last executing test programs: 2.872231283s ago: executing program 4 (id=2939): openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2.838239602s ago: executing program 4 (id=2941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 2.741651377s ago: executing program 4 (id=2942): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) 2.662752252s ago: executing program 4 (id=2944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 2.50424704s ago: executing program 4 (id=2948): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200), 0x2) 2.266335918s ago: executing program 0 (id=2957): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rename(0x0, 0x0) 1.986264935s ago: executing program 3 (id=2960): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000f00)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c0002803800", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x240408d0) 1.916214478s ago: executing program 3 (id=2961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe}, {0x0, 0x5}, {0x1}]}) 1.748749519s ago: executing program 0 (id=2965): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04004220"], 0x7) 1.690563997s ago: executing program 3 (id=2967): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="170000000000000003000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000fbff00000084363d80bb3134210ae9d9c4842f2c000000000000005c0024c87bf6a53ea1d236be19985ba019c880c1d8a3dc171348678109940c006a52c4e402f1a93edf6d29b32deb6d614aacd80be5ed778c431009bebae1627ba84244d8886dc634251ac789b0ddf651e0d4247a5399ca55825740fb57c416bedd70540b53206748867544ef3ae6e7673fe8eb24e8f80a055d8ead34c303e5"], 0x50) io_submit(0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0]) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0) 1.548601418s ago: executing program 3 (id=2969): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="34ac0000", @ANYRES16=0x0, @ANYBLOB="010028bd7000f9dbdf2505000000200001800d0001007564703a73797a32000000000c0002800800030004"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) 1.547766194s ago: executing program 0 (id=2979): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x1c, 0x1d, 0x309, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x80, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x80) 1.425112229s ago: executing program 0 (id=2971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0) 1.322486776s ago: executing program 0 (id=2974): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x18) r0 = io_uring_setup(0x57c1, &(0x7f0000000440)={0x0, 0xfffffffe, 0x2, 0x800000, 0x3a2}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1e, 0x20000002, r1) 1.18571496s ago: executing program 0 (id=2976): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) 1.183488166s ago: executing program 4 (id=2977): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000400304c19700000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x80, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x44}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x81, 0x5, {0x7, 0x25, 0x1, 0x3, 0xff, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9a, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x5, 0x1}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.048220279s ago: executing program 3 (id=2980): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x9, 0x0, 0x2, 0x5, 0x81, 0x1a, 0x5, 0x11, 0x3, 0x1ff, {0x4, 0x0, 0x0, 0x803, 0x2ffffffc}}}}]}, 0x78}}, 0x0) 1.042378163s ago: executing program 3 (id=2981): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c00070905020320"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 787.18823ms ago: executing program 2 (id=2988): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x61) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x6, [], [0x2b8], [0x5, 0x9]}) 615.886825ms ago: executing program 2 (id=2990): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 557.595001ms ago: executing program 2 (id=2992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x82}, 0x8000) 446.902624ms ago: executing program 2 (id=2995): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 386.690083ms ago: executing program 2 (id=2996): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x5, 0x6, 0x80000001, 0x1a, 0x9, 0x6, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 350.501049ms ago: executing program 1 (id=2997): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 272.576881ms ago: executing program 2 (id=2998): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080), 0xfffffe13) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x123042, 0x81) splice(r0, 0x0, r2, 0x0, 0x1, 0x0) 272.131672ms ago: executing program 1 (id=2999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000080)=0xffff, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20044010) 180.219081ms ago: executing program 1 (id=3000): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup3(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xc, &(0x7f0000000d80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 168.788925ms ago: executing program 1 (id=3001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}}, 0x0) 15.152277ms ago: executing program 1 (id=3002): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x3, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=3003): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4b, &(0x7f0000000040)=0x45ce, 0x4) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x255}], 0x1, 0x10102, 0x0) kernel console output (not intermixed with test programs): the interface descriptor's value: 17 [ 123.221599][ T29] audit: type=1400 audit(1737609479.098:584): avc: denied { write } for pid=9122 comm="syz.0.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.242380][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 123.251569][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.262740][ T25] usb 2-1: config 0 descriptor?? [ 123.324679][ T8] usb 5-1: USB disconnect, device number 12 [ 123.370530][ T9123] infiniband syz1: set active [ 123.386324][ T9123] infiniband syz1: added bond_slave_1 [ 123.540745][ T9123] RDS/IB: syz1: added [ 123.560375][ T9123] smc: adding ib device syz1 with port count 1 [ 123.571951][ T9123] smc: ib device syz1 port 1 has pnetid [ 123.602831][ T29] audit: type=1400 audit(1737609479.528:585): avc: denied { create } for pid=9128 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.665426][ T29] audit: type=1400 audit(1737609479.528:586): avc: denied { connect } for pid=9128 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.697354][ T25] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 123.708380][ T29] audit: type=1400 audit(1737609479.528:587): avc: denied { write } for pid=9128 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.732761][ T25] logitech 0003:046D:C29C.001C: hidraw0: USB HID vff.fe Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 124.077781][ T29] audit: type=1400 audit(1737609480.008:588): avc: denied { connect } for pid=9145 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.100747][ T25] logitech 0003:046D:C29C.001C: no inputs found [ 124.133919][ T29] audit: type=1400 audit(1737609480.028:589): avc: denied { ioctl } for pid=9145 comm="syz.3.1421" path="socket:[19353]" dev="sockfs" ino=19353 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.166827][ T29] audit: type=1400 audit(1737609480.048:590): avc: denied { read } for pid=9144 comm="syz.4.1422" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.191110][ T25] usb 2-1: USB disconnect, device number 13 [ 124.232631][ T29] audit: type=1400 audit(1737609480.048:591): avc: denied { open } for pid=9144 comm="syz.4.1422" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.245142][ T9152] netlink: 'syz.3.1423': attribute type 9 has an invalid length. [ 124.294349][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 125.328734][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.356380][ T9207] bridge_slave_1: left allmulticast mode [ 125.364424][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.373703][ T9207] netlink: 'syz.1.1447': attribute type 2 has an invalid length. [ 125.382598][ T9207] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 125.446678][ T9213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9213 comm=syz.0.1450 [ 125.587465][ T5865] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 125.746302][ T5865] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.755295][ T5865] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.783755][ T5865] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.806559][ T5865] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.819124][ T5865] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.828721][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.837074][ T5865] usb 3-1: Product: syz [ 125.841342][ T5865] usb 3-1: Manufacturer: syz [ 125.853766][ T5865] cdc_wdm 3-1:1.0: skipping garbage [ 125.863287][ T5865] cdc_wdm 3-1:1.0: skipping garbage [ 125.882127][ T5865] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 125.892110][ T5865] cdc_wdm 3-1:1.0: Unknown control protocol [ 126.062869][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 126.069725][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 126.076083][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 126.082700][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 126.089748][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 126.096366][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 126.102917][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 126.109527][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 126.119539][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 126.126155][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 126.132596][ T46] usb 3-1: USB disconnect, device number 13 [ 126.138557][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 126.138579][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 126.138595][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 126.791947][ T9274] netlink: 'syz.4.1477': attribute type 7 has an invalid length. [ 127.863294][ T9320] kvm: kvm [9317]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x98b5 [ 128.065748][ T9331] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1499'. [ 128.248220][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 128.248237][ T29] audit: type=1400 audit(1737609484.178:633): avc: denied { mount } for pid=9334 comm="syz.2.1501" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.346333][ T8] kernel read not supported for file /dsp1 (pid: 8 comm: kworker/0:0) [ 128.379237][ T29] audit: type=1400 audit(1737609484.218:634): avc: denied { setopt } for pid=9332 comm="syz.1.