last executing test programs: 4.442814089s ago: executing program 2 (id=100): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000004a40)=[{&(0x7f0000002680)="b8e8", 0x2}, {&(0x7f0000002700)="d5dc54", 0x3}], 0x2) 4.315352553s ago: executing program 2 (id=101): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000040)={'macvtap0\x00', @random="00009e0c1100"}) 4.279689794s ago: executing program 2 (id=102): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x18, &(0x7f0000000380)={0x40, 0x6, 0x5, "361ff0214c"}, 0x0, 0x0, 0x0, 0x0}) 4.208660536s ago: executing program 4 (id=103): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_create(0x3, 0x0, &(0x7f00000005c0)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) timer_getoverrun(r2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffff}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000740)={0xc, 0xffffffffffff8001}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(0xffffffffffffffff, 0x0, 0x0) 4.11204805s ago: executing program 4 (id=104): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[], 0x0}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 3.846894158s ago: executing program 1 (id=105): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, 0x0, 0x0) rt_sigpending(0x0, 0x0) 3.834120479s ago: executing program 1 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf1d, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0xfff1, 0xffff}, {0x0, 0x5}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.809948819s ago: executing program 1 (id=107): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) 3.808924589s ago: executing program 1 (id=108): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010000020d00000904010102020d00000905820200020942f9090594d73c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.548724107s ago: executing program 3 (id=110): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.808877751s ago: executing program 0 (id=112): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 2.652108706s ago: executing program 4 (id=113): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x14, 0x1, 0x3d, 0x2}}, @mark={{0x10, 0x1, 0x24, 0x200}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}], 0x34}}], 0x1, 0x8845) 2.651800196s ago: executing program 4 (id=114): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_create(0x3, 0x0, &(0x7f00000005c0)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) timer_getoverrun(r2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffff}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000740)={0xc, 0xffffffffffff8001}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(0xffffffffffffffff, 0x0, 0x0) 2.651685416s ago: executing program 4 (id=115): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) unshare(0x22020600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x40000000) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r1 = io_uring_setup(0x4b93, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x20) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) 2.621589917s ago: executing program 4 (id=116): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000980)=ANY=[@ANYBLOB="4003cd00000049fefefc7ac8ad305c626f8e8420e0752d67dba79937abb515fd00000d3b28fb73a61b03f5b25524523cefe81a4a4d8a7d087e3b31b50bfbebb5d166c19710d6b3bf1079c34fe9d4b38837824852a07f8ae108a925f5ee39ba4035b63bd08af772777e0d5077b865f40671137bbeeb43720506af94fadf7660a66cad4d6dd0a5dcdcb0ca296dc05ba77162ab2e583df5030a0407"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.964891638s ago: executing program 0 (id=117): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000080)) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, 0x0) 1.90067831s ago: executing program 0 (id=118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}}, 0x16) 1.90057054s ago: executing program 0 (id=119): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.785618383s ago: executing program 1 (id=120): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x29, 0x80, 0x0, 0xe0) 1.759248584s ago: executing program 1 (id=121): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0}) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) 1.390041596s ago: executing program 2 (id=122): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x15, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x3e}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.327950908s ago: executing program 2 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x10004e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900150000000000060000000a008900000000"], 0x34}], 0x1, 0x0, 0x0, 0x40080}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000100)=""/113, 0x71}], 0x2, 0x48, 0x7) pipe(&(0x7f00000002c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 484.500445ms ago: executing program 3 (id=124): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) 482.071675ms ago: executing program 2 (id=125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x7d, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x499, 0x105d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x9, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0x15}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x97, "4f47fb0008a8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0xeb, 0x0, {0x7, 0x25, 0x1, 0xc, 0x2, 0xa1e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x9, 0xe2, {0x7, 0x25, 0x1, 0xc, 0x2, 0x200}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 477.177055ms ago: executing program 3 (id=126): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_create(0x3, 0x0, &(0x7f00000005c0)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) timer_getoverrun(r2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffff}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000740)={0xc, 0xffffffffffff8001}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) read(r6, 0x0, 0x0) 400.103478ms ago: executing program 3 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4004804) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 399.909528ms ago: executing program 3 (id=128): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000080)) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, 0x0) 338.001659ms ago: executing program 3 (id=129): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000a40)={0x0, 0x5, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0}) 54.456359ms ago: executing program 0 (id=130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18e0094}) 0s ago: executing program 0 (id=131): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x20, 0xc, 0x6f, "d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f25ca1276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6aef1b316e5666cb1952f1177e455fa014ffd83e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. [ 28.852670][ T28] audit: type=1400 audit(1781158804.521:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.856076][ T278] cgroup: Unknown subsys name 'net' [ 28.880606][ T28] audit: type=1400 audit(1781158804.531:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.902928][ T278] cgroup: Unknown subsys name 'devices' [ 28.902943][ T28] audit: type=1400 audit(1781158804.561:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.015596][ T278] cgroup: Unknown subsys name 'hugetlb' [ 29.021221][ T278] cgroup: Unknown subsys name 'rlimit' [ 29.125986][ T28] audit: type=1400 audit(1781158804.801:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.149547][ T28] audit: type=1400 audit(1781158804.801:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.174457][ T28] audit: type=1400 audit(1781158804.801:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.178808][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.206611][ T28] audit: type=1400 audit(1781158804.891:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.232052][ T28] audit: type=1400 audit(1781158804.891:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.243030][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.258345][ T28] audit: type=1400 audit(1781158804.911:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.291853][ T28] audit: type=1400 audit(1781158804.911:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.070587][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.077857][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.086023][ T286] device bridge_slave_0 entered promiscuous mode [ 30.094858][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.101926][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.109904][ T286] device bridge_slave_1 entered promiscuous mode [ 30.213237][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.220317][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.227900][ T287] device bridge_slave_0 entered promiscuous mode [ 30.235241][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.242307][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.249911][ T287] device bridge_slave_1 entered promiscuous mode [ 30.290454][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.297614][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.305263][ T288] device bridge_slave_0 entered promiscuous mode [ 30.335137][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.342214][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.349804][ T288] device bridge_slave_1 entered promiscuous mode [ 30.382425][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.389604][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.397099][ T290] device bridge_slave_0 entered promiscuous mode [ 30.405607][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.412668][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.420266][ T290] device bridge_slave_1 entered promiscuous mode [ 30.467863][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.475033][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.482516][ T289] device bridge_slave_0 entered promiscuous mode [ 30.513655][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.520728][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.528292][ T289] device bridge_slave_1 entered promiscuous mode [ 