9903 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 174.391660][ T793] usb 5-1: config 0 descriptor?? [ 174.557749][ T29] audit: type=1400 audit(1774874188.120:845): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 174.677286][ T9881] gretap0: entered promiscuous mode [ 174.690868][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 174.735202][ T9881] gretap0: left promiscuous mode [ 174.751089][ T24] usb 5-1: USB disconnect, device number 10 [ 174.902907][ T29] audit: type=1400 audit(1774874188.450:846): avc: denied { ioctl } for pid=9933 comm="syz.5.1808" path="/28/file0" dev="tmpfs" ino=160 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.381770][ T9947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1813'. [ 175.500438][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 175.662964][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 175.672132][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.707386][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.724838][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 175.751438][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.803848][ T24] usb 4-1: config 0 descriptor?? [ 175.862836][ T9966] openvswitch: netlink: IP tunnel dst address not specified [ 176.080417][ T5891] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 176.242176][ T5891] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.256712][ T24] hid_parser_main: 58 callbacks suppressed [ 176.256734][ T24] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 176.258434][ T5891] usb 6-1: config 0 has no interface number 0 [ 176.268327][ T24] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 176.280424][ T5891] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.303745][ T5891] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.320954][ T5891] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.360571][ T5891] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 176.401134][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.429959][ T5891] usb 6-1: config 0 descriptor?? [ 176.457379][ T24] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 176.659430][ T24] ft260 0003:0403:6030.0010: failed to retrieve system status [ 176.683827][ T24] ft260 0003:0403:6030.0010: probe with driver ft260 failed with error -71 [ 176.713425][ T24] usb 4-1: USB disconnect, device number 12 [ 177.092889][ T5891] input: HID 28bd:0042 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0011/input/input14 [ 177.276360][ T5891] uclogic 0003:28BD:0042.0011: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 177.338931][ T5891] usb 6-1: USB disconnect, device number 2 [ 177.424481][ T6637] udevd[6637]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 177.487216][T10018] fido_id[10018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 177.652444][ T29] audit: type=1400 audit(1774874191.220:847): avc: denied { watch } for pid=10028 comm="syz.4.1849" path="/457/control" dev="tmpfs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 177.672777][T10033] program syz.3.1851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.807736][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'. [ 177.951573][ T5891] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 177.970094][T10046] sctp: [Deprecated]: syz.3.1856 (pid 10046) Use of int in maxseg socket option. [ 177.970094][T10046] Use struct sctp_assoc_value instead [ 178.132626][ T29] audit: type=1400 audit(1774874191.690:848): avc: denied { create } for pid=10050 comm="syz.3.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.175688][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 178.188489][ T29] audit: type=1400 audit(1774874191.700:849): avc: denied { ioctl } for pid=10050 comm="syz.3.1860" path="socket:[24954]" dev="sockfs" ino=24954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.224722][ T5891] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 178.243419][ T5891] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 178.265192][ T5891] usb 3-1: config 0 has no interface number 0 [ 178.273693][ T29] audit: type=1400 audit(1774874191.700:850): avc: denied { bind } for pid=10050 comm="syz.3.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.296815][ T5891] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.322145][ T5891] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 178.339545][ T29] audit: type=1400 audit(1774874191.780:851): avc: denied { remount } for pid=10052 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 178.376383][ T5891] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 178.412510][ T5891] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 178.421881][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 178.430294][ T5891] usb 3-1: Product: syz [ 178.441276][ T5891] usb 3-1: config 0 descriptor?? [ 178.446954][T10034] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.924773][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 178.924790][ T29] audit: type=1400 audit(1774874192.490:854): avc: denied { ioctl } for pid=10088 comm="syz.3.1878" path="socket:[23997]" dev="sockfs" ino=23997 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.980860][ T5877] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.040399][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 179.108412][ T5891] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input15 [ 179.144730][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 179.158209][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.180485][ T5877] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 179.190244][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.222385][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 179.247577][ T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 179.270385][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.279238][ T5877] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 179.308356][ T5891] usb 3-1: USB disconnect, device number 19 [ 179.308400][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 179.315153][ T24] usb 6-1: config 0 descriptor?? [ 179.335623][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 179.364293][ T5877] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 179.382111][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.429860][ T5877] usb 5-1: config 0 descriptor?? [ 179.584471][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 179.594124][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.615023][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 179.630179][ T24] usb 6-1: media controller created [ 179.654326][ T5877] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 179.663400][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.786346][ T24] az6027: usb out operation failed. (-71) [ 179.796831][ T24] az6027: usb out operation failed. (-71) [ 179.806173][ T24] stb0899_attach: Driver disabled by Kconfig [ 179.812467][ T24] az6027: no front-end attached [ 179.812467][ T24] [ 179.819945][ T24] az6027: usb out operation failed. (-71) [ 179.826377][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 179.837392][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 179.882913][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 179.906309][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 179.936385][ T24] usb 6-1: USB disconnect, device number 3 [ 179.960405][ T5877] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 180.014625][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 180.120430][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 180.127253][ T5877] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 180.141012][ T5877] usb 4-1: config 0 has no interface number 0 [ 180.149414][ T5877] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 180.168675][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.178535][ T5877] usb 4-1: Product: syz [ 180.183067][ T5877] usb 4-1: Manufacturer: syz [ 180.187672][ T5877] usb 4-1: SerialNumber: syz [ 180.198892][ T5877] usb 4-1: config 0 descriptor?? [ 180.207140][ T5877] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 180.337588][ T29] audit: type=1400 audit(1774874193.900:855): avc: denied { getopt } for pid=10114 comm="syz.2.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.422146][ T5877] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 180.448220][ T5877] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 180.890889][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 180.898770][ T5891] usb 4-1: USB disconnect, device number 13 [ 180.925799][ T5877] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 180.942519][ T5891] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 180.974922][ T5891] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 181.004836][ T5891] quatech2 4-1:0.51: device disconnected [ 181.103925][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.134562][ T5877] usb 3-1: config 0 has no interfaces? [ 181.140094][ T5877] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 181.170465][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.182777][ T5877] usb 3-1: config 0 descriptor?? [ 181.432242][ T24] usb 3-1: USB disconnect, device number 20 [ 181.763482][ T10] usb 5-1: USB disconnect, device number 11 [ 181.782146][ T5877] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 181.798410][ T10] usblp0: removed [ 181.804677][ T5891] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 181.972930][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.983687][ T5877] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 182.016389][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.037568][ T5891] usb 4-1: config 0 has no interfaces? [ 182.050594][ T5891] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 182.059657][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.080489][ T5877] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 182.105244][ T5877] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 182.122772][ T5891] usb 4-1: config 0 descriptor?? [ 182.132105][ T5877] usb 6-1: Manufacturer: syz [ 182.144545][ T29] audit: type=1400 audit(1774874195.710:856): avc: denied { setopt } for pid=10186 comm="syz.2.1907" lport=21562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.177030][ T5877] usb 6-1: config 0 descriptor?? [ 182.271564][ T5877] rc_core: IR keymap rc-hauppauge not found [ 182.277502][ T5877] Registered IR keymap rc-empty [ 182.313639][ T5877] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 182.344168][ T5877] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17 [ 182.352745][ T24] usb 4-1: USB disconnect, device number 14 [ 182.358681][ T29] audit: type=1400 audit(1774874195.910:857): avc: denied { read } for pid=10162 comm="syz.3.1900" name="file2" dev="tmpfs" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.491504][ T5928] usb 6-1: USB disconnect, device number 4 [ 182.725414][T10209] sp0: Synchronizing with TNC [ 182.927371][ T29] audit: type=1400 audit(1774874196.490:858): avc: denied { read } for pid=10215 comm="syz.4.1915" path="socket:[24107]" dev="sockfs" ino=24107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.960119][ T29] audit: type=1400 audit(1774874196.490:859): avc: denied { search } for pid=10217 comm="syz.1.1916" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 182.984261][ T29] audit: type=1400 audit(1774874196.490:860): avc: denied { search } for pid=10217 comm="syz.1.1916" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 183.075623][ T29] audit: type=1400 audit(1774874196.550:861): avc: denied { search } for pid=10217 comm="syz.1.1916" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 183.453861][ T29] audit: type=1400 audit(1774874197.020:862): avc: denied { setopt } for pid=10246 comm="syz.5.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.890418][ T29] audit: type=1400 audit(1774874197.440:863): avc: denied { setopt } for pid=10269 comm="syz.2.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.310415][ T5877] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 184.390690][T10286] kvm: kvm [10284]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x9 [ 184.492101][ T5877] usb 3-1: config 0 has no interfaces? [ 184.497807][ T5877] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.516192][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.542521][ T5877] usb 3-1: config 0 descriptor?? [ 184.590416][ T24] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 184.752507][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.763169][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.793698][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.804912][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.805947][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.814020][ T24] usb 6-1: Product: syz [ 184.828051][ T24] usb 6-1: Manufacturer: syz [ 184.833182][ T24] usb 6-1: SerialNumber: syz [ 184.851830][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.912295][ T2156] usb 3-1: USB disconnect, device number 21 [ 185.298965][ T24] usb 6-1: cannot find UAC_HEADER [ 185.366030][ T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 185.390803][ T2156] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 185.398688][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.583903][ T2156] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 185.593122][ T2156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 375, setting to 64 [ 185.610446][ T2156] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.635060][ T2156] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 185.660369][ T2156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.681869][ T2156] usb 3-1: config 0 descriptor?? [ 185.854401][ T29] audit: type=1400 audit(1774874199.420:864): avc: denied { getopt } for pid=10324 comm="syz.4.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.898591][ T2156] ath6kl: Failed to submit usb control message: -71 [ 185.911297][ T2156] ath6kl: unable to send the bmi data to the device: -71 [ 185.918357][ T2156] ath6kl: Unable to send get target info: -71 [ 185.946023][ T2156] ath6kl: Failed to init ath6kl core: -71 [ 185.956197][ T2156] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 185.986850][ T2156] usb 3-1: USB disconnect, device number 22 [ 186.032588][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 186.202171][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 186.214242][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 186.230145][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 186.239633][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 186.258427][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 186.276281][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.278051][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1960'. [ 186.288603][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.319194][ T24] usb 4-1: Product: syz [ 186.327858][ T24] usb 4-1: Manufacturer: syz [ 186.364169][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 186.373906][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 186.389579][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 186.402627][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 186.804119][ T5891] usb 4-1: USB disconnect, device number 15 [ 187.375682][ T5877] usb 6-1: USB disconnect, device number 5 [ 187.510688][T10371] vcan0: tx address claim with dest, not broadcast [ 188.652665][T10425] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2005'. [ 188.699296][T10425] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 188.788223][T10433] sp0: Synchronizing with TNC [ 189.104723][ T29] audit: type=1400 audit(1774874202.670:865): avc: denied { mount } for pid=10446 comm="syz.3.2015" name="/" dev="ramfs" ino=26778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 189.161135][T10449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.440408][ T29] audit: type=1400 audit(1774874203.000:866): avc: denied { create } for pid=10463 comm="syz.3.