last executing test programs: 8.117446977s ago: executing program 0 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400800010"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0xa02, 0x27) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './tracefs', [], 0xa, "e2d1da8f"}, 0x11) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './config/usb_gadget/g1/functions/mass_storage.usb0/file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.usb0/lun.0/nofua\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000001140)={0x2020}, 0x2020) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="26acd69f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x8000, 0xc02) ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, &(0x7f00000000c0)) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) 7.961736627s ago: executing program 1 (id=301): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.834578738s ago: executing program 1 (id=304): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) unshare(0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 7.687480246s ago: executing program 3 (id=306): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x4) 7.226072304s ago: executing program 2 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='rd_pages=1024\n\x00', 0xf) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000440)='naa.6001405123456780\n\x00', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f00000004c0)='./config/target/core/rd_mcp_0/dev0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\n\x00', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000600)='dummy_udc.0\n\x00', 0xd) nanosleep(&(0x7f0000000640)={0x1}, 0x0) syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000680), 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000680), 0x2, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./payload\x00', 0x42, 0x1ff) write(r6, &(0x7f0000001000)="000000000000000011223344556677880000000000000000", 0x18) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000800)={0x0, 0xfffffffe, 0xa, 0x20, @buffer={0x0, 0x18, &(0x7f0000001000)=""/24}, &(0x7f0000002000)="5f000000000000001800", &(0x7f0000003000)=""/32, 0x1388, 0x0, 0x0, 0x0}) 6.979378651s ago: executing program 0 (id=309): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='R\x00', @ANYRES8=r1], 0x14) 6.190134886s ago: executing program 1 (id=310): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x181402, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r5 = syz_open_pts(r0, 0x20800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x2}, 0x50) syz_emit_ethernet(0x2c, &(0x7f0000000440)={@random="989998ac1594", @remote, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0xaa, 0xab, "e556", "f594c8", 0x22f0, "f6c9a584e269906ca4511aab6fa4428d58e343ea17"}}}}}}, &(0x7f0000000480)={0x1, 0x3, [0x4c7, 0x11f, 0x625, 0xb73]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r7}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r8, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xfffffffffffffcbf, 0x0}}, 0x10) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x41c}}}, 0x7) ioctl$TIOCSTI(r5, 0x5412, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 6.091860576s ago: executing program 2 (id=311): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="f6010102000000102505a8a4400001020301093a6081ea6b2b5e8613618afa021b00010101400609"], 0x0) r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0003ff00000004034a04"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) 5.701127876s ago: executing program 4 (id=313): r0 = io_uring_setup(0x180d, &(0x7f0000000040)={0x0, 0x4176, 0x400, 0x8001002, 0x3d6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) io_uring_enter(r2, 0x4095, 0x7721, 0x16, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.654905632s ago: executing program 4 (id=314): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x2c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) r5 = userfaultfd(0x1) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x10000000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) epoll_pwait2(r6, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e04001220"], 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x48014, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6}}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50158}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x5}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xfffffff8, 0x671, 0x7}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x40080) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 4.699402943s ago: executing program 1 (id=315): pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8001, 0xd) 4.624201388s ago: executing program 1 (id=316): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x80041, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x203e}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r1, 0x0, &(0x7f0000000000), 0x80800) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0x106, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x141c, &(0x7f0000000140)={0x0, 0x2af5, 0x10, 0x2, 0x139}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000001c0)) setgroups(0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.525482567s ago: executing program 0 (id=317): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x4) 4.514112149s ago: executing program 3 (id=318): socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x88) 4.378331601s ago: executing program 0 (id=319): r0 = io_uring_setup(0x180d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r2, 0x4095, 0x7721, 0x16, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.376793719s ago: executing program 2 (id=320): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) unshare(0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 4.226543266s ago: executing program 3 (id=321): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='rd_pages=1024\n\x00', 0xf) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000440)='naa.6001405123456780\n\x00', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f00000004c0)='./config/target/core/rd_mcp_0/dev0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\n\x00', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000600)='dummy_udc.0\n\x00', 0xd) nanosleep(&(0x7f0000000640)={0x1}, 0x0) syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000680), 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000680), 0x2, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./payload\x00', 0x42, 0x1ff) write(r6, &(0x7f0000001000)="000000000000000011223344556677880000000000000000", 0x18) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000800)={0x0, 0xfffffffe, 0xa, 0x20, @buffer={0x0, 0x18, &(0x7f0000001000)=""/24}, &(0x7f0000002000)="5f000000000000001800", &(0x7f0000003000)=""/32, 0x1388, 0x0, 0x0, 0x0}) 4.089778629s ago: executing program 0 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x20000000, &(0x7f0000000b00)="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", 0xb70, &(0x7f0000001b00), 0x0, &(0x7f0000001b80)="98e95da660e4f6a264a641ae8564ee0a8fdd089153e754a58256269aa14e93d3e36b66d520130a505eea361f504ca348ad48bccab7306f5e0397546538faf8737e193eddd879a4efba7092b6d3227ada7bfef5f12272ee212072720d6c96b81cf5ec00113b68c5b107be97bf11e0fc3b2087e3ffe146cffbe111c9e3fea4c84ad8298e8c87c4a5a5698e1d5b71680e5a2b64858da4de4401dfa5e52dc592c76915ad19d4d4ba61f0410ae2bfc3d5f03c0c4769213f071ce0a9fbd92968e5a5f1a15190255812c786e0ce") pipe2$9p(0x0, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r1, 0x0, 0xffe) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000000240)}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x150) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x9, @loopback, 0x5}, 0x1c) 4.088337623s ago: executing program 4 (id=323): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c00000002000001080009400000000214000000110001"], 0x44}}, 0x4) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_clone(0x20000000, &(0x7f0000000b00)="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", 0xc00, &(0x7f0000001b00), &(0x7f0000001b40), 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001c80)=0x8) pipe2$9p(&(0x7f00000001c0), 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r3, 0x0, 0x0) 2.97659259s ago: executing program 2 (id=324): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2.422294979s ago: executing program 3 (id=325): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) io_setup(0xc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 2.274432152s ago: executing program 4 (id=326): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="ff0f00"/20, @ANYRES32, @ANYBLOB="003a2bceb800000000000000000000080000e6f1a467f9643cc68435e5522e00fd0d000000"], 0x50) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000540)={@my=0x1}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000000c0)=r4, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$unix(r2, 0x0, 0x44004) connect$unix(r5, &(0x7f0000000200)=@abs={0x27, 0x0, 0x4e24}, 0x6e) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000200), 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000440)={0x1, 0xa, 0x5}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000001010900000f0000da0b00", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000020000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.111324441s ago: executing program 2 (id=327): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 942.536464ms ago: executing program 0 (id=328): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810101400000000000109022400010000000009040000030300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x2) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x0, 0xe, 0x10, {0x10, 0x0, "335b8f06c8651bf76413670a86bc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 793.390012ms ago: executing program 2 (id=329): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x4) 582.642145ms ago: executing program 3 (id=330): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x4) 547.870332ms ago: executing program 1 (id=331): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="f6010102000000102505a8a4400001020301093a6081ea6b2b5e8613618afa021b00010101400609"], 0x0) r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0003ff00000004034a04"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) 231.756493ms ago: executing program 3 (id=332): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2800, 0x4d, 0x16}, 0x18) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x10c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f00000002c0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f00000003c0)={&(0x7f0000000300), 0x10, &(0x7f0000000380)={&(0x7f0000000340)=@can={{0x1, 0x1, 0x1, 0x1}, 0x7f, 0x2, 0x0, 0x0, "8b2e37be56432687"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) clock_gettime(0x0, &(0x7f0000003540)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000400), 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/154, 0x9a}], 0x1, &(0x7f0000000580)=""/18, 0x12}, 0x2}, {{&(0x7f00000005c0)=@ax25={{0x3, @bcast}, [@remote, @default, @null, @netrom, @netrom, @default, @default, @default]}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)=""/9, 0x9}, {&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/211, 0xd3}], 0x3, &(0x7f0000000840)=""/243, 0xf3}, 0x400}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000940)=""/55, 0x37}], 0x1, &(0x7f00000009c0)=""/22, 0x16}, 0x5}, {{&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x2}, 0x10000}, {{&(0x7f0000001c00)=@tipc=@name, 0x80, &(0x7f0000003100)=[{&(0x7f0000001c80)=""/15, 0xf}, {&(0x7f0000001cc0)=""/255, 0xff}, {&(0x7f0000001dc0)=""/175, 0xaf}, {&(0x7f0000001e80)=""/27, 0x1b}, {&(0x7f0000001ec0)=""/253, 0xfd}, {&(0x7f0000001fc0)=""/7, 0x7}, {&(0x7f0000002000)=""/101, 0x65}, {&(0x7f0000002080)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000031c0)=""/148, 0x94}, 0x2}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003280)}], 0x1, &(0x7f0000003300)=""/137, 0x89}, 0x2}], 0x6, 0x40000100, &(0x7f0000003580)={r4, r5+10000000}) r6 = syz_open_dev$dri(&(0x7f00000035c0), 0x5f, 0x204000) r7 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000003600)={0x7fffffff, 0xbfdd, {0xffffffffffffffff}, {r7}, 0x7, 0x89}) syz_open_procfs$userns(r8, &(0x7f0000003640)) getresgid(&(0x7f0000003740), &(0x7f0000003780)=0x0, &(0x7f00000037c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003800)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0/file0\x00'}) statx(r0, &(0x7f0000003840)='./file0\x00', 0x6000, 0x4, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$bpf(0x0, &(0x7f00000036c0)='./file0\x00', &(0x7f0000003700), 0x250400, &(0x7f00000059c0)={[{@mode={'mode', 0x3d, 0x3}}, {@gid={'gid', 0x3d, 0xee00}}, {@gid={'gid', 0x3d, r9}}, {@mode={'mode', 0x3d, 0x9e02}}, {@gid={'gid', 0x3d, r11}}, {@mode={'mode', 0x3d, 0x6}}, {@gid={'gid', 0x3d, r12}}, {@gid={'gid', 0x3d, r13}}], [{@pcr={'pcr', 0x3d, 0x2}}, {@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}, {@uid_gt={'uid>', r7}}, {@dont_appraise}]}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000005b00)={0x28, 0x2, 0x0, {0x0, 0xfffffffffffffff0, 0x63c6af2c}}, 0x28) pread64(0xffffffffffffffff, &(0x7f0000005b40)=""/94, 0x5e, 0x21) write(r1, &(0x7f0000005bc0)="2eef48c7d41eb977b7980be8dd9307ed628b1ee3bbdc167b3a0490a12dcc33d14e51c73568b681aa6c52b29800efa5c519088b28d55f009617c4714265d1fcbb39cb842d86246c12dbb58cfb700ef031c31d220eaf43f7d59a8bd9b59471631dc95c9fda6c14f0822a3e511456eb4aa38372fd7c170e47f688c956b405be0e68539478dc2326bf673993f23100f52f0968243ed674a19d54e8d87c17c78510b91861ca637ee601ba8e0cf87e09424d4c18ed70addb9288a08ac89c40ef4f62cb202b0ca60ca6bcdc7dedd3d711232f08f6c2abaa91ebd00446226cadd91dbdff8f8b46b8a1f3c75ca2c6c30082ba904c3bf4b8635e7c", 0xf6) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005ec0)={0x6, 0x14, &(0x7f0000005cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000005d80)='GPL\x00', 0x9, 0x0, 0x0, 0x40e00, 0x14, '\x00', r3, 0x25, r10, 0x8, &(0x7f0000005dc0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000005e00)={0x5, 0x0, 0x4, 0x401}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000005e40)=[r10, 0xffffffffffffffff, r10, r10], &(0x7f0000005e80)=[{0x1, 0x3, 0x4, 0xa}, {0x2, 0x2, 0xb}, {0x0, 0x4, 0x1}, {0x3, 0x5, 0x1ad5, 0x2}], 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000005f80)={r14, r10, 0x37, 0x0, @void}, 0x10) mknod$loop(&(0x7f0000005fc0)='./file0\x00', 0x200, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r10, 0x402c5342, &(0x7f0000006000)={0x4c, 0x5, 0x7, {0xc3, 0x7}, 0x3, 0x3}) 120.303972ms ago: executing program 4 (id=333): r0 = io_uring_setup(0x180d, &(0x7f0000000040)={0x0, 0x4176, 0x400, 0x8001002, 0x3d6}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r2, 0x4095, 0x7721, 0x16, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64', 0xb) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) kernel console output (not intermixed with test programs): 68.369064][ T5334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.369087][ T5334] usb 2-1: Product: syz [ 68.369099][ T5334] usb 2-1: Manufacturer: syz [ 68.369111][ T5334] usb 2-1: SerialNumber: syz [ 68.386826][ T5334] usb 2-1: 0:2 : does not exist [ 68.386946][ T5334] usb 2-1: unit 9 