last executing test programs: 30.300320911s ago: executing program 0 (id=2405): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400), 0x0, 0x2, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000500)={0x1, r2, r1}) 30.286196951s ago: executing program 0 (id=2406): unshare(0x4020400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x4020400) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000200001) 30.225697592s ago: executing program 0 (id=2407): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0xfffffffe, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c5}, 0x40000d0) 30.161353617s ago: executing program 0 (id=2409): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101081, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x101841, 0x3, 0x8}, 0x18) 30.083930264s ago: executing program 0 (id=2411): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000000)) 29.815695115s ago: executing program 0 (id=2419): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 29.69206676s ago: executing program 32 (id=2419): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 14.706254203s ago: executing program 2 (id=2624): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8034, 0x2, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) 14.543806672s ago: executing program 2 (id=2626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r1, 0x917, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x3c}}, 0x8800) 14.416648343s ago: executing program 2 (id=2628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e51322ee9764"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40814) 14.286983722s ago: executing program 2 (id=2630): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x276) 14.135844425s ago: executing program 2 (id=2632): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) 13.226733436s ago: executing program 2 (id=2641): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400cc04}, 0x0) 12.833376178s ago: executing program 33 (id=2641): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400cc04}, 0x0) 7.804014517s ago: executing program 6 (id=2643): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) 6.647859852s ago: executing program 6 (id=2643): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) 5.351372183s ago: executing program 6 (id=2643): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) 4.408787864s ago: executing program 3 (id=2734): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x38, r1, 0x1, 0xfffffffd, 0xfffffffd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x38}}, 0x0) 4.048942061s ago: executing program 3 (id=2739): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 3.924606106s ago: executing program 3 (id=2740): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 3.832159553s ago: executing program 6 (id=2643): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) 2.858011773s ago: executing program 1 (id=2741): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.857146451s ago: executing program 3 (id=2742): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x16) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000440), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 2.693871504s ago: executing program 3 (id=2746): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(0x0, 0x0, 0x0) 2.642302318s ago: executing program 1 (id=2747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) 2.607735374s ago: executing program 4 (id=2748): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x2f) ptrace(0x4208, r0) 2.289279064s ago: executing program 1 (id=2752): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket(0xa, 0x800, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)="e9", 0x1}], 0x1) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 2.196385452s ago: executing program 4 (id=2753): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 1.988314321s ago: executing program 4 (id=2755): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FIBMAP(r0, 0x2283, &(0x7f0000000040)=0x85) 1.811581615s ago: executing program 4 (id=2756): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mountstats\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1.681197241s ago: executing program 4 (id=2757): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) 1.673097149s ago: executing program 6 (id=2643): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) 560.836959ms ago: executing program 5 (id=2758): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) listen(r0, 0x9) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 552.520358ms ago: executing program 1 (id=2759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d04, 0x0, 0x5}]}) 552.107111ms ago: executing program 3 (id=2760): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa04a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 551.592792ms ago: executing program 4 (id=2761): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 434.040804ms ago: executing program 5 (id=2762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x88}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x50}}, 0x0) 301.402408ms ago: executing program 5 (id=2763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 300.307971ms ago: executing program 1 (id=2764): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x27) 268.700114ms ago: executing program 5 (id=2765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2, r0}, 0x4) 181.65916ms ago: executing program 5 (id=2766): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000040000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 170.586704ms ago: executing program 1 (id=2767): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 73.024991ms ago: executing program 6 (id=2643): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) 0s ago: executing program 5 (id=2768): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x17, 0x7, "7b2c746f0e7d20"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="011205"], 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): evice found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 157.212007][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 157.229276][ T5810] usb 5-1: Product: syz [ 157.237227][ T5810] usb 5-1: Manufacturer: syz [ 157.244234][ T5810] usb 5-1: SerialNumber: syz [ 157.254860][ T5810] usb 5-1: config 0 descriptor?? [ 157.261399][ T9645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.351307][ T29] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 157.371447][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 157.371463][ T30] audit: type=1400 audit(1775906294.851:497): avc: denied { watch } for pid=9668 comm="syz.2.1693" path="/332/file1" dev="tmpfs" ino=1696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.418417][ T30] audit: type=1400 audit(1775906294.891:498): avc: denied { watch_sb watch_reads } for pid=9668 comm="syz.2.1693" path="/332/file1" dev="tmpfs" ino=1696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 157.534613][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1695'. [ 157.535230][ T29] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 157.551856][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1695'. [ 157.570441][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.570716][ T9676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1695'. [ 157.581638][ T5810] usb 5-1: USB disconnect, device number 19 [ 157.595349][ T29] usb 2-1: Product: syz [ 157.599537][ T29] usb 2-1: Manufacturer: syz [ 157.611186][ T29] usb 2-1: SerialNumber: syz [ 157.622368][ T29] usb 2-1: config 0 descriptor?? [ 157.911875][ T5873] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 157.941543][ T5866] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 158.046958][ T29] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 158.056611][ T29] usb 2-1: Firmware version (0.0) predates our first public release. [ 158.064962][ T29] usb 2-1: Please update to version 0.2 or newer [ 158.092778][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 158.105054][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 158.131374][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 158.151367][ T5866] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 158.159796][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.178099][ T5866] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 158.200467][ T5866] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 158.209235][ T5866] usb 1-1: Manufacturer: syz [ 158.214702][ T5873] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 158.224839][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.237040][ T5866] usb 1-1: config 0 descriptor?? [ 158.242372][ T5873] usb 4-1: Product: syz [ 158.246877][ T5873] usb 4-1: Manufacturer: syz [ 158.257248][ T5873] usb 4-1: SerialNumber: syz [ 158.279658][ T5873] usb 4-1: config 0 descriptor?? [ 158.285990][ T9680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.293410][ T9680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.310700][ T29] usb 2-1: USB disconnect, device number 27 [ 158.326684][ T5873] usb 4-1: ucan: probing device on interface #0 [ 158.333554][ T5866] rc_core: IR keymap rc-hauppauge not found [ 158.339468][ T5866] Registered IR keymap rc-empty [ 158.366778][ T5866] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 158.389577][ T5866] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 158.437106][ T5933] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 158.506039][ T792] usb 1-1: USB disconnect, device number 21 [ 158.595199][ T5933] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 158.605622][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.614657][ T5933] usb 3-1: Product: syz [ 158.618935][ T5933] usb 3-1: Manufacturer: syz [ 158.626546][ T5933] usb 3-1: SerialNumber: syz [ 158.642076][ T5933] usb 3-1: config 0 descriptor?? [ 158.648908][ T5933] ch341 3-1:0.0: ch341-uart converter detected [ 158.933588][ T5873] ucan 4-1:0.0 can0: registered device [ 158.985374][ T30] audit: type=1400 audit(1775906296.461:499): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 159.134420][ T5873] ucan 4-1:0.0 can0: firmware string: unknown [ 159.162469][ T5873] usb 4-1: USB disconnect, device number 18 [ 159.252170][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 159.295164][ T9735] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 159.322749][ T9735] macvlan3: entered allmulticast mode [ 159.331291][ T9735] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 159.449862][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1724'. [ 159.469382][ T5933] usb 3-1: failed to send control message: -71 [ 159.485597][ T5933] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 159.505145][ T5933] usb 3-1: USB disconnect, device number 13 [ 159.526272][ T5933] ch341 3-1:0.0: device disconnected [ 159.743509][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 160.155016][ T9778] usb usb8: usbfs: process 9778 (syz.3.1741) did not claim interface 0 before use [ 160.229943][ T9781] wireguard: wireguard0: Could not create IPv6 socket [ 160.341757][ T5873] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.483461][ T1100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 160.511343][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 160.525640][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.548110][ T5873] usb 3-1: config 0 has no interfaces? [ 160.563146][ T5873] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 160.585799][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.594633][ T5873] usb 3-1: Product: syz [ 160.605393][ T5873] usb 3-1: Manufacturer: syz [ 160.610096][ T5873] usb 3-1: SerialNumber: syz [ 160.622052][ T5873] usb 3-1: config 0 descriptor?? [ 160.818833][ T30] audit: type=1400 audit(1775906298.291:500): avc: denied { execute } for pid=9814 comm="syz.4.1756" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 160.857406][ T5873] usb 3-1: USB disconnect, device number 14 [ 161.022077][ T792] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 161.107444][ T30] audit: type=1326 audit(1775906298.581:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 161.152486][ T30] audit: type=1326 audit(1775906298.581:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 161.176557][ T30] audit: type=1326 audit(1775906298.591:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 161.204733][ T30] audit: type=1326 audit(1775906298.591:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 161.236252][ T30] audit: type=1326 audit(1775906298.591:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 161.262771][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.274465][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.285335][ T792] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 161.292740][ T30] audit: type=1326 audit(1775906298.591:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 161.295549][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.335676][ T792] usb 1-1: config 0 descriptor?? [ 161.789360][ T792] isku 0003:1E7D:319C.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 161.971334][ T5866] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 161.975006][ T792] isku 0003:1E7D:319C.0016: couldn't init struct isku_device [ 162.003278][ T792] isku 0003:1E7D:319C.0016: couldn't install keyboard [ 162.025220][ T792] isku 0003:1E7D:319C.0016: probe with driver isku failed with error -5 [ 162.081846][ T9876] bond0: Device is already in use. [ 162.133067][ T5866] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 162.145837][ T5866] usb 4-1: config 0 has no interface number 0 [ 162.163599][ T5866] usb 4-1: too many endpoints for config 0 interface 66 altsetting 71: 66, using maximum allowed: 30 [ 162.191715][ T5866] usb 4-1: config 0 interface 66 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 162.221143][ T5866] usb 4-1: config 0 interface 66 has no altsetting 0 [ 162.234185][ T5866] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 162.245368][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.263665][ T5866] usb 4-1: config 0 descriptor?? [ 162.273045][ T5859] usb 1-1: USB disconnect, device number 22 [ 162.273681][ T5866] cp210x 4-1:0.66: cp210x converter detected [ 162.647679][ T9892] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 162.656331][ T9892] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1790'. [ 162.666404][ T9894] Invalid ELF header len 7 [ 162.668230][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 162.668244][ T30] audit: type=1400 audit(1775906300.141:511): avc: denied { module_load } for pid=9893 comm="syz.4.1791" path="/400/bus" dev="tmpfs" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 162.678041][ T9894] Invalid ELF header len 7 [ 162.701863][ T5859] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.716371][ T5866] cp210x 4-1:0.66: failed to get vendor val 0x000e size 3: -71 [ 162.728192][ T5866] usb 4-1: cp210x converter now attached to ttyUSB0 [ 162.744182][ T5866] usb 4-1: USB disconnect, device number 19 [ 162.756292][ T5866] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 162.765402][ T5866] cp210x 4-1:0.66: device disconnected [ 162.861818][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 162.868692][ T5859] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 162.881964][ T5859] usb 3-1: config 0 has no interface number 