30.654406][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.661507][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.668835][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.675907][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.686358][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.693553][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.700829][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.708002][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.724572][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.731683][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.739018][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.746110][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.764227][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.771313][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.778651][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.785710][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.824708][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.832037][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.840304][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.847886][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.855548][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.862714][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.870122][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.877528][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.885965][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.893501][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.918805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.926769][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.935317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.944185][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.951222][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.958790][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.967059][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.974140][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.981626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.989907][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.996957][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.004471][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.012780][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.021220][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.028306][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.037043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.044908][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.065291][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.072846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.081487][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.089837][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.096893][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.104351][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.112358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.138839][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.147332][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.154441][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.161978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.170406][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.177488][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.185049][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.193380][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.200409][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.207832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.215983][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.224046][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.253989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.262847][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.271134][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.278215][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.285866][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.294885][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.303049][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.310132][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.317785][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.326421][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.334512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.342534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.350607][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.358780][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.366947][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.375367][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.383844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.391892][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.400011][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.408167][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.427546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.435643][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.444050][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.452410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.462448][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.470038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.481240][ T286] device veth0_vlan entered promiscuous mode [ 31.488007][ T288] device veth0_vlan entered promiscuous mode [ 31.505186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.513920][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.522085][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.530759][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.539875][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.548477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.557054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.565173][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.573573][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.581128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.588832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.596530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.610584][ T287] device veth0_vlan entered promiscuous mode [ 31.618581][ T289] device veth0_vlan entered promiscuous mode [ 31.626541][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.635036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.644551][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.652412][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.660636][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.668600][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.677516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.685200][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.692659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.700262][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.710446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.718950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.728298][ T290] device veth0_vlan entered promiscuous mode [ 31.740916][ T286] device veth1_macvtap entered promiscuous mode [ 31.752176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.760816][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.771239][ T288] device veth1_macvtap entered promiscuous mode [ 31.779928][ T290] device veth1_macvtap entered promiscuous mode [ 31.787779][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.804425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.812700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.821312][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.829957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.838395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.856128][ T287] device veth1_macvtap entered promiscuous mode [ 31.865207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.873645][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.881955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.890709][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.899576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.908142][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.917070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.933085][ T289] device veth1_macvtap entered promiscuous mode [ 31.944718][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.953846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.962361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.971184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.971364][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 32.005991][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.014935][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.024702][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.033110][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.056529][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.068866][ T315] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.084335][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.172136][ T324] syz.3.4 (324) used greatest stack depth: 22040 bytes left [ 32.423490][ T309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.463257][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.473371][ T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.523260][ T291] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.603247][ T309] usb 2-1: Using ep0 maxpacket: 32 [ 32.609487][ T309] usb 2-1: config 8 has an invalid interface number: 111 but max is 0 [ 32.617849][ T309] usb 2-1: config 8 has no interface number 0 [ 32.624001][ T309] usb 2-1: config 8 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 2007, setting to 1024 [ 32.635214][ T309] usb 2-1: config 8 interface 111 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 32.643415][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 32.652128][ T19] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.652129][ T309] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 32.652153][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.660659][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 32.669031][ T309] usb 2-1: Product: syz [ 32.679838][ T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.682082][ T309] usb 2-1: Manufacturer: syz [ 32.682099][ T309] usb 2-1: SerialNumber: syz [ 32.688116][ T19] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 32.701894][ T321] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 32.707923][ T311] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 32.730104][ T311] usb 5-1: config 0 has no interface number 0 [ 32.735631][ T291] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.736893][ T311] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.746133][ T291] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.755332][ T311] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.765451][ T291] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 32.785416][ T19] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 32.794734][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.794767][ T291] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 32.803585][ T311] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 32.812239][ T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.821133][ T19] usb 4-1: Product: syz [ 32.829861][ T291] usb 1-1: Product: syz [ 32.833611][ T19] usb 4-1: Manufacturer: syz [ 32.838203][ T291] usb 1-1: Manufacturer: syz [ 32.842137][ T19] usb 4-1: SerialNumber: syz [ 32.843250][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.847570][ T291] usb 1-1: SerialNumber: syz [ 32.864742][ T311] usb 5-1: config 0 descriptor?? [ 32.946334][ T321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 33.072698][ T326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.084101][ T291] usb 1-1: MIDIStreaming interface descriptor not found [ 33.091912][ T326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.104758][ T291] usb 1-1: USB disconnect, device number 2 [ 33.118549][ T309] usb 2-1: USB disconnect, device number 2 [ 33.283781][ T19] usb 4-1: unit 0 not found! [ 33.314322][ T311] hid (null): bogus close delimiter [ 33.319706][ T311] hid (null): unknown global tag 0xef [ 33.325203][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.332783][ T311] hid (null): report_id 0 is invalid [ 