last executing test programs: 19.787376921s ago: executing program 1 (id=2559): getpid() r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0xc8bbf2a48522880d, 0x4, 0x40, 0x0, 0xf}) 19.269631114s ago: executing program 1 (id=2563): syz_usb_connect(0x5, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8e240, 0x89) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f00000010c0), 0x1}) 17.627269958s ago: executing program 1 (id=2569): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2045}}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) 17.560542041s ago: executing program 1 (id=2570): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xa002c000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x64266}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000102c0)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x20000000000, {0x6, 0xffffffffffffffff, 0xffff, 0xff, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, r2, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.413065711s ago: executing program 1 (id=2574): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x10, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 17.303800595s ago: executing program 1 (id=2575): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 7.275728618s ago: executing program 2 (id=2618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000001c0)=[{0x0, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xf0, 0x4}}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 7.180549691s ago: executing program 2 (id=2621): io_uring_setup(0x3185, &(0x7f0000001500)={0x0, 0xd3d0, 0x1000, 0xfffffffe, 0x345}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x5, 0x1312c2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0xf0200e7, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f027, 0x0, '\x00', @p_u8=0x0}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x320) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd700000000000040000004803"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000001b80)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) getsockopt$inet6_tcp_buf(r6, 0x6, 0x8, 0x0, &(0x7f0000001040)) write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2) r7 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x2, 0x345}) io_uring_enter(r7, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) socket$nl_generic(0x10, 0x3, 0x10) 5.703187373s ago: executing program 2 (id=2631): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_uring_setup(0x5755, &(0x7f0000000a80)={0x0, 0x84d1, 0x40, 0x3, 0x21b}) read(r1, &(0x7f0000000380)=""/144, 0x90) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.184304327s ago: executing program 3 (id=2637): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) r4 = syz_open_dev$audion(&(0x7f00000000c0), 0x2, 0x80) getsockopt$nfc_llcp(r4, 0x118, 0x4, &(0x7f00000001c0)=""/249, 0xf9) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 4.930267285s ago: executing program 3 (id=2638): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x180}], 0x1, 0x32) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0xc0844123, &(0x7f0000000180)=0x5) 3.40139044s ago: executing program 4 (id=2642): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3.348543405s ago: executing program 4 (id=2643): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002d40)=ANY=[@ANYBLOB="4c0000001200050926bd7000fddbdf25250904024e224e22fbffffffff000000090000000500000099dd000005000000fe1f000056ffff", @ANYRES32=0x0, @ANYBLOB="3ee6ffffff0f108c9e06"], 0x4c}, 0x1, 0x0, 0x0, 0x22004014}, 0x800) 3.044338249s ago: executing program 0 (id=2646): connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}, 0x1c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000004c0)={0xfffffff8, 0x100401, 0xfffffffd, 0xc4cf, 0x7, "000008010000000000000000eeffffff00", 0x7, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x1) 3.000756713s ago: executing program 0 (id=2647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) 2.935588855s ago: executing program 0 (id=2648): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac470313f34be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000be3db6d3c8cfbbe58e319d9df80c7883aea9e83f6912964cdc3fcf75770bd42c308451be1acca0fea31a2102f1453e4b8e945a0dcda7c1a1bcfabba91c51af24c4ce7e41cec31946b2b81a1f5507bea284ce04f008a9961f04b85a2ba94b0912", 0xa1}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b86b75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a000"/46, 0x2e}, {&(0x7f00000001c0)="001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794", 0x31}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2bf5ab37e54f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc04996360958ba3211eb98a588884c2226636de8f1a6e399df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd00000000322c8f79", 0xaf}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0600287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a", 0x75}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03eab6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.898182639s ago: executing program 0 (id=2649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.65341284s ago: executing program 2 (id=2650): bind$alg(0xffffffffffffffff, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r2, 0x48334cf00147764d, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044880}, 0x20000000) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x43, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009"], 0x0) 2.208568118s ago: executing program 32 (id=2575): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 2.198750335s ago: executing program 4 (id=2652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000280)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.932823758s ago: executing program 4 (id=2653): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 1.89102675s ago: executing program 3 (id=2654): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x115203, 0x7e) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 1.795046735s ago: executing program 0 (id=2655): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x1, 0xa000200000a958, 0x4276, 0x7ff, 0x8, 0x100, 0xfffffffffffffffc, 0x100fff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.585160077s ago: executing program 3 (id=2656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x50}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.493145872s ago: executing program 0 (id=2657): bind$alg(0xffffffffffffffff, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r2, 0x48334cf00147764d, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044880}, 0x20000000) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x43, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) 940.76979ms ago: executing program 4 (id=2658): timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 871.286899ms ago: executing program 3 (id=2659): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) 615.026702ms ago: executing program 2 (id=2660): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x4}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r3, 0x7fff}, 0x8) 554.026924ms ago: executing program 3 (id=2661): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 423.466579ms ago: executing program 2 (id=2662): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getdents(r3, 0x0, 0x0) 0s ago: executing program 4 (id=2663): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0xe, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 406.262694][ T5874] usb 4-1: config 0 descriptor?? [ 406.275755][ T5874] hub 4-1:0.0: bad descriptor, ignoring hub [ 406.293693][ T5874] hub 4-1:0.0: probe with driver hub failed with error -5 [ 406.326615][ T5874] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input49 [ 406.773318][ T5940] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 406.834437][ T5874] usb 4-1: USB disconnect, device number 47 [ 406.853634][ T5882] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 406.943289][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 406.954653][ T5940] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 406.973022][ T5940] usb 3-1: config 0 has no interface number 0 [ 406.983311][ T5940] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 406.992422][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.004437][ T5940] usb 3-1: Product: syz [ 407.008638][ T5940] usb 3-1: Manufacturer: syz [ 407.017703][ T5940] usb 3-1: SerialNumber: syz [ 407.034562][ T5940] usb 3-1: config 0 descriptor?? [ 407.041657][ T5940] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 407.050668][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 407.058182][ T5882] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 407.068174][ T5882] usb 5-1: config 179 has no interface number 0 [ 407.074578][ T5882] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 407.086457][ T5882] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 407.098963][ T5882] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 407.111150][ T5882] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 407.123215][ T5882] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 407.136556][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 407.136586][ T5882] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 407.153720][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.174828][T11223] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 407.267153][ T5940] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 407.285327][ T5940] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 407.315422][ T24] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 407.334410][ T24] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 407.354241][ T24] usb 1-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 407.392909][ T24] usb 1-1: config 220 has no interface number 2 [ 407.430893][ T24] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 407.464828][ T24] usb 1-1: config 220 interface 0 has no altsetting 0 [ 407.481965][ T24] usb 1-1: config 220 interface 76 has no altsetting 0 [ 407.499234][ T24] usb 1-1: config 220 interface 1 has no altsetting 0 [ 407.518479][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 407.528146][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.532626][ T5882] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input50 [ 407.536398][ T24] usb 1-1: Product: syz [ 407.557424][ T24] usb 1-1: Manufacturer: syz [ 407.562196][ T24] usb 1-1: SerialNumber: syz [ 407.633291][ T5867] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 407.665703][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 407.666103][ T29] usb 3-1: USB disconnect, device number 43 [ 407.724043][ T29] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 407.760250][ T794] usb 5-1: USB disconnect, device number 41 [ 407.760250][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 407.760379][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 407.787215][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 407.819177][ T24] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 407.828992][ T5867] usb 2-1: not running at top speed; connect to a high speed hub [ 407.847942][ T29] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 407.861642][ T24] uvcvideo 1-1:220.0: No valid video chain found. [ 407.871091][ T24] usb 1-1: selecting invalid altsetting 0 [ 407.878462][ T5867] usb 2-1: config 1 interface 0 altsetting 170 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 407.895320][ T29] quatech2 3-1:0.51: device disconnected [ 408.147873][ T5867] usb 2-1: config 1 interface 0 has no altsetting 0 [ 408.238808][ T24] usb 1-1: selecting invalid altsetting 0 [ 408.244669][ T24] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 408.271500][ T24] usb 1-1: USB disconnect, device number 42 [ 408.300115][T11247] xt_CT: No such helper "snmp_trap" [ 408.329992][T11248] SELinux: failed to load policy [ 408.344984][ T5867] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 408.376204][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.391773][ T5867] usb 2-1: Product: syz [ 408.398575][ T5867] usb 2-1: Manufacturer: syz [ 408.403958][ T5867] usb 2-1: SerialNumber: syz [ 408.630821][ T5867] usbhid 2-1:1.0: can't add hid device: -71 [ 408.638973][ T5867] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 408.947058][ T5882] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 409.080940][T11263] netlink: 'syz.0.2067': attribute type 3 has an invalid length. [ 409.155966][ T5882] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 409.189056][ T5882] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 409.232109][ T5882] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 409.266824][ T5882] usb 3-1: config 220 has no interface number 2 [ 409.299126][ T5882] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 409.384875][ T5882] usb 3-1: config 220 interface 0 has no altsetting 0 [ 409.432594][ T5882] usb 3-1: config 220 interface 76 has no altsetting 0 [ 409.496177][ T5882] usb 3-1: config 220 interface 1 has no altsetting 0 [ 409.521338][ T5882] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 409.538690][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.574826][ T5882] usb 3-1: Product: syz [ 409.588728][ T5882] usb 3-1: Manufacturer: syz [ 409.594852][ T5867] usb 2-1: USB disconnect, device number 45 [ 409.615832][ T5882] usb 3-1: SerialNumber: syz [ 409.896827][ T5882] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 409.934816][ T30] audit: type=1400 audit(1773651099.715:438): avc: denied { bind } for pid=11276 comm="syz.0.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 409.942031][ T5882] uvcvideo 3-1:220.0: No valid video chain found. [ 409.983105][ T5882] usb 3-1: selecting invalid altsetting 0 [ 410.010316][ T5882] usb 3-1: selecting invalid altsetting 0 [ 410.036969][ T1207] kernel read not supported for file /dsp1 (pid: 1207 comm: kworker/0:2) [ 410.054073][ T5882] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 410.119828][ T5882] usb 3-1: USB disconnect, device number 44 [ 410.257414][T11284] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 410.270439][T11287] vivid-004: disconnect [ 410.306309][T11286] vivid-004: reconnect [ 410.350838][ T30] audit: type=1400 audit(1773651100.125:439): avc: denied { bind } for pid=11288 comm="syz.3.