last executing test programs: 4.282176582s ago: executing program 4 (id=588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) listen(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.075305734s ago: executing program 4 (id=589): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x41, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)={0x40, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.702794405s ago: executing program 2 (id=591): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f0000001f00)="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", 0x2e6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.272935595s ago: executing program 2 (id=594): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000580)=[{0x5, 0x4000, 0x0, 0x0}, {0x1, 0x1, 0x0, 0x0}, {0x8, 0x200, 0x0, 0x0}], 0x3}) 2.679366272s ago: executing program 0 (id=601): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x62d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x2}, 0x10) r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_TIOCINQ(r0, 0x8905, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.474370374s ago: executing program 0 (id=605): openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000000)="9bfd56312382824b8e6d18ab", 0x2, 0x2}) 1.831057939s ago: executing program 0 (id=606): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 1.651901061s ago: executing program 0 (id=607): socket$inet6_mptcp(0xa, 0x1, 0x106) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r1, &(0x7f0000000700), 0x0) 1.6469545s ago: executing program 1 (id=608): r0 = syz_usb_connect(0x2, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040480b03100001000000010902390002010080fa0904000000ff0000000904010000ff0000000904010103ff000000070501024000000705810240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x21, &(0x7f0000000200)='\x00'/33) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x1, 0x0}) 1.590184367s ago: executing program 4 (id=609): getsockopt(0xffffffffffffffff, 0x200000000114, 0x2717, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0xc54, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0xc54}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.523060715s ago: executing program 2 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x14}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "d1c30a6405e8da26e5df5998"}}}}, 0x3e) 1.435244139s ago: executing program 0 (id=611): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000740)=[@request_death], 0x0, 0x0, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x851, 0x0) 1.385105148s ago: executing program 4 (id=612): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x40) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000200"}) 1.333654823s ago: executing program 3 (id=613): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x8, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0x1}}, 0x10) 1.319566905s ago: executing program 0 (id=614): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xeffd, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x1, 0x88}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "1d546206"}, @main=@item_4={0x3, 0x0, 0x8, "21824df2"}]}}, 0x0}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1.179188454s ago: executing program 4 (id=615): epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.178704679s ago: executing program 2 (id=616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x7}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1.142491859s ago: executing program 3 (id=617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="54010000", @ANYRES16=r4, @ANYBLOB="017d26bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000002d013300802009000802110000010802110000005050505050505f00ff"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2c8, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0x20}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}, {0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x5c, 0x1, "31f16cd524da5ed3a147f4cd30bca88c75f585115d84ca1b4bee79f1952bf1e00649c6f9cb9b786f042fd1ab40bacaa86de6819279c4f91485181eedc1b1df704a1d7943b405be727d6154a9d8f46535530c338e7ca3e701"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x198, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x88, 0x2, "7a9163660fac0a44199a47fffba80b4c30b63aa0283ce79e193d0f94c218004a0a209324c5cdf4a4e6ff8058697bc84020b9ea610c06c9b52d2eeae2573994ab9a0c7019e39c25ecc59033584d81ce7a2cc51702f45029be6bb551bb488451f0c21d71ff0da082dc08ea340edf4e489d2aba1bb1c20fb97eda965d619eecf47f9c24d021"}}, {0x108, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x101, 0x1, "e6a9af091cacc7c5dedd3fb25498af2dc27666a9f69e4eeb0e95a5bf9c6d34302889d5ad2883448dbdef887d17a67b68915648e45857b3428ac8e99f2a282431b6d9e97000d359f65a6eb67f23746fb8349b8fe03eb55fd441d8cbff22ffb3dd5b03129a7120fcafaf705a8b6c390246c3fb30466813e237b045d389be665a160ee45a5f65c044b629400c733e1e3924737a74da52944a752762c789e1cc852b033a083b73d7fb28c536932739e4b7982f1dc52b0fc84d39973bad5d5b670eff23693f317414f8d6bb8ff63b7ecd4dad28e93e946a9ec98af37a6f0c84351ba45ed89555c4f1b0a2266149b638498171129074d16f3920b89d162445eb"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x66, 0x2, "30de2a3d4cae23045d437e3be9ab28895b2e26627ac250a70bbf2b6b30bbbccbbfebabe94dbfaa06773edf07f37d5b99cffb486230d772e9c2dc22655bd9db2ccd22c6e5852d3b8845fe7f7eb050cfd4e706dedf0ff5bfef657a06205581730c2330"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8001}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}]}, 0x2c8}, 0x1, 0x0, 0x0, 0xe09ef19236ff98dd}, 0x60000008) 1.009849269s ago: executing program 1 (id=618): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 983.872874ms ago: executing program 4 (id=619): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 893.278506ms ago: executing program 3 (id=620): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) socket$nl_route(0x10, 0x3, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) dup3(r0, 0xffffffffffffffff, 0x80000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @rand_addr=0xc8000001}}) 890.450686ms ago: executing program 2 (id=621): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\r\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000400000000000000000000000000000000000000d040bd55dab56d"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 839.227913ms ago: executing program 1 (id=622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1100, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 739.100976ms ago: executing program 1 (id=623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 632.550932ms ago: executing program 3 (id=624): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x8}], 0x1, 0x2000, 0x0) close(0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x4477}], 0x1}}], 0x400000000000181, 0x9200000000000000) 515.056674ms ago: executing program 1 (id=625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xfffffffffffffe3b, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffc0, 0x10, 0x9, 0x2, 0xfffffff2, 0x4, 0xfffffffb, 0xa5, 0x6}}}}]}, 0x58}}, 0x20000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x2, 0xfff1}}}, 0x24}}, 0x0) 512.555754ms ago: executing program 2 (id=626): r0 = socket(0xa, 0x3, 0x87) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04692420"], 0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00@', @ANYRES16=0x0, @ANYBLOB="00012abc7000fddbdf250700000008000400ffffffff080008006401010208000800640101000800020007000000080008007f000001080002000700000008000100f72c5b0008000c"], 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x0) io_setup(0x43, &(0x7f0000000140)=0x0) r3 = timerfd_create(0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x801, r3, &(0x7f0000000080)="495d4df857bc1393", 0x8, 0x4}, 0x0]) write$rfkill(r0, &(0x7f0000000100)={0x10001, 0x8, 0x3, 0x0, 0x1}, 0x8) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c111bc900ffffffffffffc31de7a9b7cc0210f9090000020873f19cee73a4635df0586429a41e7d19729d"], 0x14) 368.742184ms ago: executing program 3 (id=627): r0 = epoll_create1(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0xa000000a}) 268.71759ms ago: executing program 3 (id=628): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 0s ago: executing program 1 (id=629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f31fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066ba000000000f3066b9bb0800000f32", 0x4a}], 0x1, 0x55, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x88}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x3f7, 0x4) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xfffffffffffffffe}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe2d1f2b6255614c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): :264): avc: denied { name_bind } for pid=6137 comm="syz.3.166" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 94.150616][ T6144] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 773 [ 94.295722][ T6150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.170'. [ 94.585727][ T29] audit: type=1400 audit(1787587949.796:265): avc: denied { write } for pid=6164 comm="syz.2.178" name="sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.634314][ T30] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.663014][ T29] audit: type=1400 audit(1787587949.796:266): avc: denied { open } for pid=6164 comm="syz.2.178" path="/dev/sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.790156][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.840416][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 94.859347][ T30] usb 4-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 94.895696][ T30] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 94.914187][ T6178] loop8: detected capacity change from 0 to 7 [ 94.916919][ T30] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.947169][ T6178] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 94.949431][ T30] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 94.974583][ T6178] loop8: partition table partially beyond EOD, truncated [ 94.974642][ T30] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.996939][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.997249][ T6178] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 95.031149][ T30] usb 4-1: config 0 descriptor?? [ 95.037282][ T6178] loop8: p2 start 121280928 is beyond EOD, truncated [ 95.190775][ T5712] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.264938][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.353769][ T5712] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 95.369405][ T5712] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 95.384745][ T5712] usb 2-1: config 1 has no interface number 0 [ 95.391067][ T5712] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 95.403928][ T5712] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 95.417102][ T5712] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.431948][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 95.447740][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.456525][ T9] usb 3-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 95.466236][ T30] smartjoyplus 0003:0925:8888.0006: no output reports found [ 95.469828][ T5712] usb 2-1: Product: syz [ 95.482127][ T5712] usb 2-1: Manufacturer: syz [ 95.487343][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.497287][ T5712] usb 2-1: SerialNumber: syz [ 95.510537][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 95.517925][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.527675][ T6176] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.552209][ T9] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 95.555553][ T30] smartjoyplus 0003:0925:8888.0006: hidraw0: USB HID v0.ff Joystick [HID 0925:8888] on usb-dummy_hcd.3-1/input0 [ 95.755139][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.801341][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.816544][ T6176] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.832470][ T30] usb 4-1: USB disconnect, device number 5 [ 95.892873][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.922466][ T6178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'. [ 95.997559][ T9] usb 3-1: string descriptor 0 read error: -71 [ 96.015334][ T9] usb 3-1: USB disconnect, device number 6 [ 96.066798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.069564][ T5712] usb 2-1: Incompatible driver and firmware versions [ 96.096858][ T5712] usb 2-1: USB disconnect, device number 5 [ 96.793391][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.165285][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 97.182673][ T6217] ipvlan2: entered allmulticast mode [ 97.189787][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.198426][ T6217] syz_tun: entered allmulticast mode [ 97.303319][ T920] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 97.344577][ T6220] bond0: unable to remove nonexistent ARP target 192.168.1.1 [ 97.355417][ T30] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.364845][ T6220] bond0: option arp_ip_target: invalid value (-192.168.1.1) [ 97.384442][ T5611] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.464427][ T920] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.475235][ T920] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 97.486873][ T920] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 97.523334][ T920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.534794][ T30] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.553014][ T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.565594][ T920] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 97.574034][ T5611] usb 1-1: Using ep0 maxpacket: 32 [ 97.580009][ T920] usb 2-1: Product: syz [ 97.580154][ T5611] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 97.594829][ T920] usb 2-1: Manufacturer: syz [ 97.599660][ T920] usb 2-1: SerialNumber: syz [ 97.606007][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.614267][ T30] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.637200][ T5611] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 97.648585][ T920] usb 2-1: config 0 descriptor?? [ 97.655373][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.663860][ T30] usb 4-1: SerialNumber: syz [ 97.675776][ T920] usb 2-1: selecting invalid altsetting 0 [ 97.834234][ T920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.887908][ T920] usb 2-1: USB disconnect, device number 6 [ 97.998346][ T6105] udevd[6105]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.187995][ T6168] Set syz0 is full, maxelem 65536 reached [ 98.305616][ T30] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 98.310295][ T5712] usb 1-1: USB disconnect, device number 5 [ 98.339320][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 98.339333][ T29] audit: type=1400 audit(1787587953.546:279): avc: denied { map } for pid=6236 comm="syz.4.211" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.392509][ T29] audit: type=1400 audit(1787587953.546:280): avc: denied { read write } for pid=6236 comm="syz.4.211" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.512214][ T920] usb 4-1: USB disconnect, device number 6 [ 98.520052][ T6242] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 98.545386][ T29] audit: type=1400 audit(1787587953.756:281): avc: denied { read write } for pid=6243 comm="syz.1.214" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.571723][ T29] audit: type=1400 audit(1787587953.776:282): avc: denied { open } for pid=6243 comm="syz.1.214" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.595030][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 98.607823][ T29] audit: type=1400 audit(1787587953.776:283): avc: denied { map } for pid=6243 comm="syz.1.214" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.652019][ T29] audit: type=1400 audit(1787587953.846:284): avc: denied { ioctl } for pid=6243 comm="syz.1.214" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.748829][ T29] audit: type=1400 audit(1787587953.956:285): avc: denied { mount } for pid=6248 comm="syz.1.216" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 98.774024][ T29] audit: type=1400 audit(1787587953.986:286): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 98.796729][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 98.802474][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.812939][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 98.821805][ T29] audit: type=1400 audit(1787587954.016:287): avc: denied { write } for pid=6250 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.841587][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 98.851873][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 98.861079][ T29] audit: type=1400 audit(1787587954.016:288): avc: denied { name_connect } for pid=6250 comm="syz.1.217" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 98.883384][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.884041][ T920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.893246][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.893272][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.893294][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 98.893317][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.893350][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.895678][ T9] usb 3-1: config 0 descriptor?? [ 98.963519][ T5724] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 99.134665][ T5724] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 99.147953][ T5724] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.161219][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 99.178494][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 99.186681][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 99.214031][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 99.231252][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.250408][ T6263] loop8: detected capacity change from 0 to 7 [ 99.267029][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 99.275510][ T5724] usb 5-1: Product: syz [ 99.279752][ T5724] usb 5-1: Manufacturer: syz [ 99.288179][ T5724] usb 5-1: SerialNumber: syz [ 99.294826][ T6263] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 99.302255][ T6263] loop8: partition table partially beyond EOD, truncated [ 99.313310][ T5724] usb 5-1: config 0 descriptor?? [ 99.332133][ T6263] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 99.340540][ T6268] Zero length message leads to an empty skb [ 99.353531][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 99.354883][ T6263] loop8: p2 start 121280928 is beyond EOD, truncated [ 99.404319][ T5611] usb 3-1: USB disconnect, device number 7 [ 99.426587][ T5611] usblp0: removed [ 99.514086][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 99.524675][ T10] usb 4-1: config 0 has no interfaces? [ 99.530183][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.539387][ T5724] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 99.541867][ T10] usb 4-1: config 0 descriptor?? [ 99.552964][ T5724] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 99.583414][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.734405][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 99.745622][ T9] usb 2-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 99.749343][ T5724] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 99.767042][ T10] usb 4-1: USB disconnect, device number 7 [ 99.774506][ T5724] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 99.774709][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.783297][ T920] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.801416][ T5724] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 99.811961][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 99.816705][ T5724] usb 5-1: USB disconnect, device number 6 [ 99.824099][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.847286][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 99.904989][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.953559][ T920] usb 1-1: Using ep0 maxpacket: 32 [ 99.959434][ T920] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 99.969894][ T920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.982236][ T920] usb 1-1: config 0 descriptor?? [ 99.998867][ T920] as10x_usb: device has been detected [ 100.005145][ T920] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 100.027390][ T920] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 100.069426][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.081011][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.090043][ T920] as10x_usb: error during firmware upload part1 [ 100.092068][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.224'. [ 100.096896][ T920] Registered device nBox DVB-T Dongle [ 100.116290][ T9] usb 2-1: string descriptor 0 read error: -71 [ 100.147849][ T9] usb 2-1: USB disconnect, device number 7 [ 100.197647][ T5712] usb 1-1: USB disconnect, device number 6 [ 100.223632][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.273466][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 100.359438][ T6277] netlink: 92 bytes leftover after parsing attributes in process `syz.4.229'. [ 100.426088][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 100.468889][ T5712] Unregistered device nBox DVB-T Dongle [ 100.476484][ T5712] as10x_usb: device has been disconnected [ 100.498426][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.509662][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 100.540585][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.558065][ T10] usb 3-1: config 0 descriptor?? [ 100.584656][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 100.603774][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 100.629838][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 100.649314][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 100.665313][ T10] usb 3-1: media controller created [ 100.687235][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.722889][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 100.740423][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 100.759489][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 100.780430][ T6275] dvb-usb: bulk message failed: -22 (2/0) [ 100.796777][ T6275] dvb-usb: bulk message failed: -22 (4/0) [ 100.829869][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 100.839461][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 100.867063][ T10] usb 3-1: USB disconnect, device number 8 [ 100.941026][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 100.957616][ T920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.033873][ T5712] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.051810][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.239'. [ 101.186921][ T6302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.241'. [ 101.200470][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 101.219316][ T5712] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 101.227133][ T6306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.242'. [ 101.249459][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.276690][ T5712] pvrusb2: Hardware description: Terratec Grabster AV400 [ 101.301149][ T5712] pvrusb2: ********** [ 101.315852][ T5712] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 101.341601][ T5712] pvrusb2: Important functionality might not be entirely working. [ 101.352899][ T5712] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 101.371560][ T5712] pvrusb2: ********** [ 101.510285][ T2354] pvrusb2: Invalid write control endpoint [ 101.554201][ T6315] syz.2.247 uses obsolete (PF_INET,SOCK_PACKET) [ 101.608012][ T6321] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 101.621235][ T2354] pvrusb2: Invalid write control endpoint [ 101.639497][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 101.657777][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 101.665971][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 101.677358][ T2354] pvrusb2: Device being rendered inoperable [ 101.685688][ T2354] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 101.689644][ T188] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 101.693610][ T2354] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 101.696729][ T2354] pvrusb2: Attached sub-driver cx25840 [ 101.714230][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 101.727248][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 101.747568][ T920] usb 2-1: USB disconnect, device number 8 [ 101.782415][ T188] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 101.861033][ T6329] capability: warning: `syz.0.252' uses deprecated v2 capabilities in a way that may be insecure [ 101.872502][ T51] Bluetooth: Wrong link type (-57) [ 101.977787][ T6334] loop8: detected capacity change from 0 to 7 [ 101.992489][ T6334] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 102.000074][ T920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.009031][ T6334] loop8: partition table partially beyond EOD, truncated [ 102.022866][ T6334] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 102.037843][ T6334] loop8: p2 start 121280928 is beyond EOD, truncated [ 102.065560][ T188] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 102.253291][ T920] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 102.293297][ T5724] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 102.323474][ T188] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 102.379450][ T6319] ceph: No mds server is up or the cluster is laggy [ 102.404639][ T920] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.422973][ T920] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.432612][ T920] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 102.446724][ T920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.457770][ T920] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 102.479160][ T5724] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 102.487964][ T188] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 102.492655][ T920] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 102.516198][ T5724] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.519129][ T188] usb 4-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 102.526678][ T5724] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.556139][ T920] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.560132][ T188] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 102.566124][ T920] usb 1-1: Product: syz [ 102.579237][ T5724] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.580154][ T6346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.589161][ T920] usb 1-1: Manufacturer: syz [ 102.596410][ T188] usb 4-1: config 1 interface 0 has no altsetting 0 [ 102.607499][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.613347][ T5724] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.648518][ T920] cdc_wdm 1-1:1.0: skipping garbage [ 102.651134][ T188] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 102.654112][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.658226][ T920] cdc_wdm 1-1:1.0: skipping garbage [ 102.708997][ T920] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 102.736090][ T920] cdc_wdm 1-1:1.0: Unknown control protocol [ 102.853318][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.895489][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.926571][ T6334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.254'. [ 102.947678][ T188] usb 4-1: string descriptor 0 read error: -71 [ 102.983770][ T188] usb 4-1: USB disconnect, device number 8 [ 103.026301][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.079807][ C1] cdc_wdm 1-1:1.0: unknown notification 100 received: index 25647 len 24941 [ 103.099456][ T5611] usb 1-1: USB disconnect, device number 7 [ 103.270333][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.493269][ T920] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 103.513461][ T188] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.524402][ T5724] gud 3-1:1.0: Failed to get connectors (error=-5) [ 103.531697][ T5724] gud 3-1:1.0: probe with driver gud failed with error -5 [ 103.650779][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 103.650795][ T29] audit: type=1400 audit(1787587958.856:323): avc: denied { bind } for pid=6370 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.677881][ T29] audit: type=1400 audit(1787587958.856:324): avc: denied { name_bind } for pid=6370 