last executing test programs: 5m24.109035045s ago: executing program 2 (id=1120): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 5m24.02269973s ago: executing program 2 (id=1123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) 5m23.870238775s ago: executing program 2 (id=1126): semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) unshare(0x20040400) semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0x1, 0x1000}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x100]) 5m23.815505532s ago: executing program 2 (id=1128): r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) 5m23.773147806s ago: executing program 2 (id=1130): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 5m23.719263172s ago: executing program 2 (id=1131): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpid() bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="09000000010001", 0x7) 5m8.230764547s ago: executing program 32 (id=1131): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpid() bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="09000000010001", 0x7) 3m5.435043519s ago: executing program 3 (id=3714): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}, 0x1}) 3m5.286212228s ago: executing program 3 (id=3717): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1, 0x13580, 0x0, 0x1ff}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0xe, 0x0, @fd=r1, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r1, 0x55, 0x84a23, 0xf, 0x0, 0x0) 3m5.115442922s ago: executing program 3 (id=3720): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x1, r2}, 0x14) 3m4.947128736s ago: executing program 3 (id=3722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x4, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) 3m4.634666531s ago: executing program 3 (id=3725): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') 3m4.508806533s ago: executing program 3 (id=3728): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e30, @loopback}, 0x2, 0x0, 0x1}}, 0x2e) 2m49.347896879s ago: executing program 33 (id=3728): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e30, @loopback}, 0x2, 0x0, 0x1}}, 0x2e) 2m37.404183161s ago: executing program 4 (id=4113): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffff8d"}) 2m37.364904262s ago: executing program 4 (id=4114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2m37.301263992s ago: executing program 4 (id=4115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.27321685s ago: executing program 4 (id=4116): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m37.241051084s ago: executing program 4 (id=4117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)={@val={0x800e, 0x6002}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x1c, 0x3c, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @rand_addr=0x64010101}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x6, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4e24, 0x4e22, 0x3, 0x3, 0x0, 0x0, 0x1}}}}}}}, 0x4e) 2m36.782519495s ago: executing program 4 (id=4128): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = dup(r0) read$FUSE(r2, 0x0, 0x18) 2m36.613711361s ago: executing program 34 (id=4128): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = dup(r0) read$FUSE(r2, 0x0, 0x18) 4.948576591s ago: executing program 7 (id=6411): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="40060100000034"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.768845399s ago: executing program 1 (id=6437): openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) r0 = socket(0xa, 0x3, 0xff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x2000000, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 3.671761138s ago: executing program 1 (id=6440): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.108662196s ago: executing program 6 (id=6447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x3c}}, 0x0) 2.032958405s ago: executing program 6 (id=6449): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.954906658s ago: executing program 6 (id=6450): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *'], 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040)=0x4, 0x4) 1.828733528s ago: executing program 7 (id=6452): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) 1.756338564s ago: executing program 6 (id=6454): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3e73, 0x0, 0x200000, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7], [0x0, 0x1ba, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x800, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 1.580670558s ago: executing program 6 (id=6456): r0 = eventfd(0x401) r1 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f00000010c0)=""/109, 0x6d}], 0x1) 1.480123915s ago: executing program 5 (id=6457): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f00000005c0)='F', 0x1, 0x20000800, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) 1.388876935s ago: executing program 0 (id=6458): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 1.320027822s ago: executing program 6 (id=6459): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.254273482s ago: executing program 0 (id=6460): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x808b9027}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@random="158962126af4", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @private0, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x40}}}}}}, 0x0) 1.214191789s ago: executing program 1 (id=6461): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) 995.217463ms ago: executing program 5 (id=6462): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @local}], 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x24000844) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380), &(0x7f00000000c0)=0x8) 994.553295ms ago: executing program 1 (id=6463): r0 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r0, 0x80079a0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r0, r0, 0x0, 0x200001) 940.240838ms ago: executing program 0 (id=6464): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) 736.230684ms ago: executing program 5 (id=6465): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000340)=0xe) writev(r2, &(0x7f000009de80)=[{&(0x7f0000002a80)='\x00\x00', 0x2}, {0x0}], 0x2) 677.475219ms ago: executing program 0 (id=6466): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 524.812328ms ago: executing program 5 (id=6467): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x0, 0x0, 0x0}) 474.941213ms ago: executing program 7 (id=6468): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x80b, 0x0, 0x0, 0x82, 0x4, 0x15c6, 0x5886, 0x101, 0x447ee642794ab667, 0x7, 'syz1\x00'}) 409.565503ms ago: executing program 0 (id=6469): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1", 0x55}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000540)=""/96, 0x60}], 0x2}, 0x0) 380.197543ms ago: executing program 5 (id=6470): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x1f}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x4, 0x4000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0x2000}) 276.045127ms ago: executing program 7 (id=6471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 248.588876ms ago: executing program 1 (id=6472): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0xb, 0x1, 0x4f3, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 157.609256ms ago: executing program 7 (id=6473): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom(r1, 0x0, 0x0, 0x10163, 0x0, 0x0) 156.886299ms ago: executing program 0 (id=6474): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x8, 0x8) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 75.642086ms ago: executing program 1 (id=6475): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000100a80cc97bcf8e9c36000000000000434a4bb8a6916468be14aec83e3b400115ed60e3e9d0d91ce663ef1ec7bf9afbd78a4de0c76a8a9a023a2a5669936d9cf54fdb225afe484ea654868ce1245bde14c1b2a46bea14c4accdcf7ea9"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) mmap(&(0x7f0000463000/0x3000)=nil, 0x3000, 0x2000007, 0x38011, r1, 0x3000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 31.311844ms ago: executing program 5 (id=6476): pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x19383fb31bd4d798}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 0s ago: executing program 7 (id=6477): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x5000000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T9] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 376.052244][ T5908] usb 6-1: USB disconnect, device number 51 [ 376.133789][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.150602][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.160888][ T9] usb 7-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 376.169948][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.180148][ T9] usb 7-1: config 0 descriptor?? [ 376.505188][T16698] usb 1-1: string descriptor 0 read error: -22 [ 376.608522][ T9] samsung 0003:0419:0001.0055: item 0 2 0 8 parsing failed [ 376.618406][ T9] samsung 0003:0419:0001.0055: parse failed [ 376.627677][ T9] samsung 0003:0419:0001.0055: probe with driver samsung failed with error -22 [ 376.805798][ T9] usb 7-1: USB disconnect, device number 21 [ 376.908714][T16698] uclogic 0003:256C:006D.0054: failed retrieving string descriptor #100: -71 [ 376.917782][T16698] uclogic 0003:256C:006D.0054: failed retrieving pen parameters: -71 [ 376.926089][T16698] uclogic 0003:256C:006D.0054: failed probing pen v1 parameters: -71 [ 376.934294][T16698] uclogic 0003:256C:006D.0054: failed probing parameters: -71 [ 376.941877][T16698] uclogic 0003:256C:006D.0054: probe with driver uclogic failed with error -71 [ 376.954194][T16698] usb 1-1: USB disconnect, device number 76 [ 377.110705][T16697] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 377.270524][T16697] usb 6-1: Using ep0 maxpacket: 32 [ 377.276864][T16697] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.284987][T16697] usb 6-1: config 0 has no interface number 0 [ 377.293114][T16697] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 377.302242][T16697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.310284][T16697] usb 6-1: Product: syz [ 377.314532][T16697] usb 6-1: Manufacturer: syz [ 377.319126][T16697] usb 6-1: SerialNumber: syz [ 377.327103][T16697] usb 6-1: config 0 descriptor?? [ 377.335008][T16697] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 377.343960][T16697] usb 6-1: selecting invalid altsetting 1 [ 377.349777][T16697] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 377.359013][T16697] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 377.370001][T16697] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 377.378747][T16697] usb 6-1: media controller created [ 377.399132][T16697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.524791][T20443] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.532380][T20443] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.589866][T16697] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 377.618772][T16697] zl10353_read_register: readreg error (reg=127, ret==-32) [ 377.702763][T20443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.717393][T20443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.870558][T16701] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 377.899495][ T4515] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.923845][ T4515] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.959368][ T4515] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.977660][ T4515] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.031349][T16701] usb 2-1: Using ep0 maxpacket: 16 [ 378.038680][T16701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 378.057017][T16701] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.072146][T16701] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 378.082980][T16701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.097632][T16701] usb 2-1: config 0 descriptor?? [ 378.160243][T20471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.174748][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.297935][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 378.297951][ T30] audit: type=1400 audit(1754632695.986:1379): avc: denied { create } for pid=20479 comm="syz.6.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 378.330047][T20454] program syz.1.5285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.343669][ T30] audit: type=1400 audit(1754632696.006:1380): avc: denied { write } for pid=20479 comm="syz.6.5295" path="socket:[72173]" dev="sockfs" ino=72173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 378.368287][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.386322][T16701] usbhid 2-1:0.0: can't add hid device: -71 [ 378.392849][T16701] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 378.419522][T16701] usb 2-1: USB disconnect, device number 79 [ 378.650659][ T5955] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 378.658649][T20437] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 378.676537][T16697] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 378.721102][T16697] usb 6-1: USB disconnect, device number 52 [ 378.843918][ T5955] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 378.853257][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.864652][ T5955] usb 1-1: config 0 descriptor?? [ 379.076689][ T5955] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 379.132898][T20520] syzkaller1: entered promiscuous mode [ 379.138380][T20520] syzkaller1: entered allmulticast mode [ 379.180737][T16697] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 379.332178][T16697] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.353729][T16697] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 379.373969][T16697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.390240][T16697] usb 7-1: config 0 descriptor?? [ 379.813496][T16697] keytouch 0003:0926:3333.0056: fixing up Keytouch IEC report descriptor [ 379.824654][T16697] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0056/input/input107 [ 379.861239][T20450] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 379.882874][ T5955] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 379.895086][ T5955] asix 1-1:0.0: probe with driver asix failed with error -71 [ 379.910254][T16697] keytouch 0003:0926:3333.0056: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 379.924209][ T5955] usb 1-1: USB disconnect, device number 77 [ 380.010550][T20450] usb 6-1: Using ep0 maxpacket: 32 [ 380.017181][T20450] usb 6-1: config 254 has an invalid interface number: 160 but max is 0 [ 380.026241][T20450] usb 6-1: config 254 has no interface number 0 [ 380.032624][T20450] usb 6-1: config 254 interface 160 has no altsetting 0 [ 380.039229][T20509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.041613][T20450] usb 6-1: New USB device found, idVendor=24df, idProduct=d062, bcdDevice=c0.3f [ 380.051373][T20509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.057248][T20450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.073065][T20450] usb 6-1: Product: syz [ 380.077298][T20450] usb 6-1: Manufacturer: syz [ 380.088107][T20450] usb 6-1: SerialNumber: syz [ 380.267071][T20539] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 380.276229][ T30] audit: type=1326 audit(1754632697.976:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20530 comm="syz.1.