last executing test programs: 3m10.410671678s ago: executing program 2 (id=548): openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) getsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000f80), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) lseek(r1, 0x8000000000008, 0x1) rt_sigqueueinfo(0x0, 0x11, &(0x7f00000002c0)={0x9, 0x6, 0x100}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x4, 0xb000, "b8c6425e8f86a05ba7376be93932a17e99f656d80dda73f6", {0x0, 0xe}, 0x6}) 3m9.7270991s ago: executing program 2 (id=552): syz_open_dev$media(&(0x7f0000000040), 0x20, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3m9.575927163s ago: executing program 2 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) read$fb(r2, &(0x7f0000000080)=""/37, 0x25) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x400000, 0x14b}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r3, 0x247f6, 0x80ffff, 0x0, 0x0, 0x0) 3m8.626509511s ago: executing program 2 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000040)='./file0\x00') add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240), 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$packet(0x11, 0x3, 0x300) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="02030e00d3fc02000000ab5d71acedd7", 0x10, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) stat(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) 3m6.864546574s ago: executing program 2 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r0, 0x400, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) 3m5.313362762s ago: executing program 2 (id=569): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000080)=[{0x401, 0x2000, 0x0, 0x0}, {0x1, 0x2800, 0x0, 0x0}], 0x2}) 3m3.707210294s ago: executing program 32 (id=569): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000080)=[{0x401, 0x2000, 0x0, 0x0}, {0x1, 0x2800, 0x0, 0x0}], 0x2}) 11.006465886s ago: executing program 5 (id=1354): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, 0x0, 0x0) pwritev2(r4, &(0x7f0000001ec0)=[{&(0x7f0000001900)='\f', 0x1}], 0x1, 0x8, 0xff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 9.317221417s ago: executing program 5 (id=1359): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 7.37402885s ago: executing program 4 (id=1371): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x628e, &(0x7f0000000580)={0x0, 0xe7b9, 0x13500}, &(0x7f0000000240), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x2}, 0x94) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r1, 0x24020000) 7.307702994s ago: executing program 4 (id=1372): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.893910507s ago: executing program 3 (id=1374): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_usb_connect$hid(0x59c7271563034cba, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x52, 0xffffffffffffff96, &(0x7f0000000340)="244f1b963c96ba708f63bf9239d4ebc7e4eec9977104aff26af4c934bba3af53067f8d32b57d4f58104ff0c31c6b77b5923f691aace51b611d75325edc473e769989556f8bb1459fdc3a349b780c85be5a41", 0x0}, 0x50) syz_io_uring_setup(0x1bf1, &(0x7f0000000400)={0x0, 0xe8c8, 0x400, 0x3}, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r3 = epoll_create(0x8) r4 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x10000004}) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) syz_open_dev$dri(&(0x7f00000001c0), 0xfffffffffffffff8, 0xa340) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 5.204106114s ago: executing program 5 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) move_pages(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x3) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000001440)) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b351f0fda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x2, 0x4004040) syz_usb_connect(0x6, 0x35, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x3, 0x0, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000600)) 4.976842606s ago: executing program 4 (id=1378): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.398817706s ago: executing program 1 (id=1380): creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fstat(0xffffffffffffffff, 0x0) setuid(0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000000)=0x1) 4.397812296s ago: executing program 4 (id=1381): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 4.353029521s ago: executing program 1 (id=1382): syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x79, 0x9, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x700, 0x8f, 0x4c3b1806}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x74, 0x20005, 0x1, 0x4000000000, 0x2, 0x1000000002, 0x1041, 0x0, 0xfffffffffffffffb, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xfffffffffffffffd, 0x9, 0x800005, 0x6a], 0xd000, 0x1022d6}) syz_open_dev$vim2m(0x0, 0x7f, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) 3.280157377s ago: executing program 4 (id=1383): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x628e, &(0x7f0000000580)={0x0, 0xe7b9, 0x13500}, &(0x7f0000000240), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x2}, 0x94) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r1, 0x24020000) 3.229874618s ago: executing program 1 (id=1384): socket(0x11, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) pipe2(&(0x7f0000000080), 0x80800) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd_index, 0x0, 0x7fffffff, 0x9, 0xa, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 3.014475614s ago: executing program 0 (id=1386): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0x48}) 2.947247211s ago: executing program 0 (id=1387): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick=0x1000000, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) 2.612202843s ago: executing program 0 (id=1388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f2c0000000b0a01080000000000000000012300000900020073797a32000000080900010073797a3000"], 0xc4}, 0x1, 0x0, 0x0, 0x24008000}, 0x24008004) 2.562013305s ago: executing program 1 (id=1389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2.561752157s ago: executing program 3 (id=1390): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)={0x20000, 0x55, 0x1d}, &(0x7f0000000600)='.\x02\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) 2.427569923s ago: executing program 0 (id=1391): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x8005, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x84, 0x24, 0x0, 0x0) 2.301810155s ago: executing program 3 (id=1392): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.301484129s ago: executing program 0 (id=1393): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 2.021962308s ago: executing program 5 (id=1394): syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x79, 0x9, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x700, 0x8f, 0x4c3b1806}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x74, 0x20005, 0x1, 0x4000000000, 0x2, 0x1000000002, 0x1041, 0x0, 0xfffffffffffffffb, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xfffffffffffffffd, 0x9, 0x800005, 0x6a], 0xd000, 0x1022d6}) syz_open_dev$vim2m(0x0, 0x7f, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) 1.573161225s ago: executing program 1 (id=1395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000003cc0)="d815e2824b383e261b12ce3a276e935d9986635f19c4b0948ee16149f775c7e07f69d10707f39808df56bb79714ecd16b02c599a348b6710a7ace4b076f60b38de91432fc21315ff8424db7d2154f90a5d3905406ec9917ed492ce25009fb113", 0x60}], 0x1, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000001701000004000000fcffffff00000000180000000000000017010000030000000100000000000000e0"], 0x110, 0x4000}], 0x1, 0x8081) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)=""/95, 0x5f}], 0x1}, 0x4}], 0x1, 0x40012001, 0x0) 1.544263638s ago: executing program 3 (id=1396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001d00110125bd", @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) 319.071874ms ago: executing program 5 (id=1397): r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000f80)={0x0, 0x1, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d41, 0x2, 0x0, 0x0, 0x0) 275.943085ms ago: executing program 3 (id=1398): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r0, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002}, 0x0) 141.791391ms ago: executing program 5 (id=1399): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4000000) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 108.050133ms ago: executing program 3 (id=1400): socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @empty, @void, {@llc={0x4, {@llc={0x0, 0x4, 'h', "1f006f39fd03757a61642e93e76b320b616bb1796464a20933272860ab152b9baaefa90bf6f388fa8c4ce87dfcec029e"}}}}}, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(0x0, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000800) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0x100a, 0x0, 0x0}, &(0x7f0000000080)=0x40) 94.706742ms ago: executing program 1 (id=1401): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 82.033166ms ago: executing program 0 (id=1402): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000580)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x1, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0xb, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x1, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x7, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd7, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000005c0)=[@wrmsr={0x1e, 0x20, {0xe752fd2593ea6621, 0x4}}, @wrmsr={0x1e, 0x20, {0xab0, 0xfe5}}, @rdmsr={0x32, 0x18, {0x9a3}}, @uexit={0x0, 0x18, 0x80000000}, @uexit={0x0, 0x18, 0xfffffffffffffff8}, @cpuid={0x14, 0x18, {0x3ff, 0x3291}}, @wrmsr={0x1e, 0x20, {0x40000010, 0x3}}, @wr_crn={0x46, 0x20, {0x3, 0x9}}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @cpuid={0x14, 0x18, {0x2, 0x3}}, @wrmsr={0x1e, 0x20, {0xa42, 0x40}}, @wr_crn={0x46, 0x20, {0x3, 0x3}}, @wrmsr={0x1e, 0x20, {0x298, 0x4}}, @cpuid={0x14, 0x18, {0x2}}, @code={0xa, 0x71, {"45dbcbb805000000b9960000000f01d9f0460fb06e2c48b80e000000000000000f23d80f21f835c00000d00f23f8450f01c2c4c3d149a2020000005c360f09660ff61866baf80cb8f8ed5789ef66bafc0cb80e000000efc4e1757cbe60806cc4"}}, @uexit={0x0, 0x18, 0x6}, @rdmsr={0x32, 0x18, {0xb43}}, @rdmsr={0x32, 0x18, {0x16c}}, @cpuid={0x14, 0x18, {0x63, 0x7fff}}, @uexit={0x0, 0x18, 0x2160}, @cpuid={0x14, 0x18, {0x42e9, 0x10}}, @uexit={0x0, 0x18, 0x10000}, @rdmsr={0x32, 0x18, {0x803}}], 0x2b9}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x3, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffa, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x164282}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 0s ago: executing program 4 (id=1403): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0x1, 0x3fff}) kernel console output (not intermixed with test programs): ext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.376744][ T30] audit: type=1400 audit(1754825118.781:297): avc: denied { connect } for pid=7049 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.425382][ T30] audit: type=1400 audit(1754825118.851:298): avc: denied { read write } for pid=7049 comm="syz.3.344" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.623616][ T5957] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.887760][ T7070] binder: 7069:7070 ioctl c0306201 200000000580 returned -14 [ 132.085092][ T5957] usb 4-1: config 0 has no interfaces? [ 132.111488][ T5957] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 132.133280][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.165124][ T5957] usb 4-1: Product: syz [ 132.171229][ T5957] usb 4-1: Manufacturer: syz [ 132.176463][ T5957] usb 4-1: SerialNumber: syz [ 132.194189][ T5957] usb 4-1: config 0 descriptor?? [ 132.211322][ T7073] tipc: Enabled bearer , priority 0 [ 132.232063][ T7073] syzkaller0: entered promiscuous mode [ 132.237589][ T7073] syzkaller0: entered allmulticast mode [ 132.249832][ T7073] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 132.290770][ T7072] tipc: Resetting bearer [ 132.319473][ T7072] tipc: Disabling bearer [ 132.332403][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.338842][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.456006][ T5925] usb 4-1: USB disconnect, device number 3 [ 132.808315][ T5911] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.980333][ T5911] usb 5-1: no configurations [ 132.989584][ T5911] usb 5-1: can't read configurations, error -22 [ 133.118364][ T5911] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.671307][ T5911] usb 5-1: no configurations [ 133.677794][ T5911] usb 5-1: can't read configurations, error -22 [ 133.697790][ T5911] usb usb5-port1: attempt power cycle [ 134.237726][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 134.237741][ T30] audit: type=1400 audit(1754825121.861:301): avc: denied { mount } for pid=7100 comm="syz.1.361" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.375753][ T30] audit: type=1400 audit(1754825121.931:302): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.478709][ T5911] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 134.525773][ T30] audit: type=1400 audit(1754825122.131:303): avc: denied { transfer } for pid=7102 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 134.546288][ T5911] usb 5-1: no configurations [ 134.622590][ T5911] usb 5-1: can't read configurations, error -22 [ 134.722585][ T7109] lo: entered allmulticast mode [ 134.742371][ T7109] tunl0: entered allmulticast mode [ 134.877807][ T7109] gre0: entered allmulticast mode [ 134.906431][ T5911] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 134.949578][ T5911] usb 5-1: no configurations [ 134.954345][ T5911] usb 5-1: can't read configurations, error -22 [ 134.961355][ T7109] gretap0: entered allmulticast mode [ 135.164963][ T7109] erspan0: entered allmulticast mode [ 135.247957][ T7109] ip_vti0: entered allmulticast mode [ 135.386027][ T7109] ip6_vti0: entered allmulticast mode [ 135.419210][ T5911] usb usb5-port1: unable to enumerate USB device [ 135.424800][ T7109] sit0: entered allmulticast mode [ 135.518558][ T7109] ip6tnl0: entered allmulticast mode [ 135.538883][ T7109] ip6gre0: entered allmulticast mode [ 135.659028][ T7109] syz_tun: entered allmulticast mode [ 135.705107][ T7109] ip6gretap0: entered allmulticast mode [ 135.732791][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.740322][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.795041][ T7109] bridge0: entered allmulticast mode [ 135.827398][ T7109] vcan0: entered allmulticast mode [ 135.856650][ T7109] bond0: entered allmulticast mode [ 135.875308][ T7109] bond_slave_0: entered allmulticast mode [ 135.884034][ T7109] bond_slave_1: entered allmulticast mode [ 135.913112][ T7109] team0: entered allmulticast mode [ 135.925926][ T7109] team_slave_0: entered allmulticast mode [ 135.934080][ T7109] team_slave_1: entered allmulticast mode [ 135.948443][ T7116] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 135.964769][ T7109] dummy0: entered allmulticast mode [ 135.986122][ T7109] nlmon0: entered allmulticast mode [ 136.001376][ T7109] caif0: entered allmulticast mode [ 136.019834][ T7109] batadv0: entered allmulticast mode [ 136.037626][ T7109] vxcan0: entered allmulticast mode [ 136.053030][ T7109] vxcan1: entered allmulticast mode [ 136.072336][ T7109] veth0: entered allmulticast mode [ 136.093889][ T7109] veth1: entered allmulticast mode [ 136.108388][ T7116] usb 5-1: Using ep0 maxpacket: 16 [ 136.119305][ T7116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 136.152755][ T7116] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.169852][ T7109] wg0: entered allmulticast mode [ 136.178393][ T7116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.196951][ T7109] wg1: entered allmulticast mode [ 136.207950][ T7116] usb 5-1: Product: syz [ 136.226975][ T7116] usb 5-1: Manufacturer: syz [ 136.237457][ T7109] wg2: entered allmulticast mode [ 136.249844][ T7116] usb 5-1: SerialNumber: syz [ 136.265651][ T7109] veth0_to_bridge: entered allmulticast mode [ 136.279158][ T7116] usb 5-1: config 0 descriptor?? [ 136.296194][ T7116] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 136.320288][ T7116] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 136.343117][ T7109] veth1_to_bridge: entered allmulticast mode [ 136.395169][ T7109] veth0_to_bond: entered allmulticast mode [ 136.419840][ T7109] veth1_to_bond: entered allmulticast mode [ 136.433387][ T7109] veth0_to_team: entered allmulticast mode [ 136.444252][ T7109] veth1_to_team: entered allmulticast mode [ 136.458443][ T7109] veth0_to_batadv: entered allmulticast mode [ 136.466748][ T7109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.485339][ T7109] batadv_slave_0: entered allmulticast mode [ 136.515034][ T7109] veth1_to_batadv: entered allmulticast mode [ 136.560903][ T7109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.587506][ T7109] batadv_slave_1: entered allmulticast mode [ 136.632037][ T7109] xfrm0: entered allmulticast mode [ 136.648738][ T7109] veth0_to_hsr: entered allmulticast mode [ 136.656419][ T7109] hsr_slave_0: entered allmulticast mode [ 136.676782][ T7109] veth1_to_hsr: entered allmulticast mode [ 136.700076][ T7109] hsr_slave_1: entered allmulticast mode [ 136.716417][ T7109] hsr0: entered allmulticast mode [ 136.758988][ T7109] veth1_virt_wifi: entered allmulticast mode [ 136.767033][ T7109] veth0_virt_wifi: entered allmulticast mode [ 136.800395][ T7109] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 136.808177][ T7109] veth1_vlan: entered allmulticast mode [ 136.820881][ T7109] veth0_vlan: entered allmulticast mode [ 136.851893][ T7109] vlan0: entered allmulticast mode [ 136.866516][ T7109] vlan1: entered allmulticast mode [ 136.885521][ T7109] macvlan0: entered allmulticast mode [ 136.898810][ T7131] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 136.910420][ T7116] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 136.938287][ T7109] macvlan1: entered allmulticast mode [ 136.951158][ T7109] ipvlan0: entered allmulticast mode [ 136.967637][ T7109] ipvlan1: entered allmulticast mode [ 136.978202][ T7109] veth1_macvtap: entered allmulticast mode [ 136.999665][ T7109] veth0_macvtap: entered allmulticast mode [ 137.084885][ T7109] macvtap0: entered allmulticast mode [ 137.099896][ T7131] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.109582][ T7109] macsec0: entered allmulticast mode [ 137.118290][ T7131] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.130407][ T7109] geneve0: entered allmulticast mode [ 137.132744][ T7131] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.158108][ T7109] geneve1: entered allmulticast mode [ 137.270816][ T7109] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 137.368317][ T7109] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 137.461169][ T7109] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 137.586663][ T7109] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 137.598710][ T7131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.625943][ T7131] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.648166][ T7109] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 137.648780][ T7131] usb 2-1: invalid MIDI out EP 0 [ 137.674768][ T7116] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 137.696469][ T7109] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 137.708857][ T7116] em28xx 5-1:0.0: board has no eeprom [ 137.732169][ T6634] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.756089][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 137.777604][ T7131] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 137.787981][ T6634] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.809911][ T6634] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.830063][ T6634] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.939460][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 138.184226][ T7160] binder: 7159:7160 ioctl c0306201 200000000580 returned -14 [ 138.642966][ T30] audit: type=1400 audit(1754825126.091:304): avc: denied { create } for pid=7161 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.974707][ T7125] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 138.992904][ T30] audit: type=1400 audit(1754825126.101:305): avc: denied { bind } for pid=7161 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.013053][ T30] audit: type=1400 audit(1754825126.101:306): avc: denied { listen } for pid=7161 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.018302][ T5911] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.048567][ T7116] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 139.185157][ T7116] em28xx 5-1:0.0: dvb set to bulk mode. [ 139.193332][ T1208] em28xx 5-1:0.0: Binding DVB extension [ 139.757463][ T7116] usb 5-1: USB disconnect, device number 12 [ 139.786814][ T7177] binder: BINDER_SET_CONTEXT_MGR already set [ 139.794015][ T7116] em28xx 5-1:0.0: Disconnecting em28xx [ 139.801139][ T7177] binder: 7173:7177 ioctl 4018620d 200000000040 returned -16 [ 139.810875][ T7177] binder: 7173:7177 ioctl c0306201 200000000240 returned -11 [ 139.816684][ T5911] usb 4-1: no configurations [ 139.822283][ T7133] usb 2-1: USB disconnect, device number 8 [ 139.836950][ T5911] usb 4-1: can't read configurations, error -22 [ 139.865087][ T1208] em28xx 5-1:0.0: Registering input extension [ 139.993602][ T7116] em28xx 5-1:0.0: Closing input extension [ 140.053620][ T7116] em28xx 5-1:0.0: Freeing device [ 140.545645][ T5911] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.638386][ T7116] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 140.701001][ T5911] usb 4-1: no configurations [ 140.785430][ T5911] usb 4-1: can't read configurations, error -22 [ 140.794687][ T5911] usb usb4-port1: attempt power cycle [ 140.820787][ T7116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.988361][ T7116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.999144][ T7116] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.012653][ T7116] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.021893][ T7116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.032567][ T7116] usb 5-1: config 0 descriptor?? [ 141.149614][ T5911] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.169293][ T5911] usb 4-1: no configurations [ 141.173932][ T5911] usb 4-1: can't read configurations, error -22 [ 141.308422][ T5911] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.339884][ T5911] usb 4-1: no configurations [ 141.344668][ T5911] usb 4-1: can't read configurations, error -22 [ 141.353401][ T5911] usb usb4-port1: unable to enumerate USB device [ 141.477549][ T7216] binder_alloc: 7215: binder_alloc_buf, no vma [ 141.486287][ T7216] binder: 7215:7216 ioctl c0306201 200000000580 returned -14 [ 141.496529][ T7216] binder: 7215:7216 ioctl c0306201 200000000240 returned -11 [ 141.656620][ T7116] usbhid 5-1:0.0: can't add hid device: -71 [ 141.677707][ T7116] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 141.861134][ T7116] usb 5-1: USB disconnect, device number 13 [ 141.912034][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 141.977021][ T7235] ptrace attach of ""[7236] was attempted by "./syz-executor exec"[7235] [ 142.073926][ T30] audit: type=1326 audit(1754825129.701:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.1.406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc29078ebe9 code=0x0 [ 144.053641][ T30] audit: type=1400 audit(1754825131.671:308): avc: denied { ioctl } for pid=7271 comm="syz.1.416" path="socket:[12776]" dev="sockfs" ino=12776 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.730830][ T30] audit: type=1400 audit(1754825132.301:309): avc: denied { bind } for pid=7286 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.022436][ T30] audit: type=1400 audit(1754825132.301:310): avc: denied { node_bind } for pid=7286 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 145.046505][ T30] audit: type=1400 audit(1754825132.361:311): avc: denied { mount } for pid=7286 comm="syz.3.424" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 145.547129][ T30] audit: type=1400 audit(1754825133.171:312): avc: denied { write } for pid=7312 comm="syz.1.434" name="ipv6_route" dev="proc" ino=4026533157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 145.570113][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.718673][ T30] audit: type=1400 audit(1754825135.341:313): avc: denied { ioctl } for pid=7336 comm="syz.0.443" path="socket:[12861]" dev="sockfs" ino=12861 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.506613][ T5911] IPVS: starting estimator thread 0... [ 148.610396][ T7347] IPVS: using max 75 ests per chain, 180000 per kthread [ 150.064424][ T7370] siw: device registration error -23 [ 150.150827][ T30] audit: type=1400 audit(1754825137.771:314): avc: denied { write } for pid=7372 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.969518][ T30] audit: type=1400 audit(1754825138.601:315): avc: denied { create } for pid=7382 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.979379][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 151.003786][ T30] audit: type=1400 audit(1754825138.601:316): avc: denied { bind } for pid=7382 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.026907][ T30] audit: type=1400 audit(1754825138.601:317): avc: denied { accept } for pid=7382 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 151.064979][ T30] audit: type=1400 audit(1754825138.601:318): avc: denied { create } for pid=7382 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 151.280466][ T7393] binder: 7392:7393 ioctl c0306201 0 returned -14 [ 151.287259][ T7393] binder: 7392:7393 ioctl c0306201 200000000240 returned -11 [ 151.759925][ T7409] siw: device registration error -23 [ 152.286367][ T7401] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 152.490290][ T7414] tipc: Enabled bearer , priority 0 [ 152.498020][ T7414] tipc: Resetting bearer [ 152.528740][ T7413] tipc: Disabling bearer [ 152.718338][ T30] audit: type=1400 audit(1754825140.341:319): avc: denied { create } for pid=7421 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.739354][ T7422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.760180][ T30] audit: type=1400 audit(1754825140.341:320): avc: denied { setopt } for pid=7421 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.900297][ T30] audit: type=1400 audit(1754825140.531:321): avc: denied { bind } for pid=7423 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.104241][ T7432] tipc: Enabling of bearer rejected, failed to enable media [ 153.156390][ T7435] binder: 7433:7435 ioctl c0306201 0 returned -14 [ 153.166533][ T7435] binder: 7433:7435 ioctl c0306201 200000000240 returned -11 [ 153.258574][ T1208] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 154.039599][ T5853] Bluetooth: hci1: command 0x0401 tx timeout [ 154.056991][ T1208] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.082445][ T1208] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 154.091756][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.102919][ T1208] usb 1-1: config 0 descriptor?? [ 154.110835][ T1208] pwc: Askey VC010 type 2 USB webcam detected. [ 154.602337][ T1208] pwc: recv_control_msg error -32 req 02 val 2b00 [ 154.610915][ T1208] pwc: recv_control_msg error -32 req 02 val 2700 [ 154.619633][ T1208] pwc: recv_control_msg error -32 req 02 val 2c00 [ 154.632491][ T1208] pwc: recv_control_msg error -32 req 04 val 1000 [ 154.641599][ T1208] pwc: recv_control_msg error -32 req 04 val 1300 [ 154.651685][ T1208] pwc: recv_control_msg error -32 req 04 val 1400 [ 154.670318][ T1208] pwc: recv_control_msg error -32 req 02 val 2000 [ 154.677330][ T1208] pwc: recv_control_msg error -32 req 02 val 2100 [ 154.688095][ T1208] pwc: recv_control_msg error -32 req 04 val 1500 [ 154.798410][ T918] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 154.968360][ T918] usb 5-1: Using ep0 maxpacket: 32 [ 154.975262][ T918] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 154.986794][ T918] usb 5-1: config 0 has no interface number 0 [ 154.987325][ T1208] pwc: recv_control_msg error -71 req 02 val 2400 [ 154.993962][ T918] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.000196][ T1208] pwc: recv_control_msg error -71 req 02 val 2600 [ 155.017331][ T1208] pwc: recv_control_msg error -71 req 02 val 2900 [ 155.024089][ T1208] pwc: recv_control_msg error -71 req 02 val 2800 [ 155.031338][ T1208] pwc: recv_control_msg error -71 req 04 val 1100 [ 155.037273][ T918] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.038317][ T1208] pwc: recv_control_msg error -71 req 04 val 1200 [ 155.049900][ T918] usb 5-1: config 0 interface 85 has no altsetting 0 [ 155.057091][ T1208] pwc: Registered as video103. [ 155.071174][ T1208] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 155.092183][ T1208] usb 1-1: USB disconnect, device number 6 [ 155.545684][ T918] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 155.555584][ T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.563616][ T918] usb 5-1: Product: syz [ 155.567810][ T918] usb 5-1: Manufacturer: syz [ 155.572449][ T918] usb 5-1: SerialNumber: syz [ 155.591588][ T918] usb 5-1: config 0 descriptor?? [ 155.720140][ T7483] block nbd0: shutting down sockets [ 155.742694][ T7485] netlink: 48 bytes leftover after parsing attributes in process `syz.2.496'. [ 156.068141][ T918] appletouch 5-1:0.85: Geyser mode initialized. [ 157.006691][ T918] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input14 [ 157.526847][ T7506] binder: 7505:7506 ioctl c0306201 0 returned -14 [ 157.562477][ T918] usb 5-1: USB disconnect, device number 14 [ 157.610797][ T918] appletouch 5-1:0.85: input: appletouch disconnected [ 157.895366][ T7510] binder: BINDER_SET_CONTEXT_MGR already set [ 157.919841][ T7510] binder: 7509:7510 ioctl 4018620d 2000000002c0 returned -16 [ 157.944336][ T7510] binder: 7509:7510 ioctl c0306201 200000000240 returned -11 [ 158.482089][ T30] audit: type=1326 audit(1754825145.871:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d8ebe9 code=0x7ffc0000 [ 158.625753][ T30] audit: type=1326 