comm="syz.0.271" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 103.683599][ T188] usb 5-1: Using ep0 maxpacket: 16 [ 103.698822][ T920] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 103.713165][ T29] audit: type=1400 audit(1787587958.856:325): avc: denied { node_bind } for pid=6370 comm="syz.0.271" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 103.736990][ T29] audit: type=1400 audit(1787587958.856:326): avc: denied { write } for pid=6370 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.756749][ T920] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 103.758157][ T188] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 103.773323][ T920] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 103.789631][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.794832][ T920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.804181][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.830348][ T920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 103.841078][ T5737] usb 3-1: USB disconnect, device number 9 [ 103.847002][ T5724] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 103.847810][ T188] usb 5-1: config 0 descriptor?? [ 103.858085][ T920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.881185][ T6365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.895144][ T6365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.907344][ T920] pl2303 2-1:1.0: pl2303 converter detected [ 103.933819][ T920] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 103.976938][ T188] rc_core: IR keymap rc-xbox-dvd not found [ 103.991514][ T188] Registered IR keymap rc-empty [ 104.006698][ T188] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 104.013848][ T5724] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 104.029684][ T5724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.034944][ T188] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 104.048366][ T5724] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 104.064860][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.094752][ T188] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 104.107245][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.120102][ T188] input: failed to attach handler kbd to device input10, error: -5 [ 104.144435][ T4951] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 104.164962][ T188] usb 5-1: USB disconnect, device number 7 [ 104.176275][ T4951] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 104.313591][ T6365] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 104.322368][ T6365] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 104.329968][ T6365] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 104.337955][ T6365] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 104.342725][ T5724] dvbdev: DVB: registering new adapter (DEC2000-t) [ 104.346615][ T6365] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 104.359662][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.361509][ T5724] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 104.383783][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.391920][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.405601][ T920] usb 2-1: USB disconnect, device number 9 [ 104.446440][ T920] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 104.456672][ T920] pl2303 2-1:1.0: device disconnected [ 104.514209][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 104.528513][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 104.535861][ T6382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.538890][ T10] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 104.555335][ T10] usb 1-1: config 0 has no interface number 0 [ 104.561456][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 104.569114][ T5724] usb 4-1: selecting invalid altsetting 8 [ 104.571973][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 104.591521][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.602883][ T10] usb 1-1: Product: syz [ 104.607118][ T10] usb 1-1: Manufacturer: syz [ 104.611834][ T10] usb 1-1: SerialNumber: syz [ 104.620727][ T10] usb 1-1: config 0 descriptor?? [ 104.629963][ T6378] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.637537][ T6378] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.766232][ T920] usb 4-1: USB disconnect, device number 9 [ 104.859378][ T6378] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.877661][ T6378] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.913359][ C1] net_ratelimit: 29 callbacks suppressed [ 104.913377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.928465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.938640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.947494][ T6382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.993008][ T29] audit: type=1400 audit(1787587960.196:327): avc: denied { create } for pid=6388 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.027127][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.035919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.037728][ T29] audit: type=1400 audit(1787587960.226:328): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 105.044576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.065022][ T29] audit: type=1400 audit(1787587960.236:329): avc: denied { setopt } for pid=6388 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.073569][ T6383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.100549][ T29] audit: type=1400 audit(1787587960.236:330): avc: denied { bind } for pid=6388 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.121449][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 105.132570][ T29] audit: type=1400 audit(1787587960.306:331): avc: denied { read } for pid=6388 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.143299][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.163631][ T29] audit: type=1400 audit(1787587960.366:332): avc: denied { write } for pid=6388 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.172997][ T6382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.484717][ T51] Bluetooth: hci1: unexpected event 0x2f length: 509 > 255 [ 105.722856][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 105.741114][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 105.755995][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 105.763724][ T5712] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 105.794597][ T10] asix 1-1:0.34: probe with driver asix failed with error -71 [ 105.822443][ T10] usb 1-1: USB disconnect, device number 8 [ 105.833381][ T188] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 105.923293][ T5712] usb 2-1: Using ep0 maxpacket: 16 [ 105.929696][ T5712] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.939903][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.950906][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.961135][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.973374][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.993387][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.013293][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.022184][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 106.037122][ T188] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.047456][ T188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.059294][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.067965][ T188] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.082529][ T5712] usb 2-1: config 0 descriptor?? [ 106.092697][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.108843][ T188] usb 4-1: SerialNumber: syz [ 106.253293][ T5724] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.302230][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 106.311164][ T9] usbtmc 3-1:16.0: can't read capabilities [ 106.349129][ T188] usb 4-1: 0:2 : does not exist [ 106.415518][ T5724] usb 5-1: Using ep0 maxpacket: 8 [ 106.437982][ T5724] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 106.450077][ T5724] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.463354][ T5724] usb 5-1: config 0 has no interface number 0 [ 106.471112][ T5724] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.472582][ T188] usb 4-1: USB disconnect, device number 10 [ 106.503298][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.526529][ T5724] usb 5-1: config 0 descriptor?? [ 106.564581][ T5724] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 106.565424][ T5712] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input11 [ 106.622445][ T9] usb 3-1: USB disconnect, device number 10 [ 106.749105][ T5712] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 106.790497][ T5600] usb 5-1: USB disconnect, device number 8 [ 106.816854][ T5712] usb 2-1: USB disconnect, device number 10 [ 106.878619][ T6419] fido_id[6419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 106.951428][ T6421] loop8: detected capacity change from 0 to 7 [ 106.980318][ T6421] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 106.998498][ T6421] loop8: partition table partially beyond EOD, truncated [ 107.020479][ T6421] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 107.052307][ T6421] loop8: p2 start 121280928 is beyond EOD, truncated [ 107.138999][ T6426] input: syz1 as /devices/virtual/input/input12 [ 107.283741][ T5600] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.455328][ T5600] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 107.483419][ T5600] usb 1-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 107.509522][ T5600] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.528686][ T5600] usb 1-1: config 1 interface 0 has no altsetting 0 [ 107.538082][ T5600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.550907][ T6439] netlink: 56 bytes leftover after parsing attributes in process `syz.4.299'. [ 107.565208][ T5600] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 107.769563][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.794148][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.833603][ T6421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.293'. [ 107.854306][ T5600] usb 1-1: string descriptor 0 read error: -71 [ 107.878239][ T5600] usb 1-1: USB disconnect, device number 9 [ 107.898964][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 107.915287][ T6449] netlink: 'syz.4.306': attribute type 2 has an invalid length. [ 107.938844][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 107.955917][ T6449] netlink: 'syz.4.306': attribute type 2 has an invalid length. [ 107.966675][ T188] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 108.044871][ T5724] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 108.106268][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 108.106329][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 108.126029][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.307'. [ 108.163330][ T188] usb 3-1: Using ep0 maxpacket: 16 [ 108.174148][ T188] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 108.194504][ T188] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 108.226098][ T188] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.234049][ T5724] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 108.243036][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.255239][ T5724] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 108.268021][ T188] usb 3-1: config 0 descriptor?? [ 108.290510][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.333850][ T5724] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 108.539508][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 108.591388][ T6473] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 108.624880][ T5600] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 108.697769][ T188] hid_parser_main: 2 callbacks suppressed [ 108.697789][ T188] lenovo 0003:17EF:6009.0008: unknown main item tag 0x2 [ 108.726929][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 108.726946][ T29] audit: type=1400 audit(1787587963.936:353): avc: denied { search } for pid=6475 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.758380][ T188] lenovo 0003:17EF:6009.0008: unknown main item tag 0x6 [ 108.768940][ T188] lenovo 0003:17EF:6009.0008: ignoring exceeding usage max [ 108.777992][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 108.778031][ T29] audit: type=1400 audit(1787587963.936:354): avc: denied { read write } for pid=6475 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 108.810705][ T5600] usb 4-1: Using ep0 maxpacket: 16 [ 108.819293][ T188] lenovo 0003:17EF:6009.0008: hidraw0: USB HID v40.81 Device [HID 17ef:6009] on usb-dummy_hcd.2-1/input0 [ 108.822712][ T6479] netlink: 'syz.4.316': attribute type 2 has an invalid length. [ 108.840954][ T5600] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 syzkaller syzkaller login: [ 108.858423][ T29] audit: type=1400 audit(1787587963.936:355): avc: denied { open } for pid=6475 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 108.882838][ T5600] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.892671][ T5600] usb 4-1: config 0 has no interface number 0 [ 108.899224][ T5600] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.913238][ T5600] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.930217][ T9] usb 3-1: USB disconnect, device number 11 [ 108.959465][ T6480] fido_id[6480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 108.964787][ T29] audit: type=1400 audit(1787587963.936:356): avc: denied { lock } for pid=6475 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 109.000133][ T5600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.018635][ T5600] usb 4-1: config 0 descriptor?? [ 109.108903][ T920] kernel read not supported for file /input/event2 (pid: 920 comm: kworker/1:2) [ 109.252809][ T6492] gadgetfs: bound to dummy_udc driver [ 109.389283][ T6499] loop8: detected capacity change from 0 to 7 [ 109.399988][ T6499] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 109.407568][ T6499] loop8: partition table partially beyond EOD, truncated [ 109.416736][ T6499] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 109.427564][ T6499] loop8: p2 start 121280928 is beyond EOD, truncated [ 109.655552][ T5600] uclogic 0003:28BD:0071.0009: pen parameters not found [ 