0 [ 162.888132][ T5859] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 162.899546][ T5859] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 162.943757][ T5859] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 162.961804][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.980081][ T5859] usb 3-1: Product: syz [ 162.985022][ T5859] usb 3-1: Manufacturer: syz [ 162.989628][ T5859] usb 3-1: SerialNumber: syz [ 163.015632][ T5859] usb 3-1: config 0 descriptor?? [ 163.021951][ T9886] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.031472][ T9886] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.045551][ T5873] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 163.202794][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 163.216084][ T5873] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 163.231424][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.245692][ T30] audit: type=1326 audit(1775906300.721:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 163.251150][ T5873] usb 2-1: Product: syz [ 163.292081][ T9886] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.306678][ T9886] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.311248][ T5873] usb 2-1: Manufacturer: syz [ 163.329097][ T30] audit: type=1326 audit(1775906300.751:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 163.331270][ T5873] usb 2-1: SerialNumber: syz [ 163.369898][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1797'. [ 163.382529][ T5873] usb 2-1: config 0 descriptor?? [ 163.393045][ T30] audit: type=1326 audit(1775906300.751:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 163.419064][ T5873] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 163.422964][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 163.426373][ T30] audit: type=1326 audit(1775906300.751:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 163.452341][ T9912] netlink: 'syz.0.1799': attribute type 6 has an invalid length. [ 163.458832][ T30] audit: type=1326 audit(1775906300.751:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 163.494224][ T30] audit: type=1326 audit(1775906300.751:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 163.518061][ T30] audit: type=1326 audit(1775906300.751:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 163.545141][ T30] audit: type=1326 audit(1775906300.751:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 163.570051][ T5859] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 163.584770][ T30] audit: type=1326 audit(1775906300.751:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fae3dd9c819 code=0x7ffc0000 [ 163.641931][ T5933] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 163.770285][ T5859] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 203 [ 163.802578][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 163.813320][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.825356][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.836398][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.850183][ T5933] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.860039][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.880538][ T5933] usb 4-1: config 0 descriptor?? [ 163.978428][ T29] usb 3-1: USB disconnect, device number 15 [ 164.238059][ T5873] gspca_ov534_9: reg_w failed -71 [ 164.301320][ T5866] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 164.317622][ T5933] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 164.330549][ T5933] microsoft 0003:045E:07DA.0017: no inputs found [ 164.338366][ T5933] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 164.474050][ T5866] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.485719][ T5866] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 164.499056][ T5866] usb 1-1: config 1 interface 0 has no altsetting 0 [ 164.506928][ T5866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.531330][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.531952][ T5859] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 164.539379][ T5866] usb 1-1: SerialNumber: syz [ 164.549547][ T5866] hub 1-1:1.0: bad descriptor, ignoring hub [ 164.558145][ T5873] gspca_ov534_9: Unknown sensor 0000 [ 164.558212][ T5873] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 164.585425][ T5866] hub 1-1:1.0: probe with driver hub failed with error -5 [ 164.593911][ T5933] usb 4-1: USB disconnect, device number 20 [ 164.600446][ T5866] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 164.611526][ T5873] usb 2-1: USB disconnect, device number 28 [ 164.744219][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 164.759887][ T5859] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 164.777003][ T5859] usb 5-1: config 0 has no interface number 0 [ 164.779468][ T9933] overlayfs: unescaped trailing colons in lowerdir mount option. [ 164.785422][ T5859] usb 5-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 777 [ 164.808455][ T5859] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 164.816855][ T5866] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 164.827283][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.836757][ T5859] usb 5-1: Product: syz [ 164.849048][ T5859] usb 5-1: Manufacturer: syz [ 164.854536][ T5859] usb 5-1: SerialNumber: syz [ 164.865218][ T5859] usb 5-1: config 0 descriptor?? [ 164.878322][ T9944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 164.892716][ T5866] usb 1-1: USB disconnect, device number 23 [ 164.898425][ T5859] redrat3 5-1:0.83: Couldn't find all endpoints [ 164.933738][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 164.943072][ T9956] Bluetooth: hci5: Frame reassembly failed (-84) [ 165.120934][ T5873] usb 5-1: USB disconnect, device number 20 [ 165.201896][ T29] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 165.363984][ T29] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 165.374093][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.384490][ T29] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.395225][ T29] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.404933][ T29] usb 2-1: Product: syz [ 165.409247][ T29] usb 2-1: Manufacturer: syz [ 165.414831][ T29] usb 2-1: SerialNumber: syz [ 165.422046][ T29] usb 2-1: config 0 descriptor?? [ 165.427693][ T9957] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.439379][ T29] usb 2-1: selecting invalid altsetting 0 [ 165.531694][ T5810] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 165.668989][ T9957] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.683322][ T29] usb 2-1: USB disconnect, device number 29 [ 165.691319][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 165.712427][ T5810] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.720472][ T5810] usb 4-1: config 0 has no interface number 0 [ 165.740808][ T5810] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.756634][ T5810] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.788944][ T5810] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 165.808340][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.831818][ T5810] usb 4-1: config 0 descriptor?? [ 166.054559][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'. [ 166.465313][ T5810] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0018/input/input24 [ 166.563658][ T5810] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0018/input/input25 [ 166.598856][ T5810] uclogic 0003:28BD:0071.0018: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 166.675501][ T5933] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 166.725043][ T5810] usb 4-1: USB disconnect, device number 21 [ 166.854666][ T5933] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 166.865078][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.874352][ T5933] usb 5-1: Product: syz [ 166.878711][ T5933] usb 5-1: Manufacturer: syz [ 166.884147][ T5933] usb 5-1: SerialNumber: syz [ 166.892087][ T5933] usb 5-1: config 0 descriptor?? [ 166.961337][ T5821] Bluetooth: hci5: command 0x1003 tx timeout [ 166.961713][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 167.038439][T10015] netlink: 'syz.0.1846': attribute type 1 has an invalid length. [ 167.048781][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1846'. [ 167.130564][ T5859] usb 5-1: USB disconnect, device number 21 [ 167.206683][T10023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1850'. [ 167.332297][ T5933] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 167.378768][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 167.493335][ T5933] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 167.516690][ T5933] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 167.537376][ T5933] usb 3-1: config 8 has no interface number 0 [ 167.544142][ T5933] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.560839][ T5933] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 167.570647][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.589196][ T5933] usb 3-1: Product: syz [ 167.595707][ T5933] usb 3-1: Manufacturer: syz [ 167.600512][ T5933] usb 3-1: SerialNumber: syz [ 167.628979][T10039] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 167.643438][T10039] block device autoloading is deprecated and will be removed. [ 167.826687][ T5933] usb 3-1: USB disconnect, device number 16 [ 167.901511][ T29] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 167.934648][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 167.934665][ T30] audit: type=1400 audit(1775906305.411:531): avc: denied { write } for pid=5810 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27965 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 167.973968][T10058] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 168.005084][ T30] audit: type=1400 audit(1775906305.481:532): avc: denied { bind } for pid=10057 comm="syz.3.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.083101][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.103582][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.116457][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.136486][ T29] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 168.156018][T10067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.161286][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.202824][ T29] usb 2-1: config 0 descriptor?? [ 168.515516][T10086] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 168.585547][T10088] netem: change failed [ 168.630983][ T29] hid_parser_main: 11 callbacks suppressed [ 168.631007][ T29] hid-rmi 0003:0461:4E72.0019: unknown main item tag 0x2 [ 168.678989][ T29] hid-rmi 0003:0461:4E72.0019: unknown main item tag 0x0 [ 168.709657][ T29] hid-rmi 0003:0461:4E72.0019: unknown main item tag 0x0 [ 168.740456][ T29] hid-rmi 0003:0461:4E72.0019: unbalanced collection at end of report description [ 168.770187][ T29] hid-rmi 0003:0461:4E72.0019: parse failed [ 168.791397][ T29] hid-rmi 0003:0461:4E72.0019: probe with driver hid-rmi failed with error -22 [ 168.826698][ T29] usb 2-1: USB disconnect, device number 30 [ 168.884790][T10101] dummy0: entered promiscuous mode [ 168.890221][T10101] macvlan2: entered promiscuous mode [ 168.906746][T10101] macvlan2: entered allmulticast mode [ 168.914446][T10101] dummy0: entered allmulticast mode [ 169.094635][T10111] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 169.103875][ T5810] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 169.286074][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 169.299825][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.313228][ T5810] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 169.324254][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.337997][ T5810] usb 3-1: config 0 descriptor?? [ 169.458683][T10128] wireguard: wireguard0: Could not create IPv6 socket [ 169.663688][ T30] audit: type=1400 audit(1775906307.141:533): avc: denied { read } for pid=10143 comm="syz.0.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.785465][ T5810] corsair-psu 0003:1B1C:1C0B.001A: unknown main item tag 0x0 [ 169.827948][ T5810] corsair-psu 0003:1B1C:1C0B.001A: unknown main item tag 0x0 [ 169.843061][ T5810] corsair-psu 0003:1B1C:1C0B.001A: unknown main item tag 0x0 [ 169.860375][ T5810] corsair-psu 0003:1B1C:1C0B.001A: unknown main item tag 0x0 [ 169.867668][T10158] program syz.3.1910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.872879][ T5810] corsair-psu 0003:1B1C:1C0B.001A: unknown main item tag 0x0 [ 169.910843][ T30] audit: type=1400 audit(1775906307.381:534): avc: denied { mount } for pid=10162 comm="syz.0.1914" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 169.947521][ T5810] corsair-psu 0003:1B1C:1C0B.001A: unknown main item tag 0x0 [ 169.970166][ T5810] corsair-psu 0003:1B1C:1C0B.001A: unknown main item tag 0x0 [ 169.988539][ T5810] corsair-psu 0003:1B1C:1C0B.001A: hidraw0: USB HID v7f.fd Device [HID 1b1c:1c0b] on usb-dummy_hcd.2-1/input0 [ 170.064023][ T5810] corsair-psu 0003:1B1C:1C0B.001A: unable to initialize device (-38) [ 170.076517][ T6154] udevd[6154]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory [ 170.078377][ T5810] corsair-psu 0003:1B1C:1C0B.001A: probe with driver corsair-psu failed with error -38 [ 170.103786][ T6154] udevd[6154]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 170.112247][ T5810] usb 3-1: USB disconnect, device number 17 [ 170.135221][ T5933] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 170.167488][T10173] wireguard: wireguard0: Could not create IPv6 socket [ 170.184728][ T30] audit: type=1400 audit(1775906307.661:535): avc: denied { read } for pid=5475 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 170.224968][ T5859] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 170.236181][T10177] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 170.312239][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 170.325823][ T5933] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.343213][ T5933] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.361015][ T5933] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 170.379152][ T5933] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 170.396528][ T5859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.411619][ T5933] usb 5-1: Product: syz [ 170.422848][ T5859] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.434088][ T5933] usb 5-1: Manufacturer: syz [ 170.463354][ T5859] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.474767][ T5933] hub 5-1:4.0: USB hub found [ 170.484181][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.493029][ T5859] usb 4-1: SerialNumber: syz [ 170.683714][ T5933] hub 5-1:4.0: 2 ports detected [ 170.716004][ T5859] usb 4-1: 0:2 : does not exist [ 170.830033][ T5859] usb 4-1: USB disconnect, device number 22 [ 170.886980][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.922117][ T5933] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 170.935849][ T5933] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 170.997999][ T5933] usb 5-1: USB disconnect, device number 22 [ 171.087694][ T30] audit: type=1400 audit(1775906308.561:536): avc: denied { bind } for pid=10217 comm="syz.1.