last executing test programs: 1m27.555861154s ago: executing program 4 (id=34): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m25.285622443s ago: executing program 4 (id=52): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f00000041c0)={0x4000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m25.031849744s ago: executing program 4 (id=53): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="b744", 0x2) 1m24.940468081s ago: executing program 4 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m24.75371669s ago: executing program 4 (id=57): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 1m24.392613484s ago: executing program 4 (id=61): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008000340000001"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) 1m24.255945807s ago: executing program 32 (id=61): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008000340000001"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) 6.296771287s ago: executing program 0 (id=1531): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x21, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x945aaf0b8f519d9e}, 0x0) 5.996580869s ago: executing program 0 (id=1537): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000580)={&(0x7f0000d5e000/0x2000)=nil, &(0x7f0000c6d000/0x4000)=nil, 0x2000, 0x2}) 3.432582053s ago: executing program 3 (id=1572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.290039821s ago: executing program 3 (id=1574): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 2.648119901s ago: executing program 3 (id=1579): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_cancel(0x0, 0x0, 0x0) 2.250486298s ago: executing program 1 (id=1583): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.153505196s ago: executing program 1 (id=1585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) 2.119098983s ago: executing program 3 (id=1586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000106, 0x0, 0x8706}]}) 2.079759396s ago: executing program 1 (id=1587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 1.957722651s ago: executing program 1 (id=1589): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) close_range(r1, r1, 0x0) 1.951148389s ago: executing program 3 (id=1591): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80045b10, 0x0) 1.446890909s ago: executing program 5 (id=1600): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)) 576.730906ms ago: executing program 2 (id=1605): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xf) 558.838929ms ago: executing program 2 (id=1606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0x4000000000000, 0xf000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7073b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2dbed5d52c8e976744da29f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3ad34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f6373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f00000000dfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) 542.308232ms ago: executing program 5 (id=1607): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) socket$inet6(0xa, 0x4, 0x0) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) 422.402542ms ago: executing program 0 (id=1537): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000580)={&(0x7f0000d5e000/0x2000)=nil, &(0x7f0000c6d000/0x4000)=nil, 0x2000, 0x2}) 389.037947ms ago: executing program 5 (id=1608): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d4", 0x3, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, &(0x7f00000000c0)) 357.119224ms ago: executing program 2 (id=1609): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) 342.823784ms ago: executing program 5 (id=1610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {0x28}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x4000) 301.412939ms ago: executing program 0 (id=1611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000034c0)={{0x5, 0x0, 0x80, {0x58000, 0xdddd0000, 0x1}}, "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", "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"}) 300.98935ms ago: executing program 2 (id=1612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x8]}, @CTA_LABELS={0x4}]}, 0x44}}, 0x0) 255.433603ms ago: executing program 5 (id=1613): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 111.324688ms ago: executing program 5 (id=1619): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0xc, 0x5, 0xffb}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 20.327711ms ago: executing program 0 (id=1620): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) 0s ago: executing program 1 (id=1621): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="401406"], 0x0, 0x0}) kernel console output (not intermixed with test programs): b: 1 callbacks suppressed [ 91.714773][ T30] audit: type=1400 audit(1765241640.793:267): avc: denied { create } for pid=6875 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.759005][ T30] audit: type=1400 audit(1765241640.833:268): avc: denied { write } for pid=6875 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.922010][ T5817] Bluetooth: hci2: command 0x206a tx timeout [ 91.929368][ T5828] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 92.058906][ T6895] macvlan0: entered allmulticast mode [ 92.061259][ T30] audit: type=1400 audit(1765241641.133:269): avc: denied { create } for pid=6894 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.064480][ T6895] veth1_vlan: entered allmulticast mode [ 92.098594][ T30] audit: type=1400 audit(1765241641.133:270): avc: denied { setopt } for pid=6894 comm="syz.1.399" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.123900][ T30] audit: type=1400 audit(1765241641.203:271): avc: denied { connect } for pid=6893 comm="syz.5.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.337473][ T30] audit: type=1400 audit(1765241641.413:272): avc: denied { write } for pid=6910 comm="syz.0.405" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.651196][ T5887] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.742885][ T6940] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.419'. [ 92.802717][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 92.815041][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.833078][ T5887] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 92.850841][ T5887] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 92.871306][ T6523] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 92.891665][ T5887] usb 2-1: config 8 interface 0 has no altsetting 0 [ 92.902232][ T5887] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 92.911558][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.919538][ T5887] usb 2-1: Product: syz [ 92.932939][ T5887] usb 2-1: Manufacturer: syz [ 92.937548][ T5887] usb 2-1: SerialNumber: syz [ 93.045174][ T6523] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.061194][ T6523] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 93.086624][ T6523] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 93.099277][ T6523] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 93.114996][ T6523] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 93.130407][ T6523] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 93.148527][ T6523] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.160218][ T6523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.169576][ T6523] usb 6-1: SerialNumber: syz [ 93.177277][ T6936] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 93.183099][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.195721][ T5887] usb 2-1: selecting invalid altsetting 0 [ 93.201338][ T6936] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 93.253209][ T6523] rndis_host 6-1:1.0: probe with driver rndis_host failed with error -22 [ 93.337385][ T5887] snd-usb-audio 2-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 93.368363][ T5887] usb 2-1: USB disconnect, device number 5 [ 93.490088][ T24] usb 6-1: USB disconnect, device number 4 [ 93.634784][ T6979] vivid-004: disconnect [ 93.640858][ T6978] vivid-004: reconnect [ 93.747428][ T30] audit: type=1400 audit(1765241642.823:273): avc: denied { mount } for pid=6984 comm="syz.0.440" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 93.936038][ T30] audit: type=1400 audit(1765241643.013:274): avc: denied { ioctl } for pid=6996 comm="syz.2.449" path="socket:[14051]" dev="sockfs" ino=14051 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.990486][ T30] audit: type=1400 audit(1765241643.063:275): avc: denied { create } for pid=7002 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.076358][ T30] audit: type=1400 audit(1765241643.093:276): avc: denied { connect } for pid=7002 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.558597][ T7046] TCP: TCP_TX_DELAY enabled [ 94.581423][ T6523] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 94.731249][ T6523] usb 6-1: Using ep0 maxpacket: 32 [ 94.737710][ T6523] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 94.771567][ T6523] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 94.784819][ T6523] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 94.801774][ T6523] usb 6-1: Product: syz [ 94.805975][ T6523] usb 6-1: Manufacturer: syz [ 94.810563][ T6523] usb 6-1: SerialNumber: syz [ 94.824450][ T6523] usb 6-1: config 0 descriptor?? [ 94.843784][ T7027] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 94.871567][ T6523] hub 6-1:0.0: bad descriptor, ignoring hub [ 94.877470][ T6523] hub 6-1:0.0: probe with driver hub failed with error -5 [ 95.072091][ T7065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.477'. [ 95.118136][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 95.243226][ T6523] usb 6-1: USB disconnect, device number 5 [ 95.366742][ T7071] bond1 (unregistering): Released all slaves [ 95.591194][ T6523] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 95.763784][ T6523] usb 6-1: Using ep0 maxpacket: 32 [ 95.774873][ T6523] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.793138][ T6523] usb 6-1: string descriptor 0 read error: -22 [ 95.799767][ T6523] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 95.824224][ T6523] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 95.840063][ T6523] usb 6-1: config 0 descriptor?? [ 95.849670][ T7027] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 95.889526][ T6523] hub 6-1:0.0: bad descriptor, ignoring hub [ 95.931265][ T6523] hub 6-1:0.0: probe with driver hub failed with error -5 [ 96.147686][ T7120] sctp: [Deprecated]: syz.1.502 (pid 7120) Use of int in maxseg socket option. [ 96.147686][ T7120] Use struct sctp_assoc_value instead [ 96.164427][ T6523] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.221402][ T5887] usb 6-1: USB disconnect, device number 6 [ 96.221507][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.504'. [ 96.322815][ T6523] usb 1-1: Using ep0 maxpacket: 32 [ 96.338309][ T6523] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 96.357945][ T6523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.375106][ T6523] usb 1-1: config 0 descriptor?? [ 96.452943][ T7142] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 96.458876][ T7142] syzkaller1: group set to 0 [ 96.538014][ T7146] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 96.597757][ T6523] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 96.609018][ T6523] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.629396][ T6523] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 96.636778][ T6523] usb 1-1: media controller created [ 96.678558][ T6523] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.807848][ T6523] az6027: usb out operation failed. (-71) [ 96.821963][ T6523] az6027: usb out operation failed. (-71) [ 96.837850][ T6523] stb0899_attach: Driver disabled by Kconfig [ 96.858153][ T6523] az6027: no front-end attached [ 96.858153][ T6523] [ 96.865856][ T7162] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 96.877765][ T7162] syzkaller1: persist disabled [ 96.884745][ T6523] az6027: usb out operation failed. (-71) [ 96.892066][ T6523] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 96.902393][ T6523] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 96.915869][ T6523] dvb-usb: schedule remote query interval to 400 msecs. [ 96.923123][ T6523] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 96.933236][ T6523] usb 1-1: USB disconnect, device number 4 [ 96.956350][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 96.956365][ T30] audit: type=1400 audit(1765241646.033:292): avc: denied { write } for pid=7167 comm="syz.1.526" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.993293][ T6523] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 97.007664][ T30] audit: type=1400 audit(1765241646.063:293): avc: denied { mount } for pid=7169 comm="syz.5.527" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 97.162019][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 97.311616][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 97.320507][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 97.335600][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.345904][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.357522][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.376117][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.389001][ T24] usb 4-1: Product: syz [ 97.407307][ T24] usb 4-1: Manufacturer: syz [ 97.431238][ T6523] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 97.442072][ T24] usb 4-1: SerialNumber: syz [ 97.543546][ T30] audit: type=1400 audit(1765241646.623:294): avc: denied { bind } for pid=7198 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 97.601263][ T6523] usb 6-1: Using ep0 maxpacket: 32 [ 97.620330][ T6523] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 97.639975][ T6523] usb 6-1: config 0 has no interface number 0 [ 97.658727][ T6523] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 97.677982][ T6523] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.701183][ T6523] usb 6-1: Product: syz [ 97.705381][ T6523] usb 6-1: Manufacturer: syz [ 97.720178][ T6523] usb 6-1: SerialNumber: syz [ 97.733693][ T6523] usb 6-1: config 0 descriptor?? [ 97.742874][ T6523] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 97.763563][ T30] audit: type=1400 audit(1765241646.843:295): avc: denied { ioctl } for pid=7204 comm="syz.2.543" path="socket:[16456]" dev="sockfs" ino=16456 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.830556][ T7207] sp0: Synchronizing with TNC [ 97.881977][ T24] usb 4-1: 0:2 : does not exist [ 97.964315][ T6523] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 97.991087][ T6523] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 98.052809][ T30] audit: type=1400 audit(1765241647.133:296): avc: denied { remount } for pid=7211 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.118416][ T30] audit: type=1400 audit(1765241647.193:297): avc: denied { bind } for pid=7214 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.198357][ T30] audit: type=1400 audit(1765241647.213:298): avc: denied { connect } for pid=7214 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.223290][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.234055][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.259850][ T30] audit: type=1400 audit(1765241647.333:299): avc: denied { load_policy } for pid=7219 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.286187][ T24] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 98.299962][ T7220] SELinux: ebitmap: truncated map [ 98.311065][ T30] audit: type=1400 audit(1765241647.383:300): avc: denied { create } for pid=7223 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 98.321293][ T24] usb 4-1: USB disconnect, device number 8 [ 98.346831][ T7220] SELinux: failed to load policy [ 98.393425][ T30] audit: type=1400 audit(1765241647.413:301): avc: denied { create } for pid=7222 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.455179][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 98.463500][ T6523] usb 6-1: USB disconnect, device number 7 [ 98.478351][ T6523] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 98.501568][ T6523] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 98.519396][ T6523] quatech2 6-1:0.51: device disconnected [ 98.791224][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.990441][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 98.998198][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 99.033307][ T24] usb 1-1: config 0 has no interface number 0 [ 99.053147][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 99.061936][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 99.091344][ T7269] netlink: 9 bytes leftover after parsing attributes in process `syz.1.574'. [ 99.101036][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 99.115478][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.148048][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.171306][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 99.180341][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.213230][ T24] usb 1-1: config 0 descriptor?? [ 99.234215][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 99.427453][ T6523] usb 1-1: USB disconnect, device number 5 [ 99.436310][ T6523] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 99.527402][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 99.662054][ T7300] netlink: 'syz.5.588': attribute type 5 has an invalid length. [ 99.842115][ T7313] binder: 7312:7313 ioctl c018620c 200000000240 returned -1 [ 99.972711][ T7325] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.481229][ T5923] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 100.621229][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 100.632495][ T5923] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.642391][ T5923] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.655683][ T5923] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.664784][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.771200][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 100.785918][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.811398][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.826279][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.836558][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.861202][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.870670][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.880341][ T5923] usb 2-1: GET_CAPABILITIES returned 0 [ 100.888717][ T5923] usbtmc 2-1:16.0: can't read capabilities [ 101.100339][ T6523] usb 2-1: USB disconnect, device number 6 [ 101.104460][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 101.114355][ T24] usbtmc 6-1:16.0: can't read capabilities [ 101.141211][ T5923] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.302627][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 101.313897][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 101.325264][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.328297][ T6523] usb 6-1: USB disconnect, device number 8 [ 101.338481][ T5923] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.353668][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.365136][ T5923] usb 1-1: config 0 descriptor?? [ 101.370569][ T7367] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 101.411176][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.511273][ T48] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 101.571155][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 101.577338][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 101.586902][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.598457][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 101.607045][ T24] pvrusb2: ********** [ 101.611036][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 101.622799][ T24] pvrusb2: Important functionality might not be entirely working. [ 101.632042][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 101.643752][ T24] pvrusb2: ********** [ 101.659800][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 101.671255][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 101.680443][ T48] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 101.690634][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.700452][ T48] usb 4-1: Product: syz [ 101.707571][ T48] usb 4-1: Manufacturer: syz [ 101.712419][ T48] usb 4-1: SerialNumber: syz [ 101.723772][ T48] usb 4-1: config 0 descriptor?? [ 101.731752][ T48] option 4-1:0.0: GSM modem (1-port) converter detected [ 101.798866][ T5923] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 101.807688][ T2335] pvrusb2: Invalid write control endpoint [ 101.817453][ T7395] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 101.829311][ T5923] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.854788][ T2335] pvrusb2: Invalid write control endpoint [ 101.861045][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 101.871156][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 101.878689][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 101.892625][ T2335] pvrusb2: Device being rendered inoperable [ 101.900163][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 101.914610][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 101.927515][ T2335] pvrusb2: Attached sub-driver cx25840 [ 101.934148][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 101.945282][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 101.956457][ T6523] usb 4-1: USB disconnect, device number 9 [ 101.965066][ T6523] option 4-1:0.0: device disconnected [ 102.024275][ T5923] usb 3-1: USB disconnect, device number 7 [ 102.050139][ T5887] usb 1-1: USB disconnect, device number 6 [ 102.075122][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 102.075136][ T30] audit: type=1400 audit(1765241651.153:326): avc: denied { listen } for pid=7406 comm="syz.5.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.091578][ T7409] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 102.101291][ T30] audit: type=1400 audit(1765241651.163:327): avc: denied { accept } for pid=7406 comm="syz.5.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.107988][ T24] IPVS: starting estimator thread 0... [ 102.231241][ T7410] IPVS: using max 42 ests per chain, 100800 per kthread [ 102.390458][ T30] audit: type=1400 audit(1765241651.463:328): avc: denied { write } for pid=7429 comm="syz.5.651" path="socket:[17014]" dev="sockfs" ino=17014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.511228][ T5923] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.565596][ T30] audit: type=1400 audit(1765241651.643:329): avc: denied { watch } for pid=7435 comm="syz.5.654" path="/91/control" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.601962][ T24] kernel write not supported for file /snd/midiC2D0 (pid: 24 comm: kworker/1:0) [ 102.671371][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 102.678399][ T5923] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 102.687793][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.781375][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 102.792443][ T5923] usb 2-1: config 0 descriptor?? [ 102.807387][ T7442] tipc: Started in network mode [ 102.834429][ T30] audit: type=1400 audit(1765241651.893:330): avc: denied { ioctl } for pid=7448 comm="syz.2.660" path="socket:[17056]" dev="sockfs" ino=17056 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 102.837543][ T7442] tipc: Node identity ac14140f, cluster identity 4711 [ 102.882557][ T7442] tipc: New replicast peer: 255.255.255.255 [ 102.892072][ T7442] tipc: Enabled bearer , priority 10 [ 103.040904][ T5923] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 103.069150][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.089139][ T5923] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 103.098294][ T30] audit: type=1400 audit(1765241652.173:331): avc: denied { create } for pid=7460 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.117579][ T5923] usb 2-1: media controller created [ 103.126496][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.161219][ T30] audit: type=1400 audit(1765241652.203:332): avc: denied { bind } for pid=7460 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.238665][ T5923] az6027: usb out operation failed. (-71) [ 103.256004][ T5923] az6027: usb out operation failed. (-71) [ 103.271990][ T5923] stb0899_attach: Driver disabled by Kconfig [ 103.280466][ T5923] az6027: no front-end attached [ 103.280466][ T5923] [ 103.304232][ T5923] az6027: usb out operation failed. (-71) [ 103.309962][ T5923] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 103.323802][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 103.369130][ T6048] Bluetooth: hci5: Frame reassembly failed (-84) [ 103.375924][ T7473] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 103.389188][ T5923] dvb-usb: schedule remote query interval to 400 msecs. [ 103.397413][ T6048] Bluetooth: hci5: Frame reassembly failed (-84) [ 103.401154][ T5923] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 103.414029][ T5923] usb 2-1: USB disconnect, device number 7 [ 103.465296][ T7475] binder: 7474:7475 ioctl c0306201 200000000180 returned -14 [ 103.482978][ T5923] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 103.660541][ T30] audit: type=1400 audit(1765241652.733:333): avc: denied { read } for pid=7480 comm="syz.5.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.715782][ T30] audit: type=1400 audit(1765241652.793:334): avc: denied { setopt } for pid=7480 comm="syz.5.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.768866][ T30] audit: type=1400 audit(1765241652.843:335): avc: denied { create } for pid=7483 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 103.928038][ T7490] binder: BC_ACQUIRE_RESULT not supported [ 103.941882][ T7490] binder: 7489:7490 ioctl c0306201 2000000001c0 returned -22 [ 104.022156][ T5887] tipc: Node number set to 2886997007 [ 104.851473][ T5923] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 104.981466][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 105.015345][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 105.026140][ T5923] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 105.035947][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.048026][ T5923] usb 6-1: config 0 descriptor?? [ 105.142542][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.153023][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 105.165038][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.176394][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 105.193682][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 105.203096][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 105.211105][ T24] usb 1-1: Manufacturer: syz [ 105.219928][ T24] usb 1-1: config 0 descriptor?? [ 105.263445][ T5923] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 105.273278][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.284451][ T5923] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 105.293045][ T5923] usb 6-1: media controller created [ 105.309356][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.321239][ T5928] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 105.441244][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 105.447486][ T5817] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 105.473680][ T5923] az6027: usb out operation failed. (-71) [ 105.485488][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 105.491441][ T5923] az6027: usb out operation failed. (-71) [ 105.501640][ T24] rc_core: IR keymap rc-hauppauge not found [ 105.508244][ T24] Registered IR keymap rc-empty [ 105.517406][ T5923] stb0899_attach: Driver disabled by Kconfig [ 105.528053][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.541384][ T5923] az6027: no front-end attached [ 105.541384][ T5923] [ 105.548735][ T5923] az6027: usb out operation failed. (-71) [ 105.556469][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.563647][ T5923] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 105.570818][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.583075][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 105.594312][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.603374][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.617253][ T5928] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.626703][ T5923] dvb-usb: schedule remote query interval to 400 msecs. [ 105.635053][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 105.646775][ T5923] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 105.655171][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.665268][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 105.680007][ T5923] usb 6-1: USB disconnect, device number 9 [ 105.688242][ T5928] usb 3-1: config 0 descriptor?? [ 105.717737][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.751409][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.768603][ T5923] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 105.777290][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.811283][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.841460][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.871501][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.891254][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.921981][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.951333][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.971386][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.996561][ T24] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 106.011231][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 106.023864][ T24] usb 1-1: USB disconnect, device number 7 [ 106.134189][ T5928] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input14 [ 106.215011][ T5887] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.223221][ T5928] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 106.365860][ T5866] usb 3-1: USB disconnect, device number 8 [ 106.375091][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.389449][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.419196][ T5887] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.431585][ T5887] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 106.442731][ T5887] usb 4-1: Manufacturer: syz [ 106.456095][ T5887] usb 4-1: config 0 descriptor?? [ 106.570799][ T7589] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 106.741315][ T5866] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 106.822219][ T6523] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 106.828028][ T7603] input: syz0 as /devices/virtual/input/input15 [ 106.904083][ T5866] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 106.916095][ T5866] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 106.926594][ T5866] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.936984][ T5866] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.950397][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.959120][ T5866] usb 2-1: Product: syz [ 106.964118][ T5866] usb 2-1: Manufacturer: syz [ 106.968881][ T5866] usb 2-1: SerialNumber: syz [ 106.973966][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 106.985129][ T5866] usb 2-1: config 0 descriptor?? [ 106.991193][ T6523] usb 6-1: Using ep0 maxpacket: 32 [ 106.997680][ T5866] hub 2-1:0.0: bad descriptor, ignoring hub [ 107.011378][ T5866] hub 2-1:0.0: probe with driver hub failed with error -5 [ 107.019369][ T6523] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 107.041642][ T6523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.052169][ T5866] usb 2-1: selecting invalid altsetting 0 [ 107.061930][ T6523] usb 6-1: config 0 descriptor?? [ 107.100479][ T7609] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 107.274555][ T6523] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 107.285476][ T5887] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 107.296187][ T6523] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.305547][ T5887] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 107.313920][ T5887] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 107.322576][ T6523] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 107.329802][ T6523] usb 6-1: media controller created [ 107.335562][ T5887] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 107.351244][ T5887] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 107.363400][ T6523] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.374631][ T5887] usb 4-1: USB disconnect, device number 10 [ 107.411215][ T5928] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.475819][ T6523] az6027: usb out operation failed. (-71) [ 107.482692][ T6523] az6027: usb out operation failed. (-71) [ 107.488408][ T6523] stb0899_attach: Driver disabled by Kconfig [ 107.494484][ T6523] az6027: no front-end attached [ 107.494484][ T6523] [ 107.502490][ T6523] az6027: usb out operation failed. (-71) [ 107.508208][ T6523] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 107.516619][ T6523] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 107.528693][ T6523] dvb-usb: schedule remote query interval to 400 msecs. [ 107.540038][ T6523] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 107.550911][ T6523] usb 6-1: USB disconnect, device number 10 [ 107.561260][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 107.567910][ T5928] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.573479][ T6523] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 107.579194][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.594425][ T5928] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 107.604673][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.616488][ T5928] usb 1-1: config 0 descriptor?? [ 107.641248][ T7583] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 107.691309][ T90] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 107.793010][ T7583] usb 2-1: device firmware changed [ 107.798610][ T5866] usb 2-1: USB disconnect, device number 8 [ 107.844467][ T90] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.856960][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 107.868254][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.882240][ T90] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 107.896787][ T90] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 107.905966][ T90] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.914076][ T90] usb 3-1: Manufacturer: syz [ 107.920188][ T90] usb 3-1: config 0 descriptor?? [ 107.941623][ T5866] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 108.028170][ T5928] hid (null): global environment stack underflow [ 108.039637][ T5928] hid (null): unknown global tag 0xc [ 108.045179][ T5928] hid (null): unknown global tag 0x43 [ 108.062081][ T5928] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 108.069044][ T5928] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 108.076369][ T5928] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 108.086743][ T5928] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 108.093820][ T5928] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 108.100767][ T5928] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 108.103572][ T5866] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 108.107814][ T5928] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 108.117340][ T5866] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 108.123528][ T5928] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 108.133745][ T5866] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.139643][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 108.149379][ T5866] usb 2-1: string descriptor 0 read error: -22 [ 108.154936][ T5928] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 108.170674][ T5866] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.171559][ T5928] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 108.180598][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.197736][ T5866] usb 2-1: config 0 descriptor?? [ 108.204594][ T5866] hub 2-1:0.0: bad descriptor, ignoring hub [ 108.210641][ T5866] hub 2-1:0.0: probe with driver hub failed with error -5 [ 108.212178][ T5928] cougar 0003:060B:500A.0009: global environment stack underflow [ 108.220569][ T5866] usb 2-1: selecting invalid altsetting 0 [ 108.226773][ T5928] cougar 0003:060B:500A.0009: item 0 0 1 11 parsing failed [ 108.239399][ T5928] cougar 0003:060B:500A.0009: parse failed [ 108.249296][ T5928] cougar 0003:060B:500A.0009: probe with driver cougar failed with error -22 [ 108.262028][ T90] rc_core: IR keymap rc-hauppauge not found [ 108.263756][ T5928] usb 1-1: USB disconnect, device number 8 [ 108.267938][ T90] Registered IR keymap rc-empty [ 108.280311][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.301268][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.321637][ T6523] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 108.331193][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 108.331469][ T90] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 108.337704][ T24] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 108.349186][ T90] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 108.368102][ T24] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 108.379715][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.379847][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.399832][ T24] hub 4-1:32.0: bad descriptor, ignoring hub [ 108.406646][ T24] hub 4-1:32.0: probe with driver hub failed with error -5 [ 108.421383][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.441266][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.471826][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.480944][ T6523] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.491383][ T6523] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 108.500418][ T6523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.509000][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.518089][ T6523] usb 6-1: config 0 descriptor?? [ 108.541302][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.561308][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.561454][ T24] usb 2-1: USB disconnect, device number 9 [ 108.591300][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.621346][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.651800][ T90] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.672080][ T90] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 108.681236][ T90] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 108.693840][ T90] usb 3-1: USB disconnect, device number 9 [ 108.862273][ T24] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 109.130761][ T6523] usb 6-1: USB disconnect, device number 11 [ 109.169571][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 109.169587][ T30] audit: type=1400 audit(1765241658.243:349): avc: denied { read } for pid=7631 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.300035][ T7636] batman_adv: batadv0: Adding interface: gretap1 [ 109.319061][ T7636] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.371216][ T7636] batman_adv: batadv0: Interface activated: gretap1 [ 109.786948][ T7649] wireguard0: entered promiscuous mode [ 109.817458][ T7649] wireguard0: entered allmulticast mode [ 109.842905][ T30] audit: type=1400 audit(1765241658.923:350): avc: denied { read } for pid=7654 comm="syz.1.754" lport=18890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.881485][ T24] usb 4-1: USB disconnect, device number 11 [ 109.994577][ T30] audit: type=1400 audit(1765241659.073:351): avc: denied { getopt } for pid=7664 comm="syz.5.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.107620][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 110.481736][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.724809][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'. [ 110.754091][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.775'. [ 110.933778][ T7710] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 110.954610][ T30] audit: type=1400 audit(1765241660.033:352): avc: denied { map } for pid=7709 comm="syz.5.779" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 111.041259][ T30] audit: type=1400 audit(1765241660.033:353): avc: denied { execute } for pid=7709 comm="syz.5.779" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 111.111291][ T30] audit: type=1400 audit(1765241660.123:354): avc: denied { bind } for pid=7711 comm="syz.3.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.521920][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.632734][ T7738] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.726592][ T30] audit: type=1400 audit(1765241660.803:355): avc: denied { listen } for pid=7744 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.105756][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 112.115030][ T30] audit: type=1400 audit(1765241661.193:356): avc: denied { read } for pid=7764 comm="syz.1.805" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.191204][ T30] audit: type=1400 audit(1765241661.223:357): avc: denied { open } for pid=7764 comm="syz.1.805" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.250952][ T30] audit: type=1400 audit(1765241661.273:358): avc: denied { bind } for pid=7768 comm="syz.3.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.293918][ T6059] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.300337][ T6094] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.328030][ T7771] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.591235][ T90] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.749412][ T90] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 112.768725][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.793251][ T90] usb 4-1: config 0 descriptor?? [ 113.311383][ T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 113.416675][ T90] ath6kl: mismatched byte count 0 vs. expected 12 [ 113.429300][ T90] ath6kl: Failed to init ath6kl core: -22 [ 113.444424][ T90] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 113.463331][ T7839] netlink: 21 bytes leftover after parsing attributes in process `syz.1.841'. [ 113.472971][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.485724][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.505820][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 113.522285][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.547886][ T24] usb 6-1: config 0 descriptor?? [ 113.605082][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.620629][ T90] usb 4-1: USB disconnect, device number 12 [ 113.768015][ T6523] usb 6-1: USB disconnect, device number 12 [ 114.321326][ T5828] Bluetooth: hci5: command 0xfc11 tx timeout [ 114.328050][ T5817] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 114.402275][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.501317][ T6523] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 114.653171][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.682733][ T6523] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 114.690851][ T6523] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 114.721304][ T7887] syz.2.860 uses obsolete (PF_INET,SOCK_PACKET) [ 114.736274][ T6523] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.751752][ T6523] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.763604][ T6523] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 114.773800][ T6523] usb 4-1: Product: syz [ 114.777984][ T6523] usb 4-1: Manufacturer: syz [ 114.783843][ T6523] usb 4-1: SerialNumber: syz [ 114.802419][ T6523] usb 4-1: config 0 descriptor?? [ 114.815846][ T6523] hub 4-1:0.0: bad descriptor, ignoring hub [ 114.832568][ T6523] hub 4-1:0.0: probe with driver hub failed with error -5 [ 114.854465][ T6523] usb 4-1: selecting invalid altsetting 0 [ 115.054824][ T7897] netlink: 56 bytes leftover after parsing attributes in process `syz.1.866'. [ 115.548561][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 115.548576][ T30] audit: type=1400 audit(1765241664.623:365): avc: denied { ioctl } for pid=7926 comm="syz.5.880" path="/dev/usbmon2" dev="devtmpfs" ino=722 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.681338][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.689641][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.698722][ T30] audit: type=1400 audit(1765241664.773:366): avc: denied { read write } for pid=7935 comm="syz.5.884" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.751688][ T30] audit: type=1400 audit(1765241664.773:367): avc: denied { open } for pid=7935 comm="syz.5.884" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.754000][ T5928] hid_parser_main: 176 callbacks suppressed [ 115.754014][ T5928] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.835023][ T5928] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.946171][ T24] usb 4-1: USB disconnect, device number 13 [ 115.990290][ T7945] mmap: syz.2.888 (7945) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.481641][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.641233][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 116.647683][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 116.667393][ T24] usb 1-1: config 0 has no interface number 0 [ 116.674765][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 116.693581][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 116.702951][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.710934][ T24] usb 1-1: Product: syz [ 116.725697][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.739382][ T24] usb 1-1: Manufacturer: syz [ 116.760501][ T24] usb 1-1: SerialNumber: syz [ 116.762317][ T7986] overlayfs: missing 'workdir' [ 116.773226][ T24] usb 1-1: config 0 descriptor?? [ 116.783819][ T24] smsc75xx v1.0.0 [ 117.140142][ T30] audit: type=1400 audit(1765242179.205:368): avc: denied { mounton } for pid=7999 comm="syz.1.912" path="/205/file0" dev="tmpfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 117.203220][ T30] audit: type=1400 audit(1765242179.205:369): avc: denied { write } for pid=5928 comm="kworker/1:7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18983 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.492286][ T30] audit: type=1400 audit(1765242179.555:370): avc: denied { write } for pid=8012 comm="syz.2.916" path="socket:[19003]" dev="sockfs" ino=19003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.593734][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 117.623674][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 117.637284][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 117.659396][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 117.679576][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 117.706767][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 117.727549][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 117.733039][ T24] usb 1-1: USB disconnect, device number 9 [ 117.750863][ T8025] vlan2: entered promiscuous mode [ 117.750880][ T8025] hsr0: entered promiscuous mode [ 117.767712][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.945907][ T30] audit: type=1400 audit(1765242180.015:371): avc: denied { append } for pid=8032 comm="syz.3.926" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 118.021552][ T30] audit: type=1400 audit(1765242180.015:372): avc: denied { bind } for pid=8035 comm="syz.2.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.048658][ T30] audit: type=1400 audit(1765242180.015:373): avc: denied { name_bind } for pid=8035 comm="syz.2.928" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 118.070145][ T30] audit: type=1400 audit(1765242180.015:374): avc: denied { node_bind } for pid=8035 comm="syz.2.928" saddr=fe80::28 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 118.112076][ T8046] sctp: [Deprecated]: syz.5.931 (pid 8046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.112076][ T8046] Use struct sctp_sack_info instead [ 118.483864][ T8062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.521348][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 118.672696][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.683961][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.694673][ T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.706533][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.714760][ T24] usb 6-1: SerialNumber: syz [ 118.721464][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.801507][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.929753][ T24] usb 6-1: 0:2 : does not exist [ 118.969413][ T24] usb 6-1: USB disconnect, device number 13 [ 119.065984][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'. [ 119.081316][ T5928] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 119.233194][ T5928] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.251637][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.279737][ T5928] usb 3-1: config 0 descriptor?? [ 119.287760][ T5928] cp210x 3-1:0.0: cp210x converter detected [ 119.852717][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.903485][ T5928] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 119.921453][ T5928] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 119.942257][ T5928] usb 3-1: cp210x converter now attached to ttyUSB0 [ 119.962886][ T5928] usb 3-1: USB disconnect, device number 10 [ 119.983546][ T5928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.996449][ T8120] pimreg: entered allmulticast mode [ 120.005800][ T5928] cp210x 3-1:0.0: device disconnected [ 120.011414][ T48] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 120.181182][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 120.188473][ T48] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.196627][ T48] usb 6-1: config 0 has no interface number 0 [ 120.209641][ T48] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.221251][ T48] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.232763][ T48] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 120.242896][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.252916][ T48] usb 6-1: config 0 descriptor?? [ 120.844264][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 120.844296][ T30] audit: type=1400 audit(1765242182.915:381): avc: denied { map } for pid=8164 comm="syz.3.983" path="socket:[19505]" dev="sockfs" ino=19505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 120.879015][ T48] uclogic 0003:28BD:0071.000C: pen parameters not found [ 120.887537][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.896007][ T48] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 120.904914][ T30] audit: type=1400 audit(1765242182.915:382): avc: denied { accept } for pid=8164 comm="syz.3.983" path="socket:[19505]" dev="sockfs" ino=19505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 120.931298][ T48] usb 6-1: USB disconnect, device number 14 [ 121.063469][ T30] audit: type=1400 audit(1765242183.135:383): avc: denied { ioctl } for pid=8173 comm="syz.1.987" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 121.504445][ T8198] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 121.763417][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.791909][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1008'. [ 121.923055][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.941494][ T48] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 121.987426][ T8231] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1014'. [ 122.113128][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 122.124972][ T48] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.135740][ T48] usb 3-1: config 0 has no interface number 0 [ 122.145111][ T8231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.148631][ T48] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.169162][ T48] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.181688][ T48] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 122.192389][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.192483][ T8231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.211978][ T48] usb 3-1: config 0 descriptor?? [ 122.223242][ T8231] bond0 (unregistering): Released all slaves [ 122.240496][ T30] audit: type=1400 audit(1765242184.305:384): avc: denied { map } for pid=8238 comm="syz.1.1018" path="socket:[20541]" dev="sockfs" ino=20541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.261200][ T5887] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 122.286569][ T30] audit: type=1400 audit(1765242184.335:385): avc: denied { read } for pid=8238 comm="syz.1.1018" path="socket:[20541]" dev="sockfs" ino=20541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.422505][ T5887] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.442032][ T5887] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 122.471073][ T5887] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.480346][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.492635][ T8235] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 122.507058][ T5887] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.734367][ T5923] usb 6-1: USB disconnect, device number 15 [ 122.829746][ T48] uclogic 0003:28BD:0094.000D: pen parameters not found [ 122.841153][ T48] uclogic 0003:28BD:0094.000D: interface is invalid, ignoring [ 122.862435][ T48] usb 3-1: USB disconnect, device number 11 [ 122.962668][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.064462][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 123.080064][ T8262] macvlan2: entered promiscuous mode [ 123.085499][ T8262] macvlan2: entered allmulticast mode [ 123.090943][ T8262] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 123.364281][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.472135][ T5887] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.611182][ T48] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 123.647601][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 123.654819][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 123.664910][ T5887] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.675469][ T5887] usb 1-1: config 0 has no interface number 0 [ 123.693210][ T5887] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.710646][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.726358][ T5887] usb 1-1: Product: syz [ 123.730927][ T5887] usb 1-1: Manufacturer: syz [ 123.751226][ T5887] usb 1-1: SerialNumber: syz [ 123.757854][ T5887] usb 1-1: config 0 descriptor?? [ 123.761195][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 123.774690][ T5887] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 123.792007][ T48] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.813814][ T48] usb 2-1: config 0 has no interface number 0 [ 123.837830][ T48] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.857964][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.875104][ T48] usb 2-1: Product: syz [ 123.882425][ T48] usb 2-1: Manufacturer: syz [ 123.887025][ T48] usb 2-1: SerialNumber: syz [ 123.912513][ T48] usb 2-1: config 0 descriptor?? [ 123.923126][ T48] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 123.934368][ T30] audit: type=1400 audit(1765242186.015:386): avc: denied { setopt } for pid=8291 comm="syz.2.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.984543][ T5887] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 124.003614][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.006039][ T5887] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 124.030856][ T30] audit: type=1400 audit(1765242186.095:387): avc: denied { read } for pid=8297 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.111241][ T5866] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 124.145918][ T48] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 124.158349][ T48] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 124.191206][ T5923] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 124.282768][ T5866] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.292564][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.304254][ T5866] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.313936][ T5866] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.322084][ T5866] usb 6-1: Manufacturer: syz [ 124.328416][ T5866] usb 6-1: config 0 descriptor?? [ 124.346883][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 124.366663][ T5923] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 124.384211][ T5923] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 124.394472][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.405451][ T5923] usb 4-1: Product: syz [ 124.409641][ T5923] usb 4-1: Manufacturer: syz [ 124.414284][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 124.414692][ T5887] usb 1-1: USB disconnect, device number 10 [ 124.417814][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 124.424850][ T5923] usb 4-1: SerialNumber: syz [ 124.428963][ T5866] rc_core: IR keymap rc-hauppauge not found [ 124.455715][ T5923] usb 4-1: config 0 descriptor?? [ 124.456960][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 124.464775][ T8294] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 124.472878][ T5866] Registered IR keymap rc-empty [ 124.484297][ T5887] quatech2 1-1:0.51: device disconnected [ 124.493943][ T5866] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 124.509947][ T5923] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 124.511447][ T5866] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 124.558418][ T5866] usb 6-1: USB disconnect, device number 16 [ 124.603587][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 124.603794][ T90] usb 2-1: USB disconnect, device number 10 [ 124.624263][ T90] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 124.639827][ T90] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 124.657708][ T6523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.699822][ T90] quatech2 2-1:0.51: device disconnected [ 124.792998][ T5923] usb 4-1: USB disconnect, device number 14 [ 124.798961][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 125.041556][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.453446][ T8337] C: renamed from team_slave_0 (while UP) [ 125.471702][ T90] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 125.480616][ T8337] netlink: 'syz.2.1061': attribute type 2 has an invalid length. [ 125.505092][ T8337] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1061'. [ 125.514811][ T8337] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 125.561714][ T5866] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 125.646008][ T90] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 125.660341][ T90] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 125.677371][ T8349] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 125.686775][ T90] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 125.723889][ T90] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 125.735532][ T90] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.743790][ T90] usb 6-1: Product: syz [ 125.748016][ T90] usb 6-1: Manufacturer: syz [ 125.753400][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 