last executing test programs: 30.709274559s ago: executing program 4 (id=4845): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0x0, 0xe36, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) 30.562908967s ago: executing program 4 (id=4848): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') setns(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) membarrier(0x2, 0x0) 30.456360997s ago: executing program 4 (id=4849): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="29000000200019", 0x7}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 29.541040712s ago: executing program 4 (id=4857): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(0x0, 0x2) 29.42882398s ago: executing program 4 (id=4858): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) 28.5610648s ago: executing program 4 (id=4861): r0 = io_uring_setup(0x650d, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x25, 0xab}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='fd', 0x0, r1) close_range(r0, 0xffffffffffffffff, 0x0) 28.103395977s ago: executing program 32 (id=4861): r0 = io_uring_setup(0x650d, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x25, 0xab}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='fd', 0x0, r1) close_range(r0, 0xffffffffffffffff, 0x0) 19.851726474s ago: executing program 3 (id=4938): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 19.758027918s ago: executing program 3 (id=4940): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002301000034f5ffff01000000080001"], 0x1c}}, 0x0) 19.484925086s ago: executing program 3 (id=4942): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x86c, &(0x7f00000000c0)={0x0, 0x1000, 0x10000, 0x100000, 0x75}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) 19.295354723s ago: executing program 3 (id=4947): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 19.08588813s ago: executing program 3 (id=4950): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 18.758752383s ago: executing program 3 (id=4955): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000001c0)=[0xd], &(0x7f0000000480)=[r2], &(0x7f0000000040)}) 18.540582652s ago: executing program 33 (id=4955): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000001c0)=[0xd], &(0x7f0000000480)=[r2], &(0x7f0000000040)}) 4.078140083s ago: executing program 1 (id=5149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0xfe, 0x6, 0x0, @empty, @broadcast}, {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 4.066744555s ago: executing program 6 (id=5150): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x49) 3.972029351s ago: executing program 1 (id=5151): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x10060, 0x0) 3.895600476s ago: executing program 1 (id=5153): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000000)={0xffffffffffffffef, "a5cf27d047ccbb89c1f100c4290def60e820cd8c04b1c593b61e33d495b06be46cdcd2311370ed9c07275742032bb2e44288967c70cd701ce0c12a45842875e8227d6cb40397f2eb7d49b3088b3ebc835bcca76ff6619e90cb54f7c521c679b25bcebda5fc398b9c05767955246311071fedaa9a378cc709642ac04d40ff2c71fa910da868fb3aed27b688940dc6a0d9d97ee7e3f9ec75fcbd8ca675953c2bea817becdc9dc1762e758c334d3b156be6923e78bbf23132ce96574d33cebd32164717acd9ede1791b611c80a8a693ed966363ce6da2a145d3dbd0a1"}) 3.895374915s ago: executing program 2 (id=5154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$xdp(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)='C', 0x1}], 0x1, 0x0, 0x0, 0x20004000}, 0x5880) 3.802560029s ago: executing program 2 (id=5156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0xffffffff, 0x2000, 0xe, 0x0, 0xfffffffd}) 3.547512507s ago: executing program 2 (id=5159): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="400a04000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) 2.598008823s ago: executing program 5 (id=5169): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) 2.451486617s ago: executing program 5 (id=5171): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.074783306s ago: executing program 1 (id=5174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27801000000, 0x0, 0x1, r2, 0x1}) 2.04554616s ago: executing program 5 (id=5175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.868576997s ago: executing program 5 (id=5177): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee00, &(0x7f0000000040)={0x410000000000, 0x4, 0x4c869, 0xfffffffffffffff7, 0x2, 0x80000001, 0x7, 0x1000000000df, 0x820000e0}) 1.783450338s ago: executing program 1 (id=5178): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 1.659621s ago: executing program 5 (id=5180): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = dup(r1) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000), 0x0, 0x0, 0x2) flistxattr(r1, 0x0, 0x0) 1.618291772s ago: executing program 1 (id=5181): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000119000/0x11000)=nil, 0x11000, 0x9) 1.499530063s ago: executing program 5 (id=5183): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 1.351350781s ago: executing program 2 (id=5184): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000440)={0x0, 0x74c1, 0x400, 0x9, 0x18f}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r1, 0x20847ba, 0x0, 0xc, 0x0, 0x0) 1.294641969s ago: executing program 0 (id=5185): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008084, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.112421169s ago: executing program 0 (id=5186): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.111717505s ago: executing program 2 (id=5187): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x1, 0x0) 986.209203ms ago: executing program 2 (id=5188): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fe80000000000000b94dcf5c0461c1d67f", 0x49}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000040000701"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 919.557506ms ago: executing program 6 (id=5189): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 830.950437ms ago: executing program 0 (id=5190): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, &(0x7f0000000000)=0x84) 785.981584ms ago: executing program 6 (id=5191): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x1f, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) 692.53422ms ago: executing program 0 (id=5192): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) 596.140207ms ago: executing program 6 (id=5193): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 432.028771ms ago: executing program 6 (id=5194): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa96) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 314.589771ms ago: executing program 0 (id=5195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0x28}}, 0x0) 254.407031ms ago: executing program 6 (id=5196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7fffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 0 (id=5197): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ============= [ 323.680755][ T5868] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 323.845795][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 323.862990][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.881179][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.900290][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.920091][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4202'. [ 323.929808][ T5868] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 323.929841][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.956569][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4202'. [ 323.957235][ T5868] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.968057][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4202'. [ 323.991834][ T5868] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.999873][ T5868] usb 1-1: Manufacturer: syz [ 324.017708][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4202'. [ 324.018180][ T5868] usb 1-1: config 0 descriptor?? [ 324.360726][ T5868] rc_core: IR keymap rc-hauppauge not found [ 324.368615][ T5868] Registered IR keymap rc-empty [ 324.388195][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.450771][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.762330][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 324.847762][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input46 [ 324.910730][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.930724][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.952433][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 325.000751][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 325.021262][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 325.061933][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 325.089666][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 325.119988][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 325.163061][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 325.194836][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 325.233668][ T5868] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 325.272421][ T5868] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 325.323472][ T5868] usb 1-1: USB disconnect, device number 36 [ 325.399710][ T29] audit: type=1400 audit(837.433:692): avc: denied { mounton } for pid=15374 comm="syz.2.4218" path="/831/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 325.509156][T15377] netlink: 'syz.3.4219': attribute type 83 has an invalid length. [ 325.566129][ T29] audit: type=1400 audit(837.603:693): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 325.819356][T15396] blkio.reset_stats is deprecated [ 326.142286][T15409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4232'. [ 326.174542][T15406] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4232'. [ 326.194069][ T29] audit: type=1326 audit(838.233:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.1.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0989f9c799 code=0x7fc00000 [ 326.950696][ T5853] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 326.994894][T15446] batadv_slave_1: entered promiscuous mode [ 327.009109][T15445] batadv_slave_1: left promiscuous mode [ 327.132302][ T5853] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.143655][ T5853] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 327.173820][ T5853] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.192205][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.200357][ T5853] usb 4-1: Product: syz [ 327.205062][ T5853] usb 4-1: Manufacturer: syz [ 327.220821][ T5853] usb 4-1: SerialNumber: syz [ 327.439556][T15433] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 327.456270][T15468] binder: 15466:15468 ioctl c0306201 0 returned -14 [ 328.072873][T15433] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 328.201303][T15501] netlink: 'syz.1.4274': attribute type 1 has an invalid length. [ 328.219277][T15501] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4274'. [ 328.308900][ T5853] cdc_ncm 4-1:1.0: failed to get mac address [ 328.317811][ T5853] cdc_ncm 4-1:1.0: bind() failure [ 328.344458][ T5853] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 328.381225][ T5853] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 328.400935][ T5882] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 328.414909][ T5853] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 328.436200][ T5853] usb 4-1: USB disconnect, device number 35 [ 328.570621][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 328.582065][ T5882] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 328.590150][ T5882] usb 1-1: config 0 has no interface number 0 [ 328.610600][ T5882] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 328.630610][ T5882] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 328.650623][ T5882] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 328.664804][ T5882] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 328.703010][ T5882] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 328.730708][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.741169][ T5882] usb 1-1: config 0 descriptor?? [ 328.754810][ T5882] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 329.056250][ T5882] usb 1-1: USB disconnect, device number 37 [ 329.062256][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 329.080640][T15499] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19 [ 329.094599][ T5882] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 329.201574][T15537] xt_hashlimit: size too large, truncated to 1048576 [ 329.304660][ T5943] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 329.460730][ T5943] usb 5-1: Using ep0 maxpacket: 8 [ 329.468991][ T5943] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 329.469571][ T29] audit: type=1400 audit(841.503:695): avc: denied { read } for pid=15545 comm="syz.3.4291" name="file0" dev="tmpfs" ino=4368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 329.488787][ T5943] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 329.517224][ T29] audit: type=1400 audit(841.503:696): avc: denied { open } for pid=15545 comm="syz.3.4291" path="/860/file0" dev="tmpfs" ino=4368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 329.550129][ T5943] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 329.570507][ T5943] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 329.601135][ T5943] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 329.631498][ T5943] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.683958][ T5943] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 329.705495][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.965227][ T5943] usb 5-1: usb_control_msg returned -32 [ 329.977297][ T5943] usbtmc 5-1:16.0: can't read capabilities [ 330.340621][ T5811] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 330.379751][T15585] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 330.511907][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 330.523592][ T5811] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 330.538053][ T5811] usb 4-1: config 179 has no interface number 0 [ 330.570636][ T5811] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 330.584545][ T5811] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 330.598632][ T5882] usb 5-1: USB disconnect, device number 38 [ 330.611422][ T5811] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.624959][ T5811] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 330.638323][ T5811] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 330.652117][ T5811] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 330.661948][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.678368][T15575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 330.750753][ T5943] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 330.840626][ T5811] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 330.900673][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 330.907972][ T5943] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 330.919714][ T5943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.933589][ T42] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input47 [ 330.945231][ T5943] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.959301][ T5943] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.970409][ T5943] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.984548][ T5943] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 330.993720][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.001923][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 331.009240][ T5811] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 331.020239][ T5811] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.033481][ T5811] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.046181][ T5811] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.056296][ T5811] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.069548][ T5811] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 331.079556][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.133041][T15575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.147204][T15575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.176252][ T29] audit: type=1400 audit(843.213:697): avc: denied { watch } for pid=15599 comm="syz.4.4315" path="/851" dev="tmpfs" ino=4321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 331.202461][ T29] audit: type=1400 audit(843.223:698): avc: denied { watch_sb } for pid=15599 comm="syz.4.4315" path="/851" dev="tmpfs" ino=4321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 331.250376][ T5943] usb 2-1: usb_control_msg returned -32 [ 331.258510][ T5943] usbtmc 2-1:16.0: can't read capabilities [ 331.304963][ T5811] usb 3-1: usb_control_msg returned -32 [ 331.320426][ T5811] usbtmc 3-1:16.0: can't read capabilities [ 331.370369][ T5882] usb 4-1: USB disconnect, device number 36 [ 331.370373][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 331.370506][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 331.657383][T15622] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 331.665890][ T5811] usb 2-1: USB disconnect, device number 39 [ 331.756519][ T29] audit: type=1400 audit(843.793:699): avc: denied { mount } for pid=15628 comm="syz.4.4328" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 331.778645][ T29] audit: type=1400 audit(843.793:700): avc: denied { mounton } for pid=15628 comm="syz.4.4328" path="/862/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 331.807465][ T29] audit: type=1400 audit(843.843:701): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 331.820150][ T5882] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 331.874884][T15633] comedi comedi3: pcmmio: I/O port conflict (0x8005,32) [ 332.001832][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 332.013386][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 332.028138][ T5882] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 332.037634][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.045969][ T5882] usb 1-1: Product: syz [ 332.055460][ T5882] usb 1-1: Manufacturer: syz [ 332.061256][ T5882] usb 1-1: SerialNumber: syz [ 332.069086][ T5882] usb 1-1: config 0 descriptor?? [ 332.076943][ T5882] hub 1-1:0.0: bad descriptor, ignoring hub [ 332.083129][ T5882] hub 1-1:0.0: probe with driver hub failed with error -5 [ 332.093867][ T5882] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 332.115482][T15643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4335'. [ 332.277017][ T29] audit: type=1400 audit(844.313:702): avc: denied { ioctl } for pid=15646 comm="syz.4.4337" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 332.459986][ T5882] usb 1-1: USB disconnect, device number 38 [ 332.560442][ T29] audit: type=1326 audit(844.593:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.3.4343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d8239c799 code=0x0 [ 332.661152][ T5811] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 332.813117][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 332.824245][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.834330][ T5811] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 332.844078][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.854387][ T5811] usb 2-1: config 0 descriptor?? [ 333.159709][ T5882] kernel read not supported for file /video37 (pid: 5882 comm: kworker/0:5) [ 333.202499][ T29] audit: type=1400 audit(845.243:704): avc: denied { listen } for pid=15683 comm="syz.3.4351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 333.261419][ T29] audit: type=1400 audit(845.303:705): avc: denied { ioctl } for pid=15690 comm="syz.4.4353" path="socket:[50069]" dev="sockfs" ino=50069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 333.273188][ T5811] hid_parser_main: 100 callbacks suppressed [ 333.273210][ T5811] isku 0003:1E7D:319C.0032: unknown main item tag 0x0 [ 333.302256][ T5811] isku 0003:1E7D:319C.0032: unknown main item tag 0x0 [ 333.309186][ T5811] isku 0003:1E7D:319C.0032: unknown main item tag 0x0 [ 333.316541][ T5811] isku 0003:1E7D:319C.0032: unknown main item tag 0x0 [ 333.323890][ T5811] isku 0003:1E7D:319C.0032: unknown main item tag 0x0 [ 333.330881][ T5811] isku 0003:1E7D:319C.0032: unknown main item tag 0x0 [ 333.337669][ T5811] isku 0003:1E7D:319C.0032: unknown main item tag 0x0 [ 333.378039][ T5811] isku 0003:1E7D:319C.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 333.600698][ T42] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 333.625316][ T5811] usb 3-1: USB disconnect, device number 40 [ 333.704172][ T5882] usb 2-1: USB disconnect, device number 40 [ 333.771708][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 333.797012][ T42] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 333.819140][ T42] usb 5-1: config 0 has no interface number 0 [ 333.831810][ T42] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 333.838625][T15708] serio: Serial port ptm0 [ 333.861185][ T42] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 333.882321][ T42] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 333.893363][ T42] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 333.909991][ T42] usb 5-1: Product: syz [ 333.914476][ T42] usb 5-1: SerialNumber: syz [ 333.922989][ T42] usb 5-1: config 0 descriptor?? [ 333.933804][ T42] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 333.942526][ T42] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input48 [ 334.032104][T15713] netlink: 'syz.3.4363': attribute type 1 has an invalid length. [ 334.044492][T15713] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4363'. [ 334.054327][T15713] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4363'. [ 334.070308][T15713] netlink: 'syz.3.4363': attribute type 1 has an invalid length. [ 334.079518][T15713] netlink: 634 bytes leftover after parsing attributes in process `syz.3.4363'. [ 334.189176][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 334.456052][ C0] cm109_urb_ctl_callback: 7 callbacks suppressed [ 334.456081][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 334.469569][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 334.476983][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 334.485145][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 334.492453][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 334.499704][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 334.506972][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 334.514243][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 334.521460][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 334.528633][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 334.549945][T15731] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4371'. [ 334.561043][T15729] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4371'. [ 334.561198][ T5853] usb 5-1: USB disconnect, device number 39 [ 334.570040][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 334.632364][ T5853] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 334.874747][T15747] syzkaller1: entered promiscuous mode [ 334.880341][T15747] syzkaller1: entered allmulticast mode [ 334.902011][ T29] audit: type=1400 audit(846.943:706): avc: denied { read } for pid=15744 comm="syz.3.4376" laddr=::ffff:172.20.20.10 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.395537][T15766] binder_alloc: binder_alloc_mmap_handler: 15765 200000fed000-200001000000 already mapped failed -16 [ 335.423388][T15767] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 335.750688][ T5853] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 335.863409][T15782] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.885261][T15782] batman_adv: batadv0: Interface deactivated: dummy0 [ 335.922635][ T5853] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 335.929165][T15782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.931764][ T5853] usb 3-1: config 0 has no interface number 0 [ 335.945097][ T5853] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.949001][T15782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.958495][ T5853] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 335.976200][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.985716][ T5853] usb 3-1: Product: syz [ 335.990014][ T5853] usb 3-1: Manufacturer: syz [ 335.994706][ T5853] usb 3-1: SerialNumber: syz [ 336.002783][ T5853] usb 3-1: config 0 descriptor?? [ 336.017926][ T5853] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 336.069977][T15782] batman_adv: batadv0: Interface deactivated: macsec2 [ 336.077317][ T5811] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 336.101025][ T1097] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.114357][ T1097] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.123377][ T1097] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.132439][ T1097] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.231705][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 336.247284][ T5811] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 336.262675][ T5811] usb 4-1: config 1 has no interface number 0 [ 336.268887][ T5811] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 336.279666][ T5811] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 336.301642][ T5811] usb 4-1: config 1 interface 105 has no altsetting 0 [ 336.320169][ T5811] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 336.335467][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 336.348230][ T5811] usb 4-1: Product: syz [ 336.352871][ T5811] usb 4-1: Manufacturer: syz [ 336.353559][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 336.353573][ T29] audit: type=1326 audit(848.393:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15772 comm="syz.0.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0db99c799 code=0x7fc00000 [ 336.357554][ T5811] usb 4-1: SerialNumber: syz [ 336.395616][T15784] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 336.411203][T15784] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 336.831882][T15784] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 336.839169][T15784] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 337.261713][ T5811] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 337.262092][ T5811] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 337.262537][ T5811] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 337.285032][ T5811] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 02:9a:42:e8:9a:4a [ 337.287544][ T5811] usb 4-1: USB disconnect, device number 37 [ 337.288938][ T5811] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 337.318258][ T29] audit: type=1400 audit(849.343:710): avc: denied { remount } for pid=15818 comm="syz.0.4405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 337.343943][ T5811] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 337.351668][ T29] audit: type=1400 audit(849.383:711): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 337.370120][ T5811] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 337.409070][ T5811] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 337.935431][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4415'. [ 338.021298][T15846] vivid-000: disconnect [ 338.028124][T15845] vivid-000: reconnect [ 338.161431][ T5811] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 338.310628][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 338.321843][ T5811] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 338.340783][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 338.362997][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.380639][ T5811] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.410777][ T5811] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.419831][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.534913][ T42] usb 3-1: USB disconnect, device number 41 [ 338.583390][ T42] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 338.663975][ T5811] usb 4-1: GET_CAPABILITIES returned 0 [ 338.669858][ T5811] usbtmc 4-1:16.0: can't read capabilities [ 338.870625][ T5853] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 338.890799][T15840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.921074][T15840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.957478][ T42] usb 4-1: USB disconnect, device number 38 [ 339.033125][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 339.043303][ T5853] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 339.052723][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.065347][ T5853] usb 1-1: Product: syz [ 339.069533][ T5853] usb 1-1: Manufacturer: syz [ 339.074976][ T5853] usb 1-1: SerialNumber: syz [ 339.107525][ T5853] usb 1-1: config 0 descriptor?? [ 339.257801][ T29] audit: type=1400 audit(851.293:712): avc: denied { map } for pid=15879 comm="syz.1.4433" path="socket:[50466]" dev="sockfs" ino=50466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 339.450760][ T5882] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 339.526314][ T5853] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 