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 189.446728][T10464] delete_channel: no stack [ 190.071057][T10487] Context (ID=0x1) not attached to queue pair (handle=0x2:0x4) [ 190.101108][T10489] serio: Serial port ptm1 [ 190.382702][ T29] audit: type=1400 audit(1774874203.950:867): avc: denied { read write } for pid=10503 comm="syz.3.2041" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 190.429624][ T29] audit: type=1400 audit(1774874203.950:868): avc: denied { open } for pid=10503 comm="syz.3.2041" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 190.579073][T10513] netlink: 'syz.4.2045': attribute type 4 has an invalid length. [ 190.684824][ T29] audit: type=1400 audit(1774874204.250:869): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 190.980580][ T5820] Bluetooth: hci2: command 0x1003 tx timeout [ 190.980662][ T51] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 191.330434][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 191.460508][ T2156] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 191.500017][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.508638][ T24] usb 6-1: config 0 has no interface number 0 [ 191.541435][ T24] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 191.562826][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.588949][ T24] usb 6-1: Product: syz [ 191.597708][ T24] usb 6-1: Manufacturer: syz [ 191.603281][ T24] usb 6-1: SerialNumber: syz [ 191.617590][ T24] usb 6-1: config 0 descriptor?? [ 191.640429][ T2156] usb 5-1: Using ep0 maxpacket: 16 [ 191.652332][ T2156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 191.678117][ T2156] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 191.687829][ T2156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.696382][ T2156] usb 5-1: Product: syz [ 191.701788][ T2156] usb 5-1: Manufacturer: syz [ 191.706413][ T2156] usb 5-1: SerialNumber: syz [ 191.720711][ T2156] usb 5-1: config 0 descriptor?? [ 191.732633][ T2156] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 191.742265][ T2156] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 191.833546][ T24] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 191.860004][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 191.883077][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 191.891558][ T24] usb 6-1: media controller created [ 191.947670][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.359074][ T2156] em28xx 5-1:0.0: chip ID is em2765 [ 192.508562][T10566] Falling back ldisc for ttyS3. [ 192.627003][ T2156] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 192.668165][ T2156] em28xx 5-1:0.0: board has no eeprom [ 192.749594][ T2156] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 192.768722][ T2156] em28xx 5-1:0.0: dvb set to bulk mode. [ 192.779282][ T5890] em28xx 5-1:0.0: Binding DVB extension [ 192.807344][ T2156] usb 5-1: USB disconnect, device number 12 [ 192.824293][ T2156] em28xx 5-1:0.0: Disconnecting em28xx [ 192.889264][ T5890] em28xx 5-1:0.0: Registering input extension [ 192.911386][ T2156] em28xx 5-1:0.0: Closing input extension [ 192.972003][ T2156] em28xx 5-1:0.0: Freeing device [ 193.072397][T10529] usb 6-1: dvb_usb_ec168: I2C read not implemented [ 193.072441][ T24] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 193.182874][ T24] usb 6-1: USB disconnect, device number 6 [ 193.216675][ T29] audit: type=1400 audit(1774874206.780:870): avc: denied { setopt } for pid=10591 comm="syz.3.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.253533][T10596] netlink: 'syz.1.2079': attribute type 1 has an invalid length. [ 193.262282][T10596] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2079'. [ 193.283794][T10596] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2079'. [ 193.310189][ T29] audit: type=1400 audit(1774874206.870:871): avc: denied { append } for pid=10597 comm="syz.4.2082" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.316022][T10596] netlink: 'syz.1.2079': attribute type 1 has an invalid length. [ 193.360153][T10596] netlink: 'syz.1.2079': attribute type 8 has an invalid length. [ 193.372539][T10596] netlink: 606 bytes leftover after parsing attributes in process `syz.1.2079'. [ 194.031378][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.037807][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.071063][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 194.090425][ T5891] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 194.202215][T10632] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2097'. [ 194.233185][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.252732][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.263900][ T5891] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.270671][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.284547][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 194.311809][ T5891] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.346621][ T5891] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.350354][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.360440][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 194.383479][ T5891] usb 5-1: Product: syz [ 194.388241][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.402478][ T5891] usb 5-1: SerialNumber: syz [ 194.413773][ T24] usb 6-1: config 0 descriptor?? [ 194.425959][ T5891] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 194.454070][ T5891] cdc_ncm 5-1:1.0: bind() failure [ 194.537785][T10643] vlan2: entered allmulticast mode [ 194.740469][ T5891] usb 5-1: USB disconnect, device number 13 [ 194.857546][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 194.874508][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 194.902650][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 194.922914][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 194.945528][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 194.961177][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 194.969539][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 194.977458][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 194.989568][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 194.997410][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 195.011522][ T24] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 195.208299][ T5891] usb 6-1: USB disconnect, device number 7 [ 195.753470][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2122'. [ 195.781919][T10689] netlink: 'syz.2.2122': attribute type 7 has an invalid length. [ 195.789703][T10689] netlink: 'syz.2.2122': attribute type 8 has an invalid length. [ 195.798014][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'. [ 196.105755][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 196.115145][ T5131] Bluetooth: hci1: command 0x0406 tx timeout [ 196.121359][ T5131] Bluetooth: hci0: command 0x0406 tx timeout [ 196.262303][T10709] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.269321][T10709] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 196.364865][ T5809] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 196.371847][ T5891] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 196.532007][ T5891] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.540075][ T5891] usb 5-1: config 0 has no interface number 0 [ 196.546269][ T5891] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.557627][ T5891] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.568312][ T5891] usb 5-1: config 0 interface 1 has no altsetting 0 [ 196.575049][ T5891] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 196.585068][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.596946][ T5891] usb 5-1: config 0 descriptor?? [ 196.710512][ T5877] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 196.734438][T10728] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.2140'. [ 196.784435][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2141'. [ 196.869152][ T29] audit: type=1400 audit(1774874210.430:872): avc: denied { ioctl } for pid=10733 comm="syz.3.2143" path="socket:[27549]" dev="sockfs" ino=27549 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.871550][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 196.917140][ T5877] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 196.934546][ T5877] usb 2-1: config 0 has no interface number 0 [ 196.942029][ T5877] usb 2-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 777 [ 196.951647][ T24] kernel write not supported for file /media7 (pid: 24 comm: kworker/1:0) [ 196.968621][ T5877] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 196.985055][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.000441][ T5877] usb 2-1: Product: syz [ 197.004715][ T5877] usb 2-1: Manufacturer: syz [ 197.009388][ T5877] usb 2-1: SerialNumber: syz [ 197.021358][ T5877] usb 2-1: config 0 descriptor?? [ 197.037169][T10740] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 197.052362][T10719] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.064627][ T5877] redrat3 2-1:0.83: Couldn't find all endpoints [ 197.142910][T10744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.167069][T10746] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2149'. [ 197.201662][T10744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.227306][ T5891] input: HID 2179:0053 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:2179:0053.0013/input/input19 [ 197.331061][ T5891] uclogic 0003:2179:0053.0013: input,hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.4-1/input1 [ 197.368505][ T2156] usb 2-1: USB disconnect, device number 15 [ 197.425317][ T5891] usb 5-1: USB disconnect, device number 14 [ 197.494627][ T29] audit: type=1400 audit(1774874211.060:873): avc: denied { open } for pid=10753 comm="syz.5.2153" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 197.496826][T10751] fido_id[10751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 197.581286][ T29] audit: type=1400 audit(1774874211.110:874): avc: denied { ioctl } for pid=10753 comm="syz.5.2153" path="/dev/ttyqe" dev="devtmpfs" ino=389 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 197.737226][ T29] audit: type=1400 audit(1774874211.300:875): avc: denied { getopt } for pid=10763 comm="syz.5.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.839450][T10770] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.010818][ T5891] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 198.172204][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 198.201438][ T5891] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 198.217654][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.236841][ T5891] usb 3-1: config 0 descriptor?? [ 198.251067][T10766] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.357721][ T5809] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 198.538741][T10795] syz_tun: entered allmulticast mode [ 198.729896][ T5891] asus 0003:0B05:1ABE.0014: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.2-1/input0 [ 198.738927][T10803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2174'. [ 198.904227][ T5890] usb 3-1: USB disconnect, device number 23 [ 199.074333][T10815] binder: 10814:10815 ioctl c0306201 0 returned -14 [ 199.082433][T10815] binder: 10814:10815 ioctl c0306201 200000000880 returned -14 [ 199.098863][ T5891] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 199.222920][T10819] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2181'. [ 199.250407][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 199.257277][ T5891] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 199.265876][ T5891] usb 5-1: config 0 has no interface number 0 [ 199.284153][ T5891] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 199.300956][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.319400][ T5891] usb 5-1: Product: syz [ 199.329236][ T5891] usb 5-1: Manufacturer: syz [ 199.339524][ T5891] usb 5-1: SerialNumber: syz [ 199.375250][ T5891] usb 5-1: config 0 descriptor?? [ 199.400092][ T5891] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 199.598913][ T5891] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 199.639150][ T5891] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 200.063419][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 200.064437][ T2156] usb 5-1: USB disconnect, device number 15 [ 200.094460][T10845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2192'. [ 200.099805][ T2156] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 200.168275][ T2156] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 200.198525][ T2156] quatech2 5-1:0.51: device disconnected [ 200.364213][ T29] audit: type=1400 audit(1774874213.930:876): avc: denied { bind } for pid=10856 comm="syz.3.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.408155][ T29] audit: type=1400 audit(1774874213.930:877): avc: denied { name_bind } for pid=10856 comm="syz.3.2197" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 200.439438][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 200.449883][ T29] audit: type=1400 audit(1774874213.930:878): avc: denied { node_bind } for pid=10856 comm="syz.3.2197" saddr=fe80::28 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 200.822864][ T2156] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 200.990562][ T2156] usb 2-1: Using ep0 maxpacket: 32 [ 200.997463][ T2156] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 201.008489][ T2156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.041224][ T2156] usb 2-1: config 0 descriptor?? [ 201.260499][ T2156] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 201.276727][ T2156] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.296878][ T2156] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 201.325526][ T2156] usb 2-1: media controller created [ 201.405846][ T2156] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.424434][ T29] audit: type=1400 audit(1774874214.990:879): avc: denied { lock } for pid=10898 comm="syz.2.2218" path="socket:[28798]" dev="sockfs" ino=28798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.465396][ T2156] az6027: usb out operation failed. (-71) [ 201.477523][ T2156] az6027: usb out operation failed. (-71) [ 201.487182][ T2156] stb0899_attach: Driver disabled by Kconfig [ 201.493958][ T2156] az6027: no front-end attached [ 201.493958][ T2156] [ 201.511550][ T2156] az6027: usb out operation failed. (-71) [ 201.558317][ T2156] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 201.580508][ T2156] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 201.612451][ T2156] dvb-usb: schedule remote query interval to 400 msecs. [ 201.632649][ T2156] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 201.648789][ T2156] usb 2-1: USB disconnect, device number 16 [ 201.852246][ T2156] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 202.435539][ T29] audit: type=1400 audit(1774874216.000:880): avc: denied { read } for pid=10942 comm="syz.2.