109.663108][ T5600] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 109.690181][ T29] audit: type=1400 audit(1787587964.896:357): avc: denied { read write } for pid=6503 comm="syz.0.323" name="frontend0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 109.717275][ T29] audit: type=1400 audit(1787587964.896:358): avc: denied { open } for pid=6503 comm="syz.0.323" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 109.742393][ T188] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 109.822700][ T29] audit: type=1400 audit(1787587965.026:359): avc: denied { create } for pid=6507 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.904703][ T188] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 109.928533][ T188] usb 5-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 109.933728][ T5724] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -110 [ 109.945300][ T5600] usb 4-1: USB disconnect, device number 11 [ 109.957626][ T5724] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 109.959539][ T188] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 109.966751][ T5724] stv0680 2-1:4.0: last error: 86, command = 0x78 [ 109.988866][ T29] audit: type=1400 audit(1787587965.186:360): avc: denied { block_suspend } for pid=6511 comm="syz.2.326" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.015081][ T188] usb 5-1: config 1 interface 0 has no altsetting 0 [ 110.035137][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.047498][ T188] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 110.133263][ T920] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 110.335808][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.483144][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.663294][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.321'. [ 110.807861][ T188] usb 5-1: string descriptor 0 read error: -71 [ 111.058459][ T5737] net_ratelimit: 32 callbacks suppressed [ 111.058483][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.083489][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.093965][ T188] usb 5-1: USB disconnect, device number 9 [ 111.162830][ T5600] usb 2-1: USB disconnect, device number 11 [ 111.245733][ T920] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 111.256933][ T29] audit: type=1400 audit(1787587966.456:361): avc: denied { mmap_zero } for pid=6525 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 111.288901][ T920] usb 1-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 111.311278][ T920] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.341497][ T920] usb 1-1: config 1 interface 0 has no altsetting 0 [ 111.361307][ T920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.401382][ T920] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 111.432614][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.446731][ T29] audit: type=1400 audit(1787587966.656:362): avc: denied { node_bind } for pid=6531 comm="syz.3.331" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 111.585706][ T3384] IPVS: starting estimator thread 0... [ 111.592089][ T6540] IPVS: sh: FWM 3 0x00000003 - no destination available [ 111.600325][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 111.602487][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.629120][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.646035][ T920] usb 1-1: string descriptor 0 read error: -71 [ 111.664469][ T920] usb 1-1: USB disconnect, device number 10 [ 111.673289][ T6541] IPVS: using max 41 ests per chain, 98400 per kthread [ 111.793412][ T5600] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 111.954032][ T5600] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 111.964995][ T5600] usb 3-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 111.978245][ T5600] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.990382][ T5600] usb 3-1: config 1 interface 0 has no altsetting 0 [ 111.997020][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.009782][ T5600] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 112.069189][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.080467][ T5724] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.214317][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.229719][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.244808][ T5600] usb 3-1: string descriptor 0 read error: -71 [ 112.254491][ T5724] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.271034][ T5600] usb 3-1: USB disconnect, device number 12 [ 112.277790][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.305410][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.325950][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.339077][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.351331][ T5724] usb 5-1: config 0 descriptor?? [ 112.399525][ T6556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.466111][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 112.633258][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 112.643861][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.664266][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.684766][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.703668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.716218][ T9] usb 1-1: config 0 descriptor?? [ 112.782187][ T5724] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 112.803329][ T5737] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.947375][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 112.964167][ T5737] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 112.996584][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.004889][ T5737] usb 4-1: Product: syz [ 113.009082][ T5737] usb 4-1: Manufacturer: syz [ 113.011428][ T6569] __nla_validate_parse: 3 callbacks suppressed [ 113.011442][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 113.014184][ T5737] usb 4-1: SerialNumber: syz [ 113.105305][ T920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.114118][ C1] plantronics 0003:047F:FFFF.000A: hid_field_extract() called with n (132) > 32! (kworker/1:2) [ 113.202601][ T51] block nbd0: Receive control failed (result -32) [ 113.249231][ T6578] loop8: detected capacity change from 0 to 7 [ 113.257464][ T6578] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 113.279553][ T6578] loop8: partition table partially beyond EOD, truncated [ 113.289696][ T6578] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 113.300306][ T6578] loop8: p2 start 121280928 is beyond EOD, truncated [ 113.318154][ T9] usb 5-1: USB disconnect, device number 10 [ 113.358624][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.449121][ T5737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 113.461186][ T5737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 113.593310][ T5600] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 113.753805][ T5600] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 113.764084][ T5600] usb 2-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 113.777202][ T5600] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.786892][ T5600] usb 2-1: config 1 interface 0 has no altsetting 0 [ 113.793800][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.809332][ T5600] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 113.887215][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 113.887232][ T29] audit: type=1400 audit(1787587969.096:366): avc: denied { mounton } for pid=6587 comm="syz.4.354" path="/proc/155/cgroup" dev="proc" ino=12468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 114.016301][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.038596][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.049303][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.351'. [ 114.061295][ T5600] usb 2-1: string descriptor 0 read error: -71 [ 114.076543][ T5737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 114.080064][ T5600] usb 2-1: USB disconnect, device number 12 [ 114.102976][ T5737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 114.127637][ T5737] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 114.140094][ T5737] usb 4-1: USB disconnect, device number 12 [ 114.322021][ T29] audit: type=1400 audit(1787587969.526:367): avc: denied { mount } for pid=6594 comm="syz.2.357" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.363337][ T920] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.406085][ T29] audit: type=1400 audit(1787587969.616:368): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.520665][ T920] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 114.541331][ T920] usb 5-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 114.567261][ T920] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.589308][ T920] usb 5-1: config 1 interface 0 has no altsetting 0 [ 114.629283][ T920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.090985][ T920] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 115.396713][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.473463][ T6604] netlink: 'syz.3.360': attribute type 5 has an invalid length. [ 115.479519][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.486567][ T6604] netlink: 'syz.3.360': attribute type 9 has an invalid length. [ 115.496692][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 115.499229][ T5611] usb 1-1: USB disconnect, device number 11 [ 115.546232][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 115.605064][ T920] usb 5-1: string descriptor 0 read error: -71 [ 115.642247][ T920] usb 5-1: USB disconnect, device number 11 [ 115.833495][ T5737] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 115.940991][ T29] audit: type=1400 audit(1787587971.146:369): avc: denied { append } for pid=6620 comm="syz.2.368" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.003908][ T5737] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 116.021194][ T5737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.047625][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.090388][ T5737] usb 2-1: config 0 descriptor?? [ 116.110971][ T5737] pwc: Askey VC010 type 2 USB webcam detected. [ 116.157052][ T6626] xt_hashlimit: size too large, truncated to 1048576 [ 116.226141][ T5724] net_ratelimit: 6 callbacks suppressed [ 116.226157][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.423381][ T5600] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 116.562920][ T5737] pwc: recv_control_msg error -32 req 02 val 2b00 [ 116.641282][ T5737] pwc: recv_control_msg error -32 req 02 val 2700 [ 116.936682][ T5737] pwc: recv_control_msg error -71 req 04 val 1000 [ 117.027250][ T5737] pwc: recv_control_msg error -71 req 04 val 1300 [ 117.149192][ T5737] pwc: recv_control_msg error -71 req 04 val 1400 [ 117.236494][ T5737] pwc: recv_control_msg error -71 req 02 val 2000 [ 117.263492][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.276963][ T5737] pwc: recv_control_msg error -71 req 02 val 2100 [ 117.311820][ T5737] pwc: recv_control_msg error -71 req 04 val 1500 [ 117.330705][ T5737] pwc: recv_control_msg error -71 req 02 val 2500 [ 117.355725][ T5737] pwc: recv_control_msg error -71 req 02 val 2400 [ 117.371955][ T5737] pwc: recv_control_msg error -71 req 02 val 2600 [ 117.373902][ T5600] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 117.389637][ T5600] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.400591][ T5600] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 117.407371][ T5737] pwc: recv_control_msg error -71 req 02 val 2900 [ 117.423329][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.434608][ T5737] pwc: recv_control_msg error -71 req 02 val 2800 [ 117.448210][ T5600] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 117.456203][ T5737] pwc: recv_control_msg error -71 req 04 val 1100 [ 117.472547][ T5737] pwc: recv_control_msg error -71 req 04 val 1200 [ 117.494125][ T5600] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 117.500172][ T5737] pwc: Registered as video103. [ 117.508124][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.556493][ T5737] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 117.616390][ T29] audit: type=1400 audit(1787587972.826:370): avc: denied { read } for pid=4951 comm="acpid" name="event4" dev="devtmpfs" ino=3059 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.660027][ T5737] usb 2-1: USB disconnect, device number 13 [ 117.705823][ T29] audit: type=1400 audit(1787587972.826:371): avc: denied { open } for pid=4951 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3059 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.770752][ T29] audit: type=1400 audit(1787587972.826:372): avc: denied { ioctl } for pid=4951 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3059 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.835111][ T6649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.855212][ T29] audit: type=1400 audit(1787587972.856:373): avc: denied { name_bind } for pid=6643 comm="syz.3.377" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 117.916372][ T29] audit: type=1400 audit(1787587973.006:374): avc: denied { execute } for pid=6647 comm="syz.1.379" path="/73/blkio.bfq.time_recursive" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.983569][ T6624] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 117.987034][ T29] audit: type=1800 audit(1787587973.006:375): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.379" name="blkio.bfq.time_recursive" dev="tmpfs" ino=390 res=0 errno=0 [ 118.010253][ T6624] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 118.042544][ T6624] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 118.094319][ T6624] SPCP8x5 ttyUSB0: Set UART format 0x3709 failed (error = -32) [ 118.229265][ T5600] usb 3-1: USB disconnect, device number 13 [ 118.248026][ T5600] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 118.263893][ T5600] spcp8x5 3-1:1.0: device disconnected [ 118.283681][ T5737] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 118.291653][ T5724] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 118.293277][ T5712] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 118.313673][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.453344][ T5737] usb 1-1: Using ep0 maxpacket: 32 [ 118.459401][ T5737] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 