audit(1754825145.871:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d8ebe9 code=0x7ffc0000 [ 158.649120][ T30] audit: type=1326 audit(1754825145.871:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff0e9d8ebe9 code=0x7ffc0000 [ 158.687843][ T30] audit: type=1326 audit(1754825145.871:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d8ebe9 code=0x7ffc0000 [ 158.733086][ T30] audit: type=1326 audit(1754825145.881:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d8ebe9 code=0x7ffc0000 [ 158.772590][ T30] audit: type=1326 audit(1754825145.881:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7ff0e9d8ebe9 code=0x7ffc0000 [ 158.804224][ T30] audit: type=1326 audit(1754825145.881:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d8ebe9 code=0x7ffc0000 [ 158.818754][ T7520] netlink: 48 bytes leftover after parsing attributes in process `syz.1.510'. [ 158.869363][ T30] audit: type=1326 audit(1754825145.881:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d8ebe9 code=0x7ffc0000 [ 158.906575][ T30] audit: type=1326 audit(1754825145.891:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0e9d8ebe9 code=0x7ffc0000 [ 158.985090][ T30] audit: type=1326 audit(1754825145.891:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e9d8ebe9 code=0x7ffc0000 [ 159.777007][ T7549] binder: 7548:7549 ioctl c0306201 0 returned -14 [ 160.126228][ T7559] netlink: 'syz.1.525': attribute type 10 has an invalid length. [ 160.144251][ T918] psmouse serio2: Failed to reset mouse on : -5 [ 161.597597][ T7598] veth1_to_bond: entered promiscuous mode [ 161.668620][ T7598] macsec1: entered allmulticast mode [ 161.673987][ T7598] veth1_to_bond: entered allmulticast mode [ 161.720775][ T7598] veth1_to_bond: left allmulticast mode [ 161.743344][ T7598] veth1_to_bond: left promiscuous mode [ 162.621836][ T7614] siw: device registration error -23 [ 162.779953][ T7133] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 164.060578][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 164.060593][ T30] audit: type=1400 audit(1754825151.691:349): avc: denied { read } for pid=7631 comm="syz.2.548" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 164.091010][ T30] audit: type=1400 audit(1754825151.691:350): avc: denied { open } for pid=7631 comm="syz.2.548" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 164.185900][ T30] audit: type=1400 audit(1754825151.811:351): avc: denied { getopt } for pid=7631 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.189401][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 164.238565][ T5956] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.431158][ T7133] usb 1-1: config 0 has no interfaces? [ 164.441919][ T5956] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.457168][ T7133] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 164.461242][ T5956] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.469774][ T7133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.477285][ T5956] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.512396][ T7133] usb 1-1: Product: syz [ 164.516556][ T7133] usb 1-1: Manufacturer: syz [ 164.521491][ T7133] usb 1-1: SerialNumber: syz [ 164.525584][ T5956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.542941][ T5956] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.554010][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.564564][ T5956] usb 4-1: Product: syz [ 164.570594][ T5956] usb 4-1: Manufacturer: syz [ 164.581973][ T5956] cdc_wdm 4-1:1.0: skipping garbage [ 164.587255][ T5956] cdc_wdm 4-1:1.0: skipping garbage [ 164.648698][ T7133] usb 1-1: config 0 descriptor?? [ 164.652229][ T5956] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 164.674806][ T5956] cdc_wdm 4-1:1.0: Unknown control protocol [ 164.814627][ T5911] usb 4-1: USB disconnect, device number 8 [ 164.848402][ T918] misc userio: Buffer overflowed, userio client isn't keeping up [ 164.887387][ T5970] usb 1-1: USB disconnect, device number 7 [ 165.338512][ T7133] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 165.654998][ T7133] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.884517][ T7133] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.958621][ T7133] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.981108][ T30] audit: type=1400 audit(1754825153.611:352): avc: denied { mount } for pid=7659 comm="syz.2.557" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 165.982256][ T7133] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.197761][ T918] input: PS/2 Generic Mouse as /devices/serio2/input/input15 [ 166.262931][ T7133] usb 4-1: string descriptor 0 read error: -71 [ 167.215025][ T918] psmouse serio2: Failed to enable mouse on [ 167.269492][ T7133] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.472283][ T30] audit: type=1400 audit(1754825155.081:353): avc: denied { mounton } for pid=7659 comm="syz.2.557" path="/116/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 167.528124][ T7133] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.634534][ T30] audit: type=1400 audit(1754825155.171:354): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 167.927043][ T30] audit: type=1400 audit(1754825155.171:355): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 168.180935][ T7133] usb 4-1: can't set config #1, error -71 [ 168.197406][ T30] audit: type=1400 audit(1754825155.641:356): avc: denied { setopt } for pid=7667 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.245361][ T7133] usb 4-1: USB disconnect, device number 9 [ 168.721648][ T30] audit: type=1400 audit(1754825156.351:357): avc: denied { create } for pid=7680 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.870572][ T30] audit: type=1400 audit(1754825156.381:358): avc: denied { connect } for pid=7680 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.972748][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.566'. [ 172.198486][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 172.198523][ T30] audit: type=1400 audit(1754825159.811:360): avc: denied { connect } for pid=7717 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.319195][ T7133] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 172.628623][ T7133] usb 2-1: Using ep0 maxpacket: 32 [ 172.648131][ T7133] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 172.667242][ T6634] bridge_slave_1: left promiscuous mode [ 172.684116][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.698525][ T7133] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.716071][ T7133] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 172.726283][ T6634] bridge_slave_0: left promiscuous mode [ 172.751679][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.762280][ T7133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.936307][ T7133] usb 2-1: config 0 descriptor?? [ 172.985905][ T5168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.994632][ T5168] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.004808][ T5168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.012762][ T5168] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.020971][ T5168] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.565968][ T7133] smartjoyplus 0003:6666:8801.0001: item fetching failed at offset 5/7 [ 173.570038][ T30] audit: type=1400 audit(1754825161.191:361): avc: denied { mounton } for pid=7731 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 173.649072][ T7133] smartjoyplus 0003:6666:8801.0001: parse failed [ 173.656768][ T7133] smartjoyplus 0003:6666:8801.0001: probe with driver smartjoyplus failed with error -22 [ 173.786664][ T918] usb 2-1: USB disconnect, device number 9 [ 173.981436][ T7751] syz.3.585: attempt to access beyond end of device [ 173.981436][ T7751] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 173.996117][ T7751] gfs2: error -5 reading superblock [ 174.468584][ T30] audit: type=1326 audit(1754825162.091:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.3.588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f4078ebe9 code=0x0 [ 174.534904][ T6634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.561571][ T6634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.589685][ T6634] bond0 (unregistering): Released all slaves [ 174.719607][ T6634] tipc: Left network mode [ 174.963020][ T7785] netlink: 14 bytes leftover after parsing attributes in process `syz.4.592'. [ 175.101792][ T7789] 9pnet_fd: Insufficient options for proto=fd [ 175.349705][ T918] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 176.028278][ T5168] Bluetooth: hci1: command tx timeout [ 176.918808][ T918] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.929830][ T918] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 176.948296][ T918] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.958145][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.001351][ T7788] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.016108][ T918] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.136125][ T7785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.179959][ T7813] netlink: 148 bytes leftover after parsing attributes in process `syz.3.601'. [ 177.189164][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 177.228347][ T7813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.601'. [ 177.282607][ T7131] usb 5-1: USB disconnect, device number 15 [ 177.474470][ T7785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.499682][ T7785] bond0 (unregistering): Released all slaves [ 178.105008][ T5168] Bluetooth: hci1: command tx timeout [ 178.462001][ T6634] hsr_slave_0: left promiscuous mode [ 178.469669][ T6634] hsr_slave_1: left promiscuous mode [ 178.484235][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.545507][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.994657][ T6634] team0 (unregistering): Port device team_slave_1 removed [ 180.041069][ T6634] team0 (unregistering): Port device team_slave_0 removed [ 180.168382][ T5168] Bluetooth: hci1: command tx timeout [ 181.325276][ T7868] 9pnet_virtio: no channels available for device syz [ 181.379559][ T30] audit: type=1400 audit(1754825168.941:363): avc: denied { write } for pid=7862 comm="syz.1.616" path="socket:[14156]" dev="sockfs" ino=14156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.421600][ T7731] chnl_net:caif_netlink_parms(): no params data found [ 181.470135][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.617'. [ 181.622561][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'. [ 181.670758][ T7879] lo: entered allmulticast mode [ 181.728387][ T7879] tunl0: entered allmulticast mode [ 181.748809][ T30] audit: type=1400 audit(1754825169.371:364): avc: denied { ioctl } for pid=7882 comm="syz.0.620" path="socket:[14188]" dev="sockfs" ino=14188 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.904917][ T7879] gre0: entered allmulticast mode [ 182.305100][ T7879] gretap0: entered allmulticast mode [ 182.368093][ T5168] Bluetooth: hci1: command tx timeout [ 182.639326][ T7879] erspan0: entered allmulticast mode [ 182.671558][ T7879] ip_vti0: entered allmulticast mode [ 182.681561][ T7879] ip6_vti0: entered allmulticast mode [ 182.759533][ T30] audit: type=1400 audit(1754825170.351:365): avc: denied { mount } for pid=7888 comm="syz.1.621" name="/" dev="rpc_pipefs" ino=14201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 182.784844][ T7879] sit0: entered allmulticast mode [ 182.888540][ T7879] ip6tnl0: entered allmulticast mode [ 183.039470][ T7879] ip6gre0: entered allmulticast mode [ 183.121758][ T7879] syz_tun: entered allmulticast mode [ 183.152247][ T7879] ip6gretap0: entered allmulticast mode [ 183.374910][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.382473][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.469788][ T7879] bridge0: entered allmulticast mode [ 183.495999][ T7879] vcan0: entered allmulticast mode [ 183.593329][ T7879] team0: entered allmulticast mode [ 183.598987][ T7879] team_slave_0: entered allmulticast mode [ 183.604755][ T7879] team_slave_1: entered allmulticast mode [ 183.620161][ T7879] dummy0: entered allmulticast mode [ 183.630845][ T7879] nlmon0: entered allmulticast mode [ 183.704384][ T7879] caif0: entered allmulticast mode [ 183.712104][ T7879] batadv0: entered allmulticast mode [ 183.753703][ T7879] vxcan0: entered allmulticast mode [ 183.838979][ T7879] vxcan1: entered allmulticast mode [ 183.857429][ T7879] veth0: entered allmulticast mode [ 183.875327][ T7879] veth1: entered allmulticast mode [ 183.900705][ T7879] wg0: entered allmulticast mode [ 183.934828][ T7879] wg1: entered allmulticast mode [ 183.950369][ T7879] wg2: entered allmulticast mode [ 183.973844][ T7879] veth0_to_bridge: entered allmulticast mode [ 184.127705][ T7879] veth1_to_bridge: entered allmulticast mode [ 184.194020][ T7879] veth0_to_bond: entered allmulticast mode [ 184.252126][ T7879] bond_slave_0: entered allmulticast mode [ 184.300267][ T7879] veth1_to_bond: entered allmulticast mode [ 184.351971][ T7879] bond_slave_1: entered allmulticast mode [ 184.390998][ T7879] veth0_to_team: entered allmulticast mode [ 184.438443][ T7136] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 184.446297][ T7879] veth1_to_team: entered allmulticast mode [ 184.475962][ T7879] veth0_to_batadv: entered allmulticast mode [ 184.542383][ T7879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.558646][ T7879] batadv_slave_0: entered allmulticast mode [ 184.577772][ T7879] veth1_to_batadv: entered allmulticast mode [ 184.628315][ T7136] usb 4-1: Using ep0 maxpacket: 8 [ 184.632062][ T7879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.647254][ T7136] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 184.675824][ T7879] batadv_slave_1: entered allmulticast mode [ 184.689172][ T7136] usb 4-1: config 0 has no interface number 0 [ 184.705332][ T7136] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.708351][ T7879] xfrm0: entered allmulticast mode [ 184.727533][ T7136] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 184.758713][ T7136] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.771678][ T7879] veth0_to_hsr: entered allmulticast mode [ 184.772700][ T7136] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 184.794287][ T7136] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 184.799712][ T7879] hsr_slave_0: entered allmulticast mode [ 184.804006][ T7136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.833062][ T7136] usb 4-1: config 0 descriptor?? [ 184.852334][ T7136] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 184.869166][ T7879] veth1_to_hsr: entered allmulticast mode [ 184.895605][ T7879] hsr_slave_1: entered allmulticast mode [ 184.935199][ T7879] hsr0: entered allmulticast mode [ 184.953098][ T7879] veth1_virt_wifi: entered allmulticast mode [ 184.968386][ T7879] veth0_virt_wifi: entered allmulticast mode [ 184.976377][ T7879] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 184.984446][ T7879] veth1_vlan: entered allmulticast mode [ 184.993667][ T7879] veth0_vlan: entered allmulticast mode [ 185.013884][ T7879] vlan0: entered allmulticast mode [ 185.021181][ T7879] vlan1: entered