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.502921][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 202.739543][ T29] audit: type=1400 audit(1774874216.300:881): avc: denied { listen } for pid=10960 comm="syz.2.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.908575][ T29] audit: type=1400 audit(1774874216.470:882): avc: denied { write } for pid=10968 comm="syz.2.2249" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 202.932128][ T793] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 203.100397][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 203.107653][ T793] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 203.117118][ T793] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 203.141354][ T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 203.160433][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.183476][ T793] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.221663][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.235784][ T793] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 203.250990][T10983] tipc: Started in network mode [ 203.255958][ T793] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.269887][T10983] tipc: Node identity ac14140f, cluster identity 4711 [ 203.280942][T10983] tipc: New replicast peer: 255.255.255.255 [ 203.288275][ T793] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 203.299988][T10983] tipc: Enabled bearer , priority 10 [ 203.306611][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.327985][ T793] usb 2-1: config 0 descriptor?? [ 203.413965][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2256'. [ 203.569193][ T793] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 203.805176][ T29] audit: type=1400 audit(1774874217.370:883): avc: denied { read write } for pid=10954 comm="syz.1.2244" name="lp0" dev="devtmpfs" ino=3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 203.842990][ T793] usb 2-1: USB disconnect, device number 17 [ 203.861163][ T29] audit: type=1400 audit(1774874217.370:884): avc: denied { open } for pid=10954 comm="syz.1.2244" path="/dev/usb/lp0" dev="devtmpfs" ino=3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 203.890898][ T793] usblp0: removed [ 204.080391][ T5891] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 204.262708][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 204.278996][ T5891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.289289][ T5891] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 204.304267][ T5891] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 204.324042][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.336825][ T5891] usb 6-1: Product: syz [ 204.341130][ T5891] usb 6-1: Manufacturer: syz [ 204.345789][ T5891] usb 6-1: SerialNumber: syz [ 204.354072][ T5891] usb 6-1: config 0 descriptor?? [ 204.412851][ T793] tipc: Node number set to 2886997007 [ 204.598240][ T5891] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 204.638152][ T5891] 31 db 99 aa dd 09 f1 37 [ 204.655746][ T5891] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 204.820474][ T2156] usb 6-1: USB disconnect, device number 8 [ 204.991518][ T29] audit: type=1400 audit(1774874218.560:885): avc: denied { setopt } for pid=11016 comm="syz.1.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.118746][T11023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2272'. [ 205.131934][T11023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2272'. [ 205.312292][T11027] batadv_slave_0: entered promiscuous mode [ 205.337459][T11026] batadv_slave_0: left promiscuous mode [ 205.680407][ T5877] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 205.864389][ T5877] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.882942][ T5877] usb 6-1: config 0 has no interface number 0 [ 205.893005][ T5877] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 205.902236][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.910222][ T5877] usb 6-1: Product: syz [ 205.919680][ T5877] usb 6-1: Manufacturer: syz [ 205.929345][T11048] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2281'. [ 205.942039][ T5877] usb 6-1: SerialNumber: syz [ 205.948653][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2281'. [ 205.959015][ T5877] usb 6-1: config 0 descriptor?? [ 206.177160][ T5877] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 206.187451][T11056] loop7: detected capacity change from 0 to 7 [ 206.227305][ T5877] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.248007][ T5877] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 206.266775][ T5877] usb 6-1: media controller created [ 206.281882][ T5826] Dev loop7: unable to read RDB block 7 [ 206.290378][ T5826] loop7: unable to read partition table [ 206.296216][ T5826] loop7: partition table beyond EOD, truncated [ 206.332158][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.366066][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 206.413935][T11056] Dev loop7: unable to read RDB block 7 [ 206.430488][T11056] loop7: unable to read partition table [ 206.440798][ T5877] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 206.448979][T11056] loop7: partition table beyond EOD, truncated [ 206.470030][T11056] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 206.513642][ T5877] usb 6-1: USB disconnect, device number 9 [ 206.948021][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 206.948038][ T29] audit: type=1400 audit(1774874220.510:887): avc: denied { bind } for pid=11070 comm="syz.2.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.968064][T11072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.201430][T10994] Set syz1 is full, maxelem 65536 reached [ 207.476864][T11094] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 207.486867][ T9318] syz_tun (unregistering): left allmulticast mode [ 207.507375][T11094] /dev/nullb0: Can't open blockdev [ 207.605550][T11099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2306'. [ 207.618587][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2306'. [ 207.628680][ T793] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 207.774577][ T85] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.792240][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 207.802046][ T793] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 207.825153][ T793] usb 3-1: config 0 has no interface number 0 [ 207.845386][ T793] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 207.875777][ T793] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 207.909629][ T85] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.931575][ T793] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 207.956179][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.970403][ T793] usb 3-1: Product: syz [ 207.979634][ T793] usb 3-1: Manufacturer: syz [ 208.000597][ T793] usb 3-1: SerialNumber: syz [ 208.008686][ T793] usb 3-1: config 0 descriptor?? [ 208.076797][ T85] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.218029][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.220205][ T85] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.243022][ T793] radio-si470x 3-1:0.35: this is not a si470x device. [ 208.249981][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.269447][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.277687][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.285336][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.295110][ T793] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 208.508793][ T793] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 208.591982][ T85] bridge_slave_1: left allmulticast mode [ 208.603171][ T85] bridge_slave_1: left promiscuous mode [ 208.623027][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.646901][ T85] bridge_slave_0: left allmulticast mode [ 208.663047][ T85] bridge_slave_0: left promiscuous mode [ 208.668878][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.716857][ T5890] usb 3-1: USB disconnect, device number 24 [ 208.724092][ T5890] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 208.990829][ T29] audit: type=1400 audit(1774874222.550:888): avc: denied { accept } for pid=11129 comm="syz.3.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.041919][ T29] audit: type=1400 audit(1774874222.580:889): avc: denied { write } for pid=11129 comm="syz.3.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.148668][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.212634][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.244435][ T85] bond0 (unregistering): Released all slaves [ 209.551116][ T85] IPVS: stopping backup sync thread 7066 ... [ 209.577560][T11111] chnl_net:caif_netlink_parms(): no params data found [ 209.611756][ T5890] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 209.806380][ T5890] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.852033][ T5890] usb 5-1: config 0 has no interface number 0 [ 209.858177][ T5890] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 209.910379][ T5890] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 209.948228][ T5890] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 209.967696][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.007566][ T5890] usb 5-1: config 0 descriptor?? [ 210.046667][T11142] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 210.067979][ T5890] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 210.294143][ T85] hsr_slave_0: left promiscuous mode [ 210.304298][ T85] hsr_slave_1: left promiscuous mode [ 210.310229][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.339176][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.346650][ T5820] Bluetooth: hci0: command tx timeout [ 210.371747][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.386377][ T5877] usb 5-1: USB disconnect, device number 16 [ 210.386523][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 210.400474][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.446172][ T85] veth1: left allmulticast mode [ 210.462590][ T85] veth1: left promiscuous mode [ 210.472866][ T85] veth0_macvtap: left promiscuous mode [ 210.484059][ T85] veth1_vlan: left promiscuous mode [ 210.489397][ T85] veth0_vlan: left promiscuous mode [ 210.792231][ T85] team0 (unregistering): Port device team_slave_1 removed [ 210.808484][ T85] team0 (unregistering): Port device team_slave_0 removed [ 210.974387][T11111] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.983317][T11111] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.995250][T11111] bridge_slave_0: entered allmulticast mode [ 211.012710][T11111] bridge_slave_0: entered promiscuous mode [ 211.026028][T11111] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.034048][T11111] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.041824][T11111] bridge_slave_1: entered allmulticast mode [ 211.049288][T11111] bridge_slave_1: entered promiscuous mode [ 211.115250][ T5877] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 211.117350][T11111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.191717][T11111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.253381][T11111] team0: Port device team_slave_0 added [ 211.265366][T11111] team0: Port device team_slave_1 added [ 211.301189][ T5877] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 211.321380][ T5877] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.335899][T11111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.344000][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.350500][ T5877] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.372474][T11111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.396043][T11111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.403375][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.420388][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.442008][T11111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.454396][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 211.466036][ T5877] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.471847][ T85] IPVS: stop unused estimator thread 0... [ 211.487449][ T5877] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.520450][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.539756][ T5877] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.559934][T11111] hsr_slave_0: entered promiscuous mode [ 211.568041][ T5877] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.583870][T11111] hsr_slave_1: entered promiscuous mode [ 211.590089][T11111] debugfs: 'hsr0' already exists in 'hsr' [ 211.596206][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.606119][T11111] Cannot create hsr debugfs directory [ 211.612373][ T5877] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.634040][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.635775][ T5877] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.645996][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.670367][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.691200][ T5877] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.700092][ T5877] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.712919][ T5891] kernel read not supported for file /dsp1 (pid: 5891 comm: kworker/0:7) [ 211.723448][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 211.739060][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.757061][ T5877] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.762921][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.795536][ T5877] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.811368][ T24] usb 5-1: config 0 descriptor?? [ 211.837085][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.858302][ T5877] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.881712][ T5877] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.900377][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.908348][ T5877] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.935573][ T5877] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.975413][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 212.002899][ T5877] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 212.042005][ T5877] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 212.064517][ T5877] usb 6-1: Product: syz [ 212.068700][ T5877] usb 6-1: Manufacturer: syz [ 212.100792][ T5877] usb 6-1: SerialNumber: syz [ 212.111505][ T5877] usb 6-1: config 0 descriptor?? [ 212.133331][ T5877] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 212.265488][ T24] hid_parser_main: 479 callbacks suppressed [ 212.265517][ T24] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x2 [ 212.295183][T11111] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 212.304580][ T24] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 212.342542][T11111] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 212.396134][T11111] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 212.422029][ T5820] Bluetooth: hci0: command tx timeout [ 212.443519][T11111] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 212.462521][T11213] xt_CT: No such helper "netbios-ns" [ 212.464678][ T24] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 212.488427][ T24] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 212.500261][ T24] pyra 0003:1E7D:2CF6.0015: probe with driver pyra failed with error -32 [ 212.521385][ T24] usb 5-1: USB disconnect, device number 17 [ 212.579120][ T5890] usb 6-1: USB disconnect, device number 10 [ 212.594020][ T5890] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 212.719237][T11111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.748119][T11111] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.788827][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.795979][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.834326][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.841490][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.345522][T11111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.732653][ T5877] kernel read not supported for file /dsp1 (pid: 5877 comm: kworker/0:6) [ 213.812786][ T5928] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 213.893011][T11111] veth0_vlan: entered promiscuous mode [ 213.934495][T11111] veth1_vlan: entered promiscuous mode [ 214.000982][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 214.015738][ T5928] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 214.030352][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.055018][ T5928] usb 6-1: Product: syz [ 214.070743][ T5928] usb 6-1: Manufacturer: syz [ 214.081031][ T5928] usb 6-1: SerialNumber: syz [ 214.088343][T11111] veth0_macvtap: entered promiscuous mode [ 214.143207][T11111] veth1_macvtap: entered promiscuous mode [ 214.172930][T11111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.198663][T11111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.240807][ T1042] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.276382][ T1042] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.309343][ T5928] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 214.324804][ T1042] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.348621][ T5928] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 214.365061][ T1042] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.387676][ T5928] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 214.410625][ T5928] usb 6-1: media controller created [ 214.439390][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.502861][ T5820] Bluetooth: hci0: command tx timeout [ 214.566604][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.606983][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.638278][ T29] audit: type=1400 audit(1774874228.200:890): avc: denied { name_bind } for pid=11311 comm="syz.2.2366" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 214.694451][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.703982][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.719106][ T5928] zl10353_read_register: readreg error (reg=127, ret==-71) [ 214.727113][ T29] audit: type=1400 audit(1774874228.290:891): avc: denied { mounton } for pid=11111 comm="syz-executor" path="/root/syzkaller.NDlqpj/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 214.811838][ T29] audit: type=1400 audit(1774874228.350:892): avc: denied { mounton } for pid=11111 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 214.820080][ T5928] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 214.924395][ T5928] usb 6-1: USB disconnect, device number 11 [ 215.467357][T11340] bond1: entered promiscuous mode [ 216.030932][T11360] netlink: 'syz.5.2383': attribute type 4 has an invalid length. [ 216.038696][T11360] netlink: 4168 bytes leftover after parsing attributes in process `syz.5.2383'. [ 216.304683][ T29] audit: type=1400 audit(1774874229.870:893): avc: denied { bind } for pid=11368 comm="syz.3.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 216.402461][ T29] audit: type=1400 audit(1774874229.960:894): avc: denied { name_connect } for pid=11372 comm="syz.3.2389" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 216.490405][ T29] audit: type=1400 audit(1774874230.050:895): avc: denied { listen } for pid=11372 comm="syz.3.2389" lport=49187 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.560359][ T29] audit: type=1400 audit(1774874230.050:896): avc: denied { accept } for pid=11372 comm="syz.3.2389" lport=49187 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.592036][ T5820] Bluetooth: hci0: command tx timeout [ 216.918072][T11397] bond0: entered promiscuous mode [ 216.933521][T11397] bond_slave_0: entered promiscuous mode [ 216.944046][T11397] bond_slave_1: entered promiscuous mode [ 216.958260][T11397] batadv0: entered promiscuous mode [ 216.965419][T11397] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 216.976099][T11397] bond0: left promiscuous mode [ 216.981636][T11397] bond_slave_0: left promiscuous mode [ 216.989301][T11397] bond_slave_1: left promiscuous mode [ 217.000590][T11397] batadv0: left promiscuous mode [ 217.175286][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2403'. [ 217.221114][ T5877] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 217.399466][ T5877] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 217.414650][ T5820] block nbd2: Receive control failed (result -107) [ 217.415164][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.429835][ T5877] usb 5-1: Product: syz [ 217.437796][ T5877] usb 5-1: Manufacturer: syz [ 217.447249][T11415] block nbd2: shutting down sockets [ 217.469096][ T5877] usb 5-1: SerialNumber: syz [ 217.614740][T11419] syz.3.2409 (11419) used greatest stack depth: 18264 bytes left [ 217.693498][T11428] trusted_key: encrypted_key: keyword 'ÿew' not recognized [ 217.806983][ T29] audit: type=1400 audit(1774874231.370:897): avc: denied { create } for pid=11432 comm="syz.2.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 217.848044][ T29] audit: type=1400 audit(1774874231.410:898): avc: denied { ioctl } for pid=11432 comm="syz.2.2415" path="socket:[31059]" dev="sockfs" ino=31059 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 217.923196][ T29] audit: type=1400 audit(1774874231.440:899): avc: denied { bind } for pid=11432 comm="syz.2.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 217.945898][ T5877] rtl8150 5-1:1.0: couldn't reset the device [ 217.952345][ T5877] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 217.978538][ T5877] usb 5-1: USB disconnect, device number 18 [ 218.472836][T11461] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.2429'. [ 219.042850][T11481] 9p: Unknown uid 00000000004294967295 [ 219.470467][ T2156] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 219.643474][ T2156] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 219.660388][ T2156] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.680554][ T2156] usb 7-1: Product: syz [ 219.685716][ T2156] usb 7-1: Manufacturer: syz [ 219.690799][ T2156] usb 7-1: SerialNumber: syz [ 219.759729][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2456'. [ 219.928916][T11528] netlink: 'syz.5.2460': attribute type 5 has an invalid length. [ 220.081023][T11530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2461'. [ 220.126533][ T2156] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 220.165169][ T2156] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 220.201577][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2464'. [ 220.402050][ T2156] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 220.427806][ T2156] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 220.451089][ T2156] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 220.484743][ T2156] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 220.518978][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2469'. [ 220.534055][ T2156] usb 7-1: USB disconnect, device number 2 [ 220.716349][T11558] TCP: TCP_TX_DELAY enabled [ 221.518655][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2486'. [ 221.565389][T11589] netlink: 'syz.3.2486': attribute type 18 has an invalid length. [ 221.599774][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2486'. [ 221.621479][T11596] team_slave_0: entered allmulticast mode [ 221.646448][T11596] team_slave_0: entered promiscuous mode [ 223.339464][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 223.339481][ T29] audit: type=1400 audit(1774874236.900:914): avc: denied { getopt } for pid=11667 comm="syz.6.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.679900][T11688] veth0: entered promiscuous mode [ 223.691923][ T5877] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 223.721161][T11688] veth0: left promiscuous mode [ 223.870600][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 223.903099][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 223.914343][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 223.950392][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 223.987443][ T5877] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 224.020950][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.029075][ T5877] usb 3-1: Product: syz [ 224.046523][ T5877] usb 3-1: Manufacturer: syz [ 224.053437][ T5877] usb 3-1: SerialNumber: syz [ 224.077524][ T5877] usb 3-1: config 0 descriptor?? [ 224.099879][ T5877] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 224.366186][ T5877] usb 3-1: USB disconnect, device number 25 [ 224.366196][ C1] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 224.381212][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 224.618261][T11718] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 224.762111][ T29] audit: type=1326 audit(1774874238.330:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.3.2548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd6719c819 code=0x0 [ 224.765728][T11725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.827021][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2549'. [ 225.014575][T11735] netlink: 'syz.6.2553': attribute type 8 has an invalid length. [ 225.040662][T11735] sch_fq: defrate 0 ignored. [ 225.186184][ T29] audit: type=1400 audit(1774874238.750:916): avc: denied { listen } for pid=11742 comm="syz.2.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 225.644043][T11759] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2561'. [ 225.653635][T11759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2561'. [ 225.662223][ T29] audit: type=1400 audit(1774874239.230:917): avc: denied { write } for pid=11760 comm="syz.6.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 225.720404][ T5891] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 225.893644][ T5891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 225.906434][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 225.922487][ T5891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 225.934688][ T5891] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 225.945179][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.953928][ T5891] usb 3-1: Product: syz [ 225.958220][ T5891] usb 3-1: Manufacturer: syz [ 225.963241][ T5891] usb 3-1: SerialNumber: syz [ 225.974702][ T5891] usb 3-1: config 0 descriptor?? [ 225.983259][T11755] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 225.990994][T11755] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 225.999972][ T5891] usb 3-1: ucan: probing device on interface #0 [ 226.073354][ T5877] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 226.230397][ T5877] usb 7-1: Using ep0 maxpacket: 32 [ 226.238169][ T5877] usb 7-1: unable to get BOS descriptor or descriptor too short [ 226.255745][ T5877] usb 7-1: config 128 has an invalid interface number: 34 but max is 0 [ 226.269320][ T5877] usb 7-1: config 128 has no interface number 0 [ 226.276253][ T5877] usb 7-1: config 128 interface 34 has no altsetting 0 [ 226.287733][ T5877] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00ab, bcdDevice=99.38 [ 226.301475][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.326117][ T5877] usb 7-1: Product: syz [ 226.335200][ T5877] usb 7-1: Manufacturer: syz [ 226.358668][ T5877] usb 7-1: SerialNumber: syz [ 226.412615][ T5891] usb 3-1: ucan: device reported invalid device info [ 226.425856][ T5891] usb 3-1: ucan: probe failed; try to update the device firmware [ 226.432004][ T29] audit: type=1400 audit(1774874239.990:918): avc: denied { append } for pid=11794 comm="syz.5.2576" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 226.485920][ T29] audit: type=1400 audit(1774874240.000:919): avc: denied { write } for pid=11794 comm="syz.5.2576" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 226.661706][ T5809] Bluetooth: hci2: command 0x1003 tx timeout [ 226.662305][ T5820] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 226.687541][ T793] usb 3-1: USB disconnect, device number 26 [ 226.997004][ T5877] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in warm state. [ 227.020167][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.054455][ T5877] dvbdev: DVB: registering new adapter (Terratec Cinergy T USB XXS (HD)/ T3) [ 227.072842][ T5877] usb 7-1: media controller created [ 227.112722][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.133816][ T29] audit: type=1400 audit(1774874240.700:920): avc: denied { unmount } for pid=11828 comm="syz.4.2585" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 227.188047][ T29] audit: type=1400 audit(1774874240.750:921): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 227.255512][ T29] audit: type=1400 audit(1774874240.820:922): avc: denied { append } for pid=11834 comm="syz.5.2586" name="file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 227.321352][ T5877] DVB: Unable to find symbol dib7000p_attach() [ 227.330645][ T5877] dvb-usb: no frontend was attached by 'Terratec Cinergy T USB XXS (HD)/ T3' [ 227.413796][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2589'. [ 227.451125][ T5877] rc_core: IR keymap rc-dib0700-rc5 not found [ 227.464561][ T5877] Registered IR keymap rc-empty [ 227.469694][ T5877] dvb-usb: could not initialize remote control. [ 227.501387][ T5877] dvb-usb: Terratec Cinergy T USB XXS (HD)/ T3 successfully initialized and connected. [ 227.516028][T11847] Bluetooth: MGMT ver 1.23 [ 227.535417][ T5877] usb 7-1: USB disconnect, device number 3 [ 227.671334][ T5877] dvb-usb: Terratec