last executing test programs: 4.616983014s ago: executing program 1 (id=3328): setpriority(0x0, 0x0, 0x7) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0) 3.87543382s ago: executing program 2 (id=3340): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.710392399s ago: executing program 1 (id=3352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote, 0x8, 0x2, 0x2, 0x0, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x2001, 0x2) 3.679754814s ago: executing program 2 (id=3343): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.666051808s ago: executing program 1 (id=3344): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 3.422117135s ago: executing program 2 (id=3349): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x5c, r2, 0x1, 0x1, 0x25dfdc01, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x40810) 3.327434026s ago: executing program 2 (id=3353): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffd, 0x6, 0x8, @buffer={0x0, 0x54, &(0x7f0000000040)=""/84}, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x10001, 0x0, 0x0}) 3.244816526s ago: executing program 2 (id=3357): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0xc, 0x2, {0x2, 0xb}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.965620603s ago: executing program 4 (id=3362): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.83829697s ago: executing program 4 (id=3364): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000180)="cf", 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) 2.554400379s ago: executing program 4 (id=3368): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 2.446374334s ago: executing program 4 (id=3371): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000040), 0x0, 0x20000820}, 0x890) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 1.928432161s ago: executing program 4 (id=3373): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585", @ANYRESHEX=0x0], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1.414791012s ago: executing program 3 (id=3379): mount$fuse(0x0, 0x0, 0x0, 0x2000010, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, r0, 0x1, 0xfffffffe, 0x25dfdbfc, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.367900515s ago: executing program 3 (id=3380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.327235888s ago: executing program 3 (id=3381): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 1.236509134s ago: executing program 3 (id=3382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x4d, 0x0, @wg=@data={0x4, 0x202, 0x1ff, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76d"}}}}, 0x73) 1.159743404s ago: executing program 2 (id=3383): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f00000000c0)=[{0x5, 0x200, 0x0, 0x0}, {0x7, 0x6010, 0x0, 0x0}, {0x1, 0x4212, 0x0, 0x0}], 0x3}) 1.037869245s ago: executing program 3 (id=3384): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = dup(r1) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000), 0x0, 0x0, 0x2) flistxattr(r1, 0x0, 0x0) 1.023182137s ago: executing program 3 (id=3385): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="cc", 0x1}], 0x1) 705.211666ms ago: executing program 0 (id=3387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x28000600) mq_open(&(0x7f0000000000)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) unshare(0x8000280) close_range(r0, 0xffffffffffffffff, 0x0) 646.707068ms ago: executing program 1 (id=3388): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000088d82, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0x5cd0, 0x100, 0xfffffffc, 0x1bc}, &(0x7f0000002180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847b9, 0xebd0, 0xa, 0x0, 0x0) 502.157717ms ago: executing program 0 (id=3389): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x2, 0xffffffff00772d46, 0xfffc, 0x400, 0x200, 0x5, 0x0, 0x0, 0x12, 0x7fffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040006000000000008000000", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x2c, 0x2) 438.180114ms ago: executing program 0 (id=3390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 428.422851ms ago: executing program 4 (id=3391): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0xb, &(0x7f0000000080)={0x36, 0x208, 0xfffffff3}) 354.492278ms ago: executing program 1 (id=3392): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x0, 0x6, 0x81, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 310.303299ms ago: executing program 0 (id=3393): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 239.858227ms ago: executing program 0 (id=3394): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x8c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x6a, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0x1, @random=0x400, 0x3800, @val, @void, @val={0x3, 0x1, 0x2c}, @val={0x4, 0x6, {0x70, 0x1, 0x7, 0x4}}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb78, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, 0x0, 0x24008090) 134.888128ms ago: executing program 1 (id=3395): r0 = open(&(0x7f0000000280)='.\x00', 0x8000, 0x0) r1 = syz_io_uring_setup(0x6c8d, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x143, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0xf400, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=3396): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 209.633347][ T5862] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 209.640683][ T5810] Bluetooth: hci3: unexpected subevent 0x05 length: 25 > 12 [ 209.707940][ T5862] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 209.934824][ T905] usb 2-1: USB disconnect, device number 23 [ 209.940933][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 209.951049][T10600] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 209.967461][ T905] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 210.344970][ T905] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 210.509116][ T905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.535117][ T905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.546914][ T905] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.564254][ T905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.582491][ T905] usb 5-1: SerialNumber: syz [ 210.833426][ T905] usb 5-1: 0:2 : does not exist [ 210.931264][ T905] usb 5-1: USB disconnect, device number 20 [ 210.981407][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.585244][ T5810] Bluetooth: hci3: command tx timeout [ 211.792744][ T5946] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 211.900658][ T905] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 211.956659][ T5946] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.985444][ T5946] usb 5-1: config 0 has no interface number 0 [ 211.995892][ T5946] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 212.021781][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.034854][ T5946] usb 5-1: Product: syz [ 212.039051][ T5946] usb 5-1: Manufacturer: syz [ 212.054019][ T5946] usb 5-1: SerialNumber: syz [ 212.065515][ T5946] usb 5-1: config 0 descriptor?? [ 212.072063][ T905] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 212.083444][ T905] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 212.100086][ T905] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.118710][ T905] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.130373][ T905] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 212.137506][T10694] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2060'. [ 212.142911][ T905] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 212.200400][ T905] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 212.227816][ T905] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.256064][ T905] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.287648][ T905] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 212.288339][ T5946] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 212.308315][ T905] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 212.316090][ T905] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 212.327583][ T905] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.353071][ T5946] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 212.364335][ T905] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.374425][ T5946] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 212.381430][ T905] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 212.399260][ T905] usb 3-1: string descriptor 0 read error: -22 [ 212.407188][ T905] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 212.416508][ T905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.425489][ T5946] usb 5-1: media controller created [ 212.466129][ T905] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 212.474930][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.480967][ T30] audit: type=1326 audit(1773695198.451:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 212.535948][ T30] audit: type=1326 audit(1773695198.482:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 212.580086][ T30] audit: type=1326 audit(1773695198.482:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 212.612750][ T30] audit: type=1326 audit(1773695198.482:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 212.619992][ T5946] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 212.711756][ T30] audit: type=1326 audit(1773695198.482:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 212.772349][ T30] audit: type=1326 audit(1773695198.482:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 212.807172][ T30] audit: type=1326 audit(1773695198.482:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 212.814399][ T5946] usb 5-1: USB disconnect, device number 21 [ 212.834565][ T10] usb 3-1: USB disconnect, device number 24 [ 212.855138][ T30] audit: type=1326 audit(1773695198.482:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 212.888956][ T30] audit: type=1326 audit(1773695198.482:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 212.972033][ T30] audit: type=1326 audit(1773695198.482:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 213.742570][T10744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2083'. [ 213.766149][T10745] netlink: 'syz.3.2084': attribute type 4 has an invalid length. [ 213.813822][T10745] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2084'. [ 213.889440][T10745] .`: renamed from bond0 (while UP) [ 214.477603][T10771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.869433][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 215.044338][ T10] usb 3-1: config index 0 descriptor too short (expected 64874, got 72) [ 215.063150][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 215.079115][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.116809][ T10] usb 3-1: Product: syz [ 215.121005][ T10] usb 3-1: Manufacturer: syz [ 215.125604][ T10] usb 3-1: SerialNumber: syz [ 215.194807][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 215.211621][ T905] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 215.779297][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 215.806544][ T5890] usb 3-1: USB disconnect, device number 25 [ 215.900349][ T5920] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 215.999632][T10834] kvm_intel: kvm [10830]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 216.070566][ T5920] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 216.100471][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.126656][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.148617][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.170324][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.186709][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.220318][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.228489][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.241101][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.255099][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.263008][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.272742][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.284786][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.323606][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.336328][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.364768][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.381245][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.389969][ T905] usb 3-1: Service connection timeout for: 256 [ 216.406003][ T905] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 216.410294][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.425671][ T905] ath9k_htc: Failed to initialize the device [ 216.454129][ T5890] usb 3-1: ath9k_htc: USB layer deinitialized [ 216.460305][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.475466][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.488746][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.523684][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.551091][T10857] batman_adv: batadv0: Adding interface: macvtap1 [ 216.560070][T10857] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.565928][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.587969][T10857] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 216.632144][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.657889][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.675095][ T5920] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 216.688454][ T5920] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 216.706227][ T5920] usb 5-1: Product: syz [ 216.717114][ T5920] usb 5-1: Manufacturer: syz [ 216.726569][ T5920] usb 5-1: SerialNumber: syz [ 216.738728][ T5920] usb 5-1: config 0 descriptor?? [ 216.752752][ T5920] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 216.972213][ T905] usb 5-1: USB disconnect, device number 22 [ 216.984714][ T905] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 218.092847][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 218.092864][ T30] audit: type=1400 audit(1773695204.341:497): avc: denied { accept } for pid=10893 comm="syz.2.