allmulticast mode [ 185.026762][ T7879] macvlan0: entered allmulticast mode [ 185.039349][ T7879] macvlan1: entered allmulticast mode [ 185.049617][ T7879] ipvlan0: entered allmulticast mode [ 185.068976][ T7879] ipvlan1: entered allmulticast mode [ 185.070472][ T43] usb 4-1: USB disconnect, device number 10 [ 185.087151][ T43] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 185.087584][ T7879] veth1_macvtap: entered allmulticast mode [ 185.109995][ T7879] veth0_macvtap: entered allmulticast mode [ 185.120037][ T7879] macvtap0: entered allmulticast mode [ 185.134913][ T7879] macsec0: entered allmulticast mode [ 185.151176][ T7879] geneve0: entered allmulticast mode [ 185.167653][ T7879] geneve1: entered allmulticast mode [ 185.177248][ T7879] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 185.191317][ T7879] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 185.207391][ T7879] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 185.222583][ T7879] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 185.237128][ T7879] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 185.254866][ T7879] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 185.263623][ T7879] vlan2: entered allmulticast mode [ 185.340244][ T6624] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.365641][ T6624] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.396623][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.410112][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.420587][ T7731] bridge_slave_0: entered allmulticast mode [ 185.433121][ T7731] bridge_slave_0: entered promiscuous mode [ 185.444092][ T6624] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.459086][ T30] audit: type=1400 audit(1754825173.091:366): avc: denied { mounton } for pid=7928 comm="syz.4.631" path="/proc/335/cgroup" dev="proc" ino=14850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 185.481920][ T6624] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.513941][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.522298][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.529900][ T7731] bridge_slave_1: entered allmulticast mode [ 185.537207][ T7731] bridge_slave_1: entered promiscuous mode [ 185.609511][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 185.615753][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 185.680865][ T7934] siw: device registration error -23 [ 185.708190][ T7731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.739584][ T7731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.943663][ T7731] team0: Port device team_slave_0 added [ 185.951695][ T7731] team0: Port device team_slave_1 added [ 185.983997][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.131882][ T7953] fuse: Unknown parameter 'user_i00000000000000000000' [ 186.472792][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.499744][ T7731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.531293][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.547251][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.596016][ T7731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.663079][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 186.862234][ T7731] hsr_slave_0: entered promiscuous mode [ 186.888759][ T7731] hsr_slave_1: entered promiscuous mode [ 187.060305][ T7973] binder: 7972:7973 ioctl 4018620d 0 returned -22 [ 187.124173][ T7977] Bluetooth: MGMT ver 1.23 [ 187.147854][ T7978] binder: 7972:7978 ioctl c0306201 200000000580 returned -14 [ 187.157351][ T30] audit: type=1400 audit(1754825174.751:367): avc: denied { write } for pid=7970 comm="syz.4.641" path="socket:[15385]" dev="sockfs" ino=15385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.167936][ T7978] binder: 7972:7978 ioctl c0306201 200000000240 returned -11 [ 187.530011][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 187.563373][ T7986] netlink: 104 bytes leftover after parsing attributes in process `syz.4.645'. [ 187.729719][ T7731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.747120][ T7731] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.783389][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.790554][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.803243][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.810385][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.876913][ T7998] siw: device registration error -23 [ 188.798847][ T7731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.392350][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 189.400300][ T30] audit: type=1400 audit(1754825177.021:368): avc: denied { bind } for pid=8031 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.402488][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 189.421718][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.492980][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 190.533698][ T8046] process 'syz.0.657' launched '/dev/fd/3' with NULL argv: empty string added [ 190.561178][ T30] audit: type=1400 audit(1754825178.181:369): avc: denied { execute_no_trans } for pid=8044 comm="syz.0.657" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 191.585971][ T30] audit: type=1400 audit(1754825178.761:370): avc: denied { bind } for pid=8051 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.820770][ T8068] siw: device registration error -23 [ 192.307956][ T8067] tipc: Enabled bearer , priority 0 [ 192.459971][ T8067] syzkaller0: entered promiscuous mode [ 192.465450][ T8067] syzkaller0: entered allmulticast mode [ 192.487711][ T8067] tipc: Resetting bearer [ 192.513359][ T8065] tipc: Resetting bearer [ 192.542598][ T8065] tipc: Disabling bearer [ 192.658731][ T7731] veth0_vlan: entered promiscuous mode [ 192.688128][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.669'. [ 192.698971][ T7731] veth1_vlan: entered promiscuous mode [ 192.774235][ T7731] veth0_macvtap: entered promiscuous mode [ 192.852828][ T7731] veth1_macvtap: entered promiscuous mode [ 192.911485][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.960887][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.402559][ T918] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 193.759106][ T918] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.768190][ T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.773516][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.802067][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.840279][ T918] usb 4-1: Product: syz [ 193.851204][ T918] usb 4-1: Manufacturer: syz [ 193.875999][ T918] usb 4-1: SerialNumber: syz [ 193.893937][ T30] audit: type=1400 audit(1754825181.521:371): avc: denied { read } for pid=8098 comm="syz.1.672" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 193.919596][ T6634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.959632][ T6634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.964560][ T918] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 194.024513][ T30] audit: type=1400 audit(1754825181.521:372): avc: denied { open } for pid=8098 comm="syz.1.672" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 194.064896][ T7924] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 194.076906][ T6624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.103052][ T6624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.125608][ T30] audit: type=1400 audit(1754825181.641:373): avc: denied { firmware_load } for pid=7924 comm="kworker/1:9" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 194.216454][ T30] audit: type=1400 audit(1754825181.761:374): avc: denied { mounton } for pid=7731 comm="syz-executor" path="/root/syzkaller.aP8FNl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 194.243064][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.258756][ T6028] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.562995][ T918] usb 4-1: USB disconnect, device number 11 [ 194.608374][ T6028] usb 2-1: Using ep0 maxpacket: 16 [ 194.689911][ T6028] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.778907][ T6028] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.830671][ T6028] usb 2-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.875143][ T6028] usb 2-1: config 1 interface 0 has no altsetting 0 [ 194.903124][ T6028] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 194.922638][ T6028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.945213][ T6028] usb 2-1: Product: syz [ 195.098365][ T6028] usb 2-1: Manufacturer: syz [ 195.103178][ T6028] usb 2-1: SerialNumber: syz [ 195.925206][ T7924] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 196.545184][ T8117] siw: device registration error -23 [ 196.628495][ T7924] ath9k_htc: Failed to initialize the device [ 196.637241][ T6028] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input16 [ 196.646520][ T918] usb 4-1: ath9k_htc: USB layer deinitialized [ 196.747162][ T5202] bcm5974 2-1:1.0: could not read from device [ 196.798005][ T6028] bcm5974 2-1:1.0: could not read from device [ 196.805358][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 196.892231][ T5202] bcm5974 2-1:1.0: could not read from device [ 197.037437][ T6028] input: failed to attach handler mousedev to device input16, error: -5 [ 197.116944][ T5202] bcm5974 2-1:1.0: could not read from device [ 197.141148][ T6028] usb 2-1: USB disconnect, device number 10 [ 197.418948][ T7924] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 197.434927][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 197.551816][ T8173] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8173 comm=syz.5.687 [ 197.632799][ T7924] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 197.768412][ T7924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.877663][ T7924] usb 5-1: config 0 descriptor?? [ 198.267908][ T7924] cp210x 5-1:0.0: cp210x converter detected [ 199.010678][ T8188] siw: device registration error -23 [ 199.061762][ T7924] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 199.084785][ T7924] usb 5-1: cp210x converter now attached to ttyUSB0 [ 199.320658][ T7924] usb 5-1: USB disconnect, device number 16 [ 199.413657][ T7924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 199.803652][ T7924] cp210x 5-1:0.0: device disconnected [ 200.027604][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 200.282325][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.707'. [ 200.458560][ T8251] tipc: Started in network mode [ 200.463452][ T8251] tipc: Node identity 3e7fb2eeb02, cluster identity 4711 [ 200.541029][ T8251] tipc: Enabled bearer , priority 0 [ 200.559854][ T8251] tipc: Resetting bearer [ 200.592876][ T8250] tipc: Disabling bearer [ 201.799852][ T6028] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 202.098342][ T6028] usb 4-1: Using ep0 maxpacket: 32 [ 202.108073][ T8286] binder: BINDER_SET_CONTEXT_MGR already set [ 202.118956][ T6028] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 202.130334][ T8286] binder: 8285:8286 ioctl 4018620d 200000000040 returned -16 [ 202.144092][ T6028] usb 4-1: config 0 has no interface number 0 [ 202.154548][ T8286] binder: 8285:8286 ioctl c0306201 200000000240 returned -11 [ 202.166206][ T6028] usb 4-1: config 0 interface 184 has no altsetting 0 [ 202.187616][ T6028] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 202.202305][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.218432][ T6028] usb 4-1: Product: syz [ 202.622997][ T6028] usb 4-1: Manufacturer: syz [ 202.627625][ T6028] usb 4-1: SerialNumber: syz [ 202.638360][ T6028] usb 4-1: config 0 descriptor?? [ 202.650295][ T6028] smsc75xx v1.0.0 [ 202.753448][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.725'. [ 203.301984][ T8310] netlink: 104 bytes leftover after parsing attributes in process `syz.1.726'. [ 203.317321][ T8310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.726'. [ 203.525076][ T6028] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 203.557686][ T6028] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 204.548506][ T6028] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 204.583296][ T6028] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 204.748105][ T6028] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 204.758305][ T6028] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 204.774955][ T6028] usb 4-1: USB disconnect, device number 12 [ 205.327871][ T8345] fuse: Bad value for 'fd' [ 205.389307][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 206.094461][ T8354] tipc: Enabled bearer , priority 0 [ 206.157427][ T8354] syzkaller0: entered promiscuous mode [ 206.175895][ T8354] syzkaller0: entered allmulticast mode [ 206.272584][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 206.289607][ T8352] tipc: Resetting bearer [ 206.348375][ T6028] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 206.367400][ T8352] tipc: Disabling bearer [ 206.548568][ T6028] usb 4-1: Using ep0 maxpacket: 16 [ 206.565206][ T6028] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 206.645844][ T30] audit: type=1400 audit(1754825194.261:375): avc: denied { map } for pid=8361 comm="syz.4.740" path="socket:[16315]" dev="sockfs" ino=16315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 206.986851][ T6028] usb 4-1: config 0 has no interface number 0 [ 207.002183][ T8375] netlink: 14 bytes leftover after parsing attributes in process `syz.1.741'. [ 207.021558][ T6028] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.032538][ T6028] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.086715][ T6028] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 207.097456][ T6028] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 207.107763][ T6028] usb 4-1: Product: syz [ 207.115109][ T6028] usb 4-1: SerialNumber: syz [ 207.122770][ T6028] usb 4-1: config 0 descriptor?? [ 207.136927][ T6028] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 207.144433][ T6028] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input17 [ 207.202612][ T8375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.300475][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 207.345899][ T8375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.431024][ T8375] bond0 (unregistering): Released all slaves [ 207.442667][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 207.450632][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 207.457744][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 207.465451][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 207.472917][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 207.480371][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 207.487468][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 207.494600][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 207.501628][ T5956] usb 4-1: USB disconnect, device number 13 [ 207.507567][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 207.507589][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 207.583899][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.597654][ T43] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 207.613753][ T5956] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 