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.453093][ T9314] [U]  [ 128.467748][ T29] audit: type=1400 audit(1737609484.298:635): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.527063][ T9339] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 128.564083][ T29] audit: type=1326 audit(1737609484.478:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.2.1502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc25cb8cd29 code=0x0 [ 128.586861][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.602186][ T9339] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1503'. [ 128.841343][ T9329] syz.3.1498 (9329): drop_caches: 2 [ 128.973431][ T29] audit: type=1400 audit(1737609484.898:637): avc: denied { mount } for pid=9349 comm="syz.1.1516" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 129.019177][ T29] audit: type=1400 audit(1737609484.938:638): avc: denied { remount } for pid=9349 comm="syz.1.1516" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 129.097347][ T29] audit: type=1400 audit(1737609485.018:639): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 129.117349][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.384177][ T5865] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 129.484078][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 129.514318][ T29] audit: type=1400 audit(1737609485.448:640): avc: denied { getopt } for pid=9364 comm="syz.2.1513" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.544409][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 129.561545][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.598588][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 129.628398][ T5865] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 129.654002][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.663352][ T5865] usb 4-1: config 0 descriptor?? [ 129.675885][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 129.696381][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.710728][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 129.724357][ T25] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 129.733735][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.744725][ T25] usb 5-1: config 0 descriptor?? [ 130.093310][ T5865] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 130.116407][ T5865] logitech 0003:046D:C29C.001D: hidraw0: USB HID vff.fe Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 130.165340][ T25] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 130.172600][ T25] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 130.180218][ T25] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 130.187696][ T25] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 130.223440][ T25] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 130.238675][ T25] megaworld 0003:07B5:0312.001E: hidraw1: USB HID v10.00 Device [HID 07b5:0312] on usb-dummy_hcd.4-1/input0 [ 130.251013][ T25] megaworld 0003:07B5:0312.001E: no inputs found [ 130.382214][ T25] usb 5-1: USB disconnect, device number 13 [ 130.454063][ T5895] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 130.464181][ T46] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 130.493285][ T5865] logitech 0003:046D:C29C.001D: no inputs found [ 130.506943][ T5865] usb 4-1: USB disconnect, device number 21 [ 130.604070][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 130.610549][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.621439][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 130.633212][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.634505][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 130.644517][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.656296][ T46] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 130.663613][ T5895] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 130.670565][ T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.679483][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.697961][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.700548][ T5895] usb 1-1: Product: syz [ 130.708555][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.718313][ T5895] usb 1-1: Manufacturer: syz [ 130.725643][ T46] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.726956][ T5895] usb 1-1: SerialNumber: syz [ 130.742990][ T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.746134][ T5895] usb 1-1: config 0 descriptor?? [ 130.753399][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.763457][ T5895] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 130.961623][ T29] audit: type=1400 audit(1737609486.888:641): avc: denied { write } for pid=9392 comm="syz.4.1526" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 130.982566][ T5895] imon:send_packet: packet tx failed (-71) [ 130.984234][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.018128][ T46] usb 2-1: GET_CAPABILITIES returned 0 [ 131.024218][ T5895] imon 1-1:0.0: panel buttons/knobs setup failed [ 131.036239][ T46] usbtmc 2-1:16.0: can't read capabilities [ 131.148364][ T9399] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 131.164447][ T5895] rc_core: IR keymap rc-imon-pad not found [ 131.172731][ T5895] Registered IR keymap rc-empty [ 131.185739][ T5895] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 131.211171][ T5895] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 131.233780][ T5895] imon:send_packet: packet tx failed (-71) [ 131.277806][ T5895] imon 1-1:0.0: remote input dev register failed [ 131.306461][ T5895] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 131.326763][ T5868] usb 2-1: USB disconnect, device number 14 [ 131.386646][ T5895] imon 1-1:0.0: unable to initialize intf0, err 0 [ 131.397764][ T9412] bridge0: port 3(syz_tun) entered blocking state [ 131.410420][ T5895] imon:imon_probe: failed to initialize context! [ 131.412708][ T9412] bridge0: port 3(syz_tun) entered disabled state [ 131.417362][ T5895] imon 1-1:0.0: unable to register, err -19 [ 131.435355][ T5895] usb 1-1: USB disconnect, device number 16 [ 131.454174][ T9412] syz_tun: entered allmulticast mode [ 131.460433][ T9412] syz_tun: entered promiscuous mode [ 131.541750][ T9417] hsr_slave_0: left promiscuous mode [ 131.560509][ T9417] hsr_slave_1: left promiscuous mode [ 131.969700][ T9433] sctp: [Deprecated]: syz.1.1552 (pid 9433) Use of int in maxseg socket option. [ 131.969700][ T9433] Use struct sctp_assoc_value instead [ 132.072434][ T29] audit: type=1400 audit(1737609487.998:642): avc: denied { name_connect } for pid=9438 comm="syz.2.1543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 132.466838][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.473161][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.764621][ T5895] kernel read not supported for file /dsp1 (pid: 5895 comm: kworker/0:7) [ 132.835421][ T9444] [U]  [ 132.979015][ T9486] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.260748][ T9493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.285662][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 133.285677][ T29] audit: type=1400 audit(1737609489.218:646): avc: denied { create } for pid=9499 comm="syz.4.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.316742][ T9493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.328585][ T29] audit: type=1400 audit(1737609489.258:647): avc: denied { create } for pid=9499 comm="syz.4.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.366942][ T9493] bond0 (unregistering): Released all slaves [ 133.371935][ T29] audit: type=1400 audit(1737609489.258:648): avc: denied { write } for pid=9499 comm="syz.4.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.394295][ T29] audit: type=1400 audit(1737609489.258:649): avc: denied { nlmsg_write } for pid=9499 comm="syz.4.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.606521][ T29] audit: type=1326 audit(1737609489.538:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.0.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2538cd29 code=0x7ffc0000 [ 133.606972][ T9513] syz.0.1574 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 133.682144][ T29] audit: type=1326 audit(1737609489.538:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.0.