Cinergy T USB XXS (HD)/ T3 successfully deinitialized and disconnected. [ 227.719985][T11855] netlink: 'syz.4.2593': attribute type 3 has an invalid length. [ 227.823435][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2596'. [ 227.861592][T11862] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2596'. [ 228.440409][ T29] audit: type=1400 audit(1774874242.000:923): avc: denied { append } for pid=11896 comm="syz.5.2607" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 228.891235][ T5868] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 229.070430][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 229.084421][ T5868] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 229.104480][ T5868] usb 5-1: config 1 has no interface number 1 [ 229.120413][ T5868] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.140403][ T5868] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 229.163904][ T5868] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.207835][ T5868] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.222221][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.270341][ T5868] usb 5-1: Product: syz [ 229.283795][ T5868] usb 5-1: Manufacturer: syz [ 229.300734][ T5877] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 229.308600][ T5868] usb 5-1: SerialNumber: syz [ 229.461207][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 229.465351][ T29] audit: type=1400 audit(1774874243.030:924): avc: denied { mount } for pid=11938 comm="syz.3.2619" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 229.472974][ T5877] usb 6-1: unable to get BOS descriptor or descriptor too short [ 229.523202][ T5877] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.555997][ T5877] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.569603][ T5868] usb 5-1: failed to enable PITCH for EP 0x82 [ 229.580899][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.599445][ T5868] usb 5-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 229.607516][ T5877] usb 6-1: Product: syz [ 229.620203][ T5877] usb 6-1: Manufacturer: syz [ 229.634986][ T5877] usb 6-1: SerialNumber: syz [ 229.732497][ T5868] usb 5-1: USB disconnect, device number 19 [ 229.827791][T10017] udevd[10017]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.915863][ T29] audit: type=1400 audit(1774874243.480:925): avc: denied { ioctl } for pid=11954 comm="syz.6.2623" path="socket:[31738]" dev="sockfs" ino=31738 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 230.123333][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'. [ 230.316173][ T29] audit: type=1326 audit(1774874243.880:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 230.366995][ T29] audit: type=1326 audit(1774874243.880:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 230.399905][ T29] audit: type=1326 audit(1774874243.880:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 230.426664][ T29] audit: type=1326 audit(1774874243.880:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 230.470374][ T5868] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 230.477946][ T29] audit: type=1326 audit(1774874243.880:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 230.509500][ T5877] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 230.545469][ T29] audit: type=1326 audit(1774874243.880:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 230.550910][ T5877] cdc_ncm 6-1:1.0: bind() failure [ 230.575698][ T29] audit: type=1326 audit(1774874243.880:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 230.625464][ T5877] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 230.634236][ T5877] cdc_ncm 6-1:1.1: bind() failure [ 230.659588][ T5877] usb 6-1: USB disconnect, device number 12 [ 230.688594][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 230.721310][ T5868] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.755143][ T5868] usb 7-1: config 0 has no interfaces? [ 230.760722][ T5868] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 230.769758][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.802778][ T5868] usb 7-1: config 0 descriptor?? [ 230.913937][T11997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2641'. [ 231.026586][ T5890] usb 7-1: USB disconnect, device number 4 [ 232.740487][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 232.898798][ T5890] kernel write not supported for file /uhid (pid: 5890 comm: kworker/1:3) [ 232.910367][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 232.917197][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.927783][ T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.949096][ T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.965747][ T24] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 233.021579][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 233.028271][ T24] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 233.049608][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.073592][ T24] usb 5-1: config 0 descriptor?? [ 233.466925][ T153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.510625][ T24] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0 [ 233.518476][ T24] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0 [ 233.539260][ T24] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0 [ 233.548620][ T24] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0 [ 233.556624][ T24] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0 [ 233.571925][ T24] hid-thrustmaster 0003:044F:B65D.0016: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 233.585446][ T24] hid-thrustmaster 0003:044F:B65D.0016: Wrong number of endpoints? [ 233.694489][ C1] hid-thrustmaster 0003:044F:B65D.0016: Unknown packet type 0x0, unable to proceed further with wheel init [ 233.783849][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 233.783866][ T29] audit: type=1400 audit(1774874247.350:957): avc: denied { read } for pid=12093 comm="syz.2.2685" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 233.846230][ T153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.856665][ T29] audit: type=1400 audit(1774874247.350:958): avc: denied { open } for pid=12093 comm="syz.2.2685" path="/552/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 233.920653][ T24] usb 5-1: USB disconnect, device number 20 [ 233.960638][ T29] audit: type=1400 audit(1774874247.520:959): avc: denied { bind } for pid=12098 comm="syz.3.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 234.021018][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2688'. [ 234.041918][ T153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.202968][ T153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.355020][ T29] audit: type=1400 audit(1774874247.920:960): avc: denied { read } for pid=5475 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 234.481221][ T153] bridge_slave_1: left allmulticast mode [ 234.493932][ T153] bridge_slave_1: left promiscuous mode [ 234.507609][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.538739][ T153] bridge_slave_0: left allmulticast mode [ 234.554340][ T153] bridge_slave_0: left promiscuous mode [ 234.568551][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.633318][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.648251][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.657917][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.669543][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.679335][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.139502][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.156913][ T29] audit: type=1400 audit(1774874248.720:961): avc: denied { getopt } for pid=12125 comm="syz.2.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.222522][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.273176][ T153] bond0 (unregistering): Released all slaves [ 235.314270][ T153] bond1 (unregistering): Released all slaves [ 235.840382][ T5868] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 236.026196][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.050496][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.082666][ T5868] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 236.104330][ T5868] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 236.130165][T12116] chnl_net:caif_netlink_parms(): no params data found [ 236.160811][ T5868] usb 3-1: Manufacturer: syz [ 236.192032][ T5868] usb 3-1: config 0 descriptor?? [ 236.555547][ T153] hsr_slave_0: left promiscuous mode [ 236.591669][ T153] hsr_slave_1: left promiscuous mode [ 236.601806][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.610888][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.658908][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.673588][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.740476][ T5820] Bluetooth: hci2: command tx timeout [ 236.753686][ T153] veth1_macvtap: left promiscuous mode [ 236.760097][ T153] veth0_macvtap: left promiscuous mode [ 236.769728][ T153] veth1_vlan: left promiscuous mode [ 236.775065][ T153] veth0_vlan: left promiscuous mode [ 236.819411][ T5868] uclogic 0003:256C:006D.0017: failed retrieving Huion firmware version: -71 [ 236.837371][ T5868] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 236.845789][ T5868] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 236.876689][ T5868] usb 3-1: USB disconnect, device number 27 [ 237.009106][T12177] 9p: Bad value for 'rfdno' [ 237.330117][ T153] team0 (unregistering): Port device team_slave_1 removed [ 237.354113][ T153] team0 (unregistering): Port device team_slave_0 removed [ 237.496444][ T29] audit: type=1400 audit(1774874251.060:962): avc: denied { map } for pid=12184 comm="syz.2.2716" path="/dev/sg0" dev="devtmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.548772][ T29] audit: type=1400 audit(1774874251.060:963): avc: denied { execute } for pid=12184 comm="syz.2.2716" path="/dev/sg0" dev="devtmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.803762][T12116] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.817995][ T29] audit: type=1400 audit(1774874251.380:964): avc: denied { remount } for pid=12192 comm="syz.2.2719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 237.849319][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.872516][T12193] cgroup: noprefix used incorrectly [ 237.890554][T12116] bridge_slave_0: entered allmulticast mode [ 237.908788][T12116] bridge_slave_0: entered promiscuous mode [ 237.925165][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.940100][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.981750][T12116] bridge_slave_1: entered allmulticast mode [ 237.993835][T12116] bridge_slave_1: entered promiscuous mode [ 238.050182][ T29] audit: type=1400 audit(1774874251.610:965): avc: denied { write } for pid=12205 comm="syz.2.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 238.083624][T12116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.112333][T12116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.130778][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 238.204650][T12116] team0: Port device team_slave_0 added [ 238.243354][T12116] team0: Port device team_slave_1 added [ 238.320545][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 238.339260][T12116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.370318][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.396746][ T24] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 238.414716][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.446452][ T24] usb 7-1: config 0 descriptor?? [ 238.455753][T12116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.473698][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 238.508788][T12116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.525682][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.576716][T12116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.774779][T12116] hsr_slave_0: entered promiscuous mode [ 238.791563][T12116] hsr_slave_1: entered promiscuous mode [ 238.816141][T12116] debugfs: 'hsr0' already exists in 'hsr' [ 238.824537][ T5820] Bluetooth: hci2: command tx timeout [ 238.843183][T12116] Cannot create hsr debugfs directory [ 238.963029][ T29] audit: type=1400 audit(1774874252.530:966): avc: denied { mounton } for pid=12244 comm="syz.4.2737" path="/612/file0" dev="tmpfs" ino=3121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 239.294500][ T24] gspca_sunplus: reg_r err -71 [ 239.299369][ T24] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 239.319478][T12116] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 239.340523][ T24] usb 7-1: USB disconnect, device number 5 [ 239.355466][T12116] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 239.404791][T12116] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 239.433102][T12116] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 239.457763][T12256] input: syz1 as /devices/virtual/input/input24 [ 239.679105][T12116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.713557][T12116] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.742974][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.750069][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.814202][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.821352][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.346607][T12116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.600535][T12309] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2753'. [ 240.833339][T12325] netlink: 'syz.3.2756': attribute type 4 has an invalid length. [ 240.873714][T12325] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2756'. [ 240.884607][T12328] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2756'. [ 240.903874][ T5820] Bluetooth: hci2: command tx timeout [ 241.099206][T12116] veth0_vlan: entered promiscuous mode [ 241.171325][T12116] veth1_vlan: entered promiscuous mode [ 241.303026][T12116] veth0_macvtap: entered promiscuous mode [ 241.338840][T12116] veth1_macvtap: entered promiscuous mode [ 241.376272][T12349] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2764'. [ 241.418059][T12116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.478221][T12116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.524873][ T153] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.575964][ T153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.639569][ T153] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.654482][ T153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.810717][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.824152][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.917526][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.976162][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.139632][T12381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.349603][ T29] audit: type=1400 audit(1774874255.910:967): avc: denied { connect } for pid=12392 comm="syz.6.