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab8ebe9 code=0x7fc00000 [ 380.415523][T20544] pim6reg1: entered promiscuous mode [ 380.421248][T20544] pim6reg1: entered allmulticast mode [ 380.450090][ T5955] usb 7-1: USB disconnect, device number 22 [ 380.513089][T20450] usb 6-1: bad CDC descriptors [ 380.544189][T20450] usb 6-1: USB disconnect, device number 53 [ 380.568283][ T30] audit: type=1400 audit(1754632698.256:1382): avc: denied { connect } for pid=20549 comm="syz.1.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.490577][T20450] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 381.645133][T20450] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 381.656852][T20450] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 381.668051][T20450] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 381.679695][T20450] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 381.688833][T20450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.696868][T20450] usb 6-1: Product: syz [ 381.701063][T20450] usb 6-1: Manufacturer: syz [ 381.705660][T20450] usb 6-1: SerialNumber: syz [ 381.712040][T20450] usb 6-1: config 0 descriptor?? [ 381.719077][T20450] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 382.012140][T16702] usb 6-1: USB disconnect, device number 54 [ 382.259239][ T30] audit: type=1400 audit(1754632699.946:1383): avc: denied { validate_trans } for pid=20617 comm="syz.6.5354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 382.735120][ T30] audit: type=1326 audit(1754632700.426:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 382.775178][ T30] audit: type=1326 audit(1754632700.426:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 382.886542][ T30] audit: type=1326 audit(1754632700.426:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 382.948320][ T30] audit: type=1326 audit(1754632700.426:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 382.986527][ T30] audit: type=1326 audit(1754632700.426:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 383.042893][T20658] syzkaller1: entered promiscuous mode [ 383.058673][T20658] syzkaller1: entered allmulticast mode [ 383.140851][T16702] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 383.304403][T16702] usb 2-1: Using ep0 maxpacket: 32 [ 383.311307][T16702] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 383.323475][T16702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.362462][T16702] usb 2-1: config 0 descriptor?? [ 383.398704][T16702] gspca_main: sunplus-2.14.0 probing 041e:400b [ 383.786704][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5389'. [ 383.846139][T20695] bond0: (slave bond_slave_1): Releasing backup interface [ 383.855375][T20695] bond_slave_1 (unregistering): left promiscuous mode [ 383.891055][T16697] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 384.061260][T16697] usb 6-1: config index 0 descriptor too short (expected 69, got 36) [ 384.078246][T16697] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.097307][T16697] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 384.111295][T16697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.119475][T16697] usb 6-1: Product: syz [ 384.136529][T16697] usb 6-1: Manufacturer: syz [ 384.153415][T16697] usb 6-1: SerialNumber: syz [ 384.163065][T16697] usb 6-1: config 0 descriptor?? [ 384.178828][T16697] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 384.350532][T20450] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 384.409913][T16702] gspca_sunplus: reg_w_riv err -71 [ 384.417760][T16702] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 384.431748][T16702] usb 2-1: USB disconnect, device number 80 [ 384.511688][T20450] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 384.524436][T20450] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.547008][T20450] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.558791][T20450] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.569326][T20450] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.578798][T20450] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.589953][T20450] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.597765][T20450] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.607004][T20450] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.618071][T20450] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.625830][T20450] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.635354][T20450] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.646469][T20450] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.656375][T20450] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.667918][T20450] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.679672][T20450] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.687501][T20450] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.696549][T20450] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.707587][T20450] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.715618][T20450] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.724674][T20450] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.735862][T20450] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.747207][T20450] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.756206][T20450] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.767408][T20450] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.777014][T20450] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 384.786237][T20450] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 384.794672][T20450] usb 1-1: Product: syz [ 384.798960][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 384.798974][ T30] audit: type=1326 audit(1754632702.486:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20719 comm="syz.6.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 384.828823][T20450] usb 1-1: Manufacturer: syz [ 384.833570][T20450] usb 1-1: SerialNumber: syz [ 384.839052][ T30] audit: type=1326 audit(1754632702.486:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20719 comm="syz.6.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 384.853675][T20450] usb 1-1: config 0 descriptor?? [ 384.862541][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.873688][ T30] audit: type=1326 audit(1754632702.486:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20719 comm="syz.6.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 384.897143][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.912151][T20450] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 384.922442][ T30] audit: type=1326 audit(1754632702.496:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20719 comm="syz.6.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 384.945928][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.953217][ T30] audit: type=1326 audit(1754632702.496:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20719 comm="syz.6.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 384.978423][ T30] audit: type=1326 audit(1754632702.526:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20719 comm="syz.6.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 385.025223][T16697] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input109 [ 385.035255][ T30] audit: type=1326 audit(1754632702.526:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20719 comm="syz.6.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 385.065086][ T30] audit: type=1326 audit(1754632702.566:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20719 comm="syz.6.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 385.093149][ T30] audit: type=1326 audit(1754632702.566:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20719 comm="syz.6.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 385.116614][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.140371][T16697] usb 1-1: USB disconnect, device number 78 [ 385.148556][ T30] audit: type=1326 audit(1754632702.566:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20719 comm="syz.6.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2d8ebe9 code=0x7ffc0000 [ 385.173537][T16697] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 385.275254][T20457] usb 6-1: USB disconnect, device number 55 [ 385.380508][T20450] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 385.532120][T20450] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.548628][T20450] usb 7-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 385.583665][T20450] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.595736][T20450] usb 7-1: config 0 descriptor?? [ 385.875622][T20756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5417'. [ 385.884757][T20756] netlink: 'syz.5.5417': attribute type 7 has an invalid length. [ 385.896106][T20756] netlink: 'syz.5.5417': attribute type 8 has an invalid length. [ 385.903985][T20756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5417'. [ 386.023901][T20450] thrustmaster 0003:044F:B300.0057: global environment stack underflow [ 386.040093][T20450] thrustmaster 0003:044F:B300.0057: item 0 4 1 11 parsing failed [ 386.061363][T20450] thrustmaster 0003:044F:B300.0057: parse failed [ 386.080631][T20450] thrustmaster 0003:044F:B300.0057: probe with driver thrustmaster failed with error -22 [ 386.218229][T20450] kernel read not supported for file /dsp (pid: 20450 comm: kworker/0:13) [ 386.235680][T16697] usb 7-1: USB disconnect, device number 23 [ 386.570855][T16697] kernel read not supported for file /dsp1 (pid: 16697 comm: kworker/1:11) [ 387.060988][T20450] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 387.221603][T20450] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.232626][T20450] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.242762][T20450] usb 7-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 387.251949][T20450] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.261886][T20450] usb 7-1: config 0 descriptor?? [ 387.391054][T16697] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 387.550637][T16697] usb 2-1: Using ep0 maxpacket: 32 [ 387.567260][T16697] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 387.578394][T16697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.589548][T16697] usb 2-1: config 0 descriptor?? [ 387.600138][T16697] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 387.617544][T20825] syzkaller1: entered promiscuous mode [ 387.623271][T20825] syzkaller1: entered allmulticast mode [ 387.885669][T20450] hid-led 0003:1D34:0004.0058: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.6-1/input0 [ 387.920001][T20450] hid-led 0003:1D34:0004.0058: Dream Cheeky Webmail Notifier initialized [ 388.110219][ T5955] usb 7-1: USB disconnect, device number 24 [ 388.117515][T20842] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5454'. [ 388.132359][T20842] IPVS: Unknown mcast interface: ipvlan1 [ 388.289256][T20853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.608852][T16697] gspca_nw80x: reg_w err -71 [ 388.620545][T16697] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 388.646271][T16697] usb 2-1: USB disconnect, device number 81 [ 388.755428][T20884] Bluetooth: hci4: Frame reassembly failed (-84) [ 388.765254][T15966] Bluetooth: hci4: Frame reassembly failed (-84) [ 388.860648][T20450] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 388.976535][T20896] vivid-001: disconnect [ 388.983964][T20895] vivid-001: reconnect [ 389.021605][T20450] usb 1-1: Using ep0 maxpacket: 16 [ 389.029971][T20450] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 389.039832][T20450] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.052328][T20450] usb 1-1: Product: syz [ 389.056490][T20450] usb 1-1: Manufacturer: syz [ 389.061335][T20450] usb 1-1: SerialNumber: syz [ 389.067147][T20450] usb 1-1: config 0 descriptor?? [ 389.090573][T16697] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 389.242365][T16697] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 389.260705][T16697] usb 7-1: config 0 interface 0 has no altsetting 0 [ 389.272080][T16697] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 389.287772][T16697] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 389.294855][T20450] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 389.305726][T16697] usb 7-1: Product: syz [ 389.314563][T20450] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 389.314624][T16697] usb 7-1: Manufacturer: syz [ 389.329202][T20450] usb 1-1: USB disconnect, device number 79 [ 389.337964][T16697] usb 7-1: SerialNumber: syz [ 389.356917][T16697] usb 7-1: config 0 descriptor?? [ 389.368991][T16697] usb 7-1: selecting invalid altsetting 0 [ 389.554691][T20916] syz.1.5489 (20916) used greatest stack depth: 19752 bytes left [ 389.584237][T16697] usb 7-1: USB disconnect, device number 25 [ 389.665017][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5494'. [ 389.925986][T20940] geneve2: entered promiscuous mode [ 389.934886][T20940] geneve2: entered allmulticast mode [ 389.992529][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 389.992545][ T30] audit: type=1400 audit(1754632707.686:1410): avc: denied { read } for pid=20941 comm="syz.0.5502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 390.072545][T20946] Bluetooth: MGMT ver 1.23 [ 390.128885][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5506'. [ 390.306469][T20962] sp0: Synchronizing with TNC [ 390.400837][T16697] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 390.491012][T20450] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 390.550528][T16697] usb 2-1: Using ep0 maxpacket: 8 [ 390.557316][T16697] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 390.565608][T16697] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.575697][T16697] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 390.585494][T16697] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 390.595450][T16697] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.608451][T16697] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 390.617533][T16697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.640695][T16705] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 