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2538cd29 code=0x7ffc0000 [ 133.770808][ T29] audit: type=1326 audit(1737609489.538:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.0.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f1e2538cd29 code=0x7ffc0000 [ 133.799368][ T29] audit: type=1400 audit(1737609489.568:653): avc: denied { create } for pid=9514 comm="syz.3.1575" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.823841][ T29] audit: type=1400 audit(1737609489.578:654): avc: denied { read } for pid=9514 comm="syz.3.1575" name="file0" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.849015][ T29] audit: type=1400 audit(1737609489.578:655): avc: denied { open } for pid=9514 comm="syz.3.1575" path="/280/file0" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.893133][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'. [ 134.494157][ T5865] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 134.644055][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 134.652849][ T5865] usb 1-1: config 0 has no interfaces? [ 134.663681][ T5865] usb 1-1: New USB device found, idVendor=046d, idProduct=08ad, bcdDevice=45.03 [ 134.689080][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.708777][ T5865] usb 1-1: Product: syz [ 134.717363][ T5865] usb 1-1: Manufacturer: syz [ 134.725309][ T5865] usb 1-1: SerialNumber: syz [ 134.739386][ T5865] usb 1-1: config 0 descriptor?? [ 134.983450][ T5868] usb 1-1: USB disconnect, device number 17 [ 135.214362][ T5865] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 135.361193][ T9581] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1603'. [ 135.395968][ T5865] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 135.414408][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.432389][ T9577] syz.1.1601 (9577): drop_caches: 2 [ 135.437775][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 135.437818][ T5865] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 135.437840][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.468767][ T9577] syz.1.1601 (9577): drop_caches: 2 [ 135.509223][ T5865] usb 3-1: config 0 descriptor?? [ 135.886345][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'. [ 135.943411][ T5865] megaworld 0003:07B5:0312.001F: unknown main item tag 0x0 [ 135.964418][ T5865] megaworld 0003:07B5:0312.001F: unknown main item tag 0x0 [ 135.981902][ T5865] megaworld 0003:07B5:0312.001F: unknown main item tag 0x0 [ 136.014146][ T5865] megaworld 0003:07B5:0312.001F: unknown main item tag 0x0 [ 136.021430][ T5865] megaworld 0003:07B5:0312.001F: unknown main item tag 0x0 [ 136.064365][ T5865] megaworld 0003:07B5:0312.001F: hidraw0: USB HID v10.00 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 136.099556][ T5865] megaworld 0003:07B5:0312.001F: no inputs found [ 136.219106][ T5895] usb 3-1: USB disconnect, device number 14 [ 136.646611][ T9619] syz.4.1619 (9619): drop_caches: 2 [ 136.665564][ T9619] syz.4.1619 (9619): drop_caches: 2 [ 136.884151][ T5895] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 136.958855][ T9637] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.064381][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 137.074258][ T5895] usb 1-1: config 0 has no interfaces? [ 137.081735][ T5895] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 137.098708][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.115196][ T5895] usb 1-1: Product: syz [ 137.122812][ T5895] usb 1-1: Manufacturer: syz [ 137.132057][ T5895] usb 1-1: SerialNumber: syz [ 137.143246][ T5895] usb 1-1: config 0 descriptor?? [ 137.284306][ T5868] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 137.293155][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 137.384184][ T5895] usb 1-1: USB disconnect, device number 18 [ 137.435379][ T5868] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.466980][ T5868] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.486571][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.509225][ T5868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.531653][ T5868] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.557605][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.587894][ T5868] usb 4-1: Product: syz [ 137.592091][ T5868] usb 4-1: Manufacturer: syz [ 137.613532][ T5868] cdc_wdm 4-1:1.0: skipping garbage [ 137.622520][ T5868] cdc_wdm 4-1:1.0: skipping garbage [ 137.637353][ T5868] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 137.650450][ T5868] cdc_wdm 4-1:1.0: Unknown control protocol [ 137.909450][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 137.916096][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 137.922707][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 137.929315][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 137.935603][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 137.942199][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 137.948542][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 137.955140][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 137.961381][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 137.967977][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 137.974587][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 137.981170][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 137.987698][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 137.994298][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 138.000541][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 138.007131][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 138.013394][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 138.019993][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 138.026312][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 138.032917][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 138.038998][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 138.047865][ T5868] usb 4-1: USB disconnect, device number 22 [ 138.130187][ T9662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.148788][ T9662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.168605][ T9662] bond0 (unregistering): Released all slaves [ 138.183716][ T9664] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 138.263783][ T9678] delete_channel: no stack [ 138.495995][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 138.496011][ T29] audit: type=1400 audit(1737609494.428:690): avc: denied { read } for pid=9689 comm="syz.0.1653" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.565782][ T29] audit: type=1400 audit(1737609494.428:691): avc: denied { open } for pid=9689 comm="syz.0.1653" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.596902][ T29] audit: type=1400 audit(1737609494.458:692): avc: denied { ioctl } for pid=9689 comm="syz.0.1653" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.643513][ T29] audit: type=1400 audit(1737609494.558:693): avc: denied { mount } for pid=9695 comm="syz.2.1656" name="/" dev="pstore" ino=4330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 138.683459][ T29] audit: type=1400 audit(1737609494.608:694): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 138.734894][ T29] audit: type=1400 audit(1737609494.608:695): avc: denied { create } for pid=9701 comm="syz.4.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 138.779399][ T29] audit: type=1400 audit(1737609494.608:696): avc: denied { bind } for pid=9701 comm="syz.4.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 138.824093][ T5868] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 138.909474][ T9713] netlink: 352 bytes leftover after parsing attributes in process `syz.0.1665'. [ 139.004239][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 139.010764][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 139.025286][ T5868] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 139.035013][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 139.057837][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.066599][ T5868] usb 2-1: Product: syz [ 139.074687][ T5868] usb 2-1: Manufacturer: syz [ 139.079365][ T5868] usb 2-1: SerialNumber: syz [ 139.090987][ T5868] usb 2-1: config 0 descriptor?? [ 139.527588][ T5868] gs_usb 2-1:0.0: Configuring for 2 interfaces [ 139.607302][ T29] audit: type=1400 audit(1737609495.538:697): avc: denied { ioctl } for pid=9752 comm="syz.3.1685" path="/dev/sg0" dev="devtmpfs" ino=735 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.717051][ T9749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.739940][ T9749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.765226][ T9749] bond0 (unregistering): Released all slaves [ 139.794108][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 139.932501][ T5868] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 139.974875][ T5868] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 140.006801][ T29] audit: type=1400 audit(1737609495.938:698): avc: denied { read } for pid=9763 comm="syz.4.1688" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.034328][ T29] audit: type=1400 audit(1737609495.938:699): avc: denied { open } for pid=9763 comm="syz.4.1688" path="/dev/usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.067670][ T5868] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 140.094575][ T5868] usb 2-1: USB disconnect, device number 15 [ 140.178111][ T9776] syz.2.1692 (9776): drop_caches: 2 [ 140.191582][ T9776] syz.2.1692 (9776): drop_caches: 2 [ 140.218425][ T9778] netlink: 79 bytes leftover after parsing attributes in process `syz.0.1693'. [ 140.357490][ T9785] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1697'. [ 140.546935][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1702'. [ 140.938570][ T1217] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 141.108879][ T1217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.134232][ T1217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.153467][ T1217] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.202389][ T1217] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 141.232037][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.253138][ T1217] usb 2-1: config 0 descriptor?? [ 141.454735][ T5900] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 141.466130][ T9855] netlink: 'syz.0.1727': attribute type 5 has an invalid length. [ 141.614448][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 141.620936][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.646377][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.668266][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.674285][ T1217] hid-alps 0003:044E:120B.0020: bogus close delimiter [ 141.711685][ T5900] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.718306][ T1217] hid-alps 0003:044E:120B.0020: item 0 1 2 10 parsing failed [ 141.733672][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.742216][ T1217] hid-alps 0003:044E:120B.0020: parse failed [ 141.749807][ T5900] usb 3-1: config 0 descriptor?? [ 141.752526][ T1217] hid-alps 0003:044E:120B.0020: probe with driver hid-alps failed with error -22 [ 141.899242][ T1217] usb 2-1: USB disconnect, device number 16 [ 142.214195][ T5900] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0021/input/input15 [ 142.229484][ T9893] random: crng reseeded on system resumption [ 142.318717][ T5900] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 142.489477][ T5865] usb 3-1: USB disconnect, device number 15 [ 143.218532][ T9912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.224103][ T5900] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 143.238110][ T9912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.252330][ T9912] bond0 (unregistering): Released all slaves [ 143.314304][ T1217] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 143.414162][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 143.421829][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 143.434349][ T5900] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 143.443556][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.451957][ T5900] usb 2-1: Product: syz [ 143.456258][ T5900] usb 2-1: Manufacturer: syz [ 143.460853][ T5900] usb 2-1: SerialNumber: syz [ 143.472095][ T5900] usb 2-1: config 0 descriptor?? [ 143.482898][ T5900] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 143.507339][ T1217] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 143.524270][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.532407][ T1217] usb 1-1: Product: syz [ 143.542212][ T1217] usb 1-1: Manufacturer: syz [ 143.550363][ T1217] usb 1-1: SerialNumber: syz [ 143.565947][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 143.565961][ T29] audit: type=1400 audit(1737609499.498:722): avc: denied { read } for pid=9942 comm="syz.3.1765" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 143.575316][ T1217] usb 1-1: config 0 descriptor?? [ 143.624679][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 143.642094][ T25] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 143.654025][ T29] audit: type=1400 audit(1737609499.528:723): avc: denied { open } for pid=9942 comm="syz.3.1765" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 143.677857][ T25] usb 3-1: config 179 has no interface number 0 [ 143.685038][ T25] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 143.696145][ T25] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 143.707861][ T29] audit: type=1400 audit(1737609499.538:724): avc: denied { ioctl } for pid=9942 comm="syz.3.1765" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 143.736914][ T25] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.749176][ T25] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 143.764888][ T25] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 143.792004][ T25] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 143.805555][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.827134][ T9923] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 144.021456][ T1217] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 144.029480][ T1217] usb 1-1: Firmware version (0.0) predates our first public release. [ 144.043687][ T1217] usb 1-1: Please update to version 0.2 or newer [ 144.138768][ T25] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input16 [ 144.143073][ T9961] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1773'. [ 144.259287][ T9965] Illegal XDP return value 4294967294 on prog (id 129) dev N/A, expect packet loss! [ 144.272448][ T1217] usb 1-1: USB disconnect, device number 19 [ 144.339063][ T5900] gspca_ov534_9: reg_w failed -71 [ 144.569776][ T25] usb 3-1: USB disconnect, device number 16 [ 144.575769][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 144.575808][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 144.609891][ T25] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 144.623779][ T29] audit: type=1400 audit(1737609500.548:725): avc: denied { getopt } for pid=9982 comm="syz.3.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.684994][ T5900] gspca_ov534_9: Unknown sensor 0000 [ 144.685048][ T5900] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 144.702157][ T5900] usb 2-1: USB disconnect, device number 17 [ 144.974704][ T29] audit: type=1400 audit(1737609500.898:726): avc: denied { ioctl } for pid=10006 comm="syz.1.1792" path="socket:[24228]" dev="sockfs" ino=24228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.154013][ T29] audit: type=1400 audit(1737609501.078:727): avc: denied { setopt } for pid=10022 comm="syz.1.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.215286][ T29] audit: type=1326 audit(1737609501.148:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2038cd29 code=0x7ffc0000 [ 145.269973][T10030] sctp: [Deprecated]: syz.1.1802 (pid 10030) Use of int in max_burst socket option. [ 145.269973][T10030] Use struct sctp_assoc_value instead [ 145.279711][ T29] audit: type=1326 audit(1737609501.168:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2038cd29 code=0x7ffc0000 [ 145.321902][ T29] audit: type=1326 audit(1737609501.168:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde2038cd29 code=0x7ffc0000 [ 145.345300][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.353275][ T29] audit: type=1326 audit(1737609501.168:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2038cd29 code=0x7ffc0000 [ 145.404067][ T5900] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 145.565348][ T5900] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 145.579431][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.608818][ T5900] usb 1-1: config 0 descriptor?? [ 145.624108][ T5900] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 146.229106][ T5900] gspca_stv06xx: vv6410 sensor detected [ 146.508099][ T5900] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 146.520831][ T5900] usb 1-1: USB disconnect, device number 20 [ 147.128195][T10111] mac80211_hwsim hwsim6 syzkaller0: renamed from wlan1 (while UP) [ 147.232984][T10115] 9pnet_rdma: rdma_create_trans (10115): problem binding to privport: 13 [ 147.232995][T10118] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 148.328048][T10159] bridge_slave_0: default FDB implementation only supports local addresses [ 148.382878][T10163] macvlan0: entered allmulticast mode [ 148.389447][T10163] veth1_vlan: entered allmulticast mode [ 148.402796][T10163] macvlan0: left allmulticast mode [ 148.409297][T10163] veth1_vlan: left allmulticast mode [ 148.771079][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 148.771094][ T29] audit: type=1400 audit(1737609504.698:744): avc: denied { ioctl } for pid=10183 comm="syz.2.1867" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25612 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 148.783880][T10187] random: crng reseeded on system resumption [ 148.833847][T10185] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1869'. [ 149.010475][T10198] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1875'. [ 149.164108][ T29] audit: type=1400 audit(1737609505.078:745): avc: denied { bind } for pid=10203 comm="syz.4.