last executing test programs: 2.529743843s ago: executing program 3 (id=2054): creat(0x0, 0x0) r0 = creat(&(0x7f0000000380)='./file0\x00', 0x98) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='P', 0x1}, {&(0x7f0000000040)="90ddd5", 0xfffffe7e}], 0x2) unlink(&(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x51008, 0x0) 2.38897745s ago: executing program 0 (id=2057): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) 2.152940962s ago: executing program 0 (id=2060): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1.951753079s ago: executing program 4 (id=2063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.872664112s ago: executing program 3 (id=2065): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="0f1c3103bfb0803e650fae39678bfb0f22a4652e0f00990000660fda940000660f38818c2768660fc7b600002e7cec", 0x2f}], 0x1, 0x62, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.832131916s ago: executing program 4 (id=2067): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x1, 0x0, 0x4, 0x0, 0x0, 0x7}, 0xe) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000009c0)={r2, 0x5}, &(0x7f0000000a00)=0x8) 1.753330745s ago: executing program 4 (id=2068): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 1.713324972s ago: executing program 3 (id=2069): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x2, 0x1}) 1.54886717s ago: executing program 4 (id=2071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x0) 1.498281184s ago: executing program 4 (id=2073): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40180) 952.782354ms ago: executing program 1 (id=2080): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0xf83, 0x3}, 0x1c) 906.190219ms ago: executing program 1 (id=2081): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)={0x1, 0x0, [{0x3000, 0x1000, &(0x7f0000000bc0)=""/4096}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 845.311982ms ago: executing program 1 (id=2083): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972e3aaa30cbdaa8c3994196fb2a65b315e3100f2acaeae3669942e96c3b99b6ec235"], 0xc) r1 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) 803.923428ms ago: executing program 3 (id=2084): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0x2, 0x1) getdents64(r0, 0x0, 0x4f) 737.285379ms ago: executing program 1 (id=2086): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) close(r0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 709.151526ms ago: executing program 3 (id=2088): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 664.936757ms ago: executing program 1 (id=2089): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 602.980505ms ago: executing program 3 (id=2090): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 585.265263ms ago: executing program 1 (id=2091): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_disconnect(r1) 556.684934ms ago: executing program 4 (id=2093): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8011, 0x0, 0x0}, {0x6, 0xc010, 0x0, 0x0}], 0x2}) 453.814101ms ago: executing program 0 (id=2094): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006940)=ANY=[], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 447.382565ms ago: executing program 2 (id=2095): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 368.944045ms ago: executing program 0 (id=2096): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 323.543906ms ago: executing program 2 (id=2097): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) 289.498951ms ago: executing program 0 (id=2098): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) 261.699922ms ago: executing program 2 (id=2099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x80}]}, 0x2c}}, 0x0) 174.494014ms ago: executing program 2 (id=2100): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2, 0x3}}, 0x1) 168.913615ms ago: executing program 0 (id=2101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) 81.183705ms ago: executing program 2 (id=2102): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 0s ago: executing program 2 (id=2103): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) kernel console output (not intermixed with test programs): ce, different from the descriptor's value: 3 [ 120.873329][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.897952][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.916155][ T9] usb 1-1: SerialNumber: syz [ 121.017896][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 121.024901][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.035816][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 121.046167][ T10] usb 3-1: string descriptor 0 read error: -22 [ 121.066600][ T8108] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.068176][ T10] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 121.085071][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 121.092677][ T8108] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.117886][ T5852] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 121.120203][ T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 121.146513][ T9] usb 1-1: 0:2 : does not exist [ 121.175907][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.190073][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 121.217885][ T10] usb 3-1: media controller created [ 121.236927][ T9] usb 1-1: USB disconnect, device number 12 [ 121.260828][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.290853][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.313523][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.334836][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.361028][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.375568][ T5852] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.394789][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.423070][ T5852] usb 5-1: config 0 descriptor?? [ 121.848342][ T5852] plantronics 0003:047F:FFFF.000A: item fetching failed at offset 11/15 [ 121.857917][ T5852] plantronics 0003:047F:FFFF.000A: parse failed [ 121.864257][ T5852] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22 [ 122.041996][ T9] usb 5-1: USB disconnect, device number 14 [ 122.231015][ T5952] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 122.388117][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 122.398601][ T5952] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.412225][ T5952] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.418984][ T5952] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 122.430035][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.443212][ T5952] usb 4-1: config 0 descriptor?? [ 122.490061][ T10] usb 3-1: USB disconnect, device number 17 [ 122.711265][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 122.711281][ T29] audit: type=1400 audit(1775416658.293:418): avc: denied { create } for pid=8164 comm="syz.4.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.780770][ T29] audit: type=1400 audit(1775416658.333:419): avc: denied { bind } for pid=8164 comm="syz.4.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.882536][ T5952] mcp2221 0003:04D8:00DD.000B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 123.303680][ T29] audit: type=1400 audit(1775416658.893:420): avc: denied { mount } for pid=8198 comm="syz.4.1003" name="/" dev="rpc_pipefs" ino=18871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 123.329373][ T5852] usb 4-1: USB disconnect, device number 12 [ 123.679454][ T29] audit: type=1400 audit(1775416659.273:421): avc: denied { connect } for pid=8209 comm="syz.4.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.739546][ T29] audit: type=1400 audit(1775416659.273:422): avc: denied { ioctl } for pid=8209 comm="syz.4.1007" path="socket:[18894]" dev="sockfs" ino=18894 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.768664][ T29] audit: type=1400 audit(1775416659.303:423): avc: denied { write } for pid=8209 comm="syz.4.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.789849][ T29] audit: type=1400 audit(1775416659.313:424): avc: denied { write } for pid=8211 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.810548][ T29] audit: type=1400 audit(1775416659.313:425): avc: denied { read } for pid=8211 comm="syz.1.1008" lport=65438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.968068][ T8227] netlink: 'syz.4.1015': attribute type 1 has an invalid length. [ 123.975972][ T8227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.100417][ T29] audit: type=1400 audit(1775416659.693:426): avc: denied { read } for pid=8232 comm="syz.4.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 124.188077][ T5852] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 124.358120][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 124.364928][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.381083][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.391898][ T5852] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 124.408448][ T8246] netlink: 'syz.0.1022': attribute type 4 has an invalid length. [ 124.424875][ T5852] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 124.449747][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.488572][ T5852] usb 4-1: config 0 descriptor?? [ 124.548848][ T8252] netem: change failed [ 124.866972][ T8268] netlink: 'syz.4.1033': attribute type 1 has an invalid length. [ 124.876089][ T8268] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1033'. [ 124.899313][ T8268] netlink: 'syz.4.1033': attribute type 1 has an invalid length. [ 124.907144][ T8268] netlink: 'syz.4.1033': attribute type 8 has an invalid length. [ 124.915639][ T8268] netlink: 606 bytes leftover after parsing attributes in process `syz.4.1033'. [ 124.929230][ T8224] random: crng reseeded on system resumption [ 124.936509][ T29] audit: type=1400 audit(1775416660.523:427): avc: denied { append } for pid=8219 comm="syz.3.1013" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 125.048015][ T792] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 125.081963][ T5852] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 125.162585][ T5852] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 125.191856][ T5852] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 125.228151][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 125.235766][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.247206][ T792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.252871][ T8287] veth0: entered promiscuous mode [ 125.260470][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 125.267434][ T8287] veth0: left promiscuous mode [ 125.286564][ T5816] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 125.303564][ T792] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.318120][ T5852] usb 4-1: USB disconnect, device number 13 [ 125.329510][ T5816] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 125.347320][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.359617][ T5816] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 125.374189][ T5816] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 125.397249][ T792] usb 2-1: config 0 descriptor?? [ 125.467905][ T5880] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 125.630250][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 125.638136][ T5952] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 125.646149][ T5880] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 125.655373][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.663519][ T5880] usb 5-1: Product: syz [ 125.667686][ T5880] usb 5-1: Manufacturer: syz [ 125.672438][ T5880] usb 5-1: SerialNumber: syz [ 125.678944][ T5880] usb 5-1: config 0 descriptor?? [ 125.687038][ T5880] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 125.695881][ T5880] dw2102: su3000_power_ctrl: 1, initialized 0 [ 125.703549][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 125.711556][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.721245][ T5880] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 125.730603][ T5880] usb 5-1: media controller created [ 125.735879][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 125.742736][ T5880] dw2102: i2c transfer failed. [ 125.747778][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 125.753560][ T5880] dw2102: i2c transfer failed. [ 125.758378][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 125.764107][ T5880] dw2102: i2c transfer failed. [ 125.768938][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 125.774685][ T5880] dw2102: i2c transfer failed. [ 125.781319][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 125.787058][ T5880] dw2102: i2c transfer failed. [ 125.791871][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 125.797596][ T5880] dw2102: i2c transfer failed. [ 125.803838][ T5880] dvb-usb: MAC address: 02:02:02:02:02:02 [ 125.807891][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 125.816755][ T5952] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 125.818559][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.830728][ T5952] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 125.847564][ T5952] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.848530][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 125.858050][ T5952] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.864467][ T5880] dw2102: command 0x0e transfer failed. [ 125.876417][ T5952] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.883268][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 125.898088][ T5880] dw2102: command 0x0e transfer failed. [ 125.906831][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.123320][ T5952] usb 3-1: GET_CAPABILITIES returned 0 [ 126.129098][ T5952] usbtmc 3-1:16.0: can't read capabilities [ 126.207922][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 126.215026][ T5880] dw2102: command 0x0e transfer failed. [ 126.221174][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 126.226990][ T5880] dw2102: command 0x0e transfer failed. [ 126.227947][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 126.233212][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 126.246414][ T5880] dw2102: command 0x51 transfer failed. [ 126.252065][ T8284] dvb-usb: bulk message failed: -22 (5/0) [ 126.259283][ T8284] dw2102: i2c transfer failed. [ 126.278130][ T5880] DVB: Unable to find symbol ds3000_attach() [ 126.284152][ T5880] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 126.357926][ T5880] rc_core: IR keymap rc-su3000 not found [ 126.367010][ T5880] Registered IR keymap rc-empty [ 126.382043][ T5880] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 126.400964][ T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 126.406665][ T5852] usb 3-1: USB disconnect, device number 18 [ 126.418831][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.421441][ T5880] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input16 [ 126.438951][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 126.456935][ T5880] dvb-usb: schedule remote query interval to 150 msecs. [ 126.463637][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 126.475281][ T5880] dw2102: su3000_power_ctrl: 0, initialized 1 [ 126.481571][ T5880] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 126.486934][ T10] usb 4-1: Manufacturer: syz [ 126.503895][ T5880] usb 5-1: USB disconnect, device number 15 [ 126.518863][ T10] usb 4-1: config 0 descriptor?? [ 126.617852][ T10] rc_core: IR keymap rc-hauppauge not found [ 126.625653][ T10] Registered IR keymap rc-empty [ 126.643239][ T10] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 126.669986][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input17 [ 126.729235][ T5880] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 126.813426][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 127.032961][ C0] igorplugusb 4-1:0.0: receive overflow, at least 33 lost [ 127.045954][ T8303] rc rc1: two consecutive events of type space [ 127.106132][ T8311] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1050'. [ 127.161388][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 127.248142][ T5879] usb 4-1: USB disconnect, device number 14 [ 127.288476][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.294825][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.578586][ T5952] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 127.669622][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 127.747996][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 127.754893][ T5952] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 127.777994][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.794891][ T5952] usb 3-1: config 0 descriptor?? [ 127.851333][ T792] usbhid 2-1:0.0: can't add hid device: -71 [ 127.857334][ T792] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 127.859162][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.902908][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.911041][ T792] usb 2-1: USB disconnect, device number 17 [ 127.922888][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.937166][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 127.937181][ T29] audit: type=1400 audit(1775416663.523:432): avc: denied { append } for pid=8338 comm="syz.1.1064" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.979775][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 127.992976][ T9] usb 1-1: SerialNumber: syz [ 128.013812][ T8343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1067'. [ 128.036978][ T5952] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 128.056597][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.107966][ T5952] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 128.115187][ T5952] usb 3-1: media controller created [ 128.149861][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.211086][ T8353] usb usb7: usbfs: process 8353 (syz.1.1071) did not claim interface 0 before use [ 128.239099][ T5952] az6027: usb out operation failed. (-71) [ 128.246718][ T9] usb 1-1: 0:2 : does not exist [ 128.254714][ T5952] az6027: usb out operation failed. (-71) [ 128.269024][ T5952] stb0899_attach: Driver disabled by Kconfig [ 128.288936][ T5952] az6027: no front-end attached [ 128.288936][ T5952] [ 128.306471][ T5952] az6027: usb out operation failed. (-71) [ 128.328076][ T5952] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 128.336778][ T9] usb 1-1: USB disconnect, device number 13 [ 128.358295][ T5952] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 128.407043][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.435856][ T5952] dvb-usb: schedule remote query interval to 400 msecs. [ 128.464448][ T8364] devpts: Bad value for 'max' [ 128.473898][ T5952] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 128.501489][ T5952] usb 3-1: USB disconnect, device number 19 [ 128.551762][ T8368] team0: No ports can be present during mode change [ 128.573160][ T8366] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 128.617541][ T8366] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1077'. [ 128.628732][ T5952] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 128.747935][ T8378] trusted_key: encrypted_key: keyword 'ew' not recognized [ 128.935937][ T29] audit: type=1400 audit(1775416664.523:433): avc: denied { create } for pid=8387 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 128.993394][ T29] audit: type=1400 audit(1775416664.553:434): avc: denied { setopt } for pid=8387 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 129.968012][ T5852] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 130.117913][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 130.126642][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.138634][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.150624][ T5852] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 130.172496][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.191817][ T5852] usb 4-1: config 0 descriptor?? [ 130.200197][ T5852] hub 4-1:0.0: USB hub found [ 130.292714][ T792] hid-generic 0005:16C0:05DF.000D: item fetching failed at offset 0/1 [ 130.324437][ T792] hid-generic 0005:16C0:05DF.000D: probe with driver hid-generic failed with error -22 [ 130.410524][ T5852] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 130.503373][ T8465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.508347][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 130.565555][ T29] audit: type=1400 audit(1775416666.153:435): avc: denied { accept } for pid=8468 comm="syz.1.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.839966][ T5852] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 131.062237][ T29] audit: type=1400 audit(1775416666.653:436): avc: denied { accept } for pid=8497 comm="syz.1.1140" lport=36403 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.097981][ T9] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 131.148808][ T5952] usb 4-1: USB disconnect, device number 15 [ 131.249667][ T9] usb 1-1: config 0 has no interfaces? [ 131.256060][ T9] usb 1-1: config 0 has no interfaces? [ 131.267988][ T9] usb 1-1: config 0 has no interfaces? [ 131.279957][ T9] usb 1-1: string descriptor 0 read error: -22 [ 131.290398][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 131.302370][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.318602][ T9] usb 1-1: config 0 descriptor?? [ 131.318735][ T8511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1145'. [ 131.606862][ T29] audit: type=1400 audit(1775416667.193:437): avc: denied { getopt } for pid=8484 comm="syz.0.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.607921][ T792] usb 1-1: USB disconnect, device number 14 [ 131.709349][ T29] audit: type=1400 audit(1775416667.303:438): avc: denied { watch_reads } for pid=8527 comm="syz.2.1153" path="/196" dev="tmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 131.786615][ T8531] netlink: 'syz.3.1154': attribute type 4 has an invalid length. [ 131.807752][ T8531] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1154'. [ 131.834039][ T8531] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1154'. [ 132.013029][ T29] audit: type=1400 audit(1775416667.603:439): avc: denied { read write } for pid=8539 comm="syz.4.1157" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 132.047920][ T29] audit: type=1400 audit(1775416667.603:440): avc: denied { open } for pid=8539 comm="syz.4.1157" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 132.105864][ T29] audit: type=1400 audit(1775416667.693:441): avc: denied { execute } for pid=8547 comm="syz.1.1162" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.225486][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 132.436757][ T8562] SELinux: failed to load policy [ 132.497899][ T792] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 132.661187][ T792] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 132.671225][ T792] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 132.682715][ T792] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 132.694620][ T792] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 132.703772][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.712974][ T792] usb 1-1: Product: syz [ 132.717129][ T792] usb 1-1: Manufacturer: syz [ 132.721813][ T792] usb 1-1: SerialNumber: syz [ 132.728571][ T792] usb 1-1: config 0 descriptor?? [ 132.734816][ T8557] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.742213][ T8557] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.750327][ T792] usb 1-1: ucan: probing device on interface #0 [ 133.364400][ T792] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 133.406596][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 133.468634][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 133.468650][ T29] audit: type=1400 audit(1775416669.063:446): avc: denied { remount } for pid=8599 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.468753][ T8600] tmpfs: Cannot change global quota limit on remount [ 133.568779][ T9] usb 1-1: USB disconnect, device number 15 [ 133.581050][ T10] usb 3-1: config 0 has no interfaces? [ 133.587007][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 133.600543][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.624961][ T10] usb 3-1: config 0 descriptor?? [ 133.837473][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.838617][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.840134][ T792] usb 3-1: USB disconnect, device number 20 [ 134.279619][ T792] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 134.300652][ T5813] Bluetooth: hci4: link tx timeout [ 134.306141][ T5813] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.318864][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 134.405024][ T5807] Bluetooth: hci4: link tx timeout [ 134.411169][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.431461][ T5807] Bluetooth: hci4: link tx timeout [ 134.436717][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.446511][ T792] usb 3-1: Using ep0 maxpacket: 8 [ 134.459841][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 134.466023][ T792] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 134.477980][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 134.485115][ T792] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.489712][ T10] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 134.500699][ T792] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 0.00 [ 134.516421][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.524572][ T792] usb 3-1: Product: syz [ 134.529297][ T792] usb 3-1: Manufacturer: syz [ 134.534555][ T792] usb 3-1: SerialNumber: syz [ 134.558733][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 134.592262][ T10] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 134.618116][ T5807] Bluetooth: hci4: link tx timeout [ 134.623442][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.628391][ T10] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 134.669631][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 134.679990][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.717913][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.724667][ T9] usb 1-1: Product: syz [ 134.737905][ T9] usb 1-1: Manufacturer: syz [ 134.744110][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 134.757869][ T9] usb 1-1: SerialNumber: syz [ 134.764317][ T10] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 134.796682][ T9] usb 1-1: config 0 descriptor?? [ 134.802988][ T10] usb 5-1: Product: syz [ 134.818977][ T10] usb 5-1: Manufacturer: syz [ 134.831677][ T10] usb 5-1: SerialNumber: syz [ 134.848353][ T792] usb 3-1: USB disconnect, device number 21 [ 134.849455][ T10] usb 5-1: config 0 descriptor?? [ 134.906919][ T10] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 134.943998][ T10] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 135.022179][ T29] audit: type=1400 audit(1775416670.613:447): avc: denied { module_request } for pid=8661 comm="syz.3.1203" kmod="iptable_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 135.228278][ T9] usb 1-1: Firmware: major: 32, minor: 33, hardware type: RZUSB (3) [ 135.269877][ T5807] Bluetooth: hci4: link tx timeout [ 135.275098][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.440682][ T9] usb 1-1: failed to fetch extended address, random address set [ 135.461622][ T8685] sctp: [Deprecated]: syz.2.1209 (pid 8685) Use of int in maxseg socket option. [ 135.461622][ T8685] Use struct sctp_assoc_value instead [ 135.502183][ T10] usb 5-1: USB disconnect, device number 16 [ 135.512811][ T10] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 135.532115][ T9] usb 1-1: USB disconnect, device number 16 [ 135.957476][ T8713] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.965404][ T1311] Bluetooth: hci5: Frame reassembly failed (-84) [ 136.010237][ T29] audit: type=1400 audit(1775416671.603:448): avc: denied { getopt } for pid=8717 comm="syz.0.