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 410.389044][ T30] audit: type=1400 audit(1773651100.125:440): avc: denied { name_bind } for pid=11288 comm="syz.3.2080" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 410.417393][ T30] audit: type=1400 audit(1773651100.125:441): avc: denied { node_bind } for pid=11288 comm="syz.3.2080" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 410.453356][ T30] audit: type=1400 audit(1773651100.165:442): avc: denied { read } for pid=11288 comm="syz.3.2080" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 410.483786][ T5940] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 410.654926][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 410.681311][ T5940] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 410.705215][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.736931][ T5940] usb 2-1: Product: syz [ 410.774203][ T5940] usb 2-1: Manufacturer: syz [ 410.778848][ T5940] usb 2-1: SerialNumber: syz [ 411.069763][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'. [ 411.088317][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'. [ 411.631185][ T30] audit: type=1400 audit(1773651100.555:443): avc: denied { ioctl } for pid=11303 comm="syz.2.2086" path="socket:[34889]" dev="sockfs" ino=34889 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 411.632177][ T5940] usb 2-1: config 0 descriptor?? [ 411.867327][ T5940] gspca_main: se401-2.14.0 probing 047d:5003 [ 411.913257][T11319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2093'. [ 412.193344][ T5882] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 412.211138][ T1207] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 412.234776][T11337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.274123][ T5940] gspca_se401: ExtraFeatures: 255 [ 412.279188][ T5940] gspca_se401: Too many frame sizes [ 412.283788][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2102'. [ 412.375838][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 412.385859][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 412.402616][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 412.412666][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 412.425518][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 412.436208][ T1207] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 412.446507][T11343] 9p: Bad value for 'rfdno' [ 412.455896][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.498797][ T5940] usb 2-1: USB disconnect, device number 46 [ 412.623560][ T5882] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 412.635122][ T1207] usb 1-1: config 0 descriptor?? [ 412.640817][T11329] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 412.649950][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.661737][ T5882] usb 3-1: Product: syz [ 413.047876][T11347] SELinux: failed to load policy [ 413.057352][ T5882] usb 3-1: Manufacturer: syz [ 413.064567][ T5882] usb 3-1: SerialNumber: syz [ 413.074530][ T5882] usb 3-1: config 0 descriptor?? [ 413.081785][T11319] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 413.136050][T11348] xt_CT: No such helper "snmp_trap" [ 413.278840][ T1207] sony 0003:12BA:0100.001F: unknown main item tag 0x0 [ 413.285864][ T1207] sony 0003:12BA:0100.001F: unknown main item tag 0x0 [ 413.316998][ T5882] usb 3-1: USB disconnect, device number 45 [ 413.375019][ T1207] sony 0003:12BA:0100.001F: unknown main item tag 0x0 [ 413.381948][ T1207] sony 0003:12BA:0100.001F: unknown main item tag 0x0 [ 413.578498][ T1207] sony 0003:12BA:0100.001F: unknown main item tag 0x0 [ 413.585653][ T1207] sony 0003:12BA:0100.001F: unknown main item tag 0x0 [ 413.592619][ T1207] sony 0003:12BA:0100.001F: unknown main item tag 0x0 [ 413.599874][ T1207] sony 0003:12BA:0100.001F: unknown main item tag 0x0 [ 414.343279][ T1207] sony 0003:12BA:0100.001F: unknown main item tag 0x0 [ 414.373611][ T1207] sony 0003:12BA:0100.001F: unknown main item tag 0x0 [ 414.423930][ T1207] sony 0003:12BA:0100.001F: item fetching failed at offset 158/235 [ 414.448284][ T1207] sony 0003:12BA:0100.001F: parse failed [ 414.453781][ T30] audit: type=1400 audit(1773651104.225:444): avc: denied { execute } for pid=11363 comm="syz.4.2110" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.455466][ T1207] sony 0003:12BA:0100.001F: probe with driver sony failed with error -22 [ 414.505540][ T1207] usb 1-1: USB disconnect, device number 43 [ 414.942193][T11372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.147339][T11373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2113'. [ 415.493269][ T5867] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 415.663315][ T5867] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 415.695054][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 415.713934][ T1207] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 415.721740][ T5867] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 415.742355][ T5867] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 415.768122][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.786442][ T5867] usb 5-1: Product: syz [ 415.793330][ T5867] usb 5-1: Manufacturer: syz [ 415.798036][ T5867] usb 5-1: SerialNumber: syz [ 415.817311][ T5867] usb 5-1: config 0 descriptor?? [ 415.823533][T11373] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.886908][ T1207] usb 1-1: Using ep0 maxpacket: 32 [ 415.903954][ T1207] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 415.926484][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.945674][ T30] audit: type=1400 audit(1773651105.725:445): avc: denied { setopt } for pid=11401 comm="syz.3.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.955761][ T1207] usb 1-1: config 0 descriptor?? [ 416.067180][ T5867] usb 5-1: USB disconnect, device number 42 [ 416.184106][ T1207] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 416.192780][T11412] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 416.196801][ T1207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.209581][T11414] lo speed is unknown, defaulting to 1000 [ 416.213893][ T1207] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 416.220317][T11414] lo speed is unknown, defaulting to 1000 [ 416.223953][ T1207] usb 1-1: media controller created [ 416.230103][T11412] overlayfs: failed to resolve './file1': -2 [ 416.234174][ T5940] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 416.244459][T11414] lo speed is unknown, defaulting to 1000 [ 416.268433][T11414] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 416.285868][ T1207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.319061][T11416] netlink: 'syz.3.2133': attribute type 4 has an invalid length. [ 416.328068][T11414] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 416.346460][T11416] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2133'. [ 416.372834][T11414] lo speed is unknown, defaulting to 1000 [ 416.380007][T11414] lo speed is unknown, defaulting to 1000 [ 416.388614][T11414] lo speed is unknown, defaulting to 1000 [ 416.396120][T11414] lo speed is unknown, defaulting to 1000 [ 416.411719][T11414] lo speed is unknown, defaulting to 1000 [ 416.415086][T11417] overlayfs: empty lowerdir [ 416.423266][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 416.433125][ T5940] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.442613][ T1207] az6027: usb out operation failed. (-71) [ 416.460450][ T5940] usb 2-1: config 0 has no interface number 0 [ 416.467005][ T1207] az6027: usb out operation failed. (-71) [ 416.473361][ T1207] stb0899_attach: Driver disabled by Kconfig [ 416.484266][ T5940] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 416.498543][ T1207] az6027: no front-end attached [ 416.498543][ T1207] [ 416.508931][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.517496][ T1207] az6027: usb out operation failed. (-71) [ 416.524496][ T5940] usb 2-1: Product: syz [ 416.529920][ T1207] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 416.565425][ T5940] usb 2-1: Manufacturer: syz [ 416.577627][ T5940] usb 2-1: SerialNumber: syz [ 416.587088][ T1207] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input51 [ 416.613963][ T5940] usb 2-1: config 0 descriptor?? [ 416.635191][ T1207] dvb-usb: schedule remote query interval to 400 msecs. [ 416.683511][ T5940] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 416.700938][ T1207] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 416.709062][ T5940] usb 2-1: selecting invalid altsetting 1 [ 416.731907][ T5940] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 416.742988][ T1207] usb 1-1: USB disconnect, device number 44 [ 416.767996][ T5940] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 416.799627][ T5940] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 416.833704][ T5940] usb 2-1: media controller created [ 416.846489][ T1207] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 416.862337][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.922733][T11421] 9p: Bad value for 'rfdno' [ 416.965416][ T5940] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 416.972679][ T5940] zl10353_read_register: readreg error (reg=127, ret==-32) [ 416.985617][ T5940] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 417.123778][ T5940] usb 2-1: USB disconnect, device number 47 [ 417.313480][ T1207] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 417.503311][ T1207] usb 3-1: Using ep0 maxpacket: 32 [ 417.515037][ T1207] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 417.527528][ T1207] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 417.567089][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 417.589666][ T1207] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 417.638489][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.672093][ T1207] usb 3-1: Product: syz [ 417.687776][ T1207] usb 3-1: Manufacturer: syz [ 417.704310][ T1207] usb 3-1: SerialNumber: syz [ 417.724431][ T1207] usb 3-1: config 0 descriptor?? [ 418.162184][ T1207] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 418.633872][ T30] audit: type=1400 audit(1773651108.385:446): avc: denied { create } for pid=11448 comm="syz.4.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 418.655900][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2146'. [ 418.701492][ T30] audit: type=1400 audit(1773651108.445:447): avc: denied { ioctl } for pid=11448 comm="syz.4.2148" path="socket:[36270]" dev="sockfs" ino=36270 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 418.741036][ T5940] usb 3-1: USB disconnect, device number 46 [ 418.923295][ T1207] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 418.938418][ T30] audit: type=1400 audit(1773651108.715:448): avc: denied { read open } for pid=11455 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.006474][ T30] audit: type=1400 audit(1773651108.715:449): avc: denied { getattr } for pid=11455 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.063946][ T5811] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 419.071969][ T5811] Bluetooth: hci3: unexpected event for opcode 0x203e [ 419.073283][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 419.120681][ T1207] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 419.129679][ T1207] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 419.142847][ T1207] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 419.177941][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2153'. [ 419.201512][ T1207] usb 2-1: config 1 has no interface number 0 [ 419.227175][ T1207] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.257054][ T1207] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 419.278521][ T1207] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 419.289277][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.320418][ T1207] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 419.550754][ T1207] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 419.721776][T11485] 9p: Bad value for 'rfdno' [ 419.907264][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2157'. [ 420.138179][ T1207] usb 2-1: USB disconnect, device number 48 [ 420.426404][ T1207] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 420.510205][ T30] audit: type=1400 audit(1773651110.275:450): avc: denied { add_name } for pid=11454 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.564032][ T5882] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 420.592464][ T30] audit: type=1400 audit(1773651110.285:451): avc: denied { create } for pid=11454 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.661913][ T30] audit: type=1400 audit(1773651110.285:452): avc: denied { write } for pid=11454 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=8807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.744857][ T5882] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 420.755826][ T30] audit: type=1400 audit(1773651110.295:453): avc: denied { append } for pid=11454 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=8807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.780080][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 420.810441][ T30] audit: type=1400 audit(1773651110.485:454): avc: denied { remove_name } for pid=11498 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=8807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.838168][ T5882] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 420.865353][ T5882] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 420.884086][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.904493][ T5882] usb 1-1: Product: syz [ 420.908695][ T5882] usb 1-1: Manufacturer: syz [ 420.914475][ T5882] usb 1-1: SerialNumber: syz [ 421.115034][ T5882] usb 1-1: config 0 descriptor?? [ 421.435657][T11487] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 421.682639][ T29] usb 1-1: USB disconnect, device number 45 [ 421.777062][ T5882] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 421.822610][T11522] netlink: 'syz.3.2168': attribute type 1 has an invalid length. [ 421.837367][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2168'. [ 421.963240][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 421.973695][ T5882] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 421.981875][ T5882] usb 5-1: config 0 has no interface number 0 [ 422.000727][ T5882] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.031019][ T5882] usb 5-1: config 0 interface 85 has no altsetting 0 [ 422.072962][ T5882] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 422.086978][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.095550][ T5882] usb 5-1: Product: syz [ 422.103960][ T5882] usb 5-1: Manufacturer: syz [ 422.108614][ T5882] usb 5-1: SerialNumber: syz [ 422.109349][T11537] netlink: 'syz.2.2171': attribute type 3 has an invalid length. [ 422.135970][ T5882] usb 5-1: config 0 descriptor?? [ 422.143276][T11537] netlink: 'syz.2.2171': attribute type 1 has an invalid length. [ 422.162249][T11537] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2171'. [ 422.185474][T11537] NCSI netlink: No device for ifindex 813332851 [ 422.288630][T11542] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2173'. [ 422.314589][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2173'. [ 422.349819][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 422.733338][ T29] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 422.840926][ T5882] appletouch 5-1:0.85: Geyser mode initialized. [ 422.929233][ T5882] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input52 [ 423.033935][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 423.110395][T11556] SELinux: failed to load policy [ 423.131201][ T5811] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 423.141107][ T5811] Bluetooth: hci3: Injecting HCI hardware error event [ 423.150355][ T5811] Bluetooth: hci3: hardware error 0x00 [ 423.182789][ T29] usb 4-1: config 1 has an invalid interface number: 73 but max is 1 [ 