339.571401][ T5853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.591697][ T5853] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 339.609974][ T5853] usb 1-1: media controller created [ 339.625536][ T5882] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 339.652097][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.671632][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.692821][ T5882] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 339.704506][T15888] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 339.710592][ T5882] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 339.722090][ T5882] usb 5-1: Manufacturer: syz [ 339.732039][ T5882] usb 5-1: config 0 descriptor?? [ 339.851890][ T5882] rc_core: IR keymap rc-hauppauge not found [ 339.866119][ T5882] Registered IR keymap rc-empty [ 339.872569][ T5882] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 339.886917][ T5882] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input49 [ 339.990592][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 340.022445][T15902] SELinux: ebitmap: empty map [ 340.027648][T15902] SELinux: failed to load policy [ 340.093971][T15906] loop9: detected capacity change from 0 to 2640 [ 340.101669][ T5799] buffer_io_error: 10 callbacks suppressed [ 340.101684][ T5799] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.118490][ T5799] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.126798][ T5799] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.136464][ T5799] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.144997][ T5799] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.154946][ T5799] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.176252][ T5799] loop9: unable to read partition table [ 340.183117][T15906] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 340.192713][T15909] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 340.202424][ C0] igorplugusb 5-1:0.0: receive overflow, at least 33 lost [ 340.203227][T15909] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 340.218290][T15909] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 340.233311][T15906] ldm_validate_partition_table(): Disk read failed. [ 340.240064][T15906] Dev loop9: unable to read RDB block 0 [ 340.246550][T15906] loop9: unable to read partition table [ 340.252845][T15906] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 340.261041][ T5853] zl10353_read_register: readreg error (reg=127, ret==0) [ 340.275656][ T5853] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 340.293918][ T5853] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 340.323404][ T5853] usb 1-1: USB disconnect, device number 39 [ 340.394147][ T5853] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 340.428932][ T1207] usb 5-1: USB disconnect, device number 40 [ 340.517331][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4450'. [ 340.529783][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4450'. [ 341.071959][ T5853] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 341.100793][ T5882] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 341.253680][ T5853] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 341.262813][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 341.268214][ T5853] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 341.276635][ T5853] usb 2-1: Product: syz [ 341.280855][ T5853] usb 2-1: Manufacturer: syz [ 341.285459][ T5853] usb 2-1: SerialNumber: syz [ 341.292374][ T5882] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 341.300531][ T5882] usb 1-1: config 0 has no interface number 0 [ 341.306710][ T5882] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 341.317366][ T5853] usb 2-1: config 0 descriptor?? [ 341.324643][ T5853] ch341 2-1:0.0: ch341-uart converter detected [ 341.332003][ T5882] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 341.341703][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.349711][ T5882] usb 1-1: Product: syz [ 341.353914][ T5882] usb 1-1: Manufacturer: syz [ 341.358520][ T5882] usb 1-1: SerialNumber: syz [ 341.365199][ T5882] usb 1-1: config 0 descriptor?? [ 341.374018][ T5882] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 341.383825][ T5882] em28xx 1-1:0.132: Video interface 132 found: [ 341.778220][ T5882] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 342.200298][ T5882] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 342.240625][ T5882] em28xx 1-1:0.132: board has no eeprom [ 342.320674][ T5882] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 342.329290][ T5882] em28xx 1-1:0.132: analog set to bulk mode. [ 342.337168][ T5853] ch341-uart ttyUSB0: failed to read break control: -71 [ 342.346780][ T5853] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 342.356318][T15973] em28xx 1-1:0.132: Registering V4L2 extension [ 342.367803][ T5882] usb 1-1: USB disconnect, device number 40 [ 342.375278][ T5853] usb 2-1: USB disconnect, device number 41 [ 342.383302][ T5882] em28xx 1-1:0.132: Disconnecting em28xx [ 342.385022][T15958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.390416][ T5853] ch341 2-1:0.0: device disconnected [ 342.482753][T15958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.552466][T15973] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 342.560211][T15973] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 342.571091][T15973] em28xx 1-1:0.132: No AC97 audio processor [ 342.587442][T15973] usb 1-1: Decoder not found [ 342.592291][T15973] em28xx 1-1:0.132: failed to create media graph [ 342.598718][T15973] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 342.611978][T15973] em28xx 1-1:0.132: Remote control support is not available for this card. [ 342.621173][ T5882] em28xx 1-1:0.132: Closing input extension [ 342.635179][ T5882] em28xx 1-1:0.132: Freeing device [ 343.089260][T15959] geneve2: entered promiscuous mode [ 343.104102][T15964] syzkaller1: entered promiscuous mode [ 343.109721][T15964] syzkaller1: entered allmulticast mode [ 343.128592][ T464] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.156096][ T464] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 58059 - 0 [ 343.182339][ T464] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.219684][ T464] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 58059 - 0 [ 343.300108][ T464] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.320304][ T464] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 58059 - 0 [ 343.355831][ T464] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.375918][ T464] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 58059 - 0 [ 343.392085][T15997] input: syz0 as /devices/virtual/input/input50 [ 343.475797][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4480'. [ 343.556134][T16002] hsr_slave_1 (unregistering): left promiscuous mode [ 343.926356][T16025] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4490'. [ 343.958358][T16025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4490'. [ 343.984181][T16025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4490'. [ 344.159865][T16032] sctp: [Deprecated]: syz.0.4491 (pid 16032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.159865][T16032] Use struct sctp_sack_info instead [ 344.213412][T16040] sctp: [Deprecated]: syz.0.4491 (pid 16040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.213412][T16040] Use struct sctp_sack_info instead [ 345.080650][ T29] audit: type=1400 audit(857.103:713): avc: denied { append } for pid=16068 comm="syz.1.4511" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 345.401871][T15970] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 345.560652][T15970] usb 3-1: Using ep0 maxpacket: 16 [ 345.573564][T15970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.611826][T15970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.638183][T15970] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 345.681610][T15970] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 345.713734][T15970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.750447][T15970] usb 3-1: config 0 descriptor?? [ 345.793656][ T29] audit: type=1400 audit(857.833:714): avc: denied { connect } for pid=16102 comm="syz.0.4526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 345.888897][T16108] IPVS: Scheduler module ip_vs_sip not found [ 345.900453][T16108] IPVS: length: 141 != 8 [ 345.910690][ T1207] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 346.060684][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 346.078253][ T1207] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 346.087495][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.096025][ T1207] usb 4-1: Product: syz [ 346.100221][ T1207] usb 4-1: Manufacturer: syz [ 346.105660][ T1207] usb 4-1: SerialNumber: syz [ 346.113135][ T1207] usb 4-1: config 0 descriptor?? [ 346.120253][ T1207] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 346.128263][ T1207] dvb-usb: bulk message failed: -22 (4/0) [ 346.134519][ T1207] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 346.144979][ T1207] dvb-usb: bulk message failed: -22 (5/0) [ 346.151060][ T1207] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 346.161584][ T5875] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 346.172961][T15970] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 346.180183][T15970] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max [ 346.191657][ T1207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 346.211483][ T1207] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 346.219508][ T1207] usb 4-1: media controller created [ 346.232379][T15970] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0033/input/input51 [ 346.255233][ T1207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.280378][ T1207] usb 4-1: selecting invalid altsetting 3 [ 346.286678][ T1207] ttusb2: set interface to alts=3 failed [ 346.325972][ T1207] DVB: Unable to find symbol tda10086_attach() [ 346.336138][T15970] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 346.343889][T16097] dvb-usb: bulk message failed: -22 (7/0) [ 346.353581][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.366495][ T1207] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 346.386786][T16097] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 346.396948][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 346.396982][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 346.397062][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 346.409033][ T1207] dvb-usb: bulk message failed: -22 (4/0) [ 346.446927][T16097] ttusb2: i2c transfer failed. [ 346.451846][ T5875] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 346.461807][T15970] usb 3-1: USB disconnect, device number 42 [ 346.470807][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 346.478891][ T5875] usb 2-1: Product: syz [ 346.486360][ T1207] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 346.498534][ T5875] usb 2-1: Manufacturer: syz [ 346.504729][ T5875] usb 2-1: SerialNumber: syz [ 346.511802][ T1207] dvb-usb: bulk message failed: -22 (5/0) [ 346.521237][ T5875] usb 2-1: config 0 descriptor?? [ 346.528890][T16111] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 346.545057][ T1207] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 346.561797][ T1207] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 346.590983][ T1207] usb 4-1: USB disconnect, device number 39 [ 346.669354][ T1207] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 346.679235][T16126] fido_id[16126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 346.722581][ T5875] rc_core: IR keymap rc-imon-rsc not found [ 346.728883][ T5875] Registered IR keymap rc-empty [ 346.736474][ T5875] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 346.771470][ T5875] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input52 [ 346.822424][ T5875] usb 2-1: USB disconnect, device number 42 [ 347.110387][T16137] GUP no longer grows the stack in syz.2.4540 (16137): 200000004000-20000000a000 (200000003000) [ 347.122248][T16137] CPU: 1 UID: 0 PID: 16137 Comm: syz.2.4540 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.122285][T16137] Tainted: [L]=SOFTLOCKUP [ 347.122294][T16137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.122313][T16137] Call Trace: [ 347.122321][T16137] [ 347.122330][T16137] dump_stack_lvl+0x100/0x190 [ 347.122374][T16137] gup_vma_lookup.cold+0x83/0x96 [ 347.122409][T16137] __get_user_pages+0x241/0x34d0 [ 347.122448][T16137] ? __pfx___get_user_pages+0x10/0x10 [ 347.122474][T16137] ? find_held_lock+0x2b/0x80 [ 347.122509][T16137] __gup_longterm_locked+0x87d/0x16f0 [ 347.122535][T16137] ? __lock_acquire+0x4a5/0x2630 [ 347.122559][T16137] ? avc_has_perm+0x135/0x1e0 [ 347.122582][T16137] ? __pfx___gup_longterm_locked+0x10/0x10 [ 347.122630][T16137] pin_user_pages_remote+0xed/0x140 [ 347.122659][T16137] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 347.122698][T16137] process_vm_rw_core.constprop.0+0x412/0x950 [ 347.122740][T16137] ? __kasan_kmalloc+0xaa/0xb0 [ 347.122781][T16137] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 347.122837][T16137] ? iovec_from_user+0xda/0x140 [ 347.122864][T16137] process_vm_rw+0x309/0x370 [ 347.122901][T16137] ? __pfx_process_vm_rw+0x10/0x10 [ 347.122944][T16137] ? __pfx_css_rstat_updated+0x10/0x10 [ 347.122992][T16137] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 347.123028][T16137] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 347.123078][T16137] ? xfd_validate_state+0x129/0x190 [ 347.123121][T16137] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 347.123156][T16137] ? do_syscall_64+0x95/0xf80 [ 347.123186][T16137] ? lockdep_hardirqs_on+0x78/0x100 [ 347.123215][T16137] do_syscall_64+0x106/0xf80 [ 347.123243][T16137] ? clear_bhb_loop+0x40/0x90 [ 347.123272][T16137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.123296][T16137] RIP: 0033:0x7fb4d519c799 [ 347.123323][T16137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.123346][T16137] RSP: 002b:00007fb4d5fc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 347.123372][T16137] RAX: ffffffffffffffda RBX: 00007fb4d5415fa0 RCX: 00007fb4d519c799 [ 347.123387][T16137] RDX: 0000000000000020 RSI: 0000200000001c80 RDI: 000000000000077c [ 347.123400][T16137] RBP: 00007fb4d5232c99 R08: 0000000000000001 R09: 0000000000000000 [ 347.123414][T16137] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000000 [ 347.123427][T16137] R13: 00007fb4d5416038 R14: 00007fb4d5415fa0 R15: 00007fffcd5352b8 [ 347.123458][T16137] [ 