last executing test programs: 3m20.085673023s ago: executing program 0 (id=114): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000600)={0xa0000010}) close_range(r0, 0xffffffffffffffff, 0x0) 3m18.795276379s ago: executing program 0 (id=130): memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0xd, 0x7}}, {0x0, 0x0, 0x0, 0x2, @time, {}, {}, @note={0x0, 0x0, 0xb, 0x4}}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/125, 0x7d}], 0x1) 3m17.915093335s ago: executing program 0 (id=156): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x303}, 0x1c) listen(r0, 0x400) 3m17.914782017s ago: executing program 0 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20a0, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r3, &(0x7f0000001ac0)={0x2020}, 0x2020) 3m16.965063557s ago: executing program 0 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000023c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) rmdir(0x0) 3m16.964680339s ago: executing program 0 (id=178): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000df713820f0031d58381f010203010902240001000010000904e50002ff"], 0x0) 3m1.937427246s ago: executing program 32 (id=178): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000df713820f0031d58381f010203010902240001000010000904e50002ff"], 0x0) 1m37.242175306s ago: executing program 3 (id=1291): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f00000007c0)) 1m37.175658515s ago: executing program 3 (id=1292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000"], 0x7c}}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04230500c9"], 0x10) 1m37.175383761s ago: executing program 3 (id=1293): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xd0, 0x0, 0x0, 0xfffffffd}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x800) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0xf, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r5, 0x0, 0x20000000}, 0x20) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000800)={'\x00', 0x11, 0x8, 0x9ff2, 0x2000000, 0x5, r0}) syz_open_dev$dmmidi(&(0x7f0000000180), 0x6, 0xcfb87ad23ee71700) 1m36.273523847s ago: executing program 3 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2080010, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m36.273452868s ago: executing program 3 (id=1300): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) pipe(0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m35.966371563s ago: executing program 3 (id=1307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="57fd52dfc466"}]}, 0x34}}, 0x0) 1m35.932424972s ago: executing program 33 (id=1307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="57fd52dfc466"}]}, 0x34}}, 0x0) 7.339263724s ago: executing program 4 (id=2456): unshare(0x22020600) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) creat(&(0x7f0000000300)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r4, 0x0) 7.068634735s ago: executing program 4 (id=2458): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {}], 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2}, 0x20) 6.967972289s ago: executing program 1 (id=2460): open$dir(0x0, 0x40000400000002c2, 0x0) 6.87894696s ago: executing program 1 (id=2461): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pause() 6.080349143s ago: executing program 4 (id=2467): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003000000"], 0x68}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.960299102s ago: executing program 4 (id=2468): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x1, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, '\v\x00\x00'}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00110d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x40, 0x17, 0xd, "c421a10832579f624f1de557f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000d80)={0x40, 0x31, 0xd, "471ccdb657dad24d806c5e9cdc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x1, 0xd, "b14acf1b5d3eddfc5dae3c699c"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000004c0)={0x40, 0x4, 0xd, "075b78933b31f569928a9ec402"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.893747623s ago: executing program 1 (id=2469): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001d40)="6605df83423c20b6208dbd4396dbf06433b95e078b56f9abc40e2c893efff93eb66d06289fbb83eecf9778bf63a03448ef9e2f0b19204f5db67452f5", 0x3c}, {&(0x7f0000002a00)="6c56a07fdaa372c7a7d264ee3c46af2116af8a67403ff4aca2cf49bbddc2084b15f128404eb717bbe83df9be35072757cf37020e179a3ae66c698a525c511a0502e59f2eef91497734dd1ad06c4fcb943a80b182cc9d7a61b2cd0cfe2a347c963d7ef5c5aff82a1d1f199f5fc4392184ec20504610868afa4091335b9eb439f9316d9fb634326dba58d98f0a68b70c7c319e7fa49b91ba13bba70148a8881b151e4519b5fe26214bc667df17ea1273cb0b9a9b0be40f9771b90a21b673b7f60e74841c85d489c929d402a34dfea5e228c396043f57b3be86f4e0545b64af38c53102dea2d6bcda0706b5c02bfe3860343cc67bc8e4fb31ead80441d17be75ea34486b97506d177dc5694f9ff13fef245d30a86ab98faf2cf7e1c255a10bece39bf03f148faaa20ff72f073b7a13242f08670564930a78640297ac8f9518b2c4ad4da089bd21309cf91c373b7ba103b832d117bb894a912015d16bcbfb5c25836b8510f78830e75aa10007c00810c35c55ef4a1732f63956904e7db861759c7febe678e776d483f1d89a2642dc0d09bd0ac73822c6a323904bc0c5d905dadab5e660d365075c24fd7c795ce7c4a0e7e6a07f07b2ae2fee562bc4cbe7afe38ad1665e8c917c46f24c9235e6a1c34a7201c45f927e531cb053a092dae4e357b0c5570ce23ee1169ee616f76fc3f5467f7358238c4b9658461efbdb420adee9d1e8dae793d65d808a9e45cd2e8003e3bf5f7619f64bb970859c7a6310f9164301f8994c4e1969c10f24b5366368c603889ca38de9871024a9048025957cf27713b4f0c48c9fb826fba7b5571b7b15db61a46fd21421d8ebf9a0650d274d175b6f5a7dacd90555c0671bad4c104f90664e36fe643b84fb777ba177a5abc5ac289584ab68634ef2b471e7ea6fea6108e3fb09636c075a611a72eab8613f4c17edbd69eb54ba271beb4aa6ee1d7dcc9e02942e6de189002edf02401a5d493f9b0c6a5bbe9fcb52b220c1b047c5bac83b320bd9937b62ed99e4e69645b56b909d06ea05289e4af5c179e865d149937170541f73ef3f072be7fcc7ca90970bfa5c8707c157b9bedc3e086cf27569dcc0abf62692a2849842175707a63ee7d895cb73549697b7d25384561312eca4a7e0e374759e21f980438495b96e62ba7c19a3b98febacd16806f2edc5297fdc285550787a577158810aef7b45a937f97423398bc5a5eccb79748ee069cf09b4ad287cf67fcc9b26079294f4ed5f0d6f91c14b8d49ea372d78cb2fad8772d08ed115d8c0579dfba0dd06596b28748f86ff7f79cbb8985713e5b48b91a76c06ffacbafd2ba5e03af3004361bd0b507849e96918c3860fa37ed901311629b350121d41506e68c03b08a70e58eb87520ec58e1c4dd7a1e7b01c62d9c21dd6cf206c08479da6c3e4dc50c111a8f51a34369712995c4b0a05e4c2a40e881cfa3443fd8ed09b346db8306f6c6cfc1c5e98b741517cb436c79ce12f161499099399dc1599abe03d7528f62a36256044a9b3b5b7898b489439ccab0438615a237bd055d27e7160233ce80f292cfe5f390cb0f4b1d6f74f3251553f152eee9b6a098b6666897816e8eb3bbfe31732e5148cd4221aadb36b8eef1908e93f61639429929560d867d4d419fd6810b498efd8b20798760bc38cec8548627840852d5512dddb9b02055aeb60187a7b35cea075321c793e3cb4066c76238d14085603c8d8a8ac989989cf670a8463def3d488bcc7a158fbd7b979e5e30438ae57a9b2cad371c1e926870038d11553c776c3e435088f206fb810355b00af498687ecfce39bf851a463b09be06967e76dc2d2ed9a5d04919d3d29ed05902c480bb22e9dcddca66e72199cbeb0006b08441caff98fafe95f37a626b2ca329dc74120079f58ba8afd4938f9ef5818290ba230106e11fe1c6761dccb0867e48491ce055af6cc3b822ad18282fd65c4f3d9c7674635930048734efc44fb6b8f82f39246ab98f8277978da0b8137d12d0102892cc3f71d029c4d118a7c2164bfc6cec027a776b4f221d3c0cb6c4c0743f6a0f3732ff062fe4ad74fce3b9110915ce3e3efc4bf0a444bc11656a9aa8629114994a69d5af127d6184e69e507194141b1dcaa2382102f98203a01b089c183deb505a4a114db4f52f8c168a042b8c13839398bf2659ba11f7ecd1ab54bdb3b4ba249d9e9aa084414423b1d7c7421e01ce6c07ef3e9074dad26aeee8d8845d5db24ef0a1b1a151fdb7bec9e576450a7c0876b1ddecdc04ec055578f43cd76bf0efe8852c8fcb98ce1220fd28544f95e0cebafa0c83d585", 0x666}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.980434838s ago: executing program 1 (id=2471): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x237, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0xc8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.127585841s ago: executing program 5 (id=2472): unshare(0x22020600) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) 4.010405289s ago: executing program 5 (id=2473): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d80)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004280)="81", 0x1}], 0x1}}], 0x4, 0x60cd894) 3.460659483s ago: executing program 2 (id=2476): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003000000"], 0x68}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.391777667s ago: executing program 2 (id=2477): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pause() 3.310380548s ago: executing program 1 (id=2478): r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) ioctl$HIDIOCGRDESC(r0, 0x401c5820, &(0x7f0000000040)) read$hidraw(r0, 0x0, 0x0) 3.170616593s ago: executing program 1 (id=2479): socket$inet_smc(0x2b, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.079939868s ago: executing program 5 (id=2480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000ef7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.930533561s ago: executing program 5 (id=2481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x463, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) 2.890230701s ago: executing program 5 (id=2482): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.590665579s ago: executing program 5 (id=2483): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000200)='V', 0x1) read$char_usb(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 2.499827981s ago: executing program 2 (id=2484): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.430487898s ago: executing program 2 (id=2485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 150.178035ms ago: executing program 2 (id=2486): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 150.007416ms ago: executing program 4 (id=2487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 257.398µs ago: executing program 2 (id=2488): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r0, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) fsopen(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYBLOB="003000000000000024001280110001006272696467655f736c617665000000000c000580050019000200000004"], 0x44}}, 0x0) 0s ago: executing program 4 (id=2489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ecutor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0edfd7e719 code=0x0 [ 185.070525][T10202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1513'. [ 185.229966][T10212] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1519'. [ 185.234267][T10212] netlink: 'syz.5.1519': attribute type 10 has an invalid length. [ 185.243825][T10212] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.249626][T10212] bond0: (slave team0): Enslaving as an active interface with an up link [ 185.379789][ T39] audit: type=1400 audit(1729938807.488:1091): avc: denied { sqpoll } for pid=10207 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 185.385643][ T39] audit: type=1400 audit(1729938807.498:1092): avc: denied { getopt } for pid=10207 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 185.775461][ T39] audit: type=1326 audit(1729938807.828:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.1527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 185.784639][ T39] audit: type=1326 audit(1729938807.828:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.1527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 185.790949][ T39] audit: type=1326 audit(1729938807.828:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.1527" exe="/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 185.799489][ T39] audit: type=1326 audit(1729938807.828:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.1527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 185.805525][ T39] audit: type=1326 audit(1729938807.828:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.1527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 186.040606][ T39] audit: type=1326 audit(1729938808.168:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10245 comm="syz.2.1531" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 186.052167][ T39] audit: type=1326 audit(1729938808.168:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10245 comm="syz.2.1531" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 186.333780][ T8] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 186.483780][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 186.486370][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.489081][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.493082][ T8] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.497002][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.499153][ T8] usb 7-1: Product: syz [ 186.500343][ T8] usb 7-1: Manufacturer: syz [ 186.501623][ T8] usb 7-1: SerialNumber: syz [ 187.209732][T10281] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1543'. [ 187.633758][T10294] usb usb8: usbfs: process 10294 (syz.1.1547) did not claim interface 0 before use [ 189.116540][ T8] usb 7-1: 0:2 : does not exist [ 189.122888][ T8] usb 7-1: USB disconnect, device number 26 [ 189.139203][ T6086] udevd[6086]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.667368][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 190.667385][ T39] audit: type=1400 audit(1729938812.797:1116): avc: denied { connect } for pid=10369 comm="syz.5.