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.235711][ T29] audit: type=1326 audit(1737609505.158:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.0.1879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e2538cd29 code=0x0 [ 149.320866][ T29] audit: type=1326 audit(1737609505.248:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 149.344261][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.381535][ T29] audit: type=1326 audit(1737609505.258:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 149.424053][ T29] audit: type=1326 audit(1737609505.258:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 149.447439][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.454037][ T29] audit: type=1326 audit(1737609505.258:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 149.477380][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.483498][ T29] audit: type=1326 audit(1737609505.258:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 149.507647][ T29] audit: type=1326 audit(1737609505.308:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 149.531170][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.538774][ T29] audit: type=1326 audit(1737609505.448:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 149.562030][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.254059][ T5865] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 150.415334][ T5865] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.431187][ T5865] usb 3-1: config 0 has no interface number 0 [ 150.444219][ T5865] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 150.456785][ T5865] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 150.470089][ T5865] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.505086][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.524868][ T5865] usb 3-1: config 0 descriptor?? [ 150.532847][T10246] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.545969][ T5865] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 150.767063][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 150.801599][ T5900] usb 3-1: USB disconnect, device number 17 [ 150.920632][T10293] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1915'. [ 151.304220][ T5900] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 151.504132][ T5900] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.515266][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.544630][ T5900] usb 5-1: config 0 descriptor?? [ 151.559008][ T5900] cp210x 5-1:0.0: cp210x converter detected [ 151.644316][ T1217] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 151.664614][ T46] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 151.806886][ T1217] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.808954][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 151.820011][ T1217] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 151.841978][ T1217] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.851406][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.853982][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 151.865236][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 151.869641][T10326] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 151.876322][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.891460][ T1217] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.891787][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.913765][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.937075][ T46] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.947013][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.975262][ T46] usb 2-1: config 0 descriptor?? [ 151.980465][ T5900] usb 5-1: cp210x converter now attached to ttyUSB0 [ 152.034057][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 152.047328][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.071148][ T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 152.081027][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.094864][ T25] usb 3-1: config 0 descriptor?? [ 152.123434][ T1217] usb 1-1: USB disconnect, device number 21 [ 152.169890][ T5895] usb 5-1: USB disconnect, device number 14 [ 152.180436][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 152.205277][ T5895] cp210x 5-1:0.0: device disconnected [ 152.426297][ T46] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0022/input/input17 [ 152.499609][ T46] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 152.516708][ T25] mcp2221 0003:04D8:00DD.0023: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 152.679312][ T1217] usb 2-1: USB disconnect, device number 18 [ 152.925017][ T46] usb 3-1: USB disconnect, device number 18 [ 153.273231][T10384] Cannot find del_set index 286 as target [ 153.284127][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 153.446132][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 153.460557][ T25] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 153.474121][ T25] usb 1-1: config 0 has no interface number 0 [ 153.480241][ T25] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 153.536411][ T25] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 153.547805][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.567039][ T25] usb 1-1: Product: syz [ 153.577229][ T25] usb 1-1: Manufacturer: syz [ 153.593974][ T25] usb 1-1: SerialNumber: syz [ 153.603267][ T25] usb 1-1: config 0 descriptor?? [ 153.937812][T10415] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1972'. [ 154.094549][T10421] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 154.110799][T10421] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 154.252241][ T25] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input18 [ 154.304474][T10428] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1977'. [ 154.495261][ T25] usb 1-1: USB disconnect, device number 22 [ 154.535997][T10437] Failed to get privilege flags for destination (handle=0x2:0x2) [ 154.735203][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 154.735218][ T29] audit: type=1400 audit(1737609510.668:773): avc: denied { shutdown } for pid=10446 comm="syz.4.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 155.106054][ T29] audit: type=1400 audit(1737609511.038:774): avc: denied { create } for pid=10468 comm="syz.3.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.118166][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'. [ 155.178839][ T29] audit: type=1400 audit(1737609511.038:775): avc: denied { ioctl } for pid=10468 comm="syz.3.1995" path="socket:[26286]" dev="sockfs" ino=26286 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.181772][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1994'. [ 155.299797][T10477] bridge0: port 3(syz_tun) entered disabled state [ 155.308291][T10477] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.338348][ T29] audit: type=1400 audit(1737609511.258:776): avc: denied { create } for pid=10478 comm="syz.2.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 155.401410][ T29] audit: type=1400 audit(1737609511.258:777): avc: denied { write } for pid=10478 comm="syz.2.2001" path="socket:[26308]" dev="sockfs" ino=26308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 155.727694][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'. [ 155.749732][T10489] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 155.796499][ T29] audit: type=1400 audit(1737609511.708:778): avc: denied { getopt } for pid=10500 comm="syz.4.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.877081][T10503] input: syz0 as /devices/virtual/input/input19 [ 155.888024][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2012'. [ 157.047980][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2030'. [ 157.075701][T10546] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2031'. [ 157.109180][T10546] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2031'. [ 157.240323][T10551] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2033'. [ 157.569217][ T29] audit: type=1400 audit(1737609513.498:779): avc: denied { listen } for pid=10576 comm="syz.0.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.623989][ T29] audit: type=1400 audit(1737609513.498:780): avc: denied { accept } for pid=10576 comm="syz.0.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.671901][ T29] audit: type=1400 audit(1737609513.578:781): avc: denied { write } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.714032][ T29] audit: type=1400 audit(1737609513.578:782): avc: denied { remove_name } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.194514][ T25] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 158.355284][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.365508][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.379747][ T25] usb 2-1: config 0 descriptor?? [ 158.395565][ T25] cp210x 2-1:0.0: cp210x converter detected [ 158.813451][ T25] usb 2-1: cp210x converter now attached to ttyUSB0 [ 158.854113][ T5895] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 159.035864][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 159.038947][ T25] usb 2-1: USB disconnect, device number 19 [ 159.067846][ T5895] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.075370][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 159.111507][ T5895] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.132546][ T25] cp210x 2-1:0.0: device disconnected [ 159.136058][ T5895] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 159.173854][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.183696][ T5895] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 159.197846][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.208451][ T5895] usb 5-1: config 0 descriptor?? [ 159.424401][ T46] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 159.586482][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.602662][T10695] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2105'. [ 159.609900][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.625463][ T5895] hid (null): invalid report_count 56567 [ 159.626545][ T46] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 159.641164][ T5895] hid (null): unknown global tag 0xc [ 159.642148][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.647304][ T5895] hid (null): unknown global tag 0xd [ 159.674836][ T5895] hid (null): bogus close delimiter [ 159.690998][ T5895] hid (null): global environment stack overflow [ 159.695326][ T46] usb 4-1: config 0 descriptor?? [ 159.713696][ T5895] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.0024/input/input20 [ 159.791783][ T5895] kye 0003:0458:5010.0024: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 159.862129][ T5895] usb 5-1: USB disconnect, device number 15 [ 160.133494][ T46] isku 0003:1E7D:319C.