390.651971][T20450] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 390.661066][T20450] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.669048][T20450] usb 1-1: Product: syz [ 390.673506][T20450] usb 1-1: Manufacturer: syz [ 390.678104][T20450] usb 1-1: SerialNumber: syz [ 390.687507][T20450] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 390.708653][T20457] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 390.790701][T16705] usb 6-1: Using ep0 maxpacket: 16 [ 390.797442][T16705] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 390.805918][T16705] usb 6-1: config 1 has no interface number 0 [ 390.812212][ T5168] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 390.819988][T16705] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 390.830063][T16705] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 390.840184][T16705] usb 6-1: config 1 interface 105 has no altsetting 0 [ 390.845121][T16697] usb 2-1: usb_control_msg returned -32 [ 390.856459][T16697] usbtmc 2-1:16.0: can't read capabilities [ 390.866902][T16705] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 390.876352][T16705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.885208][T16705] usb 6-1: Product: syz [ 390.894331][T16705] usb 6-1: Manufacturer: syz [ 390.899027][T16705] usb 6-1: SerialNumber: syz [ 390.909456][T20967] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 390.926317][T20967] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 390.954861][T20971] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5515'. [ 391.011898][T20973] tun0: tun_chr_ioctl cmd 1074025675 [ 391.017224][T20973] tun0: persist enabled [ 391.023393][T20973] tun0: tun_chr_ioctl cmd 1074025675 [ 391.028750][T20973] tun0: persist disabled [ 391.367387][T20967] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 391.375411][T20967] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 391.384683][T20982] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 391.573838][T20451] usb 1-1: USB disconnect, device number 80 [ 391.942519][T20999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.993440][T16705] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 392.008199][T16705] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 392.027683][T16705] aqc111 6-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fe:ed:00:1c:40:07 [ 392.042728][T16705] usb 6-1: USB disconnect, device number 56 [ 392.050131][T16705] aqc111 6-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 392.112221][T16705] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 392.139037][T16705] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 392.153988][T16705] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 392.170746][T20457] usb 1-1: Service connection timeout for: 257 [ 392.178074][T20457] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 392.189751][T20457] ath9k_htc: Failed to initialize the device [ 392.199199][T20451] usb 1-1: ath9k_htc: USB layer deinitialized [ 392.240538][T20450] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 392.421008][T20450] usb 7-1: Using ep0 maxpacket: 32 [ 392.429180][T20450] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.443826][T20450] usb 7-1: config 0 has no interfaces? [ 392.449425][T20450] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 392.460791][T20450] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.471317][T20450] usb 7-1: config 0 descriptor?? [ 392.656155][T21020] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.5536'. [ 392.931179][ T30] audit: type=1326 audit(1754632710.626:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.5.5542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff553b8ebe9 code=0x0 [ 393.141825][ T30] audit: type=1400 audit(1754632710.836:1412): avc: denied { shutdown } for pid=21045 comm="syz.7.5547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 393.189415][T20450] usb 2-1: USB disconnect, device number 82 [ 393.190031][T21048] binder: 21047:21048 ioctl c0306201 200000000080 returned -14 [ 393.365113][T21060] syzkaller1: entered promiscuous mode [ 393.371347][T21060] syzkaller1: entered allmulticast mode [ 393.446393][T21065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5556'. [ 393.529633][T16697] kernel read not supported for file /dsp (pid: 16697 comm: kworker/1:11) [ 393.740660][T16702] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 393.780066][T21082] dvmrp0: entered allmulticast mode [ 393.917001][T16702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 393.927185][T16702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.937752][T16702] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 393.952788][T16702] usb 2-1: config 1 interface 1 has no altsetting 0 [ 393.963197][T16702] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.972928][T16702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.981047][T16702] usb 2-1: Product: syz [ 393.985288][T16702] usb 2-1: Manufacturer: syz [ 393.989878][T16702] usb 2-1: SerialNumber: syz [ 394.080707][T16697] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 394.206622][T16702] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 394.217066][T16702] usb 2-1: found format II with max.bitrate = 2418, frame size=7 [ 394.225010][T16702] usb 2-1: 2:1: All rates were zero [ 394.242706][T16702] usb 2-1: USB disconnect, device number 83 [ 394.249599][T16697] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 394.262394][T16697] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 394.274978][T16697] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 394.288332][T16697] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 394.302345][T16697] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 394.311750][T16697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.535625][T16697] ath6kl: Failed to submit usb control message: -71 [ 394.542391][T16697] ath6kl: unable to send the bmi data to the device: -71 [ 394.549437][T16697] ath6kl: Unable to send get target info: -71 [ 394.557631][T16697] ath6kl: Failed to init ath6kl core: -71 [ 394.564828][T16697] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 394.577601][T16697] usb 1-1: USB disconnect, device number 81 [ 395.024200][T16697] usb 7-1: USB disconnect, device number 26 [ 395.071597][ T30] audit: type=1400 audit(1754632712.766:1413): avc: denied { ioctl } for pid=21111 comm="syz.6.5577" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 395.519454][T21143] netlink: 'syz.6.5590': attribute type 17 has an invalid length. [ 395.584874][T21148] syzkaller1: entered promiscuous mode [ 395.590662][T21148] syzkaller1: entered allmulticast mode [ 395.598760][T21148] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 395.680528][T20457] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 395.694852][T16697] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 395.854939][T20457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.866043][T20457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.875787][T16697] usb 6-1: Using ep0 maxpacket: 16 [ 395.881582][T16697] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 395.881607][T16697] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.881625][T16697] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.883352][T16697] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.891532][T20457] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 395.909127][T16697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.913987][T20457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.928622][T16697] usb 6-1: Product: syz [ 395.949091][T16697] usb 6-1: Manufacturer: syz [ 395.953937][T16697] usb 6-1: SerialNumber: syz [ 395.970158][T20457] usb 2-1: config 0 descriptor?? [ 396.060063][ T30] audit: type=1400 audit(1754632713.746:1414): avc: denied { listen } for pid=21160 comm="syz.0.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 396.081226][ T30] audit: type=1400 audit(1754632713.746:1415): avc: denied { accept } for pid=21160 comm="syz.0.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 396.368311][T21176] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 396.386076][T16697] usb 6-1: 0:2 : does not exist [ 396.430844][T20457] cm6533_jd 0003:0D8C:0022.0059: unknown main item tag 0x0 [ 396.438668][T20457] cm6533_jd 0003:0D8C:0022.0059: unknown main item tag 0x0 [ 396.482963][T20457] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0059/input/input110 [ 396.508670][T20457] cm6533_jd 0003:0D8C:0022.0059: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 396.641179][ T5955] usb 2-1: USB disconnect, device number 84 [ 396.660984][T16702] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 396.724069][ T30] audit: type=1400 audit(1754632714.416:1416): avc: denied { mounton } for pid=21189 comm="syz.6.5610" path="/proc/774/cgroup" dev="nsfs" ino=4026532864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 396.842607][T16702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.853692][T16702] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 396.862878][T16702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.881283][T16702] usb 1-1: config 0 descriptor?? [ 397.000714][T16697] usb 6-1: USB disconnect, device number 57 [ 397.150530][ T5955] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 397.296138][T16702] keytouch 0003:0926:3333.005A: fixing up Keytouch IEC report descriptor [ 397.305088][ T5955] usb 7-1: Using ep0 maxpacket: 16 [ 397.314213][T16702] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.005A/input/input111 [ 397.328510][ T5955] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 397.337625][ T5955] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.347959][ T5955] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.364809][ T5955] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.374057][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.385140][ T5955] usb 7-1: Product: syz [ 397.389387][ T5955] usb 7-1: Manufacturer: syz [ 397.397015][ T5955] usb 7-1: SerialNumber: syz [ 397.405039][T16702] keytouch 0003:0926:3333.005A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 397.513464][T21178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.522233][T21178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.827579][ T5955] usb 7-1: 0:2 : does not exist [ 397.830559][T20450] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 397.866361][T20457] usb 1-1: USB disconnect, device number 82 [ 397.991988][T20450] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 398.000176][T20450] usb 6-1: config 0 has no interface number 0 [ 398.006645][T20450] usb 6-1: config 0 interface 98 has no altsetting 0 [ 398.016158][T20450] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 398.025385][T20450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.033520][T20450] usb 6-1: Product: syz [ 398.041831][T20450] usb 6-1: Manufacturer: syz [ 398.046653][T20450] usb 6-1: SerialNumber: syz [ 398.052971][T20450] usb 6-1: config 0 descriptor?? [ 398.265566][T20450] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 398.458742][ T5955] usb 7-1: USB disconnect, device number 27 [ 398.484671][T21227] binder: 21226:21227 ioctl 4018620d 0 returned -22 [ 398.635824][T21230] input: syz1 as /devices/virtual/input/input112 [ 398.911595][T20450] usb 6-1: reset high-speed USB device number 58 using dummy_hcd [ 399.540565][ T5955] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 399.723486][ T5955] usb 7-1: Using ep0 maxpacket: 16 [ 399.730295][ T5955] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.746256][ T5955] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.776598][ T5955] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 399.801056][ T5955] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 399.823245][ T5955] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 399.837484][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 399.871337][ T5955] usb 7-1: SerialNumber: syz [ 399.896630][ T5955] hub 7-1:1.0: bad descriptor, ignoring hub [ 399.902676][ T5955] hub 7-1:1.0: probe with driver hub failed with error -5 [ 399.906104][T20450] usb 6-1: failed to restore interface 98 altsetting 4 (error=-71) [ 399.914711][ T5955] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 399.952184][T21264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.961143][T20450] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 399.968864][T20450] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 399.977082][T20451] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 399.997309][T20451] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 400.019708][T20450] usb 6-1: USB disconnect, device number 58 [ 400.250544][ T5955] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 400.287713][T21281] input: syz1 as /devices/virtual/input/input113 [ 400.433694][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 400.440163][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.451283][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.461103][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 400.473959][ T5955] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 400.483050][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.494353][ T5955] usb 2-1: config 0 descriptor?? [ 400.670658][T20450] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 400.848079][T20450] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.858379][T20450] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.873149][T20450] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 400.887187][T20450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 400.895243][T20450] usb 1-1: SerialNumber: syz [ 400.920691][T20450] usb 1-1: 0:2 : does not exist [ 400.926349][ T5955] shield 0003:0955:7214.005B: unknown main item tag 0x0 [ 400.946018][ T5955] shield 0003:0955:7214.005B: item fetching failed at offset 1/5 [ 400.954794][ T5955] shield 0003:0955:7214.005B: Parse failed [ 400.961544][ T5955] shield 0003:0955:7214.005B: probe with driver shield failed with error -22 [ 401.125912][ T5955] usb 2-1: USB disconnect, device number 85 [ 401.176671][T21309] netlink: 'syz.5.5662': attribute type 21 has an invalid length. [ 401.287792][T21317] overlayfs: conflicting lowerdir path [ 401.298764][T21317] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 401.357184][T20450] usb 1-1: USB disconnect, device number 83 [ 401.417435][T21323] kvm: user requested TSC rate below hardware speed [ 402.009343][T21353] netlink: 'syz.5.5682': attribute type 1 has an invalid length. [ 402.019858][T21353] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5682'. [ 402.028820][T21355] Invalid ELF header len 8 [ 402.032535][ T30] audit: type=1400 audit(1754632719.716:1417): avc: denied { module_load } for pid=21354 comm="syz.1.5684" path="/1144/bus" dev="tmpfs" ino=5846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 402.060493][T21353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5682'. [ 402.075738][ T30] audit: type=1400 audit(1754632719.766:1418): avc: denied { accept } for pid=21356 comm="syz.1.5685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 402.186035][ T30] audit: type=1400 audit(1754632719.866:1419): avc: denied { connect } for pid=21360 comm="syz.6.5687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 402.232422][ T5955] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 402.240810][T20450] usb 7-1: USB disconnect, device number 28 [ 402.398042][ T5955] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 402.427717][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.458761][ T5955] usb 1-1: Product: syz [ 402.473492][ T5955] usb 1-1: Manufacturer: syz [ 402.492366][ T5955] usb 1-1: SerialNumber: syz [ 402.507283][ T5955] usb 1-1: config 0 descriptor?? [ 402.728304][ T30] audit: type=1326 audit(1754632720.416:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21379 comm="syz.5.