last executing test programs: 3m19.719338795s ago: executing program 0 (id=297): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)="d08949", 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000480), 0x4) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) 3m19.440071733s ago: executing program 0 (id=302): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4a, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m17.402225353s ago: executing program 0 (id=333): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() kcmp(r1, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 3m17.2226881s ago: executing program 0 (id=337): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 3m17.064084288s ago: executing program 0 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffa3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3m16.567977903s ago: executing program 0 (id=345): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e0000000109022400"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 3m16.379995551s ago: executing program 32 (id=345): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e0000000109022400"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 43.383523004s ago: executing program 4 (id=3007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 43.234552102s ago: executing program 4 (id=3009): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x3c}, 0x1, 0x620b, 0x0, 0x20008000}, 0x50) 43.129105925s ago: executing program 4 (id=3012): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 42.513719146s ago: executing program 4 (id=3019): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 42.422619453s ago: executing program 4 (id=3023): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) 41.968186284s ago: executing program 4 (id=3032): r0 = io_uring_setup(0x6000, &(0x7f0000000080)={0x0, 0x6dcc, 0x0, 0x0, 0x116}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1) chdir(0x0) close_range(r0, r0, 0x0) 41.841061353s ago: executing program 33 (id=3032): r0 = io_uring_setup(0x6000, &(0x7f0000000080)={0x0, 0x6dcc, 0x0, 0x0, 0x116}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1) chdir(0x0) close_range(r0, r0, 0x0) 2.438367037s ago: executing program 5 (id=3738): syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 2.287327615s ago: executing program 5 (id=3744): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 2.208367196s ago: executing program 5 (id=3746): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) read(r1, &(0x7f00000008c0)=""/145, 0x91) close_range(r0, r0, 0x0) 1.455103625s ago: executing program 3 (id=3751): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) 1.419776574s ago: executing program 3 (id=3752): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.359208436s ago: executing program 3 (id=3753): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x9, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xa6, '\x00', 0x0, 0x3, 0xc2ea, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24044014}, 0x40008090) 1.358499831s ago: executing program 3 (id=3754): r0 = userfaultfd(0x801) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6a0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 1.287921121s ago: executing program 5 (id=3755): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x10800, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) unshare(0x22020400) 1.224063141s ago: executing program 5 (id=3756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000118, 0x0, 0x81}]}) 1.103606037s ago: executing program 1 (id=3758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 1.099986414s ago: executing program 1 (id=3759): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x51, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.095676187s ago: executing program 3 (id=3760): r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x2) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1.035242599s ago: executing program 6 (id=3761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x20000400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.024144994s ago: executing program 5 (id=3762): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000020bc20005500000000000109022d00010000600209040000050301010009210000360122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "df57060c"}]}}, 0x0}, 0x0) 841.467642ms ago: executing program 3 (id=3764): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) 796.788192ms ago: executing program 6 (id=3765): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) unshare(0x22020600) pselect6(0x9a, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 729.798025ms ago: executing program 1 (id=3766): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x3) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x1) 717.135553ms ago: executing program 2 (id=3767): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x25, 0x8}, 0x8, 0x2, 0x9, 0x0, 0x9, 0x1, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 643.536263ms ago: executing program 6 (id=3768): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000380)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r0, 0x0) 629.209461ms ago: executing program 1 (id=3769): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) 617.322973ms ago: executing program 2 (id=3770): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000800)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) 495.815642ms ago: executing program 2 (id=3771): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 491.215854ms ago: executing program 6 (id=3772): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 408.485217ms ago: executing program 6 (id=3773): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r0, 0x80000, 0x4) 292.836191ms ago: executing program 2 (id=3774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r2], 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r0, &(0x7f0000000080), &(0x7f0000000a40)=@udp=r2}, 0x20) 149.282454ms ago: executing program 1 (id=3775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000800)=@rc={0x1f, @any, 0x8}, 0x80, 0x0}}, {{&(0x7f0000002540)=@nfc_llcp={0x27, 0x0, 0xfffffffb, 0x6, 0x6, 0x4, "28839e3f0d065c97361e42d944b1661f81be1063c82d2dab2db7606161f1ab5e58037806c0ca1099295fcf6a9301135139f80cf8f8d42084a8d4fd41e5a157", 0x1a}, 0x80, 0x0}}], 0x2, 0x20048894) 147.619006ms ago: executing program 2 (id=3776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 105.158746ms ago: executing program 1 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000424bd7000fbdbdf2502000800080061000400000008000a01"], 0x24}, 0x1, 0x0, 0x0, 0x64008044}, 0x4000110) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 1.099892ms ago: executing program 2 (id=3778): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 6 (id=3779): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_connect$uac3(0x5, 0x88, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x3, 0x1, 0xb, 0xa0, 0x61, {0x8, 0xb, 0x1, 0x0, 0x1, 0x22, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa, 0xffffffff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x9, 0x4, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x1, 0x8, {0xa, 0x25, 0x25, 0x1b, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x1, 0x1, {0xa, 0x25, 0x25, 0x73000000, 0x1, 0x328b}}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11722 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9220b9c819 code=0x7ffc0000 [ 212.651828][ T29] audit: type=1326 audit(1775691685.250:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11722 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9220b9c819 code=0x7ffc0000 [ 212.685767][T11746] netlink: 'syz.1.2518': attribute type 10 has an invalid length. [ 212.713767][T11746] bridge0: entered promiscuous mode [ 212.727748][ T29] audit: type=1326 audit(1775691685.250:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11722 comm="syz.1.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9220b9c819 code=0x7ffc0000 [ 212.742756][T11746] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 212.794742][T11751] input: syz1 as /devices/virtual/input/input34 [ 212.843062][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'. [ 212.852267][T11746] bridge_slave_1: left allmulticast mode [ 212.857943][T11746] bridge_slave_1: left promiscuous mode [ 212.889383][T11746] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.927838][T11746] bridge_slave_0: left promiscuous mode [ 212.934547][T11746] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.959009][T11746] bond0: (slave bridge0): Releasing backup interface [ 212.973582][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 212.993553][T11746] bridge0 (unregistering): left promiscuous mode [ 213.040192][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2526'. [ 213.111806][ T5889] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 213.273271][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 213.293536][ T5889] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 213.317335][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.332712][ T5889] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 213.350601][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.371240][ T5889] usb 3-1: config 0 descriptor?? [ 213.376430][ T5986] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 213.507100][T11787] tipc: Started in network mode [ 213.512338][T11787] tipc: Node identity ac14140f, cluster identity 4711 [ 213.530547][T11787] tipc: New replicast peer: 255.255.255.255 [ 213.541814][ T5986] usb 6-1: Using ep0 maxpacket: 16 [ 213.547634][T11787] tipc: Enabled bearer , priority 7 [ 213.558909][ T5986] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 213.581387][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.581895][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2537'. [ 213.604164][ T5986] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 213.616326][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.621848][T11788] tipc: Disabling bearer [ 213.631413][ T5986] usb 6-1: Product: syz [ 213.645870][ T5986] usb 6-1: Manufacturer: syz [ 213.650648][ T5986] usb 6-1: SerialNumber: syz [ 213.665219][ T5986] usb 6-1: config 0 descriptor?? [ 213.676864][ T5986] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 213.686838][ T5986] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 213.904041][T11800] Bluetooth: hci5: Frame reassembly failed (-84) [ 214.035743][ T5889] greenasia 0003:0E8F:0012.0028: unknown main item tag 0x0 [ 214.043718][ T5889] greenasia 0003:0E8F:0012.0028: unknown main item tag 0x0 [ 214.051062][ T5889] greenasia 0003:0E8F:0012.0028: unknown main item tag 0x0 [ 214.077108][ T5889] greenasia 0003:0E8F:0012.0028: unknown main item tag 0x0 [ 214.085150][ T5889] greenasia 0003:0E8F:0012.0028: unknown main item tag 0x0 [ 214.099299][T11809] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2546'. [ 214.101822][ T5889] greenasia 0003:0E8F:0012.0028: unknown main item tag 0x0 [ 214.121772][ T5889] greenasia 0003:0E8F:0012.0028: unknown main item tag 0x0 [ 214.131582][ T5889] greenasia 0003:0E8F:0012.0028: unknown main item tag 0x0 [ 214.138950][ T5889] greenasia 0003:0E8F:0012.0028: unknown main item tag 0x0 [ 214.147328][ T5889] greenasia 0003:0E8F:0012.0028: unknown main item tag 0x0 [ 214.163527][ T5889] greenasia 0003:0E8F:0012.0028: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 214.176204][ T5889] greenasia 0003:0E8F:0012.0028: no inputs found [ 214.285336][ T5986] em28xx 6-1:0.0: chip ID is em2800 [ 214.331107][ T5889] usb 3-1: USB disconnect, device number 28 [ 214.485884][ T5986] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 214.497036][ T5986] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 214.511807][ T5986] em28xx 6-1:0.0: No AC97 audio processor [ 214.543305][ T5986] usb 6-1: USB disconnect, device number 33 [ 214.550362][ T5986] em28xx 6-1:0.0: Disconnecting em28xx [ 214.583948][ T5986] em28xx 6-1:0.0: Freeing device [ 215.381164][T11875] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2577'. [ 215.605249][T11885] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 215.796502][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 215.796519][ T29] audit: type=1400 audit(1775691944.703:564): avc: denied { listen } for pid=11895 comm="syz.2.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 215.826050][ T29] audit: type=1400 audit(1775691944.723:565): avc: denied { accept } for pid=11895 comm="syz.2.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 215.962119][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 215.970163][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 215.979529][ T5807] Bluetooth: hci5: command 0x1003 tx timeout [ 216.045533][ T29] audit: type=1400 audit(1775691944.953:566): avc: denied { connect } for pid=11914 comm="syz.3.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 216.146842][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 216.157372][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.165658][ T10] usb 6-1: Product: syz [ 216.170059][ T10] usb 6-1: Manufacturer: syz [ 216.178985][ T10] usb 6-1: SerialNumber: syz [ 216.441408][ T10] rtl8150 6-1:1.0: couldn't reset the device [ 216.451229][ T10] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 216.474295][ T10] usb 6-1: USB disconnect, device number 34 [ 216.955400][ T29] audit: type=1400 audit(1775691945.863:567): avc: denied { bind } for pid=11957 comm="syz.2.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 217.029086][T11962] netlink: 'syz.2.2615': attribute type 1 has an invalid length. [ 217.037113][T11962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2615'. [ 217.351780][ T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 217.479858][ T792] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 217.521201][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.535191][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 217.543033][ T10] usb 4-1: can't read configurations, error -71 [ 217.634056][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 217.643596][ T792] usb 3-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 217.671890][ T792] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.678547][ T792] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 217.689039][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.720520][ T792] usb 3-1: config 0 descriptor?? [ 217.810400][ T29] audit: type=1400 audit(1775691946.713:568): avc: denied { execute } for pid=12002 comm="syz.4.2634" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.102115][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 218.124523][T12018] tipc: Started in network mode [ 218.129510][T12018] tipc: Node identity ac14140f, cluster identity 4711 [ 218.136956][T12018] tipc: New replicast peer: 255.255.255.255 [ 218.144326][T12018] tipc: Enabled bearer , priority 7 [ 218.153618][ T792] aureal 0003:0755:2626.0029: hidraw0: USB HID v0.0b Device [HID 0755:2626] on usb-dummy_hcd.2-1/input0 [ 218.277332][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 218.325147][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 218.342012][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 218.353818][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 218.375366][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 218.390524][ T5823] usb 3-1: USB disconnect, device number 29 [ 218.403720][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.415929][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 218.444185][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 218.458709][ T9] usb 5-1: Product: syz [ 218.463571][ T9] usb 5-1: Manufacturer: syz [ 218.468262][ T9] usb 5-1: SerialNumber: syz [ 218.482391][ T9] usb 5-1: config 0 descriptor?? [ 218.493499][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 218.505620][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 218.759802][T12007] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 218.759965][ T792] usb 5-1: USB disconnect, device number 31 [ 218.768402][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 218.796786][ T792] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 218.885701][T12036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2648'. [ 218.943957][T12038] 9p: Bad value for 'wfdno' [ 219.221833][ T5986] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 219.263470][ T5823] tipc: Node number set to 2886997007 [ 219.269885][T12055] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2657'. [ 219.393408][ T5986] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.401576][ T5986] usb 6-1: config 0 has no interface number 0 [ 219.407799][ T5986] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.418987][ T5986] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.437536][ T5986] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.450715][ T5986] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 219.460619][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.476815][ T5986] usb 6-1: config 0 descriptor?? [ 219.790125][ T29] audit: type=1400 audit(1775691948.693:569): avc: denied { ioctl } for pid=12076 comm="syz.3.2667" path="mnt:[4026532810]" dev="nsfs" ino=4026532810 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 219.906324][ T29] audit: type=1800 audit(1775691948.813:570): pid=12079 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2668" name="file0" dev="tmpfs" ino=2768 res=0 errno=0 [ 220.087085][ T29] audit: type=1400 audit(1775691948.993:571): avc: denied { getopt } for pid=12087 comm="syz.2.