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 190.915406][T10379] x_tables: duplicate entry at hook 3 [ 191.596353][T10401] tipc: Can't bind to reserved service type 0 [ 191.892609][ T39] audit: type=1326 audit(1729938814.017:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 191.898654][ T39] audit: type=1326 audit(1729938814.017:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 191.905232][ T39] audit: type=1326 audit(1729938814.027:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 191.910974][ T39] audit: type=1326 audit(1729938814.027:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 191.917266][ T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 191.919282][ T39] audit: type=1326 audit(1729938814.027:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 191.926400][ T39] audit: type=1326 audit(1729938814.027:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 191.932615][ T39] audit: type=1326 audit(1729938814.027:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 191.938817][ T39] audit: type=1326 audit(1729938814.027:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 191.949056][ T39] audit: type=1326 audit(1729938814.027:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 192.011761][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 192.104936][ T8] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 192.108631][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.111277][ T8] usb 6-1: config 0 has no interfaces? [ 192.113731][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.116408][ T8] usb 6-1: config 0 has no interfaces? [ 192.118756][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.121651][ T8] usb 6-1: config 0 has no interfaces? [ 192.124347][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.127674][ T8] usb 6-1: config 0 has no interfaces? [ 192.129878][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.132779][ T8] usb 6-1: config 0 has no interfaces? [ 192.134961][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.137580][ T8] usb 6-1: config 0 has no interfaces? [ 192.139733][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.142857][ T8] usb 6-1: config 0 has no interfaces? [ 192.146214][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.148941][ T8] usb 6-1: config 0 has no interfaces? [ 192.152211][ T8] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 192.154649][ T8] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 192.156820][ T8] usb 6-1: Product: syz [ 192.157921][ T8] usb 6-1: Manufacturer: syz [ 192.159136][ T8] usb 6-1: SerialNumber: syz [ 192.161382][ T8] usb 6-1: config 0 descriptor?? [ 192.304577][ T6012] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 192.367139][ T8] usb 6-1: USB disconnect, device number 14 [ 192.694499][ T6012] usb 7-1: Using ep0 maxpacket: 8 [ 192.697031][ T6012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.699839][ T6012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.702354][ T6012] usb 7-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 192.704812][ T6012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.707925][ T6012] usb 7-1: config 0 descriptor?? [ 192.980396][T10463] blktrace: Concurrent blktraces are not allowed on loop3 [ 193.139140][ T6012] hid-alps 0003:044E:121E.000A: item fetching failed at offset 5/7 [ 193.141390][ T6012] hid-alps 0003:044E:121E.000A: parse failed [ 193.143093][ T6012] hid-alps 0003:044E:121E.000A: probe with driver hid-alps failed with error -22 [ 193.444980][ T6012] usb 7-1: USB disconnect, device number 27 [ 193.705118][T10475] 9pnet_fd: Insufficient options for proto=fd [ 193.757978][T10477] syzkaller0: entered promiscuous mode [ 193.760031][T10477] syzkaller0: entered allmulticast mode [ 193.883262][T10481] overlayfs: conflicting options: userxattr,metacopy=on [ 194.080209][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.083225][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.031138][T10541] 9pnet_fd: Insufficient options for proto=fd [ 195.855541][ T39] kauditd_printk_skb: 30 callbacks suppressed [ 195.855553][ T39] audit: type=1326 audit(1729942912.983:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 195.863283][ T39] audit: type=1326 audit(1729942912.983:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 195.872982][ T39] audit: type=1326 audit(1729942912.983:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 195.881462][ T39] audit: type=1326 audit(1729942912.983:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 195.889810][ T39] audit: type=1326 audit(1729942912.983:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 195.898270][ T39] audit: type=1326 audit(1729942912.983:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 195.899794][ T8] IPVS: starting estimator thread 0... [ 195.906830][ T39] audit: type=1326 audit(1729942912.983:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 195.916513][ T39] audit: type=1326 audit(1729942912.983:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 195.926888][ T39] audit: type=1326 audit(1729942912.983:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 195.937581][ T39] audit: type=1326 audit(1729942912.983:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187c57e719 code=0x7ffc0000 [ 196.004649][T10565] IPVS: using max 33 ests per chain, 79200 per kthread [ 196.147994][T10572] blktrace: Concurrent blktraces are not allowed on loop3 [ 196.938343][T10600] 9pnet_fd: Insufficient options for proto=fd [ 197.013834][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.318187][T10621] blktrace: Concurrent blktraces are not allowed on loop3 [ 197.636259][T10626] 9pnet_fd: Insufficient options for proto=fd [ 197.668999][T10628] usb usb8: usbfs: process 10628 (syz.4.1674) did not claim interface 0 before use [ 197.961676][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.205468][T10656] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.634278][T10709] overlayfs: failed to resolve './file1': -2 [ 200.134551][ T5993] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 200.318003][ T5993] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 200.323446][ T5993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.328270][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.331531][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.340833][ T5993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.343528][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.348290][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.350972][ T5993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.353607][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.356273][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.358877][ T5993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.361761][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.364112][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.369816][ T5993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.372907][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.375483][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.378047][ T5993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.380833][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.383251][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.386145][ T5993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.388953][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.391390][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.394207][ T5993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.399740][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.402857][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.407272][ T5993] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 200.409867][ T5993] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 200.412101][ T5993] usb 7-1: Product: syz [ 200.413420][ T5993] usb 7-1: Manufacturer: syz [ 200.414827][ T5993] usb 7-1: SerialNumber: syz [ 200.417629][ T5993] usb 7-1: config 0 descriptor?? [ 200.420437][ T5993] yurex 7-1:0.0: Could not find endpoints [ 200.623781][ T5993] usb 7-1: USB disconnect, device number 28 [ 201.073069][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 201.367765][T10754] delete_channel: no stack [ 201.371024][ T39] kauditd_printk_skb: 45 callbacks suppressed [ 201.371033][ T39] audit: type=1400 audit(1729942918.493:1211): avc: denied { write } for pid=10746 comm="syz.2.1722" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 201.850391][ T63] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.493534][ T6012] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 202.848567][T10794] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1736'. [ 202.851061][T10794] netlink: 'syz.5.1736': attribute type 2 has an invalid length. [ 203.046151][ T6012] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 203.049061][ T6012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.051790][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.054511][ T6012] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.057914][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.060457][ T6012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.063131][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.065946][ T6012] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.069366][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.071889][ T6012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.074737][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.077195][ T6012] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.080566][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.083164][ T6012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.086689][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.089115][ T6012] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.092538][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.095271][ T6012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.097950][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.100364][ T6012] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.104236][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.107366][ T6012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.110123][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.112549][ T6012] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.116060][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.118575][ T6012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.121286][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.124155][ T6012] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.128058][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.130537][ T6012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.133392][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.135817][ T6012] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.139280][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.142530][ T6012] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 203.145833][ T6012] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 203.148034][ T6012] usb 6-1: Product: syz [ 203.149196][ T6012] usb 6-1: Manufacturer: syz [ 203.150469][ T6012] usb 6-1: SerialNumber: syz [ 203.152860][ T6012] usb 6-1: config 0 descriptor?? [ 203.155609][ T6012] yurex 6-1:0.0: Could not find endpoints [ 203.360963][ T35] usb 6-1: USB disconnect, device number 15 [ 203.503449][T10801] lo speed is unknown, defaulting to 1000 [ 203.609753][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1740'. [ 203.614141][T10804] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1740'. [ 203.996800][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'. [ 204.119658][ T39] audit: type=1326 audit(1729942921.243:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1748" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df397e719 code=0x7ffc0000 [ 204.126507][ T39] audit: type=1326 audit(1729942921.243:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1748" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df397e719 code=0x7ffc0000 [ 204.133264][ T39] audit: type=1326 audit(1729942921.243:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1748" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5df397e719 code=0x7ffc0000 [ 204.141594][ T39] audit: type=1326 audit(1729942921.243:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1748" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df397e719 code=0x7ffc0000 [ 204.149083][ T39] audit: type=1326 audit(1729942921.243:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1748" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df397e719 code=0x7ffc0000 [ 204.156537][ T39] audit: type=1326 audit(1729942921.243:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1748" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5df397e719 code=0x7ffc0000 [ 204.174555][ T39] audit: type=1326 audit(1729942921.243:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1748" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df397e719 code=0x7ffc0000 [ 204.184499][ T39] audit: type=1326 audit(1729942921.243:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1748" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df397e719 code=0x7ffc0000 [ 204.190607][ T39] audit: type=1326 audit(1729942921.243:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz.1.1748" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5df397e719 code=0x7ffc0000 [ 204.216223][T10830] xt_HMARK: spi-set and port-set can't be combined [ 204.285431][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'. [ 205.202105][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1764'. [ 205.574527][ T8] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 207.560315][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 207.560328][ T39] audit: type=1400 audit(1729942924.643:1247): avc: denied { ioctl } for pid=10911 comm="syz.4.1781" path="socket:[28076]" dev="sockfs" ino=28076 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 207.918332][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1784'. [ 207.971617][ T39] audit: type=1400 audit(1729942925.093:1248): avc: denied { ioctl } for pid=10928 comm="syz.5.1786" path="socket:[27213]" dev="sockfs" ino=27213 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.974600][T10929] net_ratelimit: 86 callbacks suppressed [ 207.974611][T10929] veth1_to_team: mtu less than device minimum [ 208.008592][T10930] overlayfs: failed to resolve './file0': -2 [ 208.247428][T10939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1790'. [ 208.250832][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'. [ 208.504840][T10948] usb usb8: usbfs: process 10948 (syz.1.1793) did not claim interface 0 before use [ 208.711538][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 208.757705][ T39] audit: type=1400 audit(1729942925.883:1249): avc: denied { checkpoint_restore } for pid=10954 comm="syz.1.1796" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 208.935837][ T39] audit: type=1400 audit(1729942926.063:1250): avc: denied { setopt } for pid=10977 comm="syz.5.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 209.114555][ T6012] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 209.274584][ T6012] usb 7-1: Using ep0 maxpacket: 32 [ 209.281296][ T6012] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 209.287844][ T6012] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 209.291450][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.294902][ T6012] usb 7-1: Product: syz [ 209.298964][ T6012] usb 7-1: Manufacturer: syz [ 209.301197][ T6012] usb 7-1: SerialNumber: syz [ 209.304871][ T6012] usb 7-1: config 0 descriptor?? [ 209.309492][T10970] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.317359][ T6012] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.442348][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1814'. [ 209.519301][T10316] usb 7-1: USB disconnect, device number 30 [ 209.556103][T11004] 9pnet_fd: Insufficient options for proto=fd [ 209.644754][ T39] audit: type=1400 audit(1729942926.773:1251): avc: denied { map } for pid=11009 comm="syz.4.1821" path="socket:[28159]" dev="sockfs" ino=28159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 209.656553][ T39] audit: type=1400 audit(1729942926.773:1252): avc: denied { accept } for pid=11009 comm="syz.4.1821" path="socket:[28159]" dev="sockfs" ino=28159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 209.807076][T11014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1822'. [ 209.813168][T11014] vlan2: entered promiscuous mode [ 210.078904][ T39] audit: type=1400 audit(1729942927.203:1253): avc: denied { getopt } for pid=11024 comm="syz.1.