347.510684][ T5875] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 347.636323][T16151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4543'. [ 347.665999][ T5875] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.678601][ T5875] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 347.689165][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.698628][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 347.710182][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 347.764622][ T5875] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.773938][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.800614][ T5875] usb 5-1: Product: syz [ 347.814390][ T5875] usb 5-1: Manufacturer: syz [ 347.836373][ T5875] cdc_wdm 5-1:1.0: skipping garbage [ 347.855172][ T5875] cdc_wdm 5-1:1.0: skipping garbage [ 347.877406][ T5875] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 347.895493][ T5875] cdc_wdm 5-1:1.0: Unknown control protocol [ 347.999085][ T29] audit: type=1400 audit(860.033:715): avc: denied { write } for pid=16166 comm="syz.0.4553" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 348.164019][T16176] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4557'. [ 348.176415][T16176] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4557'. [ 348.262894][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4559'. [ 348.309482][T16182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.331546][ T5875] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 348.532206][ T5875] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.540918][ T5853] usb 5-1: USB disconnect, device number 41 [ 348.552254][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.596945][ T5875] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.607931][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.617111][ T5875] usb 2-1: Product: syz [ 348.626881][ T5875] usb 2-1: Manufacturer: syz [ 348.632995][ T5875] usb 2-1: SerialNumber: syz [ 348.641882][ T29] audit: type=1400 audit(860.673:716): avc: denied { setcurrent } for pid=16194 comm="syz.0.4566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 348.669746][ T5875] cdc_mbim 2-1:1.0: skipping garbage [ 349.049345][T16219] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4577'. [ 349.362515][ T29] audit: type=1400 audit(861.403:717): avc: denied { read } for pid=16237 comm="syz.0.4583" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 349.392410][ T29] audit: type=1400 audit(861.433:718): avc: denied { open } for pid=16237 comm="syz.0.4583" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 349.670699][ T1207] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 349.689042][ T5875] cdc_mbim 2-1:1.0: bind() failure [ 349.698693][ T5875] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 349.710413][ T5875] cdc_ncm 2-1:1.1: bind() failure [ 349.733180][ T5875] usb 2-1: USB disconnect, device number 43 [ 349.831439][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 349.838410][ T1207] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.848892][ T1207] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.859298][ T1207] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 349.869219][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 349.877740][ T1207] usb 3-1: SerialNumber: syz [ 349.897453][ T1207] usb 3-1: 0:2 : does not exist [ 350.102193][ T1207] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 350.128399][ T1207] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 350.150877][ T1207] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 350.184778][ T1207] usb 3-1: USB disconnect, device number 43 [ 350.589430][T16263] tun0: tun_chr_ioctl cmd 1074025675 [ 350.591868][ T29] audit: type=1400 audit(862.623:719): avc: denied { write } for pid=16260 comm="syz.1.4593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 350.597909][T16263] tun0: persist enabled [ 350.680779][T16263] tun0: tun_chr_ioctl cmd 1074025675 [ 350.693790][T16263] tun0: persist disabled [ 350.894128][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4598'. [ 351.410644][ T5853] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 351.574223][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 351.603589][ T5853] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 351.626789][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.661316][T16294] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 351.668760][ T5853] usb 1-1: config 0 descriptor?? [ 351.683549][T16280] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 352.132460][ T5853] wacom 0003:056A:5000.0034: unknown main item tag 0x0 [ 352.139366][ T5853] wacom 0003:056A:5000.0034: unknown main item tag 0x0 [ 352.160721][ T5853] wacom 0003:056A:5000.0034: unknown main item tag 0x0 [ 352.168360][ T5853] wacom 0003:056A:5000.0034: unknown main item tag 0x0 [ 352.176393][ T5853] wacom 0003:056A:5000.0034: unknown main item tag 0x0 [ 352.183551][ T5853] wacom 0003:056A:5000.0034: unknown main item tag 0x0 [ 352.194907][ T5853] wacom 0003:056A:5000.0034: unknown main item tag 0x0 [ 352.204139][ T5853] wacom 0003:056A:5000.0034: unknown main item tag 0x0 [ 352.211856][ T5853] wacom 0003:056A:5000.0034: unknown main item tag 0x0 [ 352.218739][ T5853] wacom 0003:056A:5000.0034: unknown main item tag 0x0 [ 352.243122][ T5853] wacom 0003:056A:5000.0034: reserved main item tag 0xd [ 352.269601][ T5853] wacom 0003:056A:5000.0034: hidraw0: USB HID v7f.fd Device [HID 056a:5000] on usb-dummy_hcd.0-1/input0 [ 352.315046][ T5853] usb 1-1: USB disconnect, device number 41 [ 352.378045][T16318] fido_id[16318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 352.401183][ T1207] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 352.495409][T16320] delete_channel: no stack [ 352.504313][ T29] audit: type=1400 audit(864.543:720): avc: denied { setopt } for pid=16319 comm="syz.2.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 352.575220][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.598122][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.611760][ T1207] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.653340][ T1207] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.692525][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.722491][ T1207] usb 4-1: config 0 descriptor?? [ 352.816937][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4624'. [ 352.927013][T16343] SELinux: failed to load policy [ 353.159546][ T1207] plantronics 0003:047F:FFFF.0035: reserved main item tag 0xd [ 353.201053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 353.225540][ T1207] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 353.351157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 353.351420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 353.368014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 353.379074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 353.545404][ T5853] usb 4-1: USB disconnect, device number 40 [ 353.604463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 353.613192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 353.631614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 353.640720][ T1207] kernel read not supported for file /dsp1 (pid: 1207 comm: kworker/1:2) [ 353.688760][T16376] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 353.851775][T16384] syzkaller1: entered promiscuous mode [ 353.862152][ T29] audit: type=1400 audit(865.903:721): avc: denied { append } for pid=16387 comm="syz.2.4646" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 353.900641][T16384] syzkaller1: entered allmulticast mode [ 353.922307][ T29] audit: type=1400 audit(865.903:722): avc: denied { ioctl } for pid=16387 comm="syz.2.4646" path="/dev/usbmon4" dev="devtmpfs" ino=728 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 354.120918][ T29] audit: type=1400 audit(866.153:723): avc: denied { mount } for pid=16396 comm="syz.0.4650" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 354.200924][ T5853] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 354.262393][T16407] Invalid argument reading file caps for ./file0 [ 354.362913][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.377781][ T5853] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 354.390948][T16413] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16413 comm=syz.0.4658 [ 354.407398][T16418] syzkaller1: entered promiscuous mode [ 354.416223][T16418] syzkaller1: entered allmulticast mode [ 354.420962][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.428017][T16413] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16413 comm=syz.0.4658 [ 354.445150][ T5853] usb 5-1: config 0 descriptor?? [ 354.463865][ T5853] pwc: Askey VC010 type 2 USB webcam detected. [ 354.793987][ T29] audit: type=1400 audit(866.833:724): avc: denied { bind } for pid=16440 comm="syz.3.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 354.849195][T16443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4671'. [ 354.865868][ T5853] pwc: recv_control_msg error -32 req 02 val 2b00 [ 354.889364][T16445] input: syz1 as /devices/virtual/input/input57 [ 354.924642][ T29] audit: type=1400 audit(866.963:725): avc: denied { audit_write } for pid=16446 comm="syz.3.4673" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 354.999391][ T29] audit: type=1400 audit(867.033:726): avc: denied { lock } for pid=16450 comm="syz.0.4675" path="socket:[52726]" dev="sockfs" ino=52726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 355.025741][T15973] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 355.078329][ T5853] pwc: recv_control_msg error -71 req 02 val 2c00 [ 355.087554][ T5853] pwc: recv_control_msg error -71 req 04 val 1000 [ 355.095864][ T5853] pwc: recv_control_msg error -71 req 04 val 1300 [ 355.103120][ T5853] pwc: recv_control_msg error -71 req 04 val 1400 [ 355.109997][ T5853] pwc: recv_control_msg error -71 req 02 val 2000 [ 355.117987][ T5853] pwc: recv_control_msg error -71 req 02 val 2100 [ 355.125121][ T5853] pwc: recv_control_msg error -71 req 04 val 1500 [ 355.133264][ T5853] pwc: recv_control_msg error -71 req 02 val 2500 [ 355.140133][ T5853] pwc: recv_control_msg error -71 req 02 val 2400 [ 355.147334][ T5853] pwc: recv_control_msg error -71 req 02 val 2600 [ 355.154753][ T5853] pwc: recv_control_msg error -71 req 02 val 2900 [ 355.161890][ T5853] pwc: recv_control_msg error -71 req 02 val 2800 [ 355.169242][ T5853] pwc: recv_control_msg error -71 req 04 val 1100 [ 355.177399][ T5853] pwc: recv_control_msg error -71 req 04 val 1200 [ 355.187621][ T5853] pwc: Registered as video103. [ 355.193920][T15973] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 355.202264][T15973] usb 2-1: config 1 has no interface number 0 [ 355.208459][T15973] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 355.222756][ T5853] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input58 [ 355.232450][T15973] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 355.284086][ T5853] usb 5-1: USB disconnect, device number 42 [ 355.295914][T15973] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.348373][T15973] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 355.357843][T15973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.383652][T15973] usb 2-1: Product: syz [ 355.404074][T15973] usb 2-1: Manufacturer: syz [ 355.426396][T15973] usb 2-1: SerialNumber: syz [ 355.455381][T16437] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 355.482549][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4679'. [ 355.506956][T16461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4679'. [ 355.544886][T16461] geneve2: entered promiscuous mode [ 355.561229][T16461] geneve2: entered allmulticast mode [ 355.576840][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.596062][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.641293][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.650487][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.670375][T16437] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 355.905683][T15973] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 355.920710][ T1207] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 355.928375][ T5853] IPVS: starting estimator thread 0... [ 355.931418][T16477] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 356.041250][T16481] IPVS: using max 35 ests per chain, 84000 per kthread [ 356.092762][ T1207] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.115295][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 356.136790][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.156982][ T1207] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.172752][ T1207] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.185681][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.198857][ T1207] usb 3-1: config 0 descriptor?? [ 356.211910][T16465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 356.260656][ T5875] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 356.368960][ T29] audit: type=1400 audit(868.403:727): avc: denied { ioctl } for pid=16492 comm="syz.3.4693" path="socket:[53707]" dev="sockfs" ino=53707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 356.457480][ T5875] usb 1-1: unable to get BOS descriptor or descriptor too short [ 356.475928][ T5875] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 356.506436][ T5875] usb 1-1: can't read configurations, error -71 [ 356.514237][T15970] usb 2-1: USB disconnect, device number 44 [ 356.533733][T15970] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 356.676259][ T1207] plantronics 0003:047F:FFFF.0036: reserved main item tag 0xd [ 356.689049][T15970] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 356.736011][ T1207] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 356.988250][T15970] usb 3-1: USB disconnect, device number 44 [ 357.060655][T15973] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 357.240644][T15973] usb 5-1: Using ep0 maxpacket: 16 [ 357.263735][T15973] usb 5-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 357.281202][T15973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.307544][T15973] usb 5-1: Product: syz [ 357.321131][T15973] usb 5-1: Manufacturer: syz [ 357.325871][T15973] usb 5-1: SerialNumber: syz [ 357.396009][ T5853] IPVS: starting estimator thread 0... [ 357.491239][T16539] IPVS: using max 39 ests per chain, 93600 per kthread [ 357.956069][ T29] audit: type=1400 audit(869.993:728): avc: denied { setattr } for pid=16566 comm="syz.1.4718" name="pfkey" dev="proc" ino=4026533330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 