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 160.204057][ T25] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 160.366847][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.379013][ T25] usb 2-1: config 0 has no interface number 0 [ 160.385289][ T25] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 160.417107][ T25] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 160.427932][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'. [ 160.464182][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.478249][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.502443][ T25] usb 2-1: config 0 descriptor?? [ 160.514903][T10709] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 160.522194][T10731] misc userio: Can't change port type on an already running userio instance [ 160.539182][ T25] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 160.557351][ T46] usb 4-1: USB disconnect, device number 23 [ 160.572827][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 160.572839][ T29] audit: type=1400 audit(1737609516.498:798): avc: denied { getopt } for pid=10732 comm="syz.2.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.616609][ T29] audit: type=1326 audit(1737609516.548:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.0.2113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e2538cd29 code=0x0 [ 160.639469][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.771741][ T5868] usb 2-1: USB disconnect, device number 20 [ 161.149952][ T29] audit: type=1400 audit(1737609517.068:800): avc: denied { append } for pid=10764 comm="syz.3.2126" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.172740][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.997636][ T29] audit: type=1326 audit(1737609517.918:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 162.061946][ T29] audit: type=1326 audit(1737609517.958:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 162.142390][ T29] audit: type=1326 audit(1737609517.978:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 162.219116][ T29] audit: type=1326 audit(1737609517.978:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 162.242516][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.296099][ T29] audit: type=1326 audit(1737609517.978:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 162.448808][ T29] audit: type=1326 audit(1737609518.018:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 162.472230][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.478786][ T29] audit: type=1326 audit(1737609518.018:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029b18cd29 code=0x7ffc0000 [ 162.648636][ T5868] hid-generic 0000:0003:0000.0026: unknown main item tag 0x0 [ 162.657020][ T5868] hid-generic 0000:0003:0000.0026: unknown main item tag 0x0 [ 162.688227][ T5868] hid-generic 0000:0003:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz1 [ 162.944219][ T5865] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 163.125185][ T5865] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.151540][ T5865] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.154397][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 163.194952][ T5865] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.214107][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.234488][T10810] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.249014][ T5865] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.519700][ T8] usb 2-1: USB disconnect, device number 21 [ 163.769100][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2171'. [ 164.454386][T10894] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 164.461104][T10894] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.471477][T10894] vhci_hcd vhci_hcd.0: Device attached [ 164.645128][ T25] vhci_hcd: vhci_device speed not set [ 164.704643][ T25] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 164.734455][ T5868] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 164.906829][ T5868] usb 2-1: config 0 has no interfaces? [ 164.912508][ T5868] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.932693][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.954762][ T5868] usb 2-1: config 0 descriptor?? [ 165.058202][ T5900] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 165.180392][ T933] usb 2-1: USB disconnect, device number 22 [ 165.187689][T10896] vhci_hcd: connection reset by peer [ 165.206486][ T11] vhci_hcd: stop threads [ 165.222363][ T11] vhci_hcd: release socket [ 165.231034][T10936] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 165.234855][ T5900] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 165.251598][ T11] vhci_hcd: disconnect device [ 165.261625][ T25] vhci_hcd: vhci_device speed not set [ 165.268376][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.282110][ T5900] usb 5-1: config 0 descriptor?? [ 165.312302][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 165.465332][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.476782][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.487476][ T8] usb 1-1: New USB device found, idVendor=3305, idProduct=01ed, bcdDevice= 0.00 [ 165.496616][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.507124][ T8] usb 1-1: config 0 descriptor?? [ 165.584525][ T5868] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 165.737955][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 165.737970][ T29] audit: type=1400 audit(1737609521.668:833): avc: denied { read } for pid=10958 comm="syz.1.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.753290][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.780656][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.790902][ T5868] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 165.805874][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.818631][ T5868] usb 4-1: config 0 descriptor?? [ 165.920761][ T8] hid-generic 0003:3305:01ED.0027: hidraw0: USB HID v0.00 Device [HID 3305:01ed] on usb-dummy_hcd.0-1/input0 [ 165.935142][ T933] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 166.096515][ T5900] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 166.106866][ T5900] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 166.118128][ T5900] asix 5-1:0.0: probe with driver asix failed with error -71 [ 166.128328][ T933] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 166.129775][ T8] usb 1-1: USB disconnect, device number 23 [ 166.140470][ T5900] usb 5-1: USB disconnect, device number 16 [ 166.149773][ T933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.159555][ T933] usb 3-1: Product: syz [ 166.165065][ T933] usb 3-1: Manufacturer: syz [ 166.173545][ T933] usb 3-1: SerialNumber: syz [ 166.189061][ T933] usb 3-1: config 0 descriptor?? [ 166.239811][ T5868] steelseries 0003:1038:12B6.0028: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 166.401397][ T8] usb 3-1: USB disconnect, device number 19 [ 166.668880][ T6884] usb 4-1: USB disconnect, device number 24 [ 167.288866][T11007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2234'. [ 167.369751][T11011] omfs: Invalid superblock (0) [ 167.914749][T11040] overlayfs: conflicting options: userxattr,metacopy=on [ 168.046252][T11050] serio: Serial port ptm0 [ 168.140685][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2255'. [ 168.319294][ T9] usb 3-1: [UEAGLE-ATM] firmware is not available [ 168.354557][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 168.524119][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 168.530506][ T8] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.541619][ T8] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.561364][ T8] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 168.575197][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 168.581825][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 168.593988][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.606633][ T8] usb 1-1: config 0 descriptor?? [ 168.696727][T11084] futex_wake_op: syz.3.2267 tries to shift op by -1; fix this program [ 168.714137][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 168.865397][ T9] usb 3-1: config 0 has an invalid interface number: 137 but max is 0 [ 168.898653][ T9] usb 3-1: config 0 has no interface number 0 [ 168.924045][ T9] usb 3-1: too many endpoints for config 0 interface 137 altsetting 239: 202, using maximum allowed: 30 [ 168.936847][ T9] usb 3-1: config 0 interface 137 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 168.960945][ T9] usb 3-1: config 0 interface 137 has no altsetting 0 [ 168.979135][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 168.989108][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.998315][ T9] usb 3-1: Product: syz [ 169.023626][ T9] usb 3-1: Manufacturer: syz [ 169.029406][ T9] usb 3-1: SerialNumber: syz [ 169.030217][ T8] hid (null): invalid report_count 56567 [ 169.044892][ T9] usb 3-1: config 0 descriptor?? [ 169.053371][ T9] peak_usb 3-1:0.137: probe with driver peak_usb failed with error 137 [ 169.063282][ T8] hid (null): unknown global tag 0xc [ 169.068808][ T8] hid (null): unknown global tag 0xd [ 169.075730][ T8] hid (null): bogus close delimiter [ 169.081788][ T8] hid (null): global environment stack overflow [ 169.104847][ T8] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5010.0029/input/input23 [ 169.198191][ T8] kye 0003:0458:5010.0029: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 169.215069][ T5868] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 169.244140][ T29] audit: type=1400 audit(1737609525.158:834): avc: denied { nlmsg_write } for pid=11102 comm="syz.3.