125.760790][ T5866] usb 2-1: config 0 has no interfaces? [ 125.768000][ T5866] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 125.778967][ T90] usb 6-1: SerialNumber: syz [ 125.786491][ T30] audit: type=1326 audit(1765242443.865:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.2.1070" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b4738f749 code=0x0 [ 125.787906][ T90] usb 6-1: config 0 descriptor?? [ 125.814413][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.823009][ T8357] input: syz0 as /devices/virtual/input/input20 [ 125.825379][ T5866] usb 2-1: config 0 descriptor?? [ 125.836729][ T8327] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 125.846803][ T8327] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 125.855489][ T90] usb 6-1: ucan: probing device on interface #0 [ 125.947233][ T30] audit: type=1400 audit(1765242444.025:389): avc: denied { connect } for pid=8361 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.082924][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.099488][ T5866] usb 2-1: USB disconnect, device number 11 [ 126.280745][ T90] usb 6-1: ucan: device reported invalid tx-fifo size [ 126.291743][ T90] usb 6-1: ucan: probe failed; try to update the device firmware [ 126.870660][ T30] audit: type=1400 audit(1765242444.945:390): avc: denied { mounton } for pid=8397 comm="syz.1.1088" path="cgroup:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.024569][ T30] audit: type=1400 audit(1765242445.105:391): avc: denied { getopt } for pid=8401 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 127.123658][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.695250][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.835698][ T8451] vivid-000: ================= START STATUS ================= [ 127.853530][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.861811][ T8451] vivid-000: Test Pattern: 75% Colorbar [ 127.867481][ T8451] vivid-000: Fill Percentage of Frame: 100 [ 127.874164][ T8451] vivid-000: Horizontal Movement: No Movement [ 127.880233][ T8451] vivid-000: Vertical Movement: No Movement [ 127.887741][ T8451] vivid-000: OSD Text Mode: All [ 127.893074][ T8451] vivid-000: Show Border: false [ 127.898035][ T8451] vivid-000: Show Square: false [ 127.903636][ T8451] vivid-000: Sensor Flipped Horizontally: false [ 127.909893][ T8451] vivid-000: Sensor Flipped Vertically: false [ 127.916117][ T8451] vivid-000: Insert SAV Code in Image: false [ 127.923253][ T8451] vivid-000: Insert EAV Code in Image: false [ 127.929231][ T8451] vivid-000: Insert Video Guard Band: false [ 127.935773][ T8451] vivid-000: Reduced Framerate: false [ 127.941175][ T8451] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 127.948823][ T8451] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 127.957619][ T8451] vivid-000: Enable Capture Cropping: true grabbed [ 127.965067][ T8451] vivid-000: Enable Capture Composing: true grabbed [ 127.971706][ T8451] vivid-000: Enable Capture Scaler: true grabbed [ 127.978034][ T8451] vivid-000: Timestamp Source: End of Frame [ 127.983976][ T8451] vivid-000: Colorspace: sRGB [ 127.988651][ T8451] vivid-000: Transfer Function: Default [ 127.994276][ T8451] vivid-000: Y'CbCr Encoding: Default [ 127.999662][ T8451] vivid-000: HSV Encoding: Hue 0-179 [ 128.005543][ T8451] vivid-000: Quantization: Default [ 128.010665][ T8451] vivid-000: Apply Alpha To Red Only: false [ 128.013111][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 128.016838][ T8451] vivid-000: Standard Aspect Ratio: 4x3 [ 128.029157][ T8451] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 128.036960][ T8451] vivid-000: DV Timings: 640x480p59 inactive [ 128.043004][ T8451] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 128.050335][ T8451] vivid-000: Maximum EDID Blocks: 2 [ 128.055568][ T8451] vivid-000: Limited RGB Range (16-235): false [ 128.062241][ T8451] vivid-000: Rx RGB Quantization Range: Automatic [ 128.068680][ T8451] vivid-000: Power Present: 0x00000001 [ 128.076044][ T8451] tpg source WxH: 320x240 (Y'CbCr) [ 128.081396][ T8451] tpg field: 1 [ 128.084812][ T8451] tpg crop: (0,0)/320x240 [ 128.089171][ T8451] tpg compose: (0,0)/320x240 [ 128.094132][ T8451] tpg colorspace: 8 [ 128.097965][ T8451] tpg transfer function: 0/2 [ 128.102806][ T8451] tpg Y'CbCr encoding: 0/1 [ 128.108235][ T8451] tpg quantization: 0/2 [ 128.112672][ T8451] tpg RGB range: 0/2 [ 128.116604][ T8451] vivid-000: ================== END STATUS ================== [ 128.161985][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.173138][ T30] audit: type=1400 audit(1765242446.255:392): avc: denied { getopt } for pid=8453 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.258089][ T48] usb 6-1: USB disconnect, device number 17 [ 128.265543][ T8458] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1113'. [ 128.274860][ T8458] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1113'. [ 128.433396][ T30] audit: type=1400 audit(1765242446.515:393): avc: denied { write } for pid=8470 comm="syz.5.1120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 128.483528][ T30] audit: type=1400 audit(1765242446.565:394): avc: denied { ioctl } for pid=8473 comm="syz.3.1122" path="socket:[21126]" dev="sockfs" ino=21126 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.520139][ T30] audit: type=1400 audit(1765242446.565:395): avc: denied { map } for pid=8475 comm="syz.1.1121" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 128.554816][ T30] audit: type=1400 audit(1765242446.565:396): avc: denied { execute } for pid=8475 comm="syz.1.1121" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 128.601502][ T90] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 128.764620][ T90] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.785946][ T90] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.802972][ T90] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 128.812561][ T90] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.837347][ T90] usb 3-1: SerialNumber: syz [ 128.854580][ T90] usb 3-1: 0:2 : does not exist [ 128.913823][ T30] audit: type=1400 audit(1765242446.995:397): avc: denied { map } for pid=8500 comm="syz.3.1136" path="socket:[20204]" dev="sockfs" ino=20204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.956495][ T30] audit: type=1400 audit(1765242447.015:398): avc: denied { read } for pid=8500 comm="syz.3.1136" path="socket:[20204]" dev="sockfs" ino=20204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.202157][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.262555][ T90] usb 3-1: USB disconnect, device number 12 [ 129.357200][ T8534] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1149'. [ 129.497231][ T8534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.516622][ T8534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.534391][ T8534] bond0 (unregistering): Released all slaves [ 129.833444][ T8556] misc userio: Begin command sent, but we're already running [ 130.211297][ T90] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 130.239998][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1172'. [ 130.261239][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.371718][ T90] usb 3-1: Using ep0 maxpacket: 32 [ 130.386239][ T90] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.402596][ T90] usb 3-1: config 0 has no interfaces? [ 130.414191][ T90] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 130.434102][ T5866] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 130.449125][ T90] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 130.460158][ T90] usb 3-1: Product: syz [ 130.465405][ T90] usb 3-1: Manufacturer: syz [ 130.470588][ T90] usb 3-1: SerialNumber: syz [ 130.491379][ T90] usb 3-1: config 0 descriptor?? [ 130.612887][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 130.630523][ T5866] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.651925][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.671814][ T5866] usb 2-1: Product: syz [ 130.678200][ T5866] usb 2-1: Manufacturer: syz [ 130.689158][ T5866] usb 2-1: SerialNumber: syz [ 130.701878][ T5866] usb 2-1: config 0 descriptor?? [ 130.721859][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.730968][ T5887] usb 3-1: USB disconnect, device number 13 [ 131.160818][ T5866] usb 2-1: USB disconnect, device number 12 [ 131.282940][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.312469][ T8622] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1189'. [ 131.436127][ T8622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.459354][ T8622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.475396][ T8622] bond0 (unregistering): Released all slaves [ 131.681497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.734389][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 131.734403][ T30] audit: type=1400 audit(1765242449.805:405): avc: denied { write } for pid=8635 comm="syz.3.1197" path="socket:[21599]" dev="sockfs" ino=21599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.792801][ T8641] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 131.931793][ T30] audit: type=1400 audit(1765242450.015:406): avc: denied { watch_mount } for pid=8648 comm="syz.5.1202" path="/204" dev="tmpfs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.326585][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.335406][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.341969][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.415674][ T30] audit: type=1400 audit(1765242450.495:407): avc: denied { create } for pid=8665 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.441656][ T5866] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 132.470130][ T30] audit: type=1400 audit(1765242450.495:408): avc: denied { connect } for pid=8665 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.612314][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 132.629180][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.647633][ T5866] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 132.666898][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.687272][ T5866] usb 2-1: config 0 descriptor?? [ 132.726896][ T5928] IPVS: starting estimator thread 0... [ 132.732518][ T8675] IPVS: sed: FWM 3 0x00000003 - no destination available [ 132.841382][ T8677] IPVS: using max 45 ests per chain, 108000 per kthread [ 132.866047][ T8682] netlink: 992 bytes leftover after parsing attributes in process `syz.2.1217'. [ 132.881486][ T8682] netlink: 992 bytes leftover after parsing attributes in process `syz.2.1217'. [ 133.118405][ T5866] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 133.243184][ T8702] kernel read not supported for file /eth0 (pid: 8702 comm: syz.0.1227) [ 133.283995][ T30] audit: type=1800 audit(1765242451.365:409): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1227" name=6574683004 dev="mqueue" ino=21818 res=0 errno=0 [ 133.291480][ T8707] 9p: Bad value for 'wfdno' [ 133.322132][ T5928] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 133.362425][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.383037][ T30] audit: type=1400 audit(1765242451.465:410): avc: denied { write } for pid=8712 comm="syz.5.1232" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 133.408875][ T48] kernel read not supported for file /mdstat (pid: 48 comm: kworker/1:1) [ 133.499038][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 133.505656][ T5928] usb 4-1: config 10 has an invalid interface number: 211 but max is 0 [ 133.514127][ T5928] usb 4-1: config 10 has no interface number 0 [ 133.520345][ T5928] usb 4-1: config 10 interface 211 has no altsetting 0 [ 133.544933][ T5928] usb 4-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice=99.7e [ 133.555900][ T5887] usb 2-1: USB disconnect, device number 13 [ 133.644107][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.652263][ T5928] usb 4-1: Product: syz [ 133.656886][ T5928] usb 4-1: Manufacturer: syz [ 133.662297][ T5928] usb 4-1: SerialNumber: syz [ 133.701234][ T5866] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.761705][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.852667][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.871374][ T5866] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.886301][ T5928] appletouch 4-1:10.211: Could not find int-in endpoint [ 133.890829][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.912250][ T5928] appletouch 4-1:10.211: probe with driver appletouch failed with error -5 [ 133.913730][ T5866] usb 1-1: config 0 descriptor?? [ 133.922319][ T5928] usbhid 4-1:10.211: couldn't find an input interrupt endpoint [ 133.944280][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 133.953471][ T5928] usb 4-1: USB disconnect, device number 15 [ 134.052926][ T30] audit: type=1400 audit(1765242452.135:411): avc: denied { mount } for pid=8734 comm="syz.2.1241" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 134.112845][ T30] audit: type=1400 audit(1765242452.195:412): avc: denied { create } for pid=8732 comm="syz.5.