not found! [ 68.456760][ T5601] veth0_macvtap: entered promiscuous mode [ 68.464941][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.465169][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.495836][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.495855][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.500546][ T5601] veth1_macvtap: entered promiscuous mode [ 68.505974][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.506049][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.506087][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.506116][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.506145][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.506175][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.506204][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.593139][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.593151][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.604336][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.633978][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.657652][ T5701] usb 2-1: USB disconnect, device number 2 [ 68.704918][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.704936][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.745151][ T5602] Bluetooth: hci1: command tx timeout [ 68.799245][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.799265][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.827473][ T5603] Bluetooth: hci3: command tx timeout [ 68.827502][ T5603] Bluetooth: hci4: command tx timeout [ 68.827517][ T5603] Bluetooth: hci0: command tx timeout [ 68.827609][ T5602] Bluetooth: hci2: command tx timeout [ 68.875720][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.908027][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.940331][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.940353][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.990436][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.991621][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.024643][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 69.031510][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.031529][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.176943][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.177812][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.177832][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.179584][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.179605][ T10] usb 3-1: Product: syz [ 69.179617][ T10] usb 3-1: Manufacturer: syz [ 69.179632][ T10] usb 3-1: SerialNumber: syz [ 69.194489][ T5701] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.218743][ T5793] LUN: removable file: (no medium) [ 69.258197][ T10] usb 3-1: 0:2 : does not exist [ 69.258252][ T10] usb 3-1: unit 9 not found! [ 69.347616][ T5701] usb 2-1: Using ep0 maxpacket: 16 [ 69.349925][ T5701] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.351252][ T5701] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.351273][ T5701] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.370446][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.370472][ T5701] usb 2-1: Product: syz [ 69.370484][ T5701] usb 2-1: Manufacturer: syz [ 69.370504][ T5701] usb 2-1: SerialNumber: syz [ 69.393813][ T5701] usb 2-1: 0:2 : does not exist [ 69.393872][ T5701] usb 2-1: unit 9 not found! [ 69.426894][ T5794] kvm: pic: non byte write [ 69.478788][ T5702] usb 3-1: USB disconnect, device number 2 [ 69.498140][ T5334] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 69.646710][ T5334] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 69.648152][ T5334] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.650607][ T5334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.650628][ T5334] usb 5-1: Product: syz [ 69.650641][ T5334] usb 5-1: Manufacturer: syz [ 69.650654][ T5334] usb 5-1: SerialNumber: syz [ 69.783948][ T5804] : renamed from bond_slave_0 (while UP) [ 70.014983][ T5702] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.164466][ T5702] usb 3-1: Using ep0 maxpacket: 16 [ 70.165263][ T5702] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.167772][ T5702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.167796][ T5702] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.169650][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.169672][ T5702] usb 3-1: Product: syz [ 70.169685][ T5702] usb 3-1: Manufacturer: syz [ 70.169698][ T5702] usb 3-1: SerialNumber: syz [ 70.196461][ T5807] X25: received unknown 00 with LCI 000 [ 70.266905][ T5702] usb 3-1: 0:2 : does not exist [ 70.266970][ T5702] usb 3-1: unit 9 not found! [ 70.269333][ T5334] snd-usb-caiaq 5-1:1.0: invalid EPs [ 70.269356][ T5334] usb 5-1: unable to init card! (ret=-22) [ 70.278161][ T5334] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 70.518061][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.518400][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.644740][ T5816] kvm: pic: non byte write [ 70.824496][ T4917] Bluetooth: hci1: command tx timeout [ 70.829124][ T5701] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.904751][ T4917] Bluetooth: hci2: command tx timeout [ 70.904995][ T5603] Bluetooth: hci4: command tx timeout [ 70.905018][ T5603] Bluetooth: hci3: command tx timeout [ 70.905049][ T5602] Bluetooth: hci0: command tx timeout [ 71.073391][ T31] kauditd_printk_skb: 48 callbacks suppressed [ 71.073455][ T31] audit: type=1400 audit(1790115768.451:211): avc: denied { allowed } for pid=5818 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.073626][ T31] audit: type=1400 audit(1790115768.451:212): avc: denied { create } for pid=5818 comm="syz.3.10" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.073774][ T31] audit: type=1400 audit(1790115768.451:213): avc: denied { map } for pid=5818 comm="syz.3.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.080786][ T31] audit: type=1400 audit(1790115768.451:214): avc: denied { read write } for pid=5818 comm="syz.3.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.183533][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 71.255472][ T5701] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 71.290239][ T5701] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 71.290267][ T5701] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.290285][ T5701] usb 1-1: config 0 has no interface number 0 [ 71.290317][ T5701] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.293859][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.293886][ T5701] usb 1-1: Product: syz [ 71.293901][ T5701] usb 1-1: Manufacturer: syz [ 71.293915][ T5701] usb 1-1: SerialNumber: syz [ 71.370344][ T5701] usb 1-1: config 0 descriptor?? [ 71.393703][ T5701] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 71.410449][ T31] audit: type=1400 audit(1790115768.891:215): avc: denied { prog_run } for pid=5825 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.413680][ T31] audit: type=1400 audit(1790115768.891:216): avc: denied { name_bind } for pid=5825 comm="syz.3.11" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 71.433820][ T31] audit: type=1400 audit(1790115768.891:217): avc: denied { map_create } for pid=5825 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.433864][ T31] audit: type=1400 audit(1790115768.901:218): avc: denied { map_read map_write } for pid=5825 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.440630][ T2270] usb 2-1: USB disconnect, device number 3 [ 71.521455][ T31] audit: type=1400 audit(1790115769.001:219): avc: denied { create } for pid=5827 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.583727][ T5701] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 71.583899][ T5701] quatech2 1-1:0.51: probe with driver quatech2 failed with error -8 [ 71.663627][ T31] audit: type=1400 audit(1790115769.141:220): avc: denied { read } for pid=5827 comm="syz.1.12" name="sg0" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.800887][ T5814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.801230][ T5814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.854299][ T5701] usb 1-1: USB disconnect, device number 2 [ 72.514068][ T5701] usb 5-1: USB disconnect, device number 2 [ 72.708037][ T5709] usb 3-1: USB disconnect, device number 3 [ 73.398738][ T2270] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 73.498213][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 73.503057][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 73.503319][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 73.505554][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 73.562261][ T5702] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.635082][ T2270] usb 4-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=9f.f5 [ 73.635972][ T2270] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 73.635995][ T2270] usb 4-1: config 4 has no interface number 0 [ 73.643750][ T2270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.643774][ T2270] usb 4-1: Product: syz [ 73.643786][ T2270] usb 4-1: Manufacturer: syz [ 73.643798][ T2270] usb 4-1: SerialNumber: syz [ 73.706108][ T5702] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 73.707012][ T5702] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.707037][ T5702] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.707066][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.245007][ T5842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 74.466906][ T2270] ax88179_178a 4-1:4.147: probe with driver ax88179_178a failed with error -22 [ 74.569832][ T2270] usb 4-1: USB disconnect, device number 2 [ 74.614907][ T5844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.615253][ T5844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.640680][ T5844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.640982][ T5844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.661693][ T5702] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0001/input/input5 [ 74.672493][ T5844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.672794][ T5844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.300526][ T5702] rc_core: IR keymap rc-rc6-mce not found [ 75.300546][ T5702] Registered IR keymap rc-empty [ 75.307524][ T5702] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0001/rc/rc0 [ 75.313939][ T5702] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0001/rc/rc0/input6 [ 75.351645][ T5702] hid-picolcd 0003:04D8:C002.0001: No report with id 0x94 found [ 75.351661][ T5702] hid-picolcd 0003:04D8:C002.0001: failed to configure display [ 75.439288][ T5702] usb 2-1: USB disconnect, device number 4 [ 75.486023][ T1245] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.634486][ T1245] usb 5-1: Using ep0 maxpacket: 32 [ 75.634978][ T1245] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 75.635844][ T1245] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 75.635864][ T1245] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.635882][ T1245] usb 5-1: config 0 has no interface number 0 [ 75.635913][ T1245] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.637631][ T1245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.637652][ T1245] usb 5-1: Product: syz [ 75.637666][ T1245] usb 5-1: Manufacturer: syz [ 75.637680][ T1245] usb 5-1: SerialNumber: syz [ 75.641420][ T1245] usb 5-1: config 0 descriptor?? [ 75.702164][ T1245] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 75.729257][ T2270] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 75.854500][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.858028][ T1245] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 75.858211][ T1245] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 75.916095][ T2270] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.916467][ T2270] usb 4-1: not running at top speed; connect to a high speed hub [ 75.916484][ T2270] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 75.917176][ T2270] usb 4-1: config 3 has an invalid interface number: 5 but max is 1 [ 75.917187][ T2270] usb 4-1: config 3 has an invalid descriptor of length 196, skipping remainder of the config [ 75.917198][ T2270] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 75.917207][ T2270] usb 4-1: config 3 has no interface number 0 [ 75.917219][ T2270] usb 4-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 75.917240][ T2270] usb 4-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 75.917253][ T2270] usb 4-1: config 3 interface 5 has no altsetting 0 [ 75.918668][ T2270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.918679][ T2270] usb 4-1: Product: syz [ 75.918687][ T2270] usb 4-1: Manufacturer: syz [ 75.918695][ T2270] usb 4-1: SerialNumber: syz [ 76.310294][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.396557][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 76.398660][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.401240][ T5873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.401602][ T5873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.409613][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.410013][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.428131][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.428171][ T10] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 76.430949][ T10] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 76.430974][ T10] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 76.430991][ T10] usb 1-1: config 14 has no interface number 0 [ 76.431005][ T10] usb 1-1: config 14 has no interface number 1 [ 76.431047][ T10] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 76.431064][ T10] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 76.431082][ T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 76.431102][ T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 76.431122][ T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 76.431142][ T10] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.431161][ T10] usb 1-1: config 14 interface 57 has no altsetting 0 [ 76.431174][ T10] usb 1-1: config 14 interface 228 has no altsetting 0 [ 76.439358][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.439383][ T10] usb 1-1: Product: syz [ 76.439395][ T10] usb 1-1: Manufacturer: syz [ 76.439408][ T10] usb 1-1: SerialNumber: syz [ 76.531439][ T2270] msi2500 4-1:3.5: Registered as swradio24 [ 76.531463][ T2270] msi2500 4-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 76.534258][ T2270] usb 4-1: USB disconnect, device number 3 [ 76.639589][ T1245] usb 5-1: USB disconnect, device number 3 [ 76.643955][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 76.643989][ T31] audit: type=1400 audit(1790115774.121:249): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 76.891425][ T10] legousbtower 1-1:14.57: interrupt endpoints not found [ 76.986082][ T31] audit: type=1400 audit(1790115774.471:250): avc: denied { ioctl } for pid=5898 comm="syz.1.29" path="socket:[8101]" dev="sockfs" ino=8101 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.092491][ T10] legousbtower 1-1:14.228: get version request failed: -71 [ 77.092603][ T10] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 77.101851][ T10] usb 1-1: USB disconnect, device number 3 [ 77.230224][ T5910] kvm: pic: non byte write [ 77.424247][ T5916] : renamed