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 242.980794][ T5820] Bluetooth: hci2: command tx timeout [ 243.077094][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2795'. [ 243.213590][T12432] ªªªªªª: renamed from vlan0 (while UP) [ 243.403700][T12444] tap0: tun_chr_ioctl cmd 1074025678 [ 243.409024][T12444] tap0: group set to 0 [ 243.430926][ T29] audit: type=1400 audit(1774874256.990:968): avc: denied { write } for pid=12445 comm="syz.2.2802" path="socket:[35487]" dev="sockfs" ino=35487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 243.669636][ T29] audit: type=1400 audit(1774874257.230:969): avc: denied { mounton } for pid=12458 comm="syz.4.2808" path="/proc/1323" dev="proc" ino=35510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 244.190378][ T5877] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 244.350729][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 244.374405][ T5877] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 244.397915][ T5877] usb 3-1: config 0 has no interface number 0 [ 244.413384][ T5877] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.450360][ T5877] usb 3-1: config 0 interface 85 has no altsetting 0 [ 244.465034][ T5877] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 244.475762][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.484822][ T29] audit: type=1400 audit(1774874258.040:970): avc: denied { write } for pid=12497 comm="syz.7.2827" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 244.519073][ T5877] usb 3-1: Product: syz [ 244.530382][ T5877] usb 3-1: Manufacturer: syz [ 244.534992][ T5877] usb 3-1: SerialNumber: syz [ 244.547707][ T5877] usb 3-1: config 0 descriptor?? [ 244.897154][ T29] audit: type=1400 audit(1774874258.460:971): avc: denied { mount } for pid=12517 comm="syz.7.2837" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 245.102645][ T5868] kernel read not supported for file /dsp1 (pid: 5868 comm: kworker/0:5) [ 245.159477][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2841'. [ 245.173890][ T5877] appletouch 3-1:0.85: Geyser mode initialized. [ 245.182575][ T5877] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input25 [ 245.426698][ T5877] usb 3-1: USB disconnect, device number 28 [ 245.426814][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 245.526696][ T5877] appletouch 3-1:0.85: input: appletouch disconnected [ 245.587227][T12541] hub 1-0:1.0: USB hub found [ 245.607063][T12541] hub 1-0:1.0: 1 port detected [ 245.722180][T12551] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2852'. [ 246.160619][ T2156] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 246.335272][T12575] netlink: 'syz.3.2862': attribute type 1 has an invalid length. [ 246.343544][ T2156] usb 7-1: Using ep0 maxpacket: 16 [ 246.348920][T12575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.361441][ T2156] usb 7-1: config 0 has no interfaces? [ 246.368828][ T2156] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 246.389593][ T2156] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.400421][ T2156] usb 7-1: Product: syz [ 246.404592][ T2156] usb 7-1: Manufacturer: syz [ 246.412546][ T2156] usb 7-1: SerialNumber: syz [ 246.431484][ T2156] usb 7-1: config 0 descriptor?? [ 246.569402][ T29] audit: type=1400 audit(1774874260.120:972): avc: denied { read } for pid=12584 comm="syz.2.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 246.592191][ T5877] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 246.707732][ T5868] usb 7-1: USB disconnect, device number 6 [ 246.761425][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 246.768631][ T5877] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 246.792620][ T5877] usb 5-1: config 0 has no interface number 0 [ 246.798739][ T5877] usb 5-1: config 0 interface 12 has no altsetting 0 [ 246.810093][ T5877] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 246.823710][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.831898][ T5877] usb 5-1: Product: syz [ 246.836063][ T5877] usb 5-1: Manufacturer: syz [ 246.841028][ T5877] usb 5-1: SerialNumber: syz [ 246.853063][ T5877] usb 5-1: config 0 descriptor?? [ 247.343067][T12610] 9p: Bad value for 'rfdno' [ 247.483019][ T5877] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 247.504089][ T5877] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 247.541228][ T5877] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 247.568131][ T5877] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 247.589078][ T5877] usb 5-1: USB disconnect, device number 21 [ 247.862762][T12633] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2891'. [ 247.999443][T12636] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2892'. [ 248.056676][ T29] audit: type=1400 audit(1774874261.620:973): avc: denied { execstack } for pid=12637 comm="syz.7.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 249.078265][ T29] audit: type=1400 audit(1774874262.640:974): avc: denied { read } for pid=12680 comm="syz.4.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 249.460477][ T50] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 249.622030][ T50] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 249.631412][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.668588][ T50] usb 3-1: config 0 descriptor?? [ 249.675713][ T29] audit: type=1400 audit(1774874519.294:975): avc: denied { watch } for pid=12691 comm="syz.4.2914" path="/650/file1" dev="tmpfs" ino=3322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 249.729943][ T29] audit: type=1400 audit(1774874519.294:976): avc: denied { watch_sb watch_reads } for pid=12691 comm="syz.4.2914" path="/650/file1" dev="tmpfs" ino=3322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.912017][ T50] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 250.160515][ T50] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 250.180468][ T50] [drm] Initialized udl on minor 2 [ 250.493281][ T5890] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 250.515429][ T50] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 250.534486][ T50] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 250.547863][ T2156] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 250.569022][ T50] usb 3-1: USB disconnect, device number 29 [ 250.575990][ T2156] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 250.662901][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 250.670047][ T5890] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 250.679470][ T5890] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 250.710568][ T5890] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 250.738465][ T5890] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.760738][ T5890] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.780424][ T5890] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 250.805826][ T5890] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 250.837183][ T5890] usb 5-1: config 168 interface 0 has no altsetting 0 [ 250.846918][ T5890] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 250.855172][ T5890] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 250.870385][ T5890] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 250.895158][ T5890] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.926414][ T5890] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.947234][ T5890] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 250.969068][ T5890] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 251.014097][ T5890] usb 5-1: config 168 interface 0 has no altsetting 0 [ 251.075100][ T5890] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 251.103372][ T5890] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 251.140410][ T5890] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 251.254592][ T5890] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.348895][ T5890] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.441699][ T5890] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.476022][ T5890] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 251.516403][ T5890] usb 5-1: config 168 interface 0 has no altsetting 0 [ 251.571443][ T5890] usb 5-1: string descriptor 0 read error: -22 [ 251.578266][ T5890] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 251.597884][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.628181][ T5890] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 251.640598][ T29] audit: type=1400 audit(1774874521.264:977): avc: denied { accept } for pid=12720 comm="syz.7.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.861269][ T29] audit: type=1326 audit(1774874521.484:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12726 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 251.928665][ T29] audit: type=1326 audit(1774874521.494:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12726 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 251.985981][ T29] audit: type=1326 audit(1774874521.494:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12726 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 252.036636][ T5877] usb 5-1: USB disconnect, device number 22 [ 252.062881][ T29] audit: type=1326 audit(1774874521.494:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12726 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 252.155514][ T29] audit: type=1326 audit(1774874521.494:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12726 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 252.228927][ T29] audit: type=1326 audit(1774874521.494:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12726 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 252.312936][ T29] audit: type=1326 audit(1774874521.494:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12726 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3b9c819 code=0x7ffc0000 [ 252.330439][T12740] SELinux: security_context_str_to_sid (measure) failed with errno=-22 [ 252.616020][T12631] Set syz1 is full, maxelem 65536 reached [ 252.761274][T12753] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2938'. [ 252.820980][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2938'. [ 252.872424][T12762] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 252.878952][T12762] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 252.914627][T12762] vhci_hcd vhci_hcd.0: Device attached [ 253.161380][ T50] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 253.170819][ T5891] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 253.350059][ T5891] usb 7-1: config 7 interface 0 has no altsetting 0 [ 253.371958][ T5891] usb 7-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=d5.27 [ 253.384524][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.407499][ T5891] usb 7-1: Product: syz [ 253.416267][ T5891] usb 7-1: Manufacturer: syz [ 253.429802][ T5891] usb 7-1: SerialNumber: syz [ 253.681785][T12764] vhci_hcd: unknown pdu 1 [ 253.689066][ T13] vhci_hcd vhci_hcd.6: stop threads [ 253.691009][ T5891] au0828: au0828: Device initialization failed. [ 253.711241][ T13] vhci_hcd vhci_hcd.6: release socket [ 253.717797][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 253.731381][ T5891] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 253.770620][ T5891] usb 7-1: USB disconnect, device number 7 [ 253.844489][ T5890] hid-generic 0005:10CF:5505.0018: item fetching failed at offset 0/1 [ 253.873173][ T5890] hid-generic 0005:10CF:5505.0018: probe with driver hid-generic failed with error -22 [ 254.426345][T12831] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2957'. [ 254.748251][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 254.748275][ T29] audit: type=1326 audit(1774874524.374:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 254.836429][ T29] audit: type=1326 audit(1774874524.374:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 254.920593][ T29] audit: type=1326 audit(1774874524.374:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 255.019022][ T29] audit: type=1326 audit(1774874524.374:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 255.110687][ T29] audit: type=1326 audit(1774874524.374:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 255.165486][ T29] audit: type=1326 audit(1774874524.374:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 255.204828][T12872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2971'. [ 255.234368][ T29] audit: type=1326 audit(1774874524.374:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 255.339349][ T29] audit: type=1326 audit(1774874524.374:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 255.398809][ T29] audit: type=1326 audit(1774874524.374:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 255.411725][T12878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.479766][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.486647][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.499603][ T29] audit: type=1326 audit(1774874524.374:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 255.635689][T12889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.834980][ T24] kernel write not supported for file /uhid (pid: 24 comm: kworker/1:0) [ 255.940847][ T2156] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 256.010368][ T5891] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 256.107166][ T2156] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 256.116283][ T2156] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 256.125350][ T2156] usb 5-1: config 0 has no interface number 0 [ 256.140634][ T2156] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 256.160230][ T2156] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.163571][ T5891] usb 7-1: Using ep0 maxpacket: 16 [ 256.190785][ T2156] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 256.203815][ T2156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.215995][ T5891] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.217556][ T2156] usb 5-1: config 0 descriptor?? [ 256.240437][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.280346][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 256.298104][ T5891] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 256.318116][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.346617][ T5891] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 256.355977][ T5891] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 256.364177][ T5891] usb 7-1: Manufacturer: syz [ 256.378977][ T5891] usb 7-1: config 0 descriptor?? [ 256.690433][ T5891] rc_core: IR keymap rc-hauppauge not found [ 256.699431][ T5891] Registered IR keymap rc-empty [ 256.708336][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 256.740660][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 256.784879][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 256.803586][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input27 [ 256.835648][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 256.865593][ T2156] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input26 [ 256.870541][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 256.910425][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 256.918356][ T2156] input: failed to attach handler kbd to device input26, error: -5 [ 