357.986214][T15973] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 358.021578][T16572] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4720'. [ 358.050657][T16572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4720'. [ 358.090893][T16572] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4720'. [ 358.188365][T15973] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 358.311681][ T5853] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 358.321700][T15973] usb 5-1: USB disconnect, device number 43 [ 358.457877][ T29] audit: type=1800 audit(870.493:729): pid=16587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.4725" name="/newroot/929/pids.events" dev="tmpfs" ino=4735 res=0 errno=0 [ 358.501313][ T5853] usb 4-1: Using ep0 maxpacket: 16 [ 358.518885][ T5853] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 358.530632][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.548857][ T5853] usb 4-1: Product: syz [ 358.558956][ T5853] usb 4-1: Manufacturer: syz [ 358.564480][ T5853] usb 4-1: SerialNumber: syz [ 358.569448][ T29] audit: type=1400 audit(870.603:730): avc: denied { ioctl } for pid=16593 comm="syz.2.4727" path="cgroup:[4026532840]" dev="nsfs" ino=4026532840 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 358.582125][ T5853] usb 4-1: config 0 descriptor?? [ 358.669130][ T29] audit: type=1400 audit(870.703:731): avc: denied { remount } for pid=16595 comm="syz.2.4728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 358.716131][ T29] audit: type=1400 audit(870.753:732): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 358.898383][T16603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.024425][ T5853] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 359.034472][ T5853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 359.050502][ T5853] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 359.065045][ T5853] usb 4-1: media controller created [ 359.080383][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.185076][T16617] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.4738'. [ 359.201385][T16617] openvswitch: netlink: Duplicate key (type 2). [ 359.397013][ T29] audit: type=1326 audit(871.433:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.4741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0989f9c799 code=0x0 [ 359.450162][ T29] audit: type=1326 audit(871.483:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0989f9c799 code=0x7ffc0000 [ 359.474729][ T29] audit: type=1326 audit(871.513:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0989f9c799 code=0x7ffc0000 [ 359.498805][ T29] audit: type=1326 audit(871.513:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0989f5cfce code=0x7ffc0000 [ 359.641633][ T5853] zl10353_read_register: readreg error (reg=127, ret==0) [ 359.649369][T16577] dtv5100: wlen = 0, aborting. [ 359.654650][ T5853] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 359.678391][ T5853] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 359.707500][ T5853] usb 4-1: USB disconnect, device number 41 [ 359.783369][ T5853] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 359.971448][ T5875] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 360.152590][ T5875] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 360.161401][ T5875] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 360.181391][ T5875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 360.192257][ T5875] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.221094][ T5875] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 360.241172][ T5875] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.256655][T16651] mkiss: ax0: crc mode is auto. [ 360.277173][ T5875] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 360.288981][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 360.301289][ T5875] usb 3-1: Product: syz [ 360.305472][ T5875] usb 3-1: Manufacturer: syz [ 360.324357][T16639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 360.358811][ T5875] cdc_wdm 3-1:1.0: skipping garbage [ 360.376098][ T5875] cdc_wdm 3-1:1.0: skipping garbage [ 360.402800][ T5875] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 360.413635][ T5875] cdc_wdm 3-1:1.0: Unknown control protocol [ 360.490328][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4756'. [ 360.520516][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4756'. [ 360.582775][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 360.589626][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 360.595918][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 360.602525][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 360.609449][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 360.610640][ T5853] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 360.616066][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 360.631270][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 360.637876][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 360.644127][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 360.650724][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 360.658138][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 360.664747][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 360.671540][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 360.678147][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 360.684439][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 360.691041][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 360.697354][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 360.703943][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 360.710634][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 360.717238][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 360.725472][ T5875] usb 3-1: USB disconnect, device number 45 [ 360.725530][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 360.791633][T16669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4758'. [ 360.800788][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 360.813942][T16669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4758'. [ 360.824082][ T5853] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 360.842844][ T5853] usb 2-1: config 0 has no interface number 0 [ 360.850990][ T5853] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 360.867770][ T5853] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 360.889133][ T5853] usb 2-1: config 0 interface 41 has no altsetting 0 [ 360.907739][ T5853] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 360.917276][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.937132][ T5853] usb 2-1: Product: syz [ 360.947232][ T5853] usb 2-1: Manufacturer: syz [ 360.952150][ T5853] usb 2-1: SerialNumber: syz [ 360.970326][ T5853] usb 2-1: config 0 descriptor?? [ 360.982621][T16656] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 360.990444][T16656] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 361.154096][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4763'. [ 361.166450][T16679] netlink: 'syz.4.4763': attribute type 30 has an invalid length. [ 361.178855][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4763'. [ 361.293902][T16656] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 361.320817][T16656] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 361.545987][ T5853] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 361.558694][ T5853] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 361.576293][ T5853] usb 2-1: USB disconnect, device number 45 [ 362.080881][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 362.080898][ T29] audit: type=1400 audit(874.123:1154): avc: denied { watch watch_reads } for pid=16699 comm="syz.4.4771" path="pipe:[5195]" dev="pipefs" ino=5195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 362.124335][ T29] audit: type=1400 audit(874.153:1155): avc: denied { relabelfrom } for pid=16699 comm="syz.4.4771" name="" dev="pipefs" ino=54119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 362.295394][ T29] audit: type=1400 audit(874.333:1156): avc: denied { listen } for pid=16704 comm="syz.1.4773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.869588][ T29] audit: type=1400 audit(874.903:1157): avc: denied { shutdown } for pid=16730 comm="syz.3.4782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 363.005873][T16741] loop5: detected capacity change from 0 to 5167 [ 363.047289][T16741] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 363.118289][ T9222] buffer_io_error: 346 callbacks suppressed [ 363.118307][ T9222] Buffer I/O error on dev loop5, logical block 645, async page read [ 363.193920][ T9222] Buffer I/O error on dev loop5, logical block 645, async page read [ 363.426999][ T29] audit: type=1400 audit(875.463:1158): avc: denied { write } for pid=16750 comm="syz.0.4789" name="anycast6" dev="proc" ino=4026533450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 363.849015][T16776] vlan2: entered promiscuous mode [ 363.859141][T16776] bond0: entered promiscuous mode [ 363.864759][T16776] bond_slave_0: entered promiscuous mode [ 363.875310][T16776] bond_slave_1: entered promiscuous mode [ 363.900795][T16776] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 363.908756][T16776] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 364.042343][ T1207] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 364.124703][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4807'. [ 364.243874][ T1207] usb 2-1: Using ep0 maxpacket: 16 [ 364.261901][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.281431][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.300626][ T1207] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.330668][ T1207] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 364.350501][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.390346][ T1207] usb 2-1: config 0 descriptor?? [ 364.720620][ T5853] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 364.823541][ T1207] HID 045e:07da: Invalid code 65791 type 1 [ 364.836461][ T29] audit: type=1400 audit(876.873:1159): avc: denied { mounton } for pid=16819 comm="syz.2.4820" path="/946/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 364.866972][ T1207] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0037/input/input60 [ 364.881255][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 364.912619][ T1207] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 364.927863][ T5853] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 364.970008][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.113955][ T1207] usb 2-1: USB disconnect, device number 46 [ 365.130714][ T5853] usb 1-1: Product: syz [ 365.134898][ T5853] usb 1-1: Manufacturer: syz [ 365.139488][ T5853] usb 1-1: SerialNumber: syz [ 365.158079][ T5853] usb 1-1: config 0 descriptor?? [ 365.179909][ T5853] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 365.208932][T16820] ./file0: Can't open blockdev [ 365.211968][ T5853] usb 1-1: Detected FT-X [ 365.307833][T16822] ./file0: Can't open blockdev [ 365.398363][ T5853] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 365.412498][T16832] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 365.435304][T16832] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 365.823918][ T5853] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 365.964499][ T5820] Bluetooth: hci5: sending frame failed (-49) [ 365.974730][ T5808] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 366.046381][ T5853] usb 1-1: USB disconnect, device number 44 [ 366.073587][ T5853] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 366.080675][ T1207] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 366.105119][ T5853] ftdi_sio 1-1:0.0: device disconnected [ 366.272074][ T1207] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 366.281184][ T1207] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 366.308653][ T1207] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 366.340637][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.348641][ T1207] usb 4-1: Product: syz [ 366.361891][ T1207] usb 4-1: Manufacturer: syz [ 366.367653][ T1207] usb 4-1: SerialNumber: syz [ 366.376587][ T1207] usb 4-1: config 0 descriptor?? [ 366.571053][T16870] loop5: detected capacity change from 0 to 7 [ 366.597932][T16870] Dev loop5: unable to read RDB block 7 [ 366.607285][T16870] loop5: unable to read partition table [ 366.613466][T16870] loop5: partition table beyond EOD, truncated [ 366.641901][T16870] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 367.112697][ T1207] mos7840 4-1:0.0: required endpoints missing [ 367.120830][T15970] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 367.140999][ T1207] usb 4-1: USB disconnect, device number 42 [ 367.290795][T15970] usb 1-1: Using ep0 maxpacket: 32 [ 367.301217][T15970] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 367.317663][T15970] usb 1-1: config 0 has no interface number 0 [ 367.330638][T15970] usb 1-1: config 0 interface 184 has no altsetting 0 [ 367.351075][T15970] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 367.360147][T15970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.376499][T15970] usb 1-1: Product: syz [ 367.390605][T15970] usb 1-1: Manufacturer: syz [ 367.395851][T15970] usb 1-1: SerialNumber: syz [ 367.411226][T15970] usb 1-1: config 0 descriptor?? [ 368.029418][T15970] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 368.052055][T15970] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 368.102701][ T1207] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 368.272468][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 368.285194][T15970] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 368.315358][T15970] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 368.330735][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.351678][T15970] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 368.361934][ T1207] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 368.373727][T15970] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 368.385123][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.412031][ T1207] usb 4-1: config 0 descriptor?? [ 368.420645][T15970] usb 1-1: USB disconnect, device number 45 [ 368.612176][ T5853] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 368.790674][ T5853] usb 3-1: Using ep0 maxpacket: 8 [ 368.806291][ T5853] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 368.815590][ T5853] usb 3-1: config 179 has no interface number 0 [ 368.828285][ T1207] hid_parser_main: 448 callbacks suppressed [ 368.828307][ T1207] isku 0003:1E7D:319C.0038: unknown main item tag 0x0 [ 368.833365][ T5853] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 368.841282][ T1207] isku 0003:1E7D:319C.0038: unknown main item tag 0x0 [ 368.874087][ T5853] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 368.886129][ T1207] isku 0003:1E7D:319C.0038: unknown main item tag 0x0 [ 368.893396][ T1207] isku 0003:1E7D:319C.0038: unknown main item tag 0x0 [ 368.906798][ T1207] isku 0003:1E7D:319C.0038: unknown main item tag 0x0 [ 368.916833][ T5853] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 368.924425][ T1207] isku 0003:1E7D:319C.0038: unknown main item tag 0x0 [ 368.946535][ T1207] isku 0003:1E7D:319C.0038: unknown main item tag 0x0 [ 368.950916][ T5853] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 368.979894][ T5853] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 368.981489][ T1207] isku 0003:1E7D:319C.