207.628833][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.638397][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.654768][ T8378] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 207.669137][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.732049][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 207.997025][ T5956] usb 2-1: USB disconnect, device number 11 [ 208.801269][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 209.244766][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 210.837967][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.757'. [ 210.877856][ T8440] binder: 8436:8440 ioctl c0306201 200000000580 returned -14 [ 210.975220][ T8440] binder: 8436:8440 ioctl c0306201 200000000240 returned -11 [ 211.015489][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.5.759'. [ 211.124814][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 211.142981][ T8455] tipc: Enabled bearer , priority 0 [ 211.150671][ T8455] syzkaller0: entered promiscuous mode [ 211.156779][ T8455] syzkaller0: entered allmulticast mode [ 211.170554][ T8451] tipc: Resetting bearer [ 211.182346][ T8451] tipc: Disabling bearer [ 211.188471][ T7137] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 211.348635][ T7137] usb 4-1: Using ep0 maxpacket: 8 [ 211.362822][ T7137] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 211.381288][ T7137] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 211.397235][ T7137] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.428517][ T7137] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.456161][ T8468] siw: device registration error -23 [ 211.698735][ T8469] netlink: 14 bytes leftover after parsing attributes in process `syz.5.767'. [ 211.727058][ T7137] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.727106][ T7137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.842117][ T8469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.852515][ T8469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.865056][ T8469] bond0 (unregistering): Released all slaves [ 211.998449][ T7135] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 212.124187][ T8483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.773'. [ 212.174846][ T7137] usb 4-1: GET_CAPABILITIES returned 0 [ 212.182769][ T7137] usbtmc 4-1:16.0: can't read capabilities [ 212.186613][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 212.193301][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.771'. [ 212.238454][ T7132] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.248373][ T30] audit: type=1400 audit(1754825199.871:376): avc: denied { create } for pid=8487 comm="syz.1.775" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 212.291100][ T30] audit: type=1400 audit(1754825199.881:377): avc: denied { write } for pid=8487 comm="syz.1.775" name="file0" dev="tmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 212.313661][ T7135] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.334351][ T30] audit: type=1400 audit(1754825199.881:378): avc: denied { open } for pid=8487 comm="syz.1.775" path="/155/file0" dev="tmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 212.338299][ T7135] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.361370][ T30] audit: type=1400 audit(1754825199.881:379): avc: denied { ioctl } for pid=8487 comm="syz.1.775" path="/155/file0" dev="tmpfs" ino=818 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 212.410968][ T7135] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.424348][ T7135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.442253][ T8470] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 212.458790][ T7132] usb 5-1: Using ep0 maxpacket: 32 [ 212.464875][ T7135] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.468279][ T8491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.776'. [ 212.481824][ T7132] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 212.506492][ T7132] usb 5-1: config 0 has no interface number 0 [ 212.517292][ T7132] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.541800][ T7132] usb 5-1: config 0 interface 85 has no altsetting 0 [ 212.564169][ T7132] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 212.579089][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 212.594923][ T7132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.605001][ T7132] usb 5-1: Product: syz [ 212.813027][ T30] audit: type=1400 audit(1754825200.301:380): avc: denied { read } for pid=8492 comm="syz.0.777" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 212.823762][ T7132] usb 5-1: Manufacturer: syz [ 212.837130][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.914960][ T7137] usb 6-1: USB disconnect, device number 2 [ 212.932097][ T30] audit: type=1400 audit(1754825200.301:381): avc: denied { open } for pid=8492 comm="syz.0.777" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 212.956921][ T7132] usb 5-1: SerialNumber: syz [ 212.970358][ T7132] usb 5-1: config 0 descriptor?? [ 213.035345][ T30] audit: type=1400 audit(1754825200.311:382): avc: denied { ioctl } for pid=8492 comm="syz.0.777" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 213.062266][ T30] audit: type=1400 audit(1754825200.441:383): avc: denied { unlink } for pid=5854 comm="syz-executor" name="file0" dev="tmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 213.659963][ T7132] appletouch 5-1:0.85: Failed to read mode from device. [ 213.851544][ T7132] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 214.043132][ T7135] usb 4-1: USB disconnect, device number 14 [ 214.064135][ T7132] usb 5-1: USB disconnect, device number 17 [ 214.865996][ T8526] netlink: 20 bytes leftover after parsing attributes in process `syz.5.785'. [ 215.246158][ T8539] SELinux: Context Ü is not valid (left unmapped). [ 217.468511][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.795'. [ 217.480754][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 217.500092][ T7137] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 217.508092][ T7132] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 217.597526][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 217.617190][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 217.761216][ T7137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.776336][ T7137] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 217.793841][ T7137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.811201][ T7137] usb 5-1: config 0 descriptor?? [ 217.969586][ T7137] pwc: Askey VC010 type 2 USB webcam detected. [ 217.975851][ T7132] usb 2-1: config 0 has no interfaces? [ 218.081659][ T30] audit: type=1400 audit(1754825205.701:384): avc: denied { listen } for pid=8577 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.225694][ T7137] pwc: recv_control_msg error -32 req 02 val 2b00 [ 218.245847][ T7137] pwc: recv_control_msg error -32 req 02 val 2700 [ 218.309711][ T7137] pwc: recv_control_msg error -32 req 02 val 2c00 [ 218.345405][ T7137] pwc: recv_control_msg error -32 req 04 val 1000 [ 218.416271][ T8580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8580 comm=syz.0.798 [ 218.437257][ T7137] pwc: recv_control_msg error -32 req 04 val 1300 [ 218.473425][ T7137] pwc: recv_control_msg error -32 req 04 val 1400 [ 218.599162][ T7137] pwc: recv_control_msg error -32 req 02 val 2000 [ 218.633877][ T7137] pwc: recv_control_msg error -32 req 02 val 2100 [ 218.680483][ T7137] pwc: recv_control_msg error -32 req 04 val 1500 [ 218.710688][ T7132] usb 2-1: string descriptor 0 read error: -71 [ 218.724505][ T7137] pwc: recv_control_msg error -32 req 02 val 2500 [ 218.764563][ T7132] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 218.788604][ T7137] pwc: recv_control_msg error -32 req 02 val 2400 [ 218.805491][ T7137] pwc: recv_control_msg error -32 req 02 val 2600 [ 218.818281][ T7132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.826925][ T7137] pwc: recv_control_msg error -32 req 02 val 2900 [ 218.885815][ T7137] pwc: recv_control_msg error -32 req 02 val 2800 [ 219.119509][ T7132] usb 2-1: config 0 descriptor?? [ 219.131709][ T30] audit: type=1400 audit(1754825206.611:385): avc: denied { write } for pid=8603 comm="syz.5.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.286537][ T7132] usb 2-1: can't set config #0, error -71 [ 219.338667][ T7132] usb 2-1: USB disconnect, device number 12 [ 219.369766][ T7137] pwc: recv_control_msg error -71 req 04 val 1200 [ 219.448848][ T7137] pwc: Registered as video103. [ 219.611366][ T7137] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 219.624546][ T8618] sch_tbf: peakrate 2147483643 is lower than or equals to rate 2831599472947593698 ! [ 219.879026][ T7137] usb 5-1: USB disconnect, device number 18 [ 220.478589][ T8638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.814'. [ 221.149808][ T30] audit: type=1400 audit(1754825208.781:386): avc: denied { setopt } for pid=8634 comm="syz.5.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.330566][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'. [ 222.520567][ T8666] sch_tbf: peakrate 2147483643 is lower than or equals to rate 2831599472947593698 ! [ 222.680070][ T8670] tipc: Enabled bearer , priority 0 [ 222.714797][ T8670] tipc: Resetting bearer [ 222.785455][ T8675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.792693][ T8675] IPv6: NLM_F_CREATE should be set when creating new route [ 222.867525][ T8669] tipc: Disabling bearer [ 222.934028][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 223.066397][ T30] audit: type=1400 audit(1754825210.691:387): avc: denied { mounton } for pid=8688 comm="syz.5.830" path="/proc/106/task" dev="proc" ino=16972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 223.317760][ T30] audit: type=1400 audit(1754825210.921:388): avc: denied { append } for pid=8692 comm="syz.1.832" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 223.535646][ T30] audit: type=1400 audit(1754825211.061:389): avc: denied { map } for pid=8692 comm="syz.1.832" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 224.074618][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 227.164016][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 227.250847][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 227.546618][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.5.863'. [ 227.574813][ T8803] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8803 comm=syz.5.863 [ 229.711281][ T8846] Illegal XDP return value 4294967283 on prog (id 78) dev N/A, expect packet loss! [ 232.048397][ T7924] syzkaller0: tun_net_xmit 76 [ 232.220577][ T8886] syzkaller0: delete flow: hash 380152634 index 1 [ 233.149230][ T8910] ptrace attach of "./syz-executor exec"[8911] was attempted by "./syz-executor exec"[8910] [ 234.423791][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.902'. [ 234.666263][ T8956] ubi31: attaching mtd0 [ 234.680261][ T8956] ubi31: scanning is finished [ 234.684962][ T8956] ubi31: empty MTD device detected [ 234.945454][ T8956] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 234.953528][ T8956] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 234.961117][ T8956] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 234.968160][ T8956] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 234.975692][ T8956] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 234.982592][ T8956] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 234.990680][ T8956] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 982476249 [ 235.000705][ T8956] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 235.012716][ T8958] ubi31: background thread "ubi_bgt31d" started, PID 8958 [ 235.355532][ T8921] netdevsim netdevsim3: Direct firmware load for . [ 235.355532][ T8921] failed with error -2 [ 235.371753][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 235.376739][ T8921] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 235.376739][ T8921] [ 235.622007][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.908'. [ 235.664626][ T8975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.907'. [ 235.863309][ T8988] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.910'. [ 235.875554][ T8982] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.910'. [ 236.643065][ T9015] netlink: 16 bytes leftover after parsing attributes in process `syz.5.915'. [ 238.975636][ T9074] warning: `syz.3.930' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 239.532837][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.937'. [ 239.694708][ T30] audit: type=1400 audit(1754825227.321:390): avc: denied { map } for pid=9103 comm="syz.1.940" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 241.486947][ T30] audit: type=1400 audit(1754825229.111:391): avc: denied { bind } for pid=9135 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.603958][ T30] audit: type=1400 audit(1754825229.151:392): avc: denied { listen } for pid=9135 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.693335][ T30] audit: type=1400 audit(1754825229.321:393): avc: denied { read } for pid=9147 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.712545][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.280110][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.958'. [ 243.323996][ T9179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.958'. [ 244.343398][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.963'. [ 244.697469][ T5959] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 244.916542][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 244.927567][ T5959] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 244.953564][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.994261][ T5959] usb 2-1: config 0 descriptor?? [ 245.014974][ T5959] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 245.107758][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 245.290869][ T7132] IPVS: starting estimator thread 0... [ 245.291459][ T30] audit: type=1400 audit(1754825232.921:394): avc: denied { read write } for pid=9211 comm="syz.5.967" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 245.370780][ T30] audit: type=1400 audit(1754825232.921:395): avc: denied { open } for pid=9211 comm="syz.5.967" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 245.394877][ T9224] IPVS: using max 41 ests per chain, 98400 per kthread [ 245.405169][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 245.416137][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.970'. [ 245.702460][ T30] audit: type=1400 audit(1754825233.321:396): avc: denied { setattr } for pid=9235 comm="syz.3.972" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 245.822893][ T30] audit: type=1400 audit(1754825233.451:397): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 247.194294][ T30] audit: type=1400 audit(1754825234.751:398): avc: denied { read } for pid=9260 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 247.838268][ T7132] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 248.015048][ T7132] usb 5-1: no configurations [ 248.023935][ T7132] usb 5-1: can't read configurations, error -22 [ 