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff553b8ebe9 code=0x7ffc0000 [ 402.757780][ T30] audit: type=1326 audit(1754632720.416:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21379 comm="syz.5.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff553b8ebe9 code=0x7ffc0000 [ 402.781250][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.789884][ T30] audit: type=1326 audit(1754632720.416:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21379 comm="syz.5.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff553b8ebe9 code=0x7ffc0000 [ 402.813275][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.819895][T16702] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 402.825905][ T30] audit: type=1326 audit(1754632720.416:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21379 comm="syz.5.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff553b8ebe9 code=0x7ffc0000 [ 402.855000][ T30] audit: type=1326 audit(1754632720.416:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21379 comm="syz.5.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ff553b8ebe9 code=0x7ffc0000 [ 402.878546][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.895460][ T30] audit: type=1326 audit(1754632720.416:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21379 comm="syz.5.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff553b8ebe9 code=0x7ffc0000 [ 403.004054][T16702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 403.021607][T16702] usb 2-1: not running at top speed; connect to a high speed hub [ 403.031257][T16702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.042505][T16702] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 403.057061][T16702] usb 2-1: config 1 has no interface number 1 [ 403.064197][T16702] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 403.078019][T16702] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 403.091844][T16702] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.101228][T16702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.109268][T16702] usb 2-1: Product: syz [ 403.114341][T16702] usb 2-1: Manufacturer: syz [ 403.118928][T16702] usb 2-1: SerialNumber: syz [ 403.330540][T20450] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 403.339614][T16702] hub 2-1:1.0: Invalid hub with more than one config or interface [ 403.347598][T16702] hub 2-1:1.0: probe with driver hub failed with error -22 [ 403.363332][T16702] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 403.401212][T16702] usb 2-1: USB disconnect, device number 86 [ 403.481285][T20450] usb 6-1: Using ep0 maxpacket: 8 [ 403.488401][T20450] usb 6-1: config 0 has no interfaces? [ 403.496961][T20450] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 403.506098][T20450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.518082][T20450] usb 6-1: config 0 descriptor?? [ 403.539429][ T5955] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 403.550641][ T5955] asix 1-1:0.0: probe with driver asix failed with error -71 [ 403.561050][ T5955] usb 1-1: USB disconnect, device number 84 [ 403.565935][T21400] binder: 21399:21400 ioctl c0306201 0 returned -14 [ 403.578062][T21400] binder: 21399:21400 ioctl c0306201 200000000540 returned -11 [ 403.728991][T20450] usb 6-1: USB disconnect, device number 59 [ 404.305192][ T5955] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 404.480633][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 404.491855][ T5955] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 404.501946][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.509966][ T5955] usb 2-1: Product: syz [ 404.526385][ T5955] usb 2-1: Manufacturer: syz [ 404.544911][ T5955] usb 2-1: SerialNumber: syz [ 404.559832][ T5955] usb 2-1: config 0 descriptor?? [ 404.676768][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5731'. [ 404.714200][ T30] audit: type=1326 audit(1754632722.386:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.6.5710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f2d8ebe9 code=0x7fc00000 [ 405.001749][ T5955] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 405.017639][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 405.028203][ T5955] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 405.052498][ T5955] usb 2-1: media controller created [ 405.071332][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.208033][T21462] netlink: 'syz.0.5733': attribute type 4 has an invalid length. [ 405.643253][T21425] dtv5100: wlen = 0, aborting. [ 405.650026][ T5955] zl10353_read_register: readreg error (reg=127, ret==0) [ 405.674521][ T5955] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 405.690678][ T5955] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 405.713822][ T5955] usb 2-1: USB disconnect, device number 87 [ 405.753646][ T5955] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 406.350508][ T5955] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 406.512011][ T5955] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 406.543505][ T5955] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 406.561956][T21541] netlink: 'syz.7.5767': attribute type 1 has an invalid length. [ 406.569912][ T5955] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 406.570090][T21541] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5767'. [ 406.604156][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.610349][T21541] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5767'. [ 406.637407][T21524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 406.651499][ T5955] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.744707][T21545] netlink: 'syz.0.5769': attribute type 2 has an invalid length. [ 406.773407][T21545] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.5769'. [ 406.886588][T16697] usb 6-1: USB disconnect, device number 60 [ 407.060659][ T5168] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 407.067504][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 407.172507][T21562] loop2: detected capacity change from 0 to 7 [ 407.187282][T21562] Dev loop2: unable to read RDB block 7 [ 407.193082][T21562] loop2: unable to read partition table [ 407.200394][T21562] loop2: partition table beyond EOD, truncated [ 407.206905][T21562] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 407.808886][T21584] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5786'. [ 408.147107][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5792'. [ 408.280105][T21599] pim6reg: entered allmulticast mode [ 408.328920][T21599] pim6reg: left allmulticast mode [ 409.369113][T21642] vivid-003: disconnect [ 409.385319][T21636] vivid-003: reconnect [ 409.393946][T21643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5813'. [ 409.435134][T21643] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 409.690661][T16697] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 409.796503][T21665] syzkaller1: entered promiscuous mode [ 409.805851][T21665] syzkaller1: entered allmulticast mode [ 409.861641][T16697] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 409.873902][T16697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.900475][T16697] usb 7-1: Product: syz [ 409.904771][T16697] usb 7-1: Manufacturer: syz [ 409.909390][T16697] usb 7-1: SerialNumber: syz [ 409.934652][T16697] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 409.949431][T16702] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 409.978809][T21673] ptrace attach of "./syz-executor exec"[5844] was attempted by ""[21673] [ 410.092861][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 410.092878][ T30] audit: type=1400 audit(1754632727.776:1428): avc: denied { mounton } for pid=21678 comm="syz.5.5830" path="/syzcgroup/net/syz5/cgroup.procs" dev="cgroup" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 410.145907][T16697] kernel read not supported for file /input/event1 (pid: 16697 comm: kworker/1:11) [ 410.651347][T21707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5843'. [ 410.808043][T16697] usb 7-1: USB disconnect, device number 29 [ 411.250787][T16705] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 411.331228][ T5955] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 411.391392][T21747] netlink: 'syz.6.5862': attribute type 10 has an invalid length. [ 411.400730][T16705] usb 1-1: Using ep0 maxpacket: 32 [ 411.411292][T16705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 411.427111][T16705] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 411.440199][T16705] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 411.449484][T16705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.459611][T16705] usb 1-1: Product: syz [ 411.465044][T16705] usb 1-1: Manufacturer: syz [ 411.468853][T16702] usb 7-1: Service connection timeout for: 257 [ 411.469746][T16705] usb 1-1: SerialNumber: syz [ 411.478485][T16702] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 411.496877][T16702] ath9k_htc: Failed to initialize the device [ 411.503700][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 411.520742][T16697] usb 7-1: ath9k_htc: USB layer deinitialized [ 411.533270][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.549023][ T5955] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 411.558490][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.571677][ T5955] usb 2-1: config 0 descriptor?? [ 411.656857][T21755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5866'. [ 411.710631][T16705] usb 1-1: Limiting number of CPorts to U8_MAX [ 411.725759][T16705] usb 1-1: Not enough endpoints found in device, aborting! [ 411.929486][T16705] usb 1-1: USB disconnect, device number 85 [ 411.994955][ T5955] mcp2221 0003:04D8:00DD.005C: unknown main item tag 0x0 [ 412.010629][ T5955] mcp2221 0003:04D8:00DD.005C: unknown main item tag 0x0 [ 412.017720][ T5955] mcp2221 0003:04D8:00DD.005C: unknown main item tag 0x0 [ 412.031400][ T5955] mcp2221 0003:04D8:00DD.005C: unknown main item tag 0x0 [ 412.041631][ T5955] mcp2221 0003:04D8:00DD.005C: unknown main item tag 0x0 [ 412.054179][ T5955] mcp2221 0003:04D8:00DD.005C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 412.216080][ C1] usb 2-1: input irq status -75 received [ 412.417873][T20450] usb 2-1: USB disconnect, device number 88 [ 412.430995][ T5955] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 412.490646][T16702] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 412.582031][ T5955] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.592709][ T5955] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 412.601765][ T5955] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 412.610951][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.620290][ T5955] usb 7-1: config 0 descriptor?? [ 412.627523][ T5955] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 412.634394][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 412.641629][ T5955] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 412.650388][ T5955] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 412.657692][ T5955] usb 7-1: media controller created [ 412.663967][T16702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.675428][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.684321][T16702] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 412.694432][T16702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.702816][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 412.708595][ T5955] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 412.718224][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input114 [ 412.730981][T16702] usb 6-1: config 0 descriptor?? [ 412.743534][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 412.750761][ T5955] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 412.920654][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 412.926484][ T5955] dvb-usb: error while querying for an remote control event. [ 412.936646][ T5955] usb 7-1: USB disconnect, device number 30 [ 412.964534][ T5955] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 413.158706][T16702] keytouch 0003:0926:3333.005D: fixing up Keytouch IEC report descriptor [ 413.172624][T16702] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.005D/input/input115 [ 413.251065][T16702] keytouch 0003:0926:3333.005D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 413.530590][T20450] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 413.591858][T16705] usb 6-1: USB disconnect, device number 61 [ 413.692071][T20450] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 413.701369][T20450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.711289][T20450] usb 2-1: config 0 descriptor?? [ 413.826860][ T30] audit: type=1326 audit(1754632731.516:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21822 comm="syz.0.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 413.888458][ T30] audit: type=1326 audit(1754632731.516:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21822 comm="syz.0.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 413.911948][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.927951][ T30] audit: type=1326 audit(1754632731.546:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21822 comm="syz.0.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 413.954891][ T30] audit: type=1326 audit(1754632731.546:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21822 comm="syz.0.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 413.978346][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.979484][T20450] kaweth 2-1:0.0: Firmware present in device. [ 413.994644][ T30] audit: type=1326 audit(1754632731.546:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21822 comm="syz.0.