from bond_slave_0 (while UP) [ 77.977895][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34'. [ 77.978143][ T31] audit: type=1400 audit(1790115775.441:251): avc: denied { bind } for pid=5917 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.978327][ T31] audit: type=1400 audit(1790115775.441:252): avc: denied { write } for pid=5917 comm="syz.1.34" path="socket:[9193]" dev="sockfs" ino=9193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.982142][ T5334] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 78.264852][ T5701] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 78.281690][ T5334] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.282187][ T5334] usb 1-1: not running at top speed; connect to a high speed hub [ 78.282214][ T5334] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 78.283064][ T5334] usb 1-1: config 3 has an invalid interface number: 5 but max is 1 [ 78.283085][ T5334] usb 1-1: config 3 has an invalid descriptor of length 196, skipping remainder of the config [ 78.283104][ T5334] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 78.283125][ T5334] usb 1-1: config 3 has no interface number 0 [ 78.283149][ T5334] usb 1-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 78.283231][ T5334] usb 1-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 78.283256][ T5334] usb 1-1: config 3 interface 5 has no altsetting 0 [ 78.338452][ T5334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.338478][ T5334] usb 1-1: Product: syz [ 78.338493][ T5334] usb 1-1: Manufacturer: syz [ 78.338507][ T5334] usb 1-1: SerialNumber: syz [ 78.443381][ T31] audit: type=1400 audit(1790115775.921:253): avc: denied { create } for pid=5928 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.450681][ T31] audit: type=1400 audit(1790115775.931:254): avc: denied { ioctl } for pid=5928 comm="syz.4.38" path="socket:[8141]" dev="sockfs" ino=8141 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.453983][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 78.457385][ T5701] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 78.458282][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.458304][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.458333][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.468692][ T5701] usb 3-1: config 0 descriptor?? [ 78.550690][ T25] cfg80211: failed to load regulatory.db [ 78.568294][ T5929] team0: Port device team_slave_0 removed [ 78.648999][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.651759][ T31] audit: type=1400 audit(1790115776.131:255): avc: denied { create } for pid=5932 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.653178][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.660052][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.660404][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.670428][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.671639][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.695089][ T31] audit: type=1400 audit(1790115776.181:256): avc: denied { write } for pid=5932 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.825366][ T31] audit: type=1400 audit(1790115776.311:257): avc: denied { name_bind } for pid=5939 comm="syz.1.41" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 78.825587][ T31] audit: type=1400 audit(1790115776.311:258): avc: denied { node_bind } for pid=5939 comm="syz.1.41" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 78.879855][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.880322][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.050295][ T5334] msi2500 1-1:3.5: Registered as swradio24 [ 79.050335][ T5334] msi2500 1-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 79.061774][ T5334] usb 1-1: USB disconnect, device number 4 [ 79.098518][ T5701] usbhid 3-1:0.0: can't add hid device: -71 [ 79.098606][ T5701] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 79.121542][ T5701] usb 3-1: USB disconnect, device number 4 [ 79.229374][ T5947] UDC core: g1: couldn't find an available UDC or it's busy [ 79.360947][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 79.525464][ T5950] team0: Port device team_slave_0 removed [ 79.654477][ T1245] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 79.804673][ T1245] usb 2-1: Using ep0 maxpacket: 32 [ 79.807704][ T1245] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.808330][ T1245] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 79.809057][ T1245] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 79.809098][ T1245] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 79.809109][ T1245] usb 2-1: config 14 has no interface number 0 [ 79.809118][ T1245] usb 2-1: config 14 has no interface number 1 [ 79.809149][ T1245] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 79.809170][ T1245] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 79.809192][ T1245] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 79.809206][ T1245] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 79.809220][ T1245] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 79.809235][ T1245] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.809249][ T1245] usb 2-1: config 14 interface 57 has no altsetting 0 [ 79.809259][ T1245] usb 2-1: config 14 interface 228 has no altsetting 0 [ 79.810914][ T1245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.810936][ T1245] usb 2-1: Product: syz [ 79.810949][ T1245] usb 2-1: Manufacturer: syz [ 79.810963][ T1245] usb 2-1: SerialNumber: syz [ 80.318532][ T1245] legousbtower 2-1:14.57: interrupt endpoints not found [ 80.673475][ T1245] legousbtower 2-1:14.228: get version request failed: -71 [ 80.674554][ T1245] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 80.840443][ T1245] usb 2-1: USB disconnect, device number 5 [ 81.000041][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 81.010551][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.043784][ T5976] bridge_slave_1 (unregistering): left allmulticast mode [ 81.043808][ T5976] bridge_slave_1 (unregistering): left promiscuous mode [ 81.043866][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.065751][ T4917] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 81.066372][ T4917] Bluetooth: hci4: Injecting HCI hardware error event [ 81.077739][ T4917] Bluetooth: hci4: hardware error 0x00 [ 81.680096][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 81.680113][ T31] audit: type=1400 audit(1790115779.161:262): avc: denied { create } for pid=5990 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.850139][ T31] audit: type=1400 audit(1790115779.331:263): avc: denied { setopt } for pid=5990 comm="syz.1.54" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.974794][ T31] audit: type=1400 audit(1790115779.431:264): avc: denied { mount } for pid=5990 comm="syz.1.54" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.212877][ T31] audit: type=1400 audit(1790115779.691:265): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.566509][ T5334] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 82.782299][ T1245] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.795254][ T5334] usb 1-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=9f.f5 [ 82.796144][ T5334] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 82.796165][ T5334] usb 1-1: config 4 has no interface number 0 [ 82.800168][ T5334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.800193][ T5334] usb 1-1: Product: syz [ 82.800207][ T5334] usb 1-1: Manufacturer: syz [ 82.800220][ T5334] usb 1-1: SerialNumber: syz [ 82.925733][ T1245] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 82.926766][ T1245] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.926793][ T1245] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.926825][ T1245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.059371][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 83.060150][ T6001] x_tables: duplicate underflow at hook 3 [ 83.094356][ T6001] macvlan2: entered promiscuous mode [ 83.094578][ T6001] macvlan2: entered allmulticast mode [ 83.198094][ T5334] ax88179_178a 1-1:4.147: probe with driver ax88179_178a failed with error -22 [ 83.201151][ T5334] usb 1-1: USB disconnect, device number 5 [ 83.305004][ T4917] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 83.621566][ T1245] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0002/input/input7 [ 83.634515][ T4917] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 83.634563][ T4917] Bluetooth: hci3: Injecting HCI hardware error event [ 83.635777][ T4917] Bluetooth: hci3: hardware error 0x00 [ 83.752087][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.752390][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.811649][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.811990][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.825387][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.825703][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.831923][ T1245] rc_core: IR keymap rc-rc6-mce not found [ 83.831938][ T1245] Registered IR keymap rc-empty [ 83.861896][ T1245] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0002/rc/rc0 [ 83.884296][ T1245] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0002/rc/rc0/input8 [ 83.908329][ T1245] hid-picolcd 0003:04D8:C002.0002: No report with id 0x94 found [ 83.908352][ T1245] hid-picolcd 0003:04D8:C002.0002: failed to configure display [ 84.124483][ T5730] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 84.334849][ T5730] usb 3-1: Using ep0 maxpacket: 32 [ 84.353131][ T5730] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.395084][ T5730] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 84.434039][ T5730] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 84.434203][ T5730] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 84.434301][ T5730] usb 3-1: config 14 has no interface number 0 [ 84.442935][ T5730] usb 3-1: config 14 has no interface number 1 [ 84.452476][ T5730] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 84.452525][ T5730] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 84.459680][ T5730] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 84.459735][ T5730] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 84.459787][ T5730] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 84.459836][ T5730] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.459872][ T5730] usb 3-1: config 14 interface 57 has no altsetting 0 [ 84.459913][ T5730] usb 3-1: config 14 interface 228 has no altsetting 0 [ 84.567999][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.568025][ T5730] usb 3-1: Product: syz [ 84.568038][ T5730] usb 3-1: Manufacturer: syz [ 84.568051][ T5730] usb 3-1: SerialNumber: syz [ 84.879229][ T1245] usb 4-1: USB disconnect, device number 4 [ 85.245379][ T5730] legousbtower 3-1:14.57: interrupt endpoints not found [ 85.373993][ T5730] legousbtower 3-1:14.228: get version request failed: -71 [ 85.391792][ T5730] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 85.426321][ T5701] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 85.451202][ T5730] usb 3-1: USB disconnect, device number 5 [ 85.555231][ T1245] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.595076][ T5701] usb 1-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=9f.f5 [ 85.595920][ T5701] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 85.595943][ T5701] usb 1-1: config 4 has no interface number 0 [ 85.597727][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.597747][ T5701] usb 1-1: Product: syz [ 85.597760][ T5701] usb 1-1: Manufacturer: syz [ 85.597773][ T5701] usb 1-1: SerialNumber: syz [ 85.704475][ T4917] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 85.705283][ T1245] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 85.706157][ T1245] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.706185][ T1245] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.706218][ T1245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.809660][ T6046] x_tables: duplicate underflow at hook 3 [ 85.821506][ T5701] ax88179_178a 1-1:4.147: probe with driver ax88179_178a failed with error -22 [ 85.829713][ T5701] usb 1-1: USB disconnect, device number 6 [ 86.124575][ T5608] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.274854][ T5608] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 86.275586][ T5608] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.275603][ T5608] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.275635][ T5608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.339181][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.339695][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.348133][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.348501][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.359985][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.360342][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.380631][ T1245] usbhid 4-1:1.0: can't add hid device: -71 [ 86.380741][ T1245] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 86.429525][ T1245] usb 4-1: USB disconnect, device number 5 [ 86.724490][ T5701] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 86.789363][ T5608] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0003/input/input9 [ 86.858027][ T5608] rc_core: IR keymap rc-rc6-mce not found [ 86.858041][ T5608] Registered IR keymap rc-empty [ 86.859486][ T5608] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0003/rc/rc0 [ 86.862208][ T5608] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0003/rc/rc0/input10 [ 86.880902][ T5608] hid-picolcd 0003:04D8:C002.0003: No report with id 0x94 found [ 86.881688][ T5608] hid-picolcd 0003:04D8:C002.0003: failed to configure display [ 86.920780][ T5701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 86.921328][ T5701] usb 3-1: not running at top speed; connect to a high speed hub [ 86.921353][ T5701] usb 3-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 86.922601][ T5701] usb 3-1: config 3 has an invalid interface number: 5 but max is 1 [ 86.922621][ T5701] usb 3-1: config 3 has an invalid descriptor of length 196, skipping remainder of the config [ 86.922637][ T5701] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 86.922655][ T5701] usb 3-1: config 3 has no interface number 0 [ 86.922675][ T5701] usb 3-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 86.922699][ T5701] usb 3-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 86.922720][ T5701] usb 3-1: config 3 interface 5 has no altsetting 0 [ 86.922988][ T6052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.923358][ T6052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.940782][ T6052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.941154][ T6052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.951815][ T6052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.952186][ T6052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.958228][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.958251][ T5701] usb 3-1: Product: syz [ 86.958264][ T5701] usb 3-1: Manufacturer: syz [ 86.958276][ T5701] usb 3-1: SerialNumber: syz [ 87.146591][ T5608] usb 5-1: USB disconnect, device number 4 [ 87.252625][ T6061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.253105][ T6061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.347469][ T5701] msi2500 3-1:3.5: Registered as swradio24 [ 87.347490][ T5701] msi2500 3-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 87.364559][ T5334] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 87.386060][ T5701] usb 3-1: USB disconnect, device number 6 [ 87.585233][ T5334] usb 4-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=9f.f5 [ 87.586115][ T5334] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 87.586137][ T5334] usb 4-1: config 4 has no interface number 0 [ 87.592600][ T5334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.592626][ T5334] usb 4-1: Product: syz [ 87.592640][ T5334] usb 4-1: Manufacturer: syz [ 87.592654][ T5334] usb 4-1: SerialNumber: syz [ 87.700231][ T6080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'. [ 87.934637][ T31] audit: type=1400 audit(1790115785.311:266): avc: denied { firmware_load } for pid=6073 comm="syz.0.78" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 88.081597][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 88.082202][ T6068] x_tables: duplicate underflow at hook 3 [ 88.357736][ T6080] syz.0.78 (6080) used greatest stack depth: 19552 bytes left [ 89.103414][ T5334] ax88179_178a 4-1:4.147: probe with driver ax88179_178a failed with error -22 [ 89.108320][ T5334] usb 4-1: USB disconnect, device number 6 [ 90.089809][ T5334] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.676910][ T5334] usb 1-1: Using ep0 maxpacket: 32 [ 90.678956][ T5334] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.678995][ T5334] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 90.679812][ T5334] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 90.679832][ T5334] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 90.679850][ T5334] usb 1-1: config 14 has no interface number 0 [ 90.679864][ T5334] usb 1-1: config 14 has no interface number 1 [ 90.679912][ T5334] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 90.679932][ T5334] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 90.679953][ T5334] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 90.679983][ T5334] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 90.680006][ T5334] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 90.680028][ T5334] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.680050][ T5334] usb 1-1: config 14 interface 57 has no altsetting 0 [ 90.680066][ T5334] usb 1-1: config 14 interface 228 has no altsetting 0 [ 90.682942][ T5334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.682963][ T5334] usb 1-1: Product: syz [ 90.682977][ T5334] usb 1-1: Manufacturer: syz [ 90.682990][ T5334] usb 1-1: SerialNumber: syz [ 90.999659][ T6109] FAULT_INJECTION: forcing a failure. [ 90.999659][ T6109] name fail_futex, interval 1, probability 0, space 0, times 1 [ 90.999690][ T6109] CPU: 0 UID: 0 PID: 6109 Comm: syz.2.86 Not tainted syzkaller #0 PREEMPT(full) [ 90.999711][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 90.999722][ T6109] Call Trace: [ 90.999729][ T6109] [ 90.999737][ T6109] dump_stack_lvl+0x100/0x190 [ 90.999767][ T6109] should_fail_ex.cold+0x5/0xa [ 90.999796][ T6109] get_futex_key+0x1d0/0x14f0 [ 90.999821][ T6109] ? __pfx_get_futex_key+0x10/0x10 [ 90.999852][ T6109] futex_wait_setup+0x91/0x540 [ 90.999882][ T6109] __futex_wait+0x19f/0x300 [ 90.999901][ T6109] ? __pfx___futex_wait+0x10/0x10 [ 90.999917][ T6109] ? __pfx_try_to_wake_up+0x10/0x10 [ 90.999937][ T6109] ? futex_hash+0x311/0x400 [ 90.999963][ T6109] ? __pfx_futex_wake_mark+0x10/0x10 [ 90.999996][ T6109] ? find_held_lock+0x2b/0x80 [ 91.000021][ T6109] ? futex_wake+0x4ea/0x5e0 [ 91.000044][ T6109] futex_wait+0xe6/0x370 [ 91.000063][ T6109] ? __pfx_futex_wait+0x10/0x10 [ 91.000087][ T6109] ? rcu_read_lock_any_held+0x6a/0x90 [ 91.000113][ T6109] ? find_held_lock+0x2b/0x80 [ 91.000139][ T6109] ? ksys_write+0x190/0x250 [ 91.000157][ T6109] ? ksys_write+0x190/0x250 [ 91.000177][ T6109] do_futex+0x265/0x440 [ 91.000204][ T6109] ? __pfx_do_futex+0x10/0x10 [ 91.000229][ T6109] ? find_held_lock+0x2b/0x80 [ 91.000255][ T6109] ? __fget_files+0x215/0x3d0 [ 91.000278][ T6109] ? __fget_files+0x215/0x3d0 [ 91.000302][ T6109] __x64_sys_futex+0x34f/0x4d0 [ 91.000341][ T6109] ? __pfx___x64_sys_futex+0x10/0x10 [ 91.000367][ T6109] ? fput+0x7c/0x100 [ 91.000399][ T6109] do_syscall_64+0x123/0x790 [ 91.000431][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.000450][ T6109] RIP: 0033:0x7f4e1299e159 [ 91.000466][ T6109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.000485][ T6109] RSP: 002b:00007f4e137c00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.000506][ T6109] RAX: ffffffffffffffda RBX: 00007f4e12c25fa8 RCX: 00007f4e1299e159 [ 91.000518][ T6109] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4e12c25fa8 [ 91.000529][ T6109] RBP: 00007f4e12c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 91.000540][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.000550][ T6109] R13: 00007f4e12c26038 R14: 00007ffc7a800950 R15: 00007ffc7a800a38 [ 91.000575][ T6109] [ 91.103642][ T31] audit: type=1400 audit(1790115788.581:267): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.178872][ T5334] legousbtower 1-1:14.57: interrupt endpoints not found [ 91.290515][ T5608] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.390818][ T5334] legousbtower 1-1:14.228: get version request failed: -71 [ 91.391831][ T5334] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 91.410555][ T5334] usb 1-1: USB disconnect, device number 7 [ 91.666353][ T5608] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 91.667288][ T5608] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 91.667310][ T5608] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 91.667327][ T5608] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 91.667343][ T5608] usb 5-1: config 220 has no interface number 2 [ 91.667391][ T5608] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 91.667406][ T5608] usb 5-1: config 220 interface 0 has no altsetting 0 [ 91.667415][ T5608] usb 5-1: config 220 interface 76 has no altsetting 0 [ 91.667425][ T5608] usb 5-1: config 220 interface 1 has no altsetting 0 [ 91.669175][ T5608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.669196][ T5608] usb 5-1: Product: syz [ 91.669209][ T5608] usb 5-1: Manufacturer: syz [ 91.669224][ T5608] usb 5-1: SerialNumber: syz [ 92.210392][ T5608] usb 5-1: selecting invalid altsetting 0 [ 92.218272][ T5608] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 92.218309][ T5608] uvcvideo 5-1:220.0: No valid video chain found. [ 92.231749][ T5608] usb 5-1: selecting invalid altsetting 0 [ 92.231774][ T5608] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 92.265523][ T5608] usb 5-1: USB disconnect, device number 5 [ 92.337185][ T31] audit: type=1400 audit(1790115789.821:268): avc: denied { create } for pid=6126 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.339196][ T31] audit: type=1400 audit(1790115789.821:269): avc: denied { mmap_zero } for pid=6126 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 92.357598][ T6125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'. [ 92.566482][ T31] audit: type=1400 audit(1790115790.041:270): avc: denied { write } for pid=6134 comm="syz.0.95" name="core" dev="configfs" ino=3520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.566534][ T31] audit: type=1400 audit(1790115790.041:271): avc: denied { write } for pid=6134 comm="syz.0.95" name="rd_mcp_0" dev="configfs" ino=10468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.105642][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 93.299741][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 93.329522][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 93.332056][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 93.333062][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 93.333084][ T10] usb 3-1: config 0 has no interface number 0 [ 93.333115][ T10] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.333137][ T10] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 93.341760][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.341782][ T10] usb 3-1: Product: syz [ 93.341796][ T10] usb 3-1: Manufacturer: syz [ 93.341808][ T10] usb 3-1: SerialNumber: syz [ 93.379431][ T10] usb 3-1: config 0 descriptor?? [ 93.420250][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 93.466302][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.620136][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.630048][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.630072][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.630087][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.630120][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.641611][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.641634][ T25] usb 5-1: Product: syz [ 93.641646][ T25] usb 5-1: Manufacturer: syz [ 93.650649][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 93.650667][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 93.656534][ T25] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 93.674018][ T10] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 93.674234][ T10] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 93.675259][ T31] audit: type=1400 audit(1790115791.141:272): avc: denied { read } for pid=6147 comm="syz.3.98" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.675301][ T31] audit: type=1400 audit(1790115791.141:273): avc: denied { open } for pid=6147 comm="syz.3.98" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.001643][ T10] usb 5-1: USB disconnect, device number 6 [ 94.212342][ T6153] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.214145][ T6153] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.241499][ T6153] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.254686][ T6153] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.254776][ T6153] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.257400][ T6153] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.259373][ T6153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.259819][ T6153] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.264319][ T6153] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.290516][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.290824][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.317587][ T25] usb 3-1: USB disconnect, device number 7 [ 94.524507][ T5730] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.681124][ T5730] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.685216][ T5730] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.685239][ T5730] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.685254][ T5730] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.685288][ T5730] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.686734][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.686753][ T5730] usb 5-1: Product: syz [ 94.686765][ T5730] usb 5-1: Manufacturer: syz [ 94.697852][ T5730] cdc_wdm 5-1:1.0: skipping garbage [ 94.697869][ T5730] cdc_wdm 5-1:1.0: skipping garbage [ 94.697924][ T5730] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 94.955557][ T5701] usb 5-1: USB disconnect, device number 7 [ 95.874075][ T31] audit: type=1400 audit(1790115793.171:274): avc: denied { read write } for pid=6168 comm="syz.0.104" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 95.874258][ T31] audit: type=1400 audit(1790115793.171:275): avc: denied { open } for pid=6168 comm="syz.0.104" path="/21/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 95.901135][ T4917] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.903847][ T31] audit: type=1400 audit(1790115793.181:276): avc: denied { ioctl } for pid=6168 comm="syz.0.104" path="/21/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 96.010971][ T31] audit: type=1400 audit(1790115793.491:277): avc: denied { create } for pid=6170 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.048073][ T31] audit: type=1400 audit(1790115793.531:278): avc: denied { connect } for pid=6170 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.245553][ T31] audit: type=1326 audit(1790115793.721:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f016af9e159 code=0x0 [ 96.270956][ T4917] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.271008][ T4917] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.749571][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 96.916528][ T31] audit: type=1400 audit(1790115794.401:280): avc: denied { create } for pid=6192 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.920657][ T31] audit: type=1400 audit(1790115794.401:281): avc: denied { create } for pid=6192 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.352903][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.373133][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 97.373230][ T10] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 97.467162][ T10] usb 2-1: config 3 has an invalid interface number: 5 but max is 1 [ 97.486988][ T10] usb 2-1: config 3 has an invalid descriptor of length 196, skipping remainder of the config [ 97.487045][ T10] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 97.487092][ T10] usb 2-1: config 3 has no interface number 0 [ 97.487209][ T10] usb 2-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 97.487756][ T10] usb 2-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 97.488101][ T10] usb 2-1: config 3 interface 5 has no altsetting 0 [ 97.562133][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.562162][ T10] usb 2-1: Product: syz [ 97.562177][ T10] usb 2-1: Manufacturer: syz [ 97.562192][ T10] usb 2-1: SerialNumber: syz [ 97.890225][ T10] msi2500 2-1:3.5: Registered as swradio24 [ 97.890245][ T10] msi2500 2-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 97.905385][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.110'. [ 97.927458][ T10] usb 2-1: USB disconnect, device number 6 [ 97.949438][ T5605] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.218525][ T6215] netlink: 27 bytes leftover after parsing attributes in process `syz.4.116'. [ 98.348054][ T5605] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.348093][ T5605] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.162839][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 99.162855][ T31] audit: type=1400 audit(1790115796.641:287): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 99.413314][ T6237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6237 comm=syz.2.123 [ 100.224502][ T4917] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.544500][ T4917] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.544536][ T4917] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.710701][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 100.736312][ T6255] team0: Port device team_slave_0 removed [ 100.871367][ T31] audit: type=1326 audit(1790115798.351:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.1.127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32fc99e159 code=0x0 [ 100.874061][ T6253] kvm: pic: non byte write [ 101.429024][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'. [ 102.676177][ T6276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.677156][ T6276] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.677297][ T6276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.006275][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 103.431192][ T6286] netlink: 27 bytes leftover after parsing attributes in process `syz.0.133'. [ 103.524492][ T5709] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.737315][ T5709] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.741256][ T5709] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.741281][ T5709] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.741291][ T5709] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 103.741323][ T5709] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.741340][ T5709] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.743574][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.743592][ T5709] usb 2-1: Product: syz [ 103.743600][ T5709] usb 2-1: Manufacturer: syz [ 103.832420][ T5709] cdc_wdm 2-1:1.0: skipping garbage [ 103.832439][ T5709] cdc_wdm 2-1:1.0: skipping garbage [ 103.861310][ T5709] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 103.861331][ T5709] cdc_wdm 2-1:1.0: Unknown control protocol [ 104.082312][ T10] usb 2-1: USB disconnect, device number 7 [ 104.696059][ T5608] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 104.893322][ T5605] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.893364][ T5605] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.893431][ T4917] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.914813][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 104.950328][ T5608] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.963363][ T5608] usb 1-1: not running at top speed; connect to a high speed hub [ 104.963393][ T5608] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 104.971063][ T5608] usb 1-1: config 3 has an invalid interface number: 5 but max is 1 [ 104.971085][ T5608] usb 1-1: config 3 has an invalid descriptor of length 196, skipping remainder of the config [ 104.971102][ T5608] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 104.971118][ T5608] usb 1-1: config 3 has no interface number 0 [ 104.971140][ T5608] usb 1-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 104.971167][ T5608] usb 1-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 104.971186][ T5608] usb 1-1: config 3 interface 5 has no altsetting 0 [ 104.982186][ T5608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.982208][ T5608] usb 1-1: Product: syz [ 104.982220][ T5608] usb 1-1: Manufacturer: syz [ 104.982232][ T5608] usb 1-1: SerialNumber: syz [ 105.088492][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.090997][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.091014][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.091024][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.091047][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.091060][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.092431][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.092450][ T10] usb 2-1: Product: syz [ 105.092458][ T10] usb 2-1: Manufacturer: syz [ 105.134492][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 105.134510][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 105.167946][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 105.167965][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 105.175499][ T31] audit: type=1400 audit(1790115802.651:289): avc: denied { ioctl } for pid=6319 comm="syz.2.141" path="socket:[10723]" dev="sockfs" ino=10723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.186563][ T31] audit: type=1400 audit(1790115802.661:290): avc: denied { write } for pid=6319 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.196996][ T31] audit: type=1400 audit(1790115802.681:291): avc: denied { write } for pid=6312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.212897][ T6320] syz_tun: entered promiscuous mode [ 105.239846][ T6320] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 105.259540][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 105.482028][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.142'. [ 105.784495][ T31] audit: type=1400 audit(1790115803.201:292): avc: denied { read write } for pid=6282 comm="syz.1.132" name="cdc-wdm0" dev="devtmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 105.784544][ T31] audit: type=1400 audit(1790115803.211:293): avc: denied { open } for pid=6282 comm="syz.1.132" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 105.807741][ T5702] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 105.826932][ T31] audit: type=1400 audit(1790115803.281:294): avc: denied { ioctl } for pid=6330 comm="syz.4.143" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.828501][ T5608] msi2500 1-1:3.5: Registered as swradio24 [ 105.828518][ T5608] msi2500 1-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 105.830093][ T5608] usb 1-1: USB disconnect, device number 8 [ 105.910764][ T6284] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 105.913399][ T25] usb 2-1: USB disconnect, device number 8 [ 105.964497][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 105.965699][ T5702] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.968110][ T5702] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.968134][ T5702] usb 5-1: config 0 has no interface number 0 [ 105.968166][ T5702] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.968187][ T5702] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 105.982763][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.982788][ T5702] usb 5-1: Product: syz [ 105.982802][ T5702] usb 5-1: Manufacturer: syz [ 105.982815][ T5702] usb 5-1: SerialNumber: syz [ 106.082588][ T5702] usb 5-1: config 0 descriptor?? [ 106.091286][ T5702] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 106.114109][ T31] audit: type=1400 audit(1790115803.591:295): avc: denied { write } for pid=6338 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.142339][ T31] audit: type=1400 audit(1790115803.621:296): avc: denied { read write } for pid=6341 comm="syz.3.145" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.149011][ T31] audit: type=1400 audit(1790115803.631:297): avc: denied { open } for pid=6341 comm="syz.3.145" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.303650][ T5702] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 106.303888][ T5702] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 106.455300][ T5709] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.934792][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 106.954758][ T5709] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 106.987302][ T5709] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 106.987374][ T5709] usb 4-1: config 0 has no interface number 0 [ 107.279423][ T6351] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.279656][ T6351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.279796][ T6351] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.330193][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.330223][ T5709] usb 4-1: Product: syz [ 107.330238][ T5709] usb 4-1: Manufacturer: syz [ 107.330251][ T5709] usb 4-1: SerialNumber: syz [ 107.374803][ T5709] usb 4-1: config 0 descriptor?? [ 107.392383][ T5709] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 107.395799][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.396125][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.647393][ T5709] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 107.673564][ T5709] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 107.753299][ T31] audit: type=1400 audit(1790115805.231:298): avc: denied { prog_load } for pid=6358 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.804924][ T5702] usb 5-1: USB disconnect, device number 8 [ 108.020698][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 108.121180][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 108.125203][ T5702] usb 4-1: USB disconnect, device number 7 [ 108.153695][ T5702] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 108.172495][ T5702] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 108.188281][ T5702] quatech2 4-1:0.51: device disconnected [ 108.348831][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'. [ 108.494503][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 108.644449][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 108.646743][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.646786][ T10] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 108.647609][ T10] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 108.647632][ T10] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 108.647651][ T10] usb 3-1: config 14 has no interface number 0 [ 108.647667][ T10] usb 3-1: config 14 has no interface number 1 [ 108.647707][ T10] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 108.647721][ T10] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 108.647742][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 108.647788][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 108.647810][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 108.647833][ T10] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.647852][ T10] usb 3-1: config 14 interface 57 has no altsetting 0 [ 108.647862][ T10] usb 3-1: config 14 interface 228 has no altsetting 0 [ 108.650147][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.650168][ T10] usb 3-1: Product: syz [ 108.650181][ T10] usb 3-1: Manufacturer: syz [ 108.650194][ T10] usb 3-1: SerialNumber: syz [ 108.984497][ T4917] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.306215][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.306744][ T4917] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.359092][ T10] legousbtower 3-1:14.57: interrupt endpoints not found [ 109.560807][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 109.577227][ T10] legousbtower 3-1:14.228: get version request failed: -71 [ 109.577359][ T10] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 109.606118][ T10] usb 3-1: USB disconnect, device number 8 [ 110.067287][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 110.109397][ T6409] syz_tun: entered promiscuous mode [ 110.112723][ T6409] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 110.272918][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 110.408064][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 110.408083][ T31] audit: type=1326 audit(1790115807.891:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.2.160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e1299e159 code=0x0 [ 110.525664][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.161'. [ 110.621975][ T6416] team0: Port device team_slave_0 removed [ 110.717753][ T6431] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 110.717907][ T6431] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 111.001810][ T6446] X25: received unknown 00 with LCI 000 [ 111.091158][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 111.136104][ T5709] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.164097][ T31] audit: type=1400 audit(1790115808.641:308): avc: denied { write } for pid=6439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.177819][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.273820][ T6450] bridge_slave_1 (unregistering): left allmulticast mode [ 111.273848][ T6450] bridge_slave_1 (unregistering): left promiscuous mode [ 111.275257][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.284482][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 111.292102][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.292141][ T5709] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 111.295781][ T5709] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 111.295802][ T5709] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 111.295818][ T5709] usb 1-1: config 14 has no interface number 0 [ 111.295867][ T5709] usb 1-1: config 14 has no interface number 1 [ 111.295909][ T5709] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 111.295932][ T5709] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 111.295955][ T5709] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 111.295973][ T5709] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 111.295994][ T5709] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 111.296014][ T5709] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.296035][ T5709] usb 1-1: config 14 interface 57 has no altsetting 0 [ 111.296049][ T5709] usb 1-1: config 14 interface 228 has no altsetting 0 [ 111.302895][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.302918][ T5709] usb 1-1: Product: syz [ 111.302929][ T5709] usb 1-1: Manufacturer: syz [ 111.302942][ T5709] usb 1-1: SerialNumber: syz [ 111.384402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.935353][ T31] audit: type=1400 audit(1790115809.421:309): avc: denied { write } for pid=6461 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.124711][ T5709] legousbtower 1-1:14.57: interrupt endpoints not found [ 112.309779][ T6472] kvm: pic: non byte write [ 112.522030][ T5709] legousbtower 1-1:14.228: get version request failed: -71 [ 112.522159][ T5709] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 112.558479][ T5709] usb 1-1: USB disconnect, device number 9 [ 112.560481][ T31] audit: type=1400 audit(1790115810.041:310): avc: denied { write } for pid=6468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.682974][ T6488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'. [ 113.010308][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.105480][ T31] audit: type=1400 audit(1790115810.591:311): avc: denied { write } for pid=6492 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.165219][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 113.171044][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 113.179580][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.179623][ T10] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 113.187001][ T10] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 113.187035][ T10] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 113.187054][ T10] usb 5-1: config 14 has no interface number 0 [ 113.187069][ T10] usb 5-1: config 14 has no interface number 1 [ 113.187120][ T10] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 113.187147][ T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 113.187168][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 113.187192][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 113.187216][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 113.187241][ T10] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.187270][ T10] usb 5-1: config 14 interface 57 has no altsetting 0 [ 113.187287][ T10] usb 5-1: config 14 interface 228 has no altsetting 0 [ 113.197035][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.197062][ T10] usb 5-1: Product: syz [ 113.197076][ T10] usb 5-1: Manufacturer: syz [ 113.197090][ T10] usb 5-1: SerialNumber: syz [ 113.652295][ T10] legousbtower 5-1:14.57: interrupt endpoints not found [ 114.795199][ T10] legousbtower 5-1:14.228: get version request failed: -71 [ 114.795337][ T10] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 115.537543][ T31] audit: type=1400 audit(1790115812.801:312): avc: denied { mount } for pid=6501 comm="syz.3.173" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 115.630584][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'. [ 115.687213][ T10] usb 5-1: USB disconnect, device number 9 [ 116.054519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 116.274407][ T31] audit: type=1400 audit(1790115813.751:313): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 118.359862][ T31] audit: type=1400 audit(1790115815.841:314): avc: denied { mount } for pid=6548 comm="syz.1.185" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 118.494454][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 118.524484][ T1245] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 118.704665][ T5710] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 118.857662][ T5710] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.860776][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.860843][ T5710] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.900607][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.900694][ T5710] usb 1-1: Product: syz [ 118.900770][ T5710] usb 1-1: Manufacturer: syz [ 118.900914][ T5710] usb 1-1: SerialNumber: syz [ 118.964585][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 118.964677][ T1245] usb 3-1: Using ep0 maxpacket: 32 [ 118.969963][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 118.978771][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 118.979038][ T10] usb 4-1: config 0 has no interface number 0 [ 118.982541][ T1245] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.990793][ T1245] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 118.994778][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.995039][ T10] usb 4-1: Product: syz [ 118.995107][ T10] usb 4-1: Manufacturer: syz [ 118.995232][ T10] usb 4-1: SerialNumber: syz [ 119.000349][ T1245] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 119.000463][ T1245] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 119.000563][ T1245] usb 3-1: config 14 has no interface number 0 [ 119.000631][ T1245] usb 3-1: config 14 has no interface number 1 [ 119.000972][ T1245] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 119.001022][ T1245] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 119.001110][ T1245] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 119.001162][ T1245] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 119.001248][ T1245] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 119.001371][ T1245] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.001424][ T1245] usb 3-1: config 14 interface 57 has no altsetting 0 [ 119.001464][ T1245] usb 3-1: config 14 interface 228 has no altsetting 0 [ 119.040880][ T1245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.041097][ T1245] usb 3-1: Product: syz [ 119.041176][ T1245] usb 3-1: Manufacturer: syz [ 119.041370][ T1245] usb 3-1: SerialNumber: syz [ 119.367780][ T10] usb 4-1: config 0 descriptor?? [ 119.403522][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 119.514646][ T31] audit: type=1400 audit(1790115816.991:315): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.617040][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 119.634875][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 119.789181][ T5710] usb 1-1: 0:2 : does not exist [ 119.790895][ T1245] legousbtower 3-1:14.57: interrupt endpoints not found [ 119.851128][ T6556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.851495][ T6556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.998291][ T1245] legousbtower 3-1:14.228: get version request failed: -71 [ 119.998444][ T1245] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 120.038965][ T1245] usb 3-1: USB disconnect, device number 9 [ 120.093268][ T10] usb 1-1: USB disconnect, device number 10 [ 120.191335][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 120.191470][ T5702] usb 4-1: USB disconnect, device number 8 [ 120.225525][ T5702] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 120.246527][ T5702] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 120.247096][ T5702] quatech2 4-1:0.51: device disconnected [ 120.655716][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.284498][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 121.285002][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.286851][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.286872][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.291037][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.291059][ T10] usb 1-1: Product: syz [ 121.291074][ T10] usb 1-1: Manufacturer: syz [ 121.291087][ T10] usb 1-1: SerialNumber: syz [ 121.358008][ T10] usb 1-1: 0:2 : does not exist [ 121.467989][ T10] usb 1-1: USB disconnect, device number 11 [ 121.976416][ T5589] udevd[5589]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.240166][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.200'. [ 122.406633][ T25] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 122.592931][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.623250][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 122.623282][ T25] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 122.626495][ T25] usb 4-1: config 3 has an invalid interface number: 5 but max is 1 [ 122.626517][ T25] usb 4-1: config 3 has an invalid descriptor of length 196, skipping remainder of the config [ 122.626533][ T25] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 122.626550][ T25] usb 4-1: config 3 has no interface number 0 [ 122.626586][ T25] usb 4-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 122.626613][ T25] usb 4-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 122.626636][ T25] usb 4-1: config 3 interface 5 has no altsetting 0 [ 122.630161][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.630179][ T25] usb 4-1: Product: syz [ 122.630192][ T25] usb 4-1: Manufacturer: syz [ 122.630204][ T25] usb 4-1: SerialNumber: syz [ 122.821403][ T31] audit: type=1326 audit(1790115820.301:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fc99e159 code=0x7ffc0000 [ 122.821594][ T31] audit: type=1326 audit(1790115820.301:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fc99e159 code=0x7ffc0000 [ 122.822873][ T31] audit: type=1326 audit(1790115820.301:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f32fc99e159 code=0x7ffc0000 [ 122.822914][ T31] audit: type=1326 audit(1790115820.301:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f32fc99e159 code=0x7ffc0000 [ 122.893262][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.897248][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.900245][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.900579][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.904676][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.905024][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.911802][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.912171][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.064597][ T5702] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 123.321930][ T25] msi2500 4-1:3.5: Registered as swradio24 [ 123.321953][ T25] msi2500 4-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 123.325199][ T25] usb 4-1: USB disconnect, device number 9 [ 123.364042][ T5702] usb 1-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=9f.f5 [ 123.374197][ T5702] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 123.374228][ T5702] usb 1-1: config 4 has no interface number 0 [ 123.391309][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.391335][ T5702] usb 1-1: Product: syz [ 123.391350][ T5702] usb 1-1: Manufacturer: syz [ 123.391364][ T5702] usb 1-1: SerialNumber: syz [ 123.484938][ T1245] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 123.644608][ T1245] usb 2-1: Using ep0 maxpacket: 32 [ 123.706064][ T1245] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.707437][ T1245] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 123.759117][ T1245] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 123.761058][ T1245] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 123.761369][ T1245] usb 2-1: config 14 has no interface number 0 [ 123.761792][ T1245] usb 2-1: config 14 has no interface number 1 [ 123.764010][ T1245] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 123.764279][ T1245] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 123.773607][ T1245] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 123.773684][ T1245] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 123.773736][ T1245] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 123.773802][ T1245] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.774140][ T1245] usb 2-1: config 14 interface 57 has no altsetting 0 [ 123.784573][ T1245] usb 2-1: config 14 interface 228 has no altsetting 0 [ 123.965547][ T1245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.965649][ T1245] usb 2-1: Product: syz [ 123.965677][ T1245] usb 2-1: Manufacturer: syz [ 123.965719][ T1245] usb 2-1: SerialNumber: syz [ 124.130677][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 124.251891][ T6619] macvlan2: entered promiscuous mode [ 124.251915][ T6619] macvlan2: entered allmulticast mode [ 124.273309][ T6619] bond1: entered promiscuous mode [ 124.295867][ T6619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.304289][ T6619] bond1: left promiscuous mode [ 124.441614][ T6617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.441778][ T6617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.441897][ T6617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.627021][ T5702] ax88179_178a 1-1:4.147: probe with driver ax88179_178a failed with error -22 [ 124.632041][ T5702] usb 1-1: USB disconnect, device number 12 [ 124.722085][ T1245] legousbtower 2-1:14.57: interrupt endpoints not found [ 125.371677][ T1245] legousbtower 2-1:14.228: get version request failed: -71 [ 125.371812][ T1245] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 125.399807][ T1245] usb 2-1: USB disconnect, device number 9 [ 125.560645][ T31] audit: type=1326 audit(1790115823.041:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c90f9e159 code=0x0 [ 125.683546][ T31] audit: type=1400 audit(1790115823.161:321): avc: denied { bind } for pid=6644 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.683825][ T31] audit: type=1400 audit(1790115823.161:322): avc: denied { name_bind } for pid=6644 comm="syz.2.215" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 125.684033][ T31] audit: type=1400 audit(1790115823.161:323): avc: denied { node_bind } for pid=6644 comm="syz.2.215" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 125.754093][ T31] audit: type=1400 audit(1790115823.231:324): avc: denied { write } for pid=6644 comm="syz.2.215" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.778141][ T31] audit: type=1400 audit(1790115823.241:325): avc: denied { connect } for pid=6644 comm="syz.2.215" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.829983][ T6649] netlink: 27 bytes leftover after parsing attributes in process `syz.3.216'. [ 126.184438][ T4917] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.585012][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.585060][ T4917] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.949130][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 127.567863][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.567931][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.964483][ T5701] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 128.147392][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 128.151114][ T5701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.151157][ T5701] usb 4-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=bc.da [ 128.152024][ T5701] usb 4-1: config 4 has an invalid interface number: 224 but max is 0 [ 128.152047][ T5701] usb 4-1: config 4 has no interface number 0 [ 128.152071][ T5701] usb 4-1: config 4 interface 224 has no altsetting 0 [ 128.153798][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.153819][ T5701] usb 4-1: Product: syz [ 128.153834][ T5701] usb 4-1: Manufacturer: syz [ 128.153848][ T5701] usb 4-1: SerialNumber: syz [ 128.655000][ T5701] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in cold state, will try to load a firmware [ 128.718249][ T5701] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 128.718287][ T5701] dib0700: firmware download failed at 7 with -22 [ 128.746347][ T5701] usb 4-1: USB disconnect, device number 10 [ 128.753715][ T5589] udevd[5589]: setting mode of /dev/bus/usb/004/010 to 020664 failed: No such file or directory [ 128.775172][ T5589] udevd[5589]: setting owner of /dev/bus/usb/004/010 to uid=0, gid=0 failed: No such file or directory [ 128.860523][ T6683] kvm: pic: non byte write [ 130.219717][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 130.219736][ T31] audit: type=1400 audit(1790115827.701:327): avc: denied { create } for pid=6703 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.221511][ T31] audit: type=1400 audit(1790115827.701:328): avc: denied { bind } for pid=6703 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.224614][ T31] audit: type=1400 audit(1790115827.711:329): avc: denied { write } for pid=6703 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.225857][ T6706] atomic_op ffff888035ba79e0 conn xmit_atomic 0000000000000000 [ 130.258615][ T6707] netlink: 27 bytes leftover after parsing attributes in process `syz.1.231'. [ 130.958063][ T5608] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 131.348410][ T6716] FAULT_INJECTION: forcing a failure. [ 131.348410][ T6716] name failslab, interval 1, probability 0, space 0, times 1 [ 131.348430][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.4.234 Not tainted syzkaller #0 PREEMPT(full) [ 131.348443][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 131.348450][ T6716] Call Trace: [ 131.348455][ T6716] [ 131.348460][ T6716] dump_stack_lvl+0x100/0x190 [ 131.348482][ T6716] should_fail_ex.cold+0x5/0xa [ 131.348499][ T6716] should_failslab+0xc2/0x120 [ 131.348515][ T6716] __kmalloc_cache_noprof+0x91/0x6d0 [ 131.348535][ T6716] ? audit_log_d_path+0xed/0x210 [ 131.348549][ T6716] audit_log_d_path+0xed/0x210 [ 131.348561][ T6716] audit_log_d_path_exe+0x46/0x80 [ 131.348574][ T6716] audit_log_task+0x2fe/0x3a0 [ 131.348588][ T6716] ? __pfx_audit_log_task+0x10/0x10 [ 131.348602][ T6716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.348623][ T6716] audit_seccomp+0x7a/0x1f0 [ 131.348640][ T6716] __seccomp_filter+0x88c/0x1130 [ 131.348658][ T6716] ? __pfx___seccomp_filter+0x10/0x10 [ 131.348677][ T6716] ? xfd_validate_state+0x129/0x190 [ 131.348692][ T6716] __seccomp_permit_syscall+0x224/0x2e0 [ 131.348710][ T6716] do_syscall_64+0x591/0x790 [ 131.348728][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.348740][ T6716] RIP: 0033:0x7f016af9e159 [ 131.348749][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.348759][ T6716] RSP: 002b:00007f016be4e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.348771][ T6716] RAX: ffffffffffffffda RBX: 00007f016b225fa8 RCX: 00007f016af9e159 [ 131.348778][ T6716] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f016b225fac [ 131.348785][ T6716] RBP: 00007f016b225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 