33.345891][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.353396][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.360803][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.368257][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.375724][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.383125][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.390608][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.398061][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.405504][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.412904][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.420529][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.428005][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.435455][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.442854][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.450288][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.457706][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.465148][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.472561][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.480003][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.488004][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.495969][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.504035][ T19] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 33.511870][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.519427][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.527119][ T19] usb 4-1: unit 0 not found! [ 33.531858][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.539542][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.547850][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.555797][ T19] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 33.563208][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.574205][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.581610][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.589538][ T6] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.599033][ T19] usb 4-1: unit 0 not found! [ 33.603744][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.612170][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.621856][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.631297][ T19] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 33.638686][ T6] usb 3-1: config 0 descriptor?? [ 33.644652][ T19] usb 4-1: USB disconnect, device number 2 [ 33.651554][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.660630][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.668137][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.675995][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.683847][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.691600][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.699078][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.706683][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.714287][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.721737][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.729218][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.736745][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.744213][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.751679][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.759233][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.768736][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.776833][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.784657][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.792091][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.799574][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.807057][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.814556][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.821968][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.829526][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.837566][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 33.898285][ T349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 33.914689][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 33.914718][ T28] audit: type=1400 audit(1781158809.561:117): avc: denied { prog_load } for pid=346 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.976420][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.983751][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.165703][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 34.173327][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 34.180849][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 34.190802][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 34.197118][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 34.203825][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x1 [ 34.211252][ T311] hid-generic 0003:6161:4D15.0001: unknown main item tag 0x0 [ 34.220927][ T6] usb 3-1: USB disconnect, device number 2 [ 34.227725][ T311] hid-generic 0003:6161:4D15.0001: bogus close delimiter [ 34.235035][ T28] audit: type=1400 audit(1781158809.561:118): avc: denied { perfmon } for pid=346 comm="syz.1.12" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.260593][ T311] hid-generic 0003:6161:4D15.0001: item 0 0 2 10 parsing failed [ 34.268763][ T311] hid-generic: probe of 0003:6161:4D15.0001 failed with error -22 [ 34.281161][ T311] usb 5-1: USB disconnect, device number 2 [ 34.283280][ T291] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.334662][ T28] audit: type=1400 audit(1781158810.011:119): avc: denied { prog_run } for pid=350 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.376158][ T28] audit: type=1400 audit(1781158810.051:120): avc: denied { create } for pid=354 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.391067][ T355] netlink: 'syz.3.15': attribute type 4 has an invalid length. [ 34.396679][ T28] audit: type=1400 audit(1781158810.051:121): avc: denied { write } for pid=354 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.424134][ T28] audit: type=1400 audit(1781158810.051:122): avc: denied { read } for pid=354 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.444445][ T28] audit: type=1400 audit(1781158810.061:123): avc: denied { create } for pid=354 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 34.465272][ T28] audit: type=1400 audit(1781158810.061:124): avc: denied { ioctl } for pid=354 comm="syz.3.15" path="socket:[15882]" dev="sockfs" ino=15882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.490729][ T28] audit: type=1400 audit(1781158810.061:125): avc: denied { bind } for pid=354 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.509980][ T291] usb 1-1: Using ep0 maxpacket: 8 [ 34.516166][ T291] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 34.525238][ T291] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 34.537128][ T291] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 34.546271][ T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.554356][ T291] usb 1-1: Product: syz [ 34.558552][ T291] usb 1-1: Manufacturer: syz [ 34.563218][ T291] usb 1-1: SerialNumber: syz [ 34.568538][ T291] usb 1-1: config 0 descriptor?? [ 34.573819][ T345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.582659][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.603241][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.634592][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.664520][ T28] audit: type=1400 audit(1781158810.341:126): avc: denied { mounton } for pid=356 comm="syz.1.16" path="/2/file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.763254][ T311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 34.784394][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.795685][ T6] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 34.805251][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.814196][ T6] usb 3-1: config 0 descriptor?? [ 34.846729][ T365] Zero length message leads to an empty skb [ 34.952972][ T355] syz.3.15 (355) used greatest stack depth: 21120 bytes left [ 34.960541][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 34.971430][ T311] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 34.986196][ T311] usb 5-1: config 0 interface 0 has no altsetting 0 [ 34.996458][ T311] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 35.008997][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.025543][ T311] usb 5-1: config 0 descriptor?? [ 35.293272][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.434605][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.441726][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.449117][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.456289][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.463617][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.470714][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.477841][ T19] usb 4-1: Using ep0 maxpacket: 8 [ 35.483124][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.490449][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.497888][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.505212][ T19] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 35.513472][ T19] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 35.523547][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.530647][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.537903][ T19] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 35.547841][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.554971][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.562057][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.569141][ T19] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 35.579155][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.586256][ T19] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 35.599319][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.606551][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.613690][ T19] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 35.622742][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.630818][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.637925][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.645668][ T6] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 35.653753][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.660884][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.669633][ T6] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4 [ 35.682583][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.689803][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.696972][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.708656][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.732774][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.753225][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.760416][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.768238][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.775376][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.782471][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.789587][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.796711][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.803844][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.810934][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.818474][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.825633][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.832740][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.839899][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.846992][ T311] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 35.854333][ T311] uclogic 0003:5543:0003.0002: No inputs registered, leaving [ 35.862353][ T311] uclogic 0003:5543:0003.0002: hidraw0: USB HID vff.ff Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 35.876126][ T311] usb 5-1: USB disconnect, device number 3 [ 35.910968][ T372] fido_id[372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 36.033210][ T309] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.139288][ T291] usb 3-1: USB disconnect, device number 3 [ 36.139617][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 