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 369.000587][ T5853] usb 3-1: config 179 interface 65 has no altsetting 0 [ 369.037903][ T5853] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 369.045643][ T1207] isku 0003:1E7D:319C.0038: couldn't init struct isku_device [ 369.054968][ T1207] isku 0003:1E7D:319C.0038: couldn't install keyboard [ 369.070655][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.073553][ T1207] isku 0003:1E7D:319C.0038: probe with driver isku failed with error -32 [ 369.118349][ T1207] usb 4-1: USB disconnect, device number 43 [ 369.141430][ T5853] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input61 [ 369.187820][T16918] fido_id[16918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 369.275528][ T5164] input input61: unable to receive magic message: -110 [ 369.323696][ T5164] input input61: unable to receive magic message: -32 [ 369.362269][ T5164] input input61: unable to receive magic message: -32 [ 369.380796][ T5164] input input61: unable to receive magic message: -32 [ 369.406177][ T5164] input input61: unable to receive magic message: -32 [ 369.444978][ T5853] usb 3-1: USB disconnect, device number 46 [ 369.451032][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 369.594232][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.606127][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.622170][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.630084][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.639675][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.716170][T16927] syzkaller1: entered promiscuous mode [ 369.721888][T16927] syzkaller1: entered allmulticast mode [ 369.807049][ T29] audit: type=1400 audit(881.843:1160): avc: denied { name_bind } for pid=16934 comm="syz.0.4869" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 370.193786][T16924] chnl_net:caif_netlink_parms(): no params data found [ 370.556334][T16965] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4878'. [ 370.566349][T16965] openvswitch: netlink: Message has 4 unknown bytes. [ 370.655155][T16924] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.662403][T16924] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.669563][T16924] bridge_slave_0: entered allmulticast mode [ 370.712386][T16924] bridge_slave_0: entered promiscuous mode [ 370.730003][T16924] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.737957][T16924] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.745950][T16924] bridge_slave_1: entered allmulticast mode [ 370.757730][T16924] bridge_slave_1: entered promiscuous mode [ 370.840159][T16924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.862622][T16924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.893223][T16924] team0: Port device team_slave_0 added [ 370.903761][T16924] team0: Port device team_slave_1 added [ 370.948940][T16924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.956231][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.981261][ T1207] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 370.983726][T16924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.017069][T16924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.024284][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.052492][T16924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.144707][T16924] hsr_slave_0: entered promiscuous mode [ 371.150718][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 371.157959][T16924] hsr_slave_1: entered promiscuous mode [ 371.164328][ T1207] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 371.174684][T16924] debugfs: 'hsr0' already exists in 'hsr' [ 371.180404][T16924] Cannot create hsr debugfs directory [ 371.185875][ T1207] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 371.189720][T16983] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 371.200821][ T1207] usb 4-1: config 0 interface 0 has no altsetting 0 [ 371.213840][ T1207] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 371.227299][T16987] netlink: 'syz.0.4887': attribute type 13 has an invalid length. [ 371.244959][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.260675][ T1207] usb 4-1: Product: syz [ 371.270759][ T1207] usb 4-1: Manufacturer: syz [ 371.275416][T16987] netlink: 'syz.0.4887': attribute type 17 has an invalid length. [ 371.284042][ T1207] usb 4-1: SerialNumber: syz [ 371.303244][ T1207] usb 4-1: config 0 descriptor?? [ 371.358508][T16987] erspan0: entered promiscuous mode [ 371.429733][T16987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.438765][T16987] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.441928][T16991] kvm: kvm [16990]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 371.455555][T16991] kvm: kvm [16990]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 371.469025][T16987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.653752][T16924] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 371.664514][T16924] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 371.684942][T16924] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 371.696323][T16924] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 371.711169][ T5820] Bluetooth: hci0: command tx timeout [ 371.718655][ T1207] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 372.170064][T16924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.223786][T16924] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.288415][T17017] SELinux: ebitmap: map size 2097152 does not match my size 64 (high bit was 0) [ 372.329177][ T5882] usb 4-1: USB disconnect, device number 44 [ 372.357239][T17017] SELinux: failed to load policy [ 372.392950][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.400086][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.426095][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.433246][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.988836][T17049] loop2: detected capacity change from 0 to 7 [ 373.008561][ T5806] Dev loop2: unable to read RDB block 7 [ 373.019436][ T5806] loop2: unable to read partition table [ 373.026403][ T5806] loop2: partition table beyond EOD, truncated [ 373.037532][T17049] Dev loop2: unable to read RDB block 7 [ 373.037944][T16924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.045263][T17049] loop2: unable to read partition table [ 373.057020][T17049] loop2: partition table beyond EOD, truncated [ 373.100905][T17049] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 373.215442][ T1207] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 373.371119][ T1207] usb 4-1: Using ep0 maxpacket: 8 [ 373.388226][ T1207] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 373.402704][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.433725][ T1207] usb 4-1: Product: syz [ 373.437910][ T1207] usb 4-1: Manufacturer: syz [ 373.463653][ T1207] usb 4-1: SerialNumber: syz [ 373.492436][ T1207] usb 4-1: config 0 descriptor?? [ 373.521480][ T1207] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 373.686385][T16924] veth0_vlan: entered promiscuous mode [ 373.721801][T16924] veth1_vlan: entered promiscuous mode [ 373.790816][ T5820] Bluetooth: hci0: command tx timeout [ 373.816583][T16924] veth0_macvtap: entered promiscuous mode [ 373.877543][T16924] veth1_macvtap: entered promiscuous mode [ 373.926866][T16924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.016514][T16924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.051812][ T29] audit: type=1400 audit(886.083:1161): avc: denied { relabelfrom } for pid=17094 comm="syz.1.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 374.112079][ T29] audit: type=1400 audit(886.083:1162): avc: denied { relabelto } for pid=17094 comm="syz.1.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 374.137208][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.167088][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.213781][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.229103][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.442314][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.473972][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.503870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 374.550967][ T5943] usb 4-1: USB disconnect, device number 45 [ 374.561056][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.583259][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.616708][ T29] audit: type=1400 audit(886.653:1163): avc: denied { mounton } for pid=16924 comm="syz-executor" path="/root/syzkaller.LaeD4A/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 374.660834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 374.690114][ T29] audit: type=1400 audit(886.653:1164): avc: denied { mounton } for pid=16924 comm="syz-executor" path="/root/syzkaller.LaeD4A/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 374.753038][ T29] audit: type=1400 audit(886.653:1165): avc: denied { mounton } for pid=16924 comm="syz-executor" path="/root/syzkaller.LaeD4A/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=56603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 374.795627][ T29] audit: type=1400 audit(886.693:1166): avc: denied { mounton } for pid=16924 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 374.941959][ T29] audit: type=1400 audit(886.973:1167): avc: denied { setopt } for pid=17119 comm="syz.1.4923" lport=57112 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 375.260651][ T5853] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 375.411318][T15973] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 375.422177][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.434334][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.446363][ T5853] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 375.455844][ T5853] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 375.464024][ T5853] usb 3-1: Manufacturer: syz [ 375.472610][ T5853] usb 3-1: config 0 descriptor?? [ 375.593016][T15973] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 375.602778][T15973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.617206][T15973] usb 6-1: config 0 descriptor?? [ 375.635545][T15973] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 375.871775][ T5820] Bluetooth: hci0: command tx timeout [ 376.456773][T15973] gspca_stv06xx: I2C: Read error writing address: -71 [ 376.475623][T15973] usb 6-1: USB disconnect, device number 2 [ 376.497330][ T5853] uclogic 0003:256C:006D.0039: failed retrieving string descriptor #100: -71 [ 376.519918][ T5853] uclogic 0003:256C:006D.0039: failed retrieving pen parameters: -71 [ 376.529197][ T5853] uclogic 0003:256C:006D.0039: failed probing pen v1 parameters: -71 [ 376.538711][ T5853] uclogic 0003:256C:006D.0039: failed probing parameters: -71 [ 376.547035][ T5853] uclogic 0003:256C:006D.0039: probe with driver uclogic failed with error -71 [ 376.572378][ T5853] usb 3-1: USB disconnect, device number 47 [ 377.371290][ T5853] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 377.550810][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 377.593064][ T5853] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 377.610765][ T5853] usb 3-1: config 1 has no interface number 0 [ 377.616917][ T5853] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 377.640745][ T5853] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 377.662329][ T5853] usb 3-1: config 1 interface 105 has no altsetting 0 [ 377.680905][ T5853] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 377.689971][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 377.720688][ T5853] usb 3-1: Product: syz [ 377.724880][ T5853] usb 3-1: Manufacturer: syz [ 377.729474][ T5853] usb 3-1: SerialNumber: syz [ 377.749346][T17144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 377.766972][T17144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 377.954837][ T5820] Bluetooth: hci0: command tx timeout [ 378.257883][T17144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 378.265768][T17144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 378.275586][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.285542][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.316532][ T29] audit: type=1400 audit(890.343:1168): avc: denied { mounton } for pid=17178 comm="syz.3.4947" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 378.896238][ T5853] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 378.916176][ T5853] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 378.977593][ T5853] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 86:b7:8b:74:38:fc [ 379.039027][ T5853] usb 3-1: USB disconnect, device number 48 [ 379.087095][ T5853] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 379.148707][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.162439][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.171582][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.227960][ T5853] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 379.242452][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.246798][ T5853] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 379.265859][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.320365][ T5853] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 379.438560][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4963'. [ 379.469087][T17214] netlink: 'syz.0.4963': attribute type 5 has an invalid length. [ 379.477789][T17214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4963'. [ 379.546800][T17214] geneve3: entered promiscuous mode [ 