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.119991][ T5986] input: HID 28bd:0042 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.002A/input/input35 [ 220.232243][ T29] audit: type=1400 audit(1775691949.133:572): avc: denied { mount } for pid=12089 comm="syz.2.2673" name="/" dev="hugetlbfs" ino=35490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 220.271164][ T5986] uclogic 0003:28BD:0042.002A: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 220.322289][ T5823] usb 6-1: USB disconnect, device number 35 [ 220.402835][T12093] fido_id[12093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 220.664690][T12106] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2680'. [ 220.695573][T12109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2682'. [ 220.706039][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2682'. [ 220.857193][ T29] audit: type=1400 audit(1775691949.763:573): avc: denied { create } for pid=12121 comm="syz.4.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.900181][ T29] audit: type=1400 audit(1775691949.793:574): avc: denied { connect } for pid=12121 comm="syz.4.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 221.036478][T12134] loop4: detected capacity change from 0 to 7 [ 221.044979][T12135] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 221.068068][T12134] buffer_io_error: 42 callbacks suppressed [ 221.068086][T12134] Buffer I/O error on dev loop4, logical block 0, async page read [ 221.082829][T12134] Buffer I/O error on dev loop4, logical block 0, async page read [ 221.089785][T12137] usb usb9: usbfs: process 12137 (syz.2.2695) did not claim interface 48 before use [ 221.090719][T12134] Buffer I/O error on dev loop4, logical block 0, async page read [ 221.109545][T12134] Buffer I/O error on dev loop4, logical block 0, async page read [ 221.117520][T12134] Buffer I/O error on dev loop4, logical block 0, async page read [ 221.126354][T12134] Buffer I/O error on dev loop4, logical block 0, async page read [ 221.134315][T12134] Buffer I/O error on dev loop4, logical block 0, async page read [ 221.142534][T12134] ldm_validate_partition_table(): Disk read failed. [ 221.149154][T12134] Buffer I/O error on dev loop4, logical block 0, async page read [ 221.157267][T12134] Buffer I/O error on dev loop4, logical block 0, async page read [ 221.165886][T12134] Buffer I/O error on dev loop4, logical block 0, async page read [ 221.173865][T12134] Dev loop4: unable to read RDB block 0 [ 221.179592][T12134] loop4: unable to read partition table [ 221.185471][T12134] loop4: partition table beyond EOD, truncated [ 221.191651][T12134] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 221.627538][ T29] audit: type=1400 audit(1775691950.533:575): avc: denied { mount } for pid=12170 comm="syz.2.2710" name="/" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 221.650574][ T29] audit: type=1400 audit(1775691950.533:576): avc: denied { search } for pid=12170 comm="syz.2.2710" name="/" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.688619][ T29] audit: type=1400 audit(1775691950.533:577): avc: denied { search } for pid=12170 comm="syz.2.2710" name="/" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.716451][ T29] audit: type=1400 audit(1775691950.533:578): avc: denied { search } for pid=12170 comm="syz.2.2710" name="/" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.739104][ T29] audit: type=1400 audit(1775691950.533:579): avc: denied { add_name } for pid=12170 comm="syz.2.2710" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 221.739312][ T29] audit: type=1400 audit(1775691950.533:580): avc: denied { create } for pid=12170 comm="syz.2.2710" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 221.931770][ T5986] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 222.183753][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 222.195376][ T5986] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 222.204447][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.218182][ T5986] usb 3-1: config 0 descriptor?? [ 222.223848][T12173] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.321805][ T792] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 222.405072][T12189] 9p: Unknown uid 00000000004294967295 [ 222.493430][ T792] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 222.494910][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 222.513712][ T792] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 222.526112][ T792] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 222.551482][ T792] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 222.561698][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.569740][ T792] usb 4-1: Product: syz [ 222.574365][ T792] usb 4-1: Manufacturer: syz [ 222.579003][ T792] usb 4-1: SerialNumber: syz [ 222.589470][ T792] usb 4-1: config 0 descriptor?? [ 222.600791][T12187] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 222.608497][T12187] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 222.618966][ T792] usb 4-1: ucan: probing device on interface #0 [ 222.654960][ T5986] hid_parser_main: 66 callbacks suppressed [ 222.654984][ T5986] logitech-djreceiver 0003:046D:C71F.002B: unknown main item tag 0x0 [ 222.670369][ T5986] logitech-djreceiver 0003:046D:C71F.002B: unknown main item tag 0x0 [ 222.680446][ T5986] logitech-djreceiver 0003:046D:C71F.002B: unknown main item tag 0x0 [ 222.689361][ T5986] logitech-djreceiver 0003:046D:C71F.002B: unknown main item tag 0x0 [ 222.699918][ T5986] logitech-djreceiver 0003:046D:C71F.002B: unknown main item tag 0x0 [ 222.708718][ T5986] logitech-djreceiver 0003:046D:C71F.002B: unknown main item tag 0x0 [ 222.716998][ T5986] logitech-djreceiver 0003:046D:C71F.002B: unknown main item tag 0x0 [ 222.725446][ T5986] logitech-djreceiver 0003:046D:C71F.002B: unknown main item tag 0x0 [ 222.733673][ T5986] logitech-djreceiver 0003:046D:C71F.002B: unknown main item tag 0x0 [ 222.742950][ T5986] logitech-djreceiver 0003:046D:C71F.002B: unknown main item tag 0x0 [ 222.751548][ T5986] logitech-djreceiver 0003:046D:C71F.002B: unexpected long global item [ 222.760640][ T5986] logitech-djreceiver 0003:046D:C71F.002B: logi_dj_probe: parse failed [ 222.769039][ T5986] logitech-djreceiver 0003:046D:C71F.002B: probe with driver logitech-djreceiver failed with error -22 [ 222.873636][ T5986] usb 3-1: USB disconnect, device number 30 [ 222.961843][ T5823] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 223.071884][ T5807] Bluetooth: hci5: command 0x1003 tx timeout [ 223.079397][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 223.142602][ T5823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 223.156148][ T5823] usb 6-1: config 119 has an invalid interface number: 120 but max is 0 [ 223.166611][ T5823] usb 6-1: config 119 has no interface number 0 [ 223.173021][ T5823] usb 6-1: config 119 interface 120 has no altsetting 0 [ 223.183919][ T5823] usb 6-1: New USB device found, idVendor=0408, idProduct=4035, bcdDevice=65.3b [ 223.193409][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.201415][ T5823] usb 6-1: Product: syz [ 223.206494][ T5823] usb 6-1: Manufacturer: syz [ 223.211526][ T5823] usb 6-1: SerialNumber: syz [ 223.227912][ T792] ucan 4-1:0.0 can0: registered device [ 223.429705][ T5823] uvcvideo 6-1:119.120: Found UVC 0.00 device syz (0408:4035) [ 223.431779][ T792] ucan 4-1:0.0 can0: firmware string: unknown [ 223.437951][ T5823] uvcvideo 6-1:119.120: Forcing UVC version to 1.0a [ 223.452357][ T5823] uvcvideo 6-1:119.120: No valid video chain found. [ 223.479259][ T5823] usb 6-1: USB disconnect, device number 36 [ 223.485448][ T792] usb 4-1: USB disconnect, device number 37 [ 223.751946][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 223.904137][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.916112][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.925963][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 223.935863][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.957370][ T5986] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 223.958175][ T10] usb 3-1: config 0 descriptor?? [ 224.115424][ T5986] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 224.141794][ T5986] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.158149][ T5986] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 224.175314][ T5986] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.185897][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 224.194429][ T5986] usb 5-1: SerialNumber: syz [ 224.364954][T12269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2756'. [ 224.419942][ T10] playstation 0003:054C:0DF2.002C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 224.463921][ T5986] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 224.479905][ T5986] usb 5-1: USB disconnect, device number 32 [ 224.612976][ T10] playstation 0003:054C:0DF2.002C: Invalid byte count transferred, expected 20 got 0 [ 224.631282][ T10] playstation 0003:054C:0DF2.002C: Failed to retrieve DualSense pairing info: -22 [ 224.641598][ T10] playstation 0003:054C:0DF2.002C: Failed to get MAC address from DualSense [ 224.653662][ T10] playstation 0003:054C:0DF2.002C: Failed to create dualsense. [ 224.657789][T12279] overlayfs: failed to clone upperpath [ 224.663174][ T10] playstation 0003:054C:0DF2.002C: probe with driver playstation failed with error -22 [ 224.681823][ T5823] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 224.734281][ T29] audit: type=1400 audit(1775691953.643:581): avc: denied { create } for pid=12282 comm="syz.1.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 224.755225][ T29] audit: type=1400 audit(1775691953.663:582): avc: denied { sys_admin } for pid=12282 comm="syz.1.2762" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 224.783733][ T5889] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 224.819363][ T10] usb 3-1: USB disconnect, device number 31 [ 224.843106][ T5823] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.855169][ T5823] usb 6-1: config 0 has no interface number 0 [ 224.864311][ T5823] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 224.873897][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.881960][ T5823] usb 6-1: Product: syz [ 224.886240][ T5823] usb 6-1: Manufacturer: syz [ 224.890893][ T5823] usb 6-1: SerialNumber: syz [ 224.898647][ T5823] usb 6-1: config 0 descriptor?? [ 224.941951][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 224.951366][ T5889] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 224.961601][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.982221][ T5889] pvrusb2: Hardware description: Terratec Grabster AV400 [ 225.002442][ T5889] pvrusb2: ********** [ 225.006471][ T5889] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 225.031074][ T5889] pvrusb2: Important functionality might not be entirely working. [ 225.040513][ T5889] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 225.052911][ T5889] pvrusb2: ********** [ 225.091055][T12298] bridge0: entered promiscuous mode [ 225.099635][T12298] bridge0: port 3(vlan0) entered blocking state [ 225.112242][T12298] bridge0: port 3(vlan0) entered disabled state [ 225.112778][ T5823] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 225.129250][T12298] vlan0: entered allmulticast mode [ 225.131089][ T5823] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.136261][T12298] bridge0: entered allmulticast mode [ 225.145558][ T5823] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 225.162338][T12298] vlan0: left allmulticast mode [ 225.168175][T12298] bridge0: left allmulticast mode [ 225.168224][ T5823] usb 6-1: media controller created [ 225.185031][ T2336] pvrusb2: Invalid write control endpoint [ 225.196615][T12298] bridge0: left promiscuous mode [ 225.198664][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.274964][ T2336] pvrusb2: Invalid write control endpoint [ 225.282103][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 225.292204][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 225.299766][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 225.310465][ T2336] pvrusb2: Device being rendered inoperable [ 225.316654][ T2336] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 225.320145][ T5823] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 225.324647][ T2336] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 225.376906][ T2336] pvrusb2: Attached sub-driver cx25840 [ 225.383747][ T5823] usb 6-1: USB disconnect, device number 37 [ 225.405862][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 225.433299][ T10] usb 4-1: USB disconnect, device number 38 [ 225.436739][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 225.585527][T12313] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 225.599833][T12313] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 226.062998][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2785'. [ 226.798660][T12363] netlink: 'syz.5.2793': attribute type 29 has an invalid length. [ 226.843378][T12363] netlink: 'syz.5.2793': attribute type 29 has an invalid length. [ 226.872457][T12363] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2793'. [ 226.885754][T12363] unsupported nla_type 58 [ 227.216660][T12387] raw_sendmsg: syz.1.2802 forgot to set AF_INET. Fix it! [ 227.302023][ T5889] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 227.304201][T12393] sctp: [Deprecated]: syz.2.2805 (pid 12393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.304201][T12393] Use struct sctp_sack_info instead [ 227.472981][ T5889] usb 6-1: config 9 interface 0 has no altsetting 0 [ 227.481484][ T5889] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 227.492903][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.500964][ T5889] usb 6-1: Product: syz [ 227.505635][ T5889] usb 6-1: Manufacturer: syz [ 227.510254][ T5889] usb 6-1: SerialNumber: syz [ 228.134371][ T5889] snd-usb-caiaq 6-1:9.0: invalid EPs [ 228.141770][ T5889] usb 6-1: unable to init card! (ret=-22) [ 228.147858][ T5889] snd-usb-caiaq 6-1:9.0: probe with driver snd-usb-caiaq failed with error -22 [ 228.264017][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 228.361506][ T5986] usb 6-1: USB disconnect, device number 38 [ 229.037827][T12452] geneve2: entered promiscuous mode [ 229.132863][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 229.240527][ T29] audit: type=1400 audit(1775691958.143:583): avc: denied { mount } for pid=12457 comm="syz.4.2832" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 229.307172][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.323749][ T792] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 229.328500][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.348727][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 229.360732][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 229.379210][ T10] usb 3-1: Manufacturer: syz [ 229.400601][ T10] usb 3-1: config 0 descriptor?? [ 229.498491][ T792] usb 6-1: Using ep0 maxpacket: 32 [ 229.508795][ T792] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.518923][ T792] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 229.539016][ T792] usb 6-1: config 0 interface 0 has no altsetting 0 [ 229.551259][ T792] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 229.564257][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.576344][ T792] usb 6-1: Product: syz [ 229.579331][ T29] audit: type=1400 audit(1775691958.483:584): avc: denied { write } for pid=12477 comm="syz.3.2841" name="mcfilter6" dev="proc" ino=4026533112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 229.583191][ T792] usb 6-1: Manufacturer: syz [ 229.612874][ T792] usb 6-1: SerialNumber: syz [ 229.620586][ T792] usb 6-1: config 0 descriptor?? [ 229.692463][ T5882] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 229.842361][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 229.849169][ T5882] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.861571][ T5882] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.877163][ T5882] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 229.886610][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.035967][ T792] gs_usb 6-1:0.0: Configuring for 236 interfaces [ 230.317192][ T5882] mcp2221 0003:04D8:00DD.002E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 230.443343][ T792] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 230.455799][ T792] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 230.465173][ T10] uclogic 0003:256C:006D.002D: failed retrieving string descriptor #100: -71 [ 230.491826][ T10] uclogic 0003:256C:006D.002D: failed retrieving pen parameters: -71 [ 230.499960][ T10] uclogic 0003:256C:006D.002D: failed probing pen v1 parameters: -71 [ 230.521776][ T10] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 230.529373][ T10] uclogic 0003:256C:006D.002D: probe with driver uclogic failed with error -71 [ 230.533942][ T792] usb 5-1: USB disconnect, device number 33 [ 230.568552][ T10] usb 3-1: USB disconnect, device number 32 [ 230.678988][ T5882] usb 6-1: USB disconnect, device number 39 [ 231.070154][ T29] audit: type=1400 audit(1775691959.973:585): avc: denied { ioctl } for pid=12542 comm="syz.2.2851" path="socket:[36689]" dev="sockfs" ino=36689 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 231.296264][T12556] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2857'. [ 231.305929][T12556] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2857'. [ 231.340284][ T29] audit: type=1400 audit(1775691960.243:586): avc: denied { mounton } for pid=12557 comm="syz.5.2858" path="/375/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 231.488550][T12564] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2861'. [ 231.518589][T12564] openvswitch: netlink: Duplicate key (type 2). [ 231.591330][T12571] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2864'. [ 231.816673][ T29] audit: type=1326 audit(1775691960.723:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.3.2872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23fbf9c819 code=0x0 [ 231.889630][ T29] audit: type=1400 audit(1775691960.793:588): avc: denied { remount } for pid=12590 comm="syz.5.2873" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 232.139469][T12608] netlink: 49 bytes leftover after parsing attributes in process `syz.2.2880'. [ 232.148643][T12608] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2880'. [ 232.157816][T12608] netlink: 49 bytes leftover after parsing attributes in process `syz.2.2880'. [ 232.486264][T12621] could not open pipe file descriptor [ 232.935787][ T29] audit: type=1400 audit(1775691961.843:589): avc: denied { ioctl } for pid=12642 comm="syz.4.2895" path="socket:[37589]" dev="sockfs" ino=37589 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 232.984264][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 233.144968][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 233.156421][ T10] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 233.166046][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.174179][ T10] usb 6-1: Product: syz [ 233.178442][ T10] usb 6-1: Manufacturer: syz [ 233.184245][ T10] usb 6-1: SerialNumber: syz [ 233.261791][ T5882] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 233.414167][ T5882] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 233.422879][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.433942][ T5882] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 233.443275][ T5882] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 233.452124][ T5882] usb 4-1: Manufacturer: syz [ 233.458461][ T5882] usb 4-1: config 0 descriptor?? [ 233.511774][ T5882] rc_core: IR keymap rc-hauppauge not found [ 233.518655][ T5882] Registered IR keymap rc-empty [ 233.527832][ T5882] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 233.540647][ T5882] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 233.611834][ T5823] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 233.773750][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.784855][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.794640][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.809010][ T5823] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.820142][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.841795][ T5823] usb 3-1: config 0 descriptor?? [ 233.874156][ C0] igorplugusb 4-1:0.0: receive overflow invalid: 39 [ 234.081988][ T792] usb 4-1: USB disconnect, device number 39 [ 234.210219][ T10] usb 6-1: us122l: couldn't allocate write buffer [ 234.219340][ T10] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 234.234255][ T10] usb 6-1: USB disconnect, device number 40 [ 234.263011][ T5823] plantronics 0003:047F:FFFF.002F: reserved main item tag 0xd [ 234.295228][ T5823] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 234.547817][ T792] usb 3-1: USB disconnect, device number 33 [ 234.741781][ T10] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 234.903235][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.912349][ T10] usb 5-1: config 0 has no interface number 0 [ 234.918762][ T10] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.956373][ T10] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.967463][ T10] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.980817][ T10] usb 5-1: config 0 interface 1 has no altsetting 0 [ 235.007878][ T10] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 235.022173][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.042036][ T10] usb 5-1: config 0 descriptor?? [ 235.142665][T12686] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 235.317296][T12693] pim6reg1: entered promiscuous mode [ 235.324068][T12693] pim6reg1: entered allmulticast mode [ 235.409480][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 235.419984][T12700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2919'. [ 235.449693][T12700] geneve2: entered promiscuous mode [ 235.455863][T12700] geneve2: entered allmulticast mode [ 235.466606][ T10] hid (null): invalid report_count 252767622 [ 235.641411][ T29] audit: type=1400 audit(1775691964.543:590): avc: denied { map } for pid=12712 comm="syz.3.2925" path="socket:[37775]" dev="sockfs" ino=37775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.676281][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'. [ 235.681043][ T10] input: HID 145f:0212 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.0030/input/input38 [ 235.734062][ T10] input: HID 145f:0212 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.0030/input/input39 [ 235.861793][ T10] uclogic 0003:145F:0212.0030: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.4-1/input1 [ 235.920389][ T10] usb 5-1: USB disconnect, device number 34 [ 235.926235][T12724] team_slave_0: entered promiscuous mode [ 235.932795][T12724] team_slave_1: entered promiscuous mode [ 235.964993][T12726] fido_id[12726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 235.971086][T12724] team0: Device macsec0 is already an upper device of the team interface [ 236.018726][T12724] team_slave_0: left promiscuous mode [ 236.024203][T12724] team_slave_1: left promiscuous mode [ 236.131775][ T5882] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 236.303006][ T5882] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.350885][ T5882] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 236.367875][ T5882] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.379076][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.387393][ T5882] usb 6-1: Product: syz [ 236.391640][ T5882] usb 6-1: Manufacturer: syz [ 236.396609][ T5882] usb 6-1: SerialNumber: syz [ 236.417409][ T5882] cdc_mbim 6-1:1.0: skipping garbage [ 236.612914][T12755] __nla_validate_parse: 1 callbacks suppressed [ 236.612932][T12755] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2943'. [ 236.626110][T12725] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 237.111755][ T792] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 237.247996][T12725] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 237.256074][ T5882] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 237.263965][ T5882] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 237.274103][ T792] usb 4-1: Using ep0 maxpacket: 8 [ 237.280828][ T792] usb 4-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 237.300570][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.310672][ T792] usb 4-1: config 0 descriptor?? [ 237.320840][ T792] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 237.332305][ T792] ftdi_sio ttyUSB0: unknown device type: 0x256 [ 237.457531][ T5882] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 237.465473][ T5882] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 237.485317][ T5882] wwan wwan0: port wwan0mbim0 attached [ 237.498618][ T5882] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, d6:a8:d0:26:a9:5a [ 237.516560][ T5882] usb 6-1: USB disconnect, device number 41 [ 237.562739][ T5882] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 237.635178][ T5882] wwan wwan0: port wwan0mbim0 disconnected [ 238.229832][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2965'. [ 238.367169][T12844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2970'. [ 238.380457][T12844] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2970'. [ 238.402591][T12844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2970'. [ 238.563763][ T29] audit: type=1400 audit(1775691967.473:591): avc: denied { mount } for pid=12856 comm="syz.4.2975" name="/" dev="autofs" ino=39094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 238.600847][ T29] audit: type=1400 audit(1775691967.473:592): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 238.769269][ T29] audit: type=1400 audit(1775691967.683:593): avc: denied { getopt } for pid=12867 comm="syz.1.2981" lport=44683 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 238.793326][T12871] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 238.857379][ T29] audit: type=1400 audit(1775691967.763:594): avc: denied { name_bind } for pid=12874 comm="syz.1.2985" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 239.036862][ T29] audit: type=1326 audit(1775691967.943:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.2.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a979c819 code=0x7ffc0000 [ 239.076211][ T29] audit: type=1326 audit(1775691967.943:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.2.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a979c819 code=0x7ffc0000 [ 239.126362][ T29] audit: type=1326 audit(1775691967.943:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.2.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a979c819 code=0x7ffc0000 [ 239.151064][ T29] audit: type=1326 audit(1775691967.943:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.2.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a979c819 code=0x7ffc0000 [ 239.235345][ T29] audit: type=1326 audit(1775691967.943:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.2.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9a979c819 code=0x7ffc0000 [ 239.898780][ T5882] usb 4-1: USB disconnect, device number 40 [ 239.920732][ T5882] ftdi_sio 4-1:0.0: device disconnected [ 239.932995][T12911] syz.1.2999 (12911) used greatest stack depth: 19672 bytes left [ 240.001750][ T10] IPVS: starting estimator thread 0... [ 240.092430][T12920] IPVS: using max 44 ests per chain, 105600 per kthread [ 240.183442][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3007'. [ 240.211969][T12928] dummy0: left promiscuous mode [ 240.219391][T12928] macvlan2: left promiscuous mode [ 240.226794][T12928] macvlan2: left allmulticast mode [ 240.711802][ T5889] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 240.905148][ T5889] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.925843][ T5889] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.953295][ T5889] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.973680][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.990541][ T5889] usb 6-1: SerialNumber: syz [ 241.105453][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 241.105470][ T29] audit: type=1400 audit(1775691970.013:617): avc: denied { getopt } for pid=12962 comm="syz.2.