36.214865][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.225837][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.235639][ T309] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 36.245029][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.253771][ T309] usb 2-1: config 0 descriptor?? [ 36.433233][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.446712][ T375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.455680][ T375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.465050][ T375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.473588][ T375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.482534][ T375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.491135][ T375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.500212][ T375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.508908][ T375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.614424][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.625407][ T6] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 36.634543][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.643364][ T6] usb 5-1: config 0 descriptor?? [ 36.651655][ T295] usb 1-1: USB disconnect, device number 3 [ 36.711604][ T384] netlink: 'syz.0.26': attribute type 12 has an invalid length. [ 36.719306][ T375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.719641][ T375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.852502][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 36.858883][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 36.866920][ T6] usb 5-1: USB disconnect, device number 4 [ 36.873610][ T309] usb 2-1: string descriptor 0 read error: -22 [ 36.953247][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.080942][ T309] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 37.092877][ T309] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 37.104256][ T309] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 37.112502][ T309] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 37.120293][ T309] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 37.129039][ T309] usb 2-1: USB disconnect, device number 3 [ 37.136368][ T24] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 37.146412][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 37.157340][ T24] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 37.166473][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.174753][ T24] usb 3-1: Product: syz [ 37.178963][ T24] usb 3-1: Manufacturer: syz [ 37.189106][ T24] usb 3-1: SerialNumber: syz [ 37.194422][ T24] usb 3-1: config 0 descriptor?? [ 37.373316][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.453242][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 37.553221][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 37.560129][ T311] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 37.571369][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.580457][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.588500][ T311] usb 1-1: Product: syz [ 37.592711][ T311] usb 1-1: Manufacturer: syz [ 37.597372][ T311] usb 1-1: SerialNumber: syz [ 37.634226][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.645411][ T6] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 37.654542][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.663380][ T6] usb 5-1: config 0 descriptor?? [ 37.807718][ T311] cdc_ncm 1-1:1.0: bind() failure [ 37.814686][ T311] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 37.821521][ T311] cdc_ncm 1-1:1.1: bind() failure [ 37.830474][ T311] usb 1-1: USB disconnect, device number 4 [ 37.873254][ T309] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.019471][ T291] usb 4-1: USB disconnect, device number 3 [ 38.054819][ T309] usb 2-1: unable to get BOS descriptor or descriptor too short [ 38.063466][ T309] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 38.071961][ T309] usb 2-1: config 114 has no interface number 0 [ 38.078719][ T309] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 38.089217][ T309] usb 2-1: config 114 interface 240 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 38.100314][ T309] usb 2-1: config 114 interface 240 has no altsetting 0 [ 38.109365][ T309] usb 2-1: string descriptor 0 read error: -22 [ 38.115637][ T309] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 38.124808][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.135824][ T393] raw-gadget.9 gadget.1: fail, usb_ep_enable returned -22 [ 38.143005][ T393] raw-gadget.9 gadget.1: fail, usb_ep_enable returned -22 [ 38.423280][ T291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.483615][ T6] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 38.490976][ T374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.500002][ T6] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 38.500676][ T374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.614465][ T291] usb 4-1: config 0 has no interfaces? [ 38.620047][ T291] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 38.629140][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.637979][ T291] usb 4-1: config 0 descriptor?? [ 38.663228][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.805935][ T291] usb 5-1: USB disconnect, device number 5 [ 38.806077][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 38.847677][ T396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.856378][ T396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.865443][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.867090][ T396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.876797][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 38.890203][ T396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.894122][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.910733][ T6] usb 4-1: USB disconnect, device number 4 [ 38.919120][ T24] usb 1-1: config 0 descriptor?? [ 39.127773][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 39.133833][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 39.141917][ T24] usb 1-1: USB disconnect, device number 5 [ 39.383223][ T6] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.573203][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 39.581024][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 39.590231][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.598392][ T6] usb 4-1: Product: syz [ 39.602684][ T6] usb 4-1: Manufacturer: syz [ 39.607420][ T6] usb 4-1: SerialNumber: syz [ 39.613292][ T6] usb 4-1: config 0 descriptor?? [ 39.693206][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.840526][ T6] usb 3-1: USB disconnect, device number 4 [ 39.884641][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.895672][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 39.904973][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.914117][ T24] usb 1-1: config 0 descriptor?? [ 40.174945][ T410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.183528][ T410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.243240][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 40.424440][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.435422][ T6] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.444540][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.453275][ T6] usb 3-1: config 0 descriptor?? [ 40.625676][ T291] usb 2-1: USB disconnect, device number 4 [ 40.661918][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 40.667961][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 40.679960][ T6] usb 3-1: USB disconnect, device number 5 [ 40.733617][ T24] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 40.741451][ T24] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 41.033846][ T24] usb 1-1: USB disconnect, device number 6 [ 41.039744][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 41.063252][ T291] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 41.205661][ T295] usb 4-1: USB disconnect, device number 5 [ 41.232340][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 41.232355][ T28] audit: type=1400 audit(1781158816.901:141): avc: denied { name_bind } for pid=417 comm="syz.3.39" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.259975][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 41.261181][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 41.269240][ T28] audit: type=1400 audit(1781158816.901:142): avc: denied { node_bind } for pid=417 comm="syz.3.39" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 41.302217][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.312418][ T291] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 41.321885][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.330842][ T291] usb 2-1: config 0 descriptor?? [ 41.444630][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.455680][ T6] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 41.464804][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.474488][ T6] usb 3-1: config 0 descriptor?? [ 41.681228][ T409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.690095][ T409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.741090][ T291] hid-generic 0003:0C70:F0B6.0004: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 41.997972][ T427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.007043][ T427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.067506][ T28] audit: type=1400 audit(1781158817.741:143): avc: denied { write } for pid=413 comm="syz.1.37" name="hidraw0" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.118924][ T430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.127549][ T430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.189178][ T433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.197747][ T433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.293746][ T309] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 42.313563][ T6] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 42.321255][ T6] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 42.433218][ T291] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 42.474350][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.485407][ T309] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 42.494681][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.503558][ T309] usb 1-1: config 0 descriptor?? [ 42.621657][ T24] usb 3-1: USB disconnect, device number 6 [ 42.621791][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 42.644417][ T291] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 42.654644][ T291] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 42.663982][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.713613][ T309] usbhid 1-1:0.0: can't add hid device: -71 [ 42.719672][ T309] usbhid: probe of 1-1:0.0 failed with error -71 [ 42.733497][ T309] usb 1-1: USB disconnect, device number 7 [ 43.293225][ T309] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.413352][ T291] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.474411][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.485435][ T309] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 43.494636][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.503645][ T309] usb 1-1: config 0 descriptor?? [ 43.593220][ T291] usb 3-1: Using ep0 maxpacket: 32 [ 43.599983][ T291] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 43.608449][ T291] usb 3-1: config 0 has no interface number 0 [ 43.616164][ T291] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 43.625275][ T291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.633350][ T291] usb 3-1: Product: syz [ 43.637540][ T291] usb 3-1: Manufacturer: syz [ 43.642144][ T291] usb 3-1: SerialNumber: syz [ 43.647807][ T291] usb 3-1: config 