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.070775][ T5821] Bluetooth: hci4: link tx timeout [ 136.075930][ T5821] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.113144][ T29] audit: type=1400 audit(1775416671.703:449): avc: denied { ioctl } for pid=8722 comm="syz.4.1225" path="socket:[21351]" dev="sockfs" ino=21351 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.257304][ T8732] tun0: tun_chr_ioctl cmd 1074025675 [ 136.265570][ T8732] tun0: persist disabled [ 136.325104][ T5821] Bluetooth: hci4: link tx timeout [ 136.330350][ T5821] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.374979][ T5821] Bluetooth: hci4: link tx timeout [ 136.380208][ T5821] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.388329][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 136.547991][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 136.572164][ T8744] loop3: detected capacity change from 0 to 7 [ 136.581300][ T8744] Dev loop3: unable to read RDB block 7 [ 136.586951][ T8744] loop3: AHDI p1 p2 [ 136.590966][ T8744] loop3: partition table partially beyond EOD, truncated [ 136.598183][ T8744] loop3: p1 start 1702000233 is beyond EOD, truncated [ 136.647886][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 136.720794][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.736019][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 136.746315][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.758217][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.770115][ T8737] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.780037][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.818545][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 136.835116][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 137.244561][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 137.255590][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.473528][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.486870][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.516985][ T9] usb 1-1: USB disconnect, device number 17 [ 137.523686][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.774798][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 137.787970][ T10] usbtmc 2-1:16.0: can't read capabilities [ 137.983259][ T8741] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 137.992683][ T5807] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 137.999387][ T9] usb 2-1: USB disconnect, device number 18 [ 138.000341][ T5813] Bluetooth: hci5: command 0xfc11 tx timeout [ 138.108105][ T5880] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 138.270148][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 138.277190][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 138.306824][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.318005][ T29] audit: type=1400 audit(1775416673.893:450): avc: denied { append } for pid=8796 comm="syz.3.1258" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 138.343780][ T5880] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 138.355649][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.364236][ T5880] usb 5-1: Product: syz [ 138.368717][ T5880] usb 5-1: Manufacturer: syz [ 138.373315][ T5880] usb 5-1: SerialNumber: syz [ 138.381099][ T5880] usb 5-1: config 0 descriptor?? [ 138.389806][ T5880] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 138.401837][ T5880] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 138.409520][ T29] audit: type=1400 audit(1775416674.003:451): avc: denied { connect } for pid=8798 comm="syz.0.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.544734][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1262'. [ 138.586313][ T29] audit: type=1400 audit(1775416674.173:452): avc: denied { create } for pid=8806 comm="syz.1.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 138.963323][ T8822] xt_hashlimit: size too large, truncated to 1048576 [ 138.976780][ T29] audit: type=1400 audit(1775416674.563:453): avc: denied { append } for pid=8825 comm="syz.1.1272" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.007428][ T5880] em28xx 5-1:0.0: chip ID is em2800 [ 139.202661][ T5880] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 139.231243][ T5880] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 139.260144][ T5880] em28xx 5-1:0.0: No AC97 audio processor [ 139.278347][ T5880] usb 5-1: USB disconnect, device number 17 [ 139.285348][ T5880] em28xx 5-1:0.0: Disconnecting em28xx [ 139.320411][ T5880] em28xx 5-1:0.0: Freeing device [ 139.356842][ T29] audit: type=1400 audit(1775416674.943:454): avc: denied { write } for pid=8839 comm="syz.0.1277" path="socket:[22351]" dev="sockfs" ino=22351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.458265][ T29] audit: type=1400 audit(1775416675.053:455): avc: denied { setopt } for pid=8843 comm="syz.3.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.833587][ T29] audit: type=1400 audit(1775416675.423:456): avc: denied { getopt } for pid=8856 comm="syz.2.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.554989][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 140.565343][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 140.568360][ T792] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 140.597911][ T5880] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 140.727981][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 140.734591][ T792] usb 2-1: config 0 has no interfaces? [ 140.742960][ T792] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 140.753127][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.761181][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 140.766334][ T792] usb 2-1: Product: syz [ 140.770622][ T792] usb 2-1: Manufacturer: syz [ 140.775216][ T792] usb 2-1: SerialNumber: syz [ 140.781318][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.798599][ T792] usb 2-1: config 0 descriptor?? [ 140.805006][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.827964][ T5880] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 140.837319][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.850219][ T5880] usb 3-1: config 0 descriptor?? [ 140.886034][ T5880] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 140.921224][ T29] audit: type=1400 audit(1775416676.513:457): avc: denied { read } for pid=8910 comm="syz.0.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.101855][ T8889] netlink: 'syz.2.1299': attribute type 287 has an invalid length. [ 141.107366][ T5880] usb 2-1: USB disconnect, device number 19 [ 141.113513][ T9] usb 3-1: USB disconnect, device number 22 [ 141.340460][ T8930] Bluetooth: MGMT ver 1.23 [ 141.379235][ T8932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.441563][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 141.718298][ T5816] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 141.904855][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 141.930894][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.962131][ T5816] usb 1-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 141.983624][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.010519][ T5816] usb 1-1: config 0 descriptor?? [ 142.038475][ T8962] Invalid logical block size (257) [ 142.283948][ T8980] 9p: Invalid uid '0x00000000ffffffff' [ 142.419236][ T5880] kernel read not supported for file /dsp1 (pid: 5880 comm: kworker/1:6) [ 142.441899][ T5816] holtek_mouse 0003:04D9:A04A.000F: unknown main item tag 0x0 [ 142.458276][ T5816] holtek_mouse 0003:04D9:A04A.000F: unknown main item tag 0x0 [ 142.467171][ T5816] holtek_mouse 0003:04D9:A04A.000F: unknown main item tag 0x0 [ 142.475554][ T792] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 142.487941][ T5816] holtek_mouse 0003:04D9:A04A.000F: unknown main item tag 0x0 [ 142.489413][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 142.507026][ T5816] holtek_mouse 0003:04D9:A04A.000F: unknown main item tag 0x0 [ 142.523770][ T5816] holtek_mouse 0003:04D9:A04A.000F: unknown main item tag 0x0 [ 142.544308][ T29] audit: type=1400 audit(1775416678.133:458): avc: denied { write } for pid=8990 comm="syz.1.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.564513][ T5816] holtek_mouse 0003:04D9:A04A.000F: unknown main item tag 0x0 [ 142.564541][ T5816] holtek_mouse 0003:04D9:A04A.000F: unknown main item tag 0x0 [ 142.564563][ T5816] holtek_mouse 0003:04D9:A04A.000F: unknown main item tag 0x0 [ 142.564583][ T5816] holtek_mouse 0003:04D9:A04A.000F: unknown main item tag 0x0 [ 142.618471][ T5816] holtek_mouse 0003:04D9:A04A.000F: hidraw0: USB HID v7f.fd Device [HID 04d9:a04a] on usb-dummy_hcd.0-1/input0 [ 142.662537][ T5816] usb 1-1: USB disconnect, device number 18 [ 142.670686][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.681878][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.697292][ T792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.697878][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 142.715432][ T792] usb 5-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 142.731663][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.755072][ T8994] fido_id[8994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 142.768140][ T792] usb 5-1: config 0 descriptor?? [ 142.770742][ T10] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 142.788718][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 142.806965][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 142.835991][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 142.848131][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 142.877239][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.906399][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.925855][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.006132][ T29] audit: type=1400 audit(1775416678.593:459): avc: denied { bind } for pid=9008 comm="syz.2.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 143.052415][ T29] audit: type=1400 audit(1775416678.593:460): avc: denied { connect } for pid=9008 comm="syz.2.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 143.074536][ T29] audit: type=1400 audit(1775416678.623:461): avc: denied { bind } for pid=9004 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 143.115914][ T9016] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1357'. [ 143.126920][ T9016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1357'. [ 143.160939][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 143.166480][ T10] usbtmc 4-1:16.0: can't read capabilities [ 143.199427][ T792] lg-g15 0003:046D:C22E.0010: hidraw0: USB HID v7f.7d Device [HID 046d:c22e] on usb-dummy_hcd.4-1/input0 [ 143.386173][ T10] usb 4-1: USB disconnect, device number 16 [ 143.420422][ T792] usb 5-1: USB disconnect, device number 18 [ 143.565200][ T9] kernel write not supported for file /media7 (pid: 9 comm: kworker/0:0) [ 144.127940][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 144.127963][ T29] audit: type=1326 audit(1775416679.633:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca2d9c819 code=0x7ffc0000 [ 144.308366][ T29] audit: type=1326 audit(1775416679.633:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca2d9c819 code=0x7ffc0000 [ 144.389152][ T29] audit: type=1326 audit(1775416679.643:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca2d9c819 code=0x7ffc0000 [ 144.447923][ T29] audit: type=1326 audit(1775416679.643:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca2d9c819 code=0x7ffc0000 [ 144.497899][ T29] audit: type=1326 audit(1775416679.643:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcca2d9c819 code=0x7ffc0000 [ 144.551502][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 144.577946][ T29] audit: type=1326 audit(1775416679.643:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca2d9c819 code=0x7ffc0000 [ 144.647934][ T29] audit: type=1326 audit(1775416679.643:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca2d9c819 code=0x7ffc0000 [ 144.701799][ T29] audit: type=1326 audit(1775416679.643:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca2d9c819 code=0x7ffc0000 [ 144.736828][ T10] usb 5-1: config 246 has an invalid interface number: 166 but max is 0 [ 144.743052][ T29] audit: type=1326 audit(1775416679.653:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcca2d9c819 code=0x7ffc0000 [ 144.767910][ T10] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 144.818281][ T29] audit: type=1326 audit(1775416679.653:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca2d9c819 code=0x7ffc0000 [ 144.821686][ T10] usb 5-1: config 246 has no interface number 0 [ 144.890879][ T10] usb 5-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.924704][ T10] usb 5-1: config 246 interface 166 has no altsetting 0 [ 144.946325][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 144.958556][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.966587][ T10] usb 5-1: Product: syz [ 144.994066][ T10] usb 5-1: Manufacturer: syz [ 145.008078][ T10] usb 5-1: SerialNumber: syz [ 145.307977][ T5879] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 145.478923][ T5879] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.487632][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.517865][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.537157][ T5879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.556938][ T5879] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.576823][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.607255][ T5879] usb 2-1: Product: syz [ 145.612348][ T5879] usb 2-1: Manufacturer: syz [ 145.637923][ T5879] cdc_wdm 2-1:1.0: skipping garbage [ 145.644557][ T10] usb 5-1: Limiting number of CPorts to U8_MAX [ 145.659644][ T10] usb 5-1: Not enough endpoints found in device, aborting! [ 145.668782][ T5879] cdc_wdm 2-1:1.0: skipping garbage [ 145.678490][ T5879] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 145.684424][ T5879] cdc_wdm 2-1:1.0: Unknown control protocol [ 145.689973][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1390'. [ 145.714775][ T9090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1390'. [ 145.739553][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1390'. [ 145.765174][ T9090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1390'. [ 145.900490][ T792] usb 2-1: USB disconnect, device number 20 [ 145.926625][ T5879] usb 5-1: USB disconnect, device number 19 [ 146.677890][ T792] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 146.783049][ T9124] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 146.822107][ T9124] netlink: 'syz.3.1403': attribute type 2 has an invalid length. [ 146.831721][ T792] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 146.840975][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.844356][ T9124] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 146.871288][ T792] usb 3-1: Product: syz [ 146.875631][ T792] usb 3-1: Manufacturer: syz [ 146.890176][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 146.900442][ T792] usb 3-1: SerialNumber: syz [ 146.914826][ T792] usb 3-1: config 0 descriptor?? [ 146.939634][ T792] hub 3-1:0.0: bad descriptor, ignoring hub [ 146.949238][ T792] hub 3-1:0.0: probe with driver hub failed with error -5 [ 146.979931][ T792] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 147.019967][ T792] usb 3-1: Detected FT232HP [ 147.148910][ T792] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 147.165375][ T792] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 147.198286][ T792] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 147.240047][ T792] usb 3-1: USB disconnect, device number 23 [ 147.279888][ T792] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 147.336250][ T792] ftdi_sio 3-1:0.0: device disconnected [ 147.463929][ T9141] syz.0.1408 (9141) used greatest stack depth: 19672 bytes left [ 147.717930][ T5880] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 147.929399][ T5880] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 147.952697][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.978553][ T5880] usb 1-1: config 0 descriptor?? [ 148.006690][ T9170] tipc: Started in network mode [ 148.039957][ T9170] tipc: Node identity ff, cluster identity 4711 [ 148.088174][ T9170] tipc: Enabling of bearer rejected, failed to enable media [ 148.228594][ T5880] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 148.440368][ T5880] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 148.481603][ T5880] [drm] Initialized udl on minor 2 [ 148.832501][ T5880] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 148.867722][ T5880] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 148.891737][ T5816] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 148.903958][ T5880] usb 1-1: USB disconnect, device number 19 [ 148.927151][ T5816] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 149.779927][ T9230] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1439'. [ 149.969478][ T9240] netlink: 'syz.0.1446': attribute type 11 has an invalid length. [ 149.987988][ T9240] netem: change failed [ 150.376454][ T9253] sctp: [Deprecated]: syz.0.1451 (pid 9253) Use of int in max_burst socket option. [ 150.376454][ T9253] Use struct sctp_assoc_value instead [ 150.449070][ T9255] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1452'. [ 151.029782][ T9290] use of bytesused == 0 is deprecated and will be removed in the future, [ 151.051753][ T9290] use the actual size instead. [ 151.289675][ T792] kernel write not supported for file /uhid (pid: 792 comm: kworker/1:2) [ 151.401931][ T9301] syz.1.1472 uses obsolete (PF_INET,SOCK_PACKET) [ 151.512283][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 151.512298][ T29] audit: type=1400 audit(1775416687.103:485): avc: denied { read } for pid=9304 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.657071][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 152.027911][ T5879] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 152.188031][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 152.206882][ T5879] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 152.224957][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.247457][ T5879] usb 4-1: Product: syz [ 152.263892][ T5879] usb 4-1: Manufacturer: syz [ 152.275659][ T5879] usb 4-1: SerialNumber: syz [ 152.513139][ T5879] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 152.537888][ T792] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 152.546381][ T5879] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 152.566706][ T5879] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 152.568012][ T5880] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 152.585948][ T5879] usb 4-1: media controller created [ 152.630741][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.699943][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.713140][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.729324][ T792] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 152.740423][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.759337][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.770119][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 152.777703][ T5880] usb 3-1: can't read configurations, error -71 [ 152.785762][ T792] usb 1-1: config 0 descriptor?? [ 152.863337][ T9355] netlink: 'syz.1.1497': attribute type 1 has an invalid length. [ 152.871601][ T9355] netlink: 'syz.1.1497': attribute type 3 has an invalid length. [ 152.882077][ T9355] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1497'. [ 152.889338][ T5879] zl10353_read_register: readreg error (reg=127, ret==-110) [ 152.897663][ T9355] NCSI netlink: No device for ifindex 813332851 [ 152.941233][ T5879] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 152.958206][ T5852] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 152.960433][ T5879] usb 4-1: USB disconnect, device number 17 [ 153.127287][ T5852] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.137511][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.153520][ T5852] usb 5-1: config 0 descriptor?? [ 153.171542][ T5852] cp210x 5-1:0.0: cp210x converter detected [ 153.206942][ T792] hid_parser_main: 453 callbacks suppressed [ 153.206982][ T792] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 153.221862][ T792] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 153.229555][ T792] playstation 0003:054C:0DF2.0011: unknown main item tag 0x4 [ 153.236981][ T792] playstation 0003:054C:0DF2.0011: item fetching failed at offset 4/5 [ 153.249663][ T792] playstation 0003:054C:0DF2.0011: Parse failed [ 153.255998][ T792] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -22 [ 153.412697][ T792] usb 1-1: USB disconnect, device number 20 [ 153.447931][ T9379] Attempt to restore checkpoint with obsolete wellknown handles [ 153.576023][ T5852] usb 5-1: cp210x converter now attached to ttyUSB0 [ 153.639828][ T9390] Falling back ldisc for ttyS3. [ 153.721170][ T29] audit: type=1400 audit(1775416689.313:486): avc: denied { write } for pid=9396 comm="syz.3.1519" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.777942][ T29] audit: type=1400 audit(1775416689.313:487): avc: denied { open } for pid=9396 comm="syz.3.1519" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.803723][ T5880] usb 5-1: USB disconnect, device number 20 [ 153.815947][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.867424][ T5880] cp210x 5-1:0.0: device disconnected [ 153.893394][ T29] audit: type=1400 audit(1775416689.473:488): avc: denied { name_connect } for pid=9404 comm="syz.3.1522" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 153.947518][ T29] audit: type=1400 audit(1775416689.513:489): avc: denied { create } for pid=9407 comm="syz.1.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 153.994414][ T29] audit: type=1400 audit(1775416689.513:490): avc: denied { ioctl } for pid=9407 comm="syz.1.1524" path="socket:[24505]" dev="sockfs" ino=24505 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 154.023563][ T9412] binder: 9411:9412 ioctl 40046210 0 returned -14 [ 154.037093][ T9415] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1526'. [ 154.187262][ T9423] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1530'. [ 154.859332][ T9453] rtc_cmos 00:00: Alarms can be up to one day in the future [ 154.881925][ T9452] rtc_cmos 00:00: Alarms can be up to one day in the future [ 154.912790][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1546'. [ 155.040396][ T9460] macvtap1: entered promiscuous mode [ 155.045819][ T9460] macvtap1: entered allmulticast mode [ 155.051774][ T9460] dummy0: entered promiscuous mode [ 155.057563][ T9460] dummy0: entered allmulticast mode [ 155.064784][ T9460] team0: Device macvtap1 failed to register rx_handler [ 155.073134][ T9460] dummy0: left allmulticast mode [ 155.081581][ T9460] dummy0: left promiscuous mode [ 155.328563][ T5879] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 155.350906][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 155.359095][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 155.367656][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 155.375683][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 155.383180][ T5919] rtc rtc0: __rtc_set_alarm: err=-22 [ 155.479582][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.490846][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.501680][ T5879] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 155.511240][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.519323][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 155.530203][ T5879] usb 1-1: config 0 descriptor?? [ 155.687897][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 155.701645][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 155.719639][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.737370][ T10] usb 5-1: Product: syz [ 155.747674][ T10] usb 5-1: Manufacturer: syz [ 155.754042][ T10] usb 5-1: SerialNumber: syz [ 155.766528][ T10] usb 5-1: config 0 descriptor?? [ 155.783101][ T10] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 155.859908][ T9496] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1564'. [ 155.952900][ T5879] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 155.966995][ T5879] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 155.974856][ T5879] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 155.998617][ T5879] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 156.005502][ T5879] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 156.013572][ T5879] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 156.021985][ T5879] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 156.033478][ T5879] isku 0003:1E7D:319C.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 156.155185][ T5879] isku 0003:1E7D:319C.0012: couldn't init struct isku_device [ 156.168584][ T5879] isku 0003:1E7D:319C.0012: couldn't install keyboard [ 156.198671][ T5879] isku 0003:1E7D:319C.0012: probe with driver isku failed with error -71 [ 156.232346][ T5879] usb 1-1: USB disconnect, device number 21 [ 156.491715][ T9525] vivid-000: disconnect [ 156.509129][ T9524] vivid-000: reconnect [ 156.610702][ T29] audit: type=1400 audit(1775416692.203:491): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 156.634647][ T10] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 156.660578][ T10] usb 5-1: USB disconnect, device number 21 [ 156.730667][ T9537] capability: warning: `syz.2.1582' uses deprecated v2 capabilities in a way that may be insecure [ 156.945562][ T9551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1590'. [ 157.122183][ T29] audit: type=1400 audit(1775416692.713:492): avc: denied { read } for pid=9557 comm="syz.2.1594" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 157.335041][ T29] audit: type=1400 audit(1775416692.923:493): avc: denied { mount } for pid=9569 comm="syz.4.1599" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 157.430256][ T35] wlan1: Trigger new scan to find an IBSS to join [ 157.441891][ T29] audit: type=1400 audit(1775416692.923:494): avc: denied { mounton } for pid=9569 comm="syz.4.1599" path="/298/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 157.496851][ T29] audit: type=1400 audit(1775416692.923:495): avc: denied { remount } for pid=9569 comm="syz.4.1599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 157.581740][ T29] audit: type=1400 audit(1775416693.073:496): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 157.660676][ T29] audit: type=1400 audit(1775416693.153:497): avc: denied { ioctl } for pid=9582 comm="syz.2.1606" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 157.693480][ T9592] input: syz1 as /devices/virtual/input/input19 [ 157.700346][ T29] audit: type=1400 audit(1775416693.153:498): avc: denied { mounton } for pid=9582 comm="syz.2.1606" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 157.818036][ T5880] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 157.982991][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 158.021327][ T5880] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 158.029978][ T5880] usb 2-1: config 0 has no interface number 0 [ 158.051809][ T5880] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 158.063997][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.083413][ T5880] usb 2-1: Product: syz [ 158.087615][ T5880] usb 2-1: Manufacturer: syz [ 158.096497][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 158.106087][ T5880] usb 2-1: SerialNumber: syz [ 158.112788][ T5880] usb 2-1: config 0 descriptor?? [ 158.121410][ T5880] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 158.297935][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 158.349171][ T5880] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 158.379280][ T5880] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 