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 414.026485][ T30] audit: type=1326 audit(1754632731.546:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21822 comm="syz.0.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 414.054873][ T30] audit: type=1326 audit(1754632731.546:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21822 comm="syz.0.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 414.078342][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.087617][ T30] audit: type=1326 audit(1754632731.546:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21822 comm="syz.0.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 414.111085][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.122700][ T30] audit: type=1326 audit(1754632731.546:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21822 comm="syz.0.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 414.145993][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.146781][T20450] kaweth 2-1:0.0: Statistics collection: 0 [ 414.158245][T20450] kaweth 2-1:0.0: Multicast filter limit: 0 [ 414.176209][T20450] kaweth 2-1:0.0: MTU: 0 [ 414.180552][T20450] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 414.562900][T20450] kaweth 2-1:0.0: Error setting SOFS wait [ 414.572522][T20450] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 414.608687][T20450] usb 2-1: USB disconnect, device number 89 [ 414.830523][ T5955] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 415.020576][ T5955] usb 6-1: Using ep0 maxpacket: 16 [ 415.028974][ T5955] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 415.038185][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.046432][ T5955] usb 6-1: Product: syz [ 415.050703][ T5955] usb 6-1: Manufacturer: syz [ 415.055291][ T5955] usb 6-1: SerialNumber: syz [ 415.061360][ T5955] usb 6-1: config 0 descriptor?? [ 415.477624][ T5955] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 415.493068][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 415.504859][ T5955] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 415.514397][ T5955] usb 6-1: media controller created [ 415.528227][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 415.759052][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 415.759066][ T30] audit: type=1400 audit(1754632733.446:1443): avc: denied { bind } for pid=21877 comm="syz.6.5922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 416.072505][T21838] dtv5100: wlen = 0, aborting. [ 416.077374][ T5955] zl10353_read_register: readreg error (reg=127, ret==0) [ 416.100800][ T5955] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 416.108761][ T5955] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 416.127223][ T5955] usb 6-1: USB disconnect, device number 62 [ 416.163926][ T5955] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 416.317056][T21882] netlink: 'syz.7.5923': attribute type 4 has an invalid length. [ 416.637060][T21912] sock: sock_set_timeout: `syz.0.5937' (pid 21912) tries to set negative timeout [ 416.883068][ T30] audit: type=1400 audit(1754632734.586:1444): avc: denied { watch watch_reads } for pid=21931 comm="syz.7.5947" path="/355/file0" dev="hugetlbfs" ino=79450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 416.992004][ T5955] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 417.153435][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.165038][ T5955] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 417.174120][T20450] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 417.202802][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.214814][ T5955] usb 1-1: config 0 descriptor?? [ 417.321945][T20450] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 417.330243][T20450] usb 6-1: config 0 has no interface number 0 [ 417.336531][T20450] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 417.349441][T20450] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 417.358576][T20450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.366621][T20450] usb 6-1: Product: syz [ 417.371311][T20450] usb 6-1: Manufacturer: syz [ 417.375907][T20450] usb 6-1: SerialNumber: syz [ 417.383577][T20450] usb 6-1: config 0 descriptor?? [ 417.392157][T20450] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 417.628423][T21920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.637365][T21920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.649266][ T5955] keytouch 0003:0926:3333.005E: fixing up Keytouch IEC report descriptor [ 417.665582][ T5955] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.005E/input/input116 [ 417.764781][ T5955] keytouch 0003:0926:3333.005E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 417.809848][T20450] usb 6-1: USB disconnect, device number 63 [ 417.820263][T20450] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 418.066022][T21961] input: syz1 as /devices/virtual/input/input117 [ 418.213730][ T5955] usb 1-1: USB disconnect, device number 86 [ 418.457045][T21980] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 418.466810][T21980] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 418.491239][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 418.492311][ T5168] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 418.658400][T21988] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 418.835659][T21998] netlink: 'syz.0.5977': attribute type 5 has an invalid length. [ 418.846067][T21998] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.5977'. [ 418.905097][T22000] syzkaller1: entered promiscuous mode [ 418.905117][T22000] syzkaller1: entered allmulticast mode [ 419.104158][T20450] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 419.270527][T20450] usb 6-1: Using ep0 maxpacket: 32 [ 419.280167][T20450] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 419.280194][T20450] usb 6-1: config 0 has no interface number 0 [ 419.280219][T20450] usb 6-1: config 0 interface 184 has no altsetting 0 [ 419.284462][T20450] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 419.284489][T20450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.284509][T20450] usb 6-1: Product: syz [ 419.284523][T20450] usb 6-1: Manufacturer: syz [ 419.284538][T20450] usb 6-1: SerialNumber: syz [ 419.286761][T20450] usb 6-1: config 0 descriptor?? [ 419.288726][T20450] smsc75xx v1.0.0 [ 419.288741][T20450] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 419.288921][T20450] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 419.450933][ T5955] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 419.508311][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5989'. [ 419.543819][T22025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.612749][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.623739][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.633764][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.647137][ T5955] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.656418][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.669064][ T5955] usb 1-1: config 0 descriptor?? [ 419.698875][T21991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.711706][T21991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.721474][T16702] usb 6-1: USB disconnect, device number 64 [ 420.082424][ T5955] plantronics 0003:047F:FFFF.005F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 420.279717][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5994'. [ 420.342253][T20450] usb 1-1: USB disconnect, device number 87 [ 420.459603][ T30] audit: type=1400 audit(1754632738.146:1445): avc: denied { shutdown } for pid=22045 comm="syz.6.5999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 420.487617][ T30] audit: type=1400 audit(1754632738.166:1446): avc: denied { bind } for pid=22047 comm="syz.5.6001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 420.800328][ T30] audit: type=1400 audit(1754632738.486:1447): avc: denied { setattr } for pid=22064 comm="syz.6.6007" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=79831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 421.090549][ T5955] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 421.151109][T22084] netlink: 'syz.1.6016': attribute type 2 has an invalid length. [ 421.260545][ T5955] usb 7-1: Using ep0 maxpacket: 8 [ 421.267304][ T5955] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 421.275973][ T5955] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 421.286412][ T5955] usb 7-1: config 0 has no interface number 0 [ 421.292985][ T5955] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 421.305065][ T5955] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 421.316344][ T5955] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 421.328966][ T5955] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 421.338244][ T5955] usb 7-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 421.346518][ T5955] usb 7-1: Product: syz [ 421.350896][ T5955] usb 7-1: Manufacturer: syz [ 421.357560][ T5955] usb 7-1: config 0 descriptor?? [ 421.364095][T22067] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 421.420243][T22093] netlink: 'syz.5.6020': attribute type 10 has an invalid length. [ 421.600855][ T5955] usb 7-1: USB disconnect, device number 31 [ 421.742765][T22104] SELinux: failed to load policy [ 422.110689][ T5955] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 422.261591][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 422.275626][ T5955] usb 2-1: config 0 interface 0 has no altsetting 0 [ 422.284947][ T5955] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 422.295000][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.315385][ T5955] usb 2-1: Product: syz [ 422.330582][ T5955] usb 2-1: Manufacturer: syz [ 422.343985][ T5955] usb 2-1: SerialNumber: syz [ 422.364226][ T5955] usb 2-1: config 0 descriptor?? [ 422.522488][ T30] audit: type=1400 audit(1754632740.216:1448): avc: denied { name_connect } for pid=22127 comm="syz.0.6034" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 422.606320][T20450] kernel write not supported for file bpf-prog (pid: 20450 comm: kworker/0:13) [ 422.801593][ T5955] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 422.813647][ T30] audit: type=1400 audit(1754632740.506:1449): avc: denied { getopt } for pid=22135 comm="syz.0.6038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 423.230604][T16702] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 423.402323][T16702] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 423.413820][T16702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.415835][T20457] usb 2-1: USB disconnect, device number 90 [ 423.424952][T16702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.424979][T16702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 423.425837][T16702] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 423.464555][T16702] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 423.472766][T16702] usb 1-1: Manufacturer: syz [ 423.479419][T16702] usb 1-1: config 0 descriptor?? [ 423.897467][T16702] appleir 0003:05AC:8243.0060: item fetching failed at offset 0/1 [ 423.905910][T16702] appleir 0003:05AC:8243.0060: parse failed [ 423.912169][T16702] appleir 0003:05AC:8243.0060: probe with driver appleir failed with error -22 [ 424.118298][T20457] usb 1-1: USB disconnect, device number 88 [ 425.160983][T16702] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 425.322049][T16702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 425.336423][T16702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 425.349488][T16702] usb 1-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 425.361535][T16702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.374826][T16702] usb 1-1: config 0 descriptor?? [ 425.380743][T22186] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 425.420748][T16697] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 425.582136][T16697] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 425.600545][T16697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.614987][T16697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.625004][T16697] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 425.643043][T16697] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 425.654002][T16697] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 425.662545][T16697] usb 2-1: Manufacturer: syz [ 425.668485][T16697] usb 2-1: config 0 descriptor?? [ 425.815071][T16702] apple 0003:05AC:0264.0061: unbalanced collection at end of report description [ 425.841090][T16702] apple 0003:05AC:0264.0061: parse failed [ 425.850982][T16702] apple 0003:05AC:0264.0061: probe with driver apple failed with error -22 [ 426.055757][T20457] usb 1-1: USB disconnect, device number 89 [ 426.076369][T22204] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6066'. [ 426.086715][T22204] netlink: 'syz.6.6066': attribute type 7 has an invalid length. [ 426.093024][T16697] appleir 0003:05AC:8243.0062: unknown main item tag 0x0 [ 426.105293][T22204] netlink: 'syz.6.6066': attribute type 8 has an invalid length. [ 426.115961][T22204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6066'. [ 426.128487][T16697] appleir 0003:05AC:8243.0062: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 426.530634][T20457] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 426.580507][T16697] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 426.584045][T22212] input: syz1 as /devices/virtual/input/input119 [ 426.680643][T20457] usb 7-1: Using ep0 maxpacket: 16 [ 426.687182][T20457] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 426.696082][T20457] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.716491][T20457] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.739206][T20457] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.740528][T16697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.750731][T20457] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.787844][T20457] usb 7-1: Product: syz [ 426.788132][T16697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.799992][T20457] usb 7-1: Manufacturer: syz [ 426.809916][T16697] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.819225][T20457] usb 7-1: SerialNumber: syz [ 426.826943][T16697] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 426.856533][T16697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.882686][T16697] usb 6-1: config 0 descriptor?? [ 427.171776][T22233] SELinux: failed to load policy [ 427.260015][T20457] usb 7-1: 0:2 : does not exist [ 427.303068][T16697] hid-udraw 0003:20D6:CB17.0063: unknown main item tag 0x0 [ 427.325987][T16697] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0063/input/input120 [ 427.367499][T16697] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0063/input/input121 [ 427.392771][T16697] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0063/input/input122 [ 