379.558868][T17214] geneve3: entered allmulticast mode [ 379.574464][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 379.602915][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 379.676033][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 379.750047][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 379.991559][ T35] bridge_slave_1: left allmulticast mode [ 380.008008][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.029772][T17240] netlink: 'syz.2.4973': attribute type 13 has an invalid length. [ 380.055378][T17240] netlink: 'syz.2.4973': attribute type 17 has an invalid length. [ 380.086145][ T35] bridge_slave_0: left allmulticast mode [ 380.107083][ T35] bridge_slave_0: left promiscuous mode [ 380.119349][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.664609][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.694890][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.756923][ T35] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 380.813542][ T35] bond0 (unregistering): Released all slaves [ 381.073814][T17240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.097822][T17240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.131116][ T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 381.169242][ T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 381.191880][ T12] bond0: now running without any active interface! [ 381.269790][ T29] audit: type=1400 audit(893.303:1169): avc: denied { getopt } for pid=17278 comm="syz.5.4985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 381.319243][ T5820] Bluetooth: hci2: command tx timeout [ 381.468238][T17203] chnl_net:caif_netlink_parms(): no params data found [ 381.670707][ T5943] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 381.710835][ T5853] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 381.770081][ T35] hsr_slave_0: left promiscuous mode [ 381.785913][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.822528][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.847317][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 381.853640][ T29] audit: type=1400 audit(893.883:1170): avc: denied { setopt } for pid=17307 comm="syz.1.4996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 381.884024][ T5943] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 381.898581][ T5943] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 381.907440][ T5943] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 381.917627][ T5943] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 381.937506][ T29] audit: type=1400 audit(893.933:1171): avc: denied { write } for pid=17310 comm="syz.5.4997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 381.937636][ T5853] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 381.954927][ T5943] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 381.976336][ T5943] usb 3-1: config 0 has no interface number 0 [ 381.976382][ T5943] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 381.976414][ T5943] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 381.976440][ T5943] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 381.976474][ T5943] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.976510][ T5943] usb 3-1: config 0 interface 125 has no altsetting 0 [ 381.976532][ T5943] usb 3-1: config 0 interface 125 has no altsetting 2 [ 381.978623][ T5943] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 382.000609][ T5853] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.078055][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.114611][ T5943] usb 3-1: Product: syz [ 382.118174][ T5853] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 382.135014][ T29] audit: type=1400 audit(894.173:1172): avc: denied { search } for pid=17315 comm="syz.5.4999" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 382.138332][ T5943] usb 3-1: Manufacturer: syz [ 382.166818][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.175150][ T29] audit: type=1400 audit(894.173:1173): avc: denied { search } for pid=17315 comm="syz.5.4999" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 382.230194][ T5943] usb 3-1: SerialNumber: syz [ 382.260809][ T29] audit: type=1400 audit(894.173:1174): avc: denied { search } for pid=17315 comm="syz.5.4999" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 382.283813][ T5943] usb 3-1: config 0 descriptor?? [ 382.303753][ T5943] usb 3-1: selecting invalid altsetting 2 [ 382.442310][ T35] team0 (unregistering): Port device team_slave_1 removed [ 382.459873][ T5853] usb 1-1: usb_control_msg returned -32 [ 382.469474][ T5853] usbtmc 1-1:16.0: can't read capabilities [ 382.515088][ T35] team0 (unregistering): Port device team_slave_0 removed [ 382.694526][T17203] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.703718][T17203] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.711667][T17203] bridge_slave_0: entered allmulticast mode [ 382.719235][T17203] bridge_slave_0: entered promiscuous mode [ 382.729911][T17203] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.737188][T17203] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.745192][T17203] bridge_slave_1: entered allmulticast mode [ 382.753312][T17203] bridge_slave_1: entered promiscuous mode [ 382.826460][T17203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.854059][T17203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.933421][T17203] team0: Port device team_slave_0 added [ 382.961565][T17203] team0: Port device team_slave_1 added [ 383.038769][T17203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.054657][T17203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.094890][T17203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.176076][T17203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.188163][T17203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.214332][T17203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.299343][T17203] hsr_slave_0: entered promiscuous mode [ 383.309161][T17203] hsr_slave_1: entered promiscuous mode [ 383.319855][T17203] debugfs: 'hsr0' already exists in 'hsr' [ 383.326420][T17203] Cannot create hsr debugfs directory [ 383.391312][ T5820] Bluetooth: hci2: command tx timeout [ 383.441720][ T5853] usb 3-1: USB disconnect, device number 49 [ 383.830233][T17203] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 383.856609][T17203] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 383.875858][T17203] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 383.898369][T17203] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 384.329675][T17203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.386961][T17203] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.414450][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.421652][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.476036][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.483189][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.505931][T15974] usb 1-1: USB disconnect, device number 46 [ 384.533403][ T29] audit: type=1400 audit(896.563:1175): avc: denied { getopt } for pid=17364 comm="syz.1.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 384.865747][T17401] sock: sock_set_timeout: `syz.0.5015' (pid 17401) tries to set negative timeout [ 384.928178][ T29] audit: type=1400 audit(896.943:1176): avc: denied { read } for pid=17399 comm="syz.0.5015" path="socket:[57300]" dev="sockfs" ino=57300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.207087][T17203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.480443][ T5820] Bluetooth: hci2: command tx timeout [ 385.657363][T17203] veth0_vlan: entered promiscuous mode [ 385.670089][T17203] veth1_vlan: entered promiscuous mode [ 385.765626][T17203] veth0_macvtap: entered promiscuous mode [ 385.779476][T17203] veth1_macvtap: entered promiscuous mode [ 385.804355][T17203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.844282][T17203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.902916][ T464] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.928533][ T464] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.948756][ T464] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.972005][ T464] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.219032][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.263474][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.352563][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.360425][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.870628][ T5889] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 387.051819][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 387.063639][ T5889] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.076307][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 387.096397][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 387.120694][ T5889] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.155897][ T5889] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 387.175195][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.427820][ T5889] usb 1-1: GET_CAPABILITIES returned 0 [ 387.440098][ T5889] usbtmc 1-1:16.0: can't read capabilities [ 387.551426][ T5820] Bluetooth: hci2: command tx timeout [ 387.604760][T17492] loop5: detected capacity change from 0 to 4096 [ 387.642546][ T5889] usb 1-1: USB disconnect, device number 47 [ 388.622237][T17534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.781380][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5069'. [ 388.818324][T17538] gtp0: entered promiscuous mode [ 388.834121][ T29] audit: type=1400 audit(900.863:1177): avc: denied { getopt } for pid=17539 comm="syz.1.5068" lport=47249 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 388.871724][T17538] gtp0: entered allmulticast mode [ 389.024294][ T29] audit: type=1400 audit(901.053:1178): avc: denied { accept } for pid=17546 comm="syz.1.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 389.138206][T17554] binder: 17553:17554 ioctl c0306201 200000000040 returned -14 [ 389.255081][T17557] serio: Serial port ttyS3 [ 389.309046][ T29] audit: type=1400 audit(901.343:1179): avc: denied { sys_module } for pid=17558 comm="syz.2.5077" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 389.602394][ T29] audit: type=1400 audit(901.643:1180): avc: denied { create } for pid=17576 comm="syz.2.5084" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 389.985945][T17594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 390.240470][T17606] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5097'. [ 390.383356][T17573] Process accounting resumed [ 390.406746][T17615] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 390.626379][T17626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5105'. [ 390.635660][T17626] block nbd2: Unsupported socket: should be TCP or UNIX. [ 390.951377][ T5875] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 391.072270][ T29] audit: type=1400 audit(903.113:1181): avc: denied { ioctl } for pid=17640 comm="syz.0.5112" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=58928 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 391.110701][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 391.117544][ T5875] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 391.131235][ T5875] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 391.142918][ T5875] usb 3-1: config 0 interface 0 has no altsetting 0 [ 391.152533][ T5875] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 391.161730][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.169723][ T5875] usb 3-1: Product: syz [ 391.174212][ T5875] usb 3-1: Manufacturer: syz [ 391.178819][ T5875] usb 3-1: SerialNumber: syz [ 391.186117][ T5875] usb 3-1: config 0 descriptor?? [ 391.250115][T17648] syzkaller1: entered promiscuous mode [ 391.255816][T17648] syzkaller1: entered allmulticast mode [ 391.373815][ T5820] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 391.419615][ T29] audit: type=1400 audit(903.453:1182): avc: denied { map } for pid=17651 comm="syz.0.5116" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 391.472034][ T29] audit: type=1400 audit(903.453:1183): avc: denied { read write } for pid=17651 comm="syz.0.5116" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 391.497735][ T29] audit: type=1400 audit(903.463:1184): avc: denied { write } for pid=17651 comm="syz.0.5116" path="socket:[60176]" dev="sockfs" ino=60176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 391.603784][ T5875] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 391.828522][ T5875] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 391.842670][ T5875] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 391.859434][ T5875] usb 3-1: USB disconnect, device number 50 [ 391.930180][ T29] audit: type=1400 audit(903.963:1185): avc: denied { mounton } for pid=17668 comm="syz.0.5123" path="/proc/2269/cgroup" dev="proc" ino=60208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 392.390675][ T5875] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 392.575778][ T5875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.592265][ T5875] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 392.612556][ T5875] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.631902][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.650084][ T5875] usb 1-1: Product: syz [ 392.666666][ T5875] usb 1-1: Manufacturer: syz [ 392.678456][ T5875] usb 1-1: SerialNumber: syz [ 392.694282][ T5875] cdc_mbim 1-1:1.0: skipping garbage [ 392.789439][ T29] audit: type=1400 audit(904.823:1186): avc: denied { connect } for pid=17690 comm="syz.1.5134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 392.906077][T17681] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 392.913727][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5138'. [ 392.925613][T17700] netlink: 'syz.6.5138': attribute type 5 has an invalid length. [ 392.933587][T17700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5138'. [ 392.951909][ T1333] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.962207][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5138'. [ 392.973740][ T1333] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.990114][ T1333] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.999297][T17700] netlink: 'syz.6.5138': attribute type 5 has an invalid length. [ 393.011599][ T1333] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.028995][T17700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5138'. [ 393.530008][T17681] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 