248.161791][ T5959] gspca_vc032x: reg_r err -71 [ 248.166506][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.175449][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.200641][ T7132] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 248.209229][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.234743][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.266119][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.284248][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.314069][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.337017][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.378494][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.395194][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.415557][ T7132] usb 5-1: no configurations [ 248.436042][ T7132] usb 5-1: can't read configurations, error -22 [ 248.444472][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.457630][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.464211][ T7132] usb usb5-port1: attempt power cycle [ 248.470094][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.485677][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.508329][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.518358][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.523646][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.524384][ T9311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.547495][ T5959] gspca_vc032x: Unknown sensor... [ 248.558602][ T5959] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 248.596855][ T5959] usb 2-1: USB disconnect, device number 13 [ 248.610744][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 248.808286][ T7132] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 248.999239][ T7132] usb 5-1: no configurations [ 249.053101][ T7132] usb 5-1: can't read configurations, error -22 [ 249.275631][ T7132] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 249.311107][ T7132] usb 5-1: no configurations [ 249.316050][ T7132] usb 5-1: can't read configurations, error -22 [ 249.336323][ T7132] usb usb5-port1: unable to enumerate USB device [ 249.563241][ T30] audit: type=1400 audit(1754825237.181:399): avc: denied { open } for pid=9338 comm="syz.3.996" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 251.537963][ T30] audit: type=1400 audit(1754825239.141:400): avc: denied { execute } for pid=9363 comm="syz.1.1001" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 254.474775][ T5959] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 254.752822][ T9411] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1013'. [ 254.851518][ T5959] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 254.886756][ T5959] usb 4-1: can't read configurations, error -71 [ 254.999325][ T30] audit: type=1400 audit(1754825242.631:401): avc: denied { connect } for pid=9414 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.031244][ T6028] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 255.032647][ T9420] 9pnet_fd: Insufficient options for proto=fd [ 255.213571][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.220343][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.252621][ T6028] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.263185][ T6028] usb 5-1: config 0 has no interfaces? [ 255.268862][ T6028] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 255.278077][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.487806][ T6028] usb 5-1: config 0 descriptor?? [ 256.026360][ T9435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1017'. [ 256.037892][ T9435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9435 comm=syz.3.1017 [ 256.424919][ T9451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.444771][ T9451] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 257.302569][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1022'. [ 257.377842][ T9473] vivid-000: ================= START STATUS ================= [ 257.385640][ T9473] vivid-000: Test Pattern: 75% Colorbar [ 257.391703][ T9473] vivid-000: Fill Percentage of Frame: 100 [ 257.397600][ T9473] vivid-000: Horizontal Movement: No Movement [ 257.403778][ T9473] vivid-000: Vertical Movement: No Movement [ 257.409802][ T9473] vivid-000: OSD Text Mode: All [ 257.414742][ T9473] vivid-000: Show Border: false [ 257.419698][ T9473] vivid-000: Show Square: false [ 257.424636][ T9473] vivid-000: Sensor Flipped Horizontally: false [ 257.430996][ T9473] vivid-000: Sensor Flipped Vertically: false [ 257.437156][ T9473] vivid-000: Insert SAV Code in Image: false [ 257.443488][ T9473] vivid-000: Insert EAV Code in Image: false [ 257.449789][ T9473] vivid-000: Insert Video Guard Band: false [ 257.455776][ T9473] vivid-000: Reduced Framerate: false [ 257.461259][ T9473] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 257.491349][ T9473] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 257.499365][ T9473] vivid-000: Enable Capture Cropping: true [ 257.505255][ T9473] vivid-000: Enable Capture Composing: true [ 257.511247][ T9473] vivid-000: Enable Capture Scaler: true [ 257.516976][ T9473] vivid-000: Timestamp Source: End of Frame [ 257.522992][ T9473] vivid-000: Colorspace: Rec. 709 [ 257.528097][ T9473] vivid-000: Transfer Function: Default [ 257.533761][ T9473] vivid-000: Y'CbCr Encoding: Default [ 257.539290][ T9473] vivid-000: HSV Encoding: Hue 0-179 [ 257.544915][ T9473] vivid-000: Quantization: Default [ 257.550421][ T9473] vivid-000: Apply Alpha To Red Only: false [ 257.556362][ T9473] vivid-000: Standard Aspect Ratio: 4x3 [ 257.561946][ T9473] vivid-000: DV Timings Signal Mode: Current DV Timings [ 257.568914][ T9473] vivid-000: DV Timings: 640x480p59 inactive [ 257.574902][ T9473] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 257.582244][ T9473] vivid-000: Maximum EDID Blocks: 2 [ 257.587450][ T9473] vivid-000: Limited RGB Range (16-235): true [ 257.593540][ T9473] vivid-000: Rx RGB Quantization Range: Automatic [ 257.600016][ T9473] vivid-000: Power Present: 0x00000001 [ 257.605479][ T9473] tpg source WxH: 1280x720 (Y'CbCr) [ 257.610664][ T9473] tpg field: 1 [ 257.614009][ T9473] tpg crop: (0,0)/1280x720 [ 257.618419][ T9473] tpg compose: (0,0)/1280x720 [ 257.623077][ T9473] tpg colorspace: 3 [ 257.626852][ T9473] tpg transfer function: 0/0 [ 257.631427][ T9473] tpg Y'CbCr encoding: 0/0 [ 257.635808][ T9473] tpg quantization: 0/0 [ 257.639944][ T9473] tpg RGB range: 0/1 [ 257.643805][ T9473] vivid-000: ================== END STATUS ================== [ 257.759251][ T43] usb 5-1: USB disconnect, device number 23 [ 258.087922][ T30] audit: type=1400 audit(1754825245.681:402): avc: denied { ioctl } for pid=9477 comm="syz.4.1026" path="socket:[19972]" dev="sockfs" ino=19972 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.178263][ T5959] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 260.700150][ T5959] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.751018][ T5959] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 260.834625][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.891480][ T5959] usb 6-1: config 0 descriptor?? [ 260.896261][ T30] audit: type=1400 audit(1754825248.521:403): avc: denied { map } for pid=9506 comm="syz.3.1030" path="socket:[19349]" dev="sockfs" ino=19349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 260.986907][ T30] audit: type=1400 audit(1754825248.551:404): avc: denied { read } for pid=9506 comm="syz.3.1030" path="socket:[19349]" dev="sockfs" ino=19349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 261.009922][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.027498][ T5959] pwc: Askey VC010 type 2 USB webcam detected. [ 261.502496][ T5959] pwc: recv_control_msg error -32 req 02 val 2b00 [ 261.579502][ T5959] pwc: recv_control_msg error -32 req 02 val 2700 [ 261.591177][ T5959] pwc: recv_control_msg error -32 req 02 val 2c00 [ 261.618775][ T5959] pwc: recv_control_msg error -32 req 04 val 1000 [ 261.693101][ T9516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.712784][ T9516] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 262.051526][ T5959] pwc: recv_control_msg error -32 req 04 val 1300 [ 262.108700][ T5959] pwc: recv_control_msg error -32 req 04 val 1400 [ 262.148278][ T5959] pwc: recv_control_msg error -32 req 02 val 2000 [ 262.288343][ T5959] pwc: recv_control_msg error -32 req 02 val 2100 [ 262.300777][ T5959] pwc: recv_control_msg error -32 req 04 val 1500 [ 262.319636][ T5959] pwc: recv_control_msg error -32 req 02 val 2500 [ 262.441853][ T30] audit: type=1400 audit(1754825250.071:405): avc: denied { read write } for pid=9521 comm="syz.0.1033" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.462886][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.490881][ T9522] netfs: Couldn't get user pages (rc=-14) [ 262.540520][ T5959] pwc: recv_control_msg error -71 req 02 val 2600 [ 262.556488][ T5959] pwc: recv_control_msg error -71 req 02 val 2900 [ 262.557237][ T30] audit: type=1400 audit(1754825250.071:406): avc: denied { open } for pid=9521 comm="syz.0.1033" path="/199/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.575282][ T5959] pwc: recv_control_msg error -71 req 02 val 2800 [ 262.652978][ T5959] pwc: recv_control_msg error -71 req 04 val 1100 [ 262.675996][ T5959] pwc: recv_control_msg error -71 req 04 val 1200 [ 262.734785][ T5959] pwc: Registered as video103. [ 262.827035][ T5959] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 262.893620][ T30] audit: type=1326 audit(1754825250.521:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.1034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f4078ebe9 code=0x0 [ 263.325721][ T5959] usb 6-1: USB disconnect, device number 3 [ 263.613168][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1038'. [ 264.316208][ T30] audit: type=1400 audit(1754825251.941:408): avc: denied { write } for pid=9551 comm="syz.4.1042" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 264.365768][ T9563] syzkaller0: entered promiscuous mode [ 264.422154][ T9563] syzkaller0: entered allmulticast mode [ 267.601239][ T30] audit: type=1400 audit(1754825255.221:409): avc: denied { bind } for pid=9607 comm="syz.4.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 268.010903][ T30] audit: type=1400 audit(1754825255.641:410): avc: denied { write } for pid=9611 comm="syz.1.1053" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 268.789187][ T5959] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 269.067143][ T5959] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.363187][ T5959] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.369257][ T9639] tipc: Enabled bearer , priority 0 [ 269.821386][ T9643] tipc: Resetting bearer [ 269.843495][ T9638] tipc: Disabling bearer [ 269.849514][ T5959] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 269.860632][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 269.868963][ T5959] usb 6-1: Product: syz [ 269.886940][ T5959] usb 6-1: Manufacturer: syz [ 269.896086][ T5959] usb 6-1: SerialNumber: syz [ 269.913716][ T5959] usb 6-1: config 0 descriptor?? [ 270.328339][ T5959] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 270.689830][ T5959] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.709402][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 270.721495][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 270.733508][ T5959] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.748171][ T5959] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.764917][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.790101][ T5959] usb 2-1: config 0 descriptor?? [ 270.841825][ T9650] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 271.679221][ T5959] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 271.724381][ T5959] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 271.738658][ T5959] usb 2-1: USB disconnect, device number 14 [ 272.518373][ T9670] fido_id[9670]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 272.580509][ T5959] usb 6-1: USB disconnect, device number 4 [ 275.061826][ T30] audit: type=1400 audit(1754825262.691:411): avc: denied { read } for pid=9719 comm="syz.4.1085" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 275.100457][ T30] audit: type=1400 audit(1754825262.721:412): avc: denied { open } for pid=9719 comm="syz.4.1085" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 275.159178][ T9721] binder_alloc: 9716: binder_alloc_buf, no vma [ 275.297356][ T9724] virtio-fs: tag not found [ 275.384696][ T7137] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 275.598405][ T7137] usb 5-1: Using ep0 maxpacket: 8 [ 275.604966][ T7137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.618327][ T30] audit: type=1400 audit(1754825263.241:413): avc: denied { create } for pid=9725 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 275.637901][ T7137] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 275.637926][ T7137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.640640][ T7137] usb 5-1: config 0 descriptor?? [ 275.812994][ T9731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.820244][ T9731] IPv6: NLM_F_CREATE should be set when creating new route [ 275.827817][ T30] audit: type=1400 audit(1754825263.241:414): avc: denied { setopt } for pid=9725 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 275.944960][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1088'. [ 275.961701][ T30] audit: type=1400 audit(1754825263.241:415): avc: denied { connect } for pid=9725 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 276.359355][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 276.427353][ T7137] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 276.438942][ T9730] fuse: Unknown parameter '0x0000000000000008' [ 276.885098][ T9758] binder_alloc: 9757: binder_alloc_buf, no vma [ 277.015694][ T30] audit: type=1400 audit(1754825264.641:416): avc: denied { append } for pid=9719 comm="syz.4.1085" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.041140][ T7137] usb 5-1: USB disconnect, device number 24 [ 278.064460][ T9771] binder: 9767:9771 ioctl c0306201 0 returned -14 [ 278.071695][ T9771] binder_alloc: 9767: binder_alloc_buf, no vma [ 280.332918][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1110'. [ 283.464422][ T9847] syzkaller0: entered promiscuous mode [ 283.470015][ T9847] syzkaller0: entered allmulticast mode [ 286.474717][ T9900] binder: BINDER_SET_CONTEXT_MGR already set [ 286.483671][ T9900] binder: 9898:9900 ioctl 4018620d 2000000002c0 returned -16 [ 286.537060][ T9900] binder: 9898:9900 ioctl c0306201 200000000240 returned -11 [ 286.757583][ T9909] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1129'. [ 287.568271][ T5959] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 287.730484][ T5959] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.765219][ T5959] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.978582][ T5959] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.987630][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.049818][ T9930] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 288.248242][ T30] audit: type=1804 audit(1754825275.671:417): pid=9930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1135" name="/newroot/220/file0" dev="tmpfs" ino=1137 res=1 errno=0 [ 288.382746][ T9930] ref_ctr increment failed for inode: 0x471 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880750460c0 [ 288.474881][ T9915] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 288.490714][ T5959] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.783303][ T5959] usb 2-1: USB disconnect, device number 15 [ 289.001063][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.024283][ T7136] IPVS: starting estimator thread 0... [ 290.228266][ T9971] IPVS: using max 36 ests per chain, 86400 per kthread [ 292.079470][ T30] audit: type=1400 audit(1754825279.241:418): avc: denied { getopt } for pid=9990 comm="syz.4.1148" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 293.119218][T10007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1152'. [ 294.203194][ T30] audit: type=1400 audit(1754825281.811:419): avc: denied { read append } for pid=10016 comm="syz.5.1154" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 294.321589][ T30] audit: type=1400 audit(1754825281.821:420): avc: denied { open } for pid=10016 comm="syz.5.1154" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 295.361753][T10050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.468591][ T5959] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 296.618372][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 297.763026][ T5959] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 297.828090][ T5959] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.858147][ T5959] usb 4-1: config 0 has no interface number 0 [ 297.866260][ T5959] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 297.875511][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.885276][ T5959] usb 4-1: config 0 descriptor?? [ 297.909446][ T5959] ldusb 4-1:0.55: Interrupt in endpoint not found [ 298.131118][ T6028] usb 4-1: USB disconnect, device number 17 [ 298.328274][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 298.338721][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 298.913955][T10098] tipc: Enabling of bearer rejected, failed to enable media [ 298.982271][T10098] syzkaller0: entered promiscuous mode [ 299.018759][T10098] syzkaller0: entered allmulticast mode [ 300.921120][ T30] audit: type=1400 audit(1754825288.261:421): avc: denied { kexec_image_load } for pid=10135 comm="syz.4.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 301.309688][ T7924] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 301.473262][ T7924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.483749][ T7924] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 301.500509][ T7924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.544648][ T7924] usb 6-1: config 0 descriptor?? [ 301.748358][ T5959] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 301.758486][ T7924] pwc: Askey VC010 type 2 USB webcam detected. [ 301.900863][ T5959] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 301.979455][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.077999][ T5959] usb 5-1: config 0 has no interface number 0 [ 302.086165][ T5959] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 302.098666][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.176560][ T7924] pwc: recv_control_msg error -32 req 02 val 2b00 [ 302.231155][ T7924] pwc: recv_control_msg error -32 req 02 val 2700 [ 302.238953][ T7924] pwc: recv_control_msg error -32 req 02 val 2c00 [ 302.251333][ T7924] pwc: recv_control_msg error -32 req 04 val 1000 [ 302.259247][ T7924] pwc: recv_control_msg error -32 req 04 val 1300 [ 302.276995][ T7924] pwc: recv_control_msg error -32 req 04 val 1400 [ 302.279434][ T5959] usb 5-1: Product: syz [ 302.284040][ T7924] pwc: recv_control_msg error -32 req 02 val 2000 [ 302.290893][ T5959] usb 5-1: Manufacturer: syz [ 302.295037][ T7924] pwc: recv_control_msg error -32 req 02 val 2100 [ 302.309374][ T5959] usb 5-1: SerialNumber: syz [ 302.316091][ T7924] pwc: recv_control_msg error -32 req 04 val 1500 [ 302.323610][ T7924] pwc: recv_control_msg error -32 req 02 val 2500 [ 302.331018][ T7924] pwc: recv_control_msg error -32 req 02 val 2400 [ 302.334677][ T5959] usb 5-1: config 0 descriptor?? [ 302.343282][ T7924] pwc: recv_control_msg error -71 req 02 val 2600 [ 302.385510][ T7924] pwc: recv_control_msg error -71 req 02 val 2900 [ 302.389877][ T5959] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 302.403336][ T7924] pwc: recv_control_msg error -71 req 02 val 2800 [ 302.403813][ T5959] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 302.441193][ T7924] pwc: recv_control_msg error -71 req 04 val 1100 [ 302.567909][ T7924] pwc: recv_control_msg error -71 req 04 val 1200 [ 302.602203][ T7924] pwc: Registered as video103. [ 302.690579][ T7924] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input22 [ 302.701922][ T5959] usb 5-1: USB disconnect, device number 25 [ 302.704163][ T7924] usb 6-1: USB disconnect, device number 5 [ 304.217257][T10202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.236620][T10202] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 305.298076][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1203'. [ 305.352557][T10223] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10223 comm=syz.5.1203 [ 305.541094][ T5956] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 305.751320][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.765881][ T5956] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 305.776762][ T5956] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 305.786085][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.804638][ T5956] usb 4-1: config 0 descriptor?? [ 305.836939][ T5956] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 305.864077][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 306.012405][ T5956] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 306.048930][ T5956] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 306.056424][ T5956] usb 4-1: media controller created [ 306.063412][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.085586][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 306.096482][ T5956] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 306.270381][T10238] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1206'. [ 306.323566][T10218] dibusb: i2c wr: len=61 is too big! [ 306.323566][T10218] [ 306.333033][ T5956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 306.443241][ T5956] dvb-usb: schedule remote query interval to 150 msecs. [ 306.519600][ T5956] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 306.749076][ T7924] dvb-usb: bulk message failed: -22 (1/0) [ 306.770970][ T7924] dvb-usb: error while querying for an remote control event. [ 307.323764][ T7924] dvb-usb: bulk message failed: -22 (1/0) [ 307.329722][ T7924] dvb-usb: error while querying for an remote control event. [ 307.378308][ T5956] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 308.210230][ T7924] dvb-usb: bulk message failed: -22 (1/0) [ 308.278239][ T7924] dvb-usb: error while querying for an remote control event. [ 308.427338][ T5956] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.504028][ T5956] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 308.534549][ T5956] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.545535][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 308.558736][ T7924] dvb-usb: bulk message failed: -22 (1/0) [ 308.564464][ T7924] dvb-usb: error while querying for an remote control event. [ 308.582180][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.590299][T10263] tunl0: left allmulticast mode [ 308.638143][T10238] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 308.695641][ T5956] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.699203][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1216'. [ 308.770088][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 308.779051][ T5956] dvb-usb: error while querying for an remote control event. [ 308.831017][T10271] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10271 comm=syz.0.1216 [ 308.949064][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 308.954794][ T5956] dvb-usb: error while querying for an remote control event. [ 308.965764][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 308.993792][ T5959] usb 4-1: USB disconnect, device number 18 [ 309.038469][ T5959] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 309.147385][ T30] audit: type=1400 audit(1754825296.771:422): avc: denied { watch_mount watch_reads } for pid=10273 comm="syz.3.1218" path="/268" dev="tmpfs" ino=1379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 309.331181][ T5959] usb 2-1: USB disconnect, device number 16 [ 309.542485][T10286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1222'. [ 310.899771][ T5959] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 311.089388][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1229'. [ 311.223254][ T5959] usb 2-1: device descriptor read/64, error -71 [ 311.783399][ T30] audit: type=1400 audit(1754825298.981:423): avc: denied { connect } for pid=10304 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 311.904311][T10308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10308 comm=syz.5.1229 [ 312.228268][ T5959] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 312.388276][ T7132] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 312.395917][ T5959] usb 2-1: device descriptor read/64, error -71 [ 312.518873][ T5959] usb usb2-port1: attempt power cycle [ 312.558267][ T5956] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 312.610002][ T7132] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.620289][ T7132] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 312.639400][ T7132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.729931][ T7132] usb 5-1: config 0 descriptor?? [ 312.757797][ T7132] pwc: Askey VC010 type 2 USB webcam detected. [ 312.788323][ T5956] usb 6-1: Using ep0 maxpacket: 8 [ 312.798787][ T5956] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 312.806890][ T5956] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.868307][ T5959] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 312.891953][ T5959] usb 2-1: device descriptor read/8, error -71 [ 312.905609][ T5956] usb 6-1: config 0 has no interface number 0 [ 312.948259][ T5956] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.961988][ T5956] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.977343][ T5956] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 313.006401][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.134992][ T5956] usb 6-1: config 0 descriptor?? [ 313.148436][ T5956] ldusb 6-1:0.55: Interrupt in endpoint not found [ 313.148841][ T7132] pwc: recv_control_msg error -32 req 02 val 2b00 [ 313.161404][ T5959] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 313.170147][ T7132] pwc: recv_control_msg error -32 req 02 val 2700 [ 313.179718][ T7132] pwc: recv_control_msg error -32 req 02 val 2c00 [ 313.186545][ T7132] pwc: recv_control_msg error -32 req 04 val 1000 [ 313.193040][ T7136] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 313.202632][ T7132] pwc: recv_control_msg error -32 req 04 val 1300 [ 313.209906][ T7132] pwc: recv_control_msg error -32 req 04 val 1400 [ 313.217329][ T7132] pwc: recv_control_msg error -32 req 02 val 2000 [ 313.225916][ T7132] pwc: recv_control_msg error -32 req 02 val 2100 [ 313.233587][ T7132] pwc: recv_control_msg error -32 req 04 val 1500 [ 313.242189][ T7132] pwc: recv_control_msg error -32 req 02 val 2500 [ 313.255832][ T7132] pwc: recv_control_msg error -32 req 02 val 2400 [ 313.266308][ T7132] pwc: recv_control_msg error -71 req 02 val 2600 [ 313.278699][ T5959] usb 2-1: device descriptor read/8, error -71 [ 313.303966][ T7132] pwc: recv_control_msg error -71 req 02 val 2900 [ 313.319922][ T7132] pwc: recv_control_msg error -71 req 02 val 2800 [ 313.340169][ T7132] pwc: recv_control_msg error -71 req 04 val 1100 [ 313.370710][ T7135] usb 6-1: USB disconnect, device number 6 [ 313.379691][ T7136] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.392453][ T5959] usb usb2-port1: unable to enumerate USB device [ 313.398894][ T7132] pwc: recv_control_msg error -71 req 04 val 1200 [ 313.436909][ T7132] pwc: Registered as video103. [ 313.455109][ T7136] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 313.504369][ T7132] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 313.515414][ T7136] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.528997][ T7132] usb 5-1: USB disconnect, device number 26 [ 313.535536][ T7136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.575128][ T7136] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.597760][ T7136] usb 4-1: invalid MIDI out EP 0 [ 313.736953][ T7136] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 313.793010][ T6124] udevd[6124]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.625917][T10375] tipc: Enabling of bearer rejected, failed to enable media [ 316.653112][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.660413][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.898482][ T5956] usb 4-1: USB disconnect, device number 19 [ 317.827772][T10410] syzkaller0: entered promiscuous mode [ 317.835047][T10410] syzkaller0: entered allmulticast mode [ 318.088711][ T6028] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 318.258221][ T6028] usb 2-1: Using ep0 maxpacket: 8 [ 318.265222][ T6028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.240638][ T6028] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 319.250539][ T6028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.497895][ T6028] usb 2-1: config 0 descriptor?? [ 320.135290][ T6028] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 320.272553][ T6028] usb 2-1: USB disconnect, device number 21 [ 323.156542][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1272'. [ 323.343466][T10506] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10506 comm=syz.3.1272 [ 324.959098][ T30] audit: type=1400 audit(1754825312.581:424): avc: denied { ioctl } for pid=10530 comm="syz.4.1280" path="/dev/ttyqd" dev="devtmpfs" ino=388 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 324.984138][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.716574][T10549] tipc: Enabled bearer , priority 0 [ 325.745366][T10549] tipc: Resetting bearer [ 326.145153][T10547] tipc: Disabling bearer [ 327.094965][T10559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.083980][T10586] siw: device registration error -23 [ 328.588296][T10591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1297'. [ 329.213452][T10591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10591 comm=syz.3.1297 [ 329.238409][ T7132] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 329.369878][ T30] audit: type=1400 audit(1754825316.991:425): avc: denied { shutdown } for pid=10594 comm="syz.4.