427.412739][T16697] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0063/input/input123 [ 427.498921][T22210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.508160][T22210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.517291][T16697] hid-udraw 0003:20D6:CB17.0063: hidraw1: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.5-1/input0 [ 427.521055][ T30] audit: type=1400 audit(1754632745.216:1450): avc: denied { write } for pid=22209 comm="syz.5.6069" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 427.607719][T16697] usb 6-1: USB disconnect, device number 65 [ 427.640543][T16705] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 427.792262][T16705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.803464][T16705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.813667][T16705] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 427.822856][T16705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.833231][T16705] usb 1-1: config 0 descriptor?? [ 427.864732][ T30] audit: type=1400 audit(1754632745.556:1451): avc: denied { watch watch_reads } for pid=22258 comm="syz.7.6090" path="/375/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 428.154551][T20457] usb 7-1: USB disconnect, device number 32 [ 428.214039][ T5955] usb 2-1: USB disconnect, device number 91 [ 428.247482][T16705] cm6533_jd 0003:0D8C:0022.0064: unknown main item tag 0x0 [ 428.267380][T16705] cm6533_jd 0003:0D8C:0022.0064: unknown main item tag 0x0 [ 428.289939][T16705] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0064/input/input124 [ 428.338554][T16705] cm6533_jd 0003:0D8C:0022.0064: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 428.449731][T20457] usb 1-1: USB disconnect, device number 90 [ 429.030680][T20457] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 429.104228][T22311] SELinux: failed to load policy [ 429.190544][T20457] usb 2-1: Using ep0 maxpacket: 8 [ 429.197161][T20457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 429.212736][T20457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.224144][T20457] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 429.235669][T20457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 429.247338][T20457] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 429.258212][T20457] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 429.267311][T20457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.276622][T20457] usb 2-1: config 0 descriptor?? [ 429.282722][T22302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 429.710855][ T5168] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 429.711123][T16702] usb 2-1: USB disconnect, device number 92 [ 429.976914][T22331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6121'. [ 430.290718][T16702] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 430.309110][T22353] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 430.380694][ T5955] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 430.449357][T22364] Bluetooth: MGMT ver 1.23 [ 430.458728][T16702] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 430.473964][T16702] usb 1-1: config 0 has no interface number 0 [ 430.483643][T16702] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 430.496107][T22362] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 430.510619][T16702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.518666][T16702] usb 1-1: Product: syz [ 430.519309][T22362] overlayfs: overlapping lowerdir path [ 430.524311][T16702] usb 1-1: Manufacturer: syz [ 430.536118][T16702] usb 1-1: SerialNumber: syz [ 430.540805][ T5955] usb 7-1: Using ep0 maxpacket: 32 [ 430.547457][ T5955] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 430.562797][T16702] usb 1-1: config 0 descriptor?? [ 430.574738][ T5955] usb 7-1: config 0 has no interface number 0 [ 430.595035][T16702] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 430.605504][ T5955] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 430.617519][T16702] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 430.629498][ T5955] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 430.640483][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.648515][ T5955] usb 7-1: Product: syz [ 430.653634][ T5955] usb 7-1: Manufacturer: syz [ 430.658362][ T5955] usb 7-1: SerialNumber: syz [ 430.669165][ T5955] usb 7-1: config 0 descriptor?? [ 430.679329][T22371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6138'. [ 430.689127][ T5955] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 430.698940][ T5955] em28xx 7-1:0.132: Video interface 132 found: [ 430.816755][T20450] usb 1-1: USB disconnect, device number 91 [ 431.088302][ T5955] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 431.157059][ T30] audit: type=1326 audit(1754632748.846:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22389 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff553b8ebe9 code=0x7fc00000 [ 431.180539][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.342274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 431.699345][ T5955] em28xx 7-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 431.710325][ T5955] em28xx 7-1:0.132: failed to read eeprom (err=-5) [ 431.716967][ T5955] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 431.780534][ T5955] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 431.794630][ T5955] em28xx 7-1:0.132: analog set to bulk mode. [ 431.805078][T16702] em28xx 7-1:0.132: Registering V4L2 extension [ 431.819222][ T30] audit: type=1326 audit(1754632749.516:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22389 comm="syz.5.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff553b2add9 code=0x7fc00000 [ 431.842663][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.853872][ T5955] usb 7-1: USB disconnect, device number 33 [ 431.861013][ T5955] em28xx 7-1:0.132: Disconnecting em28xx [ 432.005332][T16702] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 432.012850][T16702] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 432.021401][T16702] em28xx 7-1:0.132: No AC97 audio processor [ 432.031109][T16702] usb 7-1: Decoder not found [ 432.035761][T16702] em28xx 7-1:0.132: failed to create media graph [ 432.045053][T16702] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 432.056545][T16702] em28xx 7-1:0.132: Remote control support is not available for this card. [ 432.066483][ T5955] em28xx 7-1:0.132: Closing input extension [ 432.099474][ T5955] em28xx 7-1:0.132: Freeing device [ 432.179463][T22436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6163'. [ 432.210988][T22436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.259021][T22436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.279871][T22436] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 432.291836][T22436] bond2: (slave vcan1): Error -95 calling set_mac_address [ 432.343682][T22443] veth0: entered promiscuous mode [ 432.349905][T22443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6165'. [ 432.402137][T22443] veth0 (unregistering): left promiscuous mode [ 432.483412][ T30] audit: type=1400 audit(1754632750.166:1454): avc: denied { listen } for pid=22447 comm="syz.5.6168" path=2F3932362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 432.653939][ T30] audit: type=1800 audit(1754632750.346:1455): pid=22461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.6173" name="nullb0" dev="devtmpfs" ino=3629 res=0 errno=0 [ 432.676116][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.740803][T22465] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6176'. [ 433.000614][T16702] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 433.136042][T22478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6182'. [ 433.162168][T16702] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.175216][T16702] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.197219][T16702] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.214717][T16702] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.224058][T16702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.232150][ T5955] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 433.265856][T16702] usb 7-1: config 0 descriptor?? [ 433.402322][ T5955] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 433.411920][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.425478][ T5955] usb 1-1: config 0 descriptor?? [ 433.441524][ T5955] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 433.476255][ T30] audit: type=1400 audit(1754632751.166:1456): avc: denied { ioctl } for pid=22466 comm="syz.6.6177" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 433.510213][ T30] audit: type=1400 audit(1754632751.206:1457): avc: denied { read write } for pid=11602 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.546320][ T30] audit: type=1400 audit(1754632751.206:1458): avc: denied { open } for pid=11602 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.573381][ T30] audit: type=1400 audit(1754632751.206:1459): avc: denied { ioctl } for pid=11602 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.599028][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.608849][ T30] audit: type=1400 audit(1754632751.206:1460): avc: denied { read write } for pid=22492 comm="syz.5.6189" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 433.634424][ T30] audit: type=1400 audit(1754632751.206:1461): avc: denied { open } for pid=22492 comm="syz.5.6189" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 433.657568][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.667384][ T30] audit: type=1400 audit(1754632751.206:1462): avc: denied { ioctl } for pid=22492 comm="syz.5.6189" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 433.686092][T16702] plantronics 0003:047F:FFFF.0065: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 433.704354][ T30] audit: type=1400 audit(1754632751.236:1463): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.160 dest=35810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 433.704402][ T30] audit: type=1400 audit(1754632751.366:1464): avc: denied { read write } for pid=5841 comm="syz-executor" name="loop1" dev="devtmpfs" ino=3751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 433.729612][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.739231][ T5955] gp8psk: usb in 128 operation failed. [ 433.956003][T20450] usb 7-1: USB disconnect, device number 34 [ 433.974883][ T5955] gp8psk: usb in 146 operation failed. [ 433.988969][ T5955] gp8psk: failed to get FW version [ 434.012154][ T5955] gp8psk: FPGA Version = 51 [ 434.070536][T16702] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 434.212987][ T5955] gp8psk: usb in 138 operation failed. [ 434.219293][ T5955] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 434.229852][T16702] usb 6-1: Using ep0 maxpacket: 32 [ 434.240621][ T5955] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 434.255589][T16702] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 434.265064][T16702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.276653][ T5955] usb 1-1: USB disconnect, device number 92 [ 434.285292][T16702] usb 6-1: config 0 descriptor?? [ 434.296286][T16702] gspca_main: sq930x-2.14.0 probing 041e:403c [ 434.604404][T22532] loop2: detected capacity change from 0 to 7 [ 434.613843][T22532] Dev loop2: unable to read RDB block 7 [ 434.619440][T22532] loop2: unable to read partition table [ 434.625438][T22532] loop2: partition table beyond EOD, truncated [ 434.632079][T22532] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 434.712580][T22536] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6209'. [ 434.892293][T22544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.980881][T22551] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 435.099774][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6218'. [ 435.136972][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6218'. [ 435.146765][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.164368][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.185072][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.213854][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.316932][T22562] overlayfs: upper fs does not support file handles, falling back to index=off. [ 435.552889][T16702] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 435.558827][T16702] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 435.591729][T16702] usb 6-1: USB disconnect, device number 66 [ 436.157632][T22595] No control pipe specified [ 436.172167][T22595] overlayfs: missing 'lowerdir' [ 436.771893][ T5955] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 436.953874][ T5955] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 436.991536][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.026912][ T5955] usb 2-1: config 0 descriptor?? [ 437.063602][ T5955] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 437.272397][ T5955] gp8psk: usb in 128 operation failed. [ 437.502680][ T5955] gp8psk: usb in 146 operation failed. [ 437.508353][ T5955] gp8psk: failed to get FW version [ 437.523599][T22620] loop8: detected capacity change from 0 to 79 [ 437.534203][ T5955] gp8psk: usb in 149 operation failed. [ 437.550845][ T5955] gp8psk: failed to get FPGA version [ 437.610516][T22620] loop8: detected capacity change from 79 to 78 [ 437.645562][T16697] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 437.712586][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 437.712602][ T30] audit: type=1400 audit(1754632755.406:1537): avc: denied { read write } for pid=22629 comm="syz.6.6250" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 437.742965][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.774644][ T5955] gp8psk: usb out operation failed. [ 437.780270][ T5955] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 437.792197][T22635] binder: 22634:22635 ioctl c0306201 2000000001c0 returned -14 [ 437.795540][ T30] audit: type=1400 audit(1754632755.436:1538): avc: denied { open } for pid=22629 comm="syz.6.6250" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 437.823909][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.831769][ T5955] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 437.843910][ T5955] usb 2-1: USB disconnect, device number 93 [ 437.865076][T16697] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 437.887859][T16697] usb 6-1: config 0 has no interface number 0 [ 437.894169][ T30] audit: type=1400 audit(1754632755.436:1539): avc: denied { ioctl } for pid=22629 comm="syz.6.6250" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 437.919832][T16697] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 437.919876][T16697] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 437.919896][T16697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.921832][T16697] usb 