0 descriptor?? [ 43.654959][ T291] smsc95xx v2.0.0 [ 43.923610][ T24] usb 2-1: USB disconnect, device number 5 [ 44.256231][ T291] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 44.267054][ T291] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 44.276382][ T291] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 44.287267][ T291] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 44.294801][ T291] usb 3-1: USB disconnect, device number 7 [ 44.323722][ T309] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 44.324479][ T429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.332692][ T309] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 44.342146][ T429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.652578][ T291] usb 1-1: USB disconnect, device number 8 [ 44.658478][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 45.053234][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.063211][ T309] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.169703][ T291] usb 4-1: USB disconnect, device number 6 [ 45.233215][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 45.239612][ T6] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 45.252664][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 45.255302][ T309] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.259350][ T6] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 45.268909][ T309] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 45.276044][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.285472][ T309] usb 3-1: config 114 has no interface number 0 [ 45.298940][ T309] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 45.302725][ T6] usb 2-1: config 0 descriptor?? [ 45.309753][ T309] usb 3-1: config 114 interface 240 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 45.325610][ T309] usb 3-1: config 114 interface 240 has no altsetting 0 [ 45.334998][ T309] usb 3-1: string descriptor 0 read error: -22 [ 45.341296][ T309] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 45.350400][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.368682][ T446] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 45.383597][ T446] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 45.473207][ T331] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 45.583321][ T291] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.654449][ T331] usb 1-1: config 0 has no interfaces? [ 45.659968][ T331] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 45.669202][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.678486][ T331] usb 1-1: config 0 descriptor?? [ 45.720077][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.727520][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.734820][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.742092][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.749457][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.756793][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.764114][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.771363][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.773248][ T291] usb 4-1: Using ep0 maxpacket: 32 [ 45.778883][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.787424][ T291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 45.791272][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.804011][ T291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.808729][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.818101][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.824858][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.833405][ T291] usb 4-1: Product: syz [ 45.840192][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.844696][ T291] usb 4-1: Manufacturer: syz [ 45.851545][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.856600][ T291] usb 4-1: SerialNumber: syz [ 45.863359][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.883236][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.890328][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.897817][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.905186][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.912585][ T452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.921148][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.927507][ T452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.929477][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.941531][ T452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.943508][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.952530][ T452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.958962][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.973388][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.975193][ T331] usb 1-1: USB disconnect, device number 9 [ 45.980463][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 45.980488][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.000619][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.007720][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.014855][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.021932][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.029018][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.036137][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.043308][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.050397][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.057490][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.064590][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.071661][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.078777][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.085660][ T291] cdc_ncm 4-1:1.0: bind() failure [ 46.086213][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.098065][ T6] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 46.100060][ T291] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 46.106339][ T6] uclogic 0003:5543:0003.0005: No inputs registered, leaving [ 46.112841][ T291] cdc_ncm 4-1:1.1: bind() failure [ 46.122032][ T6] uclogic 0003:5543:0003.0005: hidraw0: USB HID vff.ff Device [HID 5543:0003] on usb-dummy_hcd.1-1/input0 [ 46.129521][ T291] usb 4-1: USB disconnect, device number 7 [ 46.148624][ T6] usb 2-1: USB disconnect, device number 6 [ 46.176598][ T460] fido_id[460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 46.563214][ T331] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 46.736085][ T470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.58'. [ 46.788570][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.795841][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.817018][ T291] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 46.833614][ T331] usb 1-1: Using ep0 maxpacket: 8 [ 46.876742][ T331] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 47.024459][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.057107][ T331] usb 1-1: Product: syz [ 47.061357][ T331] usb 1-1: Manufacturer: syz [ 47.066028][ T331] usb 1-1: SerialNumber: syz [ 47.071341][ T331] usb 1-1: config 0 descriptor?? [ 47.124497][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.135773][ T291] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 47.144921][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.153676][ T291] usb 2-1: config 0 descriptor?? [ 47.283215][ T295] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 47.362993][ T291] usbhid 2-1:0.0: can't add hid device: -71 [ 47.369085][ T291] usbhid: probe of 2-1:0.0 failed with error -71 [ 47.376441][ T291] usb 2-1: USB disconnect, device number 7 [ 47.463206][ T295] usb 5-1: Using ep0 maxpacket: 8 [ 47.469586][ T295] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 47.478840][ T295] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 47.491198][ T295] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 47.500542][ T295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.508733][ T295] usb 5-1: Product: syz [ 47.513100][ T295] usb 5-1: Manufacturer: syz [ 47.518201][ T295] usb 5-1: SerialNumber: syz [ 47.527157][ T295] usb 5-1: config 0 descriptor?? [ 47.532480][ T472] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 47.633809][ T475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.642449][ T475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.807706][ T24] usb 3-1: USB disconnect, device number 8 [ 47.813639][ T331] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 47.963216][ T291] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 48.004349][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.015321][ T331] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.024550][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.033237][ T331] usb 4-1: config 0 descriptor?? [ 48.164422][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.175436][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 48.182990][ T291] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 48.192098][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.200958][ T291] usb 2-1: config 0 descriptor?? [ 48.242706][ T331] usbhid 4-1:0.0: can't add hid device: -71 [ 48.248797][ T331] usbhid: probe of 4-1:0.0 failed with error -71 [ 48.256124][ T331] usb 4-1: USB disconnect, device number 8 [ 48.374325][ T24] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 48.384526][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 48.393606][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.407355][ T466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.416570][ T466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.663617][ T24] usb 1-1: USB disconnect, device number 10 [ 48.813214][ T331] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 48.994466][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.005437][ T331] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 49.014511][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.023509][ T331] usb 4-1: config 0 descriptor?? [ 49.043554][ T291] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 49.051189][ T291] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 49.345074][ T291] usb 2-1: USB disconnect, device number 8 [ 49.350958][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 49.843710][ T331] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 49.851464][ T331] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 50.034404][ T295] usb 5-1: USB disconnect, device number 6 [ 50.146497][ T311] usb 4-1: USB disconnect, device number 9 [ 50.146622][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 50.160759][ T331] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 50.183239][ T291] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 50.344356][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.355401][ T331] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 50.364533][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.373565][ T291] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 50.381677][ T291] usb 2-1: config 4 has no interface number 0 [ 50.387990][ T331] usb 1-1: config 0 descriptor?? [ 50.393035][ T291] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 50.405468][ T291] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 50.414632][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.422638][ T291] usb 2-1: Product: syz [ 50.426852][ T291] usb 2-1: Manufacturer: syz [ 50.431484][ T291] usb 2-1: SerialNumber: syz [ 50.443220][ T295] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 50.605490][ T331] usbhid 1-1:0.0: can't add hid device: -71 [ 50.611554][ T331] usbhid: probe of 1-1:0.0 failed with error -71 [ 50.619007][ T331] usb 1-1: USB disconnect, device number 11 [ 50.634495][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.645864][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.655786][ T295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.668832][ T295] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.677929][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.689883][ T295] usb 5-1: config 0 descriptor?? [ 50.833108][ T24] usb 3-1: USB disconnect, device number 9 [ 50.973255][ T291] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 51.104098][ T295] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 51.114054][ T295] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 51.153200][ T291] usb 4-1: Using ep0 maxpacket: 32 [ 51.159573][ T291] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 51.168014][ T291] usb 4-1: config 0 has no interface number 0 [ 51.174332][ T331] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 51.181975][ T291] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 51.192388][ T291] usb 4-1: config 0 interface 196 has no altsetting 0 [ 51.201046][ T291] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 51.210250][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.218320][ T291] usb 4-1: Product: syz [ 51.222581][ T291] usb 4-1: Manufacturer: syz [ 51.227255][ T291] usb 4-1: SerialNumber: syz [ 51.232776][ T291] usb 4-1: config 0 descriptor?? [ 51.238161][ T492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 51.364460][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.375498][ T331] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 51.385119][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.394494][ T331] usb 1-1: config 0 descriptor?? [ 51.651943][ T291] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 51.718428][ T28] audit: type=1400 audit(1781158827.391:144): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.767899][ T28] audit: type=1400 audit(1781158827.441:145): avc: denied { getattr } for pid=500 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=503 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.799514][ T28] audit: type=1400 audit(1781158827.471:146): avc: denied { read } for pid=502 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=503 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.821812][ T28] audit: type=1400 audit(1781158827.471:147): avc: denied { open } for pid=502 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=503 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.876786][ T28] audit: type=1400 audit(1781158827.551:148): avc: denied { create } for pid=499 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.899280][ T28] audit: type=1400 audit(1781158827.551:149): avc: denied { write } for pid=499 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1026 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.925542][ T28] audit: type=1400 audit(1781158827.551:150): avc: denied { append } for pid=499 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1026 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.949942][ T28] audit: type=1400 audit(1781158827.621:151): avc: denied { unlink } for pid=510 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1026 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.243746][ T331] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 52.244514][ T484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.257152][ T331] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 52.259871][ T484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.276192][ T28] audit: type=1400 audit(1781158827.951:152): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=702 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.298628][ T28] audit: type=1400 audit(1781158827.951:153): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=702 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.594691][ T331] usb 1-1: USB disconnect, device number 12 [ 52.600682][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 52.912565][ T331] usb 2-1: USB disconnect, device number 9 [ 52.933562][ T311] ipheth 4-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 52.935854][ T478] usb 4-1: USB disconnect, device number 10 [ 52.973819][ T478] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 53.153625][ T295] usb 5-1: USB disconnect, device number 7 [ 53.219413][ T538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 53.274323][ T538] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.281573][ T538] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.973932][ T478] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 54.174393][ T478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.185387][ T478] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.194772][ T478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.203939][ T478] usb 4-1: config 0 descriptor?? [ 54.263191][ T291] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 54.273295][ T295] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 54.412454][ T478] usbhid 4-1:0.0: can't add hid device: -71 [ 54.418536][ T478] usbhid: probe of 4-1:0.0 failed with error -71 [ 54.425930][ T478] usb 4-1: USB disconnect, device number 11 [ 54.453352][ T295] usb 1-1: Using ep0 maxpacket: 16 [ 54.459728][ T295] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 54.468003][ T295] usb 1-1: config 0 has no interface number 0 [ 54.469095][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.474862][ T295] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.487813][ T291] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.505126][ T295] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.507081][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.522974][ T295] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 54.532430][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.537179][ T291] usb 5-1: config 0 descriptor?? [ 54.547764][ T295] usb 1-1: config 0 descriptor?? [ 54.750333][ T291] usbhid 5-1:0.0: can't add hid device: -71 [ 54.756474][ T291] usbhid: probe of 5-1:0.0 failed with error -71 [ 54.761048][ T558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.772268][ T558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.774360][ T291] usb 5-1: USB disconnect, device number 8 [ 54.943263][ T311] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 54.986697][ T295] hid (null): bogus close delimiter [ 54.992152][ T295] hid (null): unknown global tag 0xef [ 54.997661][ T295] hid (null): report_id 0 is invalid [ 55.009739][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.017200][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.023262][ T478] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 55.032421][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.039915][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.047383][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.054793][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.062168][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.069590][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.077017][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.084443][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.091840][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.099428][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.106920][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.114352][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.121746][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.129161][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.136645][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.144127][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.151670][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.159127][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.166632][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.174077][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.181532][ T311] usb 2-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 55.192622][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.200166][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.207639][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.215036][ T478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.215087][ T478] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 55.226127][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.236233][ T478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.242826][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.253710][ T478] usb 4-1: config 0 descriptor?? [ 55.258281][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.270361][ T311] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 55.279476][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.286919][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.294983][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.302385][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.309816][ T311] usb 2-1: Product: syz [ 55.314010][ T311] usb 2-1: Manufacturer: syz [ 55.318625][ T311] usb 2-1: SerialNumber: syz [ 55.323276][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.330694][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.338545][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.343227][ T291] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 55.346596][ T311] usb 2-1: config 0 descriptor?? [ 55.358552][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.366045][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.373963][ T311] cdc_acm 2-1:0.0: skipping garbage [ 55.380017][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.387516][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.394962][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.402377][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.409841][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.417317][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.424797][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.432201][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.439661][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.447101][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.454549][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.461958][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.469383][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.470907][ T540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.476818][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.476903][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.490347][ T540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.492621][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.515167][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.522580][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.530041][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.537498][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.544921][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.544926][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.552321][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.552352][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x1 [ 55.578003][ T295] hid-generic 0003:6161:4D15.0007: unknown main item tag 0x0 [ 55.585455][ T295] hid-generic 0003:6161:4D15.0007: bogus close delimiter [ 55.592502][ T295] hid-generic 0003:6161:4D15.0007: item 0 0 2 10 parsing failed [ 55.598526][ T291] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 55.609475][ T295] hid-generic: probe of 0003:6161:4D15.0007 failed with error -22 [ 55.617814][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.625305][ T295] usb 1-1: USB disconnect, device number 13 [ 55.632248][ T291] usb 5-1: config 0 descriptor?? [ 55.638131][ T309] usb 2-1: USB disconnect, device number 10 [ 56.133575][ T478] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 56.141191][ T478] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 56.403311][ T309] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 56.438078][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 56.446377][ T478] usb 4-1: USB disconnect, device number 12 [ 56.463577][ T291] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 56.471169][ T291] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 56.583198][ T309] usb 2-1: Using ep0 maxpacket: 8 [ 56.589312][ T309] usb 2-1: config 0 interface 0 has no altsetting 0 [ 56.596013][ T309] usb 2-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 56.605177][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.614137][ T309] usb 2-1: config 0 descriptor?? [ 56.766600][ T478] usb 5-1: USB disconnect, device number 9 [ 56.772469][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 56.967628][ T589] device syzkaller0 entered promiscuous mode [ 56.975147][ T589] fuse: Bad value for 'fd' [ 56.980334][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 56.980357][ T28] audit: type=1400 audit(1781158832.651:163): avc: denied { ioctl } for pid=588 comm="syz.2.96" path="socket:[16292]" dev="sockfs" ino=16292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.021989][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.029432][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.036994][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.044306][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.051423][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.058684][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.065950][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.073066][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.080418][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.087669][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.094918][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.102024][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.109312][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.116781][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.123266][ T295] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 57.137392][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144672][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144699][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144732][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144754][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144775][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144796][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144817][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144839][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144860][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144881][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144902][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144922][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144944][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144968][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.144988][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145009][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145030][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145051][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145072][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145093][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145114][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145135][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145156][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145178][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145203][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145224][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145244][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145264][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145284][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145304][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145324][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145345][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145366][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145387][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145407][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145429][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145450][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145471][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145492][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145518][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145540][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145561][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145581][ T309] appleir 0003:05AC:8240.0008: unknown main item tag 0x0 [ 57.145602][ T309] appleir 0003:05AC:8240.0008: report_id 0 is invalid [ 57.145618][ T309] appleir 0003:05AC:8240.0008: item 0 0 1 8 parsing failed [ 57.145832][ T309] appleir 0003:05AC:8240.0008: parse failed [ 57.145871][ T309] appleir: probe of 0003:05AC:8240.0008 failed with error -22 [ 57.245409][ T6] usb 2-1: USB disconnect, device number 11 [ 57.514413][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.525523][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.535384][ T295] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 57.544477][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.553415][ T295] usb 1-1: config 0 descriptor?? [ 57.623197][ T309] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 57.753221][ T19] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 57.813234][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 57.819981][ T309] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.831695][ T309] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.842704][ T309] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 57.851914][ T309] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 57.860361][ T309] usb 3-1: Product: syz [ 57.864604][ T309] usb 3-1: Manufacturer: syz [ 57.871147][ T309] hub 3-1:4.0: USB hub found [ 57.943206][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 57.949565][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.960526][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.972086][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 57.981361][ T295] hid-generic 0003:0C70:F0B6.0009: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 57.994092][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.003755][ T19] usb 5-1: config 0 descriptor?? [ 58.012870][ T19] hub 5-1:0.0: USB hub found [ 58.022499][ T28] audit: type=1400 audit(1781158833.691:164): avc: denied { create } for pid=618 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.041908][ T28] audit: type=1400 audit(1781158833.691:165): avc: denied { write } for pid=618 comm="syz.3.109" path="socket:[16328]" dev="sockfs" ino=16328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.072246][ T309] hub 3-1:4.0: 2 ports detected [ 58.083196][ T478] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 58.213175][ T19] hub 5-1:0.0: 1 port detected [ 58.233915][ T295] usb 1-1: USB disconnect, device number 14 [ 58.264332][ T478] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.276246][ T478] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x94, skipping [ 58.288344][ T478] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.297684][ T478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.305859][ T478] usb 2-1: Product: syz [ 58.310051][ T478] usb 2-1: Manufacturer: syz [ 58.314725][ T478] usb 2-1: SerialNumber: syz [ 58.343313][ T6] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 58.413746][ T19] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 58.420155][ T19] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 58.429338][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 58.435385][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 58.473561][ T19] usb 5-1: USB disconnect, device number 10 [ 58.525839][ T6] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 58.535016][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.543057][ T6] usb 4-1: Product: syz [ 58.547285][ T6] usb 4-1: Manufacturer: syz [ 58.551904][ T6] usb 4-1: SerialNumber: syz [ 58.557544][ T6] usb 4-1: config 0 descriptor?? [ 58.756451][ T28] audit: type=1400 audit(1781158834.431:166): avc: denied { create } for pid=624 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 58.775811][ T28] audit: type=1400 audit(1781158834.431:167): avc: denied { mount } for pid=624 comm="syz.0.111" name="/" dev="ramfs" ino=16343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 58.970196][ T28] audit: type=1400 audit(1781158834.641:168): avc: denied { create } for pid=634 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 59.263191][ T6] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 59.285301][ T291] hub 3-1:4.0: activate --> -90 [ 59.325761][ T478] cdc_ncm 2-1:1.0: bind() failure [ 59.332049][ T478] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 59.339671][ T478] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 59.347385][ T478] usb 2-1: USB disconnect, device number 12 [ 59.444369][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.455393][ T6] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 59.464669][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.473990][ T6] usb 5-1: config 0 descriptor?? [ 59.681961][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 59.688143][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 59.695954][ T331] usb 3-1: USB disconnect, device number 10 [ 59.702970][ T291] usb 3-1-port2: config error [ 59.709778][ T6] usb 5-1: USB disconnect, device number 11 [ 59.838314][ T28] audit: type=1400 audit(1781158835.511:169): avc: denied { create } for pid=647 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.983268][ T295] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 60.133200][ T19] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 60.164567][ T295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.172958][ T295] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.183146][ T295] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.193574][ T295] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 60.202720][ T295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.210933][ T295] usb 1-1: Product: syz [ 60.215865][ T295] usb 1-1: Manufacturer: syz [ 60.220741][ T295] usb 1-1: SerialNumber: syz [ 60.230505][ T295] usb 1-1: selecting invalid altsetting 1 [ 60.236717][ T295] usb 1-1: unit 6 not found! [ 60.273215][ T6] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 60.363298][ T657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.123'. [ 60.411916][ T657] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.419176][ T657] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.654632][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.665762][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.675787][ T19] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 60.685077][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.694479][ T19] usb 2-1: config 0 descriptor?? [ 60.744492][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.755476][ T6] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 60.764732][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.773764][ T6] usb 5-1: config 0 descriptor?? [ 61.055561][ T295] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 61.064850][ T295] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 61.074723][ T295] usb 1-1: USB disconnect, device number 15 [ 61.095257][ T342] usb 4-1: USB disconnect, device number 13 [ 61.144210][ T19] hid-generic 0003:0C70:F0B6.