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.157488][ T30] audit: type=1400 audit(1775906308.561:537): avc: denied { node_bind } for pid=10217 comm="syz.1.1934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 171.192212][ T5926] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 171.355443][ T5926] usb 1-1: config 246 has an invalid interface number: 166 but max is 0 [ 171.374233][ T5926] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 171.423287][ T5926] usb 1-1: config 246 has no interface number 0 [ 171.429816][ T5926] usb 1-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 171.460293][ T5926] usb 1-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.517762][ T5926] usb 1-1: config 246 interface 166 has no altsetting 0 [ 171.543507][ T5926] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 171.577748][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.616151][ T5926] usb 1-1: Product: syz [ 171.630937][ T5926] usb 1-1: Manufacturer: syz [ 171.654752][ T5926] usb 1-1: SerialNumber: syz [ 171.943598][T10267] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 171.961990][ T5933] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 172.040681][ C0] blk_print_req_error: 97 callbacks suppressed [ 172.040701][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 172.062405][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.072042][ C0] buffer_io_error: 95 callbacks suppressed [ 172.072058][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.086628][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.096255][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 172.104161][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.113750][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 172.121652][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.131243][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 172.139114][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.148696][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 172.156583][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.166158][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 172.174051][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.183634][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 172.199756][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.209476][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.213008][ T5933] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 172.217383][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.228176][ T5933] usb 2-1: config 0 has no interface number 0 [ 172.234971][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 172.235056][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 172.263704][ T5933] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.276653][ T5933] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 172.302400][ T5926] usb 1-1: Invalid number of CPorts: 0 [ 172.307915][ T5926] es2_ap_driver 1-1:246.166: probe with driver es2_ap_driver failed with error -22 [ 172.329541][ T5933] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 172.381830][ T5933] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 172.400545][ T30] audit: type=1326 audit(1775906309.871:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10283 comm="syz.3.1958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58af99c819 code=0x0 [ 172.402054][ T5933] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 172.445220][ T5933] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 172.460905][ T5933] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 172.473021][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.492340][ T5933] usb 2-1: config 0 descriptor?? [ 172.494677][T10289] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1960'. [ 172.498126][T10260] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.515586][T10260] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.530030][ T5933] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 172.538330][ T5810] usb 1-1: USB disconnect, device number 24 [ 172.625950][ T30] audit: type=1400 audit(1775906310.101:539): avc: denied { read } for pid=10294 comm="syz.2.1962" name="mouse0" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 172.787041][ T5810] usb 2-1: USB disconnect, device number 31 [ 172.799037][ T5810] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 173.121849][ T5933] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 173.143012][ T30] audit: type=1400 audit(1775906310.621:540): avc: denied { ioctl } for pid=10310 comm="syz.0.1969" path="socket:[28528]" dev="sockfs" ino=28528 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.285357][ T5933] usb 5-1: unable to get BOS descriptor or descriptor too short [ 173.304026][ T5933] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 173.315446][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.325029][ T5933] usb 5-1: Product: syz [ 173.329264][ T5933] usb 5-1: Manufacturer: syz [ 173.355330][ T5933] usb 5-1: SerialNumber: syz [ 173.702137][ T5810] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 173.831304][ T5873] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 173.852664][ T5810] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 173.863945][ T5810] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 173.874230][ T5810] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 173.885029][ T5810] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.899826][ T5810] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.909134][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.917889][ T5810] usb 3-1: SerialNumber: syz [ 173.925683][T10332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.933007][T10332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.969093][T10336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.983200][ T5933] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 174.002784][ T5873] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 174.014136][ T5873] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 174.026403][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.035927][ T5933] usb 5-1: USB disconnect, device number 23 [ 174.037887][ T5873] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.056021][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 174.067491][ T5873] usb 1-1: Product: syz [ 174.075237][ T5873] usb 1-1: Manufacturer: syz [ 174.082873][ T5873] usb 1-1: SerialNumber: syz [ 174.109315][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.129449][ T5873] usb 1-1: config 0 descriptor?? [ 174.147242][ T5873] hub 1-1:0.0: bad descriptor, ignoring hub [ 174.154478][ T5873] hub 1-1:0.0: probe with driver hub failed with error -5 [ 174.175927][ T5873] usb 1-1: selecting invalid altsetting 0 [ 174.417374][ T30] audit: type=1400 audit(1775906311.891:541): avc: denied { connect } for pid=10339 comm="syz.1.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 174.568419][T10332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.583056][T10332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.806650][ T5810] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 174.834108][ T5810] usb 3-1: USB disconnect, device number 18 [ 174.946329][T10369] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1996'. [ 175.062980][T10334] usb 1-1: reset high-speed USB device number 25 using dummy_hcd [ 175.225225][T10334] usb 1-1: device firmware changed [ 175.235142][ T5873] usb 1-1: USB disconnect, device number 25 [ 175.401487][ T5873] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 175.484570][ T30] audit: type=1400 audit(1775906312.961:542): avc: denied { setopt } for pid=10386 comm="syz.3.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.505725][ T30] audit: type=1400 audit(1775906312.981:543): avc: denied { bind } for pid=10386 comm="syz.3.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.578206][ T5873] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 175.605515][ T5873] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 175.623583][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 175.654818][ T5873] usb 1-1: string descriptor 0 read error: -22 [ 175.670821][ T5873] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 175.684579][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 175.697525][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2009'. [ 175.698006][ T5873] usb 1-1: config 0 descriptor?? [ 175.711656][T10397] netlink: 'syz.3.2009': attribute type 18 has an invalid length. [ 175.719666][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2009'. [ 175.746127][ T5873] hub 1-1:0.0: bad descriptor, ignoring hub [ 175.755557][ T5873] hub 1-1:0.0: probe with driver hub failed with error -5 [ 175.769296][ T5873] usb 1-1: selecting invalid altsetting 0 [ 176.072474][ T5926] usb 1-1: USB disconnect, device number 26 [ 176.192912][ T5810] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 176.194532][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'. [ 176.353865][ T5810] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 176.363108][ T5810] usb 3-1: config 0 has no interface number 0 [ 176.369606][ T5810] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 176.383278][ T5810] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 176.388406][T10434] input: syz0 as /devices/virtual/input/input26 [ 176.401331][ T5810] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 176.413711][ T5810] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 176.426381][ T5810] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 176.437908][ T5810] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 176.455054][ T5810] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 176.466685][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.478073][ T5810] usb 3-1: config 0 descriptor?? [ 176.483303][ T5873] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 176.493822][T10408] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 176.501086][T10408] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 176.525404][ T5810] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 176.653173][ T5873] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 176.671831][ T5873] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.685325][ T5873] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 176.702225][ T30] audit: type=1400 audit(1775906314.171:544): avc: denied { getopt } for pid=10443 comm="syz.4.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 176.721740][ T5926] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 176.741348][ T5873] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.750452][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 176.771265][ T5873] usb 2-1: SerialNumber: syz [ 176.777108][ T5859] usb 3-1: USB disconnect, device number 19 [ 176.781166][T10408] ldusb 3-1:0.55: Couldn't submit interrupt_out_urb -19 [ 176.783612][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 176.817820][ T5859] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 176.871779][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 176.882886][ T5926] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 176.892783][ T5926] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 176.908162][ T5926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 176.920436][ T5926] usb 4-1: config 1 has no interface number 0 [ 176.927444][ T5926] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.940128][ T5926] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 176.954184][ T5926] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 176.964503][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.997984][ T5926] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 177.047255][ T5873] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 177.071159][ T5873] usb 2-1: USB disconnect, device number 32 [ 177.223464][ T5926] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 177.340128][ T30] audit: type=1400 audit(1775906314.811:545): avc: denied { create } for pid=10467 comm="syz.4.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 177.381396][ T30] audit: type=1400 audit(1775906314.851:546): avc: denied { write } for pid=10467 comm="syz.4.2043" path="socket:[30033]" dev="sockfs" ino=30033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 177.470611][T10474] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2046'. [ 177.479922][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2046'. [ 177.691421][ T5873] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 177.692503][ T5859] usb 4-1: USB disconnect, device number 23 [ 177.726378][ T5859] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 177.851470][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 177.862895][ T5873] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 177.871085][ T5873] usb 3-1: config 0 has no interface number 0 [ 177.891362][ T5873] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 177.911256][ T5873] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.931677][ T5873] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.933996][T10470] nbd2: detected capacity change from 0 to 128 [ 177.951323][ T5873] usb 3-1: config 0 interface 196 has no altsetting 0 [ 177.960021][ T5873] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 177.971115][ T5821] block nbd2: Receive control failed (result -104) [ 177.979033][ T5818] block nbd2: Receive control failed (result -32) [ 177.988833][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.011266][ T5873] usb 3-1: Product: syz [ 178.015470][ T5873] usb 3-1: Manufacturer: syz [ 178.020070][ T5873] usb 3-1: SerialNumber: syz [ 178.026463][ T30] audit: type=1400 audit(1775906315.501:547): avc: denied { write } for pid=10483 comm="syz.0.2051" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.026736][T10484] random: crng reseeded on system resumption [ 178.062014][ T5873] usb 3-1: config 0 descriptor?? [ 178.067552][T10472] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.076289][ T30] audit: type=1400 audit(1775906315.501:548): avc: denied { open } for pid=10483 comm="syz.0.2051" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.522446][ T5873] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 178.547168][ T5873] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 178.700445][ T30] audit: type=1326 audit(1775906316.171:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.1.2063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa999b9c819 code=0x0 [ 178.772408][ T5810] usb 3-1: USB disconnect, device number 20 [ 178.919073][ T5873] kernel write not supported for file /sequencer2 (pid: 5873 comm: kworker/1:5) [ 179.141865][ T5859] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 179.291894][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 179.307575][ T5859] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.324296][T10537] 9p: Invalid uid '0x00000000ffffffff' [ 179.334330][ T5859] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 179.344761][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.354379][ T5859] usb 1-1: Product: syz [ 179.359268][ T5859] usb 1-1: Manufacturer: syz [ 179.365025][ T5859] usb 1-1: SerialNumber: syz [ 179.595720][ T5859] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 179.608680][ T5859] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 179.665249][ T5859] usb 1-1: USB disconnect, device number 27 [ 179.731300][ T792] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 179.821321][ T5810] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 179.893056][ T792] usb 5-1: Using ep0 maxpacket: 32 [ 179.906872][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 179.918818][T10560] bond0: entered promiscuous mode [ 179.925393][T10560] bond_slave_0: entered promiscuous mode [ 179.932469][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 179.944244][T10560] bond_slave_1: entered promiscuous mode [ 179.952520][T10560] batadv0: entered promiscuous mode [ 179.969876][T10560] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 179.978876][ T792] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 179.993039][ T792] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 179.998656][ T5810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.002353][ T792] usb 5-1: Product: syz [ 180.016425][T10560] bond0: left promiscuous mode [ 180.018242][ T792] usb 5-1: SerialNumber: syz [ 180.031963][T10560] bond_slave_0: left promiscuous mode [ 180.037558][T10560] bond_slave_1: left promiscuous mode [ 180.043932][ T5810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.046994][ T792] usb 5-1: config 0 descriptor?? [ 180.059542][ T5810] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 180.069542][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 180.088628][ T5810] usb 2-1: SerialNumber: syz [ 180.097823][T10560] batadv0: left promiscuous mode [ 180.118182][ T5810] usb 2-1: 0:2 : does not exist [ 180.407921][ T792] usb 5-1: USB disconnect, device number 24 [ 180.524801][ T5810] usb 2-1: USB disconnect, device number 33 [ 180.642015][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 180.648628][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 180.655177][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 180.655216][ T5130] Bluetooth: hci0: command 0x0406 tx timeout [ 181.007444][T10606] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 181.134737][T10611] IPVS: persistence engine module ip_vs_pe_ not found [ 181.371334][ T30] audit: type=1400 audit(1775906318.841:550): avc: denied { connect } for pid=10630 comm="syz.3.2119" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.432710][ T30] audit: type=1400 audit(1775906318.901:551): avc: denied { listen } for pid=10634 comm="syz.1.