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 134.196065][ T8740] overlayfs: conflicting options: userxattr,metacopy=on [ 134.401477][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.483141][ T5928] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 134.517621][ T8750] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 134.565747][ T5866] pwc: recv_control_msg error -71 req 02 val 2700 [ 134.582041][ T5866] pwc: recv_control_msg error -71 req 02 val 2c00 [ 134.597265][ T5866] pwc: recv_control_msg error -71 req 04 val 1000 [ 134.612181][ T5866] pwc: recv_control_msg error -71 req 04 val 1300 [ 134.623740][ T5866] pwc: recv_control_msg error -71 req 04 val 1400 [ 134.638932][ T5866] pwc: recv_control_msg error -71 req 02 val 2000 [ 134.646110][ T5866] pwc: recv_control_msg error -71 req 02 val 2100 [ 134.654269][ T5866] pwc: recv_control_msg error -71 req 04 val 1500 [ 134.661183][ T5866] pwc: recv_control_msg error -71 req 02 val 2500 [ 134.667660][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 134.667971][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 134.681798][ T5928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.682766][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 134.700896][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 134.709049][ T5928] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 134.709654][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 134.725859][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 134.733715][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 134.743838][ T5866] pwc: Registered as video103. [ 134.748480][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.749877][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 134.768441][ T5928] usb 6-1: config 0 descriptor?? [ 134.771833][ T5866] usb 1-1: USB disconnect, device number 11 [ 134.787441][ T5928] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 134.836277][ T8755] Cannot find add_set index 0 as target [ 134.882474][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.930192][ T30] audit: type=1400 audit(1765242453.005:413): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 135.221248][ T5866] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 135.261627][ T5887] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 135.371181][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 135.378360][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.389977][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.402517][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.412337][ T5866] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 135.423151][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.436187][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 135.442601][ T5866] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.451446][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.451777][ T5866] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.467743][ T5866] usb 3-1: Manufacturer: syz [ 135.472606][ T5887] usb 2-1: config index 0 descriptor too short (expected 6683, got 27) [ 135.480848][ T5887] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 135.491437][ T5866] usb 3-1: config 0 descriptor?? [ 135.496497][ T5887] usb 2-1: config 0 has no interface number 0 [ 135.504019][ T5887] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.516485][ T5887] usb 2-1: config 0 interface 85 has no altsetting 0 [ 135.525329][ T5887] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 135.534714][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.542786][ T5887] usb 2-1: Product: syz [ 135.546941][ T5887] usb 2-1: Manufacturer: syz [ 135.551640][ T5887] usb 2-1: SerialNumber: syz [ 135.557953][ T5887] usb 2-1: config 0 descriptor?? [ 135.593019][ T5928] gspca_vc032x: reg_w err -71 [ 135.597739][ T5928] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 135.608966][ T5928] usb 6-1: USB disconnect, device number 18 [ 135.631248][ T48] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 135.771285][ T5866] rc_core: IR keymap rc-hauppauge not found [ 135.777223][ T5866] Registered IR keymap rc-empty [ 135.781169][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 135.782602][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.788852][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.804480][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.816600][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.821846][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.826304][ T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 135.843858][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.857800][ T48] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.867038][ T48] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.872738][ T5866] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 135.875069][ T48] usb 1-1: Manufacturer: syz [ 135.888957][ T5866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 135.902137][ T48] usb 1-1: config 0 descriptor?? [ 135.909490][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.931292][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.951741][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.981315][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.001428][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.021274][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.041335][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.071334][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.084868][ T30] audit: type=1400 audit(1765242454.165:414): avc: denied { create } for pid=8785 comm="syz.3.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 136.104466][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.141800][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.175168][ T5887] appletouch 2-1:0.85: Geyser mode initialized. [ 136.182965][ T5866] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 136.190946][ T5866] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 136.203688][ T5887] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input23 [ 136.211211][ T48] rc_core: IR keymap rc-hauppauge not found [ 136.223842][ T5866] usb 3-1: USB disconnect, device number 14 [ 136.244162][ T48] Registered IR keymap rc-empty [ 136.252742][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.283145][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.313428][ T48] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 136.334246][ T48] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input25 [ 136.355112][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.378100][ T5928] usb 2-1: USB disconnect, device number 14 [ 136.391298][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.399294][ T5928] appletouch 2-1:0.85: input: appletouch disconnected [ 136.432414][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.461214][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.481643][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.490391][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.511701][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.531252][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.551507][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.571241][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.592139][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.613712][ T48] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 136.622914][ T48] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 136.635754][ T48] usb 1-1: USB disconnect, device number 12 [ 136.935311][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 136.935327][ T30] audit: type=1326 audit(1765242455.015:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8819 comm="syz.3.1278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f164cf8f749 code=0x0 [ 137.119410][ T30] audit: type=1400 audit(1765242455.195:417): avc: denied { bind } for pid=8834 comm="syz.2.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.165466][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 137.176093][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1286'. [ 137.187600][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1286'. [ 137.220528][ T30] audit: type=1400 audit(1765242455.295:418): avc: denied { append } for pid=8840 comm="syz.1.1288" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.337008][ T8846] netlink: 'syz.0.1289': attribute type 2 has an invalid length. [ 137.435943][ T30] audit: type=1400 audit(1765242455.515:419): avc: denied { read } for pid=8852 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.455298][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.524314][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.618457][ T8863] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1298'. [ 137.684620][ T8863] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 137.845501][ T8870] process 'syz.5.1300' launched './file1' with NULL argv: empty string added [ 137.874473][ T30] audit: type=1400 audit(1765242455.955:420): avc: denied { execute_no_trans } for pid=8868 comm="syz.5.1300" path="/237/file1" dev="tmpfs" ino=1223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.923237][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.995926][ T30] audit: type=1400 audit(1765242456.075:421): avc: denied { create } for pid=8878 comm="syz.3.1306" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.050850][ T8883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.066336][ T30] audit: type=1400 audit(1765242456.105:422): avc: denied { write } for pid=8878 comm="syz.3.1306" name="file0" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.125715][ T30] audit: type=1400 audit(1765242456.105:423): avc: denied { open } for pid=8878 comm="syz.3.1306" path="/234/file0" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.223394][ T30] audit: type=1400 audit(1765242456.105:424): avc: denied { ioctl } for pid=8878 comm="syz.3.1306" path="/234/file0" dev="tmpfs" ino=1200 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.256370][ T5928] IPVS: starting estimator thread 0... [ 138.281977][ T8890] IPVS: sed: FWM 3 0x00000003 - no destination available [ 138.289236][ T8890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.311167][ T30] audit: type=1400 audit(1765242456.185:425): avc: denied { unlink } for pid=5811 comm="syz-executor" name="file0" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.373110][ T8891] IPVS: using max 45 ests per chain, 108000 per kthread [ 138.561915][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.464370][ T8952] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1336'. [ 139.541342][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.745649][ T8960] overlayfs: workdir and upperdir must reside under the same mount [ 139.859300][ T8952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.925563][ T8952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.943877][ T8952] bond0 (unregistering): Released all slaves [ 140.012024][ T5866] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 140.182578][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.219864][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 140.249854][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 140.281182][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 140.299178][ T8981] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1353'. [ 140.308414][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.331583][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 140.353216][ T5866] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 140.371183][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.387077][ T5866] usb 1-1: Product: syz [ 140.401257][ T5866] usb 1-1: Manufacturer: syz [ 140.411356][ T5866] usb 1-1: SerialNumber: syz [ 140.431855][ T5866] usb 1-1: config 0 descriptor?? [ 140.437530][ T8963] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.458591][ T5866] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 140.623264][ T8992] overlayfs: missing 'lowerdir' [ 140.792183][ T5866] usb 1-1: USB disconnect, device number 13 [ 140.798152][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 141.738358][ T24] net_ratelimit: 8 callbacks suppressed [ 141.738373][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.976791][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 141.976806][ T30] audit: type=1400 audit(1765242460.055:444): avc: denied { create } for pid=9050 comm="syz.0.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 142.047267][ T30] audit: type=1400 audit(1765242460.095:445): avc: denied { map } for pid=9050 comm="syz.0.1383" path="socket:[24718]" dev="sockfs" ino=24718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 142.075787][ T30] audit: type=1400 audit(1765242460.095:446): avc: denied { setopt } for pid=9050 comm="syz.0.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 142.097360][ T5866] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 142.251320][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 142.260213][ T5866] usb 4-1: config 0 has no interfaces? [ 142.268439][ T5866] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 142.293102][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.322593][ T5866] usb 4-1: config 0 descriptor?? [ 142.326428][ T9070] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 142.341217][ T9070] overlayfs: missing 'lowerdir' [ 142.469249][ T30] audit: type=1400 audit(1765242460.545:447): avc: denied { append } for pid=9076 comm="syz.0.1396" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.649487][ T90] usb 4-1: USB disconnect, device number 16 [ 142.691523][ T5866] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 142.803143][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.848213][ T30] audit: type=1400 audit(1765242460.925:448): avc: denied { mounton } for pid=9092 comm="syz.2.1403" path="/" dev="tmpfs" ino=1467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 142.878084][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 142.889666][ T5866] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 142.899209][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.908362][ T5866] usb 6-1: Product: syz [ 142.912825][ T5866] usb 6-1: Manufacturer: syz [ 142.917416][ T5866] usb 6-1: SerialNumber: syz [ 142.928864][ T5866] usb 6-1: config 0 descriptor?? [ 142.940093][ T5866] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 142.952288][ T9097] kAFS: unable to lookup cell '(,' [ 143.051228][ T5887] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 143.461244][ T90] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 143.607940][ T30] audit: type=1400 audit(1765242461.685:449): avc: denied { ioctl } for pid=9130 comm="syz.3.1420" path="socket:[24935]" dev="sockfs" ino=24935 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 143.642311][ T30] audit: type=1400 audit(1765242461.685:450): avc: denied { setopt } for pid=9132 comm="syz.0.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.644753][ T90] usb 3-1: Using ep0 maxpacket: 32 [ 143.677496][ T90] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.696884][ T90] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 143.707803][ T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.716113][ T90] usb 3-1: Product: syz [ 143.720390][ T90] usb 3-1: Manufacturer: syz [ 143.725785][ T90] usb 3-1: SerialNumber: syz [ 143.732792][ T90] usb 3-1: config 0 descriptor?? [ 143.738978][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.752676][ T5866] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 143.756755][ T30] audit: type=1400 audit(1765242461.835:451): avc: denied { setopt } for pid=9136 comm="syz.3.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.773463][ T5887] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 143.794497][ T5866] usb 6-1: USB disconnect, device number 19 [ 143.823531][ T5887] usb 2-1: can't read configurations, error -71 [ 143.843399][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.852850][ T9139] blkio.reset_stats is deprecated [ 143.886864][ T9143] erspan0: entered promiscuous mode [ 144.001375][ T6523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.032525][ T9155] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 144.182699][ T90] gs_usb 3-1:0.0: Configuring for 2 interfaces [ 144.231292][ T6523] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 144.255409][ T30] audit: type=1400 audit(1765242462.335:452): avc: denied { bind } for pid=9169 comm="syz.3.