423.202592][ T29] usb 4-1: config 1 has no interface number 1 [ 423.217402][ T29] usb 4-1: config 1 interface 0 has no altsetting 0 [ 423.228016][ T5882] usb 5-1: USB disconnect, device number 43 [ 423.228150][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 423.243604][ T29] usb 4-1: config 1 interface 73 has no altsetting 0 [ 423.274027][ T29] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1250, bcdDevice=d8.77 [ 423.288273][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.301735][ T29] usb 4-1: Product: syz [ 423.309215][ T29] usb 4-1: Manufacturer: syz [ 423.316121][ T29] usb 4-1: SerialNumber: syz [ 423.429858][ T5882] appletouch 5-1:0.85: input: appletouch disconnected [ 423.506433][ T5815] Bluetooth: hci1: Malformed LE Event: 0x1d [ 423.600308][ T29] usb 4-1: bad CDC descriptors [ 423.644123][ T29] usb 4-1: USB disconnect, device number 48 [ 423.969072][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 423.969090][ T30] audit: type=1400 audit(1773651113.745:456): avc: denied { name_bind } for pid=11583 comm="syz.2.2191" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 424.076230][T11587] 9p: Bad value for 'rfdno' [ 424.093518][ T5882] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 424.136729][T11592] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2195'. [ 424.225206][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 424.250580][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 424.271871][ T5882] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 424.292495][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.343955][ T5882] usb 5-1: config 0 descriptor?? [ 424.367356][ T5882] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 424.498793][T11609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2202'. [ 424.660375][T11614] team_slave_0: entered allmulticast mode [ 424.673494][T11614] team_slave_0: entered promiscuous mode [ 425.211246][ T5882] usb 5-1: USB disconnect, device number 44 [ 425.253691][T11629] 9p: Bad value for 'rfdno' [ 425.366648][ T5811] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 425.433596][ T29] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 427.413214][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 427.431150][ T29] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 427.440626][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.455211][ T29] usb 4-1: config 0 descriptor?? [ 427.564878][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2214'. [ 427.669344][ T29] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 427.691609][T11655] cgroup: noprefix used incorrectly [ 427.692255][ T30] audit: type=1400 audit(1773651117.455:457): avc: denied { remount } for pid=11654 comm="syz.0.2217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 427.729621][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.767268][ T29] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 427.783547][ T29] usb 4-1: media controller created [ 427.852100][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.990473][ T29] DVB: Unable to find symbol dib7000p_attach() [ 428.006778][ T29] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 428.183760][ T29] rc_core: IR keymap rc-dib0700-rc5 not found [ 428.190018][ T29] Registered IR keymap rc-empty [ 428.205366][ T29] dvb-usb: could not initialize remote control. [ 428.212111][ T29] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 429.190158][ T29] usb 4-1: USB disconnect, device number 49 [ 429.568340][ T29] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 429.784068][T11696] 9p: Bad value for 'rfdno' [ 429.863257][ T5882] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 429.871177][ T5811] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 430.043256][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 430.050646][ T5882] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 430.082894][ T5882] usb 1-1: config 1 has no interface number 0 [ 430.098669][ T5882] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 430.118534][ T5882] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 430.142290][ T5882] usb 1-1: config 1 interface 105 has no altsetting 0 [ 430.144422][T11711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.152444][ T5882] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 430.183242][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 430.210262][ T5882] usb 1-1: Product: syz [ 430.223857][ T5882] usb 1-1: Manufacturer: syz [ 430.238709][ T5882] usb 1-1: SerialNumber: syz [ 430.287138][T11687] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 430.299771][T11687] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 430.313342][ T29] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 430.330003][T11714] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2241'. [ 430.477774][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 430.504219][ T29] usb 5-1: config 139 has an invalid interface number: 49 but max is 0 [ 430.512594][ T29] usb 5-1: config 139 has no interface number 0 [ 430.529132][ T29] usb 5-1: config 139 interface 49 has no altsetting 0 [ 430.552093][ T29] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 430.566923][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.575452][ T29] usb 5-1: Product: syz [ 430.579732][ T29] usb 5-1: Manufacturer: syz [ 430.584760][ T29] usb 5-1: SerialNumber: syz [ 430.679263][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2249'. [ 430.735261][T11687] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 430.742689][T11687] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 430.777038][ T5867] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 430.949272][ T5867] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 430.959425][ T5867] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 430.980229][ T5867] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 430.991066][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.999504][ T5867] usb 3-1: Product: syz [ 431.005350][ T5867] usb 3-1: Manufacturer: syz [ 431.010657][ T5867] usb 3-1: SerialNumber: syz [ 431.012764][ T29] radio-usb-si4713 5-1:139.49: Si4713 development board discovered: (10C4:8244) [ 431.029637][ T5867] usb 3-1: config 0 descriptor?? [ 431.108052][ T30] audit: type=1400 audit(1773651120.885:458): avc: denied { mounton } for pid=11747 comm="syz.3.2256" path="/proc/1171/task" dev="proc" ino=37410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 431.172669][T11750] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input54 [ 431.186564][ T5882] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 431.199569][ T5882] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 431.215981][ T5882] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 431.260063][ T5882] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ce:f6:94:7b:e8:09 [ 431.282675][ T5882] usb 1-1: USB disconnect, device number 46 [ 431.295522][ T5882] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 431.316932][ T30] audit: type=1400 audit(1773651121.095:459): avc: denied { read } for pid=5476 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 431.395120][ T5882] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 431.414034][ T5882] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 431.415387][T11756] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 431.432732][ T5882] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 431.437496][T11756] overlayfs: failed to resolve './file1': -2 [ 431.534405][T11756] netlink: 'syz.3.2259': attribute type 4 has an invalid length. [ 431.542167][T11756] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2259'. [ 431.554512][T11756] overlayfs: empty lowerdir [ 431.650643][ T29] radio-usb-si4713 5-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 431.669436][ T5867] mos7840 3-1:0.0: required endpoints missing [ 431.688831][ T29] usbhid 5-1:139.49: couldn't find an input interrupt endpoint [ 431.702136][ T5867] usb 3-1: USB disconnect, device number 47 [ 431.716732][ T29] usb 5-1: USB disconnect, device number 45 [ 431.933336][ T5874] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 432.106713][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 432.139258][ T5874] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 432.160742][ T5874] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 432.172058][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 432.192633][T11784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2265'. [ 432.269735][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.354721][ T5874] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.444413][ T5874] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 432.489396][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.633727][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 432.642361][ T30] audit: type=1400 audit(1773651122.405:460): avc: denied { relabelfrom } for pid=11787 comm="syz.4.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 432.683234][ T30] audit: type=1400 audit(1773651122.405:461): avc: denied { relabelto } for pid=11787 comm="syz.4.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 432.709434][ T30] audit: type=1400 audit(1773651122.415:462): avc: denied { setopt } for pid=11790 comm="syz.2.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 432.831702][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 432.860201][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 432.885111][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 432.927134][ T10] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 432.943334][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.971868][ T10] usb 1-1: Product: syz [ 432.986470][ T10] usb 1-1: Manufacturer: syz [ 432.991140][ T10] usb 1-1: SerialNumber: syz [ 433.025016][ T10] usb 1-1: config 0 descriptor?? [ 433.084932][T11784] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 433.143361][ T5874] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 433.275177][ T5867] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 433.303467][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 433.315411][ T5874] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 433.325732][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.326090][ T1207] usb 1-1: USB disconnect, device number 47 [ 433.337176][ T5874] usb 3-1: config 0 descriptor?? [ 433.353355][T11815] usbtmc 4-1:16.0: simple control status returned b0 [ 433.360111][ T5874] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 433.434398][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.445868][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.453262][ T10] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 433.456723][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.477362][ T5867] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.486469][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.497436][ T5867] usb 2-1: config 0 descriptor?? [ 433.555448][ T29] usb 4-1: USB disconnect, device number 50 [ 433.615223][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 433.627113][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 433.637248][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 433.648674][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 433.660389][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 433.669539][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.677678][ T10] usb 5-1: Product: syz [ 433.681864][ T10] usb 5-1: Manufacturer: syz [ 433.686569][ T10] usb 5-1: SerialNumber: syz [ 433.701816][ T10] usb 5-1: config 0 descriptor?? [ 433.920444][ T10] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 433.958828][ T5867] plantronics 0003:047F:FFFF.0020: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 434.150192][T11814] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 434.165476][ T10] usb 5-1: USB disconnect, device number 46 [ 434.216620][ T5882] usb 2-1: USB disconnect, device number 49 [ 434.332461][ T30] audit: type=1400 audit(1773651124.105:463): avc: denied { map } for pid=11827 comm="syz.0.2279" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 434.361146][ T30] audit: type=1400 audit(1773651124.115:464): avc: denied { set_context_mgr } for pid=11827 comm="syz.0.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 434.404444][ T5874] gspca_vc032x: reg_w err -71 [ 434.409171][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.430992][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.443828][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.451064][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.463249][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.468570][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.483483][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.490197][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.495892][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.501533][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.507227][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.515683][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.522975][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.538892][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.555363][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.561083][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.571234][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.578144][ T5874] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.584299][ T5874] gspca_vc032x: Unknown sensor... [ 434.589692][ T5874] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 434.608216][ T5874] usb 3-1: USB disconnect, device number 48 [ 435.014222][T11838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2283'. [ 435.343267][ T5874] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 435.493287][ T5874] usb 1-1: device descriptor read/64, error -71 [ 435.513339][ T1207] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 435.653268][ T5940] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 435.663829][ T1207] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 435.725584][ T1207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.743231][ T1207] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.759326][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 435.764939][ T5874] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 435.767293][ T1207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.784557][ T1207] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.795685][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 435.803329][ T1207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.812361][ T1207] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.823645][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 435.831360][ T1207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.842016][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.853722][ T1207] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.864864][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.885340][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 435.893004][ T5940] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 435.903247][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.911781][ T1207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.925011][ T5874] usb 1-1: device descriptor read/64, error -71 [ 435.926849][ T5940] usb 5-1: config 0 descriptor?? [ 435.942204][ T1207] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.964049][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 435.971674][ T1207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.993301][ T1207] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.023227][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.030870][ T1207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.053486][ T1207] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.053517][ T5874] usb usb1-port1: attempt power cycle [ 436.053546][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.081227][ T1207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.091151][ T1207] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.102666][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.126288][ T1207] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 436.136022][ T1207] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 436.144722][ T1207] usb 3-1: Product: syz [ 436.149938][ T1207] usb 3-1: Manufacturer: syz [ 436.155295][ T1207] usb 3-1: SerialNumber: syz [ 436.163449][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 436.195284][ T1207] usb 3-1: config 0 descriptor?? [ 436.232832][ T1207] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 436.325065][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.336278][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 436.346292][ T24] usb 4-1: string descriptor 0 read error: -22 [ 436.352593][ T24] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 436.362009][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.382074][ T5940] steelseries 0003:1038:12B6.0021: report_id 0 is invalid [ 436.397517][ T5940] steelseries 0003:1038:12B6.0021: item 0 4 1 8 parsing failed [ 436.424233][ T5940] steelseries 0003:1038:12B6.0021: probe with driver steelseries failed with error -22 [ 436.433289][ T5874] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 436.463590][ T5874] usb 1-1: device descriptor read/8, error -71 [ 436.474047][ T29] usb 3-1: USB disconnect, device number 49 [ 436.484832][ T29] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 436.504688][ T5867] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 436.596021][ T5940] usb 5-1: USB disconnect, device number 47 [ 436.666241][ T5867] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 436.677344][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.688381][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.699617][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 436.713264][ T5874] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 436.721674][ T5867] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 436.731009][ T5867] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 436.739345][ T5867] usb 2-1: Manufacturer: syz [ 436.745306][ T5874] usb 1-1: device descriptor read/8, error -71 [ 436.752326][ T5867] usb 2-1: config 0 descriptor?? [ 436.827020][ T24] glorious 0003:22D4:1503.0022: collection stack underflow [ 436.834332][ T24] glorious 0003:22D4:1503.0022: item 0 0 0 12 parsing failed [ 436.842164][ T24] glorious 0003:22D4:1503.0022: probe with driver glorious failed with error -22 [ 436.864467][ T5874] usb usb1-port1: unable to enumerate USB device [ 437.003808][ T5874] usb 4-1: USB disconnect, device number 51 [ 437.169776][T11864] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.177533][T11864] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.205357][ T5867] hid_parser_main: 143 callbacks suppressed [ 437.205382][ T5867] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 437.239733][ T5867] appleir 0003:05AC:8243.0023: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 437.459298][T11864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.481695][T11864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.636623][T11864] tipc: Resetting bearer [ 437.659629][ T5874] usb 2-1: USB disconnect, device number 50 [ 437.690676][T11864] veth0_macvtap: left allmulticast mode [ 437.901620][ T5940] lo speed is unknown, defaulting to 1000 [ 437.902339][ T528] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.917368][ T5923] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 437.918804][ T5940] syz2: Port: 1 Link DOWN [ 437.973194][ T528] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.002585][ T528] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.066655][ T528] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.103373][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 438.114078][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.136957][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.165844][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.211149][ T5923] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 438.223444][T11902] veth0_macvtap: entered allmulticast mode [ 438.242426][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.266517][T11902] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 438.287442][ T5923] usb 4-1: config 0 descriptor?? [ 438.292500][T11902] overlayfs: failed to resolve './file1': -2 [ 438.368788][T11902] netlink: 'syz.2.2303': attribute type 4 has an invalid length. [ 438.376668][T11902] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2303'. [ 438.387445][T11902] overlayfs: empty lowerdir [ 439.020478][ T5923] a4tech 0003:09DA:000A.0024: unknown main item tag 0x0 [ 439.030350][ T5923] a4tech 0003:09DA:000A.0024: unknown main item tag 0x0 [ 439.039343][ T5923] a4tech 0003:09DA:000A.0024: unknown main item tag 0x0 [ 439.050052][ T5923] a4tech 0003:09DA:000A.0024: unknown main item tag 0x0 [ 439.057463][ T5923] a4tech 0003:09DA:000A.0024: unknown main item tag 0x0 [ 439.064984][ T5923] a4tech 0003:09DA:000A.0024: unknown main item tag 0x0 [ 439.072562][ T5923] a4tech 0003:09DA:000A.0024: unknown main item tag 0x0 [ 439.080110][ T5923] a4tech 0003:09DA:000A.0024: unknown main item tag 0x0 [ 439.087463][ T5923] a4tech 0003:09DA:000A.0024: unknown main item tag 0x0 [ 439.099494][ T5923] a4tech 0003:09DA:000A.0024: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.3-1/input0 [ 439.180339][ T30] audit: type=1400 audit(1773651128.955:465): avc: denied { execute } for pid=11922 comm="syz.0.2310" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 439.772027][ T30] audit: type=1400 audit(1773651129.545:466): avc: denied { name_bind } for pid=11948 comm="syz.2.2323" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 439.929414][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.943319][ T5923] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 440.059890][T11963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2328'. [ 440.137324][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.149924][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.161688][ T5923] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 440.181459][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.233445][ T794] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 440.281279][ T5923] usb 1-1: config 0 descriptor?? [ 440.323700][ T5867] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 440.393649][ T794] usb 3-1: Using ep0 maxpacket: 32 [ 440.424466][ T794] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 440.436775][ T794] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 440.446063][ T794] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 440.454309][ T794] usb 3-1: Product: syz [ 440.458490][ T794] usb 3-1: Manufacturer: syz [ 440.463088][ T794] usb 3-1: SerialNumber: syz [ 440.470281][ T794] usb 3-1: config 0 descriptor?? [ 440.476121][T11960] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 440.498896][ T5867] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 440.509112][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 440.519001][ T5867] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 440.535987][ T5867] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 440.545779][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.554304][ T5867] usb 5-1: Product: syz [ 440.558669][ T5867] usb 5-1: Manufacturer: syz [ 440.563579][ T5867] usb 5-1: SerialNumber: syz [ 440.570282][ T5867] usb 5-1: config 0 descriptor?? [ 440.576004][T11963] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 440.663827][ T5940] usb 4-1: USB disconnect, device number 52 [ 440.724321][ T30] audit: type=1400 audit(1773651130.505:467): avc: denied { read } for pid=11966 comm="syz.3.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 440.760945][T11866] usb 3-1: USB disconnect, device number 50 [ 440.761198][ T5923] pyra 0003:1E7D:2CF6.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 440.851991][T11890] usb 5-1: USB disconnect, device number 48 [ 440.919641][T11973] syzkaller1: entered promiscuous mode [ 440.925939][T11973] syzkaller1: entered allmulticast mode [ 441.107676][T11979] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 441.116506][T11979] overlayfs: failed to resolve './file1': -2 [ 441.127490][T11979] netlink: 'syz.3.2334': attribute type 4 has an invalid length. [ 441.135303][T11979] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2334'. [ 441.145205][T11979] overlayfs: empty lowerdir [ 441.355079][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'. [ 441.394596][ T5923] pyra 0003:1E7D:2CF6.0025: couldn't init struct pyra_device [ 441.410173][ T5923] pyra 0003:1E7D:2CF6.0025: couldn't install mouse [ 441.439553][ T5923] pyra 0003:1E7D:2CF6.0025: probe with driver pyra failed with error -71 [ 441.481886][T11990] hsr_slave_1 (unregistering): left promiscuous mode [ 441.492575][ T5923] usb 1-1: USB disconnect, device number 52 [ 441.635157][T12000] input: syz1 as /devices/virtual/input/input57 [ 441.886234][T11890] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 441.924078][T12008] IPv6: sit1: Disabled Multicast RS [ 442.039657][ T30] audit: type=1400 audit(1773651131.815:468): avc: denied { listen } for pid=12012 comm="syz.1.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 442.070125][T11890] usb 5-1: Using ep0 maxpacket: 16 [ 442.084857][T11890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.099553][T11890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.128974][T11890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 442.143677][T11890] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 442.152810][T11890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.173679][T11890] usb 5-1: config 0 descriptor?? [ 442.589624][T11890] hid_parser_main: 30 callbacks suppressed [ 442.589649][T11890] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 442.602954][T11866] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 442.610728][T11890] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 442.637954][T11890] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0026/input/input58 [ 442.731434][T11890] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 442.810172][T11866] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 442.839802][T11866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.858349][T11866] usb 1-1: config 0 descriptor?? [ 442.876599][T11866] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 442.877262][ T794] usb 5-1: USB disconnect, device number 49 [ 442.994670][ T5923] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 443.134783][T11866] gp8psk: usb in 128 operation failed. [ 443.153422][T12041] fido_id[12041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 443.174825][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 443.182251][ T5923] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 443.205544][ T5923] usb 2-1: config 0 has no interface number 0 [ 443.228644][ T5923] usb 2-1: config 0 interface 184 has no altsetting 0 [ 443.257475][ T5923] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 443.314281][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.343718][T12045] xt_CT: No such helper "snmp_trap" [ 443.352176][T11866] gp8psk: FW Version = 161.137.19 (0xa18913) Build 2124/73/37 [ 443.396963][ T5923] usb 2-1: Product: syz [ 443.401165][ T5923] usb 2-1: Manufacturer: syz [ 443.416362][ T5923] usb 2-1: SerialNumber: syz [ 443.478426][T12045] SELinux: failed to load policy [ 443.506858][ T5923] usb 2-1: config 0 descriptor?? [ 443.555358][T11866] gp8psk: FPGA Version = 210 [ 443.764580][T11866] gp8psk: usb in 138 operation failed. [ 443.771145][T11866] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 443.823359][T11866] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 443.846885][T11866] usb 1-1: USB disconnect, device number 53 [ 443.987819][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2367'. [ 443.999066][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 444.018287][ T3523] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.028123][ T3523] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.037938][ T3523] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.047619][ T3523] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.123617][ T794] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 444.199698][ T5923] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 444.211558][ T5923] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 444.289007][ T794] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 444.299845][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.308689][ T794] usb 4-1: Product: syz [ 444.312934][ T794] usb 4-1: Manufacturer: syz [ 444.317736][ T794] usb 4-1: SerialNumber: syz [ 444.323266][T11866] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 444.335679][ T794] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 444.353452][ T5867] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 444.503239][T11866] usb 5-1: Using ep0 maxpacket: 32 [ 444.516325][T11866] usb 5-1: unable to get BOS descriptor or descriptor too short [ 444.544741][T11866] usb 5-1: config 1 interface 0 has no altsetting 0 [ 444.554549][T11866] usb 5-1: string descriptor 0 read error: -22 [ 444.560870][T11866] usb 5-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.40 [ 444.584948][ T30] audit: type=1400 audit(1773651134.365:469): avc: denied { create } for pid=12056 comm="syz.3.