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 218.194342][ T905] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 218.349834][ T905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.370292][ T905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.420178][ T905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.476034][ T905] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 218.494590][ T905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.512137][ T905] usb 4-1: config 0 descriptor?? [ 218.873449][ T30] audit: type=1400 audit(1773695205.160:498): avc: denied { execute } for pid=10910 comm="syz.2.2161" path="/dev/audio" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 218.927556][T10913] fuse: Bad value for 'fd' [ 218.944821][ T905] hid-rmi 0003:0461:4E72.0015: ignoring exceeding usage max [ 219.002463][ T905] hid-rmi 0003:0461:4E72.0015: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 219.050796][ T30] audit: type=1400 audit(1773695205.338:499): avc: denied { name_bind } for pid=10916 comm="syz.2.2163" src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 219.194661][ T5920] usb 4-1: USB disconnect, device number 21 [ 219.218402][T10917] fido_id[10917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 219.350897][T10905] syz.4.2158 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 219.402562][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2169'. [ 219.411784][T10929] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.977356][T10952] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2180'. [ 220.133430][T10960] xt_hashlimit: size too large, truncated to 1048576 [ 220.465091][T10975] netlink: 'syz.3.2191': attribute type 3 has an invalid length. [ 220.508092][ T5862] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 220.693878][ T5862] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 220.702375][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 220.714352][ T5862] usb 5-1: config 0 has no interface number 0 [ 220.737566][ T5862] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 220.771243][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.808886][ T5862] usb 5-1: Product: syz [ 220.816330][ T5862] usb 5-1: Manufacturer: syz [ 220.821746][ T5862] usb 5-1: SerialNumber: syz [ 220.850802][ T905] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 220.863617][ T5862] usb 5-1: config 0 descriptor?? [ 220.994599][T11000] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2201'. [ 221.014896][ T905] usb 3-1: unable to get BOS descriptor or descriptor too short [ 221.040443][ T905] usb 3-1: config 1 has an invalid interface number: 48 but max is 1 [ 221.058220][ T905] usb 3-1: config 1 has no interface number 1 [ 221.074106][ T905] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 221.097647][ T30] audit: type=1400 audit(1773695207.490:500): avc: denied { create } for pid=11001 comm="syz.3.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 221.130650][ T905] usb 3-1: config 1 interface 0 has no altsetting 0 [ 221.155873][ T30] audit: type=1400 audit(1773695207.490:501): avc: denied { ioctl } for pid=11001 comm="syz.3.2202" path="socket:[30222]" dev="sockfs" ino=30222 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 221.161281][ T905] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 221.204266][ T905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.213006][ T905] usb 3-1: Product: syz [ 221.217983][ T905] usb 3-1: Manufacturer: syz [ 221.223865][ T905] usb 3-1: SerialNumber: syz [ 221.228780][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 221.250734][T11008] netlink: 'syz.3.2205': attribute type 30 has an invalid length. [ 221.266541][ T5862] usb 5-1: Firmware version (0.0) predates our first public release. [ 221.278325][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 221.284473][ T5862] usb 5-1: Please update to version 0.2 or newer [ 221.306373][ T1164] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.306383][T11010] netlink: 'syz.3.2205': attribute type 30 has an invalid length. [ 221.324593][ T1164] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.334545][ T1156] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.345599][ T1156] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.471834][ T905] smsusb:smsusb_probe: board id=8, interface number 0 [ 221.493693][ T905] smsusb:smsusb_probe: board id=8, interface number 48 [ 221.511038][ T905] usb 3-1: USB disconnect, device number 26 [ 221.528816][ T5862] usb 5-1: USB disconnect, device number 23 [ 221.534300][ T30] audit: type=1400 audit(1773695207.952:502): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 221.835875][ T30] audit: type=1400 audit(1773695208.267:503): avc: denied { mount } for pid=11025 comm="syz.3.2212" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 221.943305][T11032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.990487][ T30] audit: type=1326 audit(1773695208.425:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1802d9c799 code=0x7ffc0000 [ 222.018228][ T30] audit: type=1326 audit(1773695208.425:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1802d9c799 code=0x7ffc0000 [ 222.042887][ T30] audit: type=1326 audit(1773695208.425:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1802d9c799 code=0x7ffc0000 [ 222.626154][ T905] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 222.805413][ T905] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 222.816762][ T905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.834223][ T905] usb 4-1: Product: syz [ 222.838484][ T905] usb 4-1: Manufacturer: syz [ 222.851284][ T905] usb 4-1: SerialNumber: syz [ 222.865803][ T905] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 222.897730][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 222.926478][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 223.369932][T11087] program syz.2.2240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.487978][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 223.487998][ T30] audit: type=1400 audit(1773695210.000:522): avc: denied { mount } for pid=11090 comm="syz.2.2243" name="/" dev="pstore" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 223.517046][ T905] usb 4-1: USB disconnect, device number 22 [ 223.526428][T11093] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 223.547006][T11093] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2242'. [ 223.575820][T11093] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2242'. [ 223.586330][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 223.603269][T11093] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 223.621130][T11093] netlink: 'syz.1.2242': attribute type 8 has an invalid length. [ 223.629608][T11093] netlink: 606 bytes leftover after parsing attributes in process `syz.1.2242'. [ 224.083157][ T10] usb 4-1: Service connection timeout for: 256 [ 224.091861][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 224.102309][ T10] ath9k_htc: Failed to initialize the device [ 224.108835][ T905] usb 4-1: ath9k_htc: USB layer deinitialized [ 224.347807][T11130] __nla_validate_parse: 1 callbacks suppressed [ 224.347827][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2260'. [ 224.630729][T11143] loop5: detected capacity change from 0 to 7 [ 224.650968][ C1] blk_print_req_error: 10 callbacks suppressed [ 224.651001][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.666792][ C1] buffer_io_error: 10 callbacks suppressed [ 224.666808][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 224.706212][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.715868][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 224.780146][T11146] Invalid logical block size (2) [ 224.814459][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.824089][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 224.833326][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.842951][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 224.876814][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.886464][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 224.900899][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.910544][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 224.919159][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.928802][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 224.936792][T11143] ldm_validate_partition_table(): Disk read failed. [ 224.951168][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.960811][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 224.968739][ T30] audit: type=1400 audit(1773695211.554:523): avc: denied { mounton } for pid=11154 comm="syz.3.2272" path="/257/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 224.970116][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.000602][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 225.012688][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.022283][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 225.032018][T11143] Dev loop5: unable to read RDB block 0 [ 225.051477][T11143] loop5: unable to read partition table [ 225.060085][T11143] loop5: partition table beyond EOD, truncated [ 225.071642][T11143] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 225.072234][ T30] audit: type=1400 audit(1773695211.669:524): avc: denied { unmount } for pid=7636 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 225.329425][T11171] overlayfs: conflicting lowerdir path [ 225.392884][ T905] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 225.515644][T11184] netlink: 'syz.1.2286': attribute type 1 has an invalid length. [ 225.546227][ T905] usb 4-1: Using ep0 maxpacket: 8 [ 225.553930][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'. [ 225.573416][ T905] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 225.603603][ T905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.635657][ T905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 225.662467][ T905] pvrusb2: ********** [ 225.666478][ T905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 225.709132][ T905] pvrusb2: Important functionality might not be entirely working. [ 225.751627][ T905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 225.792063][ T905] pvrusb2: ********** [ 225.823415][ T2338] pvrusb2: Invalid write control endpoint [ 225.865471][T11199] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2294'. [ 225.920325][ T2338] pvrusb2: Invalid write control endpoint [ 225.936013][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 225.966423][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 225.994431][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 226.013170][ T2338] pvrusb2: Device being rendered inoperable [ 226.040973][T11163] pvrusb2: Killing an I2C write to 10 that is too large (desired=62 limit=61) [ 226.050716][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 226.053412][ T5862] usb 4-1: USB disconnect, device number 23 [ 226.081615][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 226.114598][ T2338] pvrusb2: Attached sub-driver cx25840 [ 226.124888][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 226.135342][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 226.797860][T11245] sp0: Synchronizing with TNC [ 226.921370][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 226.937060][T11255] netlink: 'syz.1.2316': attribute type 30 has an invalid length. [ 226.944997][ T5920] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 226.972698][ T218] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.993886][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 227.003802][ T1080] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.012841][ T1080] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.040201][T11255] netlink: 'syz.1.2316': attribute type 30 has an invalid length. [ 227.063733][ T1080] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.101269][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 227.108373][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.149042][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.188163][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.223538][ T5920] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 227.238899][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.254013][ T5920] usb 4-1: config 0 descriptor?? [ 227.501510][T11281] input: syz1 as /devices/virtual/input/input25 [ 227.663157][ T5920] hid_parser_main: 210 callbacks suppressed [ 227.663182][ T5920] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 227.719085][ T5920] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 227.726087][ T5920] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 227.736596][ T5920] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 227.763019][ T5920] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 227.783918][ T5920] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 227.804312][ T5920] a4tech 0003:09DA:000A.0016: unknown global tag 0xd [ 227.811026][ T5920] a4tech 0003:09DA:000A.0016: item 0 1 1 13 parsing failed [ 227.830540][ T5920] a4tech 0003:09DA:000A.0016: parse failed [ 227.839836][ T5920] a4tech 0003:09DA:000A.0016: probe with driver a4tech failed with error -22 [ 227.874366][ T5920] usb 4-1: USB disconnect, device number 24 [ 228.360439][T11317] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2343'. [ 228.535641][ T30] audit: type=1400 audit(1773695215.302:525): avc: denied { read } for pid=11324 comm="syz.3.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.173259][ T30] audit: type=1400 audit(1773695223.964:526): avc: denied { read } for pid=11352 comm="syz.0.