158.489293][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.510772][ T10] usb 4-1: config 0 has no interface number 0 [ 158.535430][ T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 158.578846][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.599168][ T10] usb 4-1: Product: syz [ 158.607500][ T10] usb 4-1: Manufacturer: syz [ 158.612364][ T10] usb 4-1: SerialNumber: syz [ 158.621192][ T10] usb 4-1: config 0 descriptor?? [ 158.787407][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 158.787930][ T9] usb 2-1: USB disconnect, device number 21 [ 158.832515][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 158.843730][ T29] audit: type=1400 audit(1775416694.423:499): avc: denied { mount } for pid=9629 comm="syz.0.1624" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 158.884812][ T10] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 158.898643][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 158.910605][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 158.920949][ T29] audit: type=1400 audit(1775416694.423:500): avc: denied { mounton } for pid=9629 comm="syz.0.1624" path="/321/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 158.943948][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 158.952837][ T9] quatech2 2-1:0.51: device disconnected [ 158.968043][ T10] usb 4-1: media controller created [ 158.996532][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.291074][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1630'. [ 159.589963][ T5880] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 159.752730][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.777317][ T5880] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.803877][ T5880] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.823319][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.839577][ T5880] usb 5-1: Product: syz [ 159.848751][ T5880] usb 5-1: Manufacturer: syz [ 159.853366][ T5880] usb 5-1: SerialNumber: syz [ 159.884842][ T5880] cdc_ncm 5-1:1.0: skipping garbage [ 159.896799][ T5880] usb 5-1: selecting invalid altsetting 1 [ 159.919100][ T792] kernel read not supported for file /media0 (pid: 792 comm: kworker/1:2) [ 160.068130][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 160.101048][ T5880] cdc_ncm 5-1:1.0: bind() failure [ 160.123470][ T5880] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 160.136920][ T5880] cdc_ncm 5-1:1.1: bind() failure [ 160.167401][ T5880] usb 5-1: USB disconnect, device number 22 [ 160.181701][ T10] usb 4-1: USB disconnect, device number 18 [ 160.428072][ T5879] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 160.612194][ T5879] usb 1-1: config 0 has no interfaces? [ 160.624245][ T5879] usb 1-1: config 0 has no interfaces? [ 160.635659][ T5879] usb 1-1: config 0 has no interfaces? [ 160.644645][ T5879] usb 1-1: string descriptor 0 read error: -22 [ 160.651930][ T5879] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 160.661429][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.680345][ T5879] usb 1-1: config 0 descriptor?? [ 160.812890][ T9719] bridge0: port 3(wlan0) entered blocking state [ 160.828262][ T9719] bridge0: port 3(wlan0) entered disabled state [ 160.840442][ T9719] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 160.866301][ T9719] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 160.921883][ T5879] usb 1-1: USB disconnect, device number 22 [ 161.395311][ T9750] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 161.420222][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.427962][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.442452][ T9750] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.449652][ T9750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.457164][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.464340][ T9750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.475456][ T9750] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 161.476147][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1667'. [ 161.531888][ T9757] bridge_slave_1: left allmulticast mode [ 161.575310][ T9757] bridge_slave_1: left promiscuous mode [ 161.610637][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.655324][ T9] kernel read not supported for file /vcs (pid: 9 comm: kworker/0:0) [ 161.677005][ T9757] bridge_slave_0: left allmulticast mode [ 161.693174][ T9757] bridge_slave_0: left promiscuous mode [ 161.697109][ T9769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.711824][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.769766][ T9773] xt_hashlimit: size too large, truncated to 1048576 [ 161.822070][ T9757] bond0: (slave bridge0): Releasing backup interface [ 162.078350][ T5813] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 162.088647][ T5813] CPU: 1 UID: 0 PID: 5813 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.088681][ T5813] Tainted: [L]=SOFTLOCKUP [ 162.088688][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 162.088700][ T5813] Workqueue: hci2 hci_rx_work [ 162.088727][ T5813] Call Trace: [ 162.088733][ T5813] [ 162.088739][ T5813] dump_stack_lvl+0x100/0x190 [ 162.088769][ T5813] sysfs_warn_dup.cold+0x1c/0x28 [ 162.088796][ T5813] sysfs_create_dir_ns+0x24b/0x2b0 [ 162.088827][ T5813] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 162.088857][ T5813] ? find_held_lock+0x2b/0x80 [ 162.088890][ T5813] ? kobject_add_internal+0x25f/0x930 [ 162.088913][ T5813] ? kobject_add_internal+0x25f/0x930 [ 162.088938][ T5813] ? do_raw_spin_unlock+0x145/0x1e0 [ 162.088964][ T5813] kobject_add_internal+0x2c8/0x930 [ 162.088992][ T5813] kobject_add+0x16a/0x1e0 [ 162.089016][ T5813] ? __pfx_kobject_add+0x10/0x10 [ 162.089037][ T5813] ? class_to_subsys+0x10f/0x150 [ 162.089066][ T5813] ? kobject_put+0xb9/0x640 [ 162.089084][ T5813] ? _raw_spin_unlock+0x28/0x50 [ 162.089118][ T5813] device_add+0x294/0x1950 [ 162.089140][ T5813] ? __pfx_dev_set_name+0x10/0x10 [ 162.089165][ T5813] ? __pfx_device_add+0x10/0x10 [ 162.089187][ T5813] ? mgmt_send_event_skb+0x2fb/0x460 [ 162.089221][ T5813] hci_conn_add_sysfs+0x1a3/0x260 [ 162.089252][ T5813] le_conn_complete_evt+0x11eb/0x1f60 [ 162.089282][ T5813] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 162.089311][ T5813] hci_le_conn_complete_evt+0x23c/0x3a0 [ 162.089337][ T5813] ? skb_pull_data+0x15f/0x1e0 [ 162.089360][ T5813] hci_le_meta_evt+0x34a/0x5f0 [ 162.089387][ T5813] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 162.089416][ T5813] hci_event_packet+0x51c/0xcd0 [ 162.089442][ T5813] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 162.089470][ T5813] ? __pfx_hci_event_packet+0x10/0x10 [ 162.089498][ T5813] ? kcov_remote_start+0x374/0x660 [ 162.089525][ T5813] ? lockdep_hardirqs_on+0x78/0x100 [ 162.089561][ T5813] hci_rx_work+0x451/0xfc0 [ 162.089591][ T5813] process_one_work+0xa23/0x19a0 [ 162.089625][ T5813] ? __pfx_process_one_work+0x10/0x10 [ 162.089660][ T5813] ? __pfx_hci_rx_work+0x10/0x10 [ 162.089687][ T5813] worker_thread+0x5ef/0xe50 [ 162.089718][ T5813] ? kthread+0x13a/0x450 [ 162.089734][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 162.089750][ T5813] kthread+0x370/0x450 [ 162.089768][ T5813] ? __pfx_kthread+0x10/0x10 [ 162.089788][ T5813] ret_from_fork+0x754/0xd80 [ 162.089810][ T5813] ? __pfx_ret_from_fork+0x10/0x10 [ 162.089832][ T5813] ? __switch_to+0x7b4/0x1120 [ 162.089856][ T5813] ? __pfx_kthread+0x10/0x10 [ 162.089877][ T5813] ret_from_fork_asm+0x1a/0x30 [ 162.089920][ T5813] [ 162.089947][ T5813] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 162.370347][ T5813] Bluetooth: hci2: failed to register connection device [ 162.404988][ T5879] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 162.461300][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 162.461316][ T29] audit: type=1326 audit(1775416698.053:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 162.498037][ T29] audit: type=1326 audit(1775416698.053:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 162.508907][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 162.521469][ T29] audit: type=1326 audit(1775416698.053:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 162.551228][ T29] audit: type=1326 audit(1775416698.053:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 162.576174][ T29] audit: type=1326 audit(1775416698.053:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 162.639987][ T29] audit: type=1326 audit(1775416698.053:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 162.668320][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 162.691443][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.711928][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.720861][ T29] audit: type=1326 audit(1775416698.053:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 162.742001][ T5879] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 162.764222][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.783837][ T29] audit: type=1326 audit(1775416698.053:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 162.822821][ T5879] usb 5-1: config 0 descriptor?? [ 162.831586][ T29] audit: type=1326 audit(1775416698.053:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 162.870713][ T5879] hub 5-1:0.0: USB hub found [ 162.881114][ T29] audit: type=1326 audit(1775416698.053:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 162.906540][ T9823] binder_alloc: binder_alloc_mmap_handler: 9822 200000fed000-200001000000 already mapped failed -16 [ 163.074586][ T5879] hub 5-1:0.0: 1 port detected [ 163.111795][ T9834] input: syz1 as /devices/virtual/input/input20 [ 163.467882][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 163.495934][ T5879] usb 5-1: USB disconnect, device number 23 [ 163.531591][ T60] wlan1: Creating new IBSS network, BSSID 9a:0e:92:31:18:5a [ 163.620502][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 163.623399][ T792] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 163.631812][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.657885][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.679484][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.713475][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.733280][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.744116][ T9] usb 2-1: config 0 descriptor?? [ 163.801391][ T792] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 163.818005][ T792] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 163.844398][ T792] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 163.869779][ T792] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 163.879243][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.887268][ T792] usb 3-1: Product: syz [ 163.894607][ T792] usb 3-1: Manufacturer: syz [ 163.899480][ T792] usb 3-1: SerialNumber: syz [ 163.915084][ T792] usb 3-1: config 0 descriptor?? [ 163.921526][ T9850] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 163.929864][ T9850] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 163.944014][ T792] usb 3-1: ucan: probing device on interface #0 [ 164.154020][ T9881] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96 [ 164.188320][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0013/input/input21 [ 164.293546][ T9888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1707'. [ 164.328379][ T9] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 164.405455][ T5816] usb 2-1: USB disconnect, device number 22 [ 164.481501][ T9890] fido_id[9890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 164.533948][ T9894] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 164.552910][ T354] Bluetooth: hci5: Frame reassembly failed (-84) [ 164.601260][ T792] ucan 3-1:0.0 can0: registered device [ 164.800986][ T792] ucan 3-1:0.0 can0: firmware string: unknown [ 164.824583][ T792] usb 3-1: USB disconnect, device number 26 [ 165.041736][ T9923] netlink: 'syz.0.1721': attribute type 10 has an invalid length. [ 165.072567][ T9923] team0: Port device netdevsim0 added [ 165.444053][ T9945] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1730'. [ 166.007188][ T9970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.159134][ T9978] input: syz0 as /devices/virtual/input/input22 [ 166.380203][ T9989] netlink: 'syz.2.1751': attribute type 1 has an invalid length. [ 166.396210][ T9989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.550200][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 166.559307][ T5807] Bluetooth: hci5: command 0x1003 tx timeout [ 166.860031][T10015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1764'. [ 166.897874][ T5879] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 166.938022][T10020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1764'. [ 166.965046][T10020] nbd: device at index 64 is going down [ 167.090676][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.113491][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.157867][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.181477][ T5797] udevd[5797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 167.197696][ T5879] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.227082][T10033] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1771'. [ 167.243494][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.253833][ T5879] usb 1-1: config 0 descriptor?? [ 167.564219][T10053] netlink: 49 bytes leftover after parsing attributes in process `syz.3.1781'. [ 167.573688][T10053] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1781'. [ 167.585480][T10053] netlink: 49 bytes leftover after parsing attributes in process `syz.3.1781'. [ 167.601178][ T10] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 167.608474][ T792] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 167.683604][ T5879] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x4 [ 167.711154][ T5879] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 167.778264][ T792] usb 2-1: Using ep0 maxpacket: 