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.448600][ T5926] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 181.477157][ T30] audit: type=1400 audit(1775906318.951:552): avc: denied { load_policy } for pid=10632 comm="syz.4.2118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 181.544715][T10633] SELinux: ebitmap: truncated map [ 181.595584][T10633] SELinux: failed to load policy [ 181.616370][ T5926] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 181.635145][ T5926] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 181.663149][ T5926] usb 3-1: config 0 has no interface number 0 [ 181.682416][ T5926] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 181.703622][ T5926] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.724990][ T5926] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 181.735870][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.757762][ T5926] usb 3-1: config 0 descriptor?? [ 182.354182][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'. [ 182.406447][ T5926] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input27 [ 182.443109][ T5926] input: failed to attach handler kbd to device input27, error: -5 [ 182.663507][ T5926] usb 3-1: USB disconnect, device number 21 [ 183.081273][ T5873] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 183.582659][ T5873] usb 5-1: config 0 has no interfaces? [ 183.588190][ T5873] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 183.605964][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.624826][ T5873] usb 5-1: config 0 descriptor?? [ 183.630603][ T5866] kernel read not supported for file /media4 (pid: 5866 comm: kworker/1:4) [ 183.878674][ T5873] usb 5-1: USB disconnect, device number 25 [ 184.532877][T10736] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 184.581800][ T30] audit: type=1400 audit(1775906322.051:553): avc: denied { bind } for pid=10739 comm="syz.0.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 184.672955][ T30] audit: type=1400 audit(1775906322.151:554): avc: denied { watch watch_reads } for pid=10743 comm="syz.0.2170" path="pipe:[4754]" dev="pipefs" ino=4754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 184.899865][T10757] ubi31: attaching mtd0 [ 184.922503][T10757] ubi31 error: ubi_attach_mtd_dev: bad VID header (142606336) or data offsets (142606400) [ 185.151332][ T5873] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 185.193326][ T30] audit: type=1400 audit(1775906322.661:555): avc: denied { setcheckreqprot } for pid=10768 comm="syz.2.2182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 185.321335][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 185.346748][ T5873] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.380554][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.399502][ T5873] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 185.416734][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.446314][ T5873] usb 4-1: config 0 descriptor?? [ 185.639376][T10796] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2195'. [ 185.884433][ T5873] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 185.911292][ T5866] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 186.082380][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 186.090520][ T5866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.111120][ T5866] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 186.130999][ T5866] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 186.151879][ T5866] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 186.181380][ T5866] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 186.214819][ T5866] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 186.232950][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.251557][ T5866] usb 5-1: Product: syz [ 186.255804][ T5866] usb 5-1: Manufacturer: syz [ 186.260425][ T5866] usb 5-1: SerialNumber: syz [ 186.314235][ T5926] usb 4-1: USB disconnect, device number 24 [ 186.502803][ T5866] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 186.512568][ T5866] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 186.522880][ T5866] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 186.532507][ T5866] usb 5-1: 0:2 : does not exist [ 186.586399][ T5866] usb 5-1: USB disconnect, device number 26 [ 186.611443][ T5810] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 186.664482][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.782506][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 186.794633][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.821980][ T5810] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 186.831076][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.839634][T10838] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2213'. [ 186.850673][ T5810] usb 2-1: config 0 descriptor?? [ 186.919306][T10842] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 187.223087][ T5866] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 187.282495][ T5810] hid_parser_main: 225 callbacks suppressed [ 187.282524][ T5810] hid-alps 0003:044E:120C.001C: unknown main item tag 0x0 [ 187.296712][ T5810] hid-alps 0003:044E:120C.001C: unknown main item tag 0x0 [ 187.305838][ T5810] hid-alps 0003:044E:120C.001C: unknown main item tag 0x0 [ 187.313971][ T5810] hid-alps 0003:044E:120C.001C: unknown main item tag 0x0 [ 187.321884][ T5810] hid-alps 0003:044E:120C.001C: unknown main item tag 0x0 [ 187.329203][ T5810] hid-alps 0003:044E:120C.001C: unknown main item tag 0x0 [ 187.336854][ T5810] hid-alps 0003:044E:120C.001C: unknown main item tag 0x0 [ 187.345675][ T5810] hid-alps 0003:044E:120C.001C: unknown main item tag 0x0 [ 187.354515][ T5810] hid-alps 0003:044E:120C.001C: unknown main item tag 0x0 [ 187.359025][T10863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.363620][ T5810] hid-alps 0003:044E:120C.001C: unknown main item tag 0x0 [ 187.387424][ T5810] hid-alps 0003:044E:120C.001C: hidraw0: USB HID v7f.fd Device [HID 044e:120c] on usb-dummy_hcd.1-1/input0 [ 187.401144][ T5866] usb 4-1: config 0 has no interfaces? [ 187.408421][ T5866] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 187.422684][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.440803][ T5866] usb 4-1: config 0 descriptor?? [ 187.483101][ T792] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 187.497198][ T5859] usb 2-1: USB disconnect, device number 34 [ 187.663305][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 187.675376][ T792] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.681356][ T5866] usb 4-1: USB disconnect, device number 25 [ 187.689385][ T792] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 187.716113][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.726528][ T792] usb 3-1: config 0 descriptor?? [ 188.060695][ T30] audit: type=1400 audit(1775906325.531:556): avc: denied { map } for pid=10873 comm="syz.1.2228" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.084822][ T30] audit: type=1400 audit(1775906325.531:557): avc: denied { execute } for pid=10873 comm="syz.1.2228" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.141151][ T792] hid (null): nested delimiters [ 188.166998][ T792] hid-alps 0003:044E:120C.001D: nested delimiters [ 188.178309][ T792] hid-alps 0003:044E:120C.001D: item 0 2 2 10 parsing failed [ 188.187060][ T792] hid-alps 0003:044E:120C.001D: parse failed [ 188.193974][ T792] hid-alps 0003:044E:120C.001D: probe with driver hid-alps failed with error -22 [ 188.210713][ T30] audit: type=1400 audit(1775906325.691:558): avc: denied { name_bind } for pid=10881 comm="syz.1.2232" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 188.389354][ T792] usb 3-1: USB disconnect, device number 22 [ 188.646606][ T29] hid-generic 0005:15C2:0006.001E: item fetching failed at offset 0/1 [ 188.665384][ T29] hid-generic 0005:15C2:0006.001E: probe with driver hid-generic failed with error -22 [ 188.718919][T10911] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2245'. [ 188.791337][ T5866] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 188.943211][ T5866] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.962143][ T5819] Bluetooth: hci4: command tx timeout [ 188.965670][ T5866] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 188.968572][T10929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.984205][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.984232][ T5866] usb 5-1: Product: syz [ 188.984245][ T5866] usb 5-1: Manufacturer: syz [ 188.984259][ T5866] usb 5-1: SerialNumber: syz [ 188.989303][ T5866] usb 5-1: selecting invalid altsetting 1 [ 189.026826][ T5866] usb 5-1: unit 6 not found! [ 189.069410][T10935] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2256'. [ 189.078881][T10935] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2256'. [ 189.800388][ T5866] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 189.822519][ T5866] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 189.848015][ T5866] usb 5-1: selecting invalid altsetting 1 [ 189.860210][ T5866] usb 5-1: unit 6 not found! [ 189.878624][ T5866] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 189.893127][ T5866] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 189.929001][ T5866] usb 5-1: selecting invalid altsetting 1 [ 189.937478][ T5866] usb 5-1: unit 6 not found! [ 189.943888][ T5866] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 190.008969][ T5859] kernel read not supported for file /radio0 (pid: 5859 comm: kworker/0:3) [ 190.014527][ T5866] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 190.041437][ T29] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 190.069526][ T5866] usb 5-1: USB disconnect, device number 27 [ 190.107009][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.152489][T10979] erspan0: entered promiscuous mode [ 190.186246][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'. [ 190.196040][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'. [ 190.232701][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 190.242443][ T29] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.255726][ T29] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.265659][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.273335][ T29] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 190.283273][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.315846][ T29] usb 2-1: config 0 descriptor?? [ 190.352531][ T792] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 190.513223][ T792] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 190.523140][ T792] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 190.542078][ T792] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 190.551003][ T792] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 190.570359][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 190.584970][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 190.616554][ T792] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 190.654829][ T792] usb 1-1: string descriptor 0 read error: -22 [ 190.666151][ T792] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 190.697060][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.722053][ T792] usb 1-1: config 0 descriptor?? [ 190.732822][ T792] hub 1-1:0.0: bad descriptor, ignoring hub [ 190.739562][ T792] hub 1-1:0.0: probe with driver hub failed with error -5 [ 190.748533][T10969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.757966][T10969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.774439][ T792] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28 [ 190.851625][ T29] semitek 0003:1EA7:0907.001F: hidraw0: USB HID v7f.fd Device [HID 1ea7:0907] on usb-dummy_hcd.1-1/input0 [ 190.961861][ T5859] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 191.059036][ T792] usb 2-1: USB disconnect, device number 35 [ 191.098041][ T5926] usb 1-1: USB disconnect, device number 28 [ 191.138970][ T5859] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 191.156628][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.174883][ T5859] usb 5-1: config 0 descriptor?? [ 191.193528][ T5859] cp210x 5-1:0.0: cp210x converter detected [ 191.510812][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 191.620727][ T5859] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 191.658634][ T5859] usb 5-1: cp210x converter now attached to ttyUSB0 [ 191.847364][ T5873] usb 5-1: USB disconnect, device number 28 [ 191.871588][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 191.900414][ T5873] cp210x 5-1:0.0: device disconnected [ 192.121903][ T792] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 192.171651][ T5859] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 192.283852][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.295183][ T792] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 192.304786][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.314849][ T792] usb 3-1: config 0 descriptor?? [ 192.331626][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 192.337999][ T5859] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 192.346777][ T5859] usb 1-1: config 0 has no interface number 0 [ 192.355085][ T5859] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 192.364941][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.373743][ T5859] usb 1-1: Product: syz [ 192.378005][ T5859] usb 1-1: Manufacturer: syz [ 192.383350][ T5859] usb 1-1: SerialNumber: syz [ 192.393287][ T5859] usb 1-1: config 0 descriptor?? [ 192.406785][ T5859] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 192.513585][ T30] audit: type=1400 audit(1775906329.991:559): avc: denied { setopt } for pid=11081 comm="syz.4.