118.463323][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 118.475111][ T5712] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 118.475792][ T5724] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.489176][ T5712] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 118.491932][ T5737] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 118.500489][ T5712] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 118.508983][ T5737] usb 1-1: config 0 has no interface number 0 [ 118.517823][ T5712] usb 2-1: config 0 has no interface number 0 [ 118.524140][ T5724] usb 5-1: not running at top speed; connect to a high speed hub [ 118.530066][ T5712] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.537470][ T5724] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 118.549786][ T188] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 118.564608][ T5724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.565878][ T5712] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.578154][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.587059][ T5712] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 118.603227][ T5724] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.606941][ T5712] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 118.614480][ T5737] usb 1-1: Product: syz [ 118.626373][ T5712] usb 2-1: Product: syz [ 118.626391][ T5712] usb 2-1: Manufacturer: syz [ 118.635255][ T5712] usb 2-1: config 0 descriptor?? [ 118.635714][ T5737] usb 1-1: Manufacturer: syz [ 118.645163][ T5737] usb 1-1: SerialNumber: syz [ 118.651032][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.659090][ T5724] usb 5-1: Product: syz [ 118.663347][ T5724] usb 5-1: Manufacturer: syz [ 118.668806][ T5724] usb 5-1: SerialNumber: syz [ 118.674341][ T5737] usb 1-1: config 0 descriptor?? [ 118.688355][ T5737] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 118.753292][ T188] usb 4-1: Using ep0 maxpacket: 32 [ 118.759173][ T188] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 118.770747][ T188] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 118.779994][ T188] usb 4-1: config 2 has no interface number 0 [ 118.787758][ T188] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 118.801290][ T188] usb 4-1: config 2 interface 88 has no altsetting 0 [ 118.820490][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 118.829923][ T188] usb 4-1: Product: syz [ 118.834634][ T188] usb 4-1: Manufacturer: syz [ 118.839275][ T188] usb 4-1: SerialNumber: syz [ 118.851322][ T6670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 118.890603][ T5737] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 118.922572][ T5737] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 118.933692][ T5724] usb 5-1: 0:1 : does not exist [ 119.019528][ T5724] usb 5-1: USB disconnect, device number 12 [ 119.080653][ T6670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.102578][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.129575][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101 [ 119.158738][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 119.158756][ T29] audit: type=1400 audit(1787587974.366:383): avc: denied { ioctl } for pid=6673 comm="syz.2.391" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12627 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.250096][ T5712] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input14 [ 119.260153][ T5712] input: failed to attach handler kbd to device input14, error: -5 [ 119.331756][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 119.341126][ T5737] usb 1-1: USB disconnect, device number 12 [ 119.351538][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.366402][ T5737] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 119.386774][ T5737] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 119.398693][ T5737] quatech2 1-1:0.51: device disconnected [ 119.456390][ T5724] usb 2-1: USB disconnect, device number 14 [ 119.554054][ T6678] Illegal XDP return value 32768 on prog (id 14) dev syz_tun, expect packet loss! [ 119.843274][ T5712] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 120.033853][ T5712] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 120.057245][ T5712] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.078431][ T5712] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 120.105029][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.137995][ T29] audit: type=1400 audit(1787587975.346:384): avc: denied { create } for pid=6691 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.143352][ T188] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 120.180678][ T188] asix 4-1:2.88: probe with driver asix failed with error -71 [ 120.189257][ T29] audit: type=1400 audit(1787587975.386:385): avc: denied { connect } for pid=6691 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.208907][ T188] usb 4-1: USB disconnect, device number 13 [ 120.293678][ T5724] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 120.383576][ T920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.443288][ T5600] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 120.453746][ T5724] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.465483][ T5724] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.475677][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.486616][ T5724] usb 2-1: config 0 descriptor?? [ 120.495362][ T5724] pwc: Askey VC010 type 2 USB webcam detected. [ 120.534864][ T5712] dvb_ttusb_budget: ttusb_init_controller: error [ 120.542034][ T5712] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 120.551207][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.553325][ T5737] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 120.606397][ T5712] DVB: Unable to find symbol stv0299_attach() [ 120.613277][ T5600] usb 1-1: Using ep0 maxpacket: 16 [ 120.619126][ T5600] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 120.636445][ T5600] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 120.648152][ T5600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.662730][ T5600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.671017][ T5712] DVB: Unable to find symbol tda8083_attach() [ 120.677202][ T5712] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 120.686334][ T5600] usb 1-1: Product: syz [ 120.690871][ T5600] usb 1-1: Manufacturer: syz [ 120.697975][ T5600] usb 1-1: SerialNumber: syz [ 120.705982][ T5600] usb 1-1: config 0 descriptor?? [ 120.713263][ T5737] usb 3-1: Using ep0 maxpacket: 16 [ 120.716730][ T5600] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 120.726353][ T5737] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.727688][ T5600] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 120.752591][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.778348][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.787608][ T6702] input: syz1 as /devices/virtual/input/input15 [ 120.797777][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.811594][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.827113][ T5737] usb 3-1: config 0 descriptor?? [ 120.896511][ T6705] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 120.908576][ T5724] pwc: recv_control_msg error -32 req 02 val 2b00 [ 120.916696][ T5724] pwc: recv_control_msg error -32 req 02 val 2700 [ 120.924069][ T5724] pwc: recv_control_msg error -32 req 02 val 2c00 [ 120.963053][ T29] audit: type=1400 audit(1787587976.166:386): avc: denied { execute } for pid=6706 comm="syz.3.404" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=12691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 121.078704][ C1] Unknown status report in ack skb [ 121.108243][ T920] usb 5-1: USB disconnect, device number 13 [ 121.137878][ T5724] pwc: recv_control_msg error -71 req 04 val 1300 [ 121.155825][ T5724] pwc: recv_control_msg error -71 req 04 val 1400 [ 121.162824][ T5724] pwc: recv_control_msg error -71 req 02 val 2000 [ 121.175725][ T5724] pwc: recv_control_msg error -71 req 02 val 2100 [ 121.185392][ T5724] pwc: recv_control_msg error -71 req 04 val 1500 [ 121.192187][ T5724] pwc: recv_control_msg error -71 req 02 val 2500 [ 121.199506][ T5724] pwc: recv_control_msg error -71 req 02 val 2400 [ 121.207643][ T5724] pwc: recv_control_msg error -71 req 02 val 2600 [ 121.215508][ T5724] pwc: recv_control_msg error -71 req 02 val 2900 [ 121.222267][ T5724] pwc: recv_control_msg error -71 req 02 val 2800 [ 121.229595][ T5724] pwc: recv_control_msg error -71 req 04 val 1100 [ 121.236527][ T5724] pwc: recv_control_msg error -71 req 04 val 1200 [ 121.250440][ T5724] pwc: Registered as video103. [ 121.265401][ T5724] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 121.294555][ T5724] usb 2-1: USB disconnect, device number 15 [ 121.301086][ T5737] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input16 [ 121.320493][ T5600] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 121.328650][ T5600] em28xx 1-1:0.0: Config register raw data: 0x41 [ 121.376295][ T5712] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 121.413723][ T5737] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 121.432740][ T920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.472505][ T5737] usb 3-1: USB disconnect, device number 14 [ 121.505697][ T6713] fido_id[6713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 121.538064][ T5600] usb 1-1: USB disconnect, device number 13 [ 121.550024][ T5600] em28xx 1-1:0.0: Disconnecting em28xx [ 121.556005][ T5712] usb 4-1: Using ep0 maxpacket: 8 [ 121.565393][ T5712] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.587516][ T5712] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.600434][ T5600] em28xx: Freeing device [ 121.605307][ T5712] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.616797][ T5712] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 121.630919][ T5712] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 121.642393][ T5712] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 121.652788][ T5712] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.667641][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.668089][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.728431][ T29] audit: type=1400 audit(1787587976.936:387): avc: denied { create } for pid=6714 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.761407][ T29] audit: type=1400 audit(1787587976.936:388): avc: denied { bind } for pid=6714 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.780979][ T29] audit: type=1400 audit(1787587976.936:389): avc: denied { setopt } for pid=6714 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.801852][ T29] audit: type=1400 audit(1787587976.936:390): avc: denied { accept } for pid=6714 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.821489][ T29] audit: type=1400 audit(1787587976.936:391): avc: denied { read } for pid=6714 comm="syz.4.407" path="socket:[12710]" dev="sockfs" ino=12710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.844815][ T29] audit: type=1400 audit(1787587976.966:392): avc: denied { mount } for pid=6716 comm="syz.1.408" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 121.900919][ T5712] usb 4-1: GET_CAPABILITIES returned 0 [ 121.907120][ T5712] usbtmc 4-1:16.0: can't read capabilities [ 121.990725][ T6723] loop8: detected capacity change from 0 to 7 [ 121.998844][ T6723] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 122.007320][ T6723] loop8: partition table partially beyond EOD, truncated [ 122.014662][ T6723] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 122.022746][ T6723] loop8: p2 start 121280928 is beyond EOD, truncated [ 122.130370][ T5712] usb 4-1: USB disconnect, device number 14 [ 122.324156][ T5727] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 122.387054][ T5737] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 122.470508][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.481248][ T5727] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 122.493559][ T5727] usb 2-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 122.507526][ T5727] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.517249][ T5727] usb 2-1: config 1 interface 0 has no altsetting 0 [ 122.523991][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.537401][ T5727] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 122.545478][ T5737] usb 3-1: Using ep0 maxpacket: 32 [ 122.552312][ T5737] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 122.562755][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.575505][ T5737] usb 3-1: config 0 descriptor?? [ 122.589819][ T5737] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 122.745696][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.761145][ T51] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 122.770761][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.797368][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.410'. [ 122.835695][ T5727] usb 2-1: string descriptor 0 read error: -71 [ 122.856210][ T5727] usb 2-1: USB disconnect, device number 16 [ 122.948024][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.025609][ T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:0) [ 123.063444][ T5600] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 123.224196][ T5600] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 123.234898][ T5600] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.245208][ T5600] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.254958][ T5600] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.264835][ T5600] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.277826][ T5600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.503541][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.547227][ T6753] ip_tables: iptables: counters copy to user failed while replacing table [ 123.586927][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.829998][ T5737] gspca_vc032x: reg_w err -71 [ 123.842354][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.850400][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.861269][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.872863][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.880976][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.889503][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.895936][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.901878][ T6766] fuse: Bad value for 'fd' [ 123.907064][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.912587][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.919068][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.926935][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.942487][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.952566][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.963264][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.972431][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.991508][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.999988][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.005530][ T5737] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.010893][ T5737] gspca_vc032x: Unknown sensor... [ 124.016042][ T5737] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 124.027519][ T5737] usb 3-1: USB disconnect, device number 15 [ 124.060694][ T6769] input: syz1 as /devices/virtual/input/input18 [ 124.097692][ T6771] vhci_hcd: not connected 4 [ 124.210182][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 124.210198][ T29] audit: type=1400 audit(1787587979.416:407): avc: denied { ioctl } for pid=6775 comm="syz.0.432" path="/dev/video0" dev="devtmpfs" ino=931 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 124.320907][ T5600] gud 4-1:1.0: USB-1: Failed to add properties (ret=-5) [ 124.341219][ T5600] gud 4-1:1.0: Failed to get connectors (error=-5) [ 124.357170][ T5600] gud 4-1:1.0: probe with driver gud failed with error -5 [ 124.406148][ T6784] gadgetfs: bound to dummy_udc driver [ 124.503296][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 124.543791][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.574439][ T5600] usb 4-1: USB disconnect, device number 15 [ 124.694877][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.721699][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.733797][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.744610][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.761159][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.792319][ T9] usb 5-1: Product: syz [ 124.810501][ T9] usb 5-1: Manufacturer: syz [ 124.823677][ T9] usb 5-1: SerialNumber: syz [ 124.839874][ T9] cdc_mbim 5-1:1.0: skipping garbage [ 124.882978][ T6805] netlink: 'syz.1.446': attribute type 21 has an invalid length. [ 124.890784][ T6805] netlink: 'syz.1.446': attribute type 22 has an invalid length. [ 124.899004][ T6805] netlink: 'syz.1.446': attribute type 23 has an invalid length. [ 124.907055][ T5712] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 124.909432][ T6805] netlink: 'syz.1.446': attribute type 25 has an invalid length. [ 124.922521][ T6805] netlink: 96 bytes leftover after parsing attributes in process `syz.1.446'. [ 125.063272][ T5727] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 125.075061][ T5712] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.082844][ T5712] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 125.093002][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.103497][ T5712] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.116366][ T5712] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.129829][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.138084][ T5712] usb 3-1: Product: syz [ 125.143049][ T5712] usb 3-1: Manufacturer: syz [ 125.148959][ T5712] usb 3-1: SerialNumber: syz [ 125.191118][ T6809] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 125.197800][ T6809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.209928][ T6809] vhci_hcd vhci_hcd.0: Device attached [ 125.223546][ T5727] usb 1-1: Using ep0 maxpacket: 8 [ 125.229084][ T5727] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 125.239071][ T5727] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 125.247999][ T5727] usb 1-1: config 0 has no interface number 0 [ 125.254865][ T5727] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.265945][ T5727] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 125.278839][ T5727] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.289831][ T5727] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.302840][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.312875][ T5727] usb 1-1: config 0 descriptor?? [ 125.324155][ T5727] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 125.443297][ T5737] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 125.453274][ T5724] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 125.530982][ T6803] ldusb 1-1:0.55: Write buffer overflow, 2147479232 bytes dropped [ 125.540432][ T188] usb 1-1: USB disconnect, device number 14 [ 125.550940][ T188] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 125.567710][ T5712] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 125.576900][ T5712] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 125.587403][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.591544][ T5712] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 125.604438][ T5724] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.614326][ T5724] usb 4-1: config 0 has no interfaces? [ 125.620014][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.630223][ T5724] usb 4-1: config 0 descriptor?? [ 125.839060][ T188] usb 4-1: USB disconnect, device number 16 [ 125.846360][ T6810] vhci_hcd: connection closed [ 125.852649][ T684] vhci_hcd vhci_hcd.3: stop threads [ 125.864661][ T9] cdc_mbim 5-1:1.0: bind() failure [ 125.875131][ T684] vhci_hcd vhci_hcd.3: release socket [ 125.882099][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 125.890830][ T684] vhci_hcd vhci_hcd.3: disconnect device [ 125.898094][ T9] cdc_ncm 5-1:1.1: bind() failure [ 125.904669][ T5737] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 125.969887][ T5712] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 125.977883][ T5712] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 125.987634][ T5712] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 126.070350][ T5727] usb 5-1: USB disconnect, device number 14 [ 126.110140][ T29] audit: type=1400 audit(1787587981.316:408): avc: denied { connect } for pid=6816 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.170328][ T5712] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 126.218891][ T29] audit: type=1400 audit(1787587981.426:409): avc: denied { write } for pid=6816 comm="syz.0.450" path="socket:[13017]" dev="sockfs" ino=13017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.263430][ T5712] usb 3-1: USB disconnect, device number 16 [ 126.330831][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.625245][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.786069][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 126.798488][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 126.807485][ T5612] Bluetooth: hci1: hardware error 0x00 [ 126.863360][ T188] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 127.003277][ T5727] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 127.034086][ T188] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice= 0.00 [ 127.054665][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 127.073356][ T188] usb 4-1: Product: syz [ 127.078198][ T188] usb 4-1: Manufacturer: syz [ 127.110488][ T188] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 127.163782][ T5727] usb 5-1: Using ep0 maxpacket: 32 [ 127.184630][ T5727] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 127.211858][ T29] audit: type=1400 audit(1787587982.416:410): avc: denied { create } for pid=6840 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.221985][ T5727] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 127.240062][ T5727] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 127.252374][ T5727] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 127.264674][ T5727] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 127.278792][ T5727] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 127.291357][ T29] audit: type=1400 audit(1787587982.496:411): avc: denied { bind } for pid=6840 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.294392][ T5727] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.318775][ T29] audit: type=1400 audit(1787587982.516:412): avc: denied { write } for pid=6840 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.340125][ T5727] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 127.349299][ T5727] usb 5-1: Product: syz [ 127.360735][ T5727] usb 5-1: Manufacturer: syz [ 127.374736][ T5727] usb 5-1: SerialNumber: syz [ 127.393909][ T5727] usb 5-1: config 0 descriptor?? [ 127.400294][ T6828] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 127.412832][ T5727] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 127.427780][ T5727] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 127.621438][ T9] usb 5-1: USB disconnect, device number 15 [ 127.621591][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 127.641594][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 127.678246][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.723317][ T5727] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 127.743379][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.883874][ T5727] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 127.895532][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.116684][ T5727] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 128.370083][ T29] audit: type=1400 audit(1787587983.576:413): avc: denied { read write } for pid=6861 comm="syz.4.468" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 128.415590][ T5727] usb 1-1: USB disconnect, device number 15 [ 128.428470][ T29] audit: type=1400 audit(1787587983.576:414): avc: denied { open } for pid=6861 comm="syz.4.468" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 128.547325][ T188] gspca_topro: reg_r err -71 [ 128.552000][ T188] gspca_topro: Sensor soi763a [ 128.567100][ T188] usb 4-1: USB disconnect, device number 17 [ 128.713494][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.866468][ T5612] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 129.103636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.113101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.121360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.191197][ T29] audit: type=1326 audit(1787587984.396:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.472" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe94859e0d9 code=0x0 [ 129.195275][ T6879] loop8: detected capacity change from 0 to 7 [ 129.274340][ T6879] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 129.298906][ T6879] loop8: partition table partially beyond EOD, truncated [ 129.355807][ T6879] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 129.368118][ T6879] loop8: p2 start 121280928 is beyond EOD, truncated [ 129.377551][ T29] audit: type=1400 audit(1787587984.586:416): avc: denied { read write } for pid=6882 comm="syz.0.475" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 129.483843][ T29] audit: type=1400 audit(1787587984.586:417): avc: denied { open } for pid=6882 comm="syz.0.475" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 129.593304][ T5727] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 129.626206][ T6889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.753487][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.783933][ T5727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 129.800722][ T5727] usb 4-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 129.820522][ T5727] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.833562][ T5727] usb 4-1: config 1 interface 0 has no altsetting 0 [ 129.840202][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.856674][ T5727] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 129.963269][ T188] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 130.065657][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.084981][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.094435][ T5724] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 130.095408][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 130.115881][ T5727] usb 4-1: string descriptor 0 read error: -71 [ 130.130525][ T5727] usb 4-1: USB disconnect, device number 18 [ 130.137080][ T188] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 130.156633][ T188] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.168909][ T188] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 130.179948][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.214666][ T188] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 130.254407][ T5724] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 130.271546][ T5724] usb 1-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 130.296553][ T5724] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.303530][ T29] audit: type=1400 audit(1787587985.506:418): avc: denied { listen } for pid=6916 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.309416][ T5724] usb 1-1: config 1 interface 0 has no altsetting 0 [ 130.326469][ T29] audit: type=1400 audit(1787587985.516:419): avc: denied { accept } for pid=6916 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.347460][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.370159][ T5724] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 130.377326][ T6919] netlink: 25 bytes leftover after parsing attributes in process `syz.4.488'. [ 130.397489][ T6919] netlink: 'syz.4.488': attribute type 4 has an invalid length. [ 130.570711][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.586893][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.605115][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.481'. [ 130.616338][ T5724] usb 1-1: string descriptor 0 read error: -71 [ 130.656407][ T5724] usb 1-1: USB disconnect, device number 16 [ 130.786658][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.794901][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.003841][ T5727] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 131.154858][ T5727] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 131.177953][ T5727] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.206970][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.233020][ T5727] usb 4-1: config 0 descriptor?? [ 131.575682][ T29] audit: type=1400 audit(1787587986.786:420): avc: denied { connect } for pid=6945 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 131.650669][ T5727] ath6kl: Unsupported hardware version: 0x0 [ 131.671462][ T6948] loop8: detected capacity change from 0 to 7 [ 131.687403][ T5727] ath6kl: Failed to init ath6kl core: -22 [ 131.695119][ T5727] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 131.726225][ T6948] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 131.753282][ T6948] loop8: partition table partially beyond EOD, truncated [ 131.772291][ T29] audit: type=1400 audit(1787587986.976:421): avc: denied { create } for pid=6952 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.775756][ T6948] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 131.821849][ T6948] loop8: p2 start 121280928 is beyond EOD, truncated [ 131.831038][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.855459][ T29] audit: type=1400 audit(1787587987.056:422): avc: denied { read write } for pid=6893 comm="syz.2.480" name="idmouse0" dev="devtmpfs" ino=3165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 131.896789][ T5724] usb 4-1: USB disconnect, device number 19 [ 131.926101][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 131.939258][ T29] audit: type=1400 audit(1787587987.056:423): avc: denied { open } for pid=6893 comm="syz.2.480" path="/dev/idmouse0" dev="devtmpfs" ino=3165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 132.053313][ T5712] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 132.127841][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 132.213935][ T5712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 132.224119][ T5712] usb 1-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 132.238451][ T5712] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.248432][ T5712] usb 1-1: config 1 interface 0 has no altsetting 0 [ 132.255364][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.270119][ T5712] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 132.486352][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.501420][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.514180][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.497'. [ 132.526241][ T5712] usb 1-1: string descriptor 0 read error: -71 [ 132.538775][ T5712] usb 1-1: USB disconnect, device number 17 [ 132.547872][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.557469][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.803289][ T188] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 132.865133][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.945720][ T5727] usb 3-1: USB disconnect, device number 17 [ 132.954035][ T188] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 132.960919][ T5727] idmouse 3-1:1.0: disconnected [ 132.965556][ T188] usb 4-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 132.981421][ T188] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.991144][ T188] usb 4-1: config 1 interface 0 has no altsetting 0 [ 132.998004][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.010646][ T188] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 133.185529][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.211061][ T6970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.219858][ T6970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.230071][ T6970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.504'. [ 133.240588][ T188] usb 4-1: string descriptor 0 read error: -71 [ 133.262564][ T188] usb 4-1: USB disconnect, device number 20 [ 133.539241][ T6984] fuse: Bad value for 'fd' [ 133.618633][ T29] audit: type=1400 audit(1787587988.826:424): avc: denied { mounton } for pid=6985 comm="syz.1.510" path="/proc/256/task" dev="proc" ino=13254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 133.824212][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.904835][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.956778][ T7000] loop8: detected capacity change from 0 to 7 [ 133.967167][ T7000] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 133.975290][ T7000] loop8: partition table partially beyond EOD, truncated [ 133.982504][ T7000] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 133.984078][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 133.989854][ T6958] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 133.998239][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 134.003718][ T5612] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 134.017770][ T7000] loop8: p2 start 121280928 is beyond EOD, truncated [ 134.293263][ T188] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 134.443906][ T188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 134.457176][ T188] usb 1-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 134.479195][ T188] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.494049][ T188] usb 1-1: config 1 interface 0 has no altsetting 0 [ 134.506413][ T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.537162][ T188] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 134.682024][ T29] audit: type=1400 audit(1787587989.886:425): avc: denied { append } for pid=7011 comm="syz.3.518" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.740432][ T7000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.765243][ T7000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.799896][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'. [ 134.848603][ T188] usb 1-1: string descriptor 0 read error: -71 [ 134.859477][ T7012] kvm: apic: phys broadcast and lowest prio [ 134.890858][ T188] usb 1-1: USB disconnect, device number 18 [ 134.948140][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.086497][ T29] audit: type=1400 audit(1787587990.296:426): avc: denied { write } for pid=7019 comm="syz.4.523" name="functions" dev="configfs" ino=12167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.230757][ T29] audit: type=1400 audit(1787587990.436:427): avc: denied { open } for pid=7028 comm="syz.4.526" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 135.260892][ T29] audit: type=1400 audit(1787587990.446:428): avc: denied { ioctl } for pid=7028 comm="syz.4.526" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 135.295725][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 135.713068][ T29] audit: type=1400 audit(1787587990.916:429): avc: denied { write } for pid=7040 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.718449][ T7042] netlink: 104 bytes leftover after parsing attributes in process `syz.3.533'. [ 135.764788][ T29] audit: type=1400 audit(1787587990.916:430): avc: denied { nlmsg_write } for pid=7040 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.819368][ T29] audit: type=1400 audit(1787587990.966:431): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 135.927841][ T7048] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 135.983833][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.215474][ T7064] loop8: detected capacity change from 0 to 7 [ 136.240044][ T7064] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 136.256639][ T7064] loop8: partition table partially beyond EOD, truncated [ 136.284276][ T7064] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 136.292164][ T7068] capability: warning: `syz.1.541' uses 32-bit capabilities (legacy support in use) [ 136.313386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.327469][ T7064] loop8: p2 start 121280928 is beyond EOD, truncated [ 136.356234][ T29] audit: type=1400 audit(1787587991.566:432): avc: denied { connect } for pid=7069 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.384309][ T5612] Bluetooth: hci0: unexpected event for opcode 0x100c [ 136.552649][ T29] audit: type=1400 audit(1787587991.756:433): avc: denied { write } for pid=7075 comm="syz.4.546" name="ip_mr_cache" dev="proc" ino=4026533013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 136.613355][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 136.787054][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 136.797358][ T9] usb 4-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 136.810907][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 136.821321][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 136.828866][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.844800][ T9] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 136.863965][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.883857][ T188] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 137.011728][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 137.025564][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.046891][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.056103][ T188] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 137.063418][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.076905][ T188] usb 3-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 137.093688][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.540'. [ 137.102673][ T188] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.119171][ T188] usb 3-1: config 1 interface 0 has no altsetting 0 [ 137.119297][ T9] usb 4-1: string descriptor 0 read error: -71 [ 137.132324][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.163112][ T29] audit: type=1400 audit(1787587992.366:434): avc: denied { create } for pid=7097 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.165693][ T188] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 137.195398][ T9] usb 4-1: USB disconnect, device number 21 [ 137.366174][ T7078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.421528][ T7078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.446178][ T7078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'. [ 137.473139][ T188] usb 3-1: string descriptor 0 read error: -71 [ 137.540939][ T188] usb 3-1: USB disconnect, device number 18 [ 138.143576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.151933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.160238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.168508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.176774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.185030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.194321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.202572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.393122][ T9] hid-generic 0003:048D:1239.000C: unknown main item tag 0x0 [ 138.450168][ T9] hid-generic 0003:048D:1239.000C: unknown main item tag 0x0 [ 138.497963][ T9] hid-generic 0003:048D:1239.000C: unknown main item tag 0x0 [ 138.522004][ T9] hid-generic 0003:048D:1239.000C: unknown main item tag 0x0 [ 138.533496][ T9] hid-generic 0003:048D:1239.000C: unknown main item tag 0x0 [ 138.541522][ T9] hid-generic 0003:048D:1239.000C: unknown main item tag 0x0 [ 138.551018][ T9] hid-generic 0003:048D:1239.000C: unknown main item tag 0x0 [ 138.558792][ T9] hid-generic 0003:048D:1239.000C: unknown main item tag 0x0 [ 138.567640][ T9] hid-generic 0003:048D:1239.000C: unknown main item tag 0x0 [ 138.577189][ T9] hid-generic 0003:048D:1239.000C: unknown main item tag 0x0 [ 138.608806][ T9] hid-generic 0003:048D:1239.000C: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 138.716659][ T7119] fido_id[7119]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.926995][ T7123] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.424367][ T188] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 139.453295][ T5737] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 139.562050][ T7147] loop8: detected capacity change from 0 to 7 [ 139.568848][ T7147] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 139.577009][ T7147] loop8: partition table partially beyond EOD, truncated [ 139.586185][ T7147] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 139.593859][ T188] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 139.603615][ T7147] loop8: p2 start 121280928 is beyond EOD, truncated [ 139.606160][ T188] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.621308][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.623289][ T5737] usb 4-1: Using ep0 maxpacket: 8 [ 139.640015][ T188] usb 3-1: config 0 descriptor?? [ 139.644050][ T5737] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 139.658209][ T188] pwc: Askey VC010 type 2 USB webcam detected. [ 139.668118][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.692808][ T5737] pvrusb2: Hardware description: Terratec Grabster AV400 [ 139.701346][ T5737] pvrusb2: ********** [ 139.713243][ T5737] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 139.724637][ T5737] pvrusb2: Important functionality might not be entirely working. [ 139.732463][ T5737] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 139.746813][ T5737] pvrusb2: ********** [ 139.763361][ T5727] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 139.811908][ T7151] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 139.898746][ T2354] pvrusb2: Invalid write control endpoint [ 139.923370][ T5724] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 139.931028][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 139.941853][ T5727] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 139.962711][ T5727] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 139.975973][ T5727] usb 1-1: config 0 has no interface number 0 [ 139.982205][ T5727] usb 1-1: config 0 interface 184 has no altsetting 0 [ 139.991553][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.003821][ T2354] pvrusb2: Invalid write control endpoint [ 140.009552][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 140.020129][ T5727] usb 1-1: Product: syz [ 140.024909][ T5727] usb 1-1: Manufacturer: syz [ 140.029880][ T5727] usb 1-1: SerialNumber: syz [ 140.037297][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 140.046543][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 140.057462][ T5727] usb 1-1: config 0 descriptor?? [ 140.062832][ T2354] pvrusb2: Device being rendered inoperable [ 140.072717][ T2354] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 140.074264][ T7158] fuse: Bad value for 'fd' [ 140.082064][ T2354] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 