6-1: config 0 descriptor?? [ 438.004271][T16697] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input126 [ 438.073100][ T30] audit: type=1400 audit(1754632755.496:1540): avc: denied { ioctl } for pid=22634 comm="syz.0.6252" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 438.158355][ T30] audit: type=1400 audit(1754632755.646:1541): avc: denied { read } for pid=22639 comm="syz.0.6253" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 438.240310][ T30] audit: type=1400 audit(1754632755.646:1542): avc: denied { open } for pid=22639 comm="syz.0.6253" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 438.301482][ T30] audit: type=1400 audit(1754632755.756:1543): avc: denied { read } for pid=5203 comm="acpid" name="mouse1" dev="devtmpfs" ino=4268 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 438.342345][ T30] audit: type=1400 audit(1754632755.756:1544): avc: denied { open } for pid=5203 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4268 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 438.366270][ T30] audit: type=1400 audit(1754632755.756:1545): avc: denied { ioctl } for pid=5203 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4268 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 438.477469][ T30] audit: type=1400 audit(1754632756.166:1546): avc: denied { read } for pid=22651 comm="syz.1.6259" dev="nsfs" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 438.779560][T20457] usb 6-1: USB disconnect, device number 67 [ 439.113605][T22675] netlink: 'syz.6.6267': attribute type 13 has an invalid length. [ 439.352710][T20450] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 439.435381][T22683] syzkaller0 speed is unknown, defaulting to 1000 [ 439.447083][T22683] syzkaller0 speed is unknown, defaulting to 1000 [ 439.464818][T22683] syzkaller0 speed is unknown, defaulting to 1000 [ 439.522082][T20450] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.532620][T20450] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.549530][T20450] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.561973][T20450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.569976][T20450] usb 1-1: SerialNumber: syz [ 439.615681][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.654943][T16697] syzkaller0 speed is unknown, defaulting to 1000 [ 439.667978][T22683] infiniband syz2: set down [ 439.673190][T22683] infiniband syz2: added syzkaller0 [ 439.729797][T22683] RDS/IB: syz2: added [ 439.735101][T22683] smc: adding ib device syz2 with port count 1 [ 439.741559][T22683] smc: ib device syz2 port 1 has pnetid [ 439.751416][T16705] syzkaller0 speed is unknown, defaulting to 1000 [ 439.759024][T22683] syzkaller0 speed is unknown, defaulting to 1000 [ 439.801730][T20450] usb 1-1: 0:2 : does not exist [ 439.807820][T20450] usb 1-1: unit 1 not found! [ 439.827827][T20450] usb 1-1: USB disconnect, device number 93 [ 439.947553][T22683] syzkaller0 speed is unknown, defaulting to 1000 [ 440.139225][T22683] syzkaller0 speed is unknown, defaulting to 1000 [ 440.295956][T22683] syzkaller0 speed is unknown, defaulting to 1000 [ 440.350586][T16705] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 440.512409][T16705] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 440.517794][T22683] syzkaller0 speed is unknown, defaulting to 1000 [ 440.531720][T16705] usb 7-1: config 0 has no interface number 0 [ 440.547967][T16705] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 440.564885][T16705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.580511][T16705] usb 7-1: Product: syz [ 440.585126][T16705] usb 7-1: Manufacturer: syz [ 440.589976][T16705] usb 7-1: SerialNumber: syz [ 440.600012][T16705] usb 7-1: config 0 descriptor?? [ 440.605316][T22715] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.6282'. [ 440.714311][T22683] syzkaller0 speed is unknown, defaulting to 1000 [ 440.717650][T22719] bond0: (slave bond1): Error -95 calling ndo_bpf [ 441.022264][T16705] usb 7-1: Firmware: major: 230, minor: 61, hardware type: UNKNOWN (237) [ 441.103431][T22729] netlink: 'syz.5.6288': attribute type 12 has an invalid length. [ 441.120259][T22729] netlink: 'syz.5.6288': attribute type 29 has an invalid length. [ 441.139710][T22729] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6288'. [ 441.163958][T22729] netlink: 'syz.5.6288': attribute type 2 has an invalid length. [ 441.175720][T22729] netlink: 23 bytes leftover after parsing attributes in process `syz.5.6288'. [ 441.191531][T22736] netlink: 'syz.5.6288': attribute type 12 has an invalid length. [ 441.223625][T22736] netlink: 'syz.5.6288': attribute type 29 has an invalid length. [ 441.232867][T16705] usb 7-1: Read permanent extended address 00:00:00:00:00:00:00:02 from device [ 441.241672][T22736] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6288'. [ 441.254221][T22736] netlink: 'syz.5.6288': attribute type 2 has an invalid length. [ 441.257424][T16705] usb 7-1: atusb_probe: initialization failed, error = -524 [ 441.264669][T22736] netlink: 23 bytes leftover after parsing attributes in process `syz.5.6288'. [ 441.282189][T16705] atusb 7-1:0.128: probe with driver atusb failed with error -524 [ 441.289948][T22739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6292'. [ 441.301320][T22739] netlink: 'syz.1.6292': attribute type 1 has an invalid length. [ 441.441842][T16705] usb 7-1: USB disconnect, device number 35 [ 441.930593][T16705] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 442.111144][T16705] usb 6-1: Using ep0 maxpacket: 32 [ 442.118215][T16705] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.136828][T16705] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 442.150302][T16705] usb 6-1: config 0 interface 0 has no altsetting 0 [ 442.160372][T16705] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 442.169986][T16705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.186989][T16705] usb 6-1: config 0 descriptor?? [ 442.240709][T20450] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 442.390743][T20450] usb 2-1: Using ep0 maxpacket: 16 [ 442.405004][T20450] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.423594][T20450] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.436114][T20450] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.448028][T20450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.456637][T20450] usb 2-1: Product: syz [ 442.461260][T20450] usb 2-1: Manufacturer: syz [ 442.465892][T20450] usb 2-1: SerialNumber: syz [ 442.576647][T22793] netlink: 'syz.0.6316': attribute type 4 has an invalid length. [ 442.591498][T22793] netlink: 'syz.0.6316': attribute type 4 has an invalid length. [ 442.625537][T16705] betop 0003:20BC:5500.0066: item fetching failed at offset 5/7 [ 442.633892][T16705] betop 0003:20BC:5500.0066: parse failed [ 442.639684][T16705] betop 0003:20BC:5500.0066: probe with driver betop failed with error -22 [ 442.839533][T20457] usb 6-1: USB disconnect, device number 68 [ 442.877904][T20450] usb 2-1: 0:2 : does not exist [ 442.979859][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 442.979874][ T30] audit: type=1400 audit(1754632760.666:1585): avc: denied { read } for pid=22796 comm="syz.6.6318" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 443.009182][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.018923][ T30] audit: type=1400 audit(1754632760.666:1586): avc: denied { open } for pid=22796 comm="syz.6.6318" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 443.042657][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.056888][ T30] audit: type=1400 audit(1754632760.676:1587): avc: denied { ioctl } for pid=22796 comm="syz.6.6318" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 443.320589][T20457] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 443.397288][ T30] audit: type=1400 audit(1754632761.086:1588): avc: denied { create } for pid=22800 comm="syz.5.6320" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 443.470064][T22805] syzkaller1: entered promiscuous mode [ 443.478959][T22805] syzkaller1: entered allmulticast mode [ 443.489727][T20457] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 443.500941][T20457] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.514012][T20450] usb 2-1: USB disconnect, device number 94 [ 443.530605][T20457] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.549784][T20457] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.565794][T20457] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 443.579470][T20457] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.594040][T20457] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.610046][T20457] usb 7-1: config 0 descriptor?? [ 443.619122][T22799] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 443.639209][ T30] audit: type=1326 audit(1754632761.326:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.0.6325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 443.685613][ T30] audit: type=1326 audit(1754632761.326:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.0.6325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 443.709551][ T30] audit: type=1326 audit(1754632761.326:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.0.6325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 443.734228][ T30] audit: type=1326 audit(1754632761.326:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.0.6325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 443.762813][ T30] audit: type=1326 audit(1754632761.326:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.0.6325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514ad8ebe9 code=0x7ffc0000 [ 443.787383][ T30] audit: type=1400 audit(1754632761.456:1594): avc: denied { bind } for pid=22814 comm="syz.0.6327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.053655][T20457] plantronics 0003:047F:FFFF.0067: reserved main item tag 0xd [ 444.067941][T20457] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 444.140546][T20450] usb 1-1: new low-speed USB device number 94 using dummy_hcd [ 444.210585][ T5955] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 444.302676][T20450] usb 1-1: config 0 has no interfaces? [ 444.308194][T20450] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 444.330461][T20450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.351116][T20450] usb 1-1: config 0 descriptor?? [ 444.353801][T16697] usb 7-1: USB disconnect, device number 36 [ 444.385111][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.398137][ T5955] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 444.413609][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.424802][ T5955] usb 6-1: config 0 descriptor?? [ 444.574998][T22820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6329'. [ 444.586346][T20450] usb 1-1: USB disconnect, device number 94 [ 444.794949][T16702] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 444.858786][ T5955] nintendo 0003:057E:200E.0068: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.5-1/input0 [ 444.943765][ T5955] nintendo 0003:057E:200E.0068: Failed charging grip handshake [ 444.952056][ T5955] nintendo 0003:057E:200E.0068: Failed to initialize controller; ret=-110 [ 444.970475][ T5955] nintendo 0003:057E:200E.0068: probe - fail = -110 [ 444.977514][ T5955] nintendo 0003:057E:200E.0068: probe with driver nintendo failed with error -110 [ 444.988751][T16702] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 444.998343][T16702] usb 2-1: config 0 has no interface number 0 [ 445.004494][T16702] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid maxpacket 194, setting to 64 [ 445.015681][T16702] usb 2-1: config 0 interface 235 has no altsetting 0 [ 445.029905][T16702] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 445.039275][T16702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.057753][T16702] usb 2-1: Product: syz [ 445.062019][T16702] usb 2-1: Manufacturer: syz [ 445.066913][T16702] usb 2-1: SerialNumber: syz [ 445.076635][T16702] usb 2-1: config 0 descriptor?? [ 445.077756][T20457] usb 6-1: USB disconnect, device number 69 [ 445.083043][T22833] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 445.096830][T16702] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 445.104816][T16702] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 445.113432][T16702] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 445.122322][T16702] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 445.131139][T16702] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 445.139261][T16702] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 445.148430][T16702] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 445.158224][T22843] futex_wake_op: syz.0.6338 tries to shift op by -1; fix this program [ 445.310551][ T5955] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 445.355980][T16702] usb 2-1: USB disconnect, device number 95 [ 445.367315][T16702] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 445.377626][T16702] keyspan 2-1:0.235: device disconnected [ 445.480627][ T5955] usb 7-1: Using ep0 maxpacket: 16 [ 445.488110][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.499276][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.510747][ T5955] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 445.523763][ T5955] usb 7-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 445.532994][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.543220][ T5955] usb 7-1: config 0 descriptor?? [ 445.751269][T22841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.760163][T22841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.982266][ T5955] hid-multitouch 0003:045E:9994.0069: unknown main item tag 0x2 [ 445.997948][ T5955] hid-multitouch 0003:045E:9994.0069: unknown main item tag 0x0 [ 446.007833][ T5955] hid-multitouch 0003:045E:9994.0069: unknown main item tag 0x0 [ 446.018550][ T5955] hid-multitouch 0003:045E:9994.0069: unknown main item tag 0x0 [ 446.028764][ T5955] hid-multitouch 0003:045E:9994.0069: unknown main item tag 0x0 [ 446.044857][ T5955] hid-multitouch 0003:045E:9994.0069: unknown main item tag 0x0 [ 446.056080][ T5955] hid-multitouch 0003:045E:9994.0069: unbalanced collection at end of report description [ 446.070202][ T5955] hid-multitouch 0003:045E:9994.0069: probe with driver hid-multitouch failed with error -22 [ 446.206882][ T5955] usb 7-1: USB disconnect, device number 37 [ 446.277999][T22888] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 446.490625][T16702] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 446.575396][T22903] syzkaller1: entered promiscuous mode [ 446.581165][T22903] syzkaller1: entered allmulticast mode [ 446.650612][T16702] usb 2-1: Using ep0 maxpacket: 16 [ 446.658007][T16702] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 