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 192.558560][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2320'. [ 192.568928][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2320'. [ 192.617828][ T5859] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 192.633575][ T5859] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 192.730457][ T792] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 192.744366][ T792] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0020/input/input29 [ 192.862628][ T792] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 193.014613][ C0] keytouch 0003:0926:3333.0020: Event data for report 0 was too short (8 vs 2) [ 193.033858][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 193.042465][ T792] usb 1-1: USB disconnect, device number 29 [ 193.064859][ T792] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 193.092941][ T792] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 193.110820][ T792] quatech2 1-1:0.51: device disconnected [ 193.120059][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2326'. [ 193.162178][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2327'. [ 193.218549][ T29] usb 3-1: USB disconnect, device number 23 [ 193.343992][ T30] audit: type=1400 audit(1775906330.821:560): avc: denied { setopt } for pid=11097 comm="syz.1.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 193.730076][T11117] SELinux: ebitmap: truncated map [ 193.813321][T11117] SELinux: failed to load policy [ 193.929311][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.354163][T11153] netlink: 'syz.2.2351': attribute type 2 has an invalid length. [ 194.363148][T11153] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2351'. [ 194.651343][ T5866] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 194.822732][ T5866] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.832888][ T5866] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 194.844765][ T5866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.854180][ T5866] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 194.876050][ T5866] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 194.900985][ T5866] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.910616][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.921282][ T5866] usb 2-1: Product: syz [ 194.925542][ T5866] usb 2-1: Manufacturer: syz [ 194.943655][ T5866] cdc_wdm 2-1:1.0: skipping garbage [ 194.948904][ T5866] cdc_wdm 2-1:1.0: skipping garbage [ 194.970827][ T5866] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 194.984360][ T5866] cdc_wdm 2-1:1.0: Unknown control protocol [ 195.185868][ T5866] usb 2-1: USB disconnect, device number 36 [ 195.273270][ T792] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 195.293821][T11197] vivid-004: disconnect [ 195.299718][T11196] vivid-004: reconnect [ 195.434641][ T792] usb 1-1: Using ep0 maxpacket: 8 [ 195.441919][ T792] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 195.450198][ T792] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.475027][ T792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.506547][ T792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.517510][ T792] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.553300][ T792] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 195.571471][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.616371][T11211] SELinux: ebitmap: truncated map [ 195.645280][T11211] SELinux: failed to load policy [ 195.771772][ T5859] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 195.809876][ T792] usb 1-1: usb_control_msg returned -32 [ 195.822726][ T5873] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 195.824275][ T792] usbtmc 1-1:16.0: can't read capabilities [ 195.864169][ T792] usb 1-1: USB disconnect, device number 30 [ 195.931897][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 195.943960][ T5859] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 195.952905][ T5859] usb 5-1: config 0 has no interface number 0 [ 195.959026][ T5859] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.970133][ T5859] usb 5-1: config 0 interface 85 has no altsetting 0 [ 195.979286][ T5859] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 195.989281][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.997947][ T5859] usb 5-1: Product: syz [ 196.002789][ T5859] usb 5-1: Manufacturer: syz [ 196.007713][ T5859] usb 5-1: SerialNumber: syz [ 196.013090][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.025659][ T5859] usb 5-1: config 0 descriptor?? [ 196.026928][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.041218][ T5873] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 196.050263][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.067995][ T5873] usb 3-1: config 0 descriptor?? [ 196.151328][ T29] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 196.301356][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 196.308137][ T29] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.320944][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.333238][ T29] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 196.343003][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.363826][ T29] usb 4-1: config 0 descriptor?? [ 196.486369][ T792] kernel read not supported for file /comedi4 (pid: 792 comm: kworker/0:2) [ 196.493269][ T5873] pyra 0003:1E7D:2CF6.0021: unbalanced delimiter at end of report description [ 196.522195][ T5873] pyra 0003:1E7D:2CF6.0021: parse failed [ 196.529214][ T5873] pyra 0003:1E7D:2CF6.0021: probe with driver pyra failed with error -22 [ 196.630927][ T30] audit: type=1800 audit(1775906334.101:561): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2397" name="bus" dev="tmpfs" ino=2181 res=0 errno=0 [ 196.645847][ T5859] appletouch 5-1:0.85: Geyser mode initialized. [ 196.678214][ T5859] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input30 [ 196.721975][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2398'. [ 196.745407][ T5926] usb 3-1: USB disconnect, device number 24 [ 196.786021][ T29] mcp2221 0003:04D8:00DD.0022: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 196.926274][ T5926] usb 5-1: USB disconnect, device number 29 [ 196.969680][ T5926] appletouch 5-1:0.85: input: appletouch disconnected [ 197.019568][ T30] audit: type=1400 audit(1775906334.491:562): avc: denied { attach_queue } for pid=11256 comm="syz.1.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 197.220786][ T5926] usb 4-1: USB disconnect, device number 26 [ 197.964431][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.974361][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.984395][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.012506][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.020527][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.079309][T11301] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 198.175464][ T30] audit: type=1400 audit(1775906335.651:563): avc: denied { listen } for pid=11313 comm="syz.1.2430" path=2F3433332FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 198.534608][T11301] chnl_net:caif_netlink_parms(): no params data found [ 198.851275][ T5810] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 198.886697][T11301] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.935622][T11301] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.956724][T11301] bridge_slave_0: entered allmulticast mode [ 198.973688][T11301] bridge_slave_0: entered promiscuous mode [ 198.992207][T11301] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.999374][T11301] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.027024][T11301] bridge_slave_1: entered allmulticast mode [ 199.073286][T11301] bridge_slave_1: entered promiscuous mode [ 199.085214][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 199.116502][ T5810] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 199.138234][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.189970][ T5810] usb 5-1: config 0 descriptor?? [ 199.226103][T11362] netlink: 'syz.2.2443': attribute type 3 has an invalid length. [ 199.252204][T11362] netlink: 'syz.2.2443': attribute type 3 has an invalid length. [ 199.267665][T11301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.294690][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2443'. [ 199.362700][T11301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.434076][ T5810] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 199.460842][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.487728][ T5810] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 199.513302][ T5810] usb 5-1: media controller created [ 199.546189][ T30] audit: type=1400 audit(1775906337.021:564): avc: denied { setopt } for pid=11366 comm="syz.2.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 199.573914][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.643312][ T5810] az6027: usb out operation failed. (-71) [ 199.660333][T11301] team0: Port device team_slave_0 added [ 199.660589][ T5810] az6027: usb out operation failed. (-71) [ 199.693724][ T5810] stb0899_attach: Driver disabled by Kconfig [ 199.715008][ T5810] az6027: no front-end attached [ 199.715008][ T5810] [ 199.725178][T11301] team0: Port device team_slave_1 added [ 199.735673][ T5810] az6027: usb out operation failed. (-71) [ 199.754523][ T5810] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 199.802277][ T5810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 199.816659][ T5810] dvb-usb: schedule remote query interval to 400 msecs. [ 199.842871][ T5810] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 199.855651][T11301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.867960][T11301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.906399][T11301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.906473][ T5810] usb 5-1: USB disconnect, device number 30 [ 199.942788][T11374] overlayfs: conflicting options: userxattr,metacopy=on [ 199.991896][T11301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.024092][T11301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.025180][ T5810] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 200.086177][ T5819] Bluetooth: hci4: command tx timeout [ 200.124550][T11301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.377516][T11301] hsr_slave_0: entered promiscuous mode [ 200.395663][T11301] hsr_slave_1: entered promiscuous mode [ 200.403532][T11301] debugfs: 'hsr0' already exists in 'hsr' [ 200.409577][T11301] Cannot create hsr debugfs directory [ 200.540386][ T5819] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 200.592913][T11395] input: syz0 as /devices/virtual/input/input32 [ 200.881508][ T5810] kernel read not supported for file /dsp1 (pid: 5810 comm: kworker/1:3) [ 201.036783][T11301] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 201.080876][T11301] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 201.116566][T11301] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 201.144038][T11301] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 201.275505][T11414] tap0: tun_chr_ioctl cmd 1074025676 [ 201.280857][T11414] tap0: owner set to 0 [ 201.618796][ T30] audit: type=1400 audit(1775906339.081:565): avc: denied { write } for pid=11427 comm="syz.1.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 201.739404][T11301] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.788666][T11436] netlink: 'syz.1.2472': attribute type 1 has an invalid length. [ 201.797466][T11436] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2472'. [ 201.807042][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2470'. [ 201.816247][T11436] netlink: 'syz.1.2472': attribute type 1 has an invalid length. [ 201.816287][T11436] netlink: 'syz.1.2472': attribute type 8 has an invalid length. [ 201.816299][T11436] netlink: 606 bytes leftover after parsing attributes in process `syz.1.2472'. [ 201.847715][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.854976][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.901361][ T5810] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 201.945867][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.953056][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.083700][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 202.131117][ T5810] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 202.143870][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.162115][ T5819] Bluetooth: hci4: command 0x041b tx timeout [ 202.178786][ T5810] usb 3-1: config 0 descriptor?? [ 202.190268][T11430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.361429][ T29] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 202.383583][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2479'. [ 202.394538][ T5811] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 202.531303][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 202.537414][T11460] vivid-000: disconnect [ 202.548105][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.555018][T11459] vivid-000: reconnect [ 202.576273][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.615134][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 202.628660][T11301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.643327][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.654907][ T5810] hid_parser_main: 500 callbacks suppressed [ 202.654930][ T5810] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 202.675734][ T29] usb 2-1: config 0 descriptor?? [ 202.680874][ T5810] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 202.688596][ T5810] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 202.697927][ T29] hub 2-1:0.0: USB hub found [ 202.712321][ T5810] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 202.729786][ T5810] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 202.744520][ T5810] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 202.762071][ T5810] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 202.781327][ T5810] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 202.804386][ T5810] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 202.823897][ T5810] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 202.843285][ T5810] asus 0003:0B05:1ABE.0023: unbalanced collection at end of report description [ 202.877923][ T5810] asus 0003:0B05:1ABE.0023: Asus hid parse failed: -22 [ 202.906188][ T29] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 202.920881][ T5810] asus 0003:0B05:1ABE.0023: probe with driver asus failed with error -22 [ 202.936676][ T5810] usb 3-1: USB disconnect, device number 25 [ 203.335536][ T29] hid-generic 0003:046D:C31C.0024: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 203.409181][T11301] veth0_vlan: entered promiscuous mode [ 203.425076][T11301] veth1_vlan: entered promiscuous mode [ 203.638210][T11301] veth0_macvtap: entered promiscuous mode [ 203.680847][T11301] veth1_macvtap: entered promiscuous mode [ 203.696232][ T29] usb 2-1: USB disconnect, device number 37 [ 203.823692][T11301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.885905][T11301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.896547][ T30] audit: type=1400 audit(1775906341.381:566): avc: denied { bind } for pid=11496 comm="syz.4.