140.084622][ T188] pwc: recv_control_msg error -32 req 02 val 2b00 [ 140.096182][ T2354] pvrusb2: Attached sub-driver cx25840 [ 140.104669][ T5724] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 140.105717][ T188] pwc: recv_control_msg error -32 req 02 val 2700 [ 140.122950][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 140.133594][ T5724] usb 5-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 140.134532][ T188] pwc: recv_control_msg error -32 req 02 val 2c00 [ 140.157952][ T5724] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 140.168163][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 140.191366][ T5724] usb 5-1: config 1 interface 0 has no altsetting 0 [ 140.200974][ T5737] usb 4-1: USB disconnect, device number 22 [ 140.210871][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.260079][ T5724] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 140.350794][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 140.350811][ T29] audit: type=1400 audit(1787587995.556:437): avc: denied { create } for pid=7163 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.356119][ T7164] syz_tun: entered allmulticast mode [ 140.357281][ T29] audit: type=1400 audit(1787587995.556:438): avc: denied { setopt } for pid=7163 comm="syz.1.579" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.412316][ T188] pwc: recv_control_msg error -71 req 04 val 1300 [ 140.422486][ T188] pwc: recv_control_msg error -71 req 04 val 1400 [ 140.432140][ T188] pwc: recv_control_msg error -71 req 02 val 2000 [ 140.439224][ T188] pwc: recv_control_msg error -71 req 02 val 2100 [ 140.446957][ T188] pwc: recv_control_msg error -71 req 04 val 1500 [ 140.454260][ T188] pwc: recv_control_msg error -71 req 02 val 2500 [ 140.461209][ T188] pwc: recv_control_msg error -71 req 02 val 2400 [ 140.461267][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.474984][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.477840][ T188] pwc: recv_control_msg error -71 req 02 val 2600 [ 140.490500][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.570'. [ 140.491037][ T188] pwc: recv_control_msg error -71 req 02 val 2900 [ 140.502084][ T5724] usb 5-1: string descriptor 0 read error: -71 [ 140.506647][ T188] pwc: recv_control_msg error -71 req 02 val 2800 [ 140.522464][ T188] pwc: recv_control_msg error -71 req 04 val 1100 [ 140.531105][ T188] pwc: recv_control_msg error -71 req 04 val 1200 [ 140.549081][ T188] pwc: Registered as video103. [ 140.570114][ T188] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 140.583752][ T5724] usb 5-1: USB disconnect, device number 16 [ 140.620899][ T188] usb 3-1: USB disconnect, device number 19 [ 140.722965][ T5727] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 140.748513][ T5727] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 140.774310][ T5727] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 140.785581][ T5727] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 141.668442][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x32 [ 141.881564][ T29] audit: type=1400 audit(1787587997.086:439): avc: denied { create } for pid=7199 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.888958][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 141.934937][ T29] audit: type=1400 audit(1787587997.086:440): avc: denied { ioctl } for pid=7199 comm="syz.2.590" path="socket:[14875]" dev="sockfs" ino=14875 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.004804][ T29] audit: type=1400 audit(1787587997.086:441): avc: denied { bind } for pid=7199 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.056149][ T29] audit: type=1400 audit(1787587997.086:442): avc: denied { setopt } for pid=7199 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.080363][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 142.101422][ T29] audit: type=1400 audit(1787587997.086:443): avc: denied { write } for pid=7199 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.160905][ T7202] net_ratelimit: 221 callbacks suppressed [ 142.160917][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.177839][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.188751][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.220108][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.228537][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.238492][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.247592][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.261849][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.275638][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 142.284749][ T29] audit: type=1400 audit(1787587997.476:444): avc: denied { create } for pid=7204 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 142.309184][ T29] audit: type=1400 audit(1787587997.496:445): avc: denied { sys_admin } for pid=7204 comm="syz.3.593" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 142.311213][ T7207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.331587][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.348793][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.370643][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 142.389952][ T7207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.390206][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.423601][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.591420][ T5724] usb 1-1: USB disconnect, device number 19 [ 142.823852][ T5727] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 142.870258][ T29] audit: type=1400 audit(1787587998.076:446): avc: denied { create } for pid=7225 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.994307][ T5727] usb 3-1: Using ep0 maxpacket: 8 [ 143.005336][ T5727] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 143.037099][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.096925][ T5727] pvrusb2: Hardware description: Terratec Grabster AV400 [ 143.110934][ T5727] pvrusb2: ********** [ 143.127481][ T5727] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 143.166294][ T5727] pvrusb2: Important functionality might not be entirely working. [ 143.205562][ T5727] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 143.239433][ T5727] pvrusb2: ********** [ 143.256673][ T9] gud 5-1:1.0: Failed to get connectors (error=-5) [ 143.269163][ T9] gud 5-1:1.0: probe with driver gud failed with error -5 [ 143.315893][ T2354] pvrusb2: Invalid write control endpoint [ 143.464500][ T2354] pvrusb2: Invalid write control endpoint [ 143.488715][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 143.539590][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 143.566740][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 143.596676][ T188] usb 5-1: USB disconnect, device number 17 [ 143.614640][ T2354] pvrusb2: Device being rendered inoperable [ 143.634652][ T2354] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 143.658430][ T2354] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 143.667098][ T5724] usb 3-1: USB disconnect, device number 20 [ 143.715181][ T2354] pvrusb2: Attached sub-driver cx25840 [ 143.732720][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 143.745261][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 144.361576][ T7257] netlink: 64 bytes leftover after parsing attributes in process `syz.2.610'. [ 144.387837][ T7257] syzkaller1: entered promiscuous mode [ 144.404827][ T7257] syzkaller1: entered allmulticast mode [ 144.773301][ T5737] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 144.937380][ T5737] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 144.961081][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 144.981303][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.006417][ T5737] usb 1-1: config 0 descriptor?? [ 145.025696][ T7263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.083461][ T188] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 145.246147][ T188] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.272418][ T188] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.307324][ T188] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.317869][ T5612] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 145.337209][ T188] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.352168][ T188] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.368776][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 145.368793][ T29] audit: type=1400 audit(1787588000.576:453): avc: denied { write } for pid=7294 comm="syz.2.626" path="socket:[17005]" dev="sockfs" ino=17005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.374310][ T188] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.410013][ T5612] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 145.420024][ T188] usb 5-1: Product: syz [ 145.424386][ T188] usb 5-1: Manufacturer: syz [ 145.435483][ T188] cdc_wdm 5-1:1.0: skipping garbage [ 145.441109][ T188] cdc_wdm 5-1:1.0: skipping garbage [ 145.450369][ T188] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 145.456723][ T188] cdc_wdm 5-1:1.0: Unknown control protocol [ 145.513388][ T5737] cypress 0003:04B4:07B1.000D: item fetching failed at offset 5/8 [ 145.556481][ T5737] cypress 0003:04B4:07B1.000D: parse failed [ 145.574600][ T5737] cypress 0003:04B4:07B1.000D: probe with driver cypress failed with error -22 [ 145.624790][ T7308] dummy_hcd dummy_hcd.0: remove, state 1 [ 145.631928][ T7308] usb usb1: USB disconnect, device number 1 [ 145.640034][ T7308] usb 1-1: USB disconnect, device number 20 [ 145.667108][ T7308] dummy_hcd dummy_hcd.0: stopped [ 145.672067][ T7308] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 145.709486][ T9] usb 5-1: USB disconnect, device number 18 [ 145.779566][ T7262] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 145.791651][ T7262] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 145.800047][ T7262] CPU: 1 UID: 0 PID: 7262 Comm: syz.0.614 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.810788][ T7262] Tainted: [L]=SOFTLOCKUP [ 145.815090][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 145.825127][ T7262] RIP: 0010:set_link_state+0x27/0xc70 [ 145.830536][ T7262] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 9a 94 2f fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 145.850157][ T7262] RSP: 0018:ffffc90003517b90 EFLAGS: 00010046 [ 145.856220][ T7262] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 145.864179][ T7262] RDX: 0000000000000000 RSI: ffffffff87db9156 RDI: 0000000000000000 [ 145.872133][ T7262] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 145.880090][ T7262] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 145.888046][ T7262] R13: ffff888028964000 R14: 0000000000000000 R15: ffff888028964c00 [ 145.895998][ T7262] FS: 000055557dbf7500(0000) GS:ffff888123c7b000(0000) knlGS:0000000000000000 [ 145.904912][ T7262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.911481][ T7262] CR2: 0000001b327f5ff8 CR3: 00000000743a3000 CR4: 00000000003526f0 [ 145.919435][ T7262] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 145.927386][ T7262] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 145.935340][ T7262] Call Trace: [ 145.938600][ T7262] [ 145.941514][ T7262] ? __pfx_dummy_pullup+0x10/0x10 [ 145.946549][ T7262] dummy_pullup+0xf3/0x170 [ 145.950954][ T7262] ? __pfx_dummy_pullup+0x10/0x10 [ 145.955970][ T7262] usb_gadget_disconnect_locked+0x142/0x4e0 [ 145.961857][ T7262] gadget_unbind_driver+0xd8/0x4f0 [ 145.966955][ T7262] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 145.972664][ T7262] device_remove+0xcb/0x180 [ 145.977152][ T7262] device_release_driver_internal+0x44e/0x620 [ 145.983209][ T7262] driver_detach+0xd8/0x1b0 [ 145.987697][ T7262] bus_remove_driver+0x13b/0x2e0 [ 145.992628][ T7262] driver_unregister+0x76/0xb0 [ 145.997376][ T7262] usb_gadget_unregister_driver+0x49/0x70 [ 146.003087][ T7262] raw_release+0x19b/0x260 [ 146.007496][ T7262] ? __pfx_raw_release+0x10/0x10 [ 146.012424][ T7262] __fput+0x3ff/0xb50 [ 146.016395][ T7262] task_work_run+0x150/0x240 [ 146.020975][ T7262] ? __pfx_task_work_run+0x10/0x10 [ 146.026083][ T7262] exit_to_user_mode_loop+0x1d8/0x700 [ 146.031442][ T7262] ? rcu_is_watching+0x13/0xc0 [ 146.036285][ T7262] do_syscall_64+0x661/0x790 [ 146.040866][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.046742][ T7262] RIP: 0033:0x7f4decd9e0d9 [ 146.051155][ T7262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.070747][ T7262] RSP: 002b:00007ffe38be9c38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 146.079148][ T7262] RAX: 0000000000000000 RBX: 00007ffe38be9d20 RCX: 00007f4decd9e0d9 [ 146.087102][ T7262] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 146.095053][ T7262] RBP: 000000000002345e R08: 0000000000000001 R09: 0000000000000000 [ 146.103008][ T7262] R10: 0000001b31620000 R11: 0000000000000246 R12: 00007ffe38be9d60 [ 146.110961][ T7262] R13: 00007f4ded025fac R14: 000000000002397c R15: 00007f4ded025fa0 [ 146.118920][ T7262] [ 146.121927][ T7262] Modules linked in: [ 146.125813][ T7262] ---[ end trace 0000000000000000 ]--- [ 146.131255][ T7262] RIP: 0010:set_link_state+0x27/0xc70 [ 146.136623][ T7262] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 9a 94 2f fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 146.156212][ T7262] RSP: 0018:ffffc90003517b90 EFLAGS: 00010046 [ 146.162263][ T7262] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 146.170248][ T7262] RDX: 0000000000000000 RSI: ffffffff87db9156 RDI: 0000000000000000 [ 146.178203][ T7262] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 146.186158][ T7262] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 146.194110][ T7262] R13: ffff888028964000 R14: 0000000000000000 R15: ffff888028964c00 [ 146.202066][ T7262] FS: 000055557dbf7500(0000) GS:ffff888123c7b000(0000) knlGS:0000000000000000 [ 146.210981][ T7262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.217547][ T7262] CR2: 0000001b327f5ff8 CR3: 00000000743a3000 CR4: 00000000003526f0 [ 146.225507][ T7262] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 146.233459][ T7262] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 146.241412][ T7262] Kernel panic - not syncing: Fatal exception [ 146.247672][ T7262] Kernel Offset: disabled [ 146.251972][ T7262] Rebooting in 86400 seconds..