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 61.181079][ T28] audit: type=1400 audit(1781158836.851:170): avc: denied { map_read map_write } for pid=668 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.293598][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.371954][ T675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.380681][ T675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.443221][ T331] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 61.593591][ T6] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 61.601294][ T6] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 61.634388][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.645377][ T331] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 61.654688][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.663293][ T342] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 61.664414][ T331] usb 3-1: config 0 descriptor?? [ 61.853193][ T291] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 61.863332][ T342] usb 4-1: Using ep0 maxpacket: 32 [ 61.870204][ T342] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 61.879582][ T342] usb 4-1: config 0 has no interface number 0 [ 61.885833][ T342] usb 4-1: config 0 interface 12 has no altsetting 0 [ 61.888604][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 61.895697][ T342] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 61.898931][ T331] usbhid: probe of 3-1:0.0 failed with error -71 [ 61.907663][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.907686][ T342] usb 4-1: Product: syz [ 61.917301][ T331] usb 3-1: USB disconnect, device number 11 [ 61.931960][ T342] usb 4-1: Manufacturer: syz [ 61.937088][ T342] usb 4-1: SerialNumber: syz [ 61.943576][ T342] usb 4-1: config 0 descriptor?? [ 61.991456][ C0] ================================================================================ [ 62.000767][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 62.009374][ C0] index 38062 is out of range for type 'const int[34]' [ 62.016266][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 62.023310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 62.033413][ C0] Call Trace: [ 62.036728][ C0] [ 62.039573][ C0] __dump_stack+0x21/0x24 [ 62.043920][ C0] dump_stack_lvl+0x110/0x170 [ 62.048618][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.053691][ C0] dump_stack+0x15/0x24 [ 62.057865][ C0] ubsan_epilogue+0xe/0x40 [ 62.062289][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 62.068020][ C0] ? __kasan_check_write+0x14/0x20 [ 62.073166][ C0] aiptek_irq+0x208d/0x29b0 [ 62.077716][ C0] ? kcov_remote_start+0x2c9/0x370 [ 62.082858][ C0] __usb_hcd_giveback_urb+0x364/0x520 [ 62.083484][ T291] usb 1-1: Using ep0 maxpacket: 32 [ 62.088273][ C0] usb_hcd_giveback_urb+0x11c/0x410 [ 62.098639][ C0] dummy_timer+0x88c/0x3070 [ 62.101125][ T291] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 62.103191][ C0] ? __kasan_check_write+0x14/0x20 [ 62.118044][ T291] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 62.118312][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 62.127968][ T291] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 62.132288][ C0] ? timerqueue_del+0xd3/0x120 [ 62.142734][ T291] usb 1-1: Product: syz [ 62.145206][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 62.149901][ T291] usb 1-1: Manufacturer: syz [ 62.154331][ C0] __hrtimer_run_queues+0x3bb/0x8e0 [ 62.159411][ T291] usb 1-1: SerialNumber: syz [ 62.164154][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 62.171286][ T291] usb 1-1: config 0 descriptor?? [ 62.173974][ C0] hrtimer_run_softirq+0x19b/0x260 [ 62.174005][ C0] handle_softirqs+0x1d7/0x600 [ 62.180113][ T679] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 62.184057][ C0] ? irqtime_account_irq+0xc4/0x240 [ 62.191059][ T291] hub 1-1:0.0: bad descriptor, ignoring hub [ 62.195933][ C0] __irq_exit_rcu+0x52/0xf0 [ 62.195964][ C0] irq_exit_rcu+0x9/0x10 [ 62.201441][ T291] hub: probe of 1-1:0.0 failed with error -5 [ 62.207062][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 62.207090][ C0] [ 62.230364][ C0] [ 62.233300][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 62.239326][ C0] RIP: 0010:default_idle+0xf/0x20 [ 62.244369][ C0] Code: 37 e5 b4 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 23 f3 63 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 62.263991][ C0] RSP: 0018:ffffffff87007d58 EFLAGS: 00000257 [ 62.270069][ C0] RAX: ffff8881f6e00000 RBX: ffffffff8701c680 RCX: 063a83747985ef00 [ 62.278041][ C0] RDX: 0000000000000001 RSI: ffffffff85ca8cc0 RDI: ffffffff85ca8c80 [ 62.286017][ C0] RBP: ffffffff87007d58 R08: ffff8881f6e348b3 R09: 1ffff1103edc6916 [ 62.294008][ C0] R10: 0000000000000000 R11: ffffffff85023e50 R12: dffffc0000000000 [ 62.301998][ C0] R13: 0000000000000000 R14: ffffffff8701c680 R15: dffffc0000000000 [ 62.309988][ C0] ? __cfi_default_idle+0x10/0x10 [ 62.315043][ C0] arch_cpu_idle+0x1c/0x20 [ 62.319473][ C0] default_idle_call+0x71/0x1d0 [ 62.324351][ C0] do_idle+0x354/0x640 [ 62.328439][ C0] ? ct_irq_exit+0x9/0x10 [ 62.332794][ C0] ? irqentry_exit+0x30/0x40 [ 62.337396][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 62.342616][ C0] cpu_startup_entry+0x43/0x60 [ 62.347444][ C0] rest_init+0x10a/0x130 [ 62.351709][ C0] ? __cfi_x86_late_time_init+0x8/0x8 [ 62.357110][ C0] arch_call_rest_init+0xe/0x10 [ 62.361984][ C0] start_kernel+0x483/0x4f1 [ 62.366505][ C0] x86_64_start_reservations+0x2a/0x2c [ 62.371980][ C0] x86_64_start_kernel+0x7c/0x81 [ 62.376951][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 62.382863][ C0] [ 62.385899][ C0] ================================================================================ [ 62.395231][ C0] ================================================================================ [ 62.404516][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 62.413116][ C0] index 38063 is out of range for type 'const int[34]' [ 62.419977][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 62.427010][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 62.437079][ C0] Call Trace: [ 62.440369][ C0] [ 62.443226][ C0] __dump_stack+0x21/0x24 [ 62.447576][ C0] dump_stack_lvl+0x110/0x170 [ 62.452270][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.457326][ C0] dump_stack+0x15/0x24 [ 62.461503][ C0] ubsan_epilogue+0xe/0x40 [ 62.465942][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 62.471684][ C0] aiptek_irq+0x1f6d/0x29b0 [ 62.476207][ C0] __usb_hcd_giveback_urb+0x364/0x520 [ 62.481606][ C0] usb_hcd_giveback_urb+0x11c/0x410 [ 62.486828][ C0] dummy_timer+0x88c/0x3070 [ 62.491363][ C0] ? __kasan_check_write+0x14/0x20 [ 62.496495][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 62.501452][ C0] ? timerqueue_del+0xd3/0x120 [ 62.506236][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 62.511200][ C0] __hrtimer_run_queues+0x3bb/0x8e0 [ 62.516429][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 62.521568][ C0] hrtimer_run_softirq+0x19b/0x260 [ 62.526690][ C0] handle_softirqs+0x1d7/0x600 [ 62.531467][ C0] ? irqtime_account_irq+0xc4/0x240 [ 62.536695][ C0] __irq_exit_rcu+0x52/0xf0 [ 62.541221][ C0] irq_exit_rcu+0x9/0x10 [ 62.545483][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 62.551133][ C0] [ 62.554073][ C0] [ 62.557017][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 62.563023][ C0] RIP: 0010:default_idle+0xf/0x20 [ 62.568070][ C0] Code: 37 e5 b4 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 23 f3 63 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 62.587691][ C0] RSP: 0018:ffffffff87007d58 EFLAGS: 00000257 [ 62.593772][ C0] RAX: ffff8881f6e00000 RBX: ffffffff8701c680 RCX: 063a83747985ef00 [ 62.601766][ C0] RDX: 0000000000000001 RSI: ffffffff85ca8cc0 RDI: ffffffff85ca8c80 [ 62.609753][ C0] RBP: ffffffff87007d58 R08: ffff8881f6e348b3 R09: 1ffff1103edc6916 [ 62.617746][ C0] R10: 0000000000000000 R11: ffffffff85023e50 R12: dffffc0000000000 [ 62.625730][ C0] R13: 0000000000000000 R14: ffffffff8701c680 R15: dffffc0000000000 [ 62.633723][ C0] ? __cfi_default_idle+0x10/0x10 [ 62.638772][ C0] arch_cpu_idle+0x1c/0x20 [ 62.643201][ C0] default_idle_call+0x71/0x1d0 [ 62.648075][ C0] do_idle+0x354/0x640 [ 62.652159][ C0] ? ct_irq_exit+0x9/0x10 [ 62.656504][ C0] ? irqentry_exit+0x30/0x40 [ 62.661107][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 62.666333][ C0] cpu_startup_entry+0x43/0x60 [ 62.671116][ C0] rest_init+0x10a/0x130 [ 62.675372][ C0] ? __cfi_x86_late_time_init+0x8/0x8 [ 62.680775][ C0] arch_call_rest_init+0xe/0x10 [ 62.685682][ C0] start_kernel+0x483/0x4f1 [ 62.690209][ C0] x86_64_start_reservations+0x2a/0x2c [ 62.695688][ C0] x86_64_start_kernel+0x7c/0x81 [ 62.700648][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 62.706561][ C0] [ 62.709589][ C0] ================================================================================ [ 62.742052][ T295] usb 5-1: USB disconnect, device number 12 [ 62.748056][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 62.913224][ T331] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 62.931264][ T28] audit: type=1400 audit(1781158838.601:171): avc: denied { read write } for pid=678 comm="syz.0.131" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.932709][ T679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.954766][ T28] audit: type=1400 audit(1781158838.601:172): avc: denied { open } for pid=678 comm="syz.0.131" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.969248][ T679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.094405][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.105448][ T331] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 63.114553][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.123588][ T331] usb 3-1: config 0 descriptor?? [ 63.397628][ T679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.406283][ T679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.530066][ T666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.538596][ T342] usb 1-1: USB disconnect, device number 16 [ 63.538657][ T666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.623480][ T309] usb 2-1: USB disconnect, device number 13 [ 63.883226][ T342] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 63.973575][ T331] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 63.981183][ T331] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 64.064336][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 64.076798][ T342] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.085906][ T342] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.094234][ T342] usb 1-1: Product: syz [ 64.098519][ T342] usb 1-1: Manufacturer: syz [ 64.103169][ T342] usb 1-1: SerialNumber: syz [ 64.108503][ T342] usb 1-1: config 0 descriptor?? [ 64.113849][ T679] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 64.121502][ T342] hub 1-1:0.0: bad descriptor, ignoring hub [ 64.127468][ T342] hub: probe of 1-1:0.0 failed with error -5 [ 64.272376][ T342] usb 3-1: USB disconnect, device number 12 [ 64.272553][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 64.295622][ T331] usb 4-1: USB disconnect, device number 14 [ 64.443275][ T295] usb 1-1: USB disconnect, device number 17