32 [ 167.786140][ T792] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.789980][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 167.809659][ T792] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 167.815998][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 167.821977][ T792] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.841804][ T792] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 167.845353][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.854411][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.865034][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 167.881328][ T792] usb 2-1: Product: syz [ 167.886909][ T792] usb 2-1: Manufacturer: syz [ 167.891876][ T792] usb 2-1: SerialNumber: syz [ 167.907736][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 167.916967][ T792] usb 2-1: config 0 descriptor?? [ 167.921426][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 167.931454][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 167.942338][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.967399][ T5919] usb 1-1: USB disconnect, device number 23 [ 168.003740][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.042365][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.064960][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 168.073827][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.098459][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.118529][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.131651][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.146418][ T10] usb 3-1: string descriptor 0 read error: -22 [ 168.152945][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 168.162551][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.190068][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 168.333913][ T792] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 168.513607][ T10] usb 3-1: USB disconnect, device number 27 [ 168.607892][T10087] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1791'. [ 168.917046][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 168.917062][ T29] audit: type=1400 audit(1775416704.503:538): avc: denied { ioctl } for pid=10098 comm="syz.4.1797" path="socket:[27989]" dev="sockfs" ino=27989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.988330][ T792] usb 2-1: USB disconnect, device number 23 [ 169.202949][T10110] netlink: 'syz.0.1801': attribute type 83 has an invalid length. [ 169.898022][ T792] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 170.011388][ T29] audit: type=1400 audit(1775416705.593:539): avc: denied { setopt } for pid=10157 comm="syz.0.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.082902][ T792] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 170.113437][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.130551][ T792] usb 2-1: Product: syz [ 170.137769][ T792] usb 2-1: Manufacturer: syz [ 170.150884][ T1311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.160353][ T5852] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 170.174035][ T792] usb 2-1: SerialNumber: syz [ 170.183246][ T29] audit: type=1400 audit(1775416705.773:540): avc: denied { write } for pid=10169 comm="syz.3.1821" lport=47849 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 170.196352][ T792] usb 2-1: config 0 descriptor?? [ 170.360185][ T5852] usb 5-1: Using ep0 maxpacket: 8 [ 170.376722][ T5852] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 170.406325][ T5852] usb 5-1: config 179 has no interface number 0 [ 170.413390][ T5852] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 170.453932][ T5852] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 170.487870][ T5852] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.499111][ T5852] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 170.527692][ T5852] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 170.528376][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1826'. [ 170.541907][ T5852] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 170.572384][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.583720][T10154] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 170.680557][ T792] usb 2-1: Firmware: major: 0, minor: 64, hardware type: UNKNOWN (130) [ 170.708506][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.869485][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 170.890702][ T792] usb 2-1: failed to fetch extended address, random address set [ 170.899274][T10198] chnl_net:caif_netlink_parms(): no params data found [ 170.914611][ T792] usb 2-1: atusb_probe: initialization failed, error = -524 [ 170.938633][ T792] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 170.955090][ T5852] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input23 [ 170.969401][ T792] usb 2-1: USB disconnect, device number 24 [ 171.153956][T10154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.173055][T10154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.291874][ T29] audit: type=1326 audit(1775416706.883:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 171.317220][ T29] audit: type=1326 audit(1775416706.883:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 171.342175][ T29] audit: type=1326 audit(1775416706.883:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 171.366514][ T29] audit: type=1326 audit(1775416706.883:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 171.395750][ T29] audit: type=1326 audit(1775416706.913:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 171.399139][ T5852] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 171.422757][ T29] audit: type=1326 audit(1775416706.913:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 171.435685][ T5880] usb 5-1: USB disconnect, device number 24 [ 171.450548][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 171.450593][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 171.450811][ T1333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.487126][ T29] audit: type=1326 audit(1775416706.913:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f6ebb19c819 code=0x7ffc0000 [ 171.628148][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 171.638256][ T5852] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 171.643880][T10226] loop1: detected capacity change from 0 to 7 [ 171.647564][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.656245][ C0] blk_print_req_error: 138 callbacks suppressed [ 171.656260][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.664747][ T5852] usb 4-1: Product: syz [ 171.667925][ C0] buffer_io_error: 138 callbacks suppressed [ 171.667937][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.668505][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.704927][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.704972][ T5852] usb 4-1: Manufacturer: syz [ 171.717262][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.718147][ T5852] usb 4-1: SerialNumber: syz [ 171.726894][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.739588][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.749593][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.749930][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.765662][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.775252][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.787198][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.796830][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.805150][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.814754][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.824171][T10226] ldm_validate_partition_table(): Disk read failed. [ 171.831813][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.841457][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.849553][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.859176][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.867206][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.876804][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.884914][T10226] Dev loop1: unable to read RDB block 0 [ 171.891302][T10226] loop1: unable to read partition table [ 171.897436][T10226] loop1: partition table beyond EOD, truncated [ 171.915716][T10226] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 171.973557][ T5852] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 172.001053][ T5852] kalmia 4-1:1.0: probe with driver kalmia failed with error -71 [ 172.055239][ T5852] usb 4-1: USB disconnect, device number 19 [ 172.337874][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 172.501811][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 172.519092][ T9] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 172.531489][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 172.544957][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 172.614459][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 172.638343][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 172.648804][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.661946][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.676454][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.789475][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.909711][ T9] usb 1-1: usb_control_msg returned -32 [ 172.921288][ T9] usbtmc 1-1:16.0: can't read capabilities [ 173.043833][T10260] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1856'. [ 173.238639][T10269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1861'. [ 173.383745][T10274] syzkaller1: entered promiscuous mode [ 173.402645][T10274] syzkaller1: entered allmulticast mode [ 173.478920][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1866'. [ 173.523301][T10284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.532717][T10284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.542128][T10284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.828357][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.828402][T10302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1876'. [ 174.065346][ T5797] udevd[5797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 174.112655][T10312] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.141677][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 174.141693][ T29] audit: type=1400 audit(1775416709.733:555): avc: denied { create } for pid=10313 comm="syz.4.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.171791][ T29] audit: type=1400 audit(1775416709.763:556): avc: denied { write } for pid=10313 comm="syz.4.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.469893][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.660790][ T29] audit: type=1400 audit(1775416710.253:557): avc: denied { map } for pid=10337 comm="syz.3.1892" path="socket:[29293]" dev="sockfs" ino=29293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 174.684362][ T29] audit: type=1400 audit(1775416710.253:558): avc: denied { read } for pid=10337 comm="syz.3.1892" path="socket:[29293]" dev="sockfs" ino=29293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 174.869582][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.108093][ T5919] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 175.129423][ T5879] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 175.130120][ T5852] usb 1-1: USB disconnect, device number 24 [ 175.219091][ T29] audit: type=1800 audit(1775416710.803:559): pid=10361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1902" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 175.277862][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 175.284372][ T5919] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.295287][ T5919] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 175.305779][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.315661][ T5919] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 175.325284][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.337529][ T5919] usb 2-1: Product: syz [ 175.342293][ T5919] usb 2-1: Manufacturer: syz [ 175.347345][ T5919] usb 2-1: SerialNumber: syz [ 175.354417][ T5879] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 175.364758][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.373062][ T5879] usb 3-1: Product: syz [ 175.377230][ T5879] usb 3-1: Manufacturer: syz [ 175.383063][ T5879] usb 3-1: SerialNumber: syz [ 175.396790][ T5919] usb 2-1: config 0 descriptor?? [ 175.403157][ T5879] gspca_main: spca501-2.14.0 probing 0497:c001 [ 175.796564][ T5879] gspca_spca501: reg write: error -71 [ 175.803117][ T5879] spca501 3-1:68.0: Reg write failed for 0x02,0xa048,0x00 [ 175.810383][ T5879] spca501 3-1:68.0: probe with driver spca501 failed with error -22 [ 175.818572][ T5919] gs_usb 2-1:0.0: Configuring for 154 interfaces [ 175.827130][ T5879] usb 3-1: USB disconnect, device number 28 [ 175.908374][ T1333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.947929][ T5852] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 176.099804][ T5852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.110141][ T5852] usb 5-1: config 0 has no interfaces? [ 176.115630][ T5852] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 176.137422][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.155561][ T5852] usb 5-1: config 0 descriptor?? [ 176.336570][T10375] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1908'. [ 176.398786][ T5879] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 176.423124][ T5919] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 176.449104][ T5919] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 176.460194][ T5919] usb 2-1: USB disconnect, device number 25 [ 176.557853][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 176.564123][ T5879] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 176.572336][ T5879] usb 1-1: config 0 has no interface number 0 [ 176.578363][T10369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.581009][ T5879] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 176.590310][T10369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.596703][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.612396][ T5879] usb 1-1: Product: syz [ 176.614913][ T5880] usb 5-1: USB disconnect, device number 25 [ 176.616579][ T5879] usb 1-1: Manufacturer: syz [ 176.627367][ T5879] usb 1-1: SerialNumber: syz [ 176.635646][ T5879] usb 1-1: config 0 descriptor?? [ 176.642946][ T5879] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 176.657873][ T5852] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 176.810578][ T5852] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.821789][ T5852] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 176.832891][ T5852] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.846505][ T5879] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 176.857662][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.861759][ T5879] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 176.883236][T10379] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 176.896574][ T5852] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.949322][ T5880] net_ratelimit: 1 callbacks suppressed [ 176.949339][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.064694][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 75 [ 177.194537][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.263228][ T9] usb 3-1: USB disconnect, device number 29 [ 177.266119][ T5880] usb 1-1: USB disconnect, device number 25 [ 177.269313][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 177.284023][ T5880] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 177.334170][T10398] block nbd3: NBD_DISCONNECT [ 177.372401][ T5880] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 177.412211][ T5880] quatech2 1-1:0.51: device disconnected [ 177.993575][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.526290][ T29] audit: type=1400 audit(1775416714.113:560): avc: denied { write } for pid=10443 comm="syz.1.1936" path="socket:[29746]" dev="sockfs" ino=29746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 179.038323][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.046561][ T29] audit: type=1400 audit(1775416714.613:561): avc: denied { bind } for pid=10460 comm="syz.0.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.103442][ T29] audit: type=1400 audit(1775416714.693:562): avc: denied { name_bind } for pid=10468 comm="syz.1.1944" src=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 179.440078][ T29] audit: type=1400 audit(1775416715.033:563): avc: denied { relabelfrom } for pid=10480 comm="syz.1.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 179.461550][ T29] audit: type=1400 audit(1775416715.033:564): avc: denied { relabelto } for pid=10480 comm="syz.1.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 179.582099][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 179.610016][T10489] loop5: detected capacity change from 0 to 7 [ 179.616991][T10489] Dev loop5: unable to read RDB block 7 [ 179.629316][T10489] loop5: unable to read partition table [ 179.635102][T10489] loop5: partition table beyond EOD, truncated [ 179.643609][T10489] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 179.738557][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 179.751197][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 179.778019][ T9] usb 1-1: config 0 has no interface number 0 [ 179.791850][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 179.814987][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.830202][ T9] usb 1-1: Product: syz [ 179.853305][ T9] usb 1-1: Manufacturer: syz [ 179.861194][ T9] usb 1-1: SerialNumber: syz [ 179.869550][ T9] usb 1-1: config 0 descriptor?? [ 179.899604][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 179.997883][ T792] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 180.007912][ T29] audit: type=1400 audit(1775416715.583:565): avc: denied { open } for pid=10502 comm="syz.2.1962" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 180.066791][ T29] audit: type=1400 audit(1775416715.593:566): avc: denied { ioctl } for pid=10502 comm="syz.2.1962" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 180.101469][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.140236][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 180.180080][ T792] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.185838][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 180.209257][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.220572][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 180.230749][ T792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.230954][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.243990][ T792] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.261026][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.272602][T10509] bond1: invalid ARP target 0.0.0.0 specified for addition [ 180.277381][ T792] usb 4-1: config 0 descriptor?? [ 180.312865][T10509] bond1: option arp_ip_target: invalid value (0) [ 180.329908][T10509] bond1 (unregistering): Released all slaves [ 180.551801][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 180.551884][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 180.560052][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 180.565755][ T5130] Bluetooth: hci2: command 0x0406 tx timeout [ 180.600429][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 180.600850][ T5816] usb 1-1: USB disconnect, device number 26 [ 180.645288][ T5816] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 180.669678][ T5816] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 180.690083][ T5816] quatech2 1-1:0.51: device disconnected [ 180.708591][ T792] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 180.733625][ T792] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 180.892964][ T5880] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 181.030077][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.060959][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.086081][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.111118][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.123373][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.151745][ T5880] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.168852][T10533] SELinux: failed to load policy [ 181.174017][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.216373][ T5880] usb 5-1: config 0 descriptor?? [ 181.714370][T10547] loop8: detected capacity change from 0 to 7 [ 181.723856][ T5797] Dev loop8: unable to read RDB block 7 [ 181.729902][ T5797] loop8: unable to read partition table [ 181.735794][ T5797] loop8: partition table beyond EOD, truncated [ 181.738988][ T5880] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 181.755142][ T5880] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 181.757568][T10547] Dev loop8: unable to read RDB block 7 [ 181.768881][T10547] loop8: unable to read partition table [ 181.774731][T10547] loop8: partition table beyond EOD, truncated [ 181.787924][T10547] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 181.788353][ T5880] plantronics 0003:047F:FFFF.0016: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 182.081473][ T5879] usb 5-1: USB disconnect, device number 26 [ 182.149664][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.308257][ T1311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.533077][T10579] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 182.543557][T10579] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 182.566806][T10579] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 182.716053][T10588] Bluetooth: MGMT ver 1.23 [ 182.844896][ T5816] usb 4-1: USB disconnect, device number 20 [ 183.082939][T10612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2010'. [ 183.148963][T10615] macvlan4: entered promiscuous mode [ 183.154649][T10615] bond_slave_0: entered promiscuous mode [ 183.161087][T10615] bond_slave_1: entered promiscuous mode [ 183.174748][T10615] bond0: entered promiscuous mode [ 183.183670][T10615] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 183.191365][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.218922][T10615] team0: Port device macvlan4 added [ 183.297891][ T5816] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 183.465313][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 183.472327][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.501129][ T5816] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.530317][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.565476][ T5816] usb 1-1: config 0 descriptor?? [ 183.804296][ T5816] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 183.939830][T10660] input: syz0 as /devices/virtual/input/input24 [ 184.182677][ T5816] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 184.228993][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.266447][T10674] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 184.343875][T10683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.348127][ T5816] usb 5-1: Using ep0 maxpacket: 32 [ 184.357429][ T5816] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 184.366096][ T5816] usb 5-1: config 0 has no interface number 0 [ 184.378918][ T5816] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 184.388386][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.396477][ T5816] usb 5-1: Product: syz [ 184.401038][ T5816] usb 5-1: Manufacturer: syz [ 184.405748][ T5816] usb 5-1: SerialNumber: syz [ 184.414317][ T5816] usb 5-1: config 0 descriptor?? [ 184.667891][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 184.697916][ T5879] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 184.818589][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 184.825794][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 184.834408][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 184.843157][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 184.852194][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.861881][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 184.867010][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.876933][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.890950][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 184.900374][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.908649][ T5879] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 184.916820][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.927585][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.938107][ T9] usb 4-1: config 0 descriptor?? [ 184.943212][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.953884][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.968213][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.977271][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.040788][ T5919] usb 1-1: USB disconnect, device number 27 [ 185.062653][ T29] audit: type=1400 audit(1775416720.653:567): avc: denied { shutdown } for pid=10688 comm="syz.1.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.174735][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 185.199408][ T5879] usb 3-1: GET_CAPABILITIES returned 0 [ 185.204911][ T5879] usbtmc 3-1:16.0: can't read capabilities [ 185.227663][ T5816] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 185.238777][ T5816] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 185.248464][ T5816] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 185.259604][ T5816] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 185.269979][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.280820][ T5816] usb 5-1: USB disconnect, device number 27 [ 185.349567][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.357963][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 185.377367][ T29] audit: type=1400 audit(1775416720.963:568): avc: denied { ioctl } for pid=10684 comm="syz.3.2044" path="/dev/usb/lp0" dev="devtmpfs" ino=3411 ioctlcmd=0x5b0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 185.378944][ T5919] usb 4-1: USB disconnect, device number 21 [ 185.414811][ T5919] usblp0: removed [ 185.425847][ T792] usb 3-1: USB disconnect, device number 30 [ 185.518823][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 185.527354][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.536722][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.547846][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.555397][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.564514][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.575480][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.583145][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.588678][T10693] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 185.593724][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.611475][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.620191][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.635343][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.646343][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.654694][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.663955][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.674873][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.682484][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.691514][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.702429][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.713507][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.722680][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.733698][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.741411][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.750665][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.763534][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.771931][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 