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.223003][T12943] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 241.229571][T12943] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 241.253966][T12943] vhci_hcd vhci_hcd.0: Device attached [ 241.265718][T12975] netlink: 'syz.1.3027': attribute type 13 has an invalid length. [ 241.271134][ T29] audit: type=1400 audit(1775691970.173:618): avc: denied { mount } for pid=12969 comm="syz.2.3025" name="/" dev="autofs" ino=38739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 241.302320][T12970] vhci_hcd: connection closed [ 241.304838][ T64] vhci_hcd vhci_hcd.5: stop threads [ 241.307699][ T5889] usb 6-1: 0:2 : does not exist [ 241.309576][ T64] vhci_hcd vhci_hcd.5: release socket [ 241.338403][ T64] vhci_hcd vhci_hcd.5: disconnect device [ 241.345253][ T29] audit: type=1400 audit(1775691970.203:619): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 241.375715][ T5889] usb 6-1: USB disconnect, device number 42 [ 241.512628][ T29] audit: type=1400 audit(1775691970.423:620): avc: denied { mounton } for pid=12980 comm="syz.3.3029" path="/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 241.512765][T12981] overlayfs: failed to clone lowerpath [ 241.797638][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.811464][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'. [ 241.820792][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.827943][T12998] netlink: 'syz.2.3037': attribute type 30 has an invalid length. [ 241.837321][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.846120][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.853896][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.863401][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.874645][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.882346][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.886399][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'. [ 241.891336][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.901897][T12998] netlink: 'syz.2.3037': attribute type 30 has an invalid length. [ 242.098303][T13008] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3041'. [ 242.134963][T12996] chnl_net:caif_netlink_parms(): no params data found [ 242.161571][ T5882] IPVS: starting estimator thread 0... [ 242.271894][T13014] IPVS: using max 46 ests per chain, 110400 per kthread [ 242.381759][ T29] audit: type=1400 audit(1775691971.273:621): avc: denied { setopt } for pid=13027 comm="syz.3.3048" lport=47889 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 242.403146][T12996] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.413793][T12996] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.428024][T12996] bridge_slave_0: entered allmulticast mode [ 242.443346][T12996] bridge_slave_0: entered promiscuous mode [ 242.464670][T12996] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.471978][T12996] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.479976][T12996] bridge_slave_1: entered allmulticast mode [ 242.489352][T12996] bridge_slave_1: entered promiscuous mode [ 242.519508][T12996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.536117][T12996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.586898][T12996] team0: Port device team_slave_0 added [ 242.594812][T12996] team0: Port device team_slave_1 added [ 242.648370][T12996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.661291][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.719829][T12996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.750083][T12996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.781436][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.822232][T12996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.900443][T12996] hsr_slave_0: entered promiscuous mode [ 242.923631][T12996] hsr_slave_1: entered promiscuous mode [ 242.929868][T12996] debugfs: 'hsr0' already exists in 'hsr' [ 242.941723][T12996] Cannot create hsr debugfs directory [ 242.981750][ T5986] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 243.056932][ T29] audit: type=1400 audit(1775691971.963:622): avc: denied { setopt } for pid=13057 comm="syz.2.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.113205][ T29] audit: type=1400 audit(1775691971.993:623): avc: denied { write } for pid=13057 comm="syz.2.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.146178][ T5986] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.155708][ T5986] usb 6-1: not running at top speed; connect to a high speed hub [ 243.180969][ T5986] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 243.215137][ T5986] usb 6-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 243.235077][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.252291][ T5986] usb 6-1: Product: syz [ 243.267117][ T5986] usb 6-1: Manufacturer: syz [ 243.274382][ T5986] usb 6-1: SerialNumber: syz [ 243.348157][T12996] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 243.376740][T12996] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 243.397694][T12996] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 243.411927][ T29] audit: type=1400 audit(1775691972.313:624): avc: denied { read } for pid=13066 comm="syz.2.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 243.446071][T12996] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 243.523808][ T5986] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 243.543787][ T5986] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 243.649921][ T5986] usb 6-1: USB disconnect, device number 43 [ 243.676574][T12996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.710130][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.742591][T12996] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.761620][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.768819][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.800215][T13091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13091 comm=syz.2.3074 [ 243.805950][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.819801][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.855462][T13093] hsr0: entered promiscuous mode [ 243.861455][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3075'. [ 243.871300][T13093] hsr_slave_0: left promiscuous mode [ 243.878015][ T5889] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 243.887829][T13093] hsr_slave_1: left promiscuous mode [ 243.899444][T13093] hsr0 (unregistering): left promiscuous mode [ 243.951894][ T5807] Bluetooth: hci0: command tx timeout [ 243.984969][T12996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.031758][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 244.038493][ T5889] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 244.060466][ T5889] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.091806][ T5889] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.115482][ T5889] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.132895][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.155992][ T5889] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 244.183518][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.191546][ T5889] usb 4-1: Product: syz [ 244.222736][ T5889] usb 4-1: Manufacturer: syz [ 244.231876][ T5889] usb 4-1: SerialNumber: syz [ 244.246380][T12996] veth0_vlan: entered promiscuous mode [ 244.253218][ T5889] usb 4-1: config 0 descriptor?? [ 244.264058][T13085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.285903][T12996] veth1_vlan: entered promiscuous mode [ 244.336489][T12996] veth0_macvtap: entered promiscuous mode [ 244.349226][T12996] veth1_macvtap: entered promiscuous mode [ 244.377362][T12996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.399019][T12996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.429265][ T85] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.448636][ T85] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.463131][ T85] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.478224][ T85] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.495747][T13085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.515195][ T5889] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 244.575117][T13123] loop5: detected capacity change from 0 to 7 [ 244.619438][T13123] Dev loop5: unable to read RDB block 7 [ 244.626783][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.644137][T13123] loop5: unable to read partition table [ 244.652584][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.662838][T13123] loop5: partition table beyond EOD, truncated [ 244.679883][T13123] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 244.721098][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.739238][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.762945][ T29] audit: type=1400 audit(1775691973.663:625): avc: denied { read } for pid=13084 comm="syz.3.3071" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 244.822717][ T29] audit: type=1400 audit(1775691973.663:626): avc: denied { open } for pid=13084 comm="syz.3.3071" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 244.843369][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3085'. [ 244.868584][ T5889] usb 4-1: USB disconnect, device number 41 [ 245.517609][T13151] serio: Serial port ptm0 [ 245.562888][ T5889] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 245.736450][ T5889] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 245.751976][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.760315][ T5889] usb 7-1: Product: syz [ 245.769871][ T5889] usb 7-1: Manufacturer: syz [ 245.774828][ T5889] usb 7-1: SerialNumber: syz [ 245.802733][ T5889] usb 7-1: config 0 descriptor?? [ 245.827558][ T5889] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 245.859755][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.887078][ T5889] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 245.901841][ T5889] usb 7-1: media controller created [ 245.933650][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.040123][ T5807] Bluetooth: hci0: command tx timeout [ 246.080004][ T5889] DVB: Unable to find symbol mt352_attach() [ 246.141528][ T5889] DVB: Unable to find symbol nxt6000_attach() [ 246.163272][ T5889] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 246.218507][ T5889] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input41 [ 246.268829][T13182] geneve2: entered promiscuous mode [ 246.302126][ T5889] dvb-usb: schedule remote query interval to 1000 msecs. [ 246.322289][ T5889] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 246.333347][ T5889] dvb-usb: bulk message failed: -22 (7/0) [ 246.347109][ T5889] dvb-usb: bulk message failed: -22 (7/0) [ 246.366419][ T5889] usb 7-1: USB disconnect, device number 2 [ 246.418755][ T5889] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 246.531825][ T5882] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 246.632678][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 246.632696][ T29] audit: type=1400 audit(1775691975.533:629): avc: denied { write } for pid=13204 comm="syz.6.3118" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 246.688997][ T29] audit: type=1400 audit(1775691975.533:630): avc: denied { open } for pid=13204 comm="syz.6.3118" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 246.716553][ T29] audit: type=1400 audit(1775691975.543:631): avc: denied { read } for pid=13204 comm="syz.6.3118" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 246.749105][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 246.779963][ T5882] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 246.790187][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.801219][ T5882] usb 6-1: config 0 descriptor?? [ 246.807590][T13186] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 247.059045][ T29] audit: type=1400 audit(1775691975.963:632): avc: denied { setopt } for pid=13223 comm="syz.3.3127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 247.226543][T13235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3132'. [ 247.261757][ T5986] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 247.291365][ T5882] hid_parser_main: 111 callbacks suppressed [ 247.291386][ T5882] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 247.308463][ T5882] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 247.316012][ T5882] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 247.323229][ T5882] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 247.330108][ T5882] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 247.337300][ T5882] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 247.344341][ T5882] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 247.351355][ T5882] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 247.358410][ T5882] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 247.365401][ T5882] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 247.375021][ T5882] asus 0003:0B05:1ABE.0031: unbalanced collection at end of report description [ 247.386060][ T5882] asus 0003:0B05:1ABE.0031: Asus hid parse failed: -22 [ 247.393207][ T5882] asus 0003:0B05:1ABE.0031: probe with driver asus failed with error -22 [ 247.423504][ T5986] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 247.432155][ T5986] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 247.441102][ T5986] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 247.452607][ T5986] usb 7-1: config 220 has no interface number 2 [ 247.461842][ T5986] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 247.480647][ T5986] usb 7-1: config 220 interface 0 has no altsetting 0 [ 247.493612][ T5986] usb 7-1: config 220 interface 76 has no altsetting 0 [ 247.501121][ T5986] usb 7-1: config 220 interface 1 has no altsetting 0 [ 247.511068][ T5986] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 247.511854][ T5926] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 247.524640][ T5889] usb 6-1: USB disconnect, device number 44 [ 247.541163][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.557627][ T5986] usb 7-1: Product: syz [ 247.562417][ T5986] usb 7-1: Manufacturer: syz [ 247.567395][ T5986] usb 7-1: SerialNumber: syz [ 247.569422][ T29] audit: type=1400 audit(1775691976.473:633): avc: denied { relabelfrom } for pid=13242 comm="syz.2.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 247.597639][ T29] audit: type=1400 audit(1775691976.473:634): avc: denied { relabelto } for pid=13242 comm="syz.2.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 247.681778][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 247.688972][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 247.703089][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.716512][ T5926] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 247.725693][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.747005][ T5926] usb 4-1: config 0 descriptor?? [ 247.762596][ T29] audit: type=1400 audit(1775691976.663:635): avc: denied { execute } for pid=13246 comm="syz.2.3138" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 247.793323][ T5986] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 247.801542][ T5986] uvcvideo 7-1:220.0: No valid video chain found. [ 247.808250][ T5986] usb 7-1: selecting invalid altsetting 0 [ 247.830527][ T5986] usb 7-1: selecting invalid altsetting 0 [ 247.837024][ T5986] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 247.857276][ T5986] usb 7-1: USB disconnect, device number 3 [ 247.964331][ T29] audit: type=1400 audit(1775691976.873:636): avc: denied { getopt } for pid=13236 comm="syz.3.