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 444.611680][ T794] usb 4-1: USB disconnect, device number 53 [ 444.613203][T11866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.634438][ T5923] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 444.652007][ T5923] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 444.679809][ T5923] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 444.697361][ T5923] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 444.714195][ T5923] usb 2-1: USB disconnect, device number 51 [ 445.122100][T11866] evision 0003:320F:5041.0027: unknown main item tag 0x0 [ 445.133111][T11866] evision 0003:320F:5041.0027: unknown main item tag 0x0 [ 445.141182][T11866] evision 0003:320F:5041.0027: unknown main item tag 0x0 [ 445.152305][T11866] evision 0003:320F:5041.0027: unknown main item tag 0x0 [ 445.165011][T11866] evision 0003:320F:5041.0027: unknown main item tag 0x0 [ 445.173425][T11866] evision 0003:320F:5041.0027: unknown main item tag 0x0 [ 445.180717][T11866] evision 0003:320F:5041.0027: unknown main item tag 0x0 [ 445.224136][T11866] evision 0003:320F:5041.0027: unknown main item tag 0x0 [ 445.265766][T11866] evision 0003:320F:5041.0027: unknown main item tag 0x0 [ 445.375056][T11866] evision 0003:320F:5041.0027: hidraw0: USB HID v0.05 Device [HID 320f:5041] on usb-dummy_hcd.4-1/input0 [ 445.418513][T11866] usb 5-1: USB disconnect, device number 50 [ 445.444556][ T5867] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 445.467490][ T5867] ath9k_htc: Failed to initialize the device [ 445.484757][ T794] usb 4-1: ath9k_htc: USB layer deinitialized [ 445.490213][T12091] fido_id[12091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 445.543256][ T5923] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 445.714887][ T5923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.725218][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.735228][ T5923] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 445.746851][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 445.755092][ T5923] usb 3-1: SerialNumber: syz [ 445.833285][ T794] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 445.981007][ T5923] usb 3-1: 0:2 : does not exist [ 445.987546][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 445.996021][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 446.013686][ T794] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 446.025075][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.056443][ T794] usb 4-1: config 0 descriptor?? [ 446.077197][ T5923] usb 3-1: USB disconnect, device number 51 [ 446.118067][ T6252] udevd[6252]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.272193][ T794] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 446.392070][ T30] audit: type=1400 audit(1773651136.165:470): avc: denied { write } for pid=12104 comm="syz.4.2382" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 446.674465][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2381'. [ 446.815794][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 446.905601][T12112] veth0_macvtap (unregistering): left allmulticast mode [ 446.930938][T11866] usb 4-1: USB disconnect, device number 54 [ 446.975459][ T794] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 447.165839][ T794] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 447.194365][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.223669][ T794] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 447.245798][ T794] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 447.261022][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.269248][ T794] usb 1-1: Product: syz [ 447.273492][ T794] usb 1-1: Manufacturer: syz [ 447.278104][ T794] usb 1-1: SerialNumber: syz [ 447.286654][ T794] usb 1-1: config 0 descriptor?? [ 447.305751][T12106] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 447.574529][ T794] usb 1-1: USB disconnect, device number 54 [ 447.655545][T12133] netlink: 'syz.3.2393': attribute type 1 has an invalid length. [ 448.380150][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2398'. [ 448.451867][T12152] netlink: 'syz.0.2399': attribute type 3 has an invalid length. [ 448.673400][ T794] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 448.805395][ T794] usb 3-1: device descriptor read/64, error -71 [ 448.835068][T12166] syzkaller1: entered promiscuous mode [ 448.840566][T12166] syzkaller1: entered allmulticast mode [ 449.003601][ T5923] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 449.064685][T12171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2408'. [ 449.084501][ T794] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 449.177561][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 449.356560][ T5923] usb 1-1: config 1 interface 0 has no altsetting 0 [ 449.376002][ T5923] usb 1-1: string descriptor 0 read error: -22 [ 449.382285][ T5923] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 449.404959][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.413573][ T794] usb 3-1: device descriptor read/64, error -71 [ 449.484821][T11889] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 449.505905][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2409'. [ 449.538545][ T794] usb usb3-port1: attempt power cycle [ 449.873265][T11866] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 449.933313][ T794] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 449.953884][ T794] usb 3-1: device descriptor read/8, error -71 [ 449.974868][T11889] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 449.984882][T11889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 449.994678][T11889] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 450.007968][T11889] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 450.017190][T11889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.025369][T11889] usb 2-1: Product: syz [ 450.030178][T11889] usb 2-1: Manufacturer: syz [ 450.035228][T11889] usb 2-1: SerialNumber: syz [ 450.040964][T11866] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 450.054088][T11889] usb 2-1: config 0 descriptor?? [ 450.055923][ T5923] apple 0003:05AC:024C.0028: invalid report_size -1149171161 [ 450.059308][T11866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 450.069692][ T5923] apple 0003:05AC:024C.0028: item 0 4 1 7 parsing failed [ 450.084492][T12171] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 450.092373][ T5923] apple 0003:05AC:024C.0028: parse failed [ 450.100061][ T5923] apple 0003:05AC:024C.0028: probe with driver apple failed with error -22 [ 450.103257][T11866] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 450.130929][T11866] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 450.147265][T11866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.155503][T11866] usb 5-1: Product: syz [ 450.159676][T11866] usb 5-1: Manufacturer: syz [ 450.164838][T11866] usb 5-1: SerialNumber: syz [ 450.171144][T11866] usb 5-1: config 0 descriptor?? [ 450.177351][T12174] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 450.193238][ T794] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 450.213809][ T794] usb 3-1: device descriptor read/8, error -71 [ 450.290214][T11866] usb 1-1: USB disconnect, device number 55 [ 450.315924][T11889] usb 2-1: USB disconnect, device number 52 [ 450.323999][ T794] usb usb3-port1: unable to enumerate USB device [ 450.396178][T11890] usb 5-1: USB disconnect, device number 51 [ 450.828374][T12176] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 450.836325][T12176] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2410'. [ 450.854916][T12176] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2410'. [ 450.864868][T12176] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 450.873736][T12176] netlink: 634 bytes leftover after parsing attributes in process `syz.0.2410'. [ 451.218913][T12195] 9p: Bad value for 'rfdno' [ 451.233283][T11890] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 451.397402][T11890] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 451.403347][ T794] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 451.409340][T11890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.430617][T11890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.442238][T11890] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 451.457531][T11890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 451.464578][T11890] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 451.474133][T11890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.497981][T11890] usb 1-1: config 0 descriptor?? [ 451.575510][ T794] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 451.590595][ T794] usb 5-1: config 1 interface 0 has no altsetting 0 [ 451.609969][ T794] usb 5-1: string descriptor 0 read error: -22 [ 451.624821][ T794] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 451.634316][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.648191][T12191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 451.921019][T11890] ryos 0003:1E7D:3138.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 452.164741][T12218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2427'. [ 452.167352][ T794] hid_parser_main: 2086 callbacks suppressed [ 452.167376][ T794] logitech 0003:046D:C298.002A: unknown main item tag 0x0 [ 452.392637][ T794] logitech 0003:046D:C298.002A: unknown main item tag 0x0 [ 452.400057][ T794] logitech 0003:046D:C298.002A: unknown main item tag 0x0 [ 452.409052][ T794] logitech 0003:046D:C298.002A: unknown main item tag 0x0 [ 452.420616][ T5867] usb 1-1: USB disconnect, device number 56 [ 452.427690][ T794] logitech 0003:046D:C298.002A: unknown main item tag 0x0 [ 452.459967][ T794] logitech 0003:046D:C298.002A: unknown main item tag 0x0 [ 452.478932][ T794] logitech 0003:046D:C298.002A: unknown main item tag 0x0 [ 452.496663][ T794] logitech 0003:046D:C298.002A: unknown main item tag 0x0 [ 452.507189][ T794] logitech 0003:046D:C298.002A: unknown main item tag 0x0 [ 452.516911][ T794] logitech 0003:046D:C298.002A: unknown main item tag 0x0 [ 452.529414][ T30] audit: type=1400 audit(1773651142.305:471): avc: denied { mount } for pid=12220 comm="syz.3.2428" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 452.530379][T12221] overlayfs: failed to clone lowerpath [ 452.559020][ T794] logitech 0003:046D:C298.002A: hidraw0: USB HID vff.7f Device [HID 046d:c298] on usb-dummy_hcd.4-1/input0 [ 452.574454][ T794] logitech 0003:046D:C298.002A: no inputs found [ 452.592123][ T30] audit: type=1400 audit(1773651142.305:472): avc: denied { mounton } for pid=12220 comm="syz.3.2428" path="/510/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 452.595686][ T794] usb 5-1: USB disconnect, device number 52 [ 452.617739][T11866] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 452.698099][ T30] audit: type=1400 audit(1773651142.465:473): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 452.701741][T12225] fido_id[12225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 452.804466][T11866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.817846][T11866] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 452.852377][T11866] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 452.861700][T11866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.870083][T11866] usb 2-1: Product: syz [ 452.875300][T11866] usb 2-1: Manufacturer: syz [ 452.881030][T11866] usb 2-1: SerialNumber: syz [ 452.889568][T11866] usb 2-1: config 0 descriptor?? [ 453.036066][T12234] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 453.044171][T12234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2433'. [ 453.056173][T12234] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.064840][T12234] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.192649][ T794] usb 2-1: USB disconnect, device number 53 [ 453.233294][T11866] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 453.328059][ T30] audit: type=1400 audit(1773651143.095:474): avc: denied { append } for pid=12250 comm="syz.3.2441" name="sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 453.415020][T11866] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 453.423866][T11866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.436780][T11866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 453.446203][T11866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.458960][T11866] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 453.494412][T11866] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 453.510423][T11866] usb 3-1: Product: syz [ 453.523646][T11866] usb 3-1: Manufacturer: syz [ 453.549559][T11866] cdc_wdm 3-1:1.0: skipping garbage [ 453.573287][T11866] cdc_wdm 3-1:1.0: skipping garbage [ 453.590173][T11866] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 453.604245][T11866] cdc_wdm 3-1:1.0: Unknown control protocol [ 453.823460][T11866] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 453.857737][T11889] usb 3-1: USB disconnect, device number 56 [ 454.011007][T11866] usb 1-1: Using ep0 maxpacket: 32 [ 454.037350][T11866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.069441][T11866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.094185][T11866] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 454.131837][ T30] audit: type=1400 audit(1773651143.895:475): avc: denied { mount } for pid=12265 comm="syz.4.2448" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 454.170887][T11866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.197541][T11866] usb 1-1: config 0 descriptor?? [ 454.226047][T11866] hub 1-1:0.0: USB hub found [ 454.441575][T11866] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 454.493581][ T5923] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 454.559808][ T30] audit: type=1326 audit(1773651144.335:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.1.2451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1b5f9c799 code=0x0 [ 454.659938][ T5923] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 454.670018][ T5923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.683218][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 454.702502][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.722465][ T5923] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 454.731922][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 454.740262][ T5923] usb 3-1: Product: syz [ 454.744574][ T5923] usb 3-1: Manufacturer: syz [ 454.758992][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 454.765238][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 454.784172][ T5923] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 454.790889][ T5923] cdc_wdm 3-1:1.0: Unknown control protocol [ 454.834622][T12288] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2454'. [ 454.869354][T11866] hid-generic 0003:046D:C31C.002B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 455.043687][T12294] xt_CT: No such helper "snmp_trap" [ 455.133441][T11866] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 455.188041][T12293] SELinux: failed to load policy [ 455.314404][T11890] usb 1-1: USB disconnect, device number 57 [ 455.323994][T11866] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 455.342553][T11866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.344048][ T30] audit: type=1400 audit(1773651145.115:477): avc: denied { read write } for pid=12231 comm="syz.2.2432" name="cdc-wdm0" dev="devtmpfs" ino=3956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 455.400605][T11866] usb 5-1: config 0 descriptor?? [ 455.432026][T11866] cp210x 5-1:0.0: cp210x converter detected [ 455.440286][ T30] audit: type=1400 audit(1773651145.115:478): avc: denied { open } for pid=12231 comm="syz.2.2432" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 455.488574][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'. [ 