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 203.945527][T11301] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 203.966521][ T1038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.983124][T11499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.983833][T11301] wireguard: wg0: Could not create IPv6 socket [ 204.008050][ T1038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.019461][ T1038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.042720][T11301] wireguard: wg1: Could not create IPv6 socket [ 204.048964][ T1038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.065297][T11301] wireguard: wg2: Could not create IPv6 socket [ 204.135811][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.174979][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.244896][ T5811] Bluetooth: hci4: command 0x041b tx timeout [ 204.268722][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.291829][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.315366][ T30] audit: type=1400 audit(1775906341.791:567): avc: denied { mounton } for pid=11301 comm="syz-executor" path="/root/syzkaller.LyTP2V/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 204.353232][ T30] audit: type=1400 audit(1775906341.791:568): avc: denied { mounton } for pid=11301 comm="syz-executor" path="/root/syzkaller.LyTP2V/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 204.417735][ T30] audit: type=1400 audit(1775906341.821:569): avc: denied { mounton } for pid=11301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 204.511805][ T792] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 204.546096][ T30] audit: type=1400 audit(1775906342.021:570): avc: denied { write } for pid=11519 comm="syz.3.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 204.672051][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 204.680960][ T792] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 204.710635][ T792] usb 2-1: config 1 has no interface number 0 [ 204.729486][ T792] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 204.762810][ T792] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 204.816877][ T792] usb 2-1: config 1 interface 105 has no altsetting 0 [ 204.830028][ T30] audit: type=1400 audit(1775906342.311:571): avc: denied { getopt } for pid=11536 comm="syz.3.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.835043][ T792] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 204.859880][ T5859] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 204.923979][ T792] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 204.944149][ T792] usb 2-1: Product: syz [ 204.949430][ T792] usb 2-1: Manufacturer: syz [ 204.978975][ T792] usb 2-1: SerialNumber: syz [ 204.990345][T11511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.016373][T11511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.032263][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 205.044560][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 205.073002][ T5859] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 205.082736][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.130603][ T5859] usb 5-1: config 0 descriptor?? [ 205.141598][ T5810] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 205.208628][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2514'. [ 205.313427][ T5810] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 205.324356][ T5810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 205.345721][ T5810] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.378702][ T5810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.390286][ T5810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 205.422709][ T5810] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 205.430986][ T5810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 205.449109][T11511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.468624][ T5810] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.481344][T11511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.489168][ T5810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.500857][ T5810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 205.530297][ T5810] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 205.541432][ T5810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 205.552221][ T5810] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.575335][ T5859] zeroplus 0003:0C12:0030.0025: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0 [ 205.588748][ T5810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.588816][ T5859] zeroplus 0003:0C12:0030.0025: no inputs found [ 205.629666][ T5810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 205.653283][ T5810] usb 4-1: string descriptor 0 read error: -22 [ 205.659698][ T5810] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 205.697773][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.761141][ T5810] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 205.799670][T11576] input: syz1 as /devices/virtual/input/input33 [ 205.880006][ T5926] usb 5-1: USB disconnect, device number 31 [ 205.909541][ T792] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 205.925484][ T792] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 205.952214][ T792] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 205.975052][ T5810] usb 4-1: USB disconnect, device number 27 [ 206.028507][ T792] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c2:12:2b:2f:c8:d4 [ 206.085771][ T792] usb 2-1: USB disconnect, device number 38 [ 206.104303][ T792] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 206.222475][ T792] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 206.251951][ T792] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 206.271950][ T792] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 206.322885][ T5811] Bluetooth: hci4: command 0x041b tx timeout [ 206.822944][ T5810] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 206.828877][T11624] input: syz0 as /devices/virtual/input/input34 [ 206.877894][ T30] audit: type=1400 audit(1775906344.351:572): avc: denied { append } for pid=11625 comm="syz.2.2534" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 206.931312][ T5873] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 207.001281][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 207.010801][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.024894][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.084309][ T5810] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.097140][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.107205][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 207.116885][ T5873] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 207.133601][ T5810] usb 4-1: config 0 descriptor?? [ 207.148794][ T5873] usb 2-1: config 179 has no interface number 0 [ 207.173672][ T5873] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 207.214560][ T5873] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 207.238897][ T5873] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.268139][ T5873] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 207.318505][ T5873] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 207.346035][ T5873] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 207.377538][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.422335][T11617] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 207.491694][ T30] audit: type=1400 audit(1775906344.971:573): avc: denied { getopt } for pid=11647 comm="syz.5.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 207.779879][ T5873] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input35 [ 208.003379][ T5166] block nbd2: Connection timed out, retrying (0/2 alive) [ 208.013132][ T5166] block nbd2: Dead connection, failed to find a fallback [ 208.020195][ T5166] block nbd2: shutting down sockets [ 208.026199][ T5166] blk_print_req_error: 26 callbacks suppressed [ 208.026214][ T5166] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 208.043167][ T5166] buffer_io_error: 25 callbacks suppressed [ 208.043182][ T5166] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.059153][ T6154] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 208.090375][ T6154] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.110911][ T6154] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 208.131827][ T6154] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.139653][ T6154] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 208.161474][ T6154] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.169435][ T6154] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 208.187699][ T6154] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.222137][ T792] usb 2-1: USB disconnect, device number 39 [ 208.222227][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 208.238518][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 208.246819][ T6154] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 208.277648][ T6154] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.295487][ T6154] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 208.336628][ T6154] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.365479][ T6154] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 208.413944][ T5811] Bluetooth: hci4: command 0x041b tx timeout [ 208.420608][ T6154] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.464210][ T6154] ldm_validate_partition_table(): Disk read failed. [ 208.471057][ T6154] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 208.480903][ T6154] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.489210][ T6154] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 208.500277][ T6154] Buffer I/O error on dev nbd2, logical block 0, async page read [ 208.509541][ T6154] Dev nbd2: unable to read RDB block 0 [ 208.516340][ T6154] nbd2: unable to read partition table [ 208.525456][ T6154] ldm_validate_partition_table(): Disk read failed. [ 208.547977][ T6154] Dev nbd2: unable to read RDB block 0 [ 208.565239][ T6154] nbd2: unable to read partition table [ 209.477310][T11716] netlink: 'syz.1.2559': attribute type 8 has an invalid length. [ 209.503472][T11716] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.512216][T11716] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.623772][ T5810] usbhid 4-1:0.0: can't add hid device: -71 [ 209.630123][ T5810] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 209.671508][ T5810] usb 4-1: USB disconnect, device number 28 [ 209.723431][ T30] audit: type=1400 audit(1775906347.191:574): avc: denied { map } for pid=11725 comm="syz.5.2563" path="socket:[36315]" dev="sockfs" ino=36315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.826482][ T30] audit: type=1400 audit(1775906347.191:575): avc: denied { accept } for pid=11725 comm="syz.5.2563" path="socket:[36315]" dev="sockfs" ino=36315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.416600][ T30] audit: type=1400 audit(1775906347.891:576): avc: denied { accept } for pid=11770 comm="syz.2.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.768414][T11795] loop7: detected capacity change from 0 to 7 [ 210.866395][T11795] Dev loop7: unable to read RDB block 7 [ 210.872406][T11795] loop7: unable to read partition table [ 210.878308][T11795] loop7: partition table beyond EOD, truncated [ 210.889793][T11795] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 210.994379][T11805] Failed to get privilege flags for destination (handle=0x2:0x9) [ 211.013762][ T5180] Dev loop7: unable to read RDB block 7 [ 211.019494][ T5180] loop7: unable to read partition table [ 211.026254][ T5180] loop7: partition table beyond EOD, truncated [ 211.592529][ T30] audit: type=1400 audit(1775906349.071:577): avc: denied { bind } for pid=11830 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.839425][T11848] Bluetooth: hci1: too big key_count value 65025 [ 212.551310][T11891] netlink: 'syz.5.2621': attribute type 19 has an invalid length. [ 212.562054][T11891] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2621'. [ 213.095429][T11913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.688587][ T5926] kernel read not supported for file /dsp (pid: 5926 comm: kworker/0:6) [ 213.761991][T11939] bridge0: entered promiscuous mode [ 213.768874][T11939] bridge0: port 3(vlan2) entered blocking state [ 213.811446][T11939] bridge0: port 3(vlan2) entered disabled state [ 213.826312][ T30] audit: type=1400 audit(1775906351.301:578): avc: denied { search } for pid=11941 comm="syz.4.2637" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.871427][T11939] vlan2: entered allmulticast mode [ 213.876674][T11939] bridge0: entered allmulticast mode [ 213.905553][ T30] audit: type=1400 audit(1775906351.321:579): avc: denied { setattr } for pid=11941 comm="syz.4.2637" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.930172][T11939] vlan2: left allmulticast mode [ 213.937133][T11939] bridge0: left allmulticast mode [ 213.959228][T11939] bridge0: left promiscuous mode [ 214.371803][ T1100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.413634][ T30] audit: type=1400 audit(1775906351.891:580): avc: denied { read } for pid=11935 comm="syz.5.2635" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 214.477278][ T30] audit: type=1400 audit(1775906351.891:581): avc: denied { open } for pid=11935 comm="syz.5.2635" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 214.538734][ T1100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.562325][ T5926] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 214.563662][ T30] audit: type=1400 audit(1775906351.901:582): avc: denied { ioctl } for pid=11935 comm="syz.5.2635" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 214.713581][ T1100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.723947][ T5926] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.723977][ T5926] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 214.724003][ T5926] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.726096][ T5926] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 214.734501][ T30] audit: type=1400 audit(1775906352.191:583): avc: denied { connect } for pid=11969 comm="syz.5.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 214.834205][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.846456][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.855411][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.876726][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.884759][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.936503][ T1100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.939097][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 214.994849][ T5926] usb 5-1: Product: syz [ 215.001556][T11974] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 215.015912][ T5926] usb 5-1: Manufacturer: syz [ 215.054924][ T5926] usb 5-1: SerialNumber: syz [ 215.107221][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.158262][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.191435][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.253101][ T49] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.276787][ T1100] bridge_slave_1: left allmulticast mode [ 215.298863][ T1100] bridge_slave_1: left promiscuous mode [ 215.306600][ T5926] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 215.319050][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.386252][ T1100] bridge_slave_0: left allmulticast mode [ 215.396462][ T1100] bridge_slave_0: left promiscuous mode [ 215.412321][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.584005][ T30] audit: type=1400 audit(1775906353.051:584): avc: denied { shutdown } for pid=12006 comm="syz.3.