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.111978][ T5807] Bluetooth: hci0: command tx timeout [ 248.193062][ T5926] itetech 0003:06CB:73F4.0032: item fetching failed at offset 2/41 [ 248.215969][ T5926] itetech 0003:06CB:73F4.0032: probe with driver itetech failed with error -22 [ 248.266625][T13272] overlayfs: failed to resolve './file0': -2 [ 248.441169][ T5926] usb 4-1: USB disconnect, device number 42 [ 248.647536][T13291] loop1: detected capacity change from 0 to 7 [ 248.686810][ C0] blk_print_req_error: 286 callbacks suppressed [ 248.686832][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.702787][ C0] buffer_io_error: 14 callbacks suppressed [ 248.702806][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 248.720611][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.730287][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 248.738856][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.748482][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 248.756745][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.766394][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 248.774727][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.784376][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 248.792487][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.802122][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 248.810487][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.820117][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 248.828099][ T5994] ldm_validate_partition_table(): Disk read failed. [ 248.838757][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.848403][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 248.857613][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.867319][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 248.880055][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.889687][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 248.901744][ T5994] Dev loop1: unable to read RDB block 0 [ 248.908069][ T5994] loop1: unable to read partition table [ 248.917171][ T5994] loop1: partition table beyond EOD, truncated [ 248.930761][T13291] ldm_validate_partition_table(): Disk read failed. [ 248.945930][T13291] Dev loop1: unable to read RDB block 0 [ 248.952650][T13291] loop1: unable to read partition table [ 248.973945][T13291] loop1: partition table beyond EOD, truncated [ 249.011131][T13291] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 250.032705][T13359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3189'. [ 250.194870][ T5807] Bluetooth: hci0: command tx timeout [ 250.199559][T13371] netlink: 'syz.3.3193': attribute type 1 has an invalid length. [ 250.200971][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.215550][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.507916][ T29] audit: type=1400 audit(1775691979.413:637): avc: denied { create } for pid=13383 comm="syz.3.3199" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 250.598798][T13390] loop2: detected capacity change from 0 to 7 [ 250.609543][ T5994] Dev loop2: unable to read RDB block 7 [ 250.616077][ T5994] loop2: unable to read partition table [ 250.630206][ T5994] loop2: partition table beyond EOD, truncated [ 250.654054][T13390] Dev loop2: unable to read RDB block 7 [ 250.683403][T13390] loop2: unable to read partition table [ 250.711209][T13390] loop2: partition table beyond EOD, truncated [ 250.724737][T13390] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 250.740590][ T29] audit: type=1326 audit(1775691979.643:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13400 comm="syz.3.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fbf9c819 code=0x7ffc0000 [ 251.130700][T13424] Bluetooth: MGMT ver 1.23 [ 251.222119][T13429] o2cb: This node has not been configured. [ 251.237440][T13429] o2cb: Cluster check failed. Fix errors before retrying. [ 251.253271][T13429] (syz.3.3218,13429,0):user_dlm_register:674 ERROR: status = -22 [ 251.281881][T13429] (syz.3.3218,13429,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 251.616994][T13455] pim6reg1: entered promiscuous mode [ 251.623813][T13455] pim6reg1: entered allmulticast mode [ 251.624761][T13454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.687783][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3231'. [ 251.728746][T13459] chnl_net:caif_netlink_parms(): no params data found [ 252.338093][T13493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3242'. [ 252.692055][ T5856] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 252.724540][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3252'. [ 252.736485][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3252'. [ 252.863670][ T5856] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 252.874124][ T5856] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 252.887278][ T5856] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 252.896784][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.905147][ T5856] usb 3-1: Product: syz [ 252.909767][ T5856] usb 3-1: Manufacturer: syz [ 252.914822][ T5856] usb 3-1: SerialNumber: syz [ 252.935471][ T5856] usb 3-1: config 0 descriptor?? [ 252.946034][T13501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.953731][T13501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.075742][ T5986] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 253.106390][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 253.106421][ T29] audit: type=1400 audit(1775691982.013:645): avc: denied { sys_module } for pid=13523 comm="syz.1.3257" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 253.171243][T13501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.179172][T13501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.261980][ T5986] usb 7-1: Using ep0 maxpacket: 32 [ 253.269903][ T5986] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 253.281482][ T5986] usb 7-1: config 0 has no interface number 0 [ 253.299250][ T5986] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.328519][ T5986] usb 7-1: config 0 interface 85 has no altsetting 0 [ 253.347997][ T5986] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 253.357571][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.371919][ T5986] usb 7-1: Product: syz [ 253.376158][ T5986] usb 7-1: Manufacturer: syz [ 253.381773][ T5986] usb 7-1: SerialNumber: syz [ 253.404816][ T5986] usb 7-1: config 0 descriptor?? [ 253.415511][ T5856] Error reading MAC address [ 253.444451][ T5856] usb 3-1: USB disconnect, device number 34 [ 254.048933][ T5986] appletouch 7-1:0.85: Geyser mode initialized. [ 254.065354][ T5986] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input42 [ 254.182316][ T5856] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 254.257664][ T5926] usb 7-1: USB disconnect, device number 4 [ 254.278320][ T5926] appletouch 7-1:0.85: input: appletouch disconnected [ 254.352325][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 254.368379][ T5856] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 254.381845][ T5856] usb 4-1: config 0 has no interface number 0 [ 254.394226][ T5856] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 254.407801][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.426152][ T5856] usb 4-1: Product: syz [ 254.440581][ T5856] usb 4-1: Manufacturer: syz [ 254.450879][ T5856] usb 4-1: SerialNumber: syz [ 254.478884][ T5856] usb 4-1: config 0 descriptor?? [ 254.508507][ T29] audit: type=1400 audit(1775691983.413:646): avc: denied { create } for pid=13587 comm="syz.5.3285" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 254.551879][ T29] audit: type=1400 audit(1775691983.413:647): avc: denied { map } for pid=13587 comm="syz.5.3285" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 254.582894][ T29] audit: type=1400 audit(1775691983.413:648): avc: denied { read write } for pid=13587 comm="syz.5.3285" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 254.813326][T13597] netlink: 'syz.1.3291': attribute type 1 has an invalid length. [ 254.821115][T13597] netlink: 'syz.1.3291': attribute type 6 has an invalid length. [ 254.870979][T13597] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3291'. [ 255.349648][ T29] audit: type=1400 audit(1775691984.253:649): avc: denied { mounton } for pid=13624 comm="syz.2.3305" path="/682/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 255.375618][T13626] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 255.405897][T13626] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 255.536878][ T5856] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 255.566853][ T5856] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 255.587118][ T5856] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 255.615455][ T5856] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 255.636717][ T5856] usb 4-1: USB disconnect, device number 43 [ 255.811151][ T29] audit: type=1400 audit(1775691984.713:650): avc: denied { accept } for pid=13648 comm="syz.6.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 256.256149][T13667] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 256.295954][T13670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3323'. [ 256.662033][ T5823] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 256.833749][ T5823] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 256.852340][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.889514][ T5823] usb 6-1: config 0 descriptor?? [ 256.904394][ T5823] cp210x 6-1:0.0: cp210x converter detected [ 257.048451][T13703] xt_hashlimit: size too large, truncated to 1048576 [ 257.274889][ T29] audit: type=1400 audit(1775691986.183:651): avc: denied { name_bind } for pid=13712 comm="syz.3.3342" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 257.301905][ T5856] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 257.311108][ T5823] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 257.340640][ T5823] usb 6-1: cp210x converter now attached to ttyUSB0 [ 257.461948][ T5856] usb 7-1: Using ep0 maxpacket: 16 [ 257.468811][ T5856] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 257.481202][ T5856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.493571][ T5856] usb 7-1: config 0 has no interface number 0 [ 257.501996][ T5856] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 257.521466][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.540435][ T5823] usb 6-1: USB disconnect, device number 45 [ 257.549519][ T5856] usb 7-1: Product: syz [ 257.554540][ T5856] usb 7-1: Manufacturer: syz [ 257.559149][ T5856] usb 7-1: SerialNumber: syz [ 257.565232][ T5823] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 257.586983][ T5856] usb 7-1: config 0 descriptor?? [ 257.605173][ T5856] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 257.613468][ T5856] uvcvideo 7-1:0.105: No valid video chain found. [ 257.630276][ T29] audit: type=1400 audit(1775691986.533:652): avc: denied { read append } for pid=13727 comm="syz.3.3350" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 257.662668][ T29] audit: type=1400 audit(1775691986.533:653): avc: denied { open } for pid=13727 comm="syz.3.3350" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 257.669458][ T5823] cp210x 6-1:0.0: device disconnected [ 257.834335][ T5856] usb 7-1: USB disconnect, device number 5 [ 257.851884][ T5882] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 258.011796][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 258.018794][ T5882] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 258.030226][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.040440][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.050930][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.071351][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.098006][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 258.116672][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.235733][T13761] syzkaller0 speed is unknown, defaulting to 1000 [ 258.249150][T13761] syzkaller0 speed is unknown, defaulting to 1000 [ 258.256533][T13761] syzkaller0 speed is unknown, defaulting to 1000 [ 258.284289][T13761] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 258.317614][T13761] syzkaller0 speed is unknown, defaulting to 1000 [ 258.337932][T13761] syzkaller0 speed is unknown, defaulting to 1000 [ 258.348175][T13761] syzkaller0 speed is unknown, defaulting to 1000 [ 258.366471][ T5882] usb 3-1: GET_CAPABILITIES returned 0 [ 258.373785][T13761] syzkaller0 speed is unknown, defaulting to 1000 [ 258.383255][ T5882] usbtmc 3-1:16.0: can't read capabilities [ 258.394136][T13761] syzkaller0 speed is unknown, defaulting to 1000 [ 258.413803][T13761] syzkaller0 speed is unknown, defaulting to 1000 [ 258.443932][T13729] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.455866][T13729] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 258.496934][T13729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.505913][T13729] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 258.519579][T13729] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 258.520442][T13774] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 258.526205][T13729] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 258.560028][T13729] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 258.582769][T13729] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 258.583526][T13730] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 258.588775][T13729] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 258.611510][T13729] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 258.612267][ T5882] usb 3-1: USB disconnect, device number 35 [ 259.021849][ T5926] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 259.207663][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.218771][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.253484][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.268304][ T5926] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.281881][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.303425][ T5926] usb 4-1: config 0 descriptor?? [ 259.361829][ T5882] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 259.521790][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 259.543330][ T5882] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 259.571793][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.587551][ T5882] usb 7-1: config 0 descriptor?? [ 259.743823][ T5926] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 259.796833][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 259.821876][ T5882] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 259.842603][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 259.858817][ T5882] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 259.866286][ T5882] usb 7-1: media controller created [ 259.889487][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.900838][T13832] dummy0: entered promiscuous mode [ 259.928724][T13832] dummy0: left promiscuous mode [ 259.984973][ T5986] usb 4-1: USB disconnect, device number 44 [ 260.024908][ T5882] az6027: usb out operation failed. (-71) [ 260.041379][ T5882] az6027: usb out operation failed. (-71) [ 260.052104][ T5882] stb0899_attach: Driver disabled by Kconfig [ 260.061762][ T5882] az6027: no front-end attached [ 260.061762][ T5882] [ 260.101809][ T5882] az6027: usb out operation failed. (-71) [ 260.135491][ T5882] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 260.158046][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input43 [ 260.171913][ T5856] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 260.194076][ T5882] dvb-usb: schedule remote query interval to 400 msecs. [ 260.210433][ T5882] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 260.240881][ T5882] usb 7-1: USB disconnect, device number 6 [ 260.289341][ T5882] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 260.341815][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 260.350378][ T5856] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 260.360745][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.375259][ T5856] usb 3-1: Product: syz [ 260.379456][ T5856] usb 3-1: Manufacturer: syz [ 260.392080][ T5856] usb 3-1: SerialNumber: syz [ 260.408136][ T5856] usb 3-1: config 0 descriptor?? [ 260.511931][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 260.591972][ T5807] Bluetooth: hci4: command 0x0c1a tx timeout [ 260.667895][ T5856] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 036 [ 260.671873][ T5807] Bluetooth: hci0: command 0x0c1a tx timeout [ 260.900803][T13834] m920x_read = error: -19 [ 260.986799][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.991726][ T5856] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 260.997729][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.163857][ T5856] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.172496][ T5856] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 261.180661][ T5856] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 261.191023][ T5856] usb 4-1: config 63 has no interface number 0 [ 261.197641][ T5856] usb 4-1: config 63 interface 66 has no altsetting 0 [ 261.206482][ T5856] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 261.215583][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.223620][ T5856] usb 4-1: Product: syz [ 261.227793][ T5856] usb 4-1: Manufacturer: syz [ 261.232392][ T5856] usb 4-1: SerialNumber: syz [ 261.323312][ T792] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 261.449251][ T5856] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 261.456783][ T5856] uvcvideo 4-1:63.66: No valid video chain found. [ 261.466224][ T5856] usb 4-1: USB disconnect, device number 45 [ 261.483809][ T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.502933][ T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.515851][ T792] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.529120][ T792] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.538892][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.555634][ T792] usb 6-1: config 0 descriptor?? [ 261.871960][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 261.912467][ T5823] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 261.981124][ T792] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 262.062050][ T5823] usb 7-1: Using ep0 maxpacket: 32 [ 262.072842][ T5823] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.091944][ T5823] usb 7-1: config 0 has no interfaces? [ 262.099828][ T5823] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 262.111202][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.123009][ T5823] usb 7-1: Product: syz [ 262.128374][ T5823] usb 7-1: Manufacturer: syz [ 262.134401][ T5823] usb 7-1: SerialNumber: syz [ 262.155012][ T5823] usb 7-1: config 0 descriptor?? [ 262.253595][ T5856] usb 6-1: USB disconnect, device number 46 [ 262.326380][ T29] audit: type=1326 audit(1775691991.233:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.3.3419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23fbf9c819 code=0x0 [ 262.446366][ T5856] usb 7-1: USB disconnect, device number 7 [ 262.592434][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 262.671739][ T5807] Bluetooth: hci4: command 0x0c1a tx timeout [ 262.751865][ T5807] Bluetooth: hci0: command 0x0c1a tx timeout [ 262.925246][ T10] usb 3-1: USB disconnect, device number 36 [ 262.990725][T13885] Process accounting resumed [ 263.141787][ T5823] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 263.204956][T13913] sock: sock_set_timeout: `syz.3.3428' (pid 13913) tries to set negative timeout [ 263.301772][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 263.308656][ T5823] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 263.319056][ T5823] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 263.328377][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.338048][ T5823] usb 6-1: Product: syz [ 263.342616][ T5823] usb 6-1: Manufacturer: syz [ 263.347296][ T5823] usb 6-1: SerialNumber: syz [ 263.357760][ T5823] usb 6-1: config 0 descriptor?? [ 263.368653][ T5823] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 263.377216][ T5823] usb 6-1: setting power ON [ 263.383636][ T5823] dvb-usb: bulk message failed: -22 (2/0) [ 263.400400][ T5823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 263.421018][ T5823] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 263.430120][ T5823] usb 6-1: media controller created [ 263.445193][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.466755][ T5823] usb 6-1: selecting invalid altsetting 6 [ 263.474973][ T5823] usb 6-1: digital interface selection failed (-22) [ 263.481594][ T5823] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 263.490897][ T5823] usb 6-1: setting power OFF [ 263.497146][ T5823] dvb-usb: bulk message failed: -22 (2/0) [ 263.504101][ T5823] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 263.513558][ T5823] (NULL device *): no alternate interface [ 263.540501][ T5823] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 263.648791][ T792] usb 6-1: USB disconnect, device number 47 [ 264.261760][ T29] audit: type=1400 audit(1775692249.167:655): avc: denied { ioctl } for pid=13953 comm="syz.6.3446" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44431 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 264.491751][ T5823] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 264.581748][ T792] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 264.631767][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 264.653411][ T5823] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 264.664342][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.685991][ T5823] usb 6-1: config 0 descriptor?? [ 264.706440][ T5823] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 264.712626][T13973] overlayfs: failed to clone upperpath [ 264.741887][ T792] usb 7-1: Using ep0 maxpacket: 32 [ 264.757132][ T5807] Bluetooth: hci4: command 0x0c1a tx timeout [ 264.765370][ T792] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.785076][ T792] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.795960][ T792] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 264.805285][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.815078][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 264.816645][ T792] usb 7-1: config 0 descriptor?? [ 264.831950][ T5807] Bluetooth: hci0: command 0x0c1a tx timeout [ 264.854765][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.872328][ T9] usb 4-1: Product: syz [ 264.880737][ T9] usb 4-1: Manufacturer: syz [ 264.899247][ T9] usb 4-1: SerialNumber: syz [ 264.910354][ T5823] gp8psk: usb in 128 operation failed. [ 264.927898][ T9] usb 4-1: config 0 descriptor?? [ 265.128192][ T5823] gp8psk: usb in 146 operation failed. [ 265.134444][ T5823] gp8psk: failed to get FW version [ 265.140341][ T5823] gp8psk: FPGA Version = 24 [ 265.271475][ T792] savu 0003:1E7D:2D5A.0035: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 265.343953][ T5823] gp8psk: usb in 138 operation failed. [ 265.352965][ T5823] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 265.364748][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 265.373137][ T5823] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 265.382463][ T9] usb 4-1: Please update to version 0.2 or newer [ 265.391108][ T5823] usb 6-1: USB disconnect, device number 48 [ 265.397256][ T9] usb 4-1: Firmware: build [ 265.534281][ T792] usb 7-1: USB disconnect, device number 8 [ 265.606747][ T9] usb 4-1: USB disconnect, device number 46 [ 266.312363][T14028] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 266.345486][T14028] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 266.432349][ T792] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 266.607281][ T792] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 266.629343][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.668089][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.684792][ T29] audit: type=1400 audit(1775692251.597:656): avc: denied { accept } for pid=14045 comm="syz.5.3483" path="socket:[45060]" dev="sockfs" ino=45060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.709118][ T792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.733457][ T792] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.749505][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.767495][ T792] usb 4-1: config 0 descriptor?? [ 267.028512][ T29] audit: type=1400 audit(1775692251.937:657): avc: denied { setopt } for pid=14062 comm="syz.2.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 267.194911][ T792] plantronics 0003:047F:FFFF.0036: reserved main item tag 0xd [ 267.226719][ T792] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 267.516764][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3503'. [ 267.570146][ T792] usb 4-1: USB disconnect, device number 47 [ 267.573422][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3503'. [ 267.618666][ T29] audit: type=1400 audit(1775692252.527:658): avc: denied { ioctl } for pid=14088 comm="syz.5.3506" path="socket:[44661]" dev="sockfs" ino=44661 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 268.163632][T14112] block nbd6: NBD_DISCONNECT [ 268.272969][ T792] kernel read not supported for file /dsp1 (pid: 792 comm: kworker/1:2) [ 268.383565][ T5849] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 268.563819][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.598545][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.632684][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.661749][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.682435][ T5849] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 268.691548][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.713802][ T5849] usb 4-1: config 0 descriptor?? [ 268.838048][T14137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14137 comm=syz.1.3528 [ 269.121731][ T5856] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 269.148909][ T5849] hid-u2fzero 0003:10C4:8ACF.0037: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 269.185693][ T5849] hid-u2fzero 0003:10C4:8ACF.0037: U2F Zero LED initialised [ 269.225785][ T5849] hid-u2fzero 0003:10C4:8ACF.0037: U2F Zero RNG initialised [ 269.291790][ T5856] usb 6-1: Using ep0 maxpacket: 8 [ 269.305889][ T5856] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 269.317825][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.326480][ T5856] usb 6-1: Product: syz [ 269.330780][ T5856] usb 6-1: Manufacturer: syz [ 269.336328][ T5856] usb 6-1: SerialNumber: syz [ 269.343595][ T5856] usb 6-1: config 0 descriptor?? [ 269.353260][ T5823] usb 4-1: USB disconnect, device number 48 [ 269.374106][ T5856] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 269.511964][ T5849] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 269.663643][ T5849] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 269.672818][ T5849] usb 3-1: config 0 has no interface number 0 [ 269.678954][ T5849] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 269.691780][ T5849] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.708683][ T5849] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 269.721478][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.729907][ T5849] usb 3-1: Product: syz [ 269.743379][ T5849] usb 3-1: Manufacturer: syz [ 269.748041][ T5849] usb 3-1: SerialNumber: syz [ 269.756749][ T5849] usb 3-1: config 0 descriptor?? [ 269.766848][T14152] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 269.776431][ T5849] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 269.793415][ T5849] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 269.984385][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 270.184901][ T9] usb 3-1: USB disconnect, device number 37 [ 270.196243][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 270.208135][ T9] cyberjack 3-1:0.69: device disconnected [ 270.331779][ T5849] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 270.377870][ T9] usb 6-1: USB disconnect, device number 49 [ 270.493389][ T5849] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.507132][ T5849] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.519130][ T5849] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.530192][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.540579][T14187] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 270.551354][ T5849] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.580907][T14190] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3553'. [ 270.596025][T14189] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3553'. [ 270.877549][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 270.910765][ T5823] usb 4-1: USB disconnect, device number 49 [ 271.332947][ T5882] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 271.442403][ T5823] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 271.492051][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 271.498948][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 271.507855][ T5882] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 271.516294][ T5882] usb 3-1: config 0 has no interface number 0 [ 271.526495][ T5882] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 271.538429][ T5882] usb 3-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 271.552281][ T5882] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 271.552319][T14219] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3566'. [ 271.563934][ T5882] usb 3-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 271.586182][ T5882] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 271.597203][ T5882] usb 3-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 271.607981][ T5882] usb 3-1: config 0 interface 122 has no altsetting 0 [ 271.617189][ T5882] usb 3-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 271.627065][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.636970][ T5882] usb 3-1: Product: syz [ 271.641250][ T5823] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 271.651629][ T5823] usb 6-1: config 0 has no interface number 0 [ 271.657805][ T5823] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.668942][ T5882] usb 3-1: Manufacturer: syz [ 271.673730][ T5882] usb 3-1: SerialNumber: syz [ 271.680697][ T5882] usb 3-1: config 0 descriptor?? [ 271.686651][T14209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 271.694342][T14209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 271.706220][ T5823] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 271.711455][T14223] erspan0: left promiscuous mode [ 271.716146][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.729891][ T5823] usb 6-1: Product: syz [ 271.734188][ T5823] usb 6-1: Manufacturer: syz [ 271.737272][T14223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.738799][ T5823] usb 6-1: SerialNumber: syz [ 271.749225][T14223] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.760533][ T5823] usb 6-1: config 0 descriptor?? [ 271.765670][T14223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.782586][ T5823] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 271.907883][ T5882] pl2303 3-1:0.122: pl2303 converter detected [ 271.915535][ T5882] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 271.924632][ T5882] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 271.934054][ T5882] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 271.942878][ T5882] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 271.951190][ T5882] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 271.961042][ T5882] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 271.969626][ T5882] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 271.978068][ T5882] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 271.986641][ T5882] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 271.995289][ T5882] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 272.004719][ T5882] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 272.015527][ T5882] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 272.034522][ T5882] usb 3-1: USB disconnect, device number 38 [ 272.055001][ T5882] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 