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 169.303909][ T933] usb 1-1: USB disconnect, device number 24 [ 169.347335][ T9] usb 3-1: USB disconnect, device number 20 [ 169.384024][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 169.398094][ T5868] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.408987][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.419544][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.429790][ T5868] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.448552][ T5868] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.457859][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 169.465947][ T5868] usb 2-1: Product: syz [ 169.678756][ T5868] usb 2-1: GET_CAPABILITIES returned 0 [ 169.684337][ T5868] usbtmc 2-1:16.0: can't read capabilities [ 169.914693][T11096] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 169.926578][ T9] usb 2-1: USB disconnect, device number 23 [ 169.934176][T11111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2280'. [ 170.524998][T11135] binder: binder_mmap: 11132 20000000-20b36000 bad vm_flags failed -1 [ 170.543005][ T29] audit: type=1400 audit(1737609526.468:835): avc: denied { setopt } for pid=11136 comm="syz.1.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 170.714285][ T5868] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 170.887414][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 170.921744][T11152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2297'. [ 170.923332][ T5868] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.952000][ T5868] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.953524][T11152] netlink: 'syz.0.2297': attribute type 10 has an invalid length. [ 170.962478][ T5868] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 170.983869][ T5868] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.990940][ T5868] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 171.001534][T11154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2298'. [ 171.024110][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.034513][T11152] team0: Cannot enslave team device to itself [ 171.045485][ T5868] usb 4-1: config 0 descriptor?? [ 171.178772][T11159] IPVS: length: 163 != 24 [ 171.380118][T11170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2305'. [ 171.461046][ T5868] hid (null): invalid report_count 56567 [ 171.475362][ T5868] hid (null): unknown global tag 0xc [ 171.490865][ T5868] hid (null): unknown global tag 0xd [ 171.501003][ T5868] hid (null): bogus close delimiter [ 171.517534][ T5868] hid (null): global environment stack overflow [ 171.553386][ T5868] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5010.002A/input/input24 [ 171.634060][ T29] audit: type=1400 audit(1737609527.558:836): avc: denied { write } for pid=11189 comm="syz.1.2317" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 171.664415][ T933] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 171.675200][ T5868] kye 0003:0458:5010.002A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 171.676407][ T29] audit: type=1400 audit(1737609527.568:837): avc: denied { ioctl } for pid=11189 comm="syz.1.2317" path="net:[4026532802]" dev="nsfs" ino=4026532802 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 171.719804][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 171.746189][ T5868] usb 4-1: USB disconnect, device number 25 [ 171.845625][ T933] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 171.853824][ T933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.888804][ T933] usb 1-1: config 0 has no interface number 0 [ 171.900255][ T933] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 171.910320][ T933] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.931284][ T933] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 171.940760][ T933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.951797][ T933] usb 1-1: Product: syz [ 171.956380][ T933] usb 1-1: Manufacturer: syz [ 171.960965][ T933] usb 1-1: SerialNumber: syz [ 171.969567][ T933] usb 1-1: config 0 descriptor?? [ 172.124107][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 172.314971][ T8] usb 2-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 172.325747][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.335614][ T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 172.354101][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 172.362151][ T8] usb 2-1: SerialNumber: syz [ 172.585829][ T8] usb 2-1: invalid UAC_HEADER (v1) [ 172.593814][ T933] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.117/input/input25 [ 172.602441][ T8] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 172.617831][ T8] usb 2-1: USB disconnect, device number 24 [ 172.817798][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.837725][ T8] usb 1-1: USB disconnect, device number 25 [ 173.004478][ T29] audit: type=1400 audit(1737609528.928:838): avc: denied { create } for pid=11228 comm="syz.2.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.043441][ T29] audit: type=1400 audit(1737609528.938:839): avc: denied { bind } for pid=11228 comm="syz.2.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.073339][ T29] audit: type=1400 audit(1737609528.938:840): avc: denied { name_bind } for pid=11228 comm="syz.2.2333" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 173.094224][ T29] audit: type=1400 audit(1737609528.938:841): avc: denied { node_bind } for pid=11228 comm="syz.2.2333" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 173.267373][T11243] netlink: 'syz.1.2340': attribute type 1 has an invalid length. [ 173.387791][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 173.452718][T11255] netlink: 'syz.0.2346': attribute type 16 has an invalid length. [ 173.483581][T11255] netlink: 'syz.0.2346': attribute type 3 has an invalid length. [ 173.492319][T11255] netlink: 'syz.0.2346': attribute type 1 has an invalid length. [ 173.517639][T11255] netlink: 'syz.0.2346': attribute type 2 has an invalid length. [ 173.535785][T11255] netlink: 64022 bytes leftover after parsing attributes in process `syz.0.2346'. [ 173.558224][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 173.571415][ T8] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.597831][ T8] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.620839][ T8] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 173.637200][T11267] xt_ecn: cannot match TCP bits for non-tcp packets [ 173.637982][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.654004][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 173.663444][ T29] audit: type=1400 audit(1737609529.588:842): avc: denied { open } for pid=11268 comm="syz.0.2353" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 173.688095][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.699860][ T29] audit: type=1400 audit(1737609529.588:843): avc: denied { ioctl } for pid=11268 comm="syz.0.2353" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 173.700980][ T8] usb 3-1: config 0 descriptor?? [ 173.724948][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.754216][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 173.926567][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 173.940516][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 26, changing to 8 [ 173.958999][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 173.972804][ T9] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 173.984328][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.018873][ T9] usb 5-1: config 0 descriptor?? [ 174.160632][ T8] hid (null): invalid report_count 56567 [ 174.170048][ T8] hid (null): unknown global tag 0xc [ 174.182965][ T8] hid (null): unknown global tag 0xd [ 174.196477][ T8] hid (null): bogus close delimiter [ 174.203338][ T8] hid (null): global environment stack overflow [ 174.272737][ T8] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.002B/input/input26 [ 174.308680][ T8] kye 0003:0458:5010.002B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 174.308978][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 174.321054][ T29] audit: type=1400 audit(1737609530.238:844): avc: denied { nlmsg_read } for pid=11286 comm="syz.1.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.375491][ T8] usb 3-1: USB disconnect, device number 21 [ 174.483015][ T9] holtek 0003:1241:5015.002C: item fetching failed at offset 1/4 [ 174.501481][ T9] holtek 0003:1241:5015.002C: parse failed [ 174.513602][T11296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2363'. [ 174.515100][ T9] holtek 0003:1241:5015.002C: probe with driver holtek failed with error -22 [ 174.538682][T11296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2363'. [ 174.701058][ T8] usb 5-1: USB disconnect, device number 17 [ 174.823532][T11315] netlink: 243 bytes leftover after parsing attributes in process `syz.1.2372'. [ 174.838262][T11315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.974156][ T5868] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 175.019060][T11329] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.105688][ T29] audit: type=1400 audit(1737609531.038:845): avc: denied { listen } for pid=11335 comm="syz.0.