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.293962][T11041] syz.2.1834 (11041): attempted to duplicate a private mapping with mremap. This is not supported. [ 210.414567][ T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 210.564525][ T8] usb 10-1: Using ep0 maxpacket: 8 [ 210.567485][ T8] usb 10-1: config 0 has no interfaces? [ 210.569002][ T8] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.573996][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.577452][ T8] usb 10-1: config 0 descriptor?? [ 210.577935][T11049] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 210.786853][ T8] usb 10-1: USB disconnect, device number 3 [ 211.112303][T11058] 9pnet_fd: Insufficient options for proto=fd [ 211.384535][ T5993] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 211.451465][T11073] usb usb8: usbfs: process 11073 (syz.2.1846) did not claim interface 0 before use [ 211.595893][ T5993] usb 6-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 211.598561][ T5993] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 211.600844][ T5993] usb 6-1: config 1 has no interface number 0 [ 211.602441][ T5993] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.607420][ T5993] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.609749][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.611819][ T5993] usb 6-1: Product: syz [ 211.612906][ T5993] usb 6-1: Manufacturer: syz [ 211.614112][ T5993] usb 6-1: SerialNumber: syz [ 211.619539][ T5993] usb 6-1: selecting invalid altsetting 1 [ 211.839564][T11097] usb usb8: usbfs: process 11097 (syz.2.1857) did not claim interface 0 before use [ 212.071950][T11106] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1861'. [ 212.096786][ T5993] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 212.098390][ T5993] cdc_ncm 6-1:1.1: bind() failure [ 212.862888][T11133] 9pnet_fd: Insufficient options for proto=fd [ 214.155858][ T35] usb 6-1: USB disconnect, device number 16 [ 214.229400][T11173] trusted_key: syz.1.1889 sent an empty control message without MSG_MORE. [ 214.900032][ T39] audit: type=1400 audit(1729942932.023:1254): avc: denied { read } for pid=11225 comm="syz.5.1895" path="socket:[28286]" dev="sockfs" ino=28286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.984026][T11236] Bluetooth: MGMT ver 1.23 [ 215.360729][T11265] usb usb8: usbfs: process 11265 (syz.4.1910) did not claim interface 0 before use [ 215.664810][ T6012] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 215.816629][ T6012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.820380][ T6012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.823838][ T6012] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 215.827625][ T6012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.832183][ T6012] usb 7-1: config 0 descriptor?? [ 215.884483][ T25] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 215.964597][ T1318] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 216.035172][ T25] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 216.039196][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.041634][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 216.044485][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.047387][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.049798][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 216.052377][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.055175][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.057572][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 216.060053][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.062505][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.064896][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 216.067437][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.070000][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.072408][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 216.075011][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.077531][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.079914][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 216.082449][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.085175][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.087540][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 216.090070][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.092658][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.095060][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 216.097639][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.101130][ T25] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 216.103565][ T25] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 216.105812][ T25] usb 9-1: Product: syz [ 216.106945][ T25] usb 9-1: Manufacturer: syz [ 216.108232][ T25] usb 9-1: SerialNumber: syz [ 216.110755][ T25] usb 9-1: config 0 descriptor?? [ 216.113834][ T25] yurex 9-1:0.0: Could not find endpoints [ 216.114718][ T1318] usb 6-1: Using ep0 maxpacket: 8 [ 216.118649][ T1318] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.121352][ T1318] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.125313][ T1318] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.128565][ T1318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.130712][ T1318] usb 6-1: Product: syz [ 216.131919][ T1318] usb 6-1: Manufacturer: syz [ 216.133200][ T1318] usb 6-1: SerialNumber: syz [ 216.243527][ T6012] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 216.245621][ T6012] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 216.247488][ T6012] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 216.249300][ T6012] lg-g15 0003:046D:C222.000B: unknown main item tag 0x1 [ 216.251118][ T6012] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 216.252951][ T6012] lg-g15 0003:046D:C222.000B: item fetching failed at offset 10/11 [ 216.255475][ T6012] lg-g15 0003:046D:C222.000B: probe with driver lg-g15 failed with error -22 [ 216.317439][ T35] usb 9-1: USB disconnect, device number 14 [ 216.448823][ T6012] usb 7-1: USB disconnect, device number 31 [ 217.517718][ T39] audit: type=1400 audit(1729942934.643:1255): avc: denied { map } for pid=11329 comm="syz.4.1941" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 217.524485][ T39] audit: type=1400 audit(1729942934.643:1256): avc: denied { execute } for pid=11329 comm="syz.4.1941" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 217.606357][T11333] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 217.691228][T11336] TCP: out of memory -- consider tuning tcp_mem [ 217.861145][T11344] random: crng reseeded on system resumption [ 218.161833][T11363] lo speed is unknown, defaulting to 1000 [ 218.393967][T11379] ubi: mtd0 is already attached to ubi0 [ 218.398957][T11379] ubi0: detaching mtd0 [ 218.404218][T11379] ubi0: mtd0 is detached [ 218.676097][T11387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.682600][T11387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.727407][T11387] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.730660][T11387] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.734702][ T1318] usb 6-1: 0:2 : does not exist [ 218.735198][T11387] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.739717][T11387] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.740722][ T1318] usb 6-1: USB disconnect, device number 17 [ 218.762029][ T6086] udevd[6086]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.792847][ T8] lo speed is unknown, defaulting to 1000 [ 218.793000][T11390] bridge_slave_0: entered promiscuous mode [ 218.797068][T11390] bridge_slave_0: entered allmulticast mode [ 218.842710][ T39] audit: type=1400 audit(1729942935.963:1257): avc: denied { setattr } for pid=11395 comm="syz.5.1965" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 218.850406][ T39] audit: type=1400 audit(1729942935.963:1258): avc: denied { write } for pid=11395 comm="syz.5.1965" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 218.859302][ T39] audit: type=1400 audit(1729942935.963:1259): avc: denied { open } for pid=11395 comm="syz.5.1965" path="/181/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.075810][T11410] binder_alloc: 11407: pid 11407 spamming oneway? 1 buffers allocated for a total size of 4096 [ 219.085315][ T6202] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 219.190709][T11409] syz.5.1971 (11409): drop_caches: 2 [ 219.193855][T11409] syz.5.1971 (11409): drop_caches: 2 [ 219.245234][ T6202] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 219.248118][ T6202] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.250385][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.253064][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 219.255510][ T6202] usb 9-1: config 0 interface 0 has no altsetting 0 [ 219.258115][ T6202] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.260446][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.263183][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 219.265946][ T6202] usb 9-1: config 0 interface 0 has no altsetting 0 [ 219.268701][ T6202] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.271162][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.274057][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 219.277369][ T6202] usb 9-1: config 0 interface 0 has no altsetting 0 [ 219.279917][ T6202] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.282631][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.285958][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 219.288703][ T6202] usb 9-1: config 0 interface 0 has no altsetting 0 [ 219.291309][ T6202] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.293767][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.296710][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 219.299289][ T6202] usb 9-1: config 0 interface 0 has no altsetting 0 [ 219.301787][ T6202] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.302876][T11418] netlink: 'syz.5.1974': attribute type 10 has an invalid length. [ 219.304201][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.309085][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 219.309666][T11418] syz_tun: entered promiscuous mode [ 219.311609][ T6202] usb 9-1: config 0 interface 0 has no altsetting 0 [ 219.312326][ T6202] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.319164][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.321868][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 219.324432][ T6202] usb 9-1: config 0 interface 0 has no altsetting 0 [ 219.325123][T11418] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 219.326848][ T6202] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.330736][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.333550][ T6202] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 219.336479][ T6202] usb 9-1: config 0 interface 0 has no altsetting 0 [ 219.339778][ T6202] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 219.342262][ T6202] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 219.349775][ T6202] usb 9-1: Product: syz [ 219.350905][ T6202] usb 9-1: Manufacturer: syz [ 219.352152][ T6202] usb 9-1: SerialNumber: syz [ 219.354810][ T6202] usb 9-1: config 0 descriptor?? [ 219.357408][ T6202] yurex 9-1:0.0: Could not submitting URB [ 219.358945][ T6202] yurex 9-1:0.0: probe with driver yurex failed with error -5 [ 219.559781][ T6202] usb 9-1: USB disconnect, device number 15 [ 220.150793][ T39] audit: type=1400 audit(1729942937.273:1260): avc: denied { write } for pid=11455 comm="syz.1.1989" path="socket:[28594]" dev="sockfs" ino=28594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 220.242517][T11461] virtio-fs: tag <(null)> not found [ 220.334515][ T6202] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 220.487214][ T6202] usb 9-1: config 0 has no interfaces? [ 220.488792][ T6202] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 220.492766][ T6202] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.496747][ T6202] usb 9-1: config 0 descriptor?? [ 220.716655][T11450] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 220.721965][T10316] usb 9-1: USB disconnect, device number 16 [ 221.284532][ T6202] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 221.435329][ T6202] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 221.438261][ T6202] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.444168][ T6202] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.447148][ T6202] usb 6-1: config 0 interface 0 has no altsetting 0 [ 221.449748][ T6202] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.451995][ T6202] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.454849][ T6202] usb 6-1: config 0 interface 0 has no altsetting 0 [ 221.457346][ T6202] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.459687][ T6202] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.462311][ T6202] usb 6-1: config 0 interface 0 has no altsetting 0 [ 221.464639][ T6202] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.467137][ T6202] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.469949][ T6202] usb 6-1: config 0 interface 0 has no altsetting 0 [ 221.472456][ T6202] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.475009][ T6202] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.477641][ T6202] usb 6-1: config 0 interface 0 has no altsetting 0 [ 221.480047][ T6202] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.482530][ T6202] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.485506][ T6202] usb 6-1: config 0 interface 0 has no altsetting 0 [ 221.487996][ T6202] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.490302][ T6202] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.493112][ T6202] usb 6-1: config 0 interface 0 has no altsetting 0 [ 221.495659][ T6202] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.497955][ T6202] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.500748][ T6202] usb 6-1: config 0 interface 0 has no altsetting 0 [ 221.503939][ T6202] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 221.506411][ T6202] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 221.508578][ T6202] usb 6-1: Product: syz [ 221.509677][ T6202] usb 6-1: Manufacturer: syz [ 221.511160][ T6202] usb 6-1: SerialNumber: syz [ 221.513358][ T6202] usb 6-1: config 0 descriptor?? [ 221.518752][ T6202] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 221.719221][ T5993] usb 6-1: USB disconnect, device number 18 [ 221.721949][ T5993] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 222.074823][T11487] lo speed is unknown, defaulting to 1000 [ 222.116346][T11487] syzkaller1: entered promiscuous mode [ 222.118047][T11487] syzkaller1: entered allmulticast mode [ 222.253253][T11493] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.392863][T11493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.401515][T11493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.491286][T11493] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.493601][T11493] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.496476][T11493] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.499415][T11493] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.599439][T11516] overlayfs: failed to resolve './file0': -2 [ 222.608570][ T39] audit: type=1326 audit(1729942939.733:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11517 comm="syz.2.2014" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x0 [ 223.512925][T11552] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 224.566116][T11587] 9pnet_fd: Insufficient options for proto=fd [ 224.594509][ T30] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 224.759506][ T30] usb 9-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config [ 224.762374][ T30] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.765916][ T30] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 224.768402][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.770550][ T30] usb 9-1: SerialNumber: syz [ 224.981386][ T30] usb 9-1: 0:2 : does not exist [ 224.986355][ T30] usb 9-1: USB disconnect, device number 17 [ 224.997127][ T6086] udevd[6086]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.846953][T11618] 9pnet_fd: Insufficient options for proto=fd [ 225.849444][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2057'. [ 227.653995][T11654] 9pnet_fd: Insufficient options for proto=fd [ 227.785054][ T67] Bluetooth: hci3: link tx timeout [ 227.786664][ T67] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.817693][T11704] 9pnet_fd: Insufficient options for proto=fd [ 229.402263][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2098'. [ 229.544584][ T6012] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 229.617709][T11730] xt_socket: unknown flags 0x58 [ 229.694630][ T6012] usb 6-1: Using ep0 maxpacket: 8 [ 229.706072][ T6012] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.710010][ T6012] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.715134][ T6012] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.718064][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.720327][ T6012] usb 6-1: Product: syz [ 229.721664][ T6012] usb 6-1: Manufacturer: syz [ 229.722876][ T6012] usb 6-1: SerialNumber: syz [ 229.834597][ T5951] Bluetooth: hci3: command 0x0406 tx timeout [ 230.865231][T11768] cgroup: release_agent respecified [ 231.154631][T10316] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 231.305201][T10316] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 231.308731][T10316] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.311172][T10316] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.314022][T10316] usb 10-1: config 0 interface 0 has no altsetting 0 [ 231.316940][T10316] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.319436][T10316] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.322301][T10316] usb 10-1: config 0 interface 0 has no altsetting 0 [ 231.325259][T10316] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.327683][T10316] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.330472][T10316] usb 10-1: config 0 interface 0 has no altsetting 0 [ 231.332951][T10316] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.335500][T10316] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.338320][T10316] usb 10-1: config 0 interface 0 has no altsetting 0 [ 231.340824][T10316] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.343212][T10316] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.346137][T10316] usb 10-1: config 0 interface 0 has no altsetting 0 [ 231.348593][T10316] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.350883][T10316] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.353688][T10316] usb 10-1: config 0 interface 0 has no altsetting 0 [ 231.356259][T10316] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.358539][T10316] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.361349][T10316] usb 10-1: config 0 interface 0 has no altsetting 0 [ 231.363747][T10316] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.366229][T10316] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.369072][T10316] usb 10-1: config 0 interface 0 has no altsetting 0 [ 231.372253][T10316] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 231.374744][T10316] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 231.376997][T10316] usb 10-1: Product: syz [ 231.378110][T10316] usb 10-1: Manufacturer: syz [ 231.379377][T10316] usb 10-1: SerialNumber: syz [ 231.381951][T10316] usb 10-1: config 0 descriptor?? [ 231.385373][T10316] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 231.590065][T10316] usb 10-1: USB disconnect, device number 4 [ 231.592560][T10316] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 231.867619][ T39] audit: type=1326 audit(1729942948.993:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz.2.2129" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x0 [ 232.008782][ T6012] usb 6-1: 0:2 : does not exist [ 232.016231][ T6012] usb 6-1: USB disconnect, device number 19 [ 232.037472][ T6086] udevd[6086]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.124960][T11817] overlayfs: missing 'lowerdir' [ 232.301960][T11833] 9pnet_fd: Insufficient options for proto=fd [ 232.574526][ T5993] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 232.725280][ T5993] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 232.728436][ T5993] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.731153][ T5993] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.733930][ T5993] usb 10-1: config 0 interface 0 has no altsetting 0 [ 232.737389][ T5993] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.740559][ T5993] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.744175][ T5993] usb 10-1: config 0 interface 0 has no altsetting 0 [ 232.747549][ T5993] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.750737][ T5993] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.754518][ T5993] usb 10-1: config 0 interface 0 has no altsetting 0 [ 232.759296][ T5993] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.762448][ T5993] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.766256][ T5993] usb 10-1: config 0 interface 0 has no altsetting 0 [ 232.769187][ T5993] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.772742][ T5993] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.776603][ T5993] usb 10-1: config 0 interface 0 has no altsetting 0 [ 232.779552][ T5993] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.782461][ T5993] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.786312][ T5993] usb 10-1: config 0 interface 0 has no altsetting 0 [ 232.789430][ T5993] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.792130][ T5993] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.795882][ T5993] usb 10-1: config 0 interface 0 has no altsetting 0 [ 232.799363][ T5993] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.802161][ T5993] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.805940][ T5993] usb 10-1: config 0 interface 0 has no altsetting 0 [ 232.816413][ T5993] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 232.817939][T11844] binder: BINDER_SET_CONTEXT_MGR already set [ 232.819454][ T5993] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 232.819469][ T5993] usb 10-1: Product: syz [ 232.819483][ T5993] usb 10-1: Manufacturer: syz [ 232.819496][ T5993] usb 10-1: SerialNumber: syz [ 232.820768][ T5993] usb 10-1: config 0 descriptor?? [ 232.821418][T11844] binder: 11843:11844 ioctl 4018620d 20000040 returned -16 [ 232.826312][ T5993] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 232.840319][T11844] syz.2.2151 (11844): drop_caches: 2 [ 232.842229][T11844] syz.2.2151 (11844): drop_caches: 2 [ 233.032056][ T5993] usb 10-1: USB disconnect, device number 5 [ 233.038189][ T5993] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 233.044072][ T39] audit: type=1400 audit(1729942950.163:1263): avc: denied { map } for pid=11866 comm="syz.2.2162" path="socket:[32162]" dev="sockfs" ino=32162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.051732][ T39] audit: type=1400 audit(1729942950.163:1264): avc: denied { read } for pid=11866 comm="syz.2.2162" path="socket:[32162]" dev="sockfs" ino=32162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.141038][T11877] syz.1.2167 (11877): drop_caches: 2 [ 233.142932][T11877] syz.1.2167 (11877): drop_caches: 2 [ 233.560853][T11905] overlayfs: missing 'workdir' [ 233.633842][T11914] syz.1.2184 (11914): drop_caches: 2 [ 233.635664][T11914] syz.1.2184 (11914): drop_caches: 2 [ 233.664972][T11920] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2187'. [ 233.953788][ T39] audit: type=1326 audit(1729942951.073:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.2.2192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 233.964906][ T39] audit: type=1326 audit(1729942951.073:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.2.2192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 233.973573][ T39] audit: type=1326 audit(1729942951.083:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.2.2192" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 233.985703][ T6012] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 233.998810][ T39] audit: type=1326 audit(1729942951.083:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.2.2192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 234.013862][ T39] audit: type=1326 audit(1729942951.083:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.2.2192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 234.022520][ T39] audit: type=1326 audit(1729942951.083:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.2.2192" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 234.031213][ T39] audit: type=1326 audit(1729942951.083:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.2.2192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff037e719 code=0x7ffc0000 [ 234.069922][T11938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2195'. [ 234.284957][ T6012] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 234.288611][ T6012] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.291131][ T6012] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.294368][ T6012] usb 10-1: config 0 interface 0 has no altsetting 0 [ 234.297599][ T6012] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.300281][ T6012] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.303375][ T6012] usb 10-1: config 0 interface 0 has no altsetting 0 [ 234.308306][ T6012] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.310965][ T6012] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.314151][ T6012] usb 10-1: config 0 interface 0 has no altsetting 0 [ 234.317395][ T6012] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.320113][ T6012] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.323289][ T6012] usb 10-1: config 0 interface 0 has no altsetting 0 [ 234.326922][ T6012] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.329603][ T6012] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.332831][ T6012] usb 10-1: config 0 interface 0 has no altsetting 0 [ 234.335990][ T6012] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.338668][ T6012] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.341847][ T6012] usb 10-1: config 0 interface 0 has no altsetting 0 [ 234.345795][ T6012] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.348492][ T6012] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.351710][ T6012] usb 10-1: config 0 interface 0 has no altsetting 0 [ 234.354904][ T6012] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.357569][ T6012] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.360729][ T6012] usb 10-1: config 0 interface 0 has no altsetting 0 [ 234.365438][ T6012] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 234.368141][ T6012] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 234.370618][ T6012] usb 10-1: Product: syz [ 234.371960][ T6012] usb 10-1: Manufacturer: syz [ 234.373390][ T6012] usb 10-1: SerialNumber: syz [ 234.378674][ T6012] usb 10-1: config 0 descriptor?? [ 234.390956][ T6012] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 234.586254][T10316] usb 10-1: USB disconnect, device number 6 [ 234.596170][T10316] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 234.933222][T11955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2201'. [ 235.030950][T11963] binder: BINDER_SET_CONTEXT_MGR already set [ 235.032625][T11963] binder: 11962:11963 ioctl 4018620d 20000040 returned -16 [ 235.038207][T11963] syz.4.2205 (11963): drop_caches: 2 [ 235.041411][T11963] syz.4.2205 (11963): drop_caches: 2 [ 235.668513][T12010] lo speed is unknown, defaulting to 1000 [ 235.724944][T12015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2224'. [ 235.769364][ T67] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 235.772077][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u33:0 Not tainted 6.12.0-rc4-syzkaller-00256-gc71f8fb4dc91 #0 [ 235.774749][ T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.777486][ T67] Workqueue: hci0 hci_rx_work [ 235.778719][ T67] Call Trace: [ 235.779574][ T67] [ 235.780363][ T67] dump_stack_lvl+0x16c/0x1f0 [ 235.781595][ T67] sysfs_warn_dup+0x7f/0xa0 [ 235.782738][ T67] sysfs_create_dir_ns+0x24d/0x2b0 [ 235.784033][ T67] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 235.785457][ T67] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 235.786805][ T67] ? kobject_add_internal+0x12d/0x990 [ 235.788320][ T67] ? do_raw_spin_unlock+0x172/0x230 [ 235.789628][ T67] kobject_add_internal+0x2c8/0x990 [ 235.790927][ T67] kobject_add+0x16f/0x240 [ 235.792054][ T67] ? __pfx_kobject_add+0x10/0x10 [ 235.793345][ T67] ? kobject_put+0xab/0x5a0 [ 235.794542][ T67] device_add+0x289/0x1a70 [ 235.796044][ T67] ? __pfx_dev_set_name+0x10/0x10 [ 235.797387][ T67] ? __pfx_device_add+0x10/0x10 [ 235.798665][ T67] ? mgmt_send_event_skb+0x2f2/0x460 [ 235.800078][ T67] hci_conn_add_sysfs+0x17e/0x230 [ 235.801404][ T67] le_conn_complete_evt+0x1078/0x1d80 [ 235.802813][ T67] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 235.804305][ T67] ? trace_contention_end+0xea/0x140 [ 235.805666][ T67] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 235.807293][ T67] ? skb_pull_data+0x166/0x210 [ 235.808841][ T67] hci_le_meta_evt+0x2e2/0x5d0 [ 235.810068][ T67] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 235.811712][ T67] hci_event_packet+0x666/0x1180 [ 235.812944][ T67] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 235.814329][ T67] ? __pfx_hci_event_packet+0x10/0x10 [ 235.815726][ T67] ? kcov_remote_start+0x3df/0x6e0 [ 235.817018][ T67] hci_rx_work+0x2c6/0x16c0 [ 235.818185][ T67] ? lock_acquire+0x2f/0xb0 [ 235.819328][ T67] ? process_one_work+0x921/0x1ba0 [ 235.820752][ T67] process_one_work+0x9c5/0x1ba0 [ 235.822166][ T67] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 235.823621][ T67] ? __pfx_process_one_work+0x10/0x10 [ 235.824986][ T67] ? assign_work+0x1a0/0x250 [ 235.826204][ T67] worker_thread+0x6c8/0xf00 [ 235.827403][ T67] ? __pfx_worker_thread+0x10/0x10 [ 235.828761][ T67] kthread+0x2c1/0x3a0 [ 235.829812][ T67] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.831280][ T67] ? __pfx_kthread+0x10/0x10 [ 235.832514][ T67] ret_from_fork+0x45/0x80 [ 235.833697][ T67] ? __pfx_kthread+0x10/0x10 [ 235.834907][ T67] ret_from_fork_asm+0x1a/0x30 [ 235.836190][ T67] [ 235.837397][ T67] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 235.841093][ T67] Bluetooth: hci0: failed to register connection device [ 236.111364][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.114851][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.117851][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.122707][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.133167][ T5951] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.136520][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.156847][T12024] lo speed is unknown, defaulting to 1000 [ 236.241020][T12024] chnl_net:caif_netlink_parms(): no params data found [ 236.346472][T12024] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.349021][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.351255][T12024] bridge_slave_0: entered allmulticast mode [ 236.353747][T12024] bridge_slave_0: entered promiscuous mode [ 236.357025][T12024] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.358923][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.360860][T12024] bridge_slave_1: entered allmulticast mode [ 236.362894][T12024] bridge_slave_1: entered promiscuous mode [ 236.408695][T12024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.412727][T12024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.455787][T12024] team0: Port device team_slave_0 added [ 236.459042][T12024] team0: Port device team_slave_1 added [ 236.492737][T12024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.495238][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.501790][T12024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.505472][T12024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.507232][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.513470][T12024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.537516][T12024] hsr_slave_0: entered promiscuous mode [ 236.539540][T12024] hsr_slave_1: entered promiscuous mode [ 236.684490][T10316] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 236.845403][T10316] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 236.855481][T10316] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.858635][T10316] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.861909][T10316] usb 9-1: config 0 interface 0 has no altsetting 0 [ 236.870723][T10316] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.873356][T10316] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.877198][T10316] usb 9-1: config 0 interface 0 has no altsetting 0 [ 236.881523][T10316] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.884815][T10316] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.884937][ T76] bridge_slave_1: left promiscuous mode [ 236.887856][T10316] usb 9-1: config 0 interface 0 has no altsetting 0 [ 236.891376][T10316] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.892331][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.893634][T10316] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.899204][T10316] usb 9-1: config 0 interface 0 has no altsetting 0 [ 236.902400][T10316] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.902431][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.905534][T10316] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.911373][T10316] usb 9-1: config 0 interface 0 has no altsetting 0 [ 236.914708][T10316] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.917332][T10316] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.920209][T10316] usb 9-1: config 0 interface 0 has no altsetting 0 [ 236.923231][T10316] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.926516][T10316] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.930220][T10316] usb 9-1: config 0 interface 0 has no altsetting 0 [ 236.934259][T10316] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.936740][T10316] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.939415][T10316] usb 9-1: config 0 interface 0 has no altsetting 0 [ 236.942874][T10316] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 236.945776][T10316] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 236.948564][T10316] usb 9-1: Product: syz [ 236.950124][T10316] usb 9-1: Manufacturer: syz [ 236.951437][T10316] usb 9-1: SerialNumber: syz [ 236.958332][T10316] usb 9-1: config 0 descriptor?? [ 236.962454][T10316] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 237.070323][ T76] bridge0 (unregistering): left promiscuous mode [ 237.178764][ T5993] usb 9-1: USB disconnect, device number 18 [ 237.181103][ T5993] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 237.227202][ T76] bond0 (unregistering): left promiscuous mode [ 237.229150][ T76] bond_slave_0: left promiscuous mode [ 237.231225][ T76] bond_slave_1: left promiscuous mode [ 237.244136][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.247636][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.250421][ T76] bond0 (unregistering): Released all slaves [ 237.330187][T12024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.333625][T12024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.335670][ T76] IPVS: stopping backup sync thread 7842 ... [ 237.341105][T12024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.344671][T12024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.388160][T12024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.396832][T12024] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.400505][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.402294][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.419201][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.421237][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.520696][ T76] hsr_slave_0: left promiscuous mode [ 237.523025][ T76] hsr_slave_1: left promiscuous mode [ 237.526200][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.528907][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.714167][T12069] netlink: 'syz.4.2240': attribute type 1 has an invalid length. [ 238.168120][ T76] team0 (unregistering): Port device team_slave_1 removed [ 238.228794][ T67] Bluetooth: hci4: command tx timeout [ 238.248387][ T76] team0 (unregistering): Port device team_slave_0 removed [ 238.380987][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 238.380998][ T39] audit: type=1400 audit(1729942955.503:1276): avc: granted { setsecparam } for pid=12092 comm="syz.5.2250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 238.820371][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2255'. [ 238.832985][T12024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.852215][T12024] veth0_vlan: entered promiscuous mode [ 238.856100][T12024] veth1_vlan: entered promiscuous mode [ 238.862902][ T39] audit: type=1326 audit(1729942955.983:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edfd7e719 code=0x7ffc0000 [ 238.874444][ T39] audit: type=1326 audit(1729942955.993:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edfd7e719 code=0x7ffc0000 [ 238.880302][T12024] veth0_macvtap: entered promiscuous mode [ 238.883540][ T39] audit: type=1326 audit(1729942955.993:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0edfd80637 code=0x7ffc0000 [ 238.884331][T12024] veth1_macvtap: entered promiscuous mode [ 238.894657][ T39] audit: type=1326 audit(1729942955.993:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0edfd805ac code=0x7ffc0000 [ 238.898919][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.901417][ T39] audit: type=1326 audit(1729942955.993:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0edfd804e4 code=0x7ffc0000 [ 238.904113][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.912865][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.915642][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.918794][ T39] audit: type=1326 audit(1729942955.993:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0edfd804e4 code=0x7ffc0000 [ 238.924219][T12024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.926249][ T39] audit: type=1326 audit(1729942955.993:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0edfd7d3aa code=0x7ffc0000 [ 238.930645][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.935505][ T39] audit: type=1326 audit(1729942955.993:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edfd7e719 code=0x7ffc0000 [ 238.937157][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.946682][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.949278][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.953196][T12024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.962301][T12024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.965166][T12024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.967389][T12024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.969579][T12024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.024285][T12119] syz.4.2262 (12119): drop_caches: 2 [ 239.034691][T12119] syz.4.2262 (12119): drop_caches: 2 [ 239.049922][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.053021][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.068835][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.071517][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.154024][ T76] IPVS: stop unused estimator thread 0... [ 239.204622][T12132] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 239.791752][T12172] binder: 12170:12172 ioctl 4018620d 0 returned -22 [ 239.798504][T12172] syz.5.2283 (12172): drop_caches: 2 [ 239.800386][T12172] syz.5.2283 (12172): drop_caches: 2 [ 239.857304][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2286'. [ 239.934569][ T39] audit: type=1400 audit(1729942957.053:1285): avc: denied { name_bind } for pid=12187 comm="syz.5.2291" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 240.304808][ T67] Bluetooth: hci4: command tx timeout [ 240.674622][ T35] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 240.757225][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2308'. [ 240.814810][T12228] bond0: (slave bond_slave_1): Releasing backup interface [ 240.827222][ T35] usb 9-1: Using ep0 maxpacket: 16 [ 240.830491][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.834253][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.843823][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.847711][ T35] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.849948][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.852838][ T35] usb 9-1: config 0 descriptor?? [ 241.263642][ T35] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 241.265943][ T35] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 241.268268][ T35] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 241.270478][ T35] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 241.272616][ T35] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 241.275191][ T35] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 241.277021][ T35] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 241.278968][ T35] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 241.281231][ T35] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 241.283537][ T35] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 241.291349][ T35] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.000C/input/input15 [ 241.302994][ T35] microsoft 0003:045E:07DA.000C: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 241.465753][T12220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.468895][T12220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.676481][T12220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.680049][T12220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.747988][ T6012] usb 9-1: USB disconnect, device number 19 [ 242.388421][ T67] Bluetooth: hci4: command tx timeout [ 243.084445][T12291] ALSA: seq fatal error: cannot create timer (-22) [ 243.094077][T12291] ALSA: seq fatal error: cannot create timer (-22) [ 243.436906][ T39] kauditd_printk_skb: 642 callbacks suppressed [ 243.436917][ T39] audit: type=1400 audit(1729942960.563:1928): avc: denied { create } for pid=12297 comm="syz.4.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.443684][ T39] audit: type=1400 audit(1729942960.563:1929): avc: denied { setopt } for pid=12297 comm="syz.4.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.474701][ T39] audit: type=1400 audit(1729942960.603:1930): avc: denied { read write } for pid=6888 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.484646][ T39] audit: type=1400 audit(1729942960.603:1931): avc: denied { read write open } for pid=6888 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.491043][ T39] audit: type=1400 audit(1729942960.613:1932): avc: denied { ioctl } for pid=6888 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.561274][ T39] audit: type=1400 audit(1729942960.683:1933): avc: denied { prog_load } for pid=12299 comm="syz.4.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 243.568858][ T39] audit: type=1400 audit(1729942960.683:1934): avc: denied { bpf } for pid=12299 comm="syz.4.2339" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.579079][ T39] audit: type=1400 audit(1729942960.683:1935): avc: denied { read write } for pid=9536 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.589956][ T39] audit: type=1400 audit(1729942960.683:1936): avc: denied { read write open } for pid=9536 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.598951][ T39] audit: type=1400 audit(1729942960.683:1937): avc: denied { ioctl } for pid=9536 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.464524][ T67] Bluetooth: hci4: command tx timeout [ 244.514538][T10316] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 244.664561][T10316] usb 10-1: Using ep0 maxpacket: 8 [ 244.672179][T10316] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.675652][T10316] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.685709][T10316] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.688083][T10316] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.690076][T10316] usb 10-1: Product: syz [ 244.691163][T10316] usb 10-1: Manufacturer: syz [ 244.692378][T10316] usb 10-1: SerialNumber: syz [ 246.434947][ T6012] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 246.593763][ T6012] usb 7-1: config index 0 descriptor too short (expected 244, got 18) [ 246.627391][ T6012] usb 7-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 246.632195][ T6012] usb 7-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 246.642042][ T6012] usb 7-1: Product: syz [ 246.643679][ T6012] usb 7-1: Manufacturer: syz [ 246.646705][ T6012] usb 7-1: SerialNumber: syz [ 246.661440][ T6012] usb 7-1: config 0 descriptor?? [ 246.678871][ T6012] ldusb 7-1:0.0: Interrupt in endpoint not found [ 246.888305][ T6012] usb 7-1: USB disconnect, device number 32 [ 246.956480][T12369] lo speed is unknown, defaulting to 1000 [ 247.609827][T10316] usb 10-1: 0:2 : does not exist [ 247.692856][T10316] usb 10-1: USB disconnect, device number 7 [ 247.784588][ T6202] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 247.797566][T12385] syz.2.2375 (12385): drop_caches: 2 [ 247.816335][T12385] syz.2.2375 (12385): drop_caches: 2 [ 247.863560][ T6086] udevd[6086]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.483922][ T39] kauditd_printk_skb: 377 callbacks suppressed [ 248.483933][ T39] audit: type=1400 audit(1729942965.603:2315): avc: denied { read write } for pid=12024 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.493954][ T39] audit: type=1400 audit(1729942965.613:2316): avc: denied { read write open } for pid=12024 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.508767][ T39] audit: type=1400 audit(1729942965.613:2317): avc: denied { ioctl } for pid=12024 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.532091][ T39] audit: type=1400 audit(1729942965.653:2318): avc: denied { create } for pid=12405 comm="syz.2.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.537398][ T39] audit: type=1400 audit(1729942965.663:2319): avc: denied { connect } for pid=12405 comm="syz.2.2385" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.542430][ T39] audit: type=1400 audit(1729942965.663:2320): avc: denied { create } for pid=12405 comm="syz.2.