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 229.234356][T11357] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 229.539591][ T30] audit: type=1326 audit(1773695224.363:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 229.610748][ T30] audit: type=1326 audit(1773695224.384:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 229.699287][ T30] audit: type=1326 audit(1773695224.384:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 229.770941][ T30] audit: type=1326 audit(1773695224.384:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 229.842005][ T30] audit: type=1326 audit(1773695224.384:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 229.909148][ T30] audit: type=1326 audit(1773695224.384:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 229.964318][ T30] audit: type=1400 audit(1773695224.384:533): avc: denied { connect } for pid=11369 comm="syz.1.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 230.043751][ T30] audit: type=1326 audit(1773695224.394:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef09f9c799 code=0x7ffc0000 [ 230.099522][T11384] bond0: entered promiscuous mode [ 230.126748][T11384] bond_slave_0: entered promiscuous mode [ 230.141033][T11384] bond_slave_1: entered promiscuous mode [ 230.177518][T11384] batadv0: entered promiscuous mode [ 230.196293][T11384] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 230.221880][T11384] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 230.229770][T11397] sock: sock_set_timeout: `syz.3.2380' (pid 11397) tries to set negative timeout [ 230.250851][T11384] bond0: left promiscuous mode [ 230.266742][T11384] bond_slave_0: left promiscuous mode [ 230.286711][T11384] bond_slave_1: left promiscuous mode [ 230.346210][T11384] batadv0: left promiscuous mode [ 230.396669][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2382'. [ 230.865320][T11425] SELinux: failed to load policy [ 231.281509][ T5862] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 231.442961][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 231.459088][ T5862] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 231.467618][ T5862] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 231.500332][ T5862] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 231.523496][ T5862] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 231.539969][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 231.549997][ T5862] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 231.562160][ T5862] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 231.571889][ T5862] usb 3-1: Product: syz [ 231.576129][ T5862] usb 3-1: Manufacturer: syz [ 231.580734][ T5862] usb 3-1: SerialNumber: syz [ 231.601286][ T5862] usb 3-1: config 0 descriptor?? [ 231.613694][ T5862] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 231.658202][ T5862] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 231.661629][ T5946] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 231.832738][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 231.839893][ T5946] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 231.851883][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.914981][ T5946] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 232.342171][ T5862] usb 3-1: USB disconnect, device number 27 [ 232.352382][ T5862] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 233.021539][ T5862] usb 4-1: USB disconnect, device number 25 [ 233.053294][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 233.660924][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 233.660941][ T30] audit: type=1400 audit(1773695228.677:542): avc: denied { bind } for pid=11523 comm="syz.0.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 233.757280][ T30] audit: type=1326 audit(1773695228.761:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11526 comm="syz.2.2439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb92d99c799 code=0x0 [ 234.778770][T11566] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2456'. [ 235.444481][ T30] audit: type=1400 audit(1773695230.565:544): avc: denied { connect } for pid=11600 comm="syz.1.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 235.516649][ T30] audit: type=1400 audit(1773695230.628:545): avc: denied { write } for pid=11600 comm="syz.1.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 235.891057][T11626] veth0_to_bridge: entered promiscuous mode [ 235.910271][T11624] veth0_to_bridge: left promiscuous mode [ 235.997633][T11629] 9p: Bad value for 'rfdno' [ 236.007621][T11632] netlink: 'syz.3.2486': attribute type 8 has an invalid length. [ 236.084715][ T30] audit: type=1400 audit(1773695231.226:546): avc: denied { bind } for pid=11634 comm="syz.3.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 237.629808][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 237.675167][T11691] netlink: 'syz.0.2512': attribute type 30 has an invalid length. [ 237.690983][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'. [ 237.828430][ T5810] Bluetooth: hci3: unexpected cc 0x0c7a length: 5 > 1 [ 238.262652][ T905] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.408260][ T905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.424895][ T905] usb 2-1: config 0 has no interfaces? [ 238.430448][ T905] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 238.443582][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 238.471375][ T905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.499297][ T905] usb 2-1: config 0 descriptor?? [ 238.543004][T11728] xt_hashlimit: size too large, truncated to 1048576 [ 238.598295][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 238.619475][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 238.633316][ T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 238.642930][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.658980][ T10] usb 4-1: Product: syz [ 238.663745][ T10] usb 4-1: Manufacturer: syz [ 238.668347][ T10] usb 4-1: SerialNumber: syz [ 238.684476][ T10] usb 4-1: config 0 descriptor?? [ 238.690111][T11714] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 238.700668][T11714] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 238.909467][ T905] usb 2-1: USB disconnect, device number 24 [ 238.939810][T11714] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 238.960071][T11714] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 239.139935][ T30] audit: type=1326 audit(1773695234.428:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.0.2540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9195f9c799 code=0x0 [ 239.335771][ T30] audit: type=1400 audit(1773695234.638:548): avc: denied { bind } for pid=11760 comm="syz.4.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.382073][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 239.387102][ T30] audit: type=1400 audit(1773695234.659:549): avc: denied { write } for pid=11760 comm="syz.4.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.445098][T11768] netlink: 'syz.1.2546': attribute type 8 has an invalid length. [ 239.461877][T11768] sch_fq: defrate 0 ignored. [ 239.573676][ T10] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 239.668169][ T10] usb 4-1: USB disconnect, device number 26 [ 239.806274][T11780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.330168][T11806] input: syz0 as /devices/virtual/input/input26 [ 240.392610][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2565'. [ 240.665636][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 240.778287][ T30] audit: type=1400 audit(1773695236.149:550): avc: denied { map } for pid=11828 comm="syz.4.2575" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 240.834874][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 240.846391][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 240.862098][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.968881][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 240.984817][ T10] pvrusb2: ********** [ 240.995394][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 241.014243][ T10] pvrusb2: Important functionality might not be entirely working. [ 241.032589][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 241.035561][T11841] bridge_slave_1: left allmulticast mode [ 241.051304][ T10] pvrusb2: ********** [ 241.064614][T11841] bridge_slave_1: left promiscuous mode [ 241.083729][T11841] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.130527][T11841] bridge_slave_0: left allmulticast mode [ 241.136326][T11841] bridge_slave_0: left promiscuous mode [ 241.142652][T11841] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.187093][ T2338] pvrusb2: Invalid write control endpoint [ 241.287412][ T2338] pvrusb2: Invalid write control endpoint [ 241.320228][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 241.337080][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 241.350276][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 241.361112][ T2338] pvrusb2: Device being rendered inoperable [ 241.367069][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 241.399114][ T5920] usb 3-1: USB disconnect, device number 28 [ 241.412763][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 241.426523][ T2338] pvrusb2: Attached sub-driver cx25840 [ 241.440402][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 241.456987][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 241.507805][ T30] audit: type=1800 audit(1773695236.916:551): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2589" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=34289 res=0 errno=0 [ 242.390076][ T30] audit: type=1326 audit(1773695237.850:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.4.2604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe778b9c799 code=0x0 [ 242.741486][ T30] audit: type=1400 audit(1773695238.218:553): avc: denied { map } for pid=11908 comm="syz.2.2609" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 242.868954][T11914] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2611'. [ 242.888796][T11914] netem: unknown loss type 5 [ 242.902938][T11914] netem: change failed [ 243.413567][ T5810] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 243.444907][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2621'. [ 243.473308][T11937] netlink: 'syz.4.2621': attribute type 21 has an invalid length. [ 243.792033][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 243.949723][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 243.956259][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 243.993493][ T10] usb 2-1: config 0 has no interface number 0 [ 244.001427][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.012503][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 244.041255][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 244.067233][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.102280][ T10] usb 2-1: Product: syz [ 244.109053][ T10] usb 2-1: Manufacturer: syz [ 244.121462][ T10] usb 2-1: SerialNumber: syz [ 244.136409][ T10] usb 2-1: config 0 descriptor?? [ 244.141589][ T5862] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 244.294454][ T5862] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 244.311316][ T5862] usb 5-1: config 0 has no interface number 0 [ 244.319761][ T5862] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 244.330579][ T5920] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 244.340026][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.348069][ T5862] usb 5-1: Product: syz [ 244.353935][ T5862] usb 5-1: Manufacturer: syz [ 244.358588][ T5862] usb 5-1: SerialNumber: syz [ 244.369064][ T5862] usb 5-1: config 0 descriptor?? [ 244.483078][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 244.494477][ T5920] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 244.504123][ T5920] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.513999][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.525592][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.535936][ T5920] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.550053][ T5920] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.559625][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.573176][ T5862] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 244.594440][ T5862] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 244.604416][ T5862] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 244.617436][ T5862] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 244.628728][ T5862] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 244.688050][ T5946] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 244.793811][ T5920] usb 4-1: GET_CAPABILITIES returned 0 [ 244.799881][ T5920] usbtmc 4-1:16.0: can't read capabilities [ 244.844994][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 244.851429][ T5946] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 244.859927][ T5946] usb 3-1: config 0 has no interface number 0 [ 244.868005][ T5946] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 244.877105][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.885735][ T5946] usb 3-1: Product: syz [ 244.889915][ T5946] usb 3-1: Manufacturer: syz [ 244.890269][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 244.894578][ T5946] usb 3-1: SerialNumber: syz [ 244.903847][ T5946] usb 3-1: config 0 descriptor?? [ 244.907760][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input27 [ 244.919043][ T5946] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 244.932178][ C0] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 244.970837][ T5862] usb 5-1: USB disconnect, device number 24 [ 245.017660][ T10] usb 4-1: USB disconnect, device number 27 [ 245.027913][ T5862] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 245.055168][ T5862] keyspan 5-1:0.133: device disconnected [ 245.117314][ T5946] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 245.128377][ T905] usb 2-1: USB disconnect, device number 25 [ 245.130041][ T5946] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 245.158429][ T905] appletouch 2-1:0.85: input: appletouch disconnected [ 245.544236][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 245.545424][ T905] usb 3-1: USB disconnect, device number 29 [ 245.599992][ T905] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 245.641269][ T905] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 