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.402700][ T6523] usb 1-1: Using ep0 maxpacket: 16 [ 144.430741][ T6523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.449641][ T9181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1443'. [ 144.454881][ T6523] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.484914][ T6523] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.504150][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1443'. [ 144.521629][ T6523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.542058][ T6523] usb 1-1: config 0 descriptor?? [ 144.590726][ T90] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 144.625586][ T90] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 144.673341][ T90] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 144.712182][ T90] usb 3-1: USB disconnect, device number 15 [ 144.881485][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.113013][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 145.128925][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 145.209324][ T30] audit: type=1400 audit(1765242463.285:453): avc: denied { map } for pid=9213 comm="syz.5.1456" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 145.925569][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.241485][ T90] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 146.285773][ T9256] vivid-000: disconnect [ 146.291465][ T9255] vivid-000: reconnect [ 146.411246][ T90] usb 2-1: Using ep0 maxpacket: 16 [ 146.425923][ T90] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 146.440326][ T90] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.463723][ T90] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.473454][ T90] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.483632][ T90] usb 2-1: Product: syz [ 146.488131][ T90] usb 2-1: Manufacturer: syz [ 146.494768][ T90] usb 2-1: SerialNumber: syz [ 146.506653][ T90] usb 2-1: config 0 descriptor?? [ 146.515919][ T90] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 146.529606][ T90] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 146.897159][ T5887] kernel write not supported for file /uinput (pid: 5887 comm: kworker/0:5) [ 146.963055][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.009349][ T6523] usbhid 1-1:0.0: can't add hid device: -71 [ 147.031408][ T6523] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 147.041465][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.045641][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.053518][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.057697][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.078286][ T6523] usb 1-1: USB disconnect, device number 14 [ 147.135164][ T90] em28xx 2-1:0.0: chip ID is em2874 [ 147.368905][ T5928] usb 2-1: USB disconnect, device number 17 [ 147.382208][ T5928] em28xx 2-1:0.0: Disconnecting em28xx [ 147.398600][ T5928] em28xx 2-1:0.0: Freeing device [ 147.614960][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 147.614974][ T30] audit: type=1400 audit(1765242465.695:455): avc: denied { write } for pid=9320 comm="syz.5.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 147.889359][ T9328] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1507'. [ 148.001887][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.033671][ T30] audit: type=1400 audit(1765242466.115:456): avc: denied { setopt } for pid=9331 comm="syz.5.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.121225][ T6523] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.303962][ T6523] usb 1-1: Using ep0 maxpacket: 32 [ 148.326022][ T6523] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.351900][ T6523] usb 1-1: config 0 has no interface number 0 [ 148.374686][ T6523] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 148.391235][ T6523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.410520][ T6523] usb 1-1: Product: syz [ 148.420429][ T6523] usb 1-1: Manufacturer: syz [ 148.430268][ T6523] usb 1-1: SerialNumber: syz [ 148.443159][ T6523] usb 1-1: config 0 descriptor?? [ 148.450619][ T6523] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 148.469509][ T6523] usb 1-1: selecting invalid altsetting 1 [ 148.477856][ T6523] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 148.517502][ T6523] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.539529][ T6523] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 148.559125][ T6523] usb 1-1: media controller created [ 148.597837][ T6523] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.673049][ T6523] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 148.688030][ T6523] zl10353_read_register: readreg error (reg=127, ret==-71) [ 148.715946][ T6523] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 148.824796][ T6523] usb 1-1: USB disconnect, device number 15 [ 149.009338][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.043640][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.077028][ T3517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.213861][ T3517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.321845][ T3517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.440503][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.450990][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.459714][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.467447][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.476054][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.482837][ T3517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.513977][ T30] audit: type=1400 audit(1765242468.595:457): avc: denied { listen } for pid=9410 comm="syz.2.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.562026][ T30] audit: type=1400 audit(1765242468.615:458): avc: denied { bind } for pid=9410 comm="syz.2.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.581236][ T9413] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.1545'. [ 150.581373][ T9413] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 150.704209][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1548'. [ 150.713247][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1548'. [ 150.882651][ T3517] bridge_slave_1: left allmulticast mode [ 150.888661][ T3517] bridge_slave_1: left promiscuous mode [ 150.894327][ T5887] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 150.924218][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.933555][ T3517] bridge_slave_0: left allmulticast mode [ 150.941270][ T3517] bridge_slave_0: left promiscuous mode [ 150.951344][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.081756][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 151.093514][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 151.128337][ T5887] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 151.142842][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.150895][ T5887] usb 2-1: Product: syz [ 151.155995][ T5887] usb 2-1: Manufacturer: syz [ 151.160598][ T5887] usb 2-1: SerialNumber: syz [ 151.170266][ T5887] usb 2-1: config 0 descriptor?? [ 151.188362][ T5887] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 151.202086][ T5887] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 151.652045][ T3517] tipc: Disabling bearer [ 151.658139][ T3517] tipc: Left network mode [ 151.768534][ T9406] chnl_net:caif_netlink_parms(): no params data found [ 151.795964][ T5887] em28xx 2-1:0.0: chip ID is em2765 [ 151.821214][ T5888] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 151.836900][ T9456] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 151.981534][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 152.013656][ T5888] usb 3-1: config index 0 descriptor too short (expected 6683, got 27) [ 152.042627][ T3517] hsr_slave_0: left promiscuous mode [ 152.051080][ T5888] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 152.063782][ T5887] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 152.075701][ T3517] hsr_slave_1: left promiscuous mode [ 152.088396][ T5888] usb 3-1: config 0 has no interface number 0 [ 152.097869][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.111215][ T5887] em28xx 2-1:0.0: board has no eeprom [ 152.116717][ T5888] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.130808][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.139729][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.150185][ T5888] usb 3-1: config 0 interface 85 has no altsetting 0 [ 152.157252][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.168517][ T5888] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 152.187860][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.197312][ T5887] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 152.208305][ T3517] veth1_macvtap: left promiscuous mode [ 152.213917][ T5887] em28xx 2-1:0.0: dvb set to bulk mode. [ 152.219532][ T5888] usb 3-1: Product: syz [ 152.224537][ T3517] veth0_macvtap: left promiscuous mode [ 152.230113][ T90] em28xx 2-1:0.0: Binding DVB extension [ 152.238735][ T5888] usb 3-1: Manufacturer: syz [ 152.241597][ T3517] veth1_vlan: left promiscuous mode [ 152.244843][ T5887] usb 2-1: USB disconnect, device number 18 [ 152.250335][ T3517] veth0_vlan: left promiscuous mode [ 152.256607][ T5888] usb 3-1: SerialNumber: syz [ 152.265379][ T5887] em28xx 2-1:0.0: Disconnecting em28xx [ 152.273320][ T5888] usb 3-1: config 0 descriptor?? [ 152.316740][ T90] em28xx 2-1:0.0: Registering input extension [ 152.332181][ T5887] em28xx 2-1:0.0: Closing input extension [ 152.353491][ T5887] em28xx 2-1:0.0: Freeing device [ 152.483432][ T90] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 152.561511][ T5828] Bluetooth: hci3: command tx timeout [ 152.636178][ T3517] team0 (unregistering): Port device team_slave_1 removed [ 152.661698][ T90] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.681933][ T90] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.693374][ T3517] team0 (unregistering): Port device team_slave_0 removed [ 152.707142][ T90] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.719666][ T90] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 152.743411][ T90] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 152.756441][ T90] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.766639][ T90] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.776949][ T90] usb 6-1: Product: syz [ 152.781318][ T90] usb 6-1: Manufacturer: syz [ 152.790476][ T90] cdc_wdm 6-1:1.0: skipping garbage [ 152.795761][ T90] cdc_wdm 6-1:1.0: skipping garbage [ 152.802685][ T90] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 152.810780][ T90] cdc_wdm 6-1:1.0: Unknown control protocol [ 152.904545][ T5888] appletouch 3-1:0.85: Geyser mode initialized. [ 152.914162][ T5888] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input27 [ 153.024001][ T5888] usb 6-1: USB disconnect, device number 20 [ 153.094381][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.101553][ T9481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.108967][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.116087][ T9481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.119923][ T90] usb 3-1: USB disconnect, device number 16 [ 153.134538][ T90] appletouch 3-1:0.85: input: appletouch disconnected [ 153.144940][ T9481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.198385][ T9482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.263419][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.280723][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.293048][ T9406] bridge_slave_0: entered allmulticast mode [ 153.300374][ T9406] bridge_slave_0: entered promiscuous mode [ 153.308689][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.317910][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.330584][ T9406] bridge_slave_1: entered allmulticast mode [ 153.338571][ T9406] bridge_slave_1: entered promiscuous mode [ 153.404420][ T9406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.427244][ T9406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.467048][ T9406] team0: Port device team_slave_0 added [ 153.467802][ T3517] IPVS: stop unused estimator thread 0... [ 153.474759][ T9406] team0: Port device team_slave_1 added [ 153.512954][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.520021][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.548140][ T9406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.592710][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.611230][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.641732][ T9406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.733182][ T9406] hsr_slave_0: entered promiscuous mode [ 153.745510][ T9406] hsr_slave_1: entered promiscuous mode [ 153.831585][ T30] audit: type=1400 audit(1765242471.905:459): avc: denied { bind } for pid=9506 comm="syz.1.