455.588668][ T5923] usb 3-1: USB disconnect, device number 57 [ 455.793247][T11890] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 455.835227][T11866] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 455.855569][T11866] usb 5-1: cp210x converter now attached to ttyUSB0 [ 455.944921][T11890] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 455.953022][T11890] usb 4-1: config 0 has no interface number 0 [ 455.961143][T11890] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 455.970349][T11890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.978389][T11890] usb 4-1: Product: syz [ 455.982569][T11890] usb 4-1: Manufacturer: syz [ 455.987826][T11890] usb 4-1: SerialNumber: syz [ 455.994143][T11890] usb 4-1: config 0 descriptor?? [ 456.056971][T11866] usb 5-1: USB disconnect, device number 53 [ 456.070351][T11866] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 456.081345][T11866] cp210x 5-1:0.0: device disconnected [ 456.153342][ T5940] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 456.203528][T11890] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 456.214092][T11890] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 456.225142][T11890] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 456.233515][T11890] usb 4-1: media controller created [ 456.247277][T11890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 456.313642][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 456.321353][ T5940] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 456.330041][ T5940] usb 1-1: config 1 has no interface number 0 [ 456.336435][ T5940] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 456.346434][ T5940] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 456.357635][ T5940] usb 1-1: config 1 interface 105 has no altsetting 0 [ 456.366195][ T5940] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 456.375456][T11889] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 456.383886][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 456.391992][ T5940] usb 1-1: Product: syz [ 456.396200][ T5940] usb 1-1: Manufacturer: syz [ 456.400941][ T5940] usb 1-1: SerialNumber: syz [ 456.409361][T12312] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.417097][T12312] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.459122][T11890] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 456.541248][T12317] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2465'. [ 456.550489][T12317] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2465'. [ 456.555013][T11889] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 456.575260][T11889] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 456.584817][T11889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.605930][T11889] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 456.875792][T12312] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.885306][T12312] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.897577][T12325] SELinux: syz.1.2469 (12325) set checkreqprot to 1. This is no longer supported. [ 457.132717][T12334] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 457.145293][T12334] overlayfs: failed to resolve './file1': -2 [ 457.221791][T12335] overlayfs: empty lowerdir [ 457.294740][ T5923] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 457.343963][ T5940] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 457.488973][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 457.552817][ T5923] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 457.588165][ T5923] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 457.591878][T11890] usb 4-1: USB disconnect, device number 55 [ 457.598203][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 457.653120][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 457.673942][ T5923] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.693876][ T5940] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 457.707071][ T5923] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 457.707881][T11889] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 457.746243][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.761552][ T5940] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 34:32:02:8f:26:7f [ 457.779496][T11889] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 457.790944][T11889] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 457.811934][ T5940] usb 1-1: USB disconnect, device number 58 [ 457.821973][T11889] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 457.831233][ T5940] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 457.864226][T11889] usb 3-1: USB disconnect, device number 58 [ 457.924233][ T5940] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 457.953279][ T5940] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 457.962750][ T5940] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 458.006076][ T5923] usb 5-1: GET_CAPABILITIES returned 0 [ 458.006124][ T5923] usbtmc 5-1:16.0: can't read capabilities [ 458.171900][T12350] input: syz0 as /devices/virtual/input/input59 [ 458.287075][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.296523][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.305637][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.314719][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.323877][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.344815][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.353965][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.363086][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.373553][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.382737][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.391896][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.401011][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.410114][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.426743][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.435877][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 458.445258][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 458.469212][T12359] IPv4: Oversized IP packet from 172.20.20.24 [ 458.476555][ T5940] usb 5-1: USB disconnect, device number 54 [ 458.478577][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 458.489427][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 458.545793][T12362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.695127][ T5923] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 458.723731][T12366] kvm: user requested TSC rate below hardware speed [ 458.737997][T12366] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 458.746807][T12366] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 458.863226][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 458.872251][ T5923] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 458.885510][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.895585][ T5923] usb 1-1: Product: syz [ 458.900164][ T5923] usb 1-1: Manufacturer: syz [ 458.904857][ T5923] usb 1-1: SerialNumber: syz [ 458.911395][ T5923] usb 1-1: config 0 descriptor?? [ 458.921926][ T5923] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 458.929821][ T5923] dvb-usb: bulk message failed: -22 (4/0) [ 458.936575][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 458.946946][ T5923] dvb-usb: bulk message failed: -22 (5/0) [ 458.952906][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 458.985872][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 459.056106][ T5923] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 459.083668][ T5923] usb 1-1: media controller created [ 459.111160][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.124754][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 459.206698][ T5923] usb 1-1: selecting invalid altsetting 3 [ 459.212474][ T5923] ttusb2: set interface to alts=3 failed [ 459.297745][ T5923] DVB: Unable to find symbol tda10086_attach() [ 459.316484][ T5923] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 459.340168][ T30] audit: type=1400 audit(1773651149.115:479): avc: denied { read } for pid=12371 comm="syz.1.2487" path="socket:[42035]" dev="sockfs" ino=42035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.345481][ T5923] dvb-usb: bulk message failed: -22 (4/0) [ 459.374637][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 459.385790][ T5923] dvb-usb: bulk message failed: -22 (5/0) [ 459.392720][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 459.421688][ T5923] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 459.426025][ T30] audit: type=1400 audit(1773651149.165:480): avc: denied { read write } for pid=12381 comm="syz.2.2492" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 459.484100][ T5923] usb 1-1: USB disconnect, device number 59 [ 459.532436][ T30] audit: type=1400 audit(1773651149.165:481): avc: denied { open } for pid=12381 comm="syz.2.2492" path="/464/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 459.553298][ T5867] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 459.556748][T12393] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2494'. [ 459.603789][ T5923] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 459.730861][T12397] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2496'. [ 459.733320][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 459.766533][ T5867] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 459.785614][ T5867] usb 4-1: config 0 has no interface number 0 [ 459.792014][ T5867] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 459.836207][ T5867] usb 4-1: config 0 interface 89 has no altsetting 0 [ 459.870509][ T5867] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 459.893685][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.901855][ T5867] usb 4-1: Product: syz [ 459.916341][ T5867] usb 4-1: Manufacturer: syz [ 459.920973][ T5867] usb 4-1: SerialNumber: syz [ 459.954205][ T5867] usb 4-1: config 0 descriptor?? [ 459.971130][ T5867] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 460.005419][ T5867] em28xx 4-1:0.89: Video interface 89 found: [ 460.025285][T11889] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 460.333207][T11889] usb 3-1: Using ep0 maxpacket: 8 [ 460.344512][T11889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 460.357397][T11889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.367861][T11889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 460.377833][T11889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 460.389438][T11889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 460.399727][T11889] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 460.435821][T11889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.470268][T11889] usb 3-1: config 0 descriptor?? [ 460.486646][T12399] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 460.541626][T12416] xt_CT: No such helper "snmp_trap" [ 460.571150][ T5867] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 460.817176][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.825286][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.832160][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.839375][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.846605][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.854357][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.861598][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.868588][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.875595][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.882474][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.889935][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.898222][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 460.908162][ T5819] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 461.021408][T11889] usb 3-1: USB disconnect, device number 59 [ 461.022530][ T5811] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 461.181483][T12418] SELinux: failed to load policy [ 461.218054][ T5867] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 461.233364][ T5867] em28xx 4-1:0.89: board has no eeprom [ 461.293974][ T5867] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 461.311497][ T5867] em28xx 4-1:0.89: analog set to bulk mode. [ 461.328292][ T794] em28xx 4-1:0.89: Registering V4L2 extension [ 461.379685][ T5867] usb 4-1: USB disconnect, device number 56 [ 461.397397][ T5867] em28xx 4-1:0.89: Disconnecting em28xx [ 461.452838][ T794] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 461.469889][ T794] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 461.491052][ T794] em28xx 4-1:0.89: No AC97 audio processor [ 461.520853][ T794] usb 4-1: Decoder not found [ 461.535418][ T794] em28xx 4-1:0.89: failed to create media graph [ 461.536122][T12442] overlayfs: failed to clone upperpath [ 461.548428][ T794] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 461.567883][ T794] em28xx 4-1:0.89: Registering snapshot button... [ 461.590574][ T794] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input60 [ 461.636739][ T794] em28xx 4-1:0.89: Remote control support is not available for this card. [ 461.655828][ T5867] em28xx 4-1:0.89: Closing input extension [ 461.665736][ T5867] em28xx 4-1:0.89: Deregistering snapshot button [ 461.814526][ T5867] em28xx 4-1:0.89: Freeing device [ 461.859472][T12450] lo speed is unknown, defaulting to 1000 [ 462.138496][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 462.229922][T12463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2520'. [ 462.229945][T12464] xt_CT: No such helper "snmp_trap" [ 462.263277][T11866] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 462.423291][T11866] usb 1-1: Using ep0 maxpacket: 8 [ 462.444662][T11866] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 462.463280][T11866] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 462.481281][T11866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 462.512111][T11866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 462.545599][T11866] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.586041][T11866] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 462.618583][T11866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.881540][T11866] usb 1-1: usb_control_msg returned -32 [ 462.901477][T11866] usbtmc 1-1:16.0: can't read capabilities [ 462.984796][T12460] SELinux: failed to load policy [ 463.148923][T11873] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 463.299566][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2535'. [ 463.317030][T11873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.327895][T11873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 463.339823][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2535'. [ 463.348987][T11873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 463.361192][T11873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 463.391001][T11873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 463.416500][T11873] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 463.426574][T11873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 463.446038][T11873] usb 4-1: Product: syz [ 463.450516][T11873] usb 