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.549400][ T39] audit: type=1400 audit(1729942965.663:2321): avc: denied { write } for pid=12405 comm="syz.2.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.559764][ T39] audit: type=1400 audit(1729942965.663:2322): avc: denied { write } for pid=12405 comm="syz.2.2385" laddr=fe80::ac36:3ff:fe77:12c9 lport=60 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.567213][ T39] audit: type=1400 audit(1729942965.663:2323): avc: denied { write } for pid=12405 comm="syz.2.2385" laddr=fe80::ac36:3ff:fe77:12c9 lport=60 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.573482][ T39] audit: type=1400 audit(1729942965.673:2324): avc: denied { read write } for pid=5947 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.134527][ T6202] usb 9-1: Using ep0 maxpacket: 32 [ 249.156161][ T6202] usb 9-1: unable to get BOS descriptor or descriptor too short [ 249.161468][ T6202] usb 9-1: config 1 interface 0 altsetting 130 bulk endpoint 0x82 has invalid maxpacket 16 [ 249.170357][ T6202] usb 9-1: config 1 interface 0 altsetting 130 bulk endpoint 0x3 has invalid maxpacket 16 [ 249.172995][ T6202] usb 9-1: config 1 interface 0 altsetting 130 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.176299][ T6202] usb 9-1: config 1 interface 0 has no altsetting 0 [ 249.200329][ T6202] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.202871][ T6202] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.214576][ T6202] usb 9-1: Product: syz [ 249.215760][ T6202] usb 9-1: Manufacturer: syz [ 249.217110][ T6202] usb 9-1: SerialNumber: syz [ 249.225897][T12381] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.234809][T12381] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.454344][ T6202] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 249.463022][ T6202] usb 9-1: USB disconnect, device number 20 [ 250.230286][T12432] binder: 12431:12432 ioctl 4018620d 0 returned -22 [ 250.253021][T12432] syz.5.2396 (12432): drop_caches: 2 [ 250.254790][T12432] syz.5.2396 (12432): drop_caches: 2 [ 250.488682][ T67] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 251.184490][ T6012] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 251.344751][ T6012] usb 10-1: Using ep0 maxpacket: 16 [ 251.355093][ T6012] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.358672][ T6012] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.361125][ T6012] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.366431][ T6012] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.369633][ T6012] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.380410][ T6012] usb 10-1: config 0 descriptor?? [ 251.712782][T12477] binder: 12476:12477 ioctl c0306201 0 returned -14 [ 251.726414][T12477] syz.2.2417 (12477): drop_caches: 2 [ 251.728895][T12477] syz.2.2417 (12477): drop_caches: 2 [ 251.814872][ T6012] usbhid 10-1:0.0: can't add hid device: -71 [ 251.816470][ T6012] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 251.819168][ T6012] usb 10-1: USB disconnect, device number 8 [ 252.864480][ T35] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 252.954782][T12511] binder: 12510:12511 ioctl c0306201 0 returned -14 [ 252.963119][T12511] syz.5.2429 (12511): drop_caches: 2 [ 252.965744][T12511] syz.5.2429 (12511): drop_caches: 2 [ 253.024539][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 253.031734][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.036690][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.039273][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.042498][ T35] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.045858][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.056331][ T35] usb 6-1: config 0 descriptor?? [ 253.485219][ T39] kauditd_printk_skb: 1929 callbacks suppressed [ 253.485230][ T39] audit: type=1400 audit(1729942970.603:4254): avc: denied { ioctl } for pid=12501 comm="syz.1.2426" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.498463][ T35] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 253.500351][ T35] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 253.503924][ T35] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 253.508748][ T35] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 253.510625][ T35] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 253.512486][ T35] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 253.514374][ T35] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 253.522092][ T35] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 253.524102][ T35] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 253.529244][ T35] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 253.534916][ T35] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input16 [ 253.541118][ T39] audit: type=1400 audit(1729942970.663:4255): avc: denied { read append } for pid=12523 comm="syz.4.2436" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.547062][ T39] audit: type=1400 audit(1729942970.663:4256): avc: denied { read open } for pid=12523 comm="syz.4.2436" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.556113][ T39] audit: type=1400 audit(1729942970.683:4257): avc: denied { read } for pid=5343 comm="acpid" name="event4" dev="devtmpfs" ino=3216 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.563005][ T35] microsoft 0003:045E:07DA.000D: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 253.565258][ T39] audit: type=1400 audit(1729942970.693:4258): avc: denied { read open } for pid=5343 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3216 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.575085][ T39] audit: type=1400 audit(1729942970.693:4259): avc: denied { map } for pid=12523 comm="syz.4.2436" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.586427][ T39] audit: type=1400 audit(1729942970.693:4260): avc: denied { read } for pid=12523 comm="syz.4.2436" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.604563][ T39] audit: type=1400 audit(1729942970.723:4261): avc: denied { read write } for pid=9536 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.624508][ T39] audit: type=1400 audit(1729942970.743:4262): avc: denied { read write open } for pid=9536 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.632113][ T39] audit: type=1400 audit(1729942970.743:4263): avc: denied { ioctl } for pid=9536 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.700014][T12505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.718699][T12505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.747787][T12528] syz.4.2438 (12528): drop_caches: 2 [ 253.749406][T12528] syz.4.2438 (12528): drop_caches: 2 [ 253.934126][T12505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.936686][T12505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.994590][ T8] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 253.996777][ T35] usb 6-1: USB disconnect, device number 20 [ 254.022033][ T8886] udevd[8886]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 254.154481][ T8] usb 10-1: Using ep0 maxpacket: 8 [ 254.171964][ T8] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 254.174268][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.178375][ T8] usb 10-1: Product: syz [ 254.179482][ T8] usb 10-1: Manufacturer: syz [ 254.180677][ T8] usb 10-1: SerialNumber: syz [ 254.187975][ T8] usb 10-1: config 0 descriptor?? [ 254.413909][ T8] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 254.546309][ T67] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 254.548786][ T67] Bluetooth: hci2: Injecting HCI hardware error event [ 254.551577][ T67] Bluetooth: hci2: hardware error 0x00 [ 255.474512][ T6002] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 255.504016][T12562] syz.2.2450 (12562): drop_caches: 2 [ 255.508134][T12562] syz.2.2450 (12562): drop_caches: 2 [ 255.508301][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.509670][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.631534][ T6002] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.634062][ T6002] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 255.643535][ T6002] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.655316][ T6002] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 255.657386][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.659274][ T6002] usb 6-1: SerialNumber: syz [ 255.673745][ T6002] usb 6-1: bad CDC descriptors [ 255.675348][ T6002] usb-storage 6-1:1.0: USB Mass Storage device detected [ 255.696821][ T6002] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 256.236684][ T6002] usb 6-1: USB disconnect, device number 21 [ 256.270762][ T8] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 256.273751][ T8] dvbdev: DVB: registering new adapter (Terratec H7) [ 256.278627][ T8] usb 10-1: media controller created [ 256.400684][ T8] usb 10-1: dvb_usb_v2: MAC address: b8:00:00:00:00:00 [ 256.407486][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.626741][ T67] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 256.684098][ T8] DVB: Unable to find symbol drxk_attach() [ 256.702544][ T8] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 256.706434][ T8] usb 10-1: USB disconnect, device number 9 [ 257.134516][ T8] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 257.284933][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 257.292291][ T8] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.299525][ T8] usb 7-1: config 1 interface 1 has no altsetting 0 [ 257.311416][ T8] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.314765][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.317120][ T8] usb 7-1: Product: syz [ 257.318314][ T8] usb 7-1: Manufacturer: syz [ 257.319598][ T8] usb 7-1: SerialNumber: syz [ 257.351830][T12609] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2467'. [ 257.631865][T10316] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 257.680309][ T8] usb 7-1: 2:1 : sample bitwidth 128 in over sample bytes 1 [ 257.682273][ T8] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 257.694493][ T5993] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 257.731584][ T8] usb 7-1: USB disconnect, device number 33 [ 257.836148][ T6086] udevd[6086]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.860170][ T5993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.863154][T10316] usb 10-1: Using ep0 maxpacket: 8 [ 257.863297][ T5993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.867155][ T5993] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 257.869431][ T5993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.879751][ T5993] usb 9-1: config 0 descriptor?? [ 257.920526][T10316] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.923385][T10316] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 257.931905][T10316] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.943113][T10316] usb 10-1: config 0 descriptor?? [ 258.200993][T10316] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 258.308735][ T5993] pyra 0003:1E7D:2CF6.000E: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 258.384681][ T5992] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 258.502185][ T39] kauditd_printk_skb: 437 callbacks suppressed [ 258.502234][ T39] audit: type=1400 audit(1729942975.623:4701): avc: denied { ioctl } for pid=12610 comm="syz.4.2468" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.511872][ T39] audit: type=1400 audit(1729942975.623:4702): avc: denied { ioctl } for pid=12610 comm="syz.4.2468" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.534438][ T5992] usb 7-1: Using ep0 maxpacket: 32 [ 258.538281][ T39] audit: type=1400 audit(1729942975.663:4703): avc: denied { ioctl } for pid=12615 comm="syz.2.2470" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.546522][ T39] audit: type=1400 audit(1729942975.663:4704): avc: denied { ioctl } for pid=12615 comm="syz.2.2470" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.547453][ T5992] usb 7-1: unable to get BOS descriptor or descriptor too short [ 258.552884][ T39] audit: type=1400 audit(1729942975.663:4705): avc: denied { ioctl } for pid=12615 comm="syz.2.2470" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.552904][ T39] audit: type=1400 audit(1729942975.663:4706): avc: denied { ioctl } for pid=12615 comm="syz.2.2470" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.564054][ T5992] usb 7-1: config 127 has an invalid interface number: 158 but max is 0 [ 258.568673][ T39] audit: type=1400 audit(1729942975.663:4707): avc: denied { ioctl } for pid=12615 comm="syz.2.2470" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.572247][ T5992] usb 7-1: config 127 has no interface number 0 [ 258.577156][ T39] audit: type=1400 audit(1729942975.673:4708): avc: denied { ioctl } for pid=12615 comm="syz.2.2470" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.578795][ T5992] usb 7-1: config 127 interface 158 has no altsetting 0 [ 258.585158][ T39] audit: type=1400 audit(1729942975.673:4709): avc: denied { ioctl } for pid=12615 comm="syz.2.2470" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.585180][ T39] audit: type=1400 audit(1729942975.673:4710): avc: denied { ioctl } for pid=12617 comm="syz.1.2471" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.610084][ T5992] usb 7-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=36.f5 [ 258.612680][ T5992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.615903][ T5992] usb 7-1: Product: syz [ 258.617170][ T5992] usb 7-1: Manufacturer: syz [ 258.618865][ T5992] usb 7-1: SerialNumber: syz [ 258.677110][T10316] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 258.684556][ T30] usb 10-1: USB disconnect, device number 10 [ 258.692038][ T30] iowarrior 10-1:0.0: I/O-Warror #0 now disconnected [ 258.824589][T10316] usb 6-1: Using ep0 maxpacket: 16 [ 258.832501][T10316] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 258.838774][T10316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.858435][T10316] usb 6-1: config 0 descriptor?? [ 258.864774][ T5992] comedi comedi0: could not switch to alternate setting 1 [ 258.867454][ T5992] usbduxfast 7-1:127.158: driver 'usbduxfast' failed to auto-configure device. [ 258.882056][ T5992] usb 7-1: USB disconnect, device number 34 [ 