393.548457][ T5875] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 393.557427][ T5875] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 393.588119][ T5875] wwan wwan0: port wwan0mbim0 attached [ 393.636244][ T5875] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 2e:6f:bf:c3:fd:7e [ 393.825569][ T5875] usb 1-1: USB disconnect, device number 48 [ 393.841883][ T5875] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 393.880995][ T5853] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 393.955238][ T5875] wwan wwan0: port wwan0mbim0 disconnected [ 393.983305][ T29] audit: type=1400 audit(906.013:1187): avc: denied { mount } for pid=17745 comm="syz.5.5158" name="/" dev="hugetlbfs" ino=60721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 394.052986][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 394.082847][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.111059][ T5853] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 394.129891][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.154462][ T5853] usb 2-1: config 0 descriptor?? [ 394.220640][T15974] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 394.349149][T17764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5162'. [ 394.360184][T17764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5162'. [ 394.410698][T15974] usb 3-1: Using ep0 maxpacket: 32 [ 394.430789][T15974] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 394.438988][T15974] usb 3-1: config 0 has no interface number 0 [ 394.470999][T15974] usb 3-1: config 0 interface 184 has no altsetting 0 [ 394.476906][ T29] audit: type=1400 audit(906.513:1188): avc: denied { write } for pid=17766 comm="syz.0.5163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 394.499296][T15974] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 394.509664][T15974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.520454][T15974] usb 3-1: Product: syz [ 394.525105][T15974] usb 3-1: Manufacturer: syz [ 394.529741][T15974] usb 3-1: SerialNumber: syz [ 394.551685][T15974] usb 3-1: config 0 descriptor?? [ 394.568722][T17770] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 394.586854][ T5853] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 394.605691][ T5853] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 394.620889][ T5853] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 394.637838][ T5853] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 394.656585][ T5853] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 394.683993][ T5853] elan 0003:04F3:0755.003A: failed to start in urb: -90 [ 394.711305][ T5853] elan 0003:04F3:0755.003A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 394.832837][ T5943] usb 2-1: USB disconnect, device number 47 [ 394.881423][T17778] fido_id[17778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 395.209176][T15974] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 395.230730][T15974] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 395.456040][T15974] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 395.477917][T15974] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 395.505027][T15974] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 395.529383][T15974] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 395.539916][T15974] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 395.558299][T15974] usb 3-1: USB disconnect, device number 51 [ 396.257335][T17847] netlink: 71 bytes leftover after parsing attributes in process `syz.0.5185'. [ 396.291214][T15974] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 396.472246][T15974] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 396.495205][T15974] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 396.560708][T15974] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 396.589722][T15974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 396.637838][T15974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 396.677027][T15974] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 396.690898][T15974] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 396.719240][T15974] usb 6-1: Product: syz [ 396.727941][T15974] usb 6-1: Manufacturer: syz [ 396.758357][T15974] cdc_wdm 6-1:1.0: skipping garbage [ 396.781910][T15974] cdc_wdm 6-1:1.0: skipping garbage [ 396.787042][T17834] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888022bf24c0 pfn:0x81d62 [ 396.801050][T15974] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 396.818121][T17834] memcg:ffff88801caeea00 [ 396.819718][T15974] cdc_wdm 6-1:1.0: Unknown control protocol [ 396.853340][T17834] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 396.862152][ T5875] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 396.912664][T17834] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 396.971653][T17834] raw: ffff888022bf24c0 0000000000000000 00000001ffffffff ffff88801caeea00 [ 397.019264][T17834] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 397.021085][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 397.057889][T17869] "syz.0.5192" (17869) uses obsolete ecb(arc4) skcipher [ 397.062341][ T5875] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 397.081991][ T5875] usb 3-1: config 0 has no interface number 0 [ 397.087541][T17834] page_owner tracks the page as allocated [ 397.094951][ T29] audit: type=1400 audit(909.133:1189): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 397.119699][T17834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 17834, tgid 17830 (syz.1.5181), ts 396787017203, free_ts 396783618821 [ 397.153619][ T5875] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 397.164184][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.180680][ T29] audit: type=1400 audit(909.133:1190): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.209444][T17834] post_alloc_hook+0x153/0x170 [ 397.210647][ T5875] usb 3-1: Product: syz [ 397.218540][ T5875] usb 3-1: Manufacturer: syz [ 397.220584][T17834] get_page_from_freelist+0x111d/0x3140 [ 397.228601][ T5875] usb 3-1: SerialNumber: syz [ 397.241096][ T5875] usb 3-1: config 0 descriptor?? [ 397.246274][ T29] audit: type=1400 audit(909.133:1191): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.259961][T17834] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 397.282733][ T5875] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 397.292519][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 397.294150][ T5943] usb 6-1: USB disconnect, device number 3 [ 397.298945][ C0] wdm_int_callback: 5 callbacks suppressed [ 397.298963][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 397.316992][ C0] wdm_int_callback: 5 callbacks suppressed [ 397.317012][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 397.328856][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 397.346887][T17834] alloc_pages_mpol+0x1fb/0x550 [ 397.360861][ T29] audit: type=1400 audit(909.133:1192): avc: denied { add_name } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.367788][T17834] folio_alloc_noprof+0x22/0x330 [ 397.392543][ T29] audit: type=1400 audit(909.133:1193): avc: denied { create } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.417332][ T29] audit: type=1400 audit(909.133:1194): avc: denied { append open } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.443168][T17834] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 397.449534][T17834] filemap_alloc_folio_noprof+0x5e/0x80 [ 397.456077][T17834] page_cache_ra_order+0x54b/0xf30 [ 397.461353][T17834] filemap_fault+0x191a/0x2eb0 [ 397.466564][T17834] __do_fault+0x10d/0x550 [ 397.497386][T17834] do_fault+0xabb/0x1990 [ 397.502172][ T5875] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 397.511455][T17834] __handle_mm_fault+0x180f/0x2b60 [ 397.511498][T17834] handle_mm_fault+0x36d/0xa20 [ 397.530351][T17834] __get_user_pages+0xf9c/0x34d0 [ 397.537633][ T5875] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 397.546552][T17834] populate_vma_page_range+0x267/0x3f0 [ 397.553089][T17834] __mm_populate+0x107/0x3a0 [ 397.557816][T17834] page last free pid 17863 tgid 17863 stack trace: [ 397.558109][ T29] audit: type=1400 audit(909.133:1195): avc: denied { getattr } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.578081][T17834] __free_frozen_pages+0x7e1/0x10d0 [ 397.600670][T17834] pgd_free+0x3eb/0x540 [ 397.607826][T17834] __mmdrop+0xe5/0x750 [ 397.615148][T17834] __mmput+0x379/0x410 [ 397.619249][T17834] mmput+0x67/0x80 [ 397.623760][ T29] audit: type=1400 audit(909.193:1196): avc: denied { read write } for pid=5818 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.645513][T17834] do_exit+0x819/0x2b60 [ 397.660598][T17834] do_group_exit+0xd5/0x2a0 [ 397.671389][T17834] __x64_sys_exit_group+0x3e/0x50 [ 397.686706][T17834] x64_sys_call+0x102c/0x1530 [ 397.694814][T17834] do_syscall_64+0x106/0xf80 [ 397.699576][T17834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.706557][T17834] ------------[ cut here ]------------ [ 397.712458][T17834] kernel BUG at mm/filemap.c:858! [ 397.750756][T17834] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 397.757210][T17834] CPU: 1 UID: 0 PID: 17834 Comm: syz.1.5181 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.768163][T17834] Tainted: [L]=SOFTLOCKUP [ 397.772481][T17834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.782520][T17834] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 397.788514][T17834] Code: 35 c5 ff 48 c7 c6 20 37 bd 8b 4c 89 ef e8 e9 3f 12 00 90 0f 0b e8 e1 35 c5 ff 48 c7 c6 80 37 bd 8b 4c 89 ef e8 d2 3f 12 00 90 <0f> 0b e8 ca 35 c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 bc 35 c5 ff 90 [ 397.808117][T17834] RSP: 0018:ffffc900063973f8 EFLAGS: 00010246 [ 397.810769][ T5853] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 397.814161][T17834] RAX: 0000000000080000 RBX: 0000000000112c00 RCX: ffffc9000e9ac000 [ 397.814177][T17834] RDX: 0000000000080000 RSI: ffffffff8255d708 RDI: ffff888039242984 [ 397.814191][T17834] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 397.845544][T17834] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 397.853505][T17834] R13: ffffea0002075880 R14: 0000000000000000 R15: 1ffff92000c72ea9 [ 397.861466][T17834] FS: 00007f098adc86c0(0000) GS:ffff888124442000(0000) knlGS:0000000000000000 [ 397.870386][T17834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.876958][T17834] CR2: 00007f75cc27a368 CR3: 000000002d175000 CR4: 00000000003526f0 [ 397.884918][T17834] Call Trace: [ 397.888183][T17834] [ 397.891104][T17834] ? __pfx___filemap_add_folio+0x10/0x10 [ 397.896747][T17834] filemap_add_folio+0x1d8/0x690 [ 397.901688][T17834] ? __lock_acquire+0x4a5/0x2630 [ 397.906611][T17834] ? __pfx_filemap_add_folio+0x10/0x10 [ 397.912066][T17834] ? css_rstat_updated+0x1ce/0x5a0 [ 397.917181][T17834] page_cache_ra_order+0x614/0xf30 [ 397.922293][T17834] filemap_fault+0x191a/0x2eb0 [ 397.927060][T17834] ? __pfx_filemap_fault+0x10/0x10 [ 397.932172][T17834] ? __pfx_filemap_map_pages+0x10/0x10 [ 397.937631][T17834] __do_fault+0x10d/0x550 [ 397.941963][T17834] do_fault+0xabb/0x1990 [ 397.946199][T17834] __handle_mm_fault+0x180f/0x2b60 [ 397.951310][T17834] ? __pfx___handle_mm_fault+0x10/0x10 [ 397.956765][T17834] ? pte_offset_map_lock+0x174/0x320 [ 397.962059][T17834] ? find_held_lock+0x2b/0x80 [ 397.966770][T17834] ? follow_page_pte+0x5b3/0x1400 [ 397.971793][T17834] handle_mm_fault+0x36d/0xa20 [ 397.976554][T17834] __get_user_pages+0xf9c/0x34d0 [ 397.981494][T17834] ? __pfx___get_user_pages+0x10/0x10 [ 397.986861][T17834] populate_vma_page_range+0x267/0x3f0 [ 397.992315][T17834] ? __pfx_populate_vma_page_range+0x10/0x10 [ 397.998289][T17834] ? __pfx_find_vma_intersection+0x10/0x10 [ 398.004086][T17834] ? do_mmap+0x93f/0x12f0 [ 398.008404][T17834] __mm_populate+0x107/0x3a0 [ 398.012985][T17834] ? __pfx___mm_populate+0x10/0x10 [ 398.018088][T17834] ? up_write+0x290/0x4f0 [ 398.022409][T17834] vm_mmap_pgoff+0x37f/0x470 [ 398.026989][T17834] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 398.032094][T17834] ? __fget_files+0x215/0x3d0 [ 398.036763][T17834] ? __fget_files+0x21f/0x3d0 [ 398.041429][T17834] ksys_mmap_pgoff+0x3c8/0x650 [ 398.046189][T17834] ? kcov_ioctl+0x16a/0x720 [ 398.050684][T17834] ? kfree+0x2ec/0x6b0 [ 398.054742][T17834] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 398.060014][T17834] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 398.065814][T17834] __x64_sys_mmap+0x125/0x190 [ 398.070483][T17834] do_syscall_64+0x106/0xf80 [ 398.075066][T17834] ? clear_bhb_loop+0x40/0x90 [ 398.079732][T17834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.085611][T17834] RIP: 0033:0x7f0989f9c799 [ 398.090011][T17834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.109604][T17834] RSP: 002b:00007f098adc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 398.118008][T17834] RAX: ffffffffffffffda RBX: 00007f098a216090 RCX: 00007f0989f9c799 [ 398.125969][T17834] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 398.133931][T17834] RBP: 00007f098a032c99 R08: 0000000000000004 R09: 000000002c93a000 [ 398.141886][T17834] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 398.149846][T17834] R13: 00007f098a216128 R14: 00007f098a216090 R15: 00007ffe2b44c698 [ 398.157814][T17834] [ 398.160833][T17834] Modules linked in: [ 398.167187][T17834] ---[ end trace 0000000000000000 ]--- [ 398.212669][T17834] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 398.218768][T17834] Code: 35 c5 ff 48 c7 c6 20 37 bd 8b 4c 89 ef e8 e9 3f 12 00 90 0f 0b e8 e1 35 c5 ff 48 c7 c6 80 37 bd 8b 4c 89 ef e8 d2 3f 12 00 90 <0f> 0b e8 ca 35 c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 bc 35 c5 ff 90 [ 398.238559][T17834] RSP: 0018:ffffc900063973f8 EFLAGS: 00010246 [ 398.245018][T17834] RAX: 0000000000080000 RBX: 0000000000112c00 RCX: ffffc9000e9ac000 [ 398.254917][T17834] RDX: 0000000000080000 RSI: ffffffff8255d708 RDI: ffff888039242984 [ 398.263033][T17834] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 398.271451][T17834] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 398.279458][T17834] R13: ffffea0002075880 R14: 0000000000000000 R15: 1ffff92000c72ea9 [ 398.287576][T17834] FS: 00007f098adc86c0(0000) GS:ffff888124442000(0000) knlGS:0000000000000000 [ 398.297526][T17834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.304252][T17834] CR2: 00007fa9289e92f8 CR3: 000000002d175000 CR4: 00000000003526f0 [ 398.312602][T17834] Kernel panic - not syncing: Fatal exception [ 398.318878][T17834] Kernel Offset: disabled [ 398.323185][T17834] Rebooting in 86400 seconds..