4-1: Manufacturer: syz [ 463.461709][T11873] usb 4-1: SerialNumber: syz [ 463.486901][T11873] usb 4-1: config 0 descriptor?? [ 463.708893][T12512] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 463.708915][T11873] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 463.732667][T11873] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 463.820136][ T794] usb 1-1: USB disconnect, device number 60 [ 463.865972][T12515] kvm: kvm [12514]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x87 [ 463.880271][T12515] kvm: kvm [12514]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x87 [ 463.907488][T12520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.915238][T11873] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 463.915699][T12515] kvm: kvm [12514]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x87 [ 463.931288][T11873] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 463.936843][T12515] kvm: kvm [12514]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x87 [ 463.963465][T11873] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 463.978179][T12515] kvm: kvm [12514]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x87 [ 464.024349][T12515] kvm_intel: kvm [12514]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x87 [ 464.069061][T12523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2543'. [ 464.149250][T11873] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 464.523589][T11889] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 464.684894][T11889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 464.694958][T11889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 464.707180][T12534] overlayfs: failed to clone upperpath [ 464.719217][T11889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 464.746016][T11889] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 464.759137][T11889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.779408][T11889] usb 5-1: Product: syz [ 464.783941][T11889] usb 5-1: Manufacturer: syz [ 464.788559][T11889] usb 5-1: SerialNumber: syz [ 464.814564][T11889] usb 5-1: config 0 descriptor?? [ 464.823753][T12523] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 464.908381][T12542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.922759][T12542] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 465.021847][T11873] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 465.031410][T11873] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 465.051820][T11866] usb 5-1: USB disconnect, device number 55 [ 465.067879][T11873] usb 4-1: USB disconnect, device number 57 [ 465.253439][T11889] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 465.405142][T11889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 465.415105][T11889] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 465.424862][T11889] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.439674][T11889] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 465.449327][T11889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.458021][T11889] usb 3-1: Product: syz [ 465.462446][T11889] usb 3-1: Manufacturer: syz [ 465.468297][T11889] usb 3-1: SerialNumber: syz [ 465.478492][T11889] hub 3-1:1.0: bad descriptor, ignoring hub [ 465.484952][T11889] hub 3-1:1.0: probe with driver hub failed with error -5 [ 465.612018][T12551] 9p: Bad value for 'rfdno' [ 465.669898][T12553] l2tp_ppp: sess 2/0: no socket in recv [ 465.726428][T11889] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 465.907956][T12564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2560'. [ 466.203375][T11873] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 466.231683][ T30] audit: type=1400 audit(1773651156.005:482): avc: denied { read write } for pid=12546 comm="syz.2.2553" name="lp0" dev="devtmpfs" ino=4012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 466.282356][ T30] audit: type=1400 audit(1773651156.005:483): avc: denied { open } for pid=12546 comm="syz.2.2553" path="/dev/usb/lp0" dev="devtmpfs" ino=4012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 466.327267][T12571] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 466.336416][T12571] overlayfs: failed to resolve './file1': -2 [ 466.415758][T12573] overlayfs: empty lowerdir [ 466.713930][T11873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 466.725755][T11873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 466.736922][T11873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 466.770767][T11873] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 466.799622][T11873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.819807][T11873] usb 5-1: Product: syz [ 466.833242][T11873] usb 5-1: Manufacturer: syz [ 466.837881][T11873] usb 5-1: SerialNumber: syz [ 466.856841][T11873] usb 5-1: config 0 descriptor?? [ 466.873573][T12564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 467.023290][ T30] audit: type=1400 audit(1773651156.755:484): avc: denied { write } for pid=12577 comm="syz.3.2565" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 467.565583][ T5923] usb 5-1: USB disconnect, device number 56 [ 468.098059][T12594] 9p: Bad value for 'rfdno' [ 468.189838][ T30] audit: type=1400 audit(1773651157.965:485): avc: denied { mount } for pid=12600 comm="syz.1.2574" name="/" dev="autofs" ino=41925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 468.213370][ T30] audit: type=1400 audit(1773651157.975:486): avc: denied { mounton } for pid=12600 comm="syz.1.2574" path="/539/file1/file0" dev="autofs" ino=41926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 468.242440][ T30] audit: type=1400 audit(1773651158.015:487): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 468.413430][T11866] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 468.583271][T11866] usb 1-1: Using ep0 maxpacket: 16 [ 468.602203][T11866] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 468.615911][T11866] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 468.627176][T11866] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 468.635765][T11866] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 468.644834][T11866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 468.654533][T11866] usb 1-1: config 0 has no interface number 0 [ 468.660636][T11866] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 468.671772][T11866] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 468.681861][T11866] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 468.692110][T11866] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.705486][T11866] usb 1-1: config 0 interface 125 has no altsetting 0 [ 468.712283][T11866] usb 1-1: config 0 interface 125 has no altsetting 2 [ 468.735230][T11866] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 468.750037][T11866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.758147][T11866] usb 1-1: Product: syz [ 468.762319][T11866] usb 1-1: Manufacturer: syz [ 468.767680][T11866] usb 1-1: SerialNumber: syz [ 468.774196][T11866] usb 1-1: config 0 descriptor?? [ 468.781506][T11866] usb 1-1: selecting invalid altsetting 2 [ 468.992589][ C0] usb 1-1: async_complete: urb error -71 [ 468.998409][ C0] usb 1-1: async_complete: urb error -71 [ 469.004150][ C0] usb 1-1: async_complete: urb error -71 [ 469.009862][ C0] usb 1-1: async_complete: urb error -71 [ 469.017459][T11866] get_1284_register: usb error -71 [ 469.043433][T11866] usb 1-1: USB disconnect, device number 61 [ 469.652983][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2581'. [ 469.924452][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 469.924526][ T5811] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 469.983919][ T5923] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 470.175777][ T5923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 470.189479][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.199940][ T5923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 470.211855][ T5923] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 470.221193][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.229892][ T5923] usb 1-1: Product: syz [ 470.234421][ T5923] usb 1-1: Manufacturer: syz [ 470.239311][ T5923] usb 1-1: SerialNumber: syz [ 470.246983][ T5923] usb 1-1: config 0 descriptor?? [ 470.252724][T12620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 470.481857][T12628] xt_CT: No such helper "snmp_trap" [ 470.550556][T12626] SELinux: failed to load policy [ 470.764211][T11866] usb 1-1: USB disconnect, device number 62 [ 470.962450][ T30] audit: type=1400 audit(1773651160.735:488): avc: denied { read } for pid=12633 comm="syz.4.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 471.030218][T11889] usb 3-1: USB disconnect, device number 60 [ 471.048737][T11889] usblp0: removed [ 471.236013][T12644] lo speed is unknown, defaulting to 1000 [ 471.280792][T12647] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 471.301173][T12647] overlayfs: failed to resolve './file1': -2 [ 471.849987][T12654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.896630][T12654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.937896][T12654] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 472.135037][ T5811] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 473.102562][T12684] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 473.110819][T12684] overlayfs: failed to resolve './file1': -2 [ 473.523234][T11889] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 473.695895][T11889] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 473.713343][T11889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.732954][T11889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 473.773281][T11889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.796244][T11889] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 473.813196][T11889] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 473.821580][T11889] usb 1-1: Product: syz [ 473.953822][T11889] usb 1-1: Manufacturer: syz [ 473.973073][T11889] cdc_wdm 1-1:1.0: skipping garbage [ 473.978811][T11889] cdc_wdm 1-1:1.0: skipping garbage [ 474.015583][T11889] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 474.021547][T11889] cdc_wdm 1-1:1.0: Unknown control protocol [ 474.158740][T12692] xt_CT: No such helper "snmp_trap" [ 474.205881][T11889] usb 1-1: USB disconnect, device number 63 [ 474.713298][T11866] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 474.741580][T12694] SELinux: failed to load policy [ 474.869829][T12698] 9p: Bad value for 'rfdno' [ 474.894703][T11866] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 474.903697][T11866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.914717][T11866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 474.932976][T11866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.974686][T11866] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 474.993375][T11866] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 475.001667][T11866] usb 1-1: Product: syz [ 475.005949][T11866] usb 1-1: Manufacturer: syz [ 475.034536][T11866] cdc_wdm 1-1:1.0: skipping garbage [ 475.041990][T11866] cdc_wdm 1-1:1.0: skipping garbage [ 475.065391][T11866] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 475.071362][T11866] cdc_wdm 1-1:1.0: Unknown control protocol [ 477.013266][T11889] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 477.029617][T11866] usb 1-1: USB disconnect, device number 64 [ 477.166525][T11889] usb 5-1: Using ep0 maxpacket: 16 [ 477.185920][T11889] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.215456][T11889] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.225967][T11889] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 477.235726][T11889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.453300][T11866] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 477.615056][T11866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.627153][T11866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.638675][T11866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 477.648865][T11866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 477.662828][T11866] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 477.672958][T11866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.690158][T11889] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 477.744182][T11866] usb 1-1: config 0 descriptor?? [ 477.758146][T12733] xt_CT: No such helper "snmp_trap" [ 477.910227][ T794] usb 5-1: USB disconnect, device number 57 [ 478.001829][T12732] SELinux: failed to load policy [ 478.183358][T11866] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 478.296389][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'. [ 479.490673][T11873] usb 1-1: USB disconnect, device number 65 [ 479.713458][ T794] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 479.873242][ T794] usb 5-1: Using ep0 maxpacket: 32 [ 479.879754][ T794] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 479.890360][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.900841][ T794] usb 5-1: config 0 descriptor?? [ 479.911861][ T794] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 480.103297][T11873] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 480.308255][T11873] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 480.318561][T11873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 480.344187][T11873] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.370014][T11873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 480.387879][T11873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 480.402038][T12791] vlan2: entered allmulticast mode [ 480.410001][T11873] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 480.412787][T12791] dummy0: entered allmulticast mode [ 480.424771][T12791] bridge0: port 3(vlan2) entered blocking state [ 480.431215][T12791] bridge0: port 3(vlan2) entered disabled state [ 480.434682][T11873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 480.440077][T12791] vlan2: entered promiscuous mode [ 480.450181][T11873] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.454653][T12791] dummy0: entered promiscuous mode [ 480.471113][T11873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 480.471994][T12792] netlink: 'syz.3.2637': attribute type 10 has an invalid length. [ 480.483507][T11873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 480.500114][T12792] bridge0: port 3(vlan2) entered blocking state [ 480.508216][T12792] bridge0: port 3(vlan2) entered forwarding state [ 480.520711][T11873] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 480.521788][T12792] team0: Port device dummy0 added [ 480.528412][T11873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 480.550948][T11873] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.565804][T11873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 480.579995][T11873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 480.595054][T11873] usb 3-1: string descriptor 0 read error: -22 [ 480.601618][T11873] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 480.612148][T11873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.637217][T11873] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 