259.284646][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.286292][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.287912][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.289447][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.291149][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.292710][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.294320][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.298467][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.300088][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.304770][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.306474][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.308060][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.314482][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.316099][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.317705][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.321942][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.323555][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.330410][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.332132][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.333737][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.335380][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.336966][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.338556][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.340170][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.341760][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.343423][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.345555][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.347108][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.348692][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.350263][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.351887][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.353554][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.355315][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.356911][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.358503][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.360104][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.364446][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.366106][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.367704][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.369293][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.370914][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.372513][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.374116][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.394567][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.396207][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.397810][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.399416][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.401015][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.402626][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.404245][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.406035][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.407652][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.409255][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.410884][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.412492][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.414104][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.415983][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.417588][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.419212][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.420830][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.422434][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.424047][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.425765][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.427383][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.428980][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.430574][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.432231][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.433841][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.435578][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.437172][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.438775][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.440374][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.441976][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.443589][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.445312][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.447014][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.448607][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.450201][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.451812][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.453400][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.455170][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.456768][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.458360][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.459956][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.461642][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.463480][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.465124][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.466721][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.468347][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.469957][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.471572][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.473168][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.474840][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.476461][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.478214][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.479824][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.481418][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.482972][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.484562][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.486118][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.487723][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.489286][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.490883][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.492474][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.494040][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.495630][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.498033][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.499617][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.501166][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.502648][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.504132][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.505664][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.507229][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.508748][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.510257][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.511846][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.513393][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.514978][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.516495][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.518098][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.519665][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.521181][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.522703][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.524253][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.525834][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.527409][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.528909][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.530420][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.532046][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.533627][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.535229][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.536760][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.538305][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.539839][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.541349][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.542905][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.544548][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.546087][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.547618][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.549375][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.551000][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.552582][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.554188][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.555871][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.557476][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.559082][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.560677][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.562271][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.563894][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.565570][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.567187][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.568794][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.570385][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.571994][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.573550][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.575304][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.576893][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.578474][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.580235][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.581835][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.583430][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.585072][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.586751][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.588348][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.589934][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.591547][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.593154][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.594807][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.596473][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.598077][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.599683][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.601268][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.602865][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.604514][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.606274][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.607878][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.609472][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.611082][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.612675][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.614271][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.615930][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.617526][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.619130][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.620732][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.622322][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.623923][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.625561][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.627196][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.628815][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.630420][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.632003][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.633627][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.635280][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.636866][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.638460][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.640059][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.641649][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.643246][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.644874][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.646469][T10316] apple 0003:05AC:0237.000F: unknown main item tag 0x0 [ 259.656876][T10316] apple 0003:05AC:0237.000F: hidraw2: USB HID v0.03 Device [HID 05ac:0237] on usb-dummy_hcd.1-1/input0 [ 259.662133][T10316] usb 6-1: USB disconnect, device number 22 [ 260.995616][T12611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.054563][ T25] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 261.206117][ T25] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 261.213552][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.216011][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.219306][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 261.226640][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.229011][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.231750][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 261.236929][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.239641][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.242757][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 261.249492][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.252252][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.255202][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 261.261246][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.263570][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.266474][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 261.273973][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.277240][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.280041][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 261.287316][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.289612][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.304177][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 261.309741][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.312038][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.316758][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 261.328726][ T25] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 261.331289][ T25] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 261.333470][ T25] usb 10-1: Product: syz [ 261.337523][ T25] usb 10-1: Manufacturer: syz [ 261.338821][ T25] usb 10-1: SerialNumber: syz [ 261.375050][ T25] usb 10-1: config 0 descriptor?? [ 261.393419][ T25] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 261.571767][T12659] lo speed is unknown, defaulting to 1000 [ 261.716034][ C2] usb 10-1: yurex_control_callback - control failed: -71 [ 261.716321][ T6202] usb 10-1: USB disconnect, device number 11 [ 261.721867][ T6202] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 262.304554][ T25] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 262.468173][ T25] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 262.479338][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.484049][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.491853][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 262.497095][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.500426][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.504318][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 262.512239][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.515592][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.519487][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 262.528769][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.531475][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.535354][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 262.547938][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.550951][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.554974][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 262.562656][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.567141][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.571047][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 262.576657][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.579881][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.583719][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 262.593033][ T25] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.596397][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.600314][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 262.614636][ T25] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 262.617052][ T25] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 262.620009][ T25] usb 10-1: Product: syz [ 262.621141][ T25] usb 10-1: Manufacturer: syz [ 262.622424][ T25] usb 10-1: SerialNumber: syz [ 262.628113][ T25] usb 10-1: config 0 descriptor?? [ 262.641897][ T25] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 263.178974][T12611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.397270][ T25] usb 10-1: USB disconnect, device number 12 [ 263.401016][ T25] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 263.405087][T12653] ================================================================== [ 263.407209][T12653] BUG: KASAN: double-free in dev_free+0x446/0x700 [ 263.408938][T12653] Free of addr ffff88802b170000 by task syz.5.2483/12653 [ 263.410848][T12653] [ 263.412448][T12653] CPU: 2 UID: 0 PID: 12653 Comm: syz.5.2483 Not tainted 6.12.0-rc4-syzkaller-00256-gc71f8fb4dc91 #0 [ 263.416081][T12653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.418918][T12653] Call Trace: [ 263.419803][T12653] [ 263.420588][T12653] dump_stack_lvl+0x116/0x1f0 [ 263.421854][T12653] print_report+0xc3/0x620 [ 263.423074][T12653] ? __virt_addr_valid+0x5e/0x590 [ 263.424428][T12653] ? __phys_addr+0xc6/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 263.425632][T12653] ? dev_free+0x446/0x700 [ 263.426887][T12653] kasan_report_invalid_free+0xaa/0xd0 [ 263.428327][T12653] ? dev_free+0x446/0x700 [ 263.429486][T12653] ? dev_free+0x446/0x700 [ 263.430667][T12653] check_slab_allocation+0xfd/0x130 [ 263.432067][T12653] kfree+0x11e/0x4b0 [ 263.433113][T12653] ? dev_free+0x446/0x700 [ 263.434316][T12653] dev_free+0x446/0x700 [ 263.435429][T12653] ? __pfx_raw_release+0x10/0x10 [ 263.436772][T12653] raw_release+0x168/0x2b0 [ 263.437943][T12653] __fput+0x3f6/0xb60 [ 263.439017][T12653] task_work_run+0x14e/0x250 [ 263.440251][T12653] ? __pfx_task_work_run+0x10/0x10 [ 263.441613][T12653] syscall_exit_to_user_mode+0x27b/0x2a0 [ 263.443119][T12653] do_syscall_64+0xda/0x250 [ 263.444330][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.445882][T12653] RIP: 0033:0x7f187c57e719 [ 263.447064][T12653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.452225][T12653] RSP: 002b:00007ffd8542c088 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 263.454404][T12653] RAX: 0000000000000000 RBX: 00007f187c737a80 RCX: 00007f187c57e719 [ 263.456474][T12653] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 263.458546][T12653] RBP: 00007f187c737a80 R08: 00007f187c722000 R09: 00007ffd8542c37f [ 263.460614][T12653] R10: 00000000005e5234 R11: 0000000000000246 R12: 0000000000040e10 [ 263.462701][T12653] R13: 00007ffd8542c190 R14: 0000000000000bea R15: ffffffffffffffff [ 263.464773][T12653] [ 263.465597][T12653] [ 263.466240][T12653] Allocated by task 12654: [ 263.467441][T12653] kasan_save_stack+0x33/0x60 [ 263.468699][T12653] kasan_save_track+0x14/0x30 [ 263.469949][T12653] __kasan_kmalloc+0xaa/0xb0 [ 263.471134][T12653] __kmalloc_node_track_caller_noprof+0x20f/0x430 [ 263.472827][T12653] memdup_user+0x2a/0xd0 [ 263.473968][T12653] raw_ioctl+0xbc4/0x2b90 [ 263.475137][T12653] __x64_sys_ioctl+0x18f/0x220 [ 263.476435][T12653] do_syscall_64+0xcd/0x250 [ 263.477706][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.479271][T12653] [ 263.479886][T12653] Freed by task 12663: [ 263.480922][T12653] kasan_save_stack+0x33/0x60 [ 263.482119][T12653] kasan_save_track+0x14/0x30 [ 263.483332][T12653] kasan_save_free_info+0x3b/0x60 [ 263.484579][T12653] __kasan_slab_free+0x51/0x70 [ 263.485814][T12653] kfree+0x14f/0x4b0 [ 263.486863][T12653] dev_free+0x446/0x700 [ 263.487946][T12653] raw_release+0x168/0x2b0 [ 263.489061][T12653] __fput+0x3f6/0xb60 [ 263.490069][T12653] __fput_sync+0x45/0x50 [ 263.491164][T12653] __x64_sys_close+0x86/0x100 [ 263.492424][T12653] do_syscall_64+0xcd/0x250 [ 263.493641][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.495217][T12653] [ 263.495858][T12653] The buggy address belongs to the object at ffff88802b170000 [ 263.495858][T12653] which belongs to the cache kmalloc-16 of size 16 [ 263.499303][T12653] The buggy address is located 0 bytes inside of [ 263.499303][T12653] 16-byte region [ffff88802b170000, ffff88802b170010) [ 263.502745][T12653] [ 263.503369][T12653] The buggy address belongs to the physical page: [ 263.505010][T12653] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b170 [ 263.506278][ T39] kauditd_printk_skb: 441 callbacks suppressed [ 263.506288][ T39] audit: type=1400 audit(1729942980.633:5152): avc: denied { map_create } for pid=12670 comm="syz.4.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 263.507266][T12653] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 263.510695][ T39] audit: type=1400 audit(1729942980.633:5153): avc: denied { bpf } for pid=12670 comm="syz.4.2489" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 263.513803][T12653] page_type: f5(slab) [ 263.522138][T12653] raw: 00fff00000000000 ffff88801b042640 dead000000000100 dead000000000122 [ 263.524351][T12653] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 263.526553][T12653] page dumped because: kasan: bad access detected [ 263.528215][T12653] page_owner tracks the page as allocated [ 263.529690][T12653] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6888, tgid 6888 (syz-executor), ts 202550559948, free_ts 202545390364 [ 263.534271][T12653] post_alloc_hook+0x2d1/0x350 [ 263.535431][T12653] get_page_from_freelist+0x101e/0x3070 [ 263.536881][T12653] __alloc_pages_noprof+0x223/0x25a0 [ 263.538283][T12653] new_slab+0xca/0x3f0 [ 263.539374][T12653] ___slab_alloc+0xdac/0x1880 [ 263.540630][T12653] __slab_alloc.constprop.0+0x56/0xb0 [ 263.542015][T12653] __kmalloc_node_noprof+0x357/0x430 [ 263.543390][T12653] __kvmalloc_node_noprof+0xad/0x1a0 [ 263.544739][T12653] xt_replace_table+0x1e3/0x940 [ 263.546016][T12653] __do_replace+0x1d3/0x9e0 [ 263.547192][T12653] do_ip6t_set_ctl+0x94b/0xc40 [ 263.548460][T12653] nf_setsockopt+0x8a/0xf0 [ 263.549659][T12653] ipv6_setsockopt+0x135/0x170 [ 263.550958][T12653] tcp_setsockopt+0xa4/0x100 [ 263.552198][T12653] do_sock_setsockopt+0x222/0x480 [ 263.553533][T12653] __sys_setsockopt+0x1a4/0x270 [ 263.554844][T12653] page last free pid 5993 tgid 5993 stack trace: [ 263.556511][T12653] free_unref_page+0x5f4/0xdc0 [ 263.557787][T12653] vfree+0x17a/0x890 [ 263.558840][T12653] delayed_vfree_work+0x56/0x70 [ 263.560137][T12653] process_one_work+0x9c5/0x1ba0 [ 263.561428][T12653] worker_thread+0x6c8/0xf00 [ 263.562627][T12653] kthread+0x2c1/0x3a0 [ 263.563718][T12653] ret_from_fork+0x45/0x80 [ 263.563811][ T39] audit: type=1400 audit(1729942980.643:5154): avc: denied { map_read map_write } for pid=12670 comm="syz.4.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 263.564891][T12653] ret_from_fork_asm+0x1a/0x30 [ 263.564910][T12653] [ 263.564912][T12653] Memory state around the buggy address: [ 263.564919][T12653] ffff88802b16ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 263.564926][T12653] ffff88802b16ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 263.564932][T12653] >ffff88802b170000: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 263.564938][T12653] ^ [ 263.564942][T12653] ffff88802b170080: fa fb fc fc 00 01 fc fc fa fb fc fc fa fb fc fc [ 263.564949][T12653] ffff88802b170100: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 263.564954][T12653] ================================================================== [ 263.624788][T12653] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 263.626621][T12653] CPU: 2 UID: 0 PID: 12653 Comm: syz.5.2483 Not tainted 6.12.0-rc4-syzkaller-00256-gc71f8fb4dc91 #0 [ 263.629426][T12653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.632256][T12653] Call Trace: [ 263.633144][T12653] [ 263.633936][T12653] dump_stack_lvl+0x3d/0x1f0 [ 263.635192][T12653] panic+0x71d/0x800 [ 263.636236][T12653] ? __pfx_panic+0x10/0x10 [ 263.637469][T12653] ? irqentry_exit+0x3b/0x90 [ 263.638705][T12653] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.640090][T12653] ? preempt_schedule_thunk+0x1a/0x30 [ 263.641506][T12653] ? preempt_schedule_common+0x44/0xc0 [ 263.642914][T12653] ? check_panic_on_warn+0x1f/0xb0 [ 263.644217][T12653] check_panic_on_warn+0xab/0xb0 [ 263.645507][T12653] end_report+0x117/0x180 [ 263.646637][T12653] ? dev_free+0x446/0x700 [ 263.647768][T12653] kasan_report_invalid_free+0xba/0xd0 [ 263.649191][T12653] ? dev_free+0x446/0x700 [ 263.650315][T12653] ? dev_free+0x446/0x700 [ 263.651479][T12653] check_slab_allocation+0xfd/0x130 [ 263.652844][T12653] kfree+0x11e/0x4b0 [ 263.653866][T12653] ? dev_free+0x446/0x700 [ 263.654986][T12653] dev_free+0x446/0x700 [ 263.656042][T12653] ? __pfx_raw_release+0x10/0x10 [ 263.657312][T12653] raw_release+0x168/0x2b0 [ 263.658462][T12653] __fput+0x3f6/0xb60 [ 263.659516][T12653] task_work_run+0x14e/0x250 [ 263.660747][T12653] ? __pfx_task_work_run+0x10/0x10 [ 263.662060][T12653] syscall_exit_to_user_mode+0x27b/0x2a0 [ 263.663497][T12653] do_syscall_64+0xda/0x250 [ 263.664679][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.666186][T12653] RIP: 0033:0x7f187c57e719 [ 263.667373][T12653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.672327][T12653] RSP: 002b:00007ffd8542c088 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 263.674411][T12653] RAX: 0000000000000000 RBX: 00007f187c737a80 RCX: 00007f187c57e719 [ 263.676516][T12653] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 263.678590][T12653] RBP: 00007f187c737a80 R08: 00007f187c722000 R09: 00007ffd8542c37f [ 263.680578][T12653] R10: 00000000005e5234 R11: 0000000000000246 R12: 0000000000040e10 [ 263.682624][T12653] R13: 00007ffd8542c190 R14: 0000000000000bea R15: ffffffffffffffff [ 263.684696][T12653] [ 263.686090][T12653] Kernel Offset: disabled [ 263.687246][T12653] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:34:46 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=1ffff11021120631 RDX=1ffff110063c66a1 RSI=ffffffff844a5735 RDI=ffffc9000424f66c RBP=ffffc9000424f668 RSP=ffffc9000424f4d8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000800 R11=0000000000000000 R12=0000000000000116 R13=00000000000007ff R14=00000000000001c0 R15=0000000000000037 RIP=ffffffff818d8040 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f3fef39e280 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0ee0a656c0 CR3=000000003173c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=00000000c0000000 Opmask02=000000000fffffff Opmask03=1040000404420020 Opmask04=0000000000000008 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2ccfcc60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 737326ff02b4eccb ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c4c9d8c68c3 73730c4c9d8c68c3 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 000000000000352e 7465676461672f35 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003831383032 0000000000000021 0000000000000034 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000065676e616863 0000000000000021 0000000036317475 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747461622d443030 302e414437303a45 3534303a33303030 2d6469682f796c70 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005589295a05a8 00005589295a05a8 0000000000000041 0000000000797265 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556206440530 0000414406300545 0000000000000030 0000000000565d4a ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556229440530 0000414429300545 0000000000000030 0000000000796c65 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=ffffc900008afdf8 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff894c72fa RDI=ffffc900008afe04 RBP=000000000000000a RSP=ffffc900008afd18 R8 =ffffc900008afd6c R9 =ffffffff918a5f20 R10=ffffc900008afd38 R11=000000000008acdd R12=ffffffff81794bb0 R13=ffffc900008afdf8 R14=0000000000000000 R15=ffff88804dce0000 RIP=ffffffff81794c43 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5df4779f70 CR3=000000004a552000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b53a3365111493a8 305a2df52c3ed9ff ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4bd3d8c870ca8e63 934998d410361f45 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3afc02cc26df49cf a8497d720f16a45d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d52aa9c336bdf9d 3fe99d380a50d48b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000a100 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009fa031a0dc 7300000000a031a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000e2a87a79 b8618c9543436b70 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a0f07a7973 31a0d2900032c891 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c962d07abb82f2e8 79730000d0e272a2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f1c3e73b148f5941 484a5f1a1e5b38b7 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7e39c5fb123b951 bcf4def0b8371849 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccb950c488 00007fccb950c480 00007fccb950c478 00007fccb950c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccba06d100 00007fccb950c440 00007fccb9500004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccb950c498 00007fccb950c490 00007fccb950c488 00007fccb950c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b43e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc9000408f6c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43 R12=0000000000000000 R13=0000000000000033 R14=ffffffff850b4380 R15=0000000000000000 RIP=ffffffff850b440f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555579de7500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2ff05ff8 CR3=00000000359da000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000fc000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8542c2c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f187c5f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f187c5f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f187c5f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f187c5f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f187c5f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f187c5f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000008 RDI=ffff88802ef6d3a9 RBP=0000000000000000 RSP=ffffc9000433f6e0 R8 =0000000000000000 R9 =fffffbfff2dc5588 R10=ffffffff96e2ac47 R11=0000000000000002 R12=0000000000000002 R13=ffff88802ef6d388 R14=0000000000000022 R15=ffff88802ef6c880 RIP=ffffffff816a6431 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fcad22bd500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fccb9427a02 CR3=0000000031e2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe484123f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 320000223d656764 61672d6d61652f20 65642f223d686861 3d20223037343220 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3200002037556563 3a672d6730652f20 643a2f223d306261 3720223037343220 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65697e2a7e55676e 6b79737930785567 6e6b797379307e65 6578377e726f7e64 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 380a003b376f7c63 79796367786f7a2a 6f66636c55786269 3779796b66697e2a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000