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.055546][ T9517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.089914][ T9517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.284632][ T90] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 154.292362][ T6523] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 154.314471][ T30] audit: type=1400 audit(1765242472.395:460): avc: denied { ioctl } for pid=9530 comm="syz.2.1596" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 154.393002][ T9406] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.407583][ T9406] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.422677][ T9406] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.433674][ T9406] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.451578][ T6523] usb 2-1: Using ep0 maxpacket: 8 [ 154.456977][ T90] usb 4-1: Using ep0 maxpacket: 8 [ 154.464074][ T6523] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 154.473467][ T90] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 154.483432][ T6523] usb 2-1: config 0 has no interface number 0 [ 154.492169][ T90] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.503197][ T6523] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.529957][ T90] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.545499][ T6523] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 154.551547][ T30] audit: type=1400 audit(1765242472.635:461): avc: denied { mounton } for pid=9544 comm="syz.5.1600" path=2F3331342FE91F7189591E9233614B dev="tmpfs" ino=1617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 154.566417][ T90] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.596492][ T6523] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.621082][ T6523] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.641744][ T90] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.643463][ T5828] Bluetooth: hci3: command tx timeout [ 154.661285][ T6523] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 154.670343][ T6523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.678973][ T9406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.692537][ T6523] usb 2-1: config 0 descriptor?? [ 154.697657][ T90] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.716357][ T9406] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.724959][ T6523] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 154.728193][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.734325][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.740162][ T6046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.784294][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.791445][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.813995][ T9406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.936427][ T24] usb 2-1: USB disconnect, device number 19 [ 154.945425][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 154.974088][ T90] usb 4-1: GET_CAPABILITIES returned 0 [ 154.981707][ T90] usbtmc 4-1:16.0: can't read capabilities [ 155.028008][ T9406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.084550][ T9406] veth0_vlan: entered promiscuous mode [ 155.100019][ T9406] veth1_vlan: entered promiscuous mode [ 155.134191][ T9406] veth0_macvtap: entered promiscuous mode [ 155.153248][ T9406] veth1_macvtap: entered promiscuous mode [ 155.173193][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.197327][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.227521][ T6066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.240172][ T5873] usb 4-1: USB disconnect, device number 17 [ 155.247204][ T6066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.263264][ T6099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.272445][ T6099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.335957][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.348242][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.371363][ T5828] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 155.406954][ T6099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.444377][ T6099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.470475][ T30] audit: type=1400 audit(1765242473.545:462): avc: denied { mounton } for pid=9406 comm="syz-executor" path="/root/syzkaller.ST2XAe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 155.740372][ T9583] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 155.813469][ T9583] CIFS mount error: No usable UNC path provided in device string! [ 155.813469][ T9583] [ 155.837806][ T9583] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 155.848095][ T30] audit: type=1400 audit(1765242473.915:463): avc: denied { mount } for pid=9589 comm="syz.0.1617" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 155.877516][ T30] audit: type=1400 audit(1765242473.955:464): avc: denied { unmount } for pid=9589 comm="syz.0.1617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 155.942564][ T9593] ================================================================== [ 155.950642][ T9593] BUG: KASAN: slab-use-after-free in inet6_addr_del.constprop.0+0x67a/0x6b0 [ 155.959314][ T9593] Read of size 4 at addr ffff88807b89c86c by task syz.3.1618/9593 [ 155.967104][ T9593] [ 155.969418][ T9593] CPU: 0 UID: 0 PID: 9593 Comm: syz.3.1618 Not tainted syzkaller #0 PREEMPT(full) [ 155.969436][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.969445][ T9593] Call Trace: [ 155.969452][ T9593] [ 155.969459][ T9593] dump_stack_lvl+0x116/0x1f0 [ 155.969484][ T9593] print_report+0xcd/0x630 [ 155.969504][ T9593] ? __virt_addr_valid+0x81/0x610 [ 155.969520][ T9593] ? __phys_addr+0xe8/0x180 [ 155.969535][ T9593] ? inet6_addr_del.constprop.0+0x67a/0x6b0 [ 155.969551][ T9593] kasan_report+0xe0/0x110 [ 155.969569][ T9593] ? inet6_addr_del.constprop.0+0x67a/0x6b0 [ 155.969586][ T9593] inet6_addr_del.constprop.0+0x67a/0x6b0 [ 155.969603][ T9593] addrconf_del_ifaddr+0x11e/0x190 [ 155.969619][ T9593] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 155.969637][ T9593] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 155.969656][ T9593] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.969678][ T9593] inet6_ioctl+0x1e5/0x2b0 [ 155.969700][ T9593] ? __pfx_inet6_ioctl+0x10/0x10 [ 155.969722][ T9593] ? tomoyo_path_number_perm+0x18d/0x580 [ 155.969745][ T9593] sock_do_ioctl+0x118/0x280 [ 155.969778][ T9593] ? __pfx_sock_do_ioctl+0x10/0x10 [ 155.969802][ T9593] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 155.969818][ T9593] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 155.969844][ T9593] sock_ioctl+0x227/0x6b0 [ 155.969857][ T9593] ? __pfx_sock_ioctl+0x10/0x10 [ 155.969869][ T9593] ? hook_file_ioctl_common+0x144/0x410 [ 155.969888][ T9593] ? selinux_file_ioctl+0x180/0x270 [ 155.969914][ T9593] ? selinux_file_ioctl+0xb4/0x270 [ 155.969936][ T9593] ? __pfx_sock_ioctl+0x10/0x10 [ 155.969949][ T9593] __x64_sys_ioctl+0x18e/0x210 [ 155.969965][ T9593] do_syscall_64+0xcd/0xf80 [ 155.969988][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.970003][ T9593] RIP: 0033:0x7f164cf8f749 [ 155.970016][ T9593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.970030][ T9593] RSP: 002b:00007f164de64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.970045][ T9593] RAX: ffffffffffffffda RBX: 00007f164d1e5fa0 RCX: 00007f164cf8f749 [ 155.970055][ T9593] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 155.970064][ T9593] RBP: 00007f164d013f91 R08: 0000000000000000 R09: 0000000000000000 [ 155.970073][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.970081][ T9593] R13: 00007f164d1e6038 R14: 00007f164d1e5fa0 R15: 00007ffde15c8288 [ 155.970095][ T9593] [ 155.970100][ T9593] [ 156.215796][ T9593] Allocated by task 9593: [ 156.220103][ T9593] kasan_save_stack+0x33/0x60 [ 156.224765][ T9593] kasan_save_track+0x14/0x30 [ 156.229421][ T9593] __kasan_kmalloc+0xaa/0xb0 [ 156.233989][ T9593] ipv6_add_addr+0x4e3/0x2010 [ 156.238653][ T9593] inet6_addr_add+0x256/0x9b0 [ 156.243306][ T9593] addrconf_add_ifaddr+0x1fc/0x450 [ 156.248403][ T9593] inet6_ioctl+0x103/0x2b0 [ 156.252805][ T9593] sock_do_ioctl+0x118/0x280 [ 156.257389][ T9593] sock_ioctl+0x227/0x6b0 [ 156.261696][ T9593] __x64_sys_ioctl+0x18e/0x210 [ 156.266442][ T9593] do_syscall_64+0xcd/0xf80 [ 156.270931][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.276801][ T9593] [ 156.279101][ T9593] Freed by task 6099: [ 156.283056][ T9593] kasan_save_stack+0x33/0x60 [ 156.287713][ T9593] kasan_save_track+0x14/0x30 [ 156.292373][ T9593] kasan_save_free_info+0x3b/0x60 [ 156.297383][ T9593] __kasan_slab_free+0x5f/0x80 [ 156.302126][ T9593] kmem_cache_free_bulk+0x2bf/0x680 [ 156.307313][ T9593] kvfree_rcu_bulk+0x1b7/0x1e0 [ 156.312075][ T9593] kfree_rcu_monitor+0x1d0/0x2f0 [ 156.317002][ T9593] process_one_work+0x9ba/0x1b20 [ 156.321928][ T9593] worker_thread+0x6c8/0xf10 [ 156.326509][ T9593] kthread+0x3c5/0x780 [ 156.330566][ T9593] ret_from_fork+0x983/0xb10 [ 156.335138][ T9593] ret_from_fork_asm+0x1a/0x30 [ 156.339890][ T9593] [ 156.342196][ T9593] Last potentially related work creation: [ 156.347891][ T9593] kasan_save_stack+0x33/0x60 [ 156.352550][ T9593] kasan_record_aux_stack+0xa7/0xc0 [ 156.357734][ T9593] kvfree_call_rcu+0x6a/0x4e0 [ 156.362396][ T9593] inet6_ifa_finish_destroy+0x140/0x1e0 [ 156.367931][ T9593] ipv6_del_addr+0x896/0xb30 [ 156.372496][ T9593] inet6_addr_del.constprop.0+0x282/0x6b0 [ 156.378193][ T9593] addrconf_del_ifaddr+0x11e/0x190 [ 156.383282][ T9593] inet6_ioctl+0x1e5/0x2b0 [ 156.387682][ T9593] sock_do_ioctl+0x118/0x280 [ 156.392272][ T9593] sock_ioctl+0x227/0x6b0 [ 156.396579][ T9593] __x64_sys_ioctl+0x18e/0x210 [ 156.401321][ T9593] do_syscall_64+0xcd/0xf80 [ 156.405812][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.411687][ T9593] [ 156.413995][ T9593] Second to last potentially related work creation: [ 156.420552][ T9593] kasan_save_stack+0x33/0x60 [ 156.425212][ T9593] kasan_record_aux_stack+0xa7/0xc0 [ 156.430399][ T9593] insert_work+0x36/0x230 [ 156.434710][ T9593] __queue_work+0x94f/0x10e0 [ 156.439286][ T9593] __queue_delayed_work+0x35b/0x460 [ 156.444499][ T9593] mod_delayed_work_on+0x198/0x1c0 [ 156.449595][ T9593] addrconf_mod_dad_work+0x8c/0x150 [ 156.454817][ T9593] inet6_addr_add+0x383/0x9b0 [ 156.459477][ T9593] addrconf_add_ifaddr+0x1fc/0x450 [ 156.464572][ T9593] inet6_ioctl+0x103/0x2b0 [ 156.468976][ T9593] sock_do_ioctl+0x118/0x280 [ 156.473554][ T9593] sock_ioctl+0x227/0x6b0 [ 156.477864][ T9593] __x64_sys_ioctl+0x18e/0x210 [ 156.482614][ T9593] do_syscall_64+0xcd/0xf80 [ 156.487108][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.492981][ T9593] [ 156.495286][ T9593] The buggy address belongs to the object at ffff88807b89c800 [ 156.495286][ T9593] which belongs to the cache kmalloc-cg-512 of size 512 [ 156.509579][ T9593] The buggy address is located 108 bytes inside of [ 156.509579][ T9593] freed 512-byte region [ffff88807b89c800, ffff88807b89ca00) [ 156.523355][ T9593] [ 156.525659][ T9593] The buggy address belongs to the physical page: [ 156.532041][ T9593] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b89c [ 156.540780][ T9593] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 156.549252][ T9593] memcg:ffff88805559fe01 [ 156.553467][ T9593] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 156.560989][ T9593] page_type: f5(slab) [ 156.564952][ T9593] raw: 00fff00000000040 ffff88813ff30140 ffffea0000c49900 dead000000000002 [ 156.573517][ T9593] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff88805559fe01 [ 156.582078][ T9593] head: 00fff00000000040 ffff88813ff30140 ffffea0000c49900 dead000000000002 [ 156.590725][ T9593] head: 0000000000000000 0000000080100010 00000000f5000000 ffff88805559fe01 [ 156.599372][ T9593] head: 00fff00000000002 ffffea0001ee2701 00000000ffffffff 00000000ffffffff [ 156.608019][ T9593] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 156.616665][ T9593] page dumped because: kasan: bad access detected [ 156.623050][ T9593] page_owner tracks the page as allocated [ 156.628739][ T9593] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5189, tgid 5189 (udevd), ts 20059180632, free_ts 16612593231 [ 156.649469][ T9593] post_alloc_hook+0x1af/0x220 [ 156.654223][ T9593] get_page_from_freelist+0xd0b/0x31a0 [ 156.659658][ T9593] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 156.665528][ T9593] alloc_pages_mpol+0x1fb/0x550 [ 156.670361][ T9593] new_slab+0x2c3/0x430 [ 156.674504][ T9593] ___slab_alloc+0xe18/0x1c90 [ 156.679165][ T9593] __slab_alloc.constprop.0+0x63/0x110 [ 156.684615][ T9593] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 156.691008][ T9593] kmalloc_reserve+0xef/0x2c0 [ 156.695670][ T9593] __alloc_skb+0x186/0x410 [ 156.700064][ T9593] alloc_skb_with_frags+0xe0/0x860 [ 156.705159][ T9593] sock_alloc_send_pskb+0x7f9/0x980 [ 156.710337][ T9593] unix_dgram_sendmsg+0x3bc/0x1830 [ 156.715429][ T9593] sock_write_iter+0x566/0x610 [ 156.720181][ T9593] vfs_write+0x7d3/0x11d0 [ 156.724495][ T9593] ksys_write+0x1f8/0x250 [ 156.728808][ T9593] page last free pid 1 tgid 1 stack trace: [ 156.734588][ T9593] __free_frozen_pages+0x7df/0x1170 [ 156.739774][ T9593] free_contig_range+0x183/0x4a0 [ 156.744697][ T9593] destroy_args+0xb95/0x14e0 [ 156.749279][ T9593] debug_vm_pgtable+0x2220/0x38d0 [ 156.754291][ T9593] do_one_initcall+0x123/0x680 [ 156.759038][ T9593] kernel_init_freeable+0x5c8/0x920 [ 156.764221][ T9593] kernel_init+0x1c/0x2b0 [ 156.768532][ T9593] ret_from_fork+0x983/0xb10 [ 156.773101][ T9593] ret_from_fork_asm+0x1a/0x30 [ 156.777852][ T9593] [ 156.780154][ T9593] Memory state around the buggy address: [ 156.785758][ T9593] ffff88807b89c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.793803][ T9593] ffff88807b89c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.801843][ T9593] >ffff88807b89c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.809879][ T9593] ^ [ 156.817307][ T9593] ffff88807b89c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.825347][ T9593] ffff88807b89c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.833382][ T9593] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 156.885262][ T5828] Bluetooth: hci3: command tx timeout [ 156.890834][ T9593] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.898014][ T9593] CPU: 0 UID: 0 PID: 9593 Comm: syz.3.1618 Not tainted syzkaller #0 PREEMPT(full) [ 156.907276][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.917312][ T9593] Call Trace: [ 156.920571][ T9593] [ 156.923487][ T9593] dump_stack_lvl+0x3d/0x1f0 [ 156.928070][ T9593] vpanic+0x640/0x6f0 [ 156.932037][ T9593] panic+0xca/0xd0 [ 156.935740][ T9593] ? __pfx_panic+0x10/0x10 [ 156.940143][ T9593] ? inet6_addr_del.constprop.0+0x67a/0x6b0 [ 156.946017][ T9593] ? preempt_schedule_common+0x44/0xc0 [ 156.951466][ T9593] ? preempt_schedule_thunk+0x16/0x30 [ 156.956822][ T9593] check_panic_on_warn+0xab/0xb0 [ 156.961742][ T9593] end_report+0x107/0x160 [ 156.966055][ T9593] kasan_report+0xee/0x110 [ 156.970455][ T9593] ? inet6_addr_del.constprop.0+0x67a/0x6b0 [ 156.976332][ T9593] inet6_addr_del.constprop.0+0x67a/0x6b0 [ 156.982033][ T9593] addrconf_del_ifaddr+0x11e/0x190 [ 156.987129][ T9593] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 156.992746][ T9593] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 156.998622][ T9593] ? lockdep_hardirqs_on+0x7c/0x110 [ 157.003811][ T9593] inet6_ioctl+0x1e5/0x2b0 [ 157.008215][ T9593] ? __pfx_inet6_ioctl+0x10/0x10 [ 157.013148][ T9593] ? tomoyo_path_number_perm+0x18d/0x580 [ 157.018776][ T9593] sock_do_ioctl+0x118/0x280 [ 157.023355][ T9593] ? __pfx_sock_do_ioctl+0x10/0x10 [ 157.028458][ T9593] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 157.033464][ T9593] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 157.040302][ T9593] sock_ioctl+0x227/0x6b0 [ 157.044610][ T9593] ? __pfx_sock_ioctl+0x10/0x10 [ 157.049438][ T9593] ? hook_file_ioctl_common+0x144/0x410 [ 157.054967][ T9593] ? selinux_file_ioctl+0x180/0x270 [ 157.060153][ T9593] ? selinux_file_ioctl+0xb4/0x270 [ 157.065252][ T9593] ? __pfx_sock_ioctl+0x10/0x10 [ 157.070082][ T9593] __x64_sys_ioctl+0x18e/0x210 [ 157.074832][ T9593] do_syscall_64+0xcd/0xf80 [ 157.079324][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.085199][ T9593] RIP: 0033:0x7f164cf8f749 [ 157.089593][ T9593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.109182][ T9593] RSP: 002b:00007f164de64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.117579][ T9593] RAX: ffffffffffffffda RBX: 00007f164d1e5fa0 RCX: 00007f164cf8f749 [ 157.125531][ T9593] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 157.133482][ T9593] RBP: 00007f164d013f91 R08: 0000000000000000 R09: 0000000000000000 [ 157.141431][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.149381][ T9593] R13: 00007f164d1e6038 R14: 00007f164d1e5fa0 R15: 00007ffde15c8288 [ 157.157341][ T9593] [ 157.160599][ T9593] Kernel Offset: disabled [ 157.164896][ T9593] Rebooting in 86400 seconds..