256.940854][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 256.970416][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 256.992747][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 257.013138][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 257.041106][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 257.070512][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 257.100469][ T5891] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 257.114136][ T5890] usb 5-1: USB disconnect, device number 23 [ 257.131773][ T5891] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 257.143339][ T5891] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 257.167155][ T5891] usb 7-1: USB disconnect, device number 8 [ 257.270377][ T5868] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 257.420386][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 257.433540][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.443689][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.456056][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 257.468147][ T5868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 257.478071][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.492528][ T5868] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 257.502068][ T5868] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 257.510167][ T5868] usb 3-1: Manufacturer: syz [ 257.519883][ T5868] usb 3-1: config 0 descriptor?? [ 257.834518][ T5868] rc_core: IR keymap rc-hauppauge not found [ 257.850498][ T5868] Registered IR keymap rc-empty [ 257.869756][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 257.902581][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 257.941302][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 257.963431][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 257.981094][T12958] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3008'. [ 258.002785][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.030772][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.070887][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.090758][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.123962][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.163197][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.191359][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.220663][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.242262][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.260564][ T50] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 258.283411][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.332534][ T5868] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 258.362198][ T5868] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 258.407828][ T5868] usb 3-1: USB disconnect, device number 30 [ 259.312779][T13005] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3028'. [ 259.321921][T13005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3028'. [ 259.784842][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 259.784859][ T29] audit: type=1400 audit(1774874529.414:1024): avc: denied { listen } for pid=13028 comm="syz.7.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 260.640470][ T5891] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 260.801830][ T5891] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 260.820459][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 260.843128][ T5891] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 260.855761][ T5891] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 260.877518][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.887585][ T5891] usb 7-1: Product: syz [ 260.896261][ T5891] usb 7-1: Manufacturer: syz [ 260.903056][T13080] raw_sendmsg: syz.3.3061 forgot to set AF_INET. Fix it! [ 260.912678][ T5891] usb 7-1: SerialNumber: syz [ 260.931619][ T5891] usb 7-1: config 0 descriptor?? [ 260.941025][T13069] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 260.970472][T13069] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 260.989860][ T5891] usb 7-1: ucan: probing device on interface #0 [ 261.609844][ T5891] ucan 7-1:0.0 can0: registered device [ 261.756721][ T29] audit: type=1400 audit(1774874531.384:1025): avc: denied { map } for pid=13117 comm="syz.4.3078" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 261.810986][ T5891] ucan 7-1:0.0 can0: firmware string: unknown [ 261.832943][ T5891] usb 7-1: USB disconnect, device number 9 [ 262.153319][ T29] audit: type=1400 audit(1774874531.784:1026): avc: denied { listen } for pid=13137 comm="syz.2.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.199336][ T29] audit: type=1400 audit(1774874531.784:1027): avc: denied { accept } for pid=13137 comm="syz.2.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.238755][ T29] audit: type=1400 audit(1774874531.854:1028): avc: denied { ioctl } for pid=13139 comm="syz.4.3089" path="socket:[37988]" dev="sockfs" ino=37988 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 262.643118][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3104'. [ 262.758741][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3108'. [ 262.848605][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3111'. [ 262.857616][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3111'. [ 262.904431][ T5891] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 262.914695][T13188] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3113'. [ 263.066955][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.080781][ T50] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 263.084756][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.102997][ T5891] usb 7-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 263.112200][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.128962][ T5891] usb 7-1: config 0 descriptor?? [ 263.231676][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.246108][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.270663][ T50] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 263.279703][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.312586][ T50] usb 5-1: config 0 descriptor?? [ 263.555250][ T5891] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 263.570338][ T5891] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 263.585455][ T5891] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 263.593880][ T5891] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 263.601926][ T5891] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 263.608777][ T5891] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 263.615752][ T5891] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 263.623689][ T5891] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 263.630642][T13217] nbd0: detected capacity change from 0 to 63 [ 263.637232][ T5891] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 263.644601][ T5891] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 263.662330][ T5891] kye 0003:0458:4018.0019: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.6-1/input0 [ 263.680351][ T5820] block nbd0: Receive control failed (result -104) [ 263.680483][ T51] block nbd0: Receive control failed (result -32) [ 263.689310][ T5809] block nbd0: Receive control failed (result -32) [ 263.744119][ T50] cp2112 0003:10C4:EA90.001A: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 263.771677][ T5891] usb 7-1: USB disconnect, device number 10 [ 263.839709][T13222] fido_id[13222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 263.929665][ T50] cp2112 0003:10C4:EA90.001A: error requesting version [ 263.944592][ T50] cp2112 0003:10C4:EA90.001A: probe with driver cp2112 failed with error -32 [ 263.968407][ T50] usb 5-1: USB disconnect, device number 24 [ 264.010695][ T5890] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 264.073916][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3135'. [ 264.135984][ T29] audit: type=1326 audit(1774874533.764:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.3.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 264.161415][ T29] audit: type=1326 audit(1774874533.764:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.3.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 264.186604][ T29] audit: type=1326 audit(1774874533.764:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.3.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 264.192477][ T5890] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.213397][ T29] audit: type=1326 audit(1774874533.764:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.3.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 264.245824][ T29] audit: type=1326 audit(1774874533.764:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.3.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6719c819 code=0x7ffc0000 [ 264.249312][ T5890] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 264.310336][ T5890] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.322038][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.342622][T13224] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 264.360946][ T5890] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.406349][ T5890] [ 264.408683][ T5890] ====================================================== [ 264.415686][ T5890] WARNING: possible circular locking dependency detected [ 264.422690][ T5890] syzkaller #0 Tainted: G L [ 264.428654][ T5890] ------------------------------------------------------ [ 264.435661][ T5890] kworker/1:3/5890 is trying to acquire lock: [ 264.441709][ T5890] ffff88801cac8220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x497/0x770 [ 264.452175][ T5890] [ 264.452175][ T5890] but task is already holding lock: [ 264.459525][ T5890] ffff88801cac8188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0x850 [ 264.468928][ T5890] [ 264.468928][ T5890] which lock already depends on the new lock. [ 264.468928][ T5890] [ 264.479315][ T5890] [ 264.479315][ T5890] the existing dependency chain (in reverse order) is: [ 264.488314][ T5890] [ 264.488314][ T5890] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 264.496403][ T5890] down_write+0x8b/0x1f0 [ 264.501168][ T5890] kernfs_add_one+0x38/0x850 [ 264.506277][ T5890] kernfs_create_dir_ns+0xfc/0x1a0 [ 264.511916][ T5890] internal_create_group+0x36f/0xf40 [ 264.517718][ T5890] cpuhp_invoke_callback+0x3ab/0x9a0 [ 264.523523][ T5890] cpuhp_issue_call+0x1b8/0x970 [ 264.528897][ T5890] __cpuhp_setup_state_cpuslocked+0x431/0x880 [ 264.535492][ T5890] __cpuhp_setup_state+0xf4/0x300 [ 264.541040][ T5890] do_one_initcall+0x11d/0x760 [ 264.546330][ T5890] kernel_init_freeable+0x6e5/0x7a0 [ 264.552053][ T5890] kernel_init+0x1f/0x1e0 [ 264.556897][ T5890] ret_from_fork+0x754/0xd80 [ 264.561991][ T5890] ret_from_fork_asm+0x1a/0x30 [ 264.567261][ T5890] [ 264.567261][ T5890] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 264.575067][ T5890] [ 264.575067][ T5890] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 264.582782][ T5890] cpus_read_lock+0x42/0x170 [ 264.587879][ T5890] static_key_disable+0x12/0x20 [ 264.593234][ T5890] __inet_hash_connect+0x1378/0x1e40 [ 264.599026][ T5890] tcp_v4_connect+0xeb0/0x1b40 [ 264.604295][ T5890] __inet_stream_connect+0x208/0xfa0 [ 264.610087][ T5890] inet_stream_connect+0x57/0xa0 [ 264.615526][ T5890] __sys_connect_file+0x141/0x1a0 [ 264.621060][ T5890] __sys_connect+0x141/0x170 [ 264.626158][ T5890] __x64_sys_connect+0x72/0xb0 [ 264.631427][ T5890] do_syscall_64+0x106/0xf80 [ 264.636529][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.642924][ T5890] [ 264.642924][ T5890] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 264.650551][ T5890] lock_sock_nested+0x41/0xf0 [ 264.655736][ T5890] inet_shutdown+0x67/0x410 [ 264.660739][ T5890] nbd_mark_nsock_dead+0xae/0x5c0 [ 264.666273][ T5890] recv_work+0x5fb/0x8c0 [ 264.671016][ T5890] process_one_work+0xa23/0x19a0 [ 264.676460][ T5890] worker_thread+0x5ef/0xe50 [ 264.681549][ T5890] kthread+0x370/0x450 [ 264.686116][ T5890] ret_from_fork+0x754/0xd80 [ 264.691206][ T5890] ret_from_fork_asm+0x1a/0x30 [ 264.696477][ T5890] [ 264.696477][ T5890] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 264.704102][ T5890] __mutex_lock+0x1a2/0x1b90 [ 264.709192][ T5890] nbd_queue_rq+0x428/0x1080 [ 264.714282][ T5890] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 264.720335][ T5890] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 264.727168][ T5890] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 264.733655][ T5890] blk_mq_run_hw_queue+0x23c/0x670 [ 264.739271][ T5890] blk_mq_dispatch_list+0x51d/0x1360 [ 264.745064][ T5890] blk_mq_flush_plug_list+0x130/0x600 [ 264.750940][ T5890] __blk_flush_plug+0x2c4/0x4b0 [ 264.756299][ T5890] __submit_bio+0x584/0x6c0 [ 264.761303][ T5890] submit_bio_noacct_nocheck+0x562/0xc10 [ 264.767443][ T5890] submit_bio_noacct+0xd17/0x2010 [ 264.772971][ T5890] submit_bh_wbc+0x59c/0x770 [ 264.778067][ T5890] block_read_full_folio+0x264/0x8e0 [ 264.783861][ T5890] filemap_read_folio+0xfc/0x3b0 [ 264.789307][ T5890] do_read_cache_folio+0x2d7/0x6b0 [ 264.794927][ T5890] read_part_sector+0xd1/0x370 [ 264.800193][ T5890] adfspart_check_ICS+0x93/0x910 [ 264.805631][ T5890] bdev_disk_changed+0x7f8/0xc80 [ 264.811070][ T5890] blkdev_get_whole+0x187/0x290 [ 264.816424][ T5890] bdev_open+0x2c7/0xe40 [ 264.821170][ T5890] blkdev_open+0x34e/0x4f0 [ 264.826091][ T5890] do_dentry_open+0x6d8/0x1660 [ 264.831356][ T5890] vfs_open+0x82/0x3f0 [ 264.835928][ T5890] path_openat+0x208c/0x31a0 [ 264.841025][ T5890] do_file_open+0x20e/0x430 [ 264.846032][ T5890] do_sys_openat2+0x10d/0x1e0 [ 264.851214][ T5890] __x64_sys_openat+0x12d/0x210 [ 264.856568][ T5890] do_syscall_64+0x106/0xf80 [ 264.861668][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.868061][ T5890] [ 264.868061][ T5890] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 264.875252][ T5890] __mutex_lock+0x1a2/0x1b90 [ 264.880345][ T5890] nbd_queue_rq+0xba/0x1080 [ 264.885348][ T5890] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 264.891400][ T5890] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 264.898235][ T5890] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 264.904717][ T5890] blk_mq_run_hw_queue+0x23c/0x670 [ 264.910336][ T5890] blk_mq_dispatch_list+0x51d/0x1360 [ 264.916126][ T5890] blk_mq_flush_plug_list+0x130/0x600 [ 264.922004][ T5890] __blk_flush_plug+0x2c4/0x4b0 [ 264.927365][ T5890] __submit_bio+0x584/0x6c0 [ 264.932374][ T5890] submit_bio_noacct_nocheck+0x562/0xc10 [ 264.938513][ T5890] submit_bio_noacct+0xd17/0x2010 [ 264.944041][ T5890] submit_bh_wbc+0x59c/0x770 [ 264.949135][ T5890] block_read_full_folio+0x264/0x8e0 [ 264.954926][ T5890] filemap_read_folio+0xfc/0x3b0 [ 264.960370][ T5890] do_read_cache_folio+0x2d7/0x6b0 [ 264.965990][ T5890] read_part_sector+0xd1/0x370 [ 264.971260][ T5890] adfspart_check_ICS+0x93/0x910 [ 264.976699][ T5890] bdev_disk_changed+0x7f8/0xc80 [ 264.982137][ T5890] blkdev_get_whole+0x187/0x290 [ 264.987491][ T5890] bdev_open+0x2c7/0xe40 [ 264.992234][ T5890] blkdev_open+0x34e/0x4f0 [ 264.997156][ T5890] do_dentry_open+0x6d8/0x1660 [ 265.002420][ T5890] vfs_open+0x82/0x3f0 [ 265.006990][ T5890] path_openat+0x208c/0x31a0 [ 265.012092][ T5890] do_file_open+0x20e/0x430 [ 265.017096][ T5890] do_sys_openat2+0x10d/0x1e0 [ 265.022276][ T5890] __x64_sys_openat+0x12d/0x210 [ 265.027630][ T5890] do_syscall_64+0x106/0xf80 [ 265.032743][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.039140][ T5890] [ 265.039140][ T5890] -> #4 (set->srcu){.