272.063878][ T5882] pl2303 3-1:0.122: device disconnected [ 272.132034][ T5823] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 272.303263][ T5823] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.314268][ T5823] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 272.328310][ T5823] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.337839][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.346141][ T5823] usb 4-1: Product: syz [ 272.350398][ T5823] usb 4-1: Manufacturer: syz [ 272.355336][ T5823] usb 4-1: SerialNumber: syz [ 272.529660][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 272.539205][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 272.576749][T14228] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 272.859277][T14263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3586'. [ 272.911853][ T5807] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 272.911928][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 273.003043][ T29] audit: type=1800 audit(1775692257.907:659): pid=14266 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.3587" name="/newroot/1029/pids.events" dev="tmpfs" ino=5263 res=0 errno=0 [ 273.206751][T14228] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 273.417523][ T5823] cdc_ncm 4-1:1.0: failed to get mac address [ 273.428633][ T5823] cdc_ncm 4-1:1.0: bind() failure [ 273.445854][ T5823] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 273.455307][ T5823] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 273.474349][ T5823] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 273.498675][ T5823] usb 4-1: USB disconnect, device number 50 [ 273.822066][ T792] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 273.874817][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 273.901757][ T5849] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 273.973255][ T792] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.984396][ T792] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 273.994499][ T792] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.004294][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.021932][T14294] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 274.038129][ T792] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.052563][ T5849] usb 3-1: Using ep0 maxpacket: 8 [ 274.076716][ T5849] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 274.094994][ T5849] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.123116][ T5849] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.151722][ T5849] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.162737][ T5849] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.176043][ T5849] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.185388][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.227387][ T5856] usb 6-1: USB disconnect, device number 50 [ 274.277828][ T5856] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 274.319982][ T5882] usb 7-1: USB disconnect, device number 9 [ 274.407225][ T5849] usb 3-1: usb_control_msg returned -32 [ 274.421721][ T5849] usbtmc 3-1:16.0: can't read capabilities [ 274.822957][ T5882] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 274.924789][T14333] macsec0: entered promiscuous mode [ 274.934122][T14333] macsec0: left promiscuous mode [ 274.971808][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 274.982542][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.000206][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.011229][ T5882] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 275.020709][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.033877][ T5882] usb 4-1: config 0 descriptor?? [ 275.076988][T14339] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 275.100863][T14343] loop5: detected capacity change from 0 to 7 [ 275.113689][ T5994] Dev loop5: unable to read RDB block 7 [ 275.119397][ T5994] loop5: unable to read partition table [ 275.125360][ T5994] loop5: partition table beyond EOD, truncated [ 275.134166][T14343] Dev loop5: unable to read RDB block 7 [ 275.139793][T14343] loop5: unable to read partition table [ 275.148905][T14343] loop5: partition table beyond EOD, truncated [ 275.162068][T14343] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 275.187066][ T5179] Dev loop5: unable to read RDB block 7 [ 275.205273][ T5179] loop5: unable to read partition table [ 275.218981][ T5179] loop5: partition table beyond EOD, truncated [ 275.320940][ T29] audit: type=1400 audit(1775692260.227:660): avc: denied { map } for pid=14350 comm="syz.5.3621" path="socket:[46273]" dev="sockfs" ino=46273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 275.388828][ T5807] Bluetooth: hci3: unexpected event for opcode 0x080d [ 275.488895][ T5882] savu 0003:1E7D:2D5A.0038: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 275.678285][ T5849] usb 4-1: USB disconnect, device number 51 [ 275.756406][T14374] overlayfs: failed to clone upperpath [ 275.770559][T14374] overlayfs: failed to clone upperpath [ 275.916310][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3638'. [ 275.924265][ T29] audit: type=1326 audit(1775692260.837:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.6.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596019c819 code=0x7ffc0000 [ 275.930288][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3638'. [ 275.975447][ T29] audit: type=1326 audit(1775692260.857:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.6.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596019c819 code=0x7ffc0000 [ 275.999754][ T29] audit: type=1326 audit(1775692260.867:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.6.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f596019c819 code=0x7ffc0000 [ 276.032351][ T5856] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 276.034992][ T29] audit: type=1326 audit(1775692260.867:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.6.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f596019c582 code=0x7ffc0000 [ 276.083455][ T29] audit: type=1326 audit(1775692260.867:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.6.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f596019c582 code=0x7ffc0000 [ 276.109178][ T29] audit: type=1326 audit(1775692260.867:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.6.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596019c819 code=0x7ffc0000 [ 276.139457][ T29] audit: type=1326 audit(1775692260.867:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.6.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596019c819 code=0x7ffc0000 [ 276.165505][ T29] audit: type=1326 audit(1775692260.877:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14385 comm="syz.6.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f596019c819 code=0x7ffc0000 [ 276.206569][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3643'. [ 276.217568][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.228955][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.270473][ T5856] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.287456][ T5856] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.308570][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.320982][ T5856] usb 6-1: config 0 descriptor?? [ 276.352106][ T5849] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 276.383614][T14402] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3646'. [ 276.511791][ T5849] usb 7-1: Using ep0 maxpacket: 16 [ 276.518408][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.529692][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.539892][ T5849] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 276.552856][ T5849] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 276.562322][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.571827][ T5849] usb 7-1: config 0 descriptor?? [ 276.665955][ T5823] usb 3-1: USB disconnect, device number 39 [ 276.746747][ T5856] plantronics 0003:047F:FFFF.0039: reserved main item tag 0xd [ 276.755414][ T5856] hid_parser_main: 441 callbacks suppressed [ 276.755434][ T5856] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 276.779022][ T5856] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 276.944739][T14411] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.000920][ T5849] appleir 0003:05AC:8241.003A: unknown main item tag 0x0 [ 277.022028][ T5849] appleir 0003:05AC:8241.003A: unknown main item tag 0x0 [ 277.029126][ T5849] appleir 0003:05AC:8241.003A: unknown main item tag 0x0 [ 277.038709][ T5849] appleir 0003:05AC:8241.003A: unknown main item tag 0x0 [ 277.047582][T14417] syzkaller1: entered promiscuous mode [ 277.053664][ T5849] appleir 0003:05AC:8241.003A: item fetching failed at offset 4/5 [ 277.062048][T14417] syzkaller1: entered allmulticast mode [ 277.068680][ T5849] appleir 0003:05AC:8241.003A: parse failed [ 277.077935][ T5856] usb 6-1: USB disconnect, device number 51 [ 277.087329][ T5849] appleir 0003:05AC:8241.003A: probe with driver appleir failed with error -22 [ 277.257971][ T5823] usb 7-1: USB disconnect, device number 10 [ 277.652429][T14451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3669'. [ 277.695982][T14451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3669'. [ 278.329412][T14486] netlink: 211856 bytes leftover after parsing attributes in process `syz.6.3684'. [ 278.846651][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3697'. [ 278.944753][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 279.101852][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 279.110803][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.122786][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.134043][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 279.144721][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.155796][ T9] usb 3-1: config 0 descriptor?? [ 279.202025][ T5856] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 279.371873][ T5856] usb 6-1: Using ep0 maxpacket: 8 [ 279.378346][ T5856] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 279.389657][ T5856] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 279.400421][ T5856] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.410545][ T5856] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.423655][ T5856] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 279.433176][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.570678][ T9] kye 0003:0458:5016.003B: control desc unexpectedly large [ 279.602294][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.003B/input/input45 [ 279.634973][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 279.634988][ T29] audit: type=1400 audit(1775692264.547:676): avc: denied { shutdown } for pid=14543 comm="syz.3.3711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.693193][ T5856] usb 6-1: GET_CAPABILITIES returned 0 [ 279.707626][ T5856] usbtmc 6-1:16.0: can't read capabilities [ 279.726557][ T29] audit: type=1400 audit(1775692264.627:677): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.756290][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.003B/input/input46 [ 279.804017][ T29] audit: type=1400 audit(1775692264.627:678): avc: denied { open } for pid=5810 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.835816][ T29] audit: type=1400 audit(1775692264.627:679): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.863160][ T29] audit: type=1400 audit(1775692264.697:680): avc: denied { create } for pid=14547 comm="syz.6.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 279.917928][ T9] kye 0003:0458:5016.003B: input,hiddev1,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 279.922125][ T5856] usb 6-1: USB disconnect, device number 52 [ 280.022442][ T9] usb 3-1: USB disconnect, device number 40 [ 280.065844][T14555] fido_id[14555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 280.113350][ T29] audit: type=1800 audit(1775692265.027:681): pid=14561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3718" name="bus" dev="tmpfs" ino=3292 res=0 errno=0 [ 280.229752][T14567] netlink: 'syz.3.3721': attribute type 3 has an invalid length. [ 280.500232][T14583] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3727'. [ 280.562539][ T5823] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 280.741720][ T5823] usb 7-1: Using ep0 maxpacket: 32 [ 280.748254][ T5823] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 280.760909][ T5823] usb 7-1: config 2 has no interface number 0 [ 280.763560][T14591] block nbd2: shutting down sockets [ 280.771776][ T5823] usb 7-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 280.790171][ T5823] usb 7-1: config 2 interface 88 has no altsetting 0 [ 280.800903][ T5823] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 280.810569][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.819360][ T5823] usb 7-1: Product: syz [ 280.823725][ T5823] usb 7-1: Manufacturer: syz [ 280.828398][ T5823] usb 7-1: SerialNumber: syz [ 280.864505][T14573] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 281.086135][T14573] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 281.248129][T14614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14614 comm=syz.3.3742 [ 281.298512][T14614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14614 comm=syz.3.3742 [ 281.367564][T14625] syzkaller0 speed is unknown, defaulting to 1000 [ 281.541747][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 281.703298][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.714601][ T10] usb 3-1: config 0 has no interfaces? [ 281.724533][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.735875][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.747357][ T10] usb 3-1: config 0 descriptor?? [ 281.921105][ T5823] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 281.938403][ T5823] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 281.951368][ T5823] asix 7-1:2.88: probe with driver asix failed with error -71 [ 281.975665][T14618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.987123][ T5823] usb 7-1: USB disconnect, device number 11 [ 281.999550][T14618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.012687][ T10] usb 3-1: USB disconnect, device number 41 [ 282.106555][T14642] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3752'. [ 282.231514][ T29] audit: type=1400 audit(1775692267.137:682): avc: denied { mounton } for pid=14647 comm="syz.5.3755" path="/proc/1135/cgroup" dev="proc" ino=47189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 282.437414][T14657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3759'. [ 282.456044][T14657] bridge0: entered promiscuous mode [ 282.461358][T14657] bridge0: entered allmulticast mode [ 282.488859][T14657] team0: Port device bridge0 added [ 282.578626][T14657] bridge0: port 1(team0) entered blocking state [ 282.601873][T14657] bridge0: port 1(team0) entered disabled state [ 282.633862][T14657] team0: entered allmulticast mode [ 282.648179][T14657] team_slave_0: entered allmulticast mode [ 282.668523][T14657] team_slave_1: entered allmulticast mode [ 282.713825][T14657] team0: left allmulticast mode [ 282.728291][T14657] team_slave_0: left allmulticast mode [ 282.738231][T14657] team_slave_1: left allmulticast mode [ 282.831131][T14675] overlayfs: failed to clone upperpath [ 282.851749][ T10] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 283.004466][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.029501][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 283.038899][T14688] netlink: 'syz.2.3771': attribute type 12 has an invalid length. [ 