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 215.596234][ T5926] usb 5-1: USB disconnect, device number 32 [ 215.619417][ T30] audit: type=1400 audit(1775906353.071:585): avc: denied { read write } for pid=11960 comm="syz.4.2642" name="lp0" dev="devtmpfs" ino=3827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 215.644830][ T5926] usblp0: removed [ 215.659236][ T30] audit: type=1400 audit(1775906353.071:586): avc: denied { open } for pid=11960 comm="syz.4.2642" path="/dev/usb/lp0" dev="devtmpfs" ino=3827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 215.898789][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.915467][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.977285][ T1100] bond0 (unregistering): Released all slaves [ 216.010683][ T5475] wireguard: wg0: Could not create IPv6 socket [ 216.120879][ T1100] tipc: Left network mode [ 216.211735][ T29] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 216.386090][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 216.400066][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.441360][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.483669][ T1100] hsr_slave_0: left promiscuous mode [ 216.501429][ T29] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 216.513369][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.527579][ T1100] hsr_slave_1: left promiscuous mode [ 216.535294][ T29] usb 2-1: config 0 descriptor?? [ 216.545578][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.563924][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.613126][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.651772][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.663675][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.674892][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.686279][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.695171][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.703544][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.749714][ T1100] veth1_macvtap: left promiscuous mode [ 216.765477][ T1100] veth0_macvtap: left promiscuous mode [ 216.817624][ T1100] veth1_vlan: left promiscuous mode [ 216.852014][ T1100] veth0_vlan: left promiscuous mode [ 217.009928][ T29] hid_parser_main: 483 callbacks suppressed [ 217.009952][ T29] corsair 0003:1B1C:1B02.0026: unknown main item tag 0x0 [ 217.053399][ T29] corsair 0003:1B1C:1B02.0026: unknown main item tag 0x0 [ 217.069489][ T30] audit: type=1400 audit(1775906354.541:587): avc: denied { listen } for pid=12062 comm="syz.4.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.137588][ T29] corsair 0003:1B1C:1B02.0026: unknown main item tag 0x0 [ 217.151428][ T29] corsair 0003:1B1C:1B02.0026: unknown main item tag 0x0 [ 217.166795][ T29] corsair 0003:1B1C:1B02.0026: unknown main item tag 0x0 [ 217.176520][ T30] audit: type=1400 audit(1775906354.541:588): avc: denied { read } for pid=12062 comm="syz.4.2673" path="socket:[38116]" dev="sockfs" ino=38116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.205024][ T29] corsair 0003:1B1C:1B02.0026: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 217.527380][ T29] usb 2-1: USB disconnect, device number 40 [ 217.597030][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 217.634634][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 217.761812][ T792] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 217.789773][ T5475] wireguard: wg1: Could not create IPv6 socket [ 217.819783][T12086] sp0: Synchronizing with TNC [ 217.849864][T12047] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 217.897909][T12085] [U] `` [ 217.923273][ T792] usb 4-1: Using ep0 maxpacket: 16 [ 217.937060][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.989034][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.105572][ T792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.184856][ T792] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 218.210989][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.231171][T12104] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 218.287651][ T792] usb 4-1: config 0 descriptor?? [ 218.314792][T12104] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 218.672832][ T5475] wireguard: wg2: Could not create IPv6 socket [ 218.736434][ T792] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max [ 218.773221][ T792] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max [ 218.830447][ T30] audit: type=1400 audit(1775906356.301:589): avc: denied { mount } for pid=12123 comm="syz.4.2693" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 218.830835][ T792] microsoft 0003:045E:07DA.0027: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 218.912314][T12129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2695'. [ 218.982134][ T792] microsoft 0003:045E:07DA.0027: no inputs found [ 218.982666][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.002397][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 219.010578][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.013379][ T792] microsoft 0003:045E:07DA.0027: could not initialize ff, continuing anyway [ 219.027228][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.047803][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.055498][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.117009][ T792] usb 4-1: USB disconnect, device number 29 [ 219.128446][T12131] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 219.172628][ T29] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 219.182455][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.194664][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.214360][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 219.222377][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.233334][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.261448][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 219.272377][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.288453][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.309146][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 219.327852][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.339757][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.369140][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 219.382307][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.402488][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.417002][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 219.447461][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.467635][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.490548][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 219.532188][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.541117][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.568325][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 219.592014][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.632759][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.650956][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 219.670536][ T29] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 219.691841][ T29] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 219.700216][ T29] usb 6-1: Product: syz [ 219.731364][ T29] usb 6-1: Manufacturer: syz [ 219.736000][ T29] usb 6-1: SerialNumber: syz [ 219.765210][ T29] usb 6-1: config 0 descriptor?? [ 219.786200][ T29] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 220.073697][ T792] usb 6-1: USB disconnect, device number 2 [ 220.089293][ T792] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 220.360242][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.370036][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.381903][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.394965][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.403623][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.411798][ T5873] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 220.460440][T12178] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 220.616291][ T5873] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 220.634539][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.661288][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.683872][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.728229][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.747491][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.772444][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.791792][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.816722][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.848010][T12204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12204 comm=syz.4.2713 [ 220.880879][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.915056][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2715'. [ 220.921691][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.941938][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.979140][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.997762][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.017557][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.038856][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.046621][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.063826][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.085008][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.102427][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.119752][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.148377][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.159485][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.171327][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.190955][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.203587][ T5873] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 221.214335][ T5873] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 221.222946][ T5873] usb 4-1: Product: syz [ 221.227484][ T5873] usb 4-1: Manufacturer: syz [ 221.232329][ T5873] usb 4-1: SerialNumber: syz [ 221.239291][ T5873] usb 4-1: config 0 descriptor?? [ 221.252390][ T5873] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 221.511306][ T5873] usb 4-1: USB disconnect, device number 30 [ 221.528866][ T5873] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 221.810761][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2721'. [ 221.852456][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.863265][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.872707][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.875366][T12247] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2721'. [ 221.897845][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.906104][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.961146][T12251] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 221.985923][T12259] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.2725'. [ 222.102084][T12264] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2726'. [ 222.537969][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 223.249642][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.252427][T12327] IPv6: NLM_F_REPLACE set, but no existing node found! [ 223.283844][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.296067][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.319829][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.327929][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.390915][T12324] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 223.542114][ T5810] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 223.759319][ T5810] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 223.778647][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.813918][ T5810] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 223.842886][ T5810] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 223.850929][ T5810] usb 6-1: Manufacturer: syz [ 223.903828][ T5810] usb 6-1: config 0 descriptor?? [ 224.003427][ T5810] rc_core: IR keymap rc-hauppauge not found [ 224.009374][ T5810] Registered IR keymap rc-empty [ 224.027122][ T5810] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 224.052846][ T5810] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 224.195322][ T5810] usb 6-1: USB disconnect, device number 3 [ 224.871891][T12384] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2744'. [ 224.962713][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.986137][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.002226][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.010812][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.019086][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.064335][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2749'. [ 225.073967][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2749'. [ 225.079209][T12391] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 225.394098][T12412] vivid-007: ================= START STATUS ================= [ 225.450918][T12412] vivid-007: Enable Output Cropping: true grabbed [ 225.499706][T12412] vivid-007: Enable Output Composing: true grabbed [ 225.535531][T12412] vivid-007: Enable Output Scaler: true grabbed [ 225.565163][T12412] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 225.576309][T12419] bond0: entered promiscuous mode [ 225.597282][T12419] bond_slave_0: entered promiscuous mode [ 225.610228][T12419] bond_slave_1: entered promiscuous mode [ 225.614273][T12412] vivid-007: Transmit Mode: HDMI grabbed [ 225.655099][T12412] vivid-007: Hotplug Present: 0x00000000 [ 225.675015][T12419] bond0: left promiscuous mode [ 225.686553][T12419] bond_slave_0: left promiscuous mode [ 225.693072][T12412] vivid-007: RxSense Present: 0x00000000 [ 225.710480][T12412] vivid-007: EDID Present: 0x00000000 [ 225.715474][T12419] bond_slave_1: left promiscuous mode [ 225.758100][T12412] vivid-007: ================== END STATUS ================== [ 227.115718][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.133810][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.144734][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.155060][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.164872][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.236226][T12481] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 227.262943][ T29] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 227.446825][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 227.510205][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.590041][ T29] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 227.610054][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.632136][ T29] usb 4-1: config 0 descriptor?? [ 227.825293][T12476] [ 227.827654][T12476] ========================= [ 227.832136][T12476] WARNING: held lock freed! [ 227.836631][T12476] syzkaller #0 Tainted: G L [ 227.842594][T12476] ------------------------- [ 227.847069][T12476] syz.4.2761/12476 is freeing memory ffff88802dae3000-ffff88802dae37ff, with a lock still held there! [ 227.857981][T12476] ffff88802dae3260 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP){+.