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 329.390004][ T30] audit: type=1400 audit(1754825317.001:426): avc: denied { write } for pid=10594 comm="syz.4.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 329.582248][ T7132] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.592403][ T7132] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.605573][ T7132] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 329.614869][ T7132] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 329.638149][ T7132] usb 2-1: Product: syz [ 329.652480][ T7132] usb 2-1: Manufacturer: syz [ 329.666926][ T7132] usb 2-1: SerialNumber: syz [ 329.684358][ T7132] usb 2-1: config 0 descriptor?? [ 331.702402][T10628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1310'. [ 331.713586][ T6028] usb 2-1: USB disconnect, device number 22 [ 331.794340][T10628] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10628 comm=syz.0.1310 [ 332.098852][T10637] ubi: mtd0 is already attached to ubi31 [ 332.425818][T10645] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1316'. [ 332.713953][T10656] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1317'. [ 332.988376][ T7132] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 333.260210][ T7132] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 333.271321][ T7132] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 333.281455][ T7132] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 333.417865][ T7132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.564502][T10656] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.583084][ T7132] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 333.684262][ T6124] udevd[6124]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 333.868701][ T7132] usb 6-1: USB disconnect, device number 7 [ 333.960037][T10672] siw: device registration error -23 [ 334.916917][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1325'. [ 335.004980][T10680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1324'. [ 335.099533][T10680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10680 comm=syz.3.1324 [ 335.113750][ T30] audit: type=1400 audit(1754825322.731:427): avc: denied { lock } for pid=10679 comm="syz.3.1324" path="socket:[24158]" dev="sockfs" ino=24158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 335.167405][ T30] audit: type=1400 audit(1754825322.771:428): avc: denied { write } for pid=10679 comm="syz.3.1324" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 335.871740][T10690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1327'. [ 336.858380][ T7137] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 337.178260][ T7137] usb 5-1: Using ep0 maxpacket: 8 [ 337.187639][ T7137] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 337.613033][ T30] audit: type=1400 audit(1754825324.841:429): avc: denied { read } for pid=10708 comm="syz.3.1331" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 337.636775][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.699047][ T7137] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.760464][ T7137] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.897163][ T7137] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.915468][ T30] audit: type=1400 audit(1754825324.841:430): avc: denied { open } for pid=10708 comm="syz.3.1331" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 337.942205][ T7137] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.028066][ T7137] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.113589][T10728] siw: device registration error -23 [ 338.216908][ T7137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.239926][ T30] audit: type=1400 audit(1754825324.851:431): avc: denied { ioctl } for pid=10708 comm="syz.3.1331" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 338.266578][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.762385][ T7137] usb 5-1: usb_control_msg returned -32 [ 338.768000][ T7137] usbtmc 5-1:16.0: can't read capabilities [ 339.429330][T10738] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 339.639011][ T7137] usb 5-1: USB disconnect, device number 27 [ 340.758671][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 340.819561][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 341.168404][ T6028] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 341.260783][ T7132] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 341.392323][T10774] vivid-000: ================= START STATUS ================= [ 341.400050][T10774] vivid-000: Test Pattern: 75% Colorbar [ 341.405694][T10774] vivid-000: Fill Percentage of Frame: 100 [ 341.411931][T10774] vivid-000: Horizontal Movement: No Movement [ 341.418082][T10774] vivid-000: Vertical Movement: No Movement [ 341.424315][T10774] vivid-000: OSD Text Mode: All [ 341.429297][T10774] vivid-000: Show Border: false [ 341.434253][T10774] vivid-000: Show Square: false [ 341.439202][T10774] vivid-000: Sensor Flipped Horizontally: false [ 341.445556][T10774] vivid-000: Sensor Flipped Vertically: false [ 341.451756][T10774] vivid-000: Insert SAV Code in Image: false [ 341.457828][T10774] vivid-000: Insert EAV Code in Image: false [ 341.463926][T10774] vivid-000: Insert Video Guard Band: false [ 341.469915][T10774] vivid-000: Reduced Framerate: false [ 341.475376][T10774] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 341.506164][T10774] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 341.514551][T10774] vivid-000: Enable Capture Cropping: true [ 341.520665][T10774] vivid-000: Enable Capture Composing: true [ 341.526650][T10774] vivid-000: Enable Capture Scaler: true [ 341.532397][T10774] vivid-000: Timestamp Source: End of Frame [ 341.538423][T10774] vivid-000: Colorspace: Rec. 709 [ 341.543508][T10774] vivid-000: Transfer Function: Default [ 341.549156][T10774] vivid-000: Y'CbCr Encoding: Default [ 341.554608][T10774] vivid-000: HSV Encoding: Hue 0-179 [ 341.560020][T10774] vivid-000: Quantization: Default [ 341.565226][T10774] vivid-000: Apply Alpha To Red Only: false [ 341.571310][T10774] vivid-000: Standard Aspect Ratio: 4x3 [ 341.576918][T10774] vivid-000: DV Timings Signal Mode: Current DV Timings [ 341.583926][T10774] vivid-000: DV Timings: 640x480p59 inactive [ 341.589977][T10774] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 341.597268][T10774] vivid-000: Maximum EDID Blocks: 2 [ 341.602513][T10774] vivid-000: Limited RGB Range (16-235): true [ 341.608706][T10774] vivid-000: Rx RGB Quantization Range: Automatic [ 341.615631][T10774] vivid-000: Power Present: 0x00000001 [ 341.621137][T10774] tpg source WxH: 1280x720 (Y'CbCr) [ 341.626323][T10774] tpg field: 1 [ 341.629707][T10774] tpg crop: (0,0)/1280x720 [ 341.634129][T10774] tpg compose: (0,0)/1280x720 [ 341.638820][T10774] tpg colorspace: 3 [ 341.642619][T10774] tpg transfer function: 0/0 [ 341.647188][T10774] tpg Y'CbCr encoding: 0/0 [ 341.651599][T10774] tpg quantization: 0/0 [ 341.655732][T10774] tpg RGB range: 0/1 [ 341.659609][T10774] vivid-000: ================== END STATUS ================== [ 341.673524][ T6028] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.704808][ T6028] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.719375][ T7132] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 341.727916][ T6028] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 341.739960][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 341.744083][ T7132] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.760545][ T6028] usb 4-1: Product: syz [ 341.764744][ T6028] usb 4-1: Manufacturer: syz [ 341.770844][ T6028] usb 4-1: SerialNumber: syz [ 341.778327][ T7132] usb 6-1: config 0 has no interface number 0 [ 341.796452][ T6028] usb 4-1: config 0 descriptor?? [ 341.803342][ T7132] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 341.847881][ T7132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.877756][ T7132] usb 6-1: Product: syz [ 341.941346][ T7132] usb 6-1: Manufacturer: syz [ 341.945995][ T7132] usb 6-1: SerialNumber: syz [ 341.970080][ T7132] usb 6-1: config 0 descriptor?? [ 341.982385][ T7132] ims_pcu 6-1:0.41: Missing CDC union descriptor [ 341.990187][ T7132] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 342.798979][ T7137] usb 6-1: USB disconnect, device number 8 [ 342.847186][T10785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.508301][ T7135] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 343.541937][ T6028] usb 4-1: USB disconnect, device number 20 [ 343.661008][ T7135] usb 2-1: Using ep0 maxpacket: 8 [ 343.669434][ T7135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.688152][T10797] syzkaller0: entered promiscuous mode [ 343.693720][ T7135] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 343.704945][ T7135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.716604][ T7135] usb 2-1: config 0 descriptor?? [ 343.733361][T10797] syzkaller0: entered allmulticast mode [ 343.928411][ T7135] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 344.523479][ T7135] usb 2-1: USB disconnect, device number 23 [ 345.009796][ T30] audit: type=1400 audit(1754825332.251:432): avc: denied { setopt } for pid=10807 comm="syz.3.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 345.077158][T10815] ubi: mtd0 is already attached to ubi31 [ 345.603091][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1361'. [ 345.639926][T10825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.083274][T10851] ubi: mtd0 is already attached to ubi31 [ 348.139756][ T5956] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 348.458230][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 348.459674][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.196622][ T5956] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 349.204092][ T30] audit: type=1400 audit(1754825336.011:433): avc: denied { write } for pid=10866 comm="syz.1.1375" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 349.214963][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.260918][ T5956] usb 4-1: config 0 descriptor?? [ 349.912322][ T5956] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 351.134156][ T6028] usb 4-1: USB disconnect, device number 21 [ 351.416970][T10898] ubi: mtd0 is already attached to ubi31 [ 351.427842][T10900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.493105][ T30] audit: type=1400 audit(1754825339.121:434): avc: denied { write } for pid=10901 comm="syz.0.1387" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 351.620055][T10903] sg_write: data in/out 16777180/10 bytes for SCSI command 0xfd-- guessing data in; [ 351.620055][T10903] program syz.0.1387 not setting count and/or reply_len properly [ 354.341995][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'. [ 354.398665][ T7132] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffc000: 0000 [#1] SMP KASAN NOPTI [ 354.410728][ T7132] KASAN: probably user-memory-access in range [0x00000000fffe0000-0x00000000fffe0007] [ 354.420253][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: kworker/0:12 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 354.432031][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.442060][ T7132] Workqueue: mld mld_ifc_work [ 354.446719][ T7132] RIP: 0010:add_grec+0xac4/0x1720 [ 354.451719][ T7132] Code: a2 da 70 f7 e8 dd 88 48 01 31 ff 41 89 c5 89 c6 e8 d1 d5 70 f7 45 85 ed 0f 85 76 02 00 00 e8 83 da 70 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 2d 0a 00 00 48 8b 7c 24 70 44 8b 44 24 64 4c [ 354.471303][ T7132] RSP: 0018:ffffc9001a8c7ae0 EFLAGS: 00010206 [ 354.477346][ T7132] RAX: 000000001fffc000 RBX: 0000000000000000 RCX: ffffffff8a4abb35 [ 354.485290][ T7132] RDX: ffff888079670000 RSI: ffffffff8a4ab89d RDI: 0000000000000005 [ 354.493237][ T7132] RBP: ffffc9001a8c7be8 R08: 0000000000000005 R09: 0000000000000000 [ 354.501183][ T7132] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 354.509129][ T7132] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffe0000 [ 354.517075][ T7132] FS: 0000000000000000(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 [ 354.525979][ T7132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.532541][ T7132] CR2: 0000200000000580 CR3: 0000000058c7f000 CR4: 00000000003526f0 [ 354.540489][ T7132] Call Trace: [ 354.543744][ T7132] [ 354.546652][ T7132] ? __lock_acquire+0xb97/0x1ce0 [ 354.551573][ T7132] ? __pfx_add_grec+0x10/0x10 [ 354.556227][ T7132] mld_ifc_work+0x392/0xbf0 [ 354.560708][ T7132] process_one_work+0x9cc/0x1b70 [ 354.565624][ T7132] ? __pfx_process_one_work+0x10/0x10 [ 354.570973][ T7132] ? assign_work+0x1a0/0x250 [ 354.575536][ T7132] worker_thread+0x6c8/0xf10 [ 354.580105][ T7132] ? __kthread_parkme+0x19e/0x250 [ 354.585108][ T7132] ? __pfx_worker_thread+0x10/0x10 [ 354.590194][ T7132] kthread+0x3c5/0x780 [ 354.594238][ T7132] ? __pfx_kthread+0x10/0x10 [ 354.598801][ T7132] ? rcu_is_watching+0x12/0xc0 [ 354.603544][ T7132] ? __pfx_kthread+0x10/0x10 [ 354.608109][ T7132] ret_from_fork+0x5d7/0x6f0 [ 354.612672][ T7132] ? __pfx_kthread+0x10/0x10 [ 354.617236][ T7132] ret_from_fork_asm+0x1a/0x30 [ 354.621980][ T7132] [ 354.624974][ T7132] Modules linked in: [ 354.629071][ T7132] ---[ end trace 0000000000000000 ]--- [ 354.664267][T10946] syz.3.1400 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 354.681981][ T30] audit: type=1400 audit(1754825342.311:435): avc: denied { read } for pid=5199 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 354.684064][ T7132] RIP: 0010:add_grec+0xac4/0x1720 [ 354.715020][ T7132] Code: a2 da 70 f7 e8 dd 88 48 01 31 ff 41 89 c5 89 c6 e8 d1 d5 70 f7 45 85 ed 0f 85 76 02 00 00 e8 83 da 70 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 2d 0a 00 00 48 8b 7c 24 70 44 8b 44 24 64 4c [ 354.740569][ T7132] RSP: 0018:ffffc9001a8c7ae0 EFLAGS: 00010206 [ 354.746635][ T7132] RAX: 000000001fffc000 RBX: 0000000000000000 RCX: ffffffff8a4abb35 [ 354.754773][ T7132] RDX: ffff888079670000 RSI: ffffffff8a4ab89d RDI: 0000000000000005 [ 354.762912][ T7132] RBP: ffffc9001a8c7be8 R08: 0000000000000005 R09: 0000000000000000 [ 354.765197][ T30] audit: type=1400 audit(1754825342.311:436): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.770978][ T7132] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 354.770991][ T7132] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffe0000 [ 354.771002][ T7132] FS: 0000000000000000(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 [ 354.771019][ T7132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.796850][ T30] audit: type=1400 audit(1754825342.311:437): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.800737][ T7132] CR2: 00007ffffd9e1b18 CR3: 000000007aff5000 CR4: 00000000003526f0 [ 354.808425][ T30] audit: type=1400 audit(1754825342.311:438): avc: denied { add_name } for pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.808455][ T30] audit: type=1400 audit(1754825342.311:439): avc: denied { create } for pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 354.808483][ T30] audit: type=1400 audit(1754825342.311:440): avc: denied { append open } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 354.817582][ T7132] Kernel panic - not syncing: Fatal exception [ 354.824105][ T7132] Kernel Offset: disabled