+.+}-{0:0}: [ 265.046244][ T5890] __synchronize_srcu+0xa2/0x300 [ 265.051688][ T5890] blk_mq_quiesce_queue+0x149/0x1c0 [ 265.057396][ T5890] elevator_switch+0x17b/0x7e0 [ 265.062660][ T5890] elevator_change+0x352/0x530 [ 265.067925][ T5890] elevator_set_default+0x29e/0x360 [ 265.073625][ T5890] blk_register_queue+0x412/0x590 [ 265.079156][ T5890] __add_disk+0x73f/0xe40 [ 265.083997][ T5890] add_disk_fwnode+0x118/0x5c0 [ 265.089269][ T5890] nbd_dev_add+0x77a/0xb10 [ 265.094183][ T5890] nbd_init+0x291/0x2b0 [ 265.098843][ T5890] do_one_initcall+0x11d/0x760 [ 265.104109][ T5890] kernel_init_freeable+0x6e5/0x7a0 [ 265.109813][ T5890] kernel_init+0x1f/0x1e0 [ 265.114644][ T5890] ret_from_fork+0x754/0xd80 [ 265.119733][ T5890] ret_from_fork_asm+0x1a/0x30 [ 265.125001][ T5890] [ 265.125001][ T5890] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 265.132804][ T5890] __mutex_lock+0x1a2/0x1b90 [ 265.137894][ T5890] elevator_change+0x1bc/0x530 [ 265.143160][ T5890] elevator_set_none+0x92/0xf0 [ 265.148427][ T5890] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 265.154740][ T5890] nbd_start_device+0x1a6/0xbd0 [ 265.160090][ T5890] nbd_genl_connect+0xff2/0x1a40 [ 265.165527][ T5890] genl_family_rcv_msg_doit+0x214/0x300 [ 265.171576][ T5890] genl_rcv_msg+0x560/0x800 [ 265.176578][ T5890] netlink_rcv_skb+0x159/0x420 [ 265.181849][ T5890] genl_rcv+0x28/0x40 [ 265.186330][ T5890] netlink_unicast+0x5aa/0x870 [ 265.191774][ T5890] netlink_sendmsg+0x8b0/0xda0 [ 265.197051][ T5890] ____sys_sendmsg+0x9e1/0xb70 [ 265.202313][ T5890] ___sys_sendmsg+0x190/0x1e0 [ 265.207491][ T5890] __sys_sendmsg+0x170/0x220 [ 265.212584][ T5890] do_syscall_64+0x106/0xf80 [ 265.217686][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.224081][ T5890] [ 265.224081][ T5890] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 265.232668][ T5890] blk_alloc_queue+0x610/0x790 [ 265.237943][ T5890] blk_mq_alloc_queue+0x174/0x290 [ 265.243482][ T5890] __blk_mq_alloc_disk+0x29/0x120 [ 265.249014][ T5890] nbd_dev_add+0x492/0xb10 [ 265.253930][ T5890] nbd_init+0x291/0x2b0 [ 265.258596][ T5890] do_one_initcall+0x11d/0x760 [ 265.263862][ T5890] kernel_init_freeable+0x6e5/0x7a0 [ 265.269567][ T5890] kernel_init+0x1f/0x1e0 [ 265.274403][ T5890] ret_from_fork+0x754/0xd80 [ 265.279494][ T5890] ret_from_fork_asm+0x1a/0x30 [ 265.284759][ T5890] [ 265.284759][ T5890] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 265.291950][ T5890] fs_reclaim_acquire+0xc4/0x100 [ 265.297393][ T5890] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 265.303276][ T5890] __kernfs_iattrs+0x126/0x400 [ 265.308550][ T5890] __kernfs_setattr+0x4d/0x3c0 [ 265.313826][ T5890] kernfs_iop_setattr+0xda/0x130 [ 265.319274][ T5890] notify_change+0xb25/0x1330 [ 265.324460][ T5890] do_truncate+0x1df/0x240 [ 265.329375][ T5890] path_openat+0x2a55/0x31a0 [ 265.334467][ T5890] do_file_open+0x20e/0x430 [ 265.339473][ T5890] do_sys_openat2+0x10d/0x1e0 [ 265.344668][ T5890] __x64_sys_openat+0x12d/0x210 [ 265.350032][ T5890] do_syscall_64+0x106/0xf80 [ 265.355134][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.361531][ T5890] [ 265.361531][ T5890] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 265.370025][ T5890] __lock_acquire+0x14b8/0x2630 [ 265.375377][ T5890] lock_acquire+0x1cf/0x380 [ 265.380382][ T5890] down_write+0x8b/0x1f0 [ 265.385130][ T5890] kernfs_link_sibling+0x497/0x770 [ 265.390747][ T5890] kernfs_add_one+0x1e7/0x850 [ 265.395926][ T5890] kernfs_create_link+0x1a9/0x240 [ 265.401457][ T5890] sysfs_do_create_link_sd+0x90/0x140 [ 265.407348][ T5890] sysfs_create_link+0x61/0xc0 [ 265.412625][ T5890] driver_sysfs_add+0x91/0x2d0 [ 265.417911][ T5890] really_probe+0x146/0xa60 [ 265.422929][ T5890] __driver_probe_device+0x1de/0x400 [ 265.428716][ T5890] driver_probe_device+0x4c/0x1b0 [ 265.434239][ T5890] __device_attach_driver+0x1df/0x340 [ 265.440114][ T5890] bus_for_each_drv+0x159/0x1e0 [ 265.445483][ T5890] __device_attach+0x1e4/0x4d0 [ 265.450749][ T5890] device_initial_probe+0xaf/0xd0 [ 265.456278][ T5890] bus_probe_device+0x64/0x160 [ 265.461554][ T5890] device_add+0x11d9/0x1950 [ 265.466559][ T5890] snd_seq_device_dev_register+0x3d/0xf0 [ 265.472702][ T5890] snd_device_register+0x156/0x1f0 [ 265.478328][ T5890] snd_rawmidi_dev_register+0x987/0x1090 [ 265.484463][ T5890] snd_device_register_all+0x10f/0x1b0 [ 265.490423][ T5890] snd_card_register+0x106/0x7c0 [ 265.495862][ T5890] try_to_register_card+0x1d6/0x3a0 [ 265.501571][ T5890] usb_audio_probe+0xa1b/0x3a90 [ 265.506933][ T5890] usb_probe_interface+0x303/0x8f0 [ 265.512558][ T5890] really_probe+0x241/0xa60 [ 265.517562][ T5890] __driver_probe_device+0x1de/0x400 [ 265.523349][ T5890] driver_probe_device+0x4c/0x1b0 [ 265.528882][ T5890] __device_attach_driver+0x1df/0x340 [ 265.534755][ T5890] bus_for_each_drv+0x159/0x1e0 [ 265.540113][ T5890] __device_attach+0x1e4/0x4d0 [ 265.545380][ T5890] device_initial_probe+0xaf/0xd0 [ 265.550908][ T5890] bus_probe_device+0x64/0x160 [ 265.556182][ T5890] device_add+0x11d9/0x1950 [ 265.561222][ T5890] usb_set_configuration+0xd97/0x1c60 [ 265.567102][ T5890] usb_generic_driver_probe+0xa1/0xe0 [ 265.572979][ T5890] usb_probe_device+0xef/0x400 [ 265.578252][ T5890] really_probe+0x241/0xa60 [ 265.583251][ T5890] __driver_probe_device+0x1de/0x400 [ 265.589035][ T5890] driver_probe_device+0x4c/0x1b0 [ 265.594557][ T5890] __device_attach_driver+0x1df/0x340 [ 265.600426][ T5890] bus_for_each_drv+0x159/0x1e0 [ 265.605780][ T5890] __device_attach+0x1e4/0x4d0 [ 265.611041][ T5890] device_initial_probe+0xaf/0xd0 [ 265.616565][ T5890] bus_probe_device+0x64/0x160 [ 265.621836][ T5890] device_add+0x11d9/0x1950 [ 265.626841][ T5890] usb_new_device.cold+0x685/0x115c [ 265.632544][ T5890] hub_event+0x314d/0x4af0 [ 265.637468][ T5890] process_one_work+0xa23/0x19a0 [ 265.642908][ T5890] worker_thread+0x5ef/0xe50 [ 265.647998][ T5890] kthread+0x370/0x450 [ 265.652568][ T5890] ret_from_fork+0x754/0xd80 [ 265.657659][ T5890] ret_from_fork_asm+0x1a/0x30 [ 265.662928][ T5890] [ 265.662928][ T5890] other info that might help us debug this: [ 265.662928][ T5890] [ 265.673128][ T5890] Chain exists of: [ 265.673128][ T5890] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 265.673128][ T5890] [ 265.687537][ T5890] Possible unsafe locking scenario: [ 265.687537][ T5890] [ 265.694960][ T5890] CPU0 CPU1 [ 265.700298][ T5890] ---- ---- [ 265.705636][ T5890] lock(&root->kernfs_rwsem); [ 265.710381][ T5890] lock(cpuhp_state_mutex); [ 265.717468][ T5890] lock(&root->kernfs_rwsem); [ 265.724728][ T5890] lock(&root->kernfs_iattr_rwsem); [ 265.729993][ T5890] [ 265.729993][ T5890] *** DEADLOCK *** [ 265.729993][ T5890] [ 265.738111][ T5890] 8 locks held by kworker/1:3/5890: [ 265.743284][ T5890] #0: ffff8880222f6948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 265.754064][ T5890] #1: ffffc90003fbfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 265.765281][ T5890] #2: ffff88802ae3b1e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 265.774149][ T5890] #3: ffff888037e981e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 265.783357][ T5890] #4: ffff88805de541a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 265.792823][ T5890] #5: ffffffff9050fe28 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x38f/0x3a90 [ 265.802654][ T5890] #6: ffff88805deb81b8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 265.811861][ T5890] #7: ffff88801cac8188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0x850 [ 265.821682][ T5890] [ 265.821682][ T5890] stack backtrace: [ 265.827564][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.827591][ T5890] Tainted: [L]=SOFTLOCKUP [ 265.827598][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.827615][ T5890] Workqueue: usb_hub_wq hub_event [ 265.827643][ T5890] Call Trace: [ 265.827650][ T5890] [ 265.827657][ T5890] dump_stack_lvl+0x100/0x190 [ 265.827688][ T5890] print_circular_bug.cold+0x178/0x1c7 [ 265.827719][ T5890] check_noncircular+0x146/0x160 [ 265.827746][ T5890] ? __bfs+0x150/0x2a0 [ 265.827773][ T5890] __lock_acquire+0x14b8/0x2630 [ 265.827794][ T5890] ? __lock_acquire+0x4a5/0x2630 [ 265.827813][ T5890] lock_acquire+0x1cf/0x380 [ 265.827830][ T5890] ? kernfs_link_sibling+0x497/0x770 [ 265.827850][ T5890] ? __pfx___might_resched+0x10/0x10 [ 265.827875][ T5890] down_write+0x8b/0x1f0 [ 265.827893][ T5890] ? kernfs_link_sibling+0x497/0x770 [ 265.827912][ T5890] ? __pfx_down_write+0x10/0x10 [ 265.827933][ T5890] kernfs_link_sibling+0x497/0x770 [ 265.827955][ T5890] kernfs_add_one+0x1e7/0x850 [ 265.827977][ T5890] kernfs_create_link+0x1a9/0x240 [ 265.828003][ T5890] sysfs_do_create_link_sd+0x90/0x140 [ 265.828032][ T5890] sysfs_create_link+0x61/0xc0 [ 265.828049][ T5890] driver_sysfs_add+0x91/0x2d0 [ 265.828077][ T5890] really_probe+0x146/0xa60 [ 265.828095][ T5890] __driver_probe_device+0x1de/0x400 [ 265.828112][ T5890] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 265.828142][ T5890] driver_probe_device+0x4c/0x1b0 [ 265.828160][ T5890] __device_attach_driver+0x1df/0x340 [ 265.828179][ T5890] ? __pfx___device_attach_driver+0x10/0x10 [ 265.828197][ T5890] bus_for_each_drv+0x159/0x1e0 [ 265.828220][ T5890] ? __pfx_bus_for_each_drv+0x10/0x10 [ 265.828245][ T5890] ? lockdep_hardirqs_on+0x78/0x100 [ 265.828272][ T5890] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.828299][ T5890] __device_attach+0x1e4/0x4d0 [ 265.828316][ T5890] ? __pfx___device_attach+0x10/0x10 [ 265.828334][ T5890] ? do_raw_spin_unlock+0x145/0x1e0 [ 265.828358][ T5890] device_initial_probe+0xaf/0xd0 [ 265.828377][ T5890] bus_probe_device+0x64/0x160 [ 265.828403][ T5890] device_add+0x11d9/0x1950 [ 265.828424][ T5890] ? __pfx_device_add+0x10/0x10 [ 265.828443][ T5890] ? sprintf+0xcc/0x100 [ 265.828467][ T5890] ? __pfx_sprintf+0x10/0x10 [ 265.828490][ T5890] ? kasan_save_track+0x14/0x30 [ 265.828518][ T5890] ? snd_device_new+0x31d/0x410 [ 265.828537][ T5890] snd_seq_device_dev_register+0x3d/0xf0 [ 265.828558][ T5890] ? __pfx_snd_seq_device_dev_register+0x10/0x10 [ 265.828578][ T5890] snd_device_register+0x156/0x1f0 [ 265.828596][ T5890] snd_rawmidi_dev_register+0x987/0x1090 [ 265.828619][ T5890] ? __pfx_snd_rawmidi_dev_register+0x10/0x10 [ 265.828640][ T5890] ? __pfx_device_add+0x10/0x10 [ 265.828660][ T5890] ? find_held_lock+0x2b/0x80 [ 265.828687][ T5890] ? snd_info_create_entry+0x330/0x430 [ 265.828708][ T5890] ? __pfx_snd_rawmidi_dev_register+0x10/0x10 [ 265.828730][ T5890] snd_device_register_all+0x10f/0x1b0 [ 265.828749][ T5890] snd_card_register+0x106/0x7c0 [ 265.828770][ T5890] ? rcu_is_watching+0x12/0xc0 [ 265.828793][ T5890] ? __pfx_snd_card_register+0x10/0x10 [ 265.828813][ T5890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 265.828855][ T5890] try_to_register_card+0x1d6/0x3a0 [ 265.828885][ T5890] ? __pfx_try_to_register_card+0x10/0x10 [ 265.828913][ T5890] ? snd_info_create_entry+0x335/0x430 [ 265.828938][ T5890] usb_audio_probe+0xa1b/0x3a90 [ 265.828969][ T5890] ? __pfx_usb_audio_probe+0x10/0x10 [ 265.829003][ T5890] ? mark_held_locks+0x40/0x70 [ 265.829020][ T5890] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 265.829047][ T5890] usb_probe_interface+0x303/0x8f0 [ 265.829082][ T5890] ? __pfx_usb_probe_interface+0x10/0x10 [ 265.829111][ T5890] really_probe+0x241/0xa60 [ 265.829133][ T5890] __driver_probe_device+0x1de/0x400 [ 265.829152][ T5890] driver_probe_device+0x4c/0x1b0 [ 265.829169][ T5890] __device_attach_driver+0x1df/0x340 [ 265.829188][ T5890] ? __pfx___device_attach_driver+0x10/0x10 [ 265.829206][ T5890] bus_for_each_drv+0x159/0x1e0 [ 265.829230][ T5890] ? __pfx_bus_for_each_drv+0x10/0x10 [ 265.829257][ T5890] ? lockdep_hardirqs_on+0x78/0x100 [ 265.829283][ T5890] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.829310][ T5890] __device_attach+0x1e4/0x4d0 [ 265.829327][ T5890] ? __pfx___device_attach+0x10/0x10 [ 265.829346][ T5890] ? do_raw_spin_unlock+0x145/0x1e0 [ 265.829369][ T5890] device_initial_probe+0xaf/0xd0 [ 265.829387][ T5890] bus_probe_device+0x64/0x160 [ 265.829413][ T5890] device_add+0x11d9/0x1950 [ 265.829434][ T5890] ? __pfx_device_add+0x10/0x10 [ 265.829458][ T5890] usb_set_configuration+0xd97/0x1c60 [ 265.829490][ T5890] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 265.829513][ T5890] usb_generic_driver_probe+0xa1/0xe0 [ 265.829536][ T5890] usb_probe_device+0xef/0x400 [ 265.829561][ T5890] ? __pfx_usb_probe_device+0x10/0x10 [ 265.829588][ T5890] really_probe+0x241/0xa60 [ 265.829605][ T5890] __driver_probe_device+0x1de/0x400 [ 265.829622][ T5890] ? usb_driver_applicable+0x1c7/0x220 [ 265.829640][ T5890] driver_probe_device+0x4c/0x1b0 [ 265.829658][ T5890] __device_attach_driver+0x1df/0x340 [ 265.829676][ T5890] ? __pfx___device_attach_driver+0x10/0x10 [ 265.829694][ T5890] bus_for_each_drv+0x159/0x1e0 [ 265.829718][ T5890] ? __pfx_bus_for_each_drv+0x10/0x10 [ 265.829742][ T5890] ? lockdep_hardirqs_on+0x78/0x100 [ 265.829768][ T5890] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.829794][ T5890] __device_attach+0x1e4/0x4d0 [ 265.829811][ T5890] ? __pfx___device_attach+0x10/0x10 [ 265.829829][ T5890] ? do_raw_spin_unlock+0x145/0x1e0 [ 265.829853][ T5890] device_initial_probe+0xaf/0xd0 [ 265.829871][ T5890] bus_probe_device+0x64/0x160 [ 265.829897][ T5890] device_add+0x11d9/0x1950 [ 265.829918][ T5890] ? __pfx_device_add+0x10/0x10 [ 265.829936][ T5890] ? usb_detect_static_quirks+0x335/0x3e0 [ 265.829963][ T5890] usb_new_device.cold+0x685/0x115c [ 265.829988][ T5890] ? do_raw_spin_lock+0x128/0x260 [ 265.830009][ T5890] ? __pfx_usb_new_device+0x10/0x10 [ 265.830034][ T5890] ? mark_held_locks+0x40/0x70 [ 265.830052][ T5890] hub_event+0x314d/0x4af0 [ 265.830088][ T5890] ? __pfx_hub_event+0x10/0x10 [ 265.830112][ T5890] ? debug_object_deactivate+0x2e4/0x3b0 [ 265.830143][ T5890] ? trace_event_raw_event_sched_process_exec+0x290/0x350 [ 265.830173][ T5890] ? rcu_is_watching+0x12/0xc0 [ 265.830197][ T5890] process_one_work+0xa23/0x19a0 [ 265.830222][ T5890] ? __pfx_process_one_work+0x10/0x10 [ 265.830249][ T5890] ? __pfx_hub_event+0x10/0x10 [ 265.830275][ T5890] worker_thread+0x5ef/0xe50 [ 265.830299][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 265.830320][ T5890] ? kthread+0x13a/0x450 [ 265.830337][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 265.830356][ T5890] kthread+0x370/0x450 [ 265.830373][ T5890] ? __pfx_kthread+0x10/0x10 [ 265.830391][ T5890] ret_from_fork+0x754/0xd80 [ 265.830411][ T5890] ? __pfx_ret_from_fork+0x10/0x10 [ 265.830430][ T5890] ? __switch_to+0x7b4/0x1120 [ 265.830453][ T5890] ? __pfx_kthread+0x10/0x10 [ 265.830472][ T5890] ret_from_fork_asm+0x1a/0x30 [ 265.830500][ T5890] [ 266.574898][ T5890] usb 3-1: USB disconnect, device number 31