131.348791][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.348797][ T6716] R13: 00007f016b226038 R14: 00007fff170af670 R15: 00007fff170af758 [ 131.348811][ T6716] [ 131.348873][ T31] audit: type=1326 audit(1790115828.831:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.4.234" exe="" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016af9e159 code=0x7ffc0000 [ 131.348977][ T31] audit: type=1326 audit(1790115828.831:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.4.234" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016af9e159 code=0x7ffc0000 [ 131.349600][ T31] audit: type=1326 audit(1790115828.831:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.4.234" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f016af9e159 code=0x7ffc0000 [ 131.349734][ T31] audit: type=1326 audit(1790115828.831:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.4.234" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f016af9e159 code=0x7ffc0000 [ 131.438720][ T5710] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 131.484519][ T5608] usb 4-1: Using ep0 maxpacket: 32 [ 131.485259][ T5608] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 131.486286][ T5608] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 131.486306][ T5608] usb 4-1: config 0 has no interface number 0 [ 131.488635][ T5608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.488656][ T5608] usb 4-1: Product: syz [ 131.488668][ T5608] usb 4-1: Manufacturer: syz [ 131.488681][ T5608] usb 4-1: SerialNumber: syz [ 131.491008][ T5608] usb 4-1: config 0 descriptor?? [ 131.493639][ T5608] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 132.034012][ T5608] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 132.045963][ T5608] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 132.063884][ T5710] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.118232][ T5710] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.118259][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.118277][ T5710] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.118315][ T5710] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.163866][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.163891][ T5710] usb 3-1: Product: syz [ 132.163904][ T5710] usb 3-1: Manufacturer: syz [ 132.314048][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.315158][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.446917][ T5710] cdc_wdm 3-1:1.0: skipping garbage [ 132.446936][ T5710] cdc_wdm 3-1:1.0: skipping garbage [ 133.184382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.244389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 133.334395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 133.544390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.678099][ T5710] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 133.678118][ T5710] cdc_wdm 3-1:1.0: Unknown control protocol [ 133.813281][ T5710] usb 3-1: USB disconnect, device number 10 [ 134.075439][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 134.077935][ T5701] usb 4-1: USB disconnect, device number 11 [ 134.214557][ T5701] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 134.329602][ T5701] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 134.330155][ T5701] quatech2 4-1:0.51: device disconnected [ 134.464458][ T5710] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 134.578791][ T6744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.239'. [ 134.766424][ T5710] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.770147][ T5710] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.770202][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.770316][ T5710] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.770513][ T5710] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.976284][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.978146][ T5710] usb 3-1: Product: syz [ 134.978162][ T5710] usb 3-1: Manufacturer: syz [ 135.543720][ T6747] : renamed from bond_slave_0 (while UP) [ 135.655125][ T5701] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 135.689468][ T5710] usb 3-1: can't set config #1, error -71 [ 135.692049][ T5710] usb 3-1: USB disconnect, device number 11 [ 135.715321][ T31] audit: type=1400 audit(1790115833.191:334): avc: denied { bind } for pid=6748 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.743513][ T6693] IPVS: starting estimator thread 0... [ 135.826151][ T5701] usb 4-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=9f.f5 [ 135.827021][ T5701] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 135.827045][ T5701] usb 4-1: config 4 has no interface number 0 [ 135.830693][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.830717][ T5701] usb 4-1: Product: syz [ 135.830732][ T5701] usb 4-1: Manufacturer: syz [ 135.830746][ T5701] usb 4-1: SerialNumber: syz [ 135.837562][ T6754] IPVS: using max 47 ests per chain, 112800 per kthread [ 136.942910][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'. [ 136.995037][ T6773] x_tables: duplicate underflow at hook 3 [ 136.995847][ T31] audit: type=1326 audit(1790115834.481:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.250" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fc99e159 code=0x7ffc0000 [ 136.996589][ T31] audit: type=1326 audit(1790115834.481:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.250" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fc99e159 code=0x7ffc0000 [ 136.997437][ T31] audit: type=1326 audit(1790115834.481:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.250" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f32fc99e159 code=0x7ffc0000 [ 136.999597][ T31] audit: type=1326 audit(1790115834.481:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.250" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f32fc99e159 code=0x7ffc0000 [ 137.175521][ T6773] macvlan2: entered promiscuous mode [ 137.175549][ T6773] macvlan2: entered allmulticast mode [ 137.176338][ T6773] bond1: entered promiscuous mode [ 137.176880][ T6773] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.217747][ T6773] bond1: left promiscuous mode [ 138.046321][ T5701] ax88179_178a 4-1:4.147: probe with driver ax88179_178a failed with error -22 [ 138.055700][ T5701] usb 4-1: USB disconnect, device number 12 [ 139.389805][ T6792] : renamed from bond_slave_0 (while UP) [ 140.525148][ T5608] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 140.542745][ T31] audit: type=1400 audit(1790115838.021:339): avc: denied { getopt } for pid=6808 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.615250][ T5709] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 140.675182][ T5608] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 140.676300][ T5608] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.676329][ T5608] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.676370][ T5608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.804442][ T5709] usb 5-1: device descriptor read/64, error -71 [ 140.874236][ T6817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.263'. [ 141.064778][ T5709] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 141.195160][ T5709] usb 5-1: device descriptor read/64, error -71 [ 141.267058][ T5608] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0004/input/input11 [ 141.307071][ T5709] usb usb5-port1: attempt power cycle [ 141.345113][ T5608] rc_core: IR keymap rc-rc6-mce not found [ 141.345134][ T5608] Registered IR keymap rc-empty [ 141.347403][ T5608] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0004/rc/rc0 [ 141.351966][ T5608] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0004/rc/rc0/input12 [ 141.396243][ T5608] hid-picolcd 0003:04D8:C002.0004: No report with id 0x94 found [ 141.396267][ T5608] hid-picolcd 0003:04D8:C002.0004: failed to configure display [ 141.640686][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.643298][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.644938][ T5709] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 141.671505][ T31] audit: type=1400 audit(1790115839.131:340): avc: denied { mount } for pid=6825 comm="syz.1.267" name="/" dev="autofs" ino=11810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 141.674339][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.681600][ T5709] usb 5-1: device descriptor read/8, error -71 [ 141.683526][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.693200][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.693530][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.706991][ T5730] usb 4-1: USB disconnect, device number 13 [ 142.155731][ T5709] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 143.225857][ T5709] usb 5-1: device descriptor read/8, error -71 [ 143.346251][ T5709] usb usb5-port1: unable to enumerate USB device [ 144.094466][ T5709] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.246125][ T5709] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 144.247681][ T5709] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.247710][ T5709] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 144.247734][ T5709] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.247756][ T5709] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.247773][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.252696][ T5709] usb 5-1: config 0 descriptor?? [ 144.254612][ T6865] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.832945][ T6870] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 144.833275][ T4917] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 144.938257][ T5709] usbhid 5-1:0.0: can't add hid device: -71 [ 144.938349][ T5709] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 144.942985][ T5709] usb 5-1: USB disconnect, device number 14 [ 145.282471][ T31] audit: type=1400 audit(1790115842.761:341): avc: denied { mounton } for pid=6878 comm="syz.1.285" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 145.914569][ T1245] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 145.956054][ T5730] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 146.085917][ T1245] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 146.087997][ T1245] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.088047][ T1245] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 146.089701][ T1245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.089722][ T1245] usb 4-1: Product: syz [ 146.089737][ T1245] usb 4-1: Manufacturer: syz [ 146.089751][ T1245] usb 4-1: SerialNumber: syz [ 146.133201][ T5730] usb 5-1: Using ep0 maxpacket: 32 [ 146.198870][ T5730] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 146.204501][ T5730] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 146.204528][ T5730] usb 5-1: config 0 has no interface number 0 [ 146.238778][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.238804][ T5730] usb 5-1: Product: syz [ 146.238817][ T5730] usb 5-1: Manufacturer: syz [ 146.238838][ T5730] usb 5-1: SerialNumber: syz [ 146.297760][ T5730] usb 5-1: config 0 descriptor?? [ 146.301688][ T5730] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 146.518529][ T5730] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 146.523662][ T5730] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 146.574493][ T5701] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 146.606152][ T5783] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.723396][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.723840][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.741987][ T5701] usb 3-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=9f.f5 [ 146.743265][ T5701] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 146.743287][ T5701] usb 3-1: config 4 has no interface number 0 [ 146.754442][ T5783] usb 2-1: Using ep0 maxpacket: 32 [ 146.756259][ T5783] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.756293][ T5783] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 146.757260][ T5783] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 146.757295][ T5783] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 146.757311][ T5783] usb 2-1: config 14 has no interface number 0 [ 146.757326][ T5783] usb 2-1: config 14 has no interface number 1 [ 146.757368][ T5783] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 146.757386][ T5783] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 146.757404][ T5783] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 146.757442][ T5783] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 146.757462][ T5783] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 146.757482][ T5783] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.757502][ T5783] usb 2-1: config 14 interface 57 has no altsetting 0 [ 146.757515][ T5783] usb 2-1: config 14 interface 228 has no altsetting 0 [ 146.759211][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.759229][ T5783] usb 2-1: Product: syz [ 146.759241][ T5783] usb 2-1: Manufacturer: syz [ 146.759254][ T5783] usb 2-1: SerialNumber: syz [ 146.768517][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.768541][ T5701] usb 3-1: Product: syz [ 146.768555][ T5701] usb 3-1: Manufacturer: syz [ 146.768569][ T5701] usb 3-1: SerialNumber: syz [ 146.918354][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.918756][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.954293][ T10] usb 5-1: USB disconnect, device number 15 [ 146.961949][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 146.965077][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 146.976610][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 146.982170][ T10] quatech2 5-1:0.51: device disconnected [ 147.136500][ C0] usb 4-1: received EP1 urb->status = -71 [ 147.151830][ T1245] input: as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 147.153448][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 147.184309][ T5783] legousbtower 2-1:14.57: interrupt endpoints not found [ 147.202720][ T6898] x_tables: duplicate underflow at hook 3 [ 147.215793][ T6898] macvlan2: entered promiscuous mode [ 147.215814][ T6898] macvlan2: entered allmulticast mode [ 147.216931][ T6898] bond1: entered promiscuous mode [ 147.217547][ T6898] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.220457][ T6898] bond1: left promiscuous mode [ 147.279422][ T1245] usb 4-1: USB disconnect, device number 14 [ 147.323214][ T5701] ax88179_178a 3-1:4.147: probe with driver ax88179_178a failed with error -22 [ 147.384633][ T5701] usb 3-1: USB disconnect, device number 12 [ 147.446304][ T5783] legousbtower 2-1:14.228: get version request failed: -71 [ 147.446438][ T5783] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 147.459684][ T6909] udevd[6909]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.482620][ T5783] usb 2-1: USB disconnect, device number 10 [ 147.725491][ T6912] syz_tun: entered promiscuous mode [ 147.726992][ T6912] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 147.894036][ T31] audit: type=1400 audit(1790115845.371:342): avc: denied { bind } for pid=6917 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.894180][ T31] audit: type=1400 audit(1790115845.371:343): avc: denied { node_bind } for pid=6917 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 147.895837][ T31] audit: type=1400 audit(1790115845.381:344): avc: denied { connect } for pid=6917 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.017457][ T6919] __vm_enough_memory: pid: 6919, comm: syz.3.297, bytes: 4503599627366400 not enough memory for the allocation [ 148.530600][ T6927] FAULT_INJECTION: forcing a failure. [ 148.530600][ T6927] name fail_futex, interval 1, probability 0, space 0, times 0 [ 148.530630][ T6927] CPU: 0 UID: 0 PID: 6927 Comm: syz.2.302 Not tainted syzkaller #0 PREEMPT(full) [ 148.530652][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 148.530663][ T6927] Call Trace: [ 148.530669][ T6927] [ 148.530677][ T6927] dump_stack_lvl+0x100/0x190 [ 148.530711][ T6927] should_fail_ex.cold+0x5/0xa [ 148.530738][ T6927] get_futex_key+0x1d0/0x14f0 [ 148.530767][ T6927] ? __pfx_get_futex_key+0x10/0x10 [ 148.530791][ T6927] ? find_held_lock+0x2b/0x80 [ 148.530824][ T6927] ? futex_wake+0x4ea/0x5e0 [ 148.530848][ T6927] futex_wake+0xf4/0x5e0 [ 148.530870][ T6927] ? __pfx_futex_wake+0x10/0x10 [ 148.530900][ T6927] do_futex+0x2b2/0x440 [ 148.530926][ T6927] ? __pfx_do_futex+0x10/0x10 [ 148.530956][ T6927] __x64_sys_futex+0x34f/0x4d0 [ 148.530979][ T6927] ? __pfx_filename_mkdirat+0x10/0x10 [ 148.531003][ T6927] ? __pfx___x64_sys_futex+0x10/0x10 [ 148.531038][ T6927] do_syscall_64+0x123/0x790 [ 148.531066][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.531085][ T6927] RIP: 0033:0x7f4e1299e159 [ 148.531100][ T6927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.531116][ T6927] RSP: 002b:00007f4e137c00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.531136][ T6927] RAX: ffffffffffffffda RBX: 00007f4e12c25fa8 RCX: 00007f4e1299e159 [ 148.531148][ T6927] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4e12c25fac [ 148.531159][ T6927] RBP: 00007f4e12c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 148.531170][ T6927] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 148.531181][ T6927] R13: 00007f4e12c26038 R14: 00007ffc7a800950 R15: 00007ffc7a800a38 [ 148.531207][ T6927] [ 148.943395][ T4917] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 148.943443][ T4917] Bluetooth: hci1: Injecting HCI hardware error event [ 148.946370][ T5602] Bluetooth: hci1: hardware error 0x00 [ 150.604509][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 150.703281][ T31] audit: type=1400 audit(1790115848.181:345): avc: denied { allowed } for pid=6967 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.765083][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 150.773577][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.773606][ T25] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 150.782257][ T25] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 150.782277][ T25] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 150.782288][ T25] usb 3-1: config 14 has no interface number 0 [ 150.782297][ T25] usb 3-1: config 14 has no interface number 1 [ 150.782326][ T25] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 150.782339][ T25] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 150.782359][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 150.782374][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 150.782388][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 150.782402][ T25] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.782415][ T25] usb 3-1: config 14 interface 57 has no altsetting 0 [ 150.782424][ T25] usb 3-1: config 14 interface 228 has no altsetting 0 [ 150.809715][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.809739][ T25] usb 3-1: Product: syz [ 150.809752][ T25] usb 3-1: Manufacturer: syz [ 150.809764][ T25] usb 3-1: SerialNumber: syz [ 150.994534][ T5602] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 151.040122][ T6972] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 151.221751][ T25] legousbtower 3-1:14.57: interrupt endpoints not found [ 151.425791][ T25] legousbtower 3-1:14.228: get version request failed: -71 [ 151.425927][ T25] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 151.430257][ T25] usb 3-1: USB disconnect, device number 13 [ 151.812031][ T6936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.663730][ T7007] netlink: 27 bytes leftover after parsing attributes in process `syz.4.323'. [ 155.209919][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.325'. [ 155.365145][ T31] audit: type=1400 audit(1790115852.841:346): avc: denied { write } for pid=6988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.488745][ T31] audit: type=1400 audit(1790115852.971:347): avc: denied { write } for pid=7031 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.798207][ T5608] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.976846][ T5608] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 155.979513][ T5608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.979532][ T5608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.979545][ T5608] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 155.979567][ T5608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.041280][ T5608] usb 1-1: config 0 descriptor?? [ 156.045274][ T31] audit: type=1400 audit(1790115853.521:348): avc: denied { write } for pid=7035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.160215][ T31] audit: type=1400 audit(1790115853.641:349): avc: denied { write } for pid=7059 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.164492][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 156.266934][ T31] audit: type=1400 audit(1790115853.751:350): avc: denied { create } for pid=7060 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.267683][ T31] audit: type=1400 audit(1790115853.751:351): avc: denied { bind } for pid=7060 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.269940][ T31] audit: type=1400 audit(1790115853.751:352): avc: denied { write } for pid=7060 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.314459][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 156.316473][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.316508][ T25] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 156.317464][ T25] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 156.317482][ T25] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 156.317498][ T25] usb 2-1: config 14 has no interface number 0 [ 156.317512][ T25] usb 2-1: config 14 has no interface number 1 [ 156.317557][ T25] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 156.317576][ T25] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 156.317594][ T25] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 156.317614][ T25] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 156.317633][ T25] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 156.317653][ T25] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.317673][ T25] usb 2-1: config 14 interface 57 has no altsetting 0 [ 156.317687][ T25] usb 2-1: config 14 interface 228 has no altsetting 0 [ 156.319592][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.319611][ T25] usb 2-1: Product: syz [ 156.319624][ T25] usb 2-1: Manufacturer: syz [ 156.319636][ ** replaying previous printk message ** [ 156.319636][ T25] usb 2-1: SerialNumber: syz [ 156.470723][ T31] audit: type=1400 audit(1790115853.951:353): avc: denied { write } for pid=7067 comm="syz.4.334" name="functions" dev="configfs" ino=8935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.475189][ T31] audit: type=1400 audit(1790115853.961:354): avc: denied { write } for pid=7067 comm="syz.4.334" name="rd_mcp_0" dev="configfs" ino=10468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.487370][ T31] audit: type=1400 audit(1790115853.971:355): avc: denied { write } for pid=7067 comm="syz.4.334" name="usb_gadget" dev="configfs" ino=9059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.489628][ T7068] [ 156.568994][ T7068] ====================================================== [ 156.569894][ T5608] steelseries 0003:1038:1410.0005: unknown main item tag 0x1 [ 156.569918][ T5608] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 156.569935][ T5608] steelseries 0003:1038:1410.0005: unknown main item tag 0x3 [ 156.570143][ T5608] steelseries 0003:1038:1410.0005: missing HID_OUTPUT_REPORT 0 [ 156.605542][ T7068] WARNING: possible circular locking dependency detected [ 156.612536][ T7068] syzkaller #0 Not tainted [ 156.616923][ T7068] ------------------------------------------------------ [ 156.623915][ T7068] syz.4.334/7068 is trying to acquire lock: [ 156.629778][ T7068] ffff8880248d0600 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 156.641144][ T7068] [ 156.641144][ T7068] but task is already holding lock: [ 156.648485][ T7068] ffffffff90480000 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 156.657778][ T7068] [ 156.657778][ T7068] which lock already depends on the new lock. [ 156.657778][ T7068] [ 156.668173][ T7068] [ 156.668173][ T7068] the existing dependency chain (in reverse order) is: [ 156.677173][ T7068] [ 156.677173][ T7068] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 156.685048][ T7068] lock_acquire+0x1d1/0x380 [ 156.690053][ T7068] __mutex_lock+0x1a4/0x1bd0 [ 156.695142][ T7068] tcm_alloc+0x20/0x440 [ 156.699795][ T7068] usb_get_function+0x5e/0xd0 [ 156.704979][ T7068] config_usb_cfg_link+0x1ed/0x3a0 [ 156.710589][ T7068] configfs_symlink+0x695/0x1340 [ 156.716025][ T7068] vfs_symlink+0x178/0x4d0 [ 156.720933][ T7068] filename_symlinkat+0x2a6/0x560 [ 156.726465][ T7068] __x64_sys_symlinkat+0x9c/0xe0 [ 156.731898][ T7068] do_syscall_64+0x123/0x790 [ 156.736986][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.743372][ T7068] [ 156.743372][ T7068] -> #1 (&gi->lock){+.+.}-{4:4}: [ 156.750463][ T7068] lock_acquire+0x1d1/0x380 [ 156.755478][ T7068] __mutex_lock+0x1a4/0x1bd0 [ 156.760569][ T7068] config_usb_cfg_link+0x57/0x3a0 [ 156.766091][ T7068] configfs_symlink+0x695/0x1340 [ 156.771522][ T7068] vfs_symlink+0x178/0x4d0 [ 156.776444][ T7068] filename_symlinkat+0x2a6/0x560 [ 156.781965][ T7068] __x64_sys_symlinkat+0x9c/0xe0 [ 156.787407][ T7068] do_syscall_64+0x123/0x790 [ 156.792509][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.798910][ T7068] [ 156.798910][ T7068] -> #0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 156.807568][ T7068] check_prev_add+0xeb/0xe60 [ 156.812675][ T7068] __lock_acquire+0x1528/0x1f40 [ 156.818029][ T7068] lock_acquire+0x1d1/0x380 [ 156.823037][ T7068] down_write+0x8b/0x1f0 [ 156.827774][ T7068] configfs_depend_item_unlocked+0xf3/0x6a0 [ 156.834159][ T7068] usbg_make_tpg+0x251/0x610 [ 156.839255][ T7068] target_fabric_make_tpg+0xab/0x8c0 [ 156.845040][ T7068] configfs_mkdir+0x525/0xd40 [ 156.850223][ T7068] vfs_mkdir+0x364/0x850 [ 156.854964][ T7068] filename_mkdirat+0x48b/0x5e0 [ 156.860321][ T7068] __x64_sys_mkdirat+0x89/0xc0 [ 156.865584][ T7068] do_syscall_64+0x123/0x790 [ 156.870673][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.877062][ T7068] [ 156.877062][ T7068] other info that might help us debug this: [ 156.877062][ T7068] [ 156.887263][ T7068] Chain exists of: [ 156.887263][ T7068] &sb->s_type->i_mutex_key#25 --> &gi->lock --> tpg_instances_lock [ 156.887263][ T7068] [ 156.901065][ T7068] Possible unsafe locking scenario: [ 156.901065][ T7068] [ 156.908495][ T7068] CPU0 CPU1 [ 156.913851][ T7068] ---- ---- [ 156.919195][ T7068] lock(tpg_instances_lock); [ 156.923845][ T7068] lock(&gi->lock); [ 156.930229][ T7068] lock(tpg_instances_lock); [ 156.937397][ T7068] lock(&sb->s_type->i_mutex_key#25); [ 156.942930][ T7068] [ 156.942930][ T7068] *** DEADLOCK *** [ 156.942930][ T7068] [ 156.951062][ T7068] locks held by syz.4.334/7068: 4, last CPU#1: [ 156.957206][ T7068] #0: ffff88801ef26460 (sb_writers#14){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 156.966671][ T7068] #1: ffff888056bd6280 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 156.977436][ T7068] #2: ffffffff8ffb2e68 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 156.987156][ T7068] #3: ffffffff90480000 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 156.996867][ T7068] [ 156.996867][ T7068] stack backtrace: [ 157.002726][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.4.334 Not tainted syzkaller #0 PREEMPT(full) [ 157.011912][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 157.021951][ T7068] Call Trace: [ 157.025210][ T7068] [ 157.028116][ T7068] dump_stack_lvl+0x100/0x190 [ 157.032772][ T7068] print_circular_bug.cold+0x178/0x1be [ 157.038219][ T7068] check_noncircular+0x146/0x160 [ 157.043130][ T7068] check_prev_add+0xeb/0xe60 [ 157.047705][ T7068] __lock_acquire+0x1528/0x1f40 [ 157.052541][ T7068] ? rcu_is_watching+0x13/0xc0 [ 157.057293][ T7068] lock_acquire+0x1d1/0x380 [ 157.061771][ T7068] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 157.067810][ T7068] ? __pfx___might_resched+0x10/0x10 [ 157.073081][ T7068] down_write+0x8b/0x1f0 [ 157.077294][ T7068] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 157.083342][ T7068] ? __pfx_down_write+0x10/0x10 [ 157.088164][ T7068] ? kstrtou16+0xde/0x130 [ 157.092469][ T7068] configfs_depend_item_unlocked+0xf3/0x6a0 [ 157.098346][ T7068] usbg_make_tpg+0x251/0x610 [ 157.102935][ T7068] ? __pfx_usbg_make_tpg+0x10/0x10 [ 157.108026][ T7068] ? find_held_lock+0x2b/0x80 [ 157.112699][ T7068] ? __pfx_usbg_make_tpg+0x10/0x10 [ 157.117835][ T7068] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 157.123716][ T7068] target_fabric_make_tpg+0xab/0x8c0 [ 157.128988][ T7068] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 157.134860][ T7068] configfs_mkdir+0x525/0xd40 [ 157.139512][ T7068] ? may_create+0x285/0x440 [ 157.143990][ T7068] ? __pfx_configfs_mkdir+0x10/0x10 [ 157.149185][ T7068] vfs_mkdir+0x364/0x850 [ 157.153410][ T7068] filename_mkdirat+0x48b/0x5e0 [ 157.158322][ T7068] ? __pfx_filename_mkdirat+0x10/0x10 [ 157.163670][ T7068] ? strncpy_from_user+0x19d/0x2d0 [ 157.168755][ T7068] ? do_getname+0x191/0x390 [ 157.173248][ T7068] __x64_sys_mkdirat+0x89/0xc0 [ 157.177995][ T7068] do_syscall_64+0x123/0x790 [ 157.182576][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.188444][ T7068] RIP: 0033:0x7f016af9e159 [ 157.192831][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.212410][ T7068] RSP: 002b:00007f016be4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 157.220803][ T7068] RAX: ffffffffffffffda RBX: 00007f016b225fa0 RCX: 00007f016af9e159 [ 157.228760][ T7068] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 157.236710][ T7068] RBP: 00007f016b03506b R08: 0000000000000000 R09: 0000000000000000 [ 157.244668][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.252793][ T7068] R13: 00007f016b226038 R14: 00007f016b225fa0 R15: 00007fff170af758 [ 157.260742][ T7068] [ 157.281079][ T5783] usb 1-1: USB disconnect, device number 13 [ 157.481325][ T25] legousbtower 2-1:14.57: interrupt endpoints not found [ 157.684641][ T25] legousbtower 2-1:14.228: get version request failed: -71 [ 157.684683][ T25] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 157.686269][ T25] usb 2-1: USB disconnect, device number 11 [ 157.688016][ T5589] udevd[5589]: setting mode of /dev/bus/usb/002/011 to 020664 failed: No such file or directory [ 157.688076][ T5589] udevd[5589]: setting owner of /dev/bus/usb/002/011 to uid=0, gid=0 failed: No such file or directory [ 158.672771][ T7037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512