481.278629][ T30] audit: type=1400 audit(1773651171.055:489): avc: denied { mounton } for pid=12798 comm="syz.0.2639" path="/514/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 481.279838][T12799] overlayfs: failed to clone lowerpath [ 481.302337][ T30] audit: type=1400 audit(1773651171.055:490): avc: denied { getattr } for pid=12798 comm="syz.0.2639" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 481.360609][T12799] overlayfs: failed to clone upperpath [ 481.386522][ T30] audit: type=1400 audit(1773651171.165:491): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 481.556130][ T794] gspca_vc032x: reg_w err -71 [ 481.562283][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.568194][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.573891][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.579209][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.584689][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.590082][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.595854][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.601140][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.606558][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.611847][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.617239][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.622534][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.627946][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.633377][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.638774][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.644152][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.650211][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.655676][ T794] gspca_vc032x: I2c Bus Busy Wait 00 [ 481.660990][ T794] gspca_vc032x: Unknown sensor... [ 481.666214][ T794] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 481.676752][ T794] usb 5-1: USB disconnect, device number 58 [ 482.354957][ T30] audit: type=1400 audit(1773651172.135:492): avc: denied { ioctl } for pid=12812 comm="syz.0.2644" path="/516/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 482.862372][ T794] usb 3-1: USB disconnect, device number 61 [ 482.991145][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2650'. [ 483.376827][ T794] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 483.412825][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2652'. [ 483.489193][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 483.533025][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 483.544127][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 483.554916][ T794] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 483.565675][ T794] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.579183][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 483.588151][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.610363][ T794] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 483.693633][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.701667][ T794] usb 3-1: Product: syz [ 483.721032][T12832] lo speed is unknown, defaulting to 1000 [ 483.728296][ T794] usb 3-1: Manufacturer: syz [ 483.732931][ T794] usb 3-1: SerialNumber: syz [ 483.753854][ T794] usb 3-1: config 0 descriptor?? [ 483.759668][T12828] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.849816][T12835] netlink: 'syz.3.2654': attribute type 6 has an invalid length. [ 483.877011][T12835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2654'. [ 483.937550][ T30] audit: type=1400 audit(1773651173.695:493): avc: denied { mount } for pid=12840 comm="syz.0.2655" name="/" dev="overlay" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 484.016585][T11866] usb 3-1: USB disconnect, device number 62 [ 484.056958][ T30] audit: type=1400 audit(1773651173.785:494): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 484.310836][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2657'. [ 484.526431][T12832] chnl_net:caif_netlink_parms(): no params data found [ 484.755115][ T794] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 484.910733][T12832] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.953554][T12832] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.960829][T12832] bridge_slave_0: entered allmulticast mode [ 484.978609][ T794] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 484.995702][T12832] bridge_slave_0: entered promiscuous mode [ 485.013348][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 485.021758][T12832] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.036650][T12832] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.053560][ T794] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 485.060594][ T30] audit: type=1400 audit(1773651174.835:495): avc: denied { write } for pid=12861 comm="syz.2.2660" lport=50604 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 485.094857][T12832] bridge_slave_1: entered allmulticast mode [ 485.112455][T12832] bridge_slave_1: entered promiscuous mode [ 485.131108][ T794] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 485.198210][ T30] audit: type=1400 audit(1773651174.835:496): avc: denied { getopt } for pid=12861 comm="syz.2.2660" lport=50604 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 485.203204][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.244574][T12832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.286400][T12832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.301799][ T794] usb 1-1: Product: syz [ 485.305815][ T30] audit: type=1400 audit(1773651174.835:497): avc: denied { setopt } for pid=12861 comm="syz.2.2660" lport=50604 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 485.345944][ T794] usb 1-1: Manufacturer: syz [ 485.369560][ T794] usb 1-1: SerialNumber: syz [ 485.421244][ T794] usb 1-1: config 0 descriptor?? [ 485.444527][T12851] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 485.450728][T12832] team0: Port device team_slave_0 added [ 485.487392][T12832] team0: Port device team_slave_1 added [ 485.684219][ T5819] Bluetooth: hci5: command tx timeout [ 485.699881][T11866] usb 1-1: USB disconnect, device number 66 [ 485.777398][T12832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.803231][T12832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.903263][T12832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.964623][T12832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.977702][T12832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.013255][T11751] ================================================================== [ 486.021518][T11751] BUG: KASAN: use-after-free in __mutex_lock+0x1861/0x1b90 [ 486.028790][T11751] Read of size 8 at addr ffff88802b6480a8 by task khidpd_04f55508/11751 [ 486.037141][T11751] [ 486.039555][T11751] CPU: 0 UID: 0 PID: 11751 Comm: khidpd_04f55508 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.039574][T11751] Tainted: [L]=SOFTLOCKUP [ 486.039578][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.039591][T11751] Call Trace: [ 486.039597][T11751] [ 486.039602][T11751] dump_stack_lvl+0x100/0x190 [ 486.039628][T11751] print_report+0x156/0x4c9 [ 486.039644][T11751] ? __virt_addr_valid+0x81/0x620 [ 486.039662][T11751] ? __phys_addr+0xe8/0x180 [ 486.039677][T11751] ? __mutex_lock+0x1861/0x1b90 [ 486.039693][T11751] kasan_report+0xdf/0x1e0 [ 486.039704][T11751] ? __mutex_lock+0x1861/0x1b90 [ 486.039720][T11751] __mutex_lock+0x1861/0x1b90 [ 486.039734][T11751] ? __pfx_debug_object_deactivate+0x10/0x10 [ 486.039752][T11751] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.039765][T11751] ? l2cap_unregister_user+0x71/0x240 [ 486.039783][T11751] ? _raw_spin_lock_irqsave+0x52/0x60 [ 486.039796][T11751] ? __pfx___mutex_lock+0x10/0x10 [ 486.039810][T11751] ? __try_to_del_timer_sync+0x107/0x160 [ 486.039827][T11751] ? rcu_is_watching+0x12/0xc0 [ 486.039840][T11751] ? lockdep_hardirqs_on+0x78/0x100 [ 486.039855][T11751] ? __try_to_del_timer_sync+0x107/0x160 [ 486.039870][T11751] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 486.039887][T11751] ? l2cap_unregister_user+0x71/0x240 [ 486.039902][T11751] l2cap_unregister_user+0x71/0x240 [ 486.039918][T11751] hidp_session_thread+0x459/0x680 [ 486.039932][T11751] ? __pfx_hidp_session_thread+0x10/0x10 [ 486.039944][T11751] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 486.039956][T11751] ? rcu_is_watching+0x12/0xc0 [ 486.039969][T11751] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 486.039981][T11751] ? __kthread_parkme+0x18c/0x230 [ 486.039998][T11751] ? kthread+0x13a/0x450 [ 486.040007][T11751] ? __pfx_hidp_session_thread+0x10/0x10 [ 486.040019][T11751] kthread+0x370/0x450 [ 486.040029][T11751] ? __pfx_kthread+0x10/0x10 [ 486.040039][T11751] ret_from_fork+0x754/0xd80 [ 486.040051][T11751] ? __pfx_ret_from_fork+0x10/0x10 [ 486.040063][T11751] ? __switch_to+0x7b4/0x1120 [ 486.040077][T11751] ? __pfx_kthread+0x10/0x10 [ 486.040087][T11751] ret_from_fork_asm+0x1a/0x30 [ 486.040104][T11751] [ 486.040108][T11751] [ 486.254185][T11751] The buggy address belongs to the physical page: [ 486.260612][T11751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b648 [ 486.269384][T11751] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 486.277882][T11751] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 486.285439][T11751] page_type: f5(slab) [ 486.289410][T11751] raw: 00fff00000000040 ffff888140aaf640 dead000000000122 0000000000000000 [ 486.297981][T11751] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 486.306548][T11751] head: 00fff00000000040 ffff888140aaf640 dead000000000122 0000000000000000 [ 486.315217][T11751] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 486.323874][T11751] head: 00fff00000000002 ffffea0000ad9201 00000000ffffffff 00000000ffffffff [ 486.332527][T11751] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 486.341175][T11751] page dumped because: kasan: bad access detected [ 486.347590][T11751] page_owner tracks the page as allocated [ 486.353283][T11751] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3523, tgid 3523 (kworker/u8:11), ts 486252901907, free_ts 485990894683 [ 486.374385][T11751] post_alloc_hook+0x153/0x170 [ 486.379149][T11751] get_page_from_freelist+0x111d/0x3140 [ 486.384686][T11751] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 486.390573][T11751] new_slab+0xa6/0x6b0 [ 486.394626][T11751] refill_objects+0x26b/0x400 [ 486.399291][T11751] __pcs_replace_empty_main+0x1ab/0x660 [ 486.404826][T11751] kmem_cache_alloc_node_noprof+0x569/0x6f0 [ 486.410712][T11751] kmalloc_reserve+0x148/0x350 [ 486.415482][T11751] __alloc_skb+0x185/0x710 [ 486.419903][T11751] skb_copy+0x1ca/0x3a0 [ 486.424136][T11751] mac80211_hwsim_tx_frame_no_nl.isra.0+0xbf6/0x1370 [ 486.430813][T11751] mac80211_hwsim_tx_frame+0x1f6/0x2a0 [ 486.436262][T11751] mac80211_hwsim_beacon_tx+0x57e/0xa00 [ 486.441801][T11751] __iterate_interfaces+0x2e6/0x650 [ 486.447016][T11751] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 486.454034][T11751] mac80211_hwsim_beacon+0x105/0x1b0 [ 486.459309][T11751] page last free pid 9631 tgid 9631 stack trace: [ 486.465623][T11751] __free_frozen_pages+0x7e1/0x10d0 [ 486.470817][T11751] hci_release_dev+0x4ef/0x630 [ 486.475576][T11751] bt_host_release+0x6a/0xb0 [ 486.480155][T11751] device_release+0xa4/0x240 [ 486.484739][T11751] kobject_put+0x1f7/0x640 [ 486.489151][T11751] put_device+0x1f/0x30 [ 486.493306][T11751] vhci_release+0x185/0x230 [ 486.497793][T11751] __fput+0x3ff/0xb40 [ 486.501766][T11751] task_work_run+0x150/0x240 [ 486.506356][T11751] do_exit+0x8b8/0x2b60 [ 486.510505][T11751] do_group_exit+0xd5/0x2a0 [ 486.515000][T11751] get_signal+0x1ec7/0x21e0 [ 486.519494][T11751] arch_do_signal_or_restart+0x91/0x7a0 [ 486.525031][T11751] exit_to_user_mode_loop+0x86/0x4a0 [ 486.530650][T11751] do_syscall_64+0x67c/0xf80 [ 486.535246][T11751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.541145][T11751] [ 486.543454][T11751] Memory state around the buggy address: [ 486.549180][T11751] ffff88802b647f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 486.557225][T11751] ffff88802b648000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 486.565278][T11751] >ffff88802b648080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 486.573324][T11751] ^ [ 486.578674][T11751] ffff88802b648100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 486.587152][T11751] ffff88802b648180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 486.595195][T11751] ================================================================== [ 486.603891][T11751] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 486.611082][T11751] CPU: 0 UID: 0 PID: 11751 Comm: khidpd_04f55508 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.622544][T11751] Tainted: [L]=SOFTLOCKUP [ 486.626875][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.636912][T11751] Call Trace: [ 486.640172][T11751] [ 486.643081][T11751] dump_stack_lvl+0x100/0x190 [ 486.647766][T11751] vpanic+0x552/0x970 [ 486.651739][T11751] ? __pfx_vpanic+0x10/0x10 [ 486.656240][T11751] ? mark_held_locks+0x40/0x70 [ 486.661167][T11751] ? __mutex_lock+0x1861/0x1b90 [ 486.666001][T11751] panic+0xd1/0xe0 [ 486.669708][T11751] ? __pfx_panic+0x10/0x10 [ 486.674115][T11751] ? check_panic_on_warn+0x1f/0x90 [ 486.679241][T11751] check_panic_on_warn.cold+0x19/0x34 [ 486.684695][T11751] end_report.part.0+0x3a/0x90 [ 486.689464][T11751] kasan_report.cold+0xe/0x18 [ 486.694138][T11751] ? __mutex_lock+0x1861/0x1b90 [ 486.698974][T11751] __mutex_lock+0x1861/0x1b90 [ 486.703640][T11751] ? __pfx_debug_object_deactivate+0x10/0x10 [ 486.709627][T11751] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.714979][T11751] ? l2cap_unregister_user+0x71/0x240 [ 486.720348][T11751] ? _raw_spin_lock_irqsave+0x52/0x60 [ 486.725697][T11751] ? __pfx___mutex_lock+0x10/0x10 [ 486.730704][T11751] ? __try_to_del_timer_sync+0x107/0x160 [ 486.736373][T11751] ? rcu_is_watching+0x12/0xc0 [ 486.741115][T11751] ? lockdep_hardirqs_on+0x78/0x100 [ 486.746315][T11751] ? __try_to_del_timer_sync+0x107/0x160 [ 486.751940][T11751] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 486.757986][T11751] ? l2cap_unregister_user+0x71/0x240 [ 486.763344][T11751] l2cap_unregister_user+0x71/0x240 [ 486.768532][T11751] hidp_session_thread+0x459/0x680 [ 486.773626][T11751] ? __pfx_hidp_session_thread+0x10/0x10 [ 486.779239][T11751] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 486.785457][T11751] ? rcu_is_watching+0x12/0xc0 [ 486.790200][T11751] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 486.796417][T11751] ? __kthread_parkme+0x18c/0x230 [ 486.801423][T11751] ? kthread+0x13a/0x450 [ 486.805756][T11751] ? __pfx_hidp_session_thread+0x10/0x10 [ 486.811375][T11751] kthread+0x370/0x450 [ 486.815430][T11751] ? __pfx_kthread+0x10/0x10 [ 486.819998][T11751] ret_from_fork+0x754/0xd80 [ 486.824834][T11751] ? __pfx_ret_from_fork+0x10/0x10 [ 486.829934][T11751] ? __switch_to+0x7b4/0x1120 [ 486.834591][T11751] ? __pfx_kthread+0x10/0x10 [ 486.839155][T11751] ret_from_fork_asm+0x1a/0x30 [ 486.843931][T11751] [ 486.847236][T11751] Kernel Offset: disabled [ 486.851986][T11751] Rebooting in 86400 seconds..