+.}-{0:0}, at: bt_accept_dequeue+0x244/0x690 [ 227.869019][T12476] 3 locks held by syz.4.2761/12476: [ 227.874220][T12476] #0: ffff8880751b4708 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 227.884755][T12476] #1: ffff88807b5aa260 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP/2){+.+.}-{0:0}, at: l2cap_sock_release+0x61/0x280 [ 227.896400][T12476] #2: ffff88802dae3260 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP){+.+.}-{0:0}, at: bt_accept_dequeue+0x244/0x690 [ 227.907866][T12476] [ 227.907866][T12476] stack backtrace: [ 227.913734][T12476] CPU: 0 UID: 0 PID: 12476 Comm: syz.4.2761 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.913755][T12476] Tainted: [L]=SOFTLOCKUP [ 227.913760][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 227.913769][T12476] Call Trace: [ 227.913775][T12476] [ 227.913780][T12476] dump_stack_lvl+0x100/0x190 [ 227.913806][T12476] debug_check_no_locks_freed+0x115/0x120 [ 227.913831][T12476] ? __sk_destruct+0x8ab/0xbb0 [ 227.913852][T12476] kfree+0x18b/0x6b0 [ 227.913872][T12476] __sk_destruct+0x8ab/0xbb0 [ 227.913890][T12476] ? do_raw_spin_lock+0x128/0x260 [ 227.913907][T12476] sk_destruct+0xc8/0xf0 [ 227.913927][T12476] __sk_free+0xf4/0x3e0 [ 227.913946][T12476] sk_free+0x61/0x90 [ 227.913964][T12476] bt_accept_unlink+0x1e4/0x2f0 [ 227.913985][T12476] bt_accept_dequeue+0x576/0x690 [ 227.914004][T12476] l2cap_sock_cleanup_listen+0x5c/0x2d0 [ 227.914018][T12476] l2cap_sock_release+0x69/0x280 [ 227.914033][T12476] __sock_release+0xb3/0x260 [ 227.914054][T12476] ? __pfx_sock_close+0x10/0x10 [ 227.914074][T12476] sock_close+0x1c/0x30 [ 227.914093][T12476] __fput+0x3ff/0xb40 [ 227.914110][T12476] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.914132][T12476] task_work_run+0x150/0x240 [ 227.914148][T12476] ? __pfx_task_work_run+0x10/0x10 [ 227.914165][T12476] get_signal+0x1bd/0x21e0 [ 227.914185][T12476] ? __pfx_task_work_add+0x10/0x10 [ 227.914200][T12476] ? __pfx_get_signal+0x10/0x10 [ 227.914217][T12476] ? __fput_deferred+0x217/0x490 [ 227.914235][T12476] arch_do_signal_or_restart+0x91/0x7a0 [ 227.914256][T12476] ? __sys_accept4+0x1cb/0x200 [ 227.914272][T12476] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 227.914293][T12476] ? __pfx___sys_accept4+0x10/0x10 [ 227.914309][T12476] ? xfd_validate_state+0x129/0x190 [ 227.914324][T12476] exit_to_user_mode_loop+0x86/0x4a0 [ 227.914339][T12476] do_syscall_64+0x67c/0xf80 [ 227.914352][T12476] ? clear_bhb_loop+0x40/0x90 [ 227.914367][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.914383][T12476] RIP: 0033:0x7fae3dd9c819 [ 227.914396][T12476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.914410][T12476] RSP: 002b:00007fae3ec58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 227.914424][T12476] RAX: fffffffffffffe00 RBX: 00007fae3e015fa0 RCX: 00007fae3dd9c819 [ 227.914433][T12476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 227.914442][T12476] RBP: 00007fae3de32c91 R08: 0000000000000000 R09: 0000000000000000 [ 227.914450][T12476] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 227.914458][T12476] R13: 00007fae3e016038 R14: 00007fae3e015fa0 R15: 00007ffe625a8548 [ 227.914472][T12476] [ 228.184754][ T5859] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 228.190433][T12476] ================================================================== [ 228.200306][T12476] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 228.208113][T12476] Read of size 4 at addr ffff88802dae31cc by task syz.4.2761/12476 [ 228.216168][T12476] [ 228.218486][T12476] CPU: 1 UID: 0 PID: 12476 Comm: syz.4.2761 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.218510][T12476] Tainted: [L]=SOFTLOCKUP [ 228.218515][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 228.218524][T12476] Call Trace: [ 228.218532][T12476] [ 228.218538][T12476] dump_stack_lvl+0x100/0x190 [ 228.218564][T12476] print_report+0x156/0x4c9 [ 228.218584][T12476] ? __virt_addr_valid+0x239/0x430 [ 228.218610][T12476] ? do_raw_spin_lock+0x23b/0x260 [ 228.218628][T12476] kasan_report+0xdf/0x1e0 [ 228.218644][T12476] ? do_raw_spin_lock+0x23b/0x260 [ 228.218662][T12476] do_raw_spin_lock+0x23b/0x260 [ 228.218678][T12476] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 228.218696][T12476] ? sk_destruct+0xcd/0xf0 [ 228.218717][T12476] release_sock+0x21/0x220 [ 228.218736][T12476] bt_accept_dequeue+0x564/0x690 [ 228.218758][T12476] l2cap_sock_cleanup_listen+0x5c/0x2d0 [ 228.218774][T12476] l2cap_sock_release+0x69/0x280 [ 228.218788][T12476] __sock_release+0xb3/0x260 [ 228.218809][T12476] ? __pfx_sock_close+0x10/0x10 [ 228.218829][T12476] sock_close+0x1c/0x30 [ 228.218849][T12476] __fput+0x3ff/0xb40 [ 228.218869][T12476] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.218896][T12476] task_work_run+0x150/0x240 [ 228.218912][T12476] ? __pfx_task_work_run+0x10/0x10 [ 228.218929][T12476] get_signal+0x1bd/0x21e0 [ 228.218948][T12476] ? __pfx_task_work_add+0x10/0x10 [ 228.218964][T12476] ? __pfx_get_signal+0x10/0x10 [ 228.218983][T12476] ? __fput_deferred+0x217/0x490 [ 228.219003][T12476] arch_do_signal_or_restart+0x91/0x7a0 [ 228.219023][T12476] ? __sys_accept4+0x1cb/0x200 [ 228.219042][T12476] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 228.219066][T12476] ? __pfx___sys_accept4+0x10/0x10 [ 228.219082][T12476] ? xfd_validate_state+0x129/0x190 [ 228.219097][T12476] exit_to_user_mode_loop+0x86/0x4a0 [ 228.219113][T12476] do_syscall_64+0x67c/0xf80 [ 228.219126][T12476] ? clear_bhb_loop+0x40/0x90 [ 228.219143][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.219157][T12476] RIP: 0033:0x7fae3dd9c819 [ 228.219169][T12476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.219183][T12476] RSP: 002b:00007fae3ec58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 228.219199][T12476] RAX: fffffffffffffe00 RBX: 00007fae3e015fa0 RCX: 00007fae3dd9c819 [ 228.219208][T12476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 228.219217][T12476] RBP: 00007fae3de32c91 R08: 0000000000000000 R09: 0000000000000000 [ 228.219225][T12476] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 228.219234][T12476] R13: 00007fae3e016038 R14: 00007fae3e015fa0 R15: 00007ffe625a8548 [ 228.219247][T12476] [ 228.219252][T12476] [ 228.489168][T12476] Allocated by task 5819: [ 228.493476][T12476] kasan_save_stack+0x30/0x50 [ 228.498150][T12476] kasan_save_track+0x14/0x30 [ 228.502812][T12476] __kasan_kmalloc+0xaa/0xb0 [ 228.507386][T12476] __kmalloc_noprof+0x301/0x850 [ 228.512224][T12476] sk_prot_alloc+0x10b/0x2a0 [ 228.516811][T12476] sk_alloc+0x36/0xe80 [ 228.520866][T12476] bt_sock_alloc+0x3b/0x3a0 [ 228.525357][T12476] l2cap_sock_alloc.constprop.0+0x33/0x1e0 [ 228.531149][T12476] l2cap_sock_new_connection_cb+0x101/0x260 [ 228.537032][T12476] l2cap_connect_cfm+0x4e2/0xf80 [ 228.541956][T12476] hci_remote_features_evt+0x4f4/0x9b0 [ 228.547398][T12476] hci_event_packet+0x8e9/0xcd0 [ 228.552233][T12476] hci_rx_work+0x451/0xfc0 [ 228.556634][T12476] process_one_work+0xa23/0x19a0 [ 228.561559][T12476] worker_thread+0x5ef/0xe50 [ 228.566136][T12476] kthread+0x370/0x450 [ 228.570186][T12476] ret_from_fork+0x754/0xd80 [ 228.574769][T12476] ret_from_fork_asm+0x1a/0x30 [ 228.579543][T12476] [ 228.581860][T12476] Freed by task 12476: [ 228.585907][T12476] kasan_save_stack+0x30/0x50 [ 228.590573][T12476] kasan_save_track+0x14/0x30 [ 228.595239][T12476] kasan_save_free_info+0x3b/0x70 [ 228.600248][T12476] __kasan_slab_free+0x5f/0x80 [ 228.604987][T12476] kfree+0x1f6/0x6b0 [ 228.608868][T12476] __sk_destruct+0x8ab/0xbb0 [ 228.613443][T12476] sk_destruct+0xc8/0xf0 [ 228.617668][T12476] __sk_free+0xf4/0x3e0 [ 228.621808][T12476] sk_free+0x61/0x90 [ 228.625686][T12476] bt_accept_unlink+0x1e4/0x2f0 [ 228.630518][T12476] bt_accept_dequeue+0x576/0x690 [ 228.635438][T12476] l2cap_sock_cleanup_listen+0x5c/0x2d0 [ 228.640962][T12476] l2cap_sock_release+0x69/0x280 [ 228.645876][T12476] __sock_release+0xb3/0x260 [ 228.650486][T12476] sock_close+0x1c/0x30 [ 228.654628][T12476] __fput+0x3ff/0xb40 [ 228.658612][T12476] task_work_run+0x150/0x240 [ 228.663183][T12476] get_signal+0x1bd/0x21e0 [ 228.667598][T12476] arch_do_signal_or_restart+0x91/0x7a0 [ 228.673128][T12476] exit_to_user_mode_loop+0x86/0x4a0 [ 228.678391][T12476] do_syscall_64+0x67c/0xf80 [ 228.682959][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.688830][T12476] [ 228.691130][T12476] The buggy address belongs to the object at ffff88802dae3000 [ 228.691130][T12476] which belongs to the cache kmalloc-2k of size 2048 [ 228.705164][T12476] The buggy address is located 460 bytes inside of [ 228.705164][T12476] freed 2048-byte region [ffff88802dae3000, ffff88802dae3800) [ 228.719031][T12476] [ 228.721340][T12476] The buggy address belongs to the physical page: [ 228.727730][T12476] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2dae0 [ 228.736466][T12476] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 228.744952][T12476] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 228.752500][T12476] page_type: f5(slab) [ 228.756462][T12476] raw: 00fff00000000040 ffff88813fe41000 dead000000000100 dead000000000122 [ 228.765039][T12476] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 228.773604][T12476] head: 00fff00000000040 ffff88813fe41000 dead000000000100 dead000000000122 [ 228.782254][T12476] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 228.790918][T12476] head: 00fff00000000003 ffffea0000b6b801 00000000ffffffff 00000000ffffffff [ 228.799594][T12476] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 228.808247][T12476] page dumped because: kasan: bad access detected [ 228.814641][T12476] page_owner tracks the page as allocated [ 228.820332][T12476] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5805, tgid 5805 (syz-executor), ts 61446714415, free_ts 60923982646 [ 228.841677][T12476] post_alloc_hook+0x153/0x170 [ 228.846433][T12476] get_page_from_freelist+0x111d/0x3140 [ 228.851967][T12476] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 228.857843][T12476] new_slab+0xa6/0x6b0 [ 228.861893][T12476] refill_objects+0x26b/0x400 [ 228.866556][T12476] __pcs_replace_empty_main+0x1ab/0x660 [ 228.872087][T12476] __kmalloc_cache_noprof+0x493/0x6f0 [ 228.877440][T12476] rtnl_newlink+0x126/0x2380 [ 228.882017][T12476] rtnetlink_rcv_msg+0x95e/0xe90 [ 228.886940][T12476] netlink_rcv_skb+0x159/0x420 [ 228.891699][T12476] netlink_unicast+0x5aa/0x870 [ 228.896442][T12476] netlink_sendmsg+0x8b0/0xda0 [ 228.901183][T12476] __sys_sendto+0x468/0x4b0 [ 228.905675][T12476] __x64_sys_sendto+0xe0/0x1c0 [ 228.910420][T12476] do_syscall_64+0x106/0xf80 [ 228.914987][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.920860][T12476] page last free pid 5901 tgid 5901 stack trace: [ 228.927159][T12476] __free_frozen_pages+0x7e1/0x10d0 [ 228.932342][T12476] qlist_free_all+0x47/0xe0 [ 228.936830][T12476] kasan_quarantine_reduce+0x1a0/0x1f0 [ 228.942275][T12476] __kasan_slab_alloc+0x69/0x90 [ 228.947103][T12476] __kmalloc_noprof+0x2b9/0x850 [ 228.951937][T12476] tomoyo_realpath_from_path+0xb6/0x690 [ 228.957471][T12476] tomoyo_path_perm+0x276/0x460 [ 228.962304][T12476] security_inode_getattr+0x116/0x280 [ 228.967659][T12476] vfs_fstat+0x4b/0xe0 [ 228.971712][T12476] __do_sys_newfstat+0x8b/0x110 [ 228.976544][T12476] do_syscall_64+0x106/0xf80 [ 228.981112][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.986986][T12476] [ 228.989291][T12476] Memory state around the buggy address: [ 228.994901][T12476] ffff88802dae3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.002940][T12476] ffff88802dae3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.010977][T12476] >ffff88802dae3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.019014][T12476] ^ [ 229.025403][T12476] ffff88802dae3200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.033444][T12476] ffff88802dae3280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.041481][T12476] ================================================================== [ 229.049626][T12476] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 229.056825][T12476] CPU: 1 UID: 0 PID: 12476 Comm: syz.4.2761 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.067761][T12476] Tainted: [L]=SOFTLOCKUP [ 229.072070][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 229.082107][T12476] Call Trace: [ 229.085370][T12476] [ 229.088284][T12476] dump_stack_lvl+0x100/0x190 [ 229.092955][T12476] vpanic+0x552/0x970 [ 229.096920][T12476] ? __pfx_vpanic+0x10/0x10 [ 229.101404][T12476] ? rcu_is_watching+0x12/0xc0 [ 229.106162][T12476] ? do_raw_spin_lock+0x23b/0x260 [ 229.111171][T12476] panic+0xd1/0xe0 [ 229.114875][T12476] ? __pfx_panic+0x10/0x10 [ 229.119273][T12476] ? trace_irq_enable.constprop.0+0x2f/0x180 [ 229.125241][T12476] check_panic_on_warn.cold+0x19/0x34 [ 229.130600][T12476] end_report.part.0+0x3a/0x90 [ 229.135348][T12476] kasan_report.cold+0xe/0x18 [ 229.140010][T12476] ? do_raw_spin_lock+0x23b/0x260 [ 229.145019][T12476] do_raw_spin_lock+0x23b/0x260 [ 229.149851][T12476] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 229.155206][T12476] ? sk_destruct+0xcd/0xf0 [ 229.159611][T12476] release_sock+0x21/0x220 [ 229.164015][T12476] bt_accept_dequeue+0x564/0x690 [ 229.168941][T12476] l2cap_sock_cleanup_listen+0x5c/0x2d0 [ 229.174467][T12476] l2cap_sock_release+0x69/0x280 [ 229.179384][T12476] __sock_release+0xb3/0x260 [ 229.183964][T12476] ? __pfx_sock_close+0x10/0x10 [ 229.188804][T12476] sock_close+0x1c/0x30 [ 229.192947][T12476] __fput+0x3ff/0xb40 [ 229.196917][T12476] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.202107][T12476] task_work_run+0x150/0x240 [ 229.206682][T12476] ? __pfx_task_work_run+0x10/0x10 [ 229.211777][T12476] get_signal+0x1bd/0x21e0 [ 229.216178][T12476] ? __pfx_task_work_add+0x10/0x10 [ 229.221275][T12476] ? __pfx_get_signal+0x10/0x10 [ 229.226118][T12476] ? __fput_deferred+0x217/0x490 [ 229.231042][T12476] arch_do_signal_or_restart+0x91/0x7a0 [ 229.236573][T12476] ? __sys_accept4+0x1cb/0x200 [ 229.241325][T12476] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 229.247469][T12476] ? __pfx___sys_accept4+0x10/0x10 [ 229.252563][T12476] ? xfd_validate_state+0x129/0x190 [ 229.257744][T12476] exit_to_user_mode_loop+0x86/0x4a0 [ 229.263011][T12476] do_syscall_64+0x67c/0xf80 [ 229.267588][T12476] ? clear_bhb_loop+0x40/0x90 [ 229.272249][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.278121][T12476] RIP: 0033:0x7fae3dd9c819 [ 229.282517][T12476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.302112][T12476] RSP: 002b:00007fae3ec58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 229.310509][T12476] RAX: fffffffffffffe00 RBX: 00007fae3e015fa0 RCX: 00007fae3dd9c819 [ 229.318459][T12476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 229.326417][T12476] RBP: 00007fae3de32c91 R08: 0000000000000000 R09: 0000000000000000 [ 229.334372][T12476] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 229.342322][T12476] R13: 00007fae3e016038 R14: 00007fae3e015fa0 R15: 00007ffe625a8548 [ 229.350280][T12476] [ 229.353555][T12476] Kernel Offset: disabled [ 229.357858][T12476] Rebooting in 86400 seconds..