245.663498][ T905] quatech2 3-1:0.51: device disconnected [ 245.678029][ T5920] kernel write not supported for file /sequencer (pid: 5920 comm: kworker/1:5) [ 245.797999][ T5810] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 246.302159][ T5946] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 246.368777][ T5862] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 246.456175][ T5946] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 246.465247][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.476254][ T5946] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 246.491707][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.495473][T12016] netlink: 'syz.0.2657': attribute type 15 has an invalid length. [ 246.510960][T12016] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2657'. [ 246.516462][ T5946] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 246.521003][ T5862] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 246.561577][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.568417][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.570651][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.583375][ T5946] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 246.641333][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.646303][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.649990][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.669353][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.681334][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.684632][ T5946] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 246.693205][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.709872][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.725348][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.731197][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.736033][ T5946] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 246.756480][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.757325][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.766189][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.800930][ T5946] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 246.811175][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.821655][ T5946] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 246.832238][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.842733][ T5946] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 246.851781][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.859695][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.860858][ T5946] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 246.880804][ T5946] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 246.883887][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.889533][ T5946] usb 4-1: Product: syz [ 246.904632][ T5946] usb 4-1: Manufacturer: syz [ 246.909235][ T5946] usb 4-1: SerialNumber: syz [ 246.917314][ T5946] usb 4-1: config 0 descriptor?? [ 246.936627][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.953800][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.962915][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.974420][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.984251][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.993522][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.006180][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 247.015061][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.024643][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.035956][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 247.045923][ T5862] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 247.055061][ T5862] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 247.063581][ T5862] usb 3-1: Product: syz [ 247.067966][ T5862] usb 3-1: Manufacturer: syz [ 247.072579][ T5862] usb 3-1: SerialNumber: syz [ 247.079116][ T5862] usb 3-1: config 0 descriptor?? [ 247.088338][ T5862] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 247.152013][ T5920] usb 4-1: USB disconnect, device number 28 [ 247.168924][ T905] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 247.211778][ T30] audit: type=1400 audit(1773695242.910:554): avc: denied { execstack } for pid=12030 comm="syz.0.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 247.247451][ T5810] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 247.256939][ T5810] Bluetooth: hci0: Injecting HCI hardware error event [ 247.266982][ T5814] Bluetooth: hci0: hardware error 0x00 [ 247.282217][ T5946] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 247.312188][ T905] usb 5-1: Using ep0 maxpacket: 8 [ 247.325085][ T905] usb 5-1: config 1 has an invalid interface number: 73 but max is 1 [ 247.340415][ T905] usb 5-1: config 1 has no interface number 1 [ 247.346654][ T905] usb 5-1: config 1 interface 0 has no altsetting 0 [ 247.353701][ T905] usb 5-1: config 1 interface 73 has no altsetting 0 [ 247.367802][ T905] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1250, bcdDevice=d8.77 [ 247.377270][ T905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.386536][ T905] usb 5-1: Product: syz [ 247.391124][ T905] usb 5-1: Manufacturer: syz [ 247.395758][ T905] usb 5-1: SerialNumber: syz [ 247.401180][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 247.411019][ T5862] usb 3-1: USB disconnect, device number 30 [ 247.422224][ T5862] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 247.435686][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 247.444451][ T5946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.463550][ T5946] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 247.478067][ T5946] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 247.489084][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.497475][ T5946] usb 2-1: Product: syz [ 247.501697][ T5946] usb 2-1: Manufacturer: syz [ 247.506975][ T5946] usb 2-1: SerialNumber: syz [ 247.643018][ T905] usb 5-1: bad CDC descriptors [ 247.658197][ T905] usb 5-1: USB disconnect, device number 25 [ 247.728265][ T5946] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 247.744154][ T5946] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 247.805147][T12049] tipc: Started in network mode [ 247.811238][T12049] tipc: Node identity ac14140f, cluster identity 4711 [ 247.818384][T12049] tipc: New replicast peer: 255.255.255.255 [ 247.824785][T12049] tipc: Enabled bearer , priority 10 [ 248.152962][ T30] audit: type=1400 audit(1773695243.897:555): avc: denied { listen } for pid=12055 comm="syz.2.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.222905][ T5946] usb 2-1: USB disconnect, device number 26 [ 248.523488][ T792] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 248.703831][ T792] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.713244][ T792] usb 3-1: not running at top speed; connect to a high speed hub [ 248.732663][ T792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.748702][ T792] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 248.771572][ T30] audit: type=1400 audit(1773695244.548:556): avc: denied { getopt } for pid=12083 comm="syz.1.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 248.779599][ T792] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 248.854566][ T792] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.886540][ T792] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.895754][ T5946] tipc: Node number set to 2886997007 [ 248.913593][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.922274][ T792] usb 3-1: Product: syz [ 248.926444][ T792] usb 3-1: Manufacturer: syz [ 248.931041][ T792] usb 3-1: SerialNumber: syz [ 249.218599][T12101] netlink: 'syz.0.2697': attribute type 1 has an invalid length. [ 249.233486][ T5814] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 249.246278][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2697'. [ 249.556830][ T792] usb 3-1: 0:2 : does not exist [ 249.639028][ T792] usb 3-1: USB disconnect, device number 31 [ 249.706655][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.813656][T12125] 9p: Bad value for 'rfdno' [ 249.821861][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2709'. [ 249.846826][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.854420][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.020402][T12135] sctp: Trying to GSO but underlying device doesn't support it. [ 250.127700][T12140] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2716'. [ 250.147948][ T5946] kernel write not supported for file /uhid (pid: 5946 comm: kworker/1:7) [ 250.467453][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 250.545600][T12165] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 250.847413][ T792] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 250.996348][T12188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2736'. [ 251.018032][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 251.046013][ T792] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 251.054205][ T792] usb 3-1: config 0 has no interface number 0 [ 251.075365][ T792] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 251.094069][ T792] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 251.116585][ T792] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 251.135223][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.159253][ T792] usb 3-1: Product: syz [ 251.169969][ T792] usb 3-1: Manufacturer: syz [ 251.180339][ T792] usb 3-1: SerialNumber: syz [ 251.199029][ T792] usb 3-1: config 0 descriptor?? [ 251.223877][T12170] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.236899][T12170] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.458992][T12170] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.464412][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 251.470489][T12170] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.690304][ T30] audit: type=1400 audit(1773695247.613:557): avc: denied { getopt } for pid=12224 comm="syz.0.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 251.693923][ T792] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 251.729285][ T792] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 251.739972][ T792] asix 3-1:0.251: probe with driver asix failed with error -5 [ 251.761737][ T792] usb 3-1: USB disconnect, device number 32 [ 252.396558][T12261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12261 comm=syz.2.2769 [ 252.664431][T12275] hugetlbfs: syz.2.2776 (12275): Using mlock ulimits for SHM_HUGETLB is obsolete [ 252.707697][T12281] 9p: Bad value for 'rfdno' [ 253.140414][ T1080] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 253.318457][ T30] audit: type=1400 audit(1773695249.324:558): avc: denied { ioctl } for pid=12313 comm="syz.1.2795" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 253.492652][T12321] loop6: detected capacity change from 0 to 7 [ 253.512342][ C1] blk_print_req_error: 10 callbacks suppressed [ 253.512363][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.528163][ C1] buffer_io_error: 10 callbacks suppressed [ 253.528180][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.543492][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.553109][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.561180][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.570817][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.578830][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.583525][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 253.588404][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.607089][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.616725][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.628607][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.638223][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.647192][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.656837][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.664724][ T5821] ldm_validate_partition_table(): Disk read failed. [ 253.671621][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.681234][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.689311][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.698943][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.709361][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.718644][ T5821] Dev loop6: unable to read RDB block 0 [ 253.743439][ T5821] loop6: unable to read partition table [ 253.749417][ T5821] loop6: partition table beyond EOD, truncated [ 253.761620][T12321] ldm_validate_partition_table(): Disk read failed. [ 253.770747][T12321] Dev loop6: unable to read RDB block 0 [ 253.777853][T12321] loop6: unable to read partition table [ 253.783977][T12321] loop6: partition table beyond EOD, truncated [ 253.791372][T12321] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 254.130230][T12343] sp0: Synchronizing with TNC [ 254.147409][T12345] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2809'. [ 254.162390][T12347] team_slave_0: entered allmulticast mode [ 254.178457][T12342] [U] `` [ 254.248184][T12347] team_slave_0: entered promiscuous mode [ 254.304393][T12353] sctp: [Deprecated]: syz.1.2813 (pid 12353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.304393][T12353] Use struct sctp_sack_info instead [ 254.431096][T12359] Set syz1 is full, maxelem 0 reached [ 255.066161][T12385] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2826'. [ 255.670334][ T30] audit: type=1326 audit(1773695251.792:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12409 comm="syz.2.2837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb92d99c799 code=0x0 [ 255.980200][ T792] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 256.002775][T12428] Bluetooth: MGMT ver 1.23 [ 256.008061][ T30] audit: type=1400 audit(1773695252.138:560): avc: denied { read } for pid=12427 comm="syz.1.