446.666948][T16702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.682846][T16702] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.696336][T16702] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.706788][T16702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.717096][T16702] usb 2-1: Product: syz [ 446.734627][T16702] usb 2-1: Manufacturer: syz [ 446.742601][T16702] usb 2-1: SerialNumber: syz [ 446.790645][T20450] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 446.954872][T20450] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 446.994062][T20450] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 447.024570][T20450] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 447.051466][T20450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.078962][T22901] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 447.158689][T16702] usb 2-1: 0:2 : does not exist [ 447.924595][T22937] netlink: 'syz.6.6377': attribute type 29 has an invalid length. [ 447.976735][T16702] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 447.988186][T22937] netlink: 'syz.6.6377': attribute type 29 has an invalid length. [ 448.012460][T16702] usb 2-1: USB disconnect, device number 96 [ 448.019015][T20450] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.051965][T22937] netlink: 500 bytes leftover after parsing attributes in process `syz.6.6377'. [ 448.087992][T20450] usb 6-1: USB disconnect, device number 70 [ 448.284891][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 448.284926][ T30] audit: type=1400 audit(1754632765.976:1618): avc: denied { load_policy } for pid=22941 comm="syz.0.6379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 448.316138][T22942] SELinux: failed to load policy [ 448.418866][T22947] netlink: 'syz.0.6381': attribute type 1 has an invalid length. [ 448.445232][T22947] 8021q: adding VLAN 0 to HW filter on device bond5 [ 448.484886][T22947] bond5: (slave geneve4): making interface the new active one [ 448.524489][T22947] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 448.547741][T15979] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 448.576558][T15979] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 448.599785][T15979] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 448.636787][T15979] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 448.687673][ T30] audit: type=1400 audit(1754632766.376:1619): avc: denied { mount } for pid=22955 comm="syz.0.6385" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 448.709678][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.740146][ T30] audit: type=1400 audit(1754632766.426:1620): avc: denied { bind } for pid=22957 comm="syz.1.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 448.742167][T22958] netlink: 'syz.1.6386': attribute type 39 has an invalid length. [ 448.760630][ T30] audit: type=1400 audit(1754632766.426:1621): avc: denied { node_bind } for pid=22957 comm="syz.1.6386" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 448.797221][ T30] audit: type=1400 audit(1754632766.486:1622): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 449.058431][ T30] audit: type=1400 audit(1754632766.746:1623): avc: denied { create } for pid=22962 comm="syz.1.6388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 449.103782][ T30] audit: type=1400 audit(1754632766.776:1624): avc: denied { setopt } for pid=22962 comm="syz.1.6388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 449.123286][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.129567][ T5955] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 449.152587][ T30] audit: type=1400 audit(1754632766.776:1625): avc: denied { bind } for pid=22962 comm="syz.1.6388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 449.310509][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 449.316949][ T5955] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 449.327751][ T5955] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 449.336888][ T5955] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 449.345078][ T5955] usb 1-1: Product: syz [ 449.349516][ T5955] usb 1-1: Manufacturer: syz [ 449.354193][ T5955] usb 1-1: SerialNumber: syz [ 449.361158][ T5955] usb 1-1: config 0 descriptor?? [ 449.368703][ T5955] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 449.586958][ T30] audit: type=1400 audit(1754632767.276:1626): avc: denied { read write } for pid=22977 comm="syz.7.6395" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 449.610383][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.617297][ T30] audit: type=1400 audit(1754632767.276:1627): avc: denied { open } for pid=22977 comm="syz.7.6395" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 449.640627][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.654928][T22980] netlink: 'syz.5.6396': attribute type 1 has an invalid length. [ 450.421357][ T5955] gspca_zc3xx: reg_w_i err -71 [ 450.498580][T23006] netlink: 'syz.7.6407': attribute type 1 has an invalid length. [ 450.513262][T23006] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.6407'. [ 450.541263][T23008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.010595][ T5955] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 451.023327][ T5955] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 451.042313][ T5955] usb 1-1: USB disconnect, device number 95 [ 451.431275][T16701] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 451.596782][T16701] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.618643][T16701] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 451.628773][T16701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.673415][T16701] usb 7-1: config 0 descriptor?? [ 451.690696][T23071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.845355][T23077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.065019][ T12] Bluetooth: (null): Invalid header checksum [ 452.075801][ T12] Bluetooth: (null): Invalid header checksum [ 452.089691][T16701] keytouch 0003:0926:3333.006A: fixing up Keytouch IEC report descriptor [ 452.105918][T16701] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.006A/input/input128 [ 452.130622][ T5955] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 452.172674][ T12] Bluetooth: (null): Invalid header checksum [ 452.190519][T20450] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 452.198679][T16701] keytouch 0003:0926:3333.006A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 452.282689][T15937] Bluetooth: (null): Invalid header checksum [ 452.290662][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 452.308795][ T5955] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 452.322032][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.330116][ T5955] usb 2-1: Product: syz [ 452.338347][ T5955] usb 2-1: Manufacturer: syz [ 452.343098][T20450] usb 1-1: Using ep0 maxpacket: 16 [ 452.344928][ T5955] usb 2-1: SerialNumber: syz [ 452.358732][ T5955] usb 2-1: config 0 descriptor?? [ 452.368756][ T5955] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 452.392564][ T12] Bluetooth: (null): Invalid header checksum [ 452.399139][T20450] usb 1-1: config 0 has no interfaces? [ 452.405704][T20450] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 452.417962][T20450] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 452.426738][T20450] usb 1-1: Manufacturer: syz [ 452.433712][T20450] usb 1-1: config 0 descriptor?? [ 452.500882][ T12] Bluetooth: (null): Invalid header checksum [ 452.613958][T15922] Bluetooth: (null): Invalid header checksum [ 452.656042][T16701] usb 1-1: USB disconnect, device number 96 [ 452.831952][T16701] usb 7-1: USB disconnect, device number 38 [ 453.266766][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6444'. Stopping sshd: stopped /usr/sbin/sshd (pid 5602) OK [ 453.586522][ T5955] gspca_sonixj: reg_w1 err -71 Stopping crond: [ 453.668571][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 453.668587][ T30] audit: type=1400 audit(1754632771.356:1638): avc: denied { create } for pid=23108 comm="syz.6.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 453.680560][ T5955] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 stopped /usr/sbin/crond (pid 5587) OK [ 453.737126][ T5955] usb 2-1: USB disconnect, device number 97 [ 453.745452][ T30] audit: type=1400 audit(1754632771.406:1639): avc: denied { setopt } for pid=23108 comm="syz.6.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 453.802775][ T30] audit: type=1400 audit(1754632771.496:1640): avc: denied { read write } for pid=23116 comm="syz.6.6454" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 453.826548][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.839828][T23117] input: syz0 as /devices/virtual/input/input129 [ 453.853479][T23117] input: failed to attach handler leds to device input129, error: -6 [ 453.877185][ T30] audit: type=1400 audit(1754632771.526:1641): avc: denied { open } for pid=23116 comm="syz.6.6454" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 453.907924][ T30] audit: type=1400 audit(1754632771.526:1642): avc: denied { ioctl } for pid=23116 comm="syz.6.6454" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 454.001217][ T30] audit: type=1400 audit(1754632771.586:1643): avc: denied { read } for pid=23114 comm="syz.7.6452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 454.126543][ T30] audit: type=1400 audit(1754632771.816:1644): avc: denied { setopt } for pid=23128 comm="syz.5.6457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5512) [ 454.469269][ T30] audit: type=1400 audit(1754632772.146:1645): avc: denied { search } for pid=23138 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.485338][T23137] syzkaller0 speed is unknown, defaulting to 1000 [ 454.491475][ C1] vkms_vblank_simulate: vblank timer overrun Stopping network: [ 455.067419][ T30] audit: type=1400 audit(1754632772.756:1646): avc: denied { set_context_mgr } for pid=23166 comm="syz.5.6467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 455.171876][ T30] audit: type=1400 audit(1754632772.866:1647): avc: denied { ioctl } for pid=23170 comm="syz.7.6468" path="socket:[90372]" dev="sockfs" ino=90372 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 455.197185][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.569135][T23191] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 455.576984][T23191] #PF: supervisor instruction fetch in kernel mode [ 455.583513][T23191] #PF: error_code(0x0010) - not-present page [ 455.589490][T23191] PGD 4f235067 P4D 4f235067 PUD 0 [ 455.594644][T23191] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 455.600192][T23191] CPU: 1 UID: 0 PID: 23191 Comm: syz.1.6475 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 455.611905][T23191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 455.621947][T23191] RIP: 0010:0x0 [ 455.625397][T23191] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 455.632736][T23191] RSP: 0018:ffffc900037af9c8 EFLAGS: 00010283 [ 455.638784][T23191] RAX: 0000000000000bb9 RBX: 0000000000000000 RCX: ffffc90004e92000 [ 455.646733][T23191] RDX: 0000000000080000 RSI: ffffea000136f540 RDI: ffff88805285da40 [ 455.654683][T23191] RBP: ffffea000136f540 R08: 0000000000000007 R09: 0000000000000000 [ 455.662633][T23191] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920006f5f3a [ 455.670580][T23191] R13: ffff88805285da40 R14: 0000000000000000 R15: dffffc0000000000 [ 455.678543][T23191] FS: 00007fac98df66c0(0000) GS:ffff8881247c4000(0000) knlGS:0000000000000000 [ 455.687452][T23191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.694016][T23191] CR2: ffffffffffffffd6 CR3: 000000006c844000 CR4: 00000000003526f0 [ 455.701970][T23191] Call Trace: [ 455.705229][T23191] [ 455.708137][T23191] filemap_read_folio+0xc5/0x2a0 [ 455.713075][T23191] ? __pfx_filemap_read_folio+0x10/0x10 [ 455.718604][T23191] ? __filemap_get_folio+0x32b/0xc30 [ 455.723868][T23191] ? down_read+0x13d/0x480 [ 455.728265][T23191] do_read_cache_folio+0x263/0x5c0 [ 455.733357][T23191] freader_get_folio+0x337/0x930 [ 455.738282][T23191] freader_fetch+0xc2/0x5e0 [ 455.742769][T23191] ? mt_find+0x3ef/0xa30 [ 455.746992][T23191] __build_id_parse.isra.0+0xec/0x7a0 [ 455.752347][T23191] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 455.758314][T23191] ? __pfx_find_vma+0x10/0x10 [ 455.762973][T23191] do_procmap_query+0xd96/0x1090 [ 455.767892][T23191] ? __pfx_do_procmap_query+0x10/0x10 [ 455.773242][T23191] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 455.779116][T23191] ? do_vfs_ioctl+0x128/0x14f0 [ 455.783864][T23191] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 455.788874][T23191] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 455.795713][T23191] ? selinux_file_ioctl+0x180/0x270 [ 455.800900][T23191] ? selinux_file_ioctl+0xb4/0x270 [ 455.806011][T23191] procfs_procmap_ioctl+0x7d/0xb0 [ 455.811033][T23191] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 455.816738][T23191] __x64_sys_ioctl+0x18e/0x210 [ 455.821487][T23191] do_syscall_64+0xcd/0x4c0 [ 455.825977][T23191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.831848][T23191] RIP: 0033:0x7fac9ab8ebe9 [ 455.836239][T23191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.855824][T23191] RSP: 002b:00007fac98df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.864215][T23191] RAX: ffffffffffffffda RBX: 00007fac9adb5fa0 RCX: 00007fac9ab8ebe9 [ 455.872165][T23191] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 455.880116][T23191] RBP: 00007fac9ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 455.888062][T23191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.896010][T23191] R13: 00007fac9adb6038 R14: 00007fac9adb5fa0 R15: 00007ffdf9824578 [ 455.903963][T23191] [ 455.906957][T23191] Modules linked in: [ 455.910828][T23191] CR2: 0000000000000000 [ 455.914958][T23191] ---[ end trace 0000000000000000 ]--- [ 455.920384][T23191] RIP: 0010:0x0 [ 455.923832][T23191] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 455.931168][T23191] RSP: 0018:ffffc900037af9c8 EFLAGS: 00010283 [ 455.937208][T23191] RAX: 0000000000000bb9 RBX: 0000000000000000 RCX: ffffc90004e92000 [ 455.945165][T23191] RDX: 0000000000080000 RSI: ffffea000136f540 RDI: ffff88805285da40 [ 455.953114][T23191] RBP: ffffea000136f540 R08: 0000000000000007 R09: 0000000000000000 [ 455.961061][T23191] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920006f5f3a [ 455.969006][T23191] R13: ffff88805285da40 R14: 0000000000000000 R15: dffffc0000000000 [ 455.976953][T23191] FS: 00007fac98df66c0(0000) GS:ffff8881247c4000(0000) knlGS:0000000000000000 [ 455.985858][T23191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.992422][T23191] CR2: ffffffffffffffd6 CR3: 000000006c844000 CR4: 00000000003526f0 [ 456.000373][T23191] Kernel panic - not syncing: Fatal exception [ 456.006613][T23191] Kernel Offset: disabled [ 456.010908][T23191] Rebooting in 86400 seconds..