185.781141][ T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 185.797075][ T10] usb 2-1: Product: syz [ 185.805420][ T10] usb 2-1: Manufacturer: syz [ 185.811300][ T10] usb 2-1: SerialNumber: syz [ 185.818046][T10699] syzkaller1: entered promiscuous mode [ 185.825175][T10699] syzkaller1: entered allmulticast mode [ 185.827710][ T10] usb 2-1: config 0 descriptor?? [ 185.859957][ T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 185.900520][ T29] audit: type=1400 audit(1775416721.493:569): avc: denied { create } for pid=10700 comm="syz.0.2052" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 186.022818][T10707] netlink: 'syz.4.2055': attribute type 2 has an invalid length. [ 186.163815][ T29] audit: type=1400 audit(1775416721.743:570): avc: denied { ioctl } for pid=10715 comm="syz.0.2057" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 186.215040][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 186.216816][ T10] usb 2-1: USB disconnect, device number 26 [ 186.218943][T10714] yurex 2-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 186.227064][ T10] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 186.308765][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.395907][ T29] audit: type=1400 audit(1775416721.983:571): avc: denied { ioctl } for pid=10726 comm="syz.4.2059" path="socket:[30549]" dev="sockfs" ino=30549 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 186.461737][ T29] audit: type=1400 audit(1775416722.013:572): avc: denied { write } for pid=10726 comm="syz.4.2059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 186.578117][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 186.607436][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 186.616509][ T5816] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 186.702630][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'. [ 186.712251][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2066'. [ 186.724435][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'. [ 186.734313][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2066'. [ 186.778567][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 186.785906][ T5816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.802950][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.814404][ T5816] usb 1-1: config 0 has no interfaces? [ 186.828533][ T5816] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 186.847969][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.856000][ T5816] usb 1-1: Product: syz [ 186.863805][ T5816] usb 1-1: Manufacturer: syz [ 186.870672][ T5816] usb 1-1: SerialNumber: syz [ 186.878400][ T5816] usb 1-1: config 0 descriptor?? [ 187.100470][T10758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2074'. [ 187.236519][ T29] audit: type=1400 audit(1775416722.823:573): avc: denied { accept } for pid=10760 comm="syz.1.2075" path="socket:[30699]" dev="sockfs" ino=30699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.334609][T10766] netlink: 'syz.1.2077': attribute type 39 has an invalid length. [ 187.348136][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.367709][ T792] usb 1-1: USB disconnect, device number 28 [ 187.472417][ T29] audit: type=1400 audit(1775416723.063:574): avc: denied { bind } for pid=10768 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.676213][T10781] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 187.772513][ T792] kernel write not supported for file /vcs (pid: 792 comm: kworker/1:2) [ 188.072574][ T354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.098048][T10802] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x91a6c [ 188.115091][T10802] memcg:ffff88802d4ab500 [ 188.120008][T10802] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 188.128544][T10802] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 188.137672][T10802] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff88802d4ab500 [ 188.146598][T10802] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 188.154040][T10809] capability: warning: `syz.0.2096' uses 32-bit capabilities (legacy support in use) [ 188.178415][T10802] page_owner tracks the page as allocated [ 188.185937][T10802] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 10802, tgid 10795 (syz.3.2090), ts 188098009825, free_ts 188097849672 [ 188.207373][ T29] audit: type=1400 audit(1775416723.803:575): avc: denied { read } for pid=5160 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 188.235908][ T29] audit: type=1400 audit(1775416723.803:576): avc: denied { search } for pid=5160 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.258828][ T5879] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 188.267870][ T5852] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 188.275526][T10802] post_alloc_hook+0x153/0x170 [ 188.280618][T10802] get_page_from_freelist+0x111d/0x3140 [ 188.286185][T10802] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 188.295595][T10802] alloc_pages_mpol+0x1fb/0x550 [ 188.300510][T10802] folio_alloc_noprof+0x22/0x330 [ 188.305476][T10802] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 188.311882][T10802] filemap_alloc_folio_noprof+0x5e/0x80 [ 188.317434][T10802] page_cache_ra_order+0x54b/0xf30 [ 188.322979][T10802] filemap_fault+0x191a/0x2eb0 [ 188.332508][T10802] __do_fault+0x10d/0x550 [ 188.336894][T10802] do_fault+0xabb/0x18e0 [ 188.341313][T10802] __handle_mm_fault+0x1815/0x2b60 [ 188.346469][T10802] handle_mm_fault+0x36d/0xa20 [ 188.355994][T10802] __get_user_pages+0xf9c/0x34d0 [ 188.363046][T10802] populate_vma_page_range+0x267/0x3f0 [ 188.369665][T10802] __mm_populate+0x107/0x3a0 [ 188.374629][T10802] page last free pid 10803 tgid 10803 stack trace: [ 188.381220][T10802] __free_frozen_pages+0x7e1/0x10d0 [ 188.386457][T10802] rcu_core+0x5a2/0x10d0 [ 188.391537][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.405079][T10822] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.417949][T10802] handle_softirqs+0x1eb/0x9e0 [ 188.423251][T10802] __irq_exit_rcu+0xef/0x150 [ 188.428750][T10802] irq_exit_rcu+0x9/0x30 [ 188.437840][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 188.437842][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 188.440697][ T5852] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 188.445062][ T5879] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 188.448165][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.461537][ T5879] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 188.467844][T10802] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 188.495945][ T5879] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 188.501431][ T5852] usb 5-1: Product: syz [ 188.504493][ T5879] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 188.508352][ T5852] usb 5-1: Manufacturer: syz [ 188.516602][ T5879] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 188.521390][T10802] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.530019][ T5879] usb 2-1: config 0 has no interface number 0 [ 188.542242][T10802] ------------[ cut here ]------------ [ 188.542277][ T5852] usb 5-1: SerialNumber: syz [ 188.547686][T10802] kernel BUG at mm/filemap.c:858! [ 188.547728][T10802] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 188.553602][ T5852] usb 5-1: config 0 descriptor?? [ 188.557273][T10802] CPU: 0 UID: 0 PID: 10802 Comm: syz.3.2090 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.579829][T10802] Tainted: [L]=SOFTLOCKUP [ 188.584137][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 188.594198][T10802] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 188.600207][T10802] Code: 2e c5 ff 48 c7 c6 e0 39 bd 8b 4c 89 ef e8 d9 3f 12 00 90 0f 0b e8 11 2e c5 ff 48 c7 c6 40 3a bd 8b 4c 89 ef e8 c2 3f 12 00 90 <0f> 0b e8 fa 2d c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 ec 2d c5 ff 90 [ 188.619818][T10802] RSP: 0018:ffffc900031173f8 EFLAGS: 00010246 [ 188.625887][T10802] RAX: 0000000000080000 RBX: 0000000000112c00 RCX: ffffc9000db71000 [ 188.633863][T10802] RDX: 0000000000080000 RSI: ffffffff82560f68 RDI: ffff8880207a84c4 [ 188.641836][T10802] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 188.649807][T10802] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 188.657775][T10802] R13: ffffea0002469b00 R14: 0000000000000000 R15: 1ffff92000622ea9 [ 188.665741][T10802] FS: 00007fcca3d096c0(0000) GS:ffff888124338000(0000) knlGS:0000000000000000 [ 188.674669][T10802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.681259][T10802] CR2: 000055555e964a28 CR3: 0000000054950000 CR4: 00000000003526f0 [ 188.689219][T10802] Call Trace: [ 188.692487][T10802] [ 188.695404][T10802] ? __pfx___filemap_add_folio+0x10/0x10 [ 188.701043][T10802] filemap_add_folio+0x1d8/0x690 [ 188.705980][T10802] ? __lock_acquire+0x4a5/0x2630 [ 188.710905][T10802] ? __pfx_filemap_add_folio+0x10/0x10 [ 188.712052][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.716371][T10802] ? css_rstat_updated+0x1ce/0x5a0 [ 188.716403][T10802] page_cache_ra_order+0x614/0xf30 [ 188.722741][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.727705][T10802] filemap_fault+0x191a/0x2eb0 [ 188.743753][T10802] ? __pfx_filemap_fault+0x10/0x10 [ 188.748860][T10802] ? __pfx_filemap_map_pages+0x10/0x10 [ 188.754315][T10802] __do_fault+0x10d/0x550 [ 188.758647][T10802] do_fault+0xabb/0x18e0 [ 188.762879][T10802] __handle_mm_fault+0x1815/0x2b60 [ 188.767989][T10802] ? mt_find+0x45e/0x8e0 [ 188.772231][T10802] ? __pfx___handle_mm_fault+0x10/0x10 [ 188.777695][T10802] ? __pfx_mt_find+0x10/0x10 [ 188.782284][T10802] handle_mm_fault+0x36d/0xa20 [ 188.787037][T10802] __get_user_pages+0xf9c/0x34d0 [ 188.791966][T10802] ? __pfx___get_user_pages+0x10/0x10 [ 188.797339][T10802] populate_vma_page_range+0x267/0x3f0 [ 188.802779][T10802] ? __pfx_populate_vma_page_range+0x10/0x10 [ 188.808745][T10802] ? __pfx_find_vma_intersection+0x10/0x10 [ 188.814545][T10802] ? do_mmap+0x93f/0x12f0 [ 188.818869][T10802] __mm_populate+0x107/0x3a0 [ 188.823443][T10802] ? __pfx___mm_populate+0x10/0x10 [ 188.828538][T10802] ? up_write+0x290/0x4f0 [ 188.832878][T10802] vm_mmap_pgoff+0x37f/0x470 [ 188.837451][T10802] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 188.842544][T10802] ? __fget_files+0x215/0x3d0 [ 188.847212][T10802] ? __fget_files+0x21f/0x3d0 [ 188.851870][T10802] ksys_mmap_pgoff+0x3c8/0x650 [ 188.856611][T10802] ? kcov_ioctl+0x16a/0x720 [ 188.861090][T10802] ? kfree+0x2ec/0x6b0 [ 188.865135][T10802] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 188.870398][T10802] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 188.876205][T10802] __x64_sys_mmap+0x125/0x190 [ 188.880876][T10802] do_syscall_64+0x106/0xf80 [ 188.885453][T10802] ? clear_bhb_loop+0x40/0x90 [ 188.890121][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.896006][T10802] RIP: 0033:0x7fcca2d9c819 [ 188.900399][T10802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.919989][T10802] RSP: 002b:00007fcca3d09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 188.928396][T10802] RAX: ffffffffffffffda RBX: 00007fcca3016090 RCX: 00007fcca2d9c819 [ 188.936358][T10802] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 188.944319][T10802] RBP: 00007fcca2e32c91 R08: 0000000000000004 R09: 000000002c93a000 [ 188.952271][T10802] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 188.960231][T10802] R13: 00007fcca3016128 R14: 00007fcca3016090 R15: 00007ffe57dea7c8 [ 188.968196][T10802] [ 188.971195][T10802] Modules linked in: [ 188.973397][ T5852] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 188.979502][T10802] ---[ end trace 0000000000000000 ]--- [ 188.990206][ T5879] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 188.995010][T10802] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 189.001398][ T5879] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 189.011397][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.017520][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.026785][T10802] Code: 2e c5 ff 48 c7 c6 e0 39 bd 8b 4c 89 ef e8 d9 3f 12 00 90 0f 0b e8 11 2e c5 ff 48 c7 c6 40 3a bd 8b 4c 89 ef e8 c2 3f 12 00 90 <0f> 0b e8 fa 2d c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 ec 2d c5 ff 90 [ 189.054082][ T5879] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 189.054115][ T5879] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.054136][ T5879] usb 2-1: config 0 interface 125 has no altsetting 0 [ 189.054149][ T5879] usb 2-1: config 0 interface 125 has no altsetting 2 [ 189.078381][ T5879] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 189.103806][T10802] RSP: 0018:ffffc900031173f8 EFLAGS: 00010246 [ 189.105977][ T5852] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 189.110018][T10802] RAX: 0000000000080000 RBX: 0000000000112c00 RCX: ffffc9000db71000 [ 189.118655][ T5852] usb 5-1: media controller created [ 189.126069][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.135788][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.139285][T10802] RDX: 0000000000080000 RSI: ffffffff82560f68 RDI: ffff8880207a84c4 [ 189.155763][ T5879] usb 2-1: Product: syz [ 189.174981][ T5879] usb 2-1: Manufacturer: syz [ 189.179685][T10802] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 189.188251][ T5879] usb 2-1: SerialNumber: syz [ 189.193305][T10802] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 189.201724][T10802] R13: ffffea0002469b00 R14: 0000000000000000 R15: 1ffff92000622ea9 [ 189.211444][ T5879] usb 2-1: config 0 descriptor?? [ 189.216465][T10802] FS: 00007fcca3d096c0(0000) GS:ffff888124338000(0000) knlGS:0000000000000000 [ 189.225787][T10802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.233328][ T5879] usb 2-1: selecting invalid altsetting 2 [ 189.238091][T10802] CR2: 00007f6ebb3e92f8 CR3: 0000000054950000 CR4: 00000000003526f0 [ 189.247102][T10802] Kernel panic - not syncing: Fatal exception [ 189.253433][T10802] Kernel Offset: disabled [ 189.257736][T10802] Rebooting in 86400 seconds..