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.091483][T12432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2846'. [ 256.125855][ T792] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 256.154093][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.155309][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 256.176992][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.188801][ T792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 256.203058][ T792] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 256.212635][ T792] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 256.221223][ T792] usb 4-1: Manufacturer: syz [ 256.228730][ T792] usb 4-1: config 0 descriptor?? [ 256.639386][ T792] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 256.696579][ T792] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 256.885278][ T792] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 256.908679][ T5946] usb 4-1: USB disconnect, device number 29 [ 257.086326][ T792] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 257.104692][ T792] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 257.126579][ T792] usb 5-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.145646][ T792] usb 5-1: config 1 interface 0 has no altsetting 0 [ 257.213604][ T792] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.228694][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.236710][ T792] usb 5-1: Product: syz [ 257.252481][ T792] usb 5-1: Manufacturer: syz [ 257.257156][ T792] usb 5-1: SerialNumber: syz [ 257.271976][T12449] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 257.279810][T12449] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 257.451390][T12466] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 257.459770][ T5920] IPVS: starting estimator thread 0... [ 257.471042][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 257.520316][ T5814] Bluetooth: hci4: Unknown advertising packet type: 0x30 [ 257.520380][ T5814] Bluetooth: hci4: Malformed LE Event: 0x0d [ 257.539084][ T792] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 257.553235][T12468] IPVS: using max 31 ests per chain, 74400 per kthread [ 257.559290][ T792] usb 5-1: USB disconnect, device number 26 [ 257.595234][ T30] audit: type=1400 audit(1773695253.807:561): avc: denied { bind } for pid=12470 comm="syz.3.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 257.748416][ T30] audit: type=1400 audit(1773695253.975:562): avc: denied { read } for pid=12475 comm="syz.1.2865" laddr=::ffff:172.20.20.170 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.399622][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 258.582205][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.609421][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.630669][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 258.640059][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.655874][ T10] usb 3-1: Product: syz [ 258.660876][ T10] usb 3-1: Manufacturer: syz [ 258.665487][ T10] usb 3-1: SerialNumber: syz [ 258.701912][ T10] usb 3-1: config 0 descriptor?? [ 258.929369][ T5946] usb 3-1: USB disconnect, device number 33 [ 259.540503][T12566] Set syz1 is full, maxelem 14 reached [ 259.610351][ T30] audit: type=1400 audit(1773695255.928:563): avc: denied { map } for pid=12569 comm="syz.2.2906" path="socket:[36799]" dev="sockfs" ino=36799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.923812][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 260.107952][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.130365][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.150799][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.214952][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.234277][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.307641][ T10] usb 2-1: config 0 descriptor?? [ 260.449937][T12599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.509705][T12599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.561992][ T905] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 260.648949][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2919'. [ 260.721875][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 260.736068][ T905] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 260.754612][ T905] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 260.766268][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 260.781457][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 260.789006][ T905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 260.798657][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 260.806828][ T905] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 260.818630][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 260.827140][ T905] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 260.840034][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 260.850222][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 260.858194][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 260.866245][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 260.874857][ T905] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 260.884181][ T905] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.902376][ T905] usb 5-1: Product: syz [ 260.910204][ T10] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 260.929468][ T905] usb 5-1: Manufacturer: syz [ 260.954957][ T10] usb 2-1: USB disconnect, device number 27 [ 260.966770][ T905] cdc_wdm 5-1:1.0: skipping garbage [ 260.973389][ T905] cdc_wdm 5-1:1.0: skipping garbage [ 260.980137][T12619] could not open pipe file descriptor [ 260.995192][ T905] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 261.009838][ T5920] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 261.021108][ T905] cdc_wdm 5-1:1.0: Unknown control protocol [ 261.102976][T12620] fido_id[12620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 261.163169][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 261.219421][ T5920] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 261.227703][ T5920] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 261.242013][ T30] audit: type=1400 audit(1773695257.618:564): avc: denied { read write } for pid=12594 comm="syz.4.2916" name="cdc-wdm0" dev="devtmpfs" ino=3773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 261.268960][ T905] usb 5-1: USB disconnect, device number 27 [ 261.286080][ T5920] usb 3-1: config 0 has no interface number 0 [ 261.292209][ T5920] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.334933][ T30] audit: type=1400 audit(1773695257.618:565): avc: denied { open } for pid=12594 comm="syz.4.2916" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 261.367259][ T5920] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 261.386360][ T5920] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.399713][ T30] audit: type=1800 audit(1773695257.712:566): pid=12626 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2929" name="file1" dev="tmpfs" ino=1878 res=0 errno=0 [ 261.446967][ T5920] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 261.464419][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 261.473112][ T5920] usb 3-1: Product: syz [ 261.481323][ T5920] usb 3-1: config 0 descriptor?? [ 261.493571][T12612] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 261.836314][T12645] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 262.035546][ T792] kernel read not supported for file /swradio2 (pid: 792 comm: kworker/1:2) [ 262.119657][ T5920] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input28 [ 262.208688][T12668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.267750][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 262.324263][ T5920] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 262.370839][ T905] usb 3-1: USB disconnect, device number 34 [ 262.370896][ C1] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 262.442280][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.472831][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.476677][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 262.485741][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.511165][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.513691][ T5920] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 262.520375][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.543345][ T5920] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 262.567500][ T10] usb 4-1: config 0 descriptor?? [ 262.574841][ T5920] usb 5-1: config 0 has no interface number 0 [ 262.591981][ T5920] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.616686][ T5920] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 262.641513][ T5920] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 262.664082][ T5920] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 262.675840][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 262.687311][ T5920] usb 5-1: Product: syz [ 262.708823][ T5920] usb 5-1: config 0 descriptor?? [ 262.716517][T12661] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 262.954102][ T5920] usb 5-1: USB disconnect, device number 28 [ 263.019272][ T10] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 263.067637][ T10] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 263.368013][ T10] usb 4-1: USB disconnect, device number 30 [ 263.721180][T12701] syzkaller1: entered promiscuous mode [ 263.735139][T12701] syzkaller1: entered allmulticast mode [ 263.889065][ T5946] kernel write not supported for file /uinput (pid: 5946 comm: kworker/1:7) [ 264.009941][T12710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12710 comm=syz.4.2966 [ 264.057872][T12710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12710 comm=syz.4.2966 [ 264.429424][ T905] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 264.610434][ T905] usb 3-1: Using ep0 maxpacket: 16 [ 264.617635][ T905] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.667680][ T905] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.706581][ T905] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 264.753149][ T905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.918808][T12742] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2982'. [ 265.084283][T12753] loop6: detected capacity change from 0 to 7 [ 265.104714][ C1] blk_print_req_error: 26 callbacks suppressed [ 265.104732][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.120569][ C1] buffer_io_error: 25 callbacks suppressed [ 265.120587][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.139732][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.149368][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.158161][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.167756][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.177709][ T905] hid (null): invalid report_count 1313800284 [ 265.192206][ T905] mcp2221 0003:04D8:00DD.001A: invalid report_count 1313800284 [ 265.201042][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 265.201642][ T905] mcp2221 0003:04D8:00DD.001A: item 0 4 1 9 parsing failed [ 265.210451][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.210481][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.215314][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.219479][ T905] mcp2221 0003:04D8:00DD.001A: can't parse reports [ 265.227406][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.261153][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.270770][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.282375][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.292015][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.300173][T12753] ldm_validate_partition_table(): Disk read failed. [ 265.306941][ T905] mcp2221 0003:04D8:00DD.001A: probe with driver mcp2221 failed with error -22 [ 265.336679][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.346336][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.355533][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.365183][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.374474][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.382596][T12753] Dev loop6: unable to read RDB block 0 [ 265.396856][T12753] loop6: unable to read partition table [ 265.404083][T12753] loop6: partition table beyond EOD, truncated [ 265.410983][T12753] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 265.437213][ T5182] ldm_validate_partition_table(): Disk read failed. [ 265.446851][ T5182] Dev loop6: unable to read RDB block 0 [ 265.455420][ T5182] loop6: unable to read partition table [ 265.456752][ T5946] usb 3-1: USB disconnect, device number 35 [ 265.462397][ T5182] loop6: partition table beyond EOD, truncated [ 265.578033][T12766] fuse: Bad value for 'fd' [ 265.609333][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2994'. [ 265.641361][T12767] SELinux: failed to load policy [ 265.835640][ T30] audit: type=1400 audit(1773695262.457:567): avc: denied { relabelfrom } for pid=12775 comm="syz.3.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 265.905546][ T30] audit: type=1400 audit(1773695262.499:568): avc: denied { relabelto } for pid=12775 comm="syz.3.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 266.463722][ T30] audit: type=1400 audit(1773695263.108:569): avc: denied { map } for pid=12798 comm="syz.3.3007" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 266.772641][ T30] audit: type=1400 audit(1773695263.392:570): avc: denied { read } for pid=12802 comm="syz.4.