283.052973][T14688] netlink: 'syz.2.3771': attribute type 29 has an invalid length. [ 283.058667][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.070662][T14688] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3771'. [ 283.089310][T14688] netlink: 'syz.2.3771': attribute type 2 has an invalid length. [ 283.111976][ T29] audit: type=1400 audit(1775692268.007:683): avc: denied { unmount } for pid=12996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 283.117201][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 283.142379][T14688] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3771'. [ 283.188587][ T10] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 283.202898][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.235352][ T10] usb 6-1: config 0 descriptor?? [ 283.267628][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'. [ 283.303431][T14695] gtp0: entered promiscuous mode [ 283.322025][T14695] gtp0: entered allmulticast mode [ 283.456042][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 283.467808][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 283.470949][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 283.491085][ T10] usb 6-1: USB disconnect, device number 53 [ 283.527427][T14669] [ 283.529794][T14669] ====================================================== [ 283.536816][T14669] WARNING: possible circular locking dependency detected [ 283.543838][T14669] syzkaller #0 Tainted: G L [ 283.549804][T14669] ------------------------------------------------------ [ 283.556803][T14669] syz.3.3764/14669 is trying to acquire lock: [ 283.562862][T14669] ffffffff8e9ab8a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 283.572684][T14669] [ 283.572684][T14669] but task is already holding lock: [ 283.580027][T14669] ffff88803604b560 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 283.588620][T14669] [ 283.588620][T14669] which lock already depends on the new lock. [ 283.588620][T14669] [ 283.598997][T14669] [ 283.598997][T14669] the existing dependency chain (in reverse order) is: [ 283.607985][T14669] [ 283.607985][T14669] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 283.615611][T14669] lock_sock_nested+0x41/0xf0 [ 283.620848][T14669] inet_shutdown+0x67/0x410 [ 283.625856][T14669] nbd_mark_nsock_dead+0xae/0x5c0 [ 283.631394][T14669] sock_shutdown+0x16b/0x200 [ 283.636496][T14669] nbd_ioctl+0x25e/0xd30 [ 283.641246][T14669] blkdev_ioctl+0x5ad/0x6f0 [ 283.646253][T14669] __x64_sys_ioctl+0x18e/0x210 [ 283.651524][T14669] do_syscall_64+0x106/0xf80 [ 283.656621][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.663016][T14669] [ 283.663016][T14669] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 283.670662][T14669] __mutex_lock+0x1a2/0x1b90 [ 283.675775][T14669] nbd_queue_rq+0x428/0x1080 [ 283.680884][T14669] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 283.686948][T14669] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 283.693788][T14669] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 283.700271][T14669] blk_mq_run_hw_queue+0x23c/0x670 [ 283.705883][T14669] blk_mq_dispatch_list+0x51d/0x1360 [ 283.711689][T14669] blk_mq_flush_plug_list+0x130/0x600 [ 283.717573][T14669] __blk_flush_plug+0x2c4/0x4b0 [ 283.722945][T14669] __submit_bio+0x584/0x6c0 [ 283.727959][T14669] submit_bio_noacct_nocheck+0x562/0xc10 [ 283.734098][T14669] submit_bio_noacct+0xd17/0x2010 [ 283.739729][T14669] submit_bh_wbc+0x59c/0x770 [ 283.744832][T14669] block_read_full_folio+0x264/0x8e0 [ 283.750627][T14669] filemap_read_folio+0xfc/0x3b0 [ 283.756073][T14669] do_read_cache_folio+0x2d7/0x6b0 [ 283.761779][T14669] read_part_sector+0xd1/0x370 [ 283.767046][T14669] adfspart_check_ICS+0x93/0x910 [ 283.772485][T14669] bdev_disk_changed+0x7f8/0xc80 [ 283.777931][T14669] blkdev_get_whole+0x187/0x290 [ 283.783293][T14669] bdev_open+0x2c7/0xe40 [ 283.788048][T14669] blkdev_open+0x34e/0x4f0 [ 283.792970][T14669] do_dentry_open+0x6d8/0x1660 [ 283.798239][T14669] vfs_open+0x82/0x3f0 [ 283.802823][T14669] path_openat+0x208c/0x31a0 [ 283.807915][T14669] do_file_open+0x20e/0x430 [ 283.812918][T14669] do_sys_openat2+0x10d/0x1e0 [ 283.818099][T14669] __x64_sys_openat+0x12d/0x210 [ 283.823455][T14669] do_syscall_64+0x106/0xf80 [ 283.828546][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.834942][T14669] [ 283.834942][T14669] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 283.842143][T14669] __mutex_lock+0x1a2/0x1b90 [ 283.847237][T14669] nbd_queue_rq+0xba/0x1080 [ 283.852255][T14669] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 283.858313][T14669] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 283.865145][T14669] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 283.871632][T14669] blk_mq_run_hw_queue+0x23c/0x670 [ 283.877266][T14669] blk_mq_dispatch_list+0x51d/0x1360 [ 283.883054][T14669] blk_mq_flush_plug_list+0x130/0x600 [ 283.888947][T14669] __blk_flush_plug+0x2c4/0x4b0 [ 283.894302][T14669] __submit_bio+0x584/0x6c0 [ 283.899310][T14669] submit_bio_noacct_nocheck+0x562/0xc10 [ 283.905444][T14669] submit_bio_noacct+0xd17/0x2010 [ 283.910970][T14669] submit_bh_wbc+0x59c/0x770 [ 283.916064][T14669] block_read_full_folio+0x264/0x8e0 [ 283.921858][T14669] filemap_read_folio+0xfc/0x3b0 [ 283.927302][T14669] do_read_cache_folio+0x2d7/0x6b0 [ 283.932922][T14669] read_part_sector+0xd1/0x370 [ 283.938197][T14669] adfspart_check_ICS+0x93/0x910 [ 283.943658][T14669] bdev_disk_changed+0x7f8/0xc80 [ 283.949113][T14669] blkdev_get_whole+0x187/0x290 [ 283.954493][T14669] bdev_open+0x2c7/0xe40 [ 283.959244][T14669] blkdev_open+0x34e/0x4f0 [ 283.964165][T14669] do_dentry_open+0x6d8/0x1660 [ 283.969431][T14669] vfs_open+0x82/0x3f0 [ 283.974004][T14669] path_openat+0x208c/0x31a0 [ 283.979097][T14669] do_file_open+0x20e/0x430 [ 283.984101][T14669] do_sys_openat2+0x10d/0x1e0 [ 283.989282][T14669] __x64_sys_openat+0x12d/0x210 [ 283.994638][T14669] do_syscall_64+0x106/0xf80 [ 283.999730][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.006124][T14669] [ 284.006124][T14669] -> #3 (set->srcu){.+.+}-{0:0}: [ 284.013241][T14669] __synchronize_srcu+0xa2/0x300 [ 284.018680][T14669] blk_mq_quiesce_queue+0x149/0x1c0 [ 284.024384][T14669] elevator_switch+0x17b/0x7e0 [ 284.029648][T14669] elevator_change+0x352/0x530 [ 284.034914][T14669] elevator_set_default+0x29e/0x360 [ 284.040614][T14669] blk_register_queue+0x412/0x590 [ 284.046140][T14669] __add_disk+0x73f/0xe40 [ 284.050977][T14669] add_disk_fwnode+0x118/0x5c0 [ 284.056247][T14669] nbd_dev_add+0x77a/0xb10 [ 284.061165][T14669] nbd_init+0x291/0x2b0 [ 284.065829][T14669] do_one_initcall+0x11d/0x760 [ 284.071096][T14669] kernel_init_freeable+0x6e5/0x7a0 [ 284.076799][T14669] kernel_init+0x1f/0x1e0 [ 284.081630][T14669] ret_from_fork+0x754/0xd80 [ 284.086722][T14669] ret_from_fork_asm+0x1a/0x30 [ 284.092003][T14669] [ 284.092003][T14669] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 284.099798][T14669] __mutex_lock+0x1a2/0x1b90 [ 284.104889][T14669] elevator_change+0x1bc/0x530 [ 284.110153][T14669] elevator_set_none+0x92/0xf0 [ 284.115416][T14669] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 284.121727][T14669] nbd_start_device+0x1a6/0xbd0 [ 284.127075][T14669] nbd_genl_connect+0xff2/0x1a40 [ 284.132509][T14669] genl_family_rcv_msg_doit+0x214/0x300 [ 284.138558][T14669] genl_rcv_msg+0x560/0x800 [ 284.143559][T14669] netlink_rcv_skb+0x159/0x420 [ 284.148821][T14669] genl_rcv+0x28/0x40 [ 284.153317][T14669] netlink_unicast+0x5aa/0x870 [ 284.158579][T14669] netlink_sendmsg+0x8b0/0xda0 [ 284.163838][T14669] ____sys_sendmsg+0x9e1/0xb70 [ 284.169104][T14669] ___sys_sendmsg+0x190/0x1e0 [ 284.174283][T14669] __sys_sendmsg+0x170/0x220 [ 284.179387][T14669] do_syscall_64+0x106/0xf80 [ 284.184489][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.190907][T14669] [ 284.190907][T14669] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 284.199503][T14669] blk_alloc_queue+0x610/0x790 [ 284.204780][T14669] blk_mq_alloc_queue+0x174/0x290 [ 284.210313][T14669] __blk_mq_alloc_disk+0x29/0x120 [ 284.215854][T14669] nbd_dev_add+0x492/0xb10 [ 284.220771][T14669] nbd_init+0x291/0x2b0 [ 284.225430][T14669] do_one_initcall+0x11d/0x760 [ 284.230695][T14669] kernel_init_freeable+0x6e5/0x7a0 [ 284.236413][T14669] kernel_init+0x1f/0x1e0 [ 284.241249][T14669] ret_from_fork+0x754/0xd80 [ 284.246338][T14669] ret_from_fork_asm+0x1a/0x30 [ 284.251618][T14669] [ 284.251618][T14669] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 284.258819][T14669] __lock_acquire+0x14b8/0x2630 [ 284.264198][T14669] lock_acquire+0x1cf/0x380 [ 284.269222][T14669] fs_reclaim_acquire+0xc4/0x100 [ 284.274663][T14669] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 284.280978][T14669] kmalloc_reserve+0x148/0x350 [ 284.286244][T14669] __alloc_skb+0x185/0x710 [ 284.291169][T14669] tcp_send_active_reset+0x8b/0xa60 [ 284.296888][T14669] __tcp_close+0x41e/0x1110 [ 284.301913][T14669] tcp_close+0x28/0x110 [ 284.306573][T14669] inet_release+0xed/0x200 [ 284.311493][T14669] __sock_release+0xb3/0x260 [ 284.316596][T14669] sock_close+0x1c/0x30 [ 284.321263][T14669] __fput+0x3ff/0xb40 [ 284.325755][T14669] task_work_run+0x150/0x240 [ 284.330885][T14669] get_signal+0x1bd/0x21e0 [ 284.335803][T14669] arch_do_signal_or_restart+0x91/0x7a0 [ 284.341858][T14669] exit_to_user_mode_loop+0x86/0x4a0 [ 284.347645][T14669] do_syscall_64+0x67c/0xf80 [ 284.352740][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.359142][T14669] [ 284.359142][T14669] other info that might help us debug this: [ 284.359142][T14669] [ 284.369359][T14669] Chain exists of: [ 284.369359][T14669] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET [ 284.369359][T14669] [ 284.381947][T14669] Possible unsafe locking scenario: [ 284.381947][T14669] [ 284.389388][T14669] CPU0 CPU1 [ 284.394731][T14669] ---- ---- [ 284.400074][T14669] lock(sk_lock-AF_INET); [ 284.404477][T14669] lock(&nsock->tx_lock); [ 284.411395][T14669] lock(sk_lock-AF_INET); [ 284.418310][T14669] lock(fs_reclaim); [ 284.422273][T14669] [ 284.422273][T14669] *** DEADLOCK *** [ 284.422273][T14669] [ 284.430403][T14669] 2 locks held by syz.3.3764/14669: [ 284.435583][T14669] #0: ffff888076bfde08 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 284.446101][T14669] #1: ffff88803604b560 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 284.455136][T14669] [ 284.455136][T14669] stack backtrace: [ 284.461017][T14669] CPU: 1 UID: 0 PID: 14669 Comm: syz.3.3764 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.461037][T14669] Tainted: [L]=SOFTLOCKUP [ 284.461042][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 284.461050][T14669] Call Trace: [ 284.461054][T14669] [ 284.461059][T14669] dump_stack_lvl+0x100/0x190 [ 284.461083][T14669] print_circular_bug.cold+0x178/0x1c7 [ 284.461106][T14669] check_noncircular+0x146/0x160 [ 284.461127][T14669] ? __kasan_mempool_unpoison_object+0xea/0x160 [ 284.461144][T14669] __lock_acquire+0x14b8/0x2630 [ 284.461161][T14669] lock_acquire+0x1cf/0x380 [ 284.461173][T14669] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 284.461197][T14669] fs_reclaim_acquire+0xc4/0x100 [ 284.461212][T14669] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 284.461232][T14669] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 284.461251][T14669] ? kmalloc_reserve+0x148/0x350 [ 284.461272][T14669] kmalloc_reserve+0x148/0x350 [ 284.461286][T14669] __alloc_skb+0x185/0x710 [ 284.461304][T14669] ? __alloc_skb+0x5b7/0x710 [ 284.461320][T14669] ? __pfx___alloc_skb+0x10/0x10 [ 284.461338][T14669] ? skb_attempt_defer_free+0x2f3/0x810 [ 284.461356][T14669] tcp_send_active_reset+0x8b/0xa60 [ 284.461377][T14669] __tcp_close+0x41e/0x1110 [ 284.461395][T14669] tcp_close+0x28/0x110 [ 284.461411][T14669] inet_release+0xed/0x200 [ 284.461427][T14669] __sock_release+0xb3/0x260 [ 284.461447][T14669] ? __pfx_sock_close+0x10/0x10 [ 284.461467][T14669] sock_close+0x1c/0x30 [ 284.461485][T14669] __fput+0x3ff/0xb40 [ 284.461503][T14669] ? _raw_spin_unlock_irq+0x23/0x50 [ 284.461523][T14669] task_work_run+0x150/0x240 [ 284.461538][T14669] ? __pfx_task_work_run+0x10/0x10 [ 284.461552][T14669] ? __fput_deferred+0x217/0x490 [ 284.461568][T14669] ? __pfx___fput_deferred+0x10/0x10 [ 284.461586][T14669] get_signal+0x1bd/0x21e0 [ 284.461605][T14669] ? __sys_sendto+0x2bc/0x4b0 [ 284.461622][T14669] ? __pfx_inet_sendmsg+0x10/0x10 [ 284.461637][T14669] ? __pfx___sys_sendto+0x10/0x10 [ 284.461657][T14669] ? __pfx_get_signal+0x10/0x10 [ 284.461678][T14669] arch_do_signal_or_restart+0x91/0x7a0 [ 284.461697][T14669] ? __sys_connect+0xe4/0x170 [ 284.461714][T14669] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 284.461734][T14669] ? xfd_validate_state+0x129/0x190 [ 284.461749][T14669] exit_to_user_mode_loop+0x86/0x4a0 [ 284.461764][T14669] do_syscall_64+0x67c/0xf80 [ 284.461777][T14669] ? clear_bhb_loop+0x40/0x90 [ 284.461792][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.461806][T14669] RIP: 0033:0x7f23fbf9c819 [ 284.461817][T14669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.461830][T14669] RSP: 002b:00007f23fce3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 284.461844][T14669] RAX: 0000000000280000 RBX: 00007f23fc215fa0 RCX: 00007f23fbf9c819 [ 284.461853][T14669] RDX: 00000000ffffff5d RSI: 0000200000000900 RDI: 0000000000000003 [ 284.461861][T14669] RBP: 00007f23fc032c91 R08: 0000000000000000 R09: 0000000000000000 [ 284.461870][T14669] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 284.461879][T14669] R13: 00007f23fc216038 R14: 00007f23fc215fa0 R15: 00007ffee45572f8 [ 284.461892][T14669] [ 284.808335][T14707] xt_hashlimit: size too large, truncated to 1048576 [ 285.031731][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 285.131746][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 285.181777][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 285.188027][ T9] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 285.196314][ T9] usb 7-1: config 0 has no interface number 0 [ 285.202687][ T9] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.213743][ T9] usb 7-1: config 0 interface 85 has no altsetting 0 [ 285.221991][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 285.231011][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.239233][ T9] usb 7-1: Product: syz [ 285.243435][ T9] usb 7-1: Manufacturer: syz [ 285.248021][ T9] usb 7-1: SerialNumber: syz [ 285.253568][ T9] usb 7-1: config 0 descriptor?? [ 285.281730][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 285.287867][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.298600][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.309553][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.319337][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 285.332220][ T10] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 285.341275][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.350388][ T10] usb 6-1: config 0 descriptor?? [ 285.467163][T14705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.476306][T14705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.760689][ T10] betop 0003:20BC:5500.003C: item fetching failed at offset 1/5 [ 285.768601][ T10] betop 0003:20BC:5500.003C: parse failed [ 285.774473][ T10] betop 0003:20BC:5500.003C: probe with driver betop failed with error -22 [ 285.888061][ T9] appletouch 7-1:0.85: Geyser mode initialized. [ 285.894855][ T9] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input47 [ 285.976792][ T5856] usb 6-1: USB disconnect, device number 54 [ 286.100094][ T9] usb 7-1: USB disconnect, device number 12 [ 286.110235][ T9] appletouch 7-1:0.85: input: appletouch disconnected