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 267.580810][ T5814] Bluetooth: Wrong link type (-22) [ 267.629221][ T30] audit: type=1400 audit(1773695264.337:571): avc: denied { watch } for pid=12824 comm="syz.4.3020" path="/592/file0" dev="tmpfs" ino=3029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 267.754203][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 267.892804][T12842] bond1: invalid ARP target 0.0.0.0 specified for addition [ 267.900349][T12842] bond1: option arp_ip_target: invalid value (0) [ 267.911039][T12842] bond1 (unregistering): Released all slaves [ 267.944362][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 267.951526][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.990986][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 268.015869][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.039143][ T9] usb 2-1: config 0 descriptor?? [ 268.080941][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input31 [ 268.348842][ T5167] bcm5974 2-1:0.0: could not read from device [ 268.395026][T12823] bcm5974 2-1:0.0: could not read from device [ 268.415710][ T5167] bcm5974 2-1:0.0: could not read from device [ 268.427355][ T9] usb 2-1: USB disconnect, device number 28 [ 268.648866][ T30] audit: type=1400 audit(1773695265.407:572): avc: denied { execute } for pid=12879 comm="syz.4.3041" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 268.906026][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3046'. [ 268.927815][T12893] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3046'. [ 269.401427][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3052'. [ 269.441316][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3052'. [ 269.551172][ T30] audit: type=1400 audit(1773695266.363:573): avc: denied { mounton } for pid=12912 comm="syz.4.3055" path="/602/cgroup" dev="tmpfs" ino=3078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 269.677733][ T30] audit: type=1400 audit(1773695266.489:574): avc: denied { append } for pid=12916 comm="syz.2.3054" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 270.126881][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 270.189501][T12948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3071'. [ 270.288156][ T5946] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 270.290040][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.325878][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.336070][ T905] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 270.351390][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.361008][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.383773][T12931] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.395893][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.450096][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 270.479896][ T5946] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.506597][ T5946] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 270.525911][ T905] usb 5-1: Using ep0 maxpacket: 8 [ 270.527528][ T5946] usb 3-1: config 0 interface 0 has no altsetting 0 [ 270.532727][ T905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.548088][ T905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.549776][ T5946] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 270.559747][ T905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.577320][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.577346][ T5946] usb 3-1: Product: syz [ 270.577363][ T5946] usb 3-1: Manufacturer: syz [ 270.577380][ T5946] usb 3-1: SerialNumber: syz [ 270.579777][ T5946] usb 3-1: config 0 descriptor?? [ 270.585681][ T905] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.627698][ T905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.665820][ T905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.675532][ T792] usb 2-1: USB disconnect, device number 29 [ 270.717585][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3079'. [ 270.729369][T12964] netlink: 'syz.0.3079': attribute type 5 has an invalid length. [ 270.740141][T12964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3079'. [ 270.761722][T12964] geneve2: entered promiscuous mode [ 270.767039][T12964] geneve2: entered allmulticast mode [ 270.774250][ T1156] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 270.784678][ T1156] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 270.794854][ T1156] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 270.812500][ T1156] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 270.885261][ T905] usb 5-1: GET_CAPABILITIES returned 0 [ 270.890928][ T905] usbtmc 5-1:16.0: can't read capabilities [ 271.003494][ T5946] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 271.110022][ T9] usb 5-1: USB disconnect, device number 29 [ 271.221439][ T905] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 271.366452][ T905] usb 4-1: Using ep0 maxpacket: 16 [ 271.375496][ T905] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 271.389624][ T905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.402965][ T905] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.412306][ T905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.423268][ T905] usb 4-1: Product: syz [ 271.430670][ T905] usb 4-1: Manufacturer: syz [ 271.440371][ T905] usb 4-1: SerialNumber: syz [ 271.451667][ T905] usb 4-1: config 0 descriptor?? [ 271.472492][T12976] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3085'. [ 271.475440][ T905] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.492414][ T905] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 271.595157][ T5920] usb 3-1: USB disconnect, device number 36 [ 271.884785][T12989] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input32 [ 272.065789][ T905] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 272.084550][ T905] em28xx 4-1:0.0: Config register raw data: 0xdf [ 272.153924][ T30] audit: type=1400 audit(1773695269.092:575): avc: denied { ioctl } for pid=13002 comm="syz.1.3091" path="socket:[38532]" dev="sockfs" ino=38532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 272.282933][ T905] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 272.299849][ T905] em28xx 4-1:0.0: No AC97 audio processor [ 272.342727][ T905] usb 4-1: USB disconnect, device number 31 [ 272.403863][ T905] em28xx 4-1:0.0: Disconnecting em28xx [ 272.410415][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3095'. [ 272.452117][ T905] em28xx 4-1:0.0: Freeing device [ 272.454377][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3095'. [ 272.723303][T13028] SELinux: ebitmap start bit (24) is not a multiple of the map unit size (64) [ 272.788271][T13028] SELinux: failed to load policy [ 273.279049][ T792] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 273.312246][T13055] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 273.446524][ T792] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 273.461020][ T792] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 273.480430][ T792] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.515318][ T792] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 273.549137][ T792] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 273.567355][ T792] usb 5-1: Product: syz [ 273.571551][ T792] usb 5-1: Manufacturer: syz [ 273.583870][ T792] usb 5-1: SerialNumber: syz [ 273.603907][ T792] usb 5-1: config 0 descriptor?? [ 273.620785][ T792] hub 5-1:0.0: bad descriptor, ignoring hub [ 273.637857][ T792] hub 5-1:0.0: probe with driver hub failed with error -5 [ 273.653853][ T792] usb 5-1: selecting invalid altsetting 0 [ 273.897835][ T5946] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 273.955041][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 273.975104][ T5862] usb 5-1: USB disconnect, device number 30 [ 274.069224][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 274.075692][ T5946] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 274.078818][ T905] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 274.085044][ T5946] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.102060][ T5946] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.112150][ T5946] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.112243][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 274.127488][ T5946] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.140548][ T5946] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.150306][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.159994][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.172571][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.183744][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 274.192928][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.203555][ T9] usb 3-1: config 0 descriptor?? [ 274.232861][ T905] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.242732][ T905] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.264828][ T905] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.275330][ T905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.370501][ T5946] usb 4-1: usb_control_msg returned -32 [ 274.383978][ T5946] usbtmc 4-1:16.0: can't read capabilities [ 274.502883][ T905] usb 2-1: GET_CAPABILITIES returned 0 [ 274.509102][ T905] usbtmc 2-1:16.0: can't read capabilities [ 274.631777][ T9] koneplus 0003:1E7D:2D51.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 274.731962][ T5946] usb 2-1: USB disconnect, device number 30 [ 274.758101][T13092] usbtmc 4-1:16.0: control status returned 0 [ 274.949763][ T9] usb 4-1: USB disconnect, device number 32 [ 275.178602][ T5862] usb 3-1: USB disconnect, device number 37 [ 275.334980][T13106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3129'. [ 275.346830][T13106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3129'. [ 275.661787][ T30] audit: type=1400 audit(1773695272.777:576): avc: denied { getopt } for pid=13118 comm="syz.0.3135" lport=51286 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 275.774746][ T792] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 275.790162][ T30] audit: type=1400 audit(1773695272.913:577): avc: denied { create } for pid=13122 comm="syz.1.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 275.840937][ T30] audit: type=1400 audit(1773695272.945:578): avc: denied { write } for pid=13122 comm="syz.1.3137" path="socket:[38740]" dev="sockfs" ino=38740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 275.888932][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3139'. [ 275.929343][ T30] audit: type=1400 audit(1773695273.060:579): avc: denied { create } for pid=13128 comm="syz.1.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.959918][T13127] hsr_slave_1 (unregistering): left promiscuous mode [ 275.975101][ T792] usb 4-1: Using ep0 maxpacket: 8 [ 275.980433][ T30] audit: type=1400 audit(1773695273.092:580): avc: denied { read } for pid=13128 comm="syz.1.3140" path="socket:[38744]" dev="sockfs" ino=38744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.012293][ T792] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 276.021579][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.029931][ T792] usb 4-1: Product: syz [ 276.034442][ T792] usb 4-1: Manufacturer: syz [ 276.055599][ T792] usb 4-1: SerialNumber: syz [ 276.080612][ T792] usb 4-1: config 0 descriptor?? [ 276.153729][ T30] audit: type=1400 audit(1773695273.291:581): avc: denied { read } for pid=13132 comm="syz.2.3142" laddr=172.20.20.170 lport=22090 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 276.310693][ T792] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 276.335426][ T30] audit: type=1400 audit(1773695273.480:582): avc: denied { ioctl } for pid=13139 comm="syz.2.3145" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 276.480102][T13150] block nbd4: NBD_DISCONNECT [ 276.598858][T13154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.027553][ T5862] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 277.078157][T13176] overlayfs: failed to clone upperpath [ 277.085423][ T792] usb write operation failed. (-71) [ 277.101702][ T792] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 277.123600][ T792] dvbdev: DVB: registering new adapter (Terratec H7) [ 277.139170][ T792] usb 4-1: media controller created [ 277.150204][ T792] usb read operation failed. (-71) [ 277.161246][ T792] usb write operation failed. (-71) [ 277.182285][ T792] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 277.188197][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 277.197239][ T792] usb 4-1: USB disconnect, device number 33 [ 277.215142][T13182] syz_tun: entered promiscuous mode [ 277.231957][T13182] macvtap1: entered promiscuous mode [ 277.232275][ T5862] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.250155][ T5862] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.252212][T13182] syz_tun: left promiscuous mode [ 277.288168][ T5862] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 277.303178][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 277.327950][ T5862] usb 3-1: SerialNumber: syz [ 277.343803][ T5862] usb 3-1: 0:2 : does not exist [ 277.540909][ T5862] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 277.556530][ T5862] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 277.591250][ T5862] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 277.627842][ T5862] usb 3-1: USB disconnect, device number 38 [ 277.681624][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.940521][ T30] audit: type=1400 audit(1773695275.171:583): avc: denied { getopt } for pid=13199 comm="syz.1.3169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.546288][ T905] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 278.679755][ T905] usb 4-1: device descriptor read/64, error -71 [ 278.744576][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3182'. [ 278.918117][ T905] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 279.051610][ T905] usb 4-1: device descriptor read/64, error -71 [ 279.180840][ T905] usb usb4-port1: attempt power cycle [ 279.527423][ T905] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 279.566221][ T905] usb 4-1: device descriptor read/8, error -71 [ 279.635144][T13243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.703965][T13243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.804070][ T905] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 279.844579][ T905] usb 4-1: device descriptor read/8, error -71 [ 279.966691][ T905] usb usb4-port1: unable to enumerate USB device [ 280.063701][T13243] dummy0: left promiscuous mode [ 280.082839][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.132123][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.185289][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.194206][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.454237][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 280.575206][ T30] audit: type=1400 audit(1773695277.932:584): avc: denied { connect } for pid=13284 comm="syz.2.3203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.604453][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 280.623944][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.642418][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.654849][ T30] audit: type=1400 audit(1773695278.026:585): avc: denied { write } for pid=13284 comm="syz.2.3203" path="socket:[41011]" dev="sockfs" ino=41011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.657066][ T1164] tipc: Subscription rejected, illegal request [ 280.697118][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 280.728471][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.763693][ T10] usb 5-1: config 0 descriptor?? [ 280.884878][T13292] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:256 [ 281.048158][ T30] audit: type=1400 audit(1773695278.435:586): avc: denied { execute } for pid=13297 comm="syz.0.3209" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 281.195667][T13304] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 281.195690][ T10] koneplus 0003:1E7D:2D51.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 281.243817][ T30] audit: type=1400 audit(1773695278.614:587): avc: denied { bind } for pid=13301 comm="syz.2.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.273161][T13304] netlink: 'syz.1.3211': attribute type 6 has an invalid length. [ 281.297423][T13304] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3211'. [ 281.342363][T13307] UHID_CREATE from different security context by process 890 (syz.3.3213), this is not allowed. [ 281.630102][ T10] usb 5-1: USB disconnect, device number 31 [ 281.917587][ T30] audit: type=1800 audit(1773695279.338:588): pid=13332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3225" name="nullb0" dev="tmpfs" ino=1852 res=0 errno=0 [ 282.229584][ T30] audit: type=1400 audit(1773695279.674:589): avc: denied { create } for pid=13350 comm="syz.0.3232" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 282.347796][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 282.509045][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 282.515703][ T10] usb 4-1: config 129 has an invalid interface number: 191 but max is 0 [ 282.524650][ T10] usb 4-1: config 129 has no interface number 0 [ 282.531554][ T5861] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 282.540243][ T10] usb 4-1: config 129 interface 191 has no altsetting 0 [ 282.549488][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=cf.4e [ 282.559073][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.567227][ T10] usb 4-1: Product: syz [ 282.571516][ T10] usb 4-1: Manufacturer: syz [ 282.577287][ T10] usb 4-1: SerialNumber: syz [ 282.691909][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.703415][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.703415][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.725342][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.738527][ T5861] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.747652][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.758361][ T5861] usb 2-1: config 0 descriptor?? [ 282.973760][T13345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.999377][T13345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.016290][ T10] ftdi_sio 4-1:129.191: FTDI USB Serial Device converter detected [ 283.026274][ T10] ftdi_sio ttyUSB0: unknown device type: 0xcf4e [ 283.039860][ T10] usb 4-1: USB disconnect, device number 38 [ 283.053877][ T10] ftdi_sio 4-1:129.191: device disconnected [ 283.166895][ T5861] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 283.264141][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 283.413865][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 283.420422][ T24] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 283.430475][ T24] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 283.440469][ T24] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.454009][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 283.472490][ T24] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 283.481637][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.489626][ T24] usb 3-1: Product: syz [ 283.499856][ T24] usb 3-1: Manufacturer: syz [ 283.504481][ T24] usb 3-1: SerialNumber: syz [ 283.634948][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 283.644815][T13389] netlink: 'syz.0.3248': attribute type 30 has an invalid length. [ 283.694165][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 283.723490][ T24] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 39 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 283.735855][T13391] netlink: 'syz.0.3248': attribute type 30 has an invalid length. [ 283.789643][T13393] bridge0: port 3(syz_tun) entered blocking state [ 283.804509][T13393] bridge0: port 3(syz_tun) entered disabled state [ 283.811442][T13393] syz_tun: entered allmulticast mode [ 283.819485][T13393] syz_tun: entered promiscuous mode [ 283.828596][T13393] bridge0: port 3(syz_tun) entered blocking state [ 283.836092][T13393] bridge0: port 3(syz_tun) entered forwarding state [ 283.923278][T13398] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3251'. [ 283.973392][T13249] usb 3-1: USB disconnect, device number 39 [ 284.344941][T13249] usblp1: removed [ 284.360098][ T30] audit: type=1400 audit(1773695281.910:590): avc: denied { mount } for pid=13419 comm="syz.4.3260" name="/" dev="hugetlbfs" ino=41276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 284.675984][T13439] : renamed from vlan0 [ 284.953709][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3275'. [ 285.010620][T13452] team0: Port device team_slave_0 removed [ 285.061874][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 285.108911][ T24] usb 2-1: USB disconnect, device number 31 [ 285.188750][T13460] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 285.236835][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 285.259022][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 285.273916][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 285.290848][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 285.302259][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.311553][ T10] usb 4-1: Product: syz [ 285.315875][ T10] usb 4-1: Manufacturer: syz [ 285.329700][ T10] usb 4-1: SerialNumber: syz [ 285.339612][ T10] usb 4-1: config 0 descriptor?? [ 285.350587][T13448] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 285.359653][T13448] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 285.370557][ T10] usb 4-1: ucan: probing device on interface #0 [ 285.765519][ T10] usb 4-1: ucan: device reported invalid tx-fifo size [ 285.805141][ T10] usb 4-1: ucan: probe failed; try to update the device firmware [ 285.890641][T13249] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 285.973470][ T10] usb 4-1: USB disconnect, device number 39 [ 286.063874][T13249] usb 3-1: Using ep0 maxpacket: 16 [ 286.075042][T13249] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.100694][T13249] usb 3-1: config 0 interface 0 has no altsetting 0 [ 286.117130][T13249] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 286.126268][ T5862] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 286.149166][T13249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.158436][T13249] usb 3-1: Product: syz [ 286.162775][T13249] usb 3-1: Manufacturer: syz [ 286.186857][T13249] usb 3-1: SerialNumber: syz [ 286.194084][T13249] usb 3-1: config 0 descriptor?? [ 286.310035][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 286.322351][ T5862] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 286.338898][ T5862] usb 2-1: config 0 has no interface number 0 [ 286.345040][ T5862] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 286.376670][ T5862] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 286.395796][ T5862] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 21506, setting to 1024 [ 286.421444][T13249] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 286.434406][ T5862] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 286.452897][ T5862] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.500213][ T5862] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 286.509305][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.534385][ T5862] usb 2-1: Product: syz [ 286.546800][ T5862] usb 2-1: Manufacturer: syz [ 286.558426][ T5862] usb 2-1: SerialNumber: syz [ 286.569760][ T5862] usb 2-1: config 0 descriptor?? [ 286.577387][T13483] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 286.600527][ T5862] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input36 [ 286.721030][ T5797] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 286.729784][T13249] rc_core: IR keymap rc-imon-pad not found [ 286.735682][T13249] Registered IR keymap rc-empty [ 286.740944][T13249] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 286.767253][T13249] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 286.776595][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 286.817404][T13249] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 286.837939][T13249] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 286.874877][T13249] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:40> initialized [ 286.919325][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 286.947589][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.995848][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.012106][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.028392][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.040812][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.053954][ T24] usb 4-1: config 0 descriptor?? [ 287.199944][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 287.207437][T13249] usb 3-1: USB disconnect, device number 40 [ 287.467659][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 287.492326][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001E/input/input37 [ 287.925921][ T30] audit: type=1400 audit(1773695285.648:591): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 288.593201][ C0] bcm5974 2-1:0.119: trackpad urb failed: -1 [ 288.821755][ T24] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 288.850454][ T977] usb 2-1: USB disconnect, device number 32 [ 288.856734][ C1] bcm5974 2-1:0.119: trackpad urb failed: -19 [ 288.898756][ T24] usb 4-1: USB disconnect, device number 40 [ 289.012759][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3297'. [ 289.050447][T13497] fido_id[13497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 289.072878][T13502] netlink: 'syz.1.3297': attribute type 30 has an invalid length. [ 289.122599][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3297'. [ 289.165023][T13507] netlink: 'syz.1.3297': attribute type 30 has an invalid length. [ 289.891736][ T30] audit: type=1400 audit(1773695287.716:592): avc: denied { execute } for pid=13536 comm="syz.3.3311" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.091947][ T30] audit: type=1400 audit(1773695287.926:593): avc: denied { write } for pid=13547 comm="syz.3.3316" name="raw6" dev="proc" ino=4026534027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 290.203557][T13556] raw_sendmsg: syz.3.3320 forgot to set AF_INET. Fix it! [ 290.211136][ T30] audit: type=1400 audit(1773695288.041:594): avc: denied { write } for pid=13553 comm="syz.1.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.253403][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 290.438676][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.461369][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.492486][ T24] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 290.513381][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.553446][ T24] usb 5-1: config 0 descriptor?? [ 290.686342][T13566] netlink: 'syz.1.3325': attribute type 64 has an invalid length. [ 290.703772][T13249] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 290.864410][T13249] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 290.873609][T13249] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.891987][T13249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.903176][T13249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 290.913837][T13249] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.930637][T13249] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.940088][T13249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.951690][T13249] usb 4-1: config 0 descriptor?? [ 290.989034][ T24] hid_parser_main: 29 callbacks suppressed [ 290.989058][ T24] hid-led 0003:1D34:000A.001F: unknown main item tag 0x0 [ 291.004339][ T24] hid-led 0003:1D34:000A.001F: unknown main item tag 0x0 [ 291.013374][ T24] hid-led 0003:1D34:000A.001F: item fetching failed at offset 2/3 [ 291.022792][ T24] hid-led 0003:1D34:000A.001F: probe with driver hid-led failed with error -22 [ 291.207580][ T24] usb 5-1: USB disconnect, device number 32 [ 291.351004][T13249] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 291.373773][T13249] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 291.641219][T13249] usb 4-1: USB disconnect, device number 41 [ 291.652110][T13607] overlayfs: failed to clone lowerpath [ 291.683205][T13607] overlayfs: failed to clone lowerpath [ 291.783097][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3343'. [ 291.817238][T13611] netlink: 'syz.2.3343': attribute type 30 has an invalid length. [ 291.841936][ T1164] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.851144][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3343'. [ 291.860738][ T1164] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.869998][ T1164] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.882482][T13618] netlink: 'syz.2.3343': attribute type 30 has an invalid length. [ 291.892517][ T1164] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.038171][T13626] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.3350'. [ 292.413112][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'. [ 292.423352][T13647] netlink: 'syz.4.3362': attribute type 30 has an invalid length. [ 292.436494][ T5862] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 292.438157][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.460161][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'. [ 292.470048][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.480147][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.482864][T13249] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 292.489125][T13647] netlink: 'syz.4.3362': attribute type 30 has an invalid length. [ 292.498030][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.615964][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 292.623191][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.634811][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.648232][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 292.659611][T13658] sctp: [Deprecated]: syz.0.3366 (pid 13658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.659611][T13658] Use struct sctp_sack_info instead [ 292.661613][ T5862] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 292.689384][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.698887][T13249] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.708120][T13249] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 292.717842][T13249] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 292.729459][ T5862] usb 3-1: config 0 descriptor?? [ 292.734564][ T30] audit: type=1400 audit(1773695290.697:595): avc: denied { mounton } for pid=13659 comm="syz.0.3367" path=2F3833362FE91F7189591E9233614B dev="tmpfs" ino=4276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 292.761022][T13249] usb 4-1: config 63 has no interface number 0 [ 292.767274][T13249] usb 4-1: config 63 interface 66 has no altsetting 0 [ 292.778992][T13249] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 292.792265][T13249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.825247][T13249] usb 4-1: Product: syz [ 292.829671][T13249] usb 4-1: Manufacturer: syz [ 292.834360][T13249] usb 4-1: SerialNumber: syz [ 293.065096][T13249] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 293.072899][T13249] uvcvideo 4-1:63.66: No valid video chain found. [ 293.086773][T13249] usb 4-1: USB disconnect, device number 42 [ 293.183278][ T5862] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0021/input/input39 [ 293.261695][ T5862] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0021/input/input40 [ 293.332413][ T5862] kye 0003:0458:5011.0021: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 293.497507][ T30] audit: type=1400 audit(1773695291.505:596): avc: denied { read } for pid=13672 comm="syz.0.3372" path="socket:[42022]" dev="sockfs" ino=42022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 293.680309][ T5946] usb 3-1: USB disconnect, device number 41 [ 293.688317][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3375'. [ 293.707258][T13679] netlink: 'syz.3.3375': attribute type 30 has an invalid length. [ 293.756647][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3375'. [ 293.769376][T13682] netlink: 'syz.3.3375': attribute type 30 has an invalid length. [ 293.915799][ T30] audit: type=1400 audit(1773695291.936:597): avc: denied { write } for pid=13686 comm="syz.3.3378" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 293.939279][ T30] audit: type=1400 audit(1773695291.936:598): avc: denied { open } for pid=13686 comm="syz.3.3378" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 293.963698][T13249] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 294.132032][T13249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12408, setting to 64 [ 294.152625][T13249] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 294.164080][T13249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.172302][T13249] usb 5-1: Product: syz [ 294.176555][T13249] usb 5-1: Manufacturer: syz [ 294.187045][T13249] usb 5-1: SerialNumber: syz [ 294.202619][T13249] usb 5-1: config 0 descriptor?? [ 294.229656][T13695] syzkaller1: entered promiscuous mode [ 294.237620][T13695] syzkaller1: entered allmulticast mode [ 294.413460][T13249] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 294.428158][T13249] usb 5-1: USB disconnect, device number 33 [ 294.492756][ T5946] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 294.635212][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 294.663795][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 294.695853][ T5946] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 294.708448][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.726722][ T5946] usb 3-1: Product: syz [ 294.738690][ T5946] usb 3-1: Manufacturer: syz [ 294.743537][ T5946] usb 3-1: SerialNumber: syz [ 294.765323][ T5946] usb 3-1: config 0 descriptor?? [ 294.817779][ T10] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 294.838878][ T10] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 294.849119][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.870130][ T10] usb 4-1: Product: syz [ 294.875200][ T10] usb 4-1: Manufacturer: syz [ 294.879803][ T10] usb 4-1: SerialNumber: syz [ 294.895626][ T10] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 295.077393][ T30] audit: type=1400 audit(1773695293.164:599): avc: denied { connect } for pid=13715 comm="syz.0.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 295.131439][ T30] audit: type=1400 audit(1773695293.185:600): avc: denied { create } for pid=13713 comm="syz.4.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 295.170606][ T5946] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 295.197539][T13719] syz_tun: entered allmulticast mode [ 295.205648][ T5946] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.238036][ T5946] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 295.256642][ T5946] usb 3-1: media controller created [ 295.297285][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.312687][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 295.323811][T13702] ------------[ cut here ]------------ [ 295.330016][T13702] usb 3-1: BOGUS control dir, pipe 80002a80 doesn't match bRequestType c0 [ 295.338864][T13702] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.3.3385/13702 [ 295.349592][T13702] Modules linked in: [ 295.353964][T13702] CPU: 0 UID: 0 PID: 13702 Comm: syz.3.3385 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.365039][T13702] Tainted: [L]=SOFTLOCKUP [ 295.369490][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.379940][T13702] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 295.385862][T13702] Code: d2 74 5d 48 89 54 24 40 e8 7f d3 b7 fa 4c 89 ef e8 b7 ac de fe 48 89 c6 48 8d 3d bd 51 95 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 53 d3 b7 fa 89 ee bf ff 00 00 00 [ 295.405608][T13702] RSP: 0018:ffffc90006aa7760 EFLAGS: 00010287 [ 295.411950][T13702] RAX: ffffffff8c80dce0 RBX: ffff88802be2a700 RCX: 0000000080002a80 [ 295.420057][T13702] RDX: ffff888021efb580 RSI: ffffffff8c80dce0 RDI: ffffffff90e64ad0 [ 295.428102][T13702] RBP: ffff888025cca058 R08: 00000000000000c0 R09: 0000000000000000 [ 295.436449][T13702] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880552ad100 [ 295.444429][T13702] R13: ffff888025cca0b0 R14: 0000000080002a80 R15: 00000000000000c0 [ 295.452735][T13702] FS: 00007f1803b826c0(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 [ 295.461852][T13702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.469966][T13702] CR2: 000000110c40cd0d CR3: 000000003526c000 CR4: 00000000003526f0 [ 295.478744][T13702] Call Trace: [ 295.482036][T13702] [ 295.485573][T13702] ? __init_swait_queue_head+0xca/0x150 [ 295.491147][T13702] usb_start_wait_urb+0x10e/0x580 [ 295.496723][T13702] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 295.502376][T13702] ? __asan_memset+0x23/0x50 [ 295.506999][T13702] usb_control_msg+0x328/0x4b0 [ 295.511855][T13702] ? __pfx_usb_control_msg+0x10/0x10 [ 295.517166][T13702] dtv5100_i2c_msg+0x1be/0x340 [ 295.522019][T13702] dtv5100_i2c_xfer+0x131/0x3d0 [ 295.526890][T13702] __i2c_transfer+0x5d9/0x17f0 [ 295.531947][T13702] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 295.537774][T13702] ? __pfx___i2c_transfer+0x10/0x10 [ 295.543205][T13702] ? rt_mutex_slowtrylock+0x93/0x100 [ 295.548525][T13702] i2c_transfer+0x15f/0x380 [ 295.553239][T13702] i2c_transfer_buffer_flags+0x10c/0x190 [ 295.558898][T13702] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 295.565153][T13702] ? _copy_from_user+0x59/0xd0 [ 295.570000][T13702] i2cdev_write+0x11e/0x240 [ 295.574940][T13702] ? __pfx_i2cdev_write+0x10/0x10 [ 295.580206][T13702] vfs_writev+0x5ea/0xe10 [ 295.584569][T13702] ? __pfx_vfs_writev+0x10/0x10 [ 295.589562][T13702] ? __fget_files+0x21f/0x3d0 [ 295.594261][T13702] ? do_writev+0x13e/0x340 [ 295.598753][T13702] do_writev+0x13e/0x340 [ 295.603015][T13702] ? __pfx_do_writev+0x10/0x10 [ 295.607921][T13702] do_syscall_64+0x106/0xf80 [ 295.612525][T13702] ? clear_bhb_loop+0x40/0x90 [ 295.617244][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.623142][T13702] RIP: 0033:0x7f1802d9c799 [ 295.627841][T13702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.647701][T13702] RSP: 002b:00007f1803b82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 295.656520][T13702] RAX: ffffffffffffffda RBX: 00007f1803015fa0 RCX: 00007f1802d9c799 [ 295.664576][T13702] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 295.672880][T13702] RBP: 00007f1802e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 295.681116][T13702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.689168][T13702] R13: 00007f1803016038 R14: 00007f1803015fa0 R15: 00007fff316c74a8 [ 295.697234][T13702] [ 295.700263][T13702] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 295.707547][T13702] CPU: 0 UID: 0 PID: 13702 Comm: syz.3.3385 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.718507][T13702] Tainted: [L]=SOFTLOCKUP [ 295.722834][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.732892][T13702] Call Trace: [ 295.736181][T13702] [ 295.739115][T13702] dump_stack_lvl+0x100/0x190 [ 295.743826][T13702] vpanic+0x552/0x970 [ 295.747824][T13702] ? __pfx_vpanic+0x10/0x10 [ 295.752349][T13702] panic+0xd1/0xe0 [ 295.756087][T13702] ? __pfx_panic+0x10/0x10 [ 295.760531][T13702] check_panic_on_warn.cold+0x19/0x34 [ 295.765920][T13702] ? usb_submit_urb+0x1573/0x1910 [ 295.770958][T13702] __warn.cold+0x191/0x348 [ 295.775399][T13702] __report_bug+0x296/0x3d0 [ 295.779917][T13702] ? usb_submit_urb+0x1573/0x1910 [ 295.784955][T13702] ? __pfx___report_bug+0x10/0x10 [ 295.789991][T13702] ? mark_held_locks+0x40/0x70 [ 295.794794][T13702] report_bug_entry+0xe1/0x290 [ 295.799588][T13702] ? usb_submit_urb+0x157e/0x1910 [ 295.804614][T13702] handle_bug+0x1cd/0x2a0 [ 295.808964][T13702] exc_invalid_op+0x17/0x50 [ 295.813489][T13702] asm_exc_invalid_op+0x1a/0x20 [ 295.818344][T13702] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 295.823978][T13702] Code: d2 74 5d 48 89 54 24 40 e8 7f d3 b7 fa 4c 89 ef e8 b7 ac de fe 48 89 c6 48 8d 3d bd 51 95 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 53 d3 b7 fa 89 ee bf ff 00 00 00 [ 295.843592][T13702] RSP: 0018:ffffc90006aa7760 EFLAGS: 00010287 [ 295.849670][T13702] RAX: ffffffff8c80dce0 RBX: ffff88802be2a700 RCX: 0000000080002a80 [ 295.857644][T13702] RDX: ffff888021efb580 RSI: ffffffff8c80dce0 RDI: ffffffff90e64ad0 [ 295.865611][T13702] RBP: ffff888025cca058 R08: 00000000000000c0 R09: 0000000000000000 [ 295.873579][T13702] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880552ad100 [ 295.881551][T13702] R13: ffff888025cca0b0 R14: 0000000080002a80 R15: 00000000000000c0 [ 295.889555][T13702] ? __init_swait_queue_head+0xca/0x150 [ 295.895108][T13702] usb_start_wait_urb+0x10e/0x580 [ 295.900144][T13702] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 295.905710][T13702] ? __asan_memset+0x23/0x50 [ 295.910307][T13702] usb_control_msg+0x328/0x4b0 [ 295.915069][T13702] ? __pfx_usb_control_msg+0x10/0x10 [ 295.920354][T13702] dtv5100_i2c_msg+0x1be/0x340 [ 295.925120][T13702] dtv5100_i2c_xfer+0x131/0x3d0 [ 295.929967][T13702] __i2c_transfer+0x5d9/0x17f0 [ 295.934733][T13702] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 295.940538][T13702] ? __pfx___i2c_transfer+0x10/0x10 [ 295.945736][T13702] ? rt_mutex_slowtrylock+0x93/0x100 [ 295.951028][T13702] i2c_transfer+0x15f/0x380 [ 295.955534][T13702] i2c_transfer_buffer_flags+0x10c/0x190 [ 295.961167][T13702] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 295.967323][T13702] ? _copy_from_user+0x59/0xd0 [ 295.972079][T13702] i2cdev_write+0x11e/0x240 [ 295.976586][T13702] ? __pfx_i2cdev_write+0x10/0x10 [ 295.981609][T13702] vfs_writev+0x5ea/0xe10 [ 295.985953][T13702] ? __pfx_vfs_writev+0x10/0x10 [ 295.990823][T13702] ? __fget_files+0x21f/0x3d0 [ 295.995591][T13702] ? do_writev+0x13e/0x340 [ 296.000138][T13702] do_writev+0x13e/0x340 [ 296.004414][T13702] ? __pfx_do_writev+0x10/0x10 [ 296.009220][T13702] do_syscall_64+0x106/0xf80 [ 296.013817][T13702] ? clear_bhb_loop+0x40/0x90 [ 296.018499][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.024385][T13702] RIP: 0033:0x7f1802d9c799 [ 296.028790][T13702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.048837][T13702] RSP: 002b:00007f1803b82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 296.057266][T13702] RAX: ffffffffffffffda RBX: 00007f1803015fa0 RCX: 00007f1802d9c799 [ 296.065240][T13702] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 296.073233][T13702] RBP: 00007f1802e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 296.081194][T13702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.089169][T13702] R13: 00007f1803016038 R14: 00007f1803015fa0 R15: 00007fff316c74a8 [ 296.097146][T13702] [ 296.100370][T13702] Kernel Offset: disabled [ 296.104679][T13702] Rebooting in 86400 seconds..