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.144855][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.164416][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 175.178009][ T5868] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 175.187693][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.215829][ T5868] usb 4-1: config 0 descriptor?? [ 175.232060][T11308] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.309842][T11346] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 175.541690][T11367] netlink: 'syz.2.2397': attribute type 4 has an invalid length. [ 175.647144][ T5868] smartjoyplus 0003:0B43:0003.002D: unknown main item tag 0x0 [ 175.662864][ T5868] smartjoyplus 0003:0B43:0003.002D: unknown main item tag 0x0 [ 175.678484][ T5868] smartjoyplus 0003:0B43:0003.002D: unknown main item tag 0x0 [ 175.686177][ T5868] smartjoyplus 0003:0B43:0003.002D: unknown main item tag 0x0 [ 175.694127][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 175.697579][ T5868] smartjoyplus 0003:0B43:0003.002D: unknown main item tag 0x0 [ 175.741200][ T5868] smartjoyplus 0003:0B43:0003.002D: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.3-1/input0 [ 175.753630][ T5868] smartjoyplus 0003:0B43:0003.002D: no output reports found [ 175.845416][ T8] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 175.851266][ T5868] usb 4-1: USB disconnect, device number 26 [ 175.854248][ T8] usb 2-1: config 0 has no interface number 0 [ 175.878790][ T8] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.899943][ T8] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.912429][ T8] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 175.921575][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.937672][ T8] usb 2-1: config 0 descriptor?? [ 176.362209][ T8] uclogic 0003:28BD:0905.002E: Interface probing failed: -22 [ 176.383812][ T8] uclogic 0003:28BD:0905.002E: interface is invalid, ignoring [ 176.522743][T11416] netlink: 'syz.3.2419': attribute type 10 has an invalid length. [ 176.611102][ T8] usb 2-1: USB disconnect, device number 25 [ 176.814535][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 176.947605][ T5865] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 176.974733][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 176.982179][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.003092][ T9] usb 5-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 177.019953][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.050746][ T9] usb 5-1: config 0 descriptor?? [ 177.058990][ T9] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 177.117342][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 177.125645][ T5865] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.132351][T11436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2426'. [ 177.149430][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.184002][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.214312][ T5865] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.230294][ T5865] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.239618][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 177.253989][ T5865] usb 4-1: Product: syz [ 177.269177][ T5900] usb 5-1: USB disconnect, device number 18 [ 177.470351][ T5865] usb 4-1: GET_CAPABILITIES returned 0 [ 177.481070][ T5865] usbtmc 4-1:16.0: can't read capabilities [ 177.497448][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 177.497463][ T29] audit: type=1400 audit(1737609533.428:860): avc: denied { write } for pid=11448 comm="syz.0.2430" path="socket:[29684]" dev="sockfs" ino=29684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 177.613318][ T29] audit: type=1400 audit(1737609533.538:861): avc: denied { create } for pid=11454 comm="syz.0.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 177.637236][ T29] audit: type=1400 audit(1737609533.548:862): avc: denied { listen } for pid=11454 comm="syz.0.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 177.661702][ T29] audit: type=1400 audit(1737609533.548:863): avc: denied { accept } for pid=11454 comm="syz.0.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 177.705169][ T933] usb 4-1: USB disconnect, device number 27 [ 177.804354][ T5900] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 177.986304][T11471] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 177.993433][T11471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.994107][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 178.025302][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 178.051026][ T5900] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 178.052946][ T29] audit: type=1400 audit(1737609533.978:864): avc: denied { create } for pid=11472 comm="syz.0.2442" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.073973][ T5900] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.120328][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.126788][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2444'. [ 178.133729][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.154552][ T29] audit: type=1400 audit(1737609534.048:865): avc: denied { unlink } for pid=5821 comm="syz-executor" name="bus" dev="tmpfs" ino=2241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.185197][ T5900] usb 2-1: SerialNumber: syz [ 178.207511][T11447] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 178.309872][T11485] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 178.332663][T11487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2449'. [ 178.351503][T11487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2449'. [ 178.374972][T11487] erspan0: entered promiscuous mode [ 178.384029][ T29] audit: type=1400 audit(1737609534.308:866): avc: denied { ioctl } for pid=11489 comm="syz.0.2451" path="/441/file0" dev="tmpfs" ino=2257 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 178.455790][ T5900] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 178.465525][T11487] erspan0: left promiscuous mode [ 178.486202][ T5900] usb 2-1: USB disconnect, device number 26 [ 178.790614][T11516] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 178.912126][ T29] audit: type=1400 audit(1737609534.838:867): avc: denied { write } for pid=11522 comm="syz.0.2466" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 179.176718][T11540] batadv0: entered allmulticast mode [ 179.450188][T11545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.484439][T11549] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2476'. [ 179.602530][T11553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2478'. [ 179.854999][ T29] audit: type=1400 audit(1737609535.778:868): avc: denied { mount } for pid=11566 comm="syz.4.2485" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 179.943493][ T29] audit: type=1400 audit(1737609535.868:869): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 180.057879][T11587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2495'. [ 180.072354][T11587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2495'. [ 180.122272][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 180.211747][T11600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2500'. [ 181.481756][T11688] sp0: Synchronizing with TNC [ 181.757144][T11708] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.765565][T11708] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.814488][ T933] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 181.974044][ T933] usb 1-1: Using ep0 maxpacket: 16 [ 181.981218][ T933] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.992096][ T933] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.999295][ T933] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 182.008965][ T933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.019258][ T933] usb 1-1: config 0 descriptor?? [ 182.044358][ T5900] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 182.217105][ T5900] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 182.226862][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.240184][ T5900] usb 4-1: Product: syz [ 182.248214][ T5900] usb 4-1: Manufacturer: syz [ 182.252950][ T5900] usb 4-1: SerialNumber: syz [ 182.272199][ T5900] usb 4-1: config 0 descriptor?? [ 182.371065][T11740] __nla_validate_parse: 1 callbacks suppressed [ 182.371080][T11740] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2542'. [ 182.395013][T11740] netlink: 'syz.1.2542': attribute type 1 has an invalid length. [ 182.402809][T11740] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2542'. [ 182.451614][ T933] cherry 0003:046A:0023.002F: unexpected long global item [ 182.465521][ T933] cherry 0003:046A:0023.002F: probe with driver cherry failed with error -22 [ 182.564370][ T933] usb 4-1: USB disconnect, device number 28 [ 182.700015][ T5900] usb 1-1: USB disconnect, device number 26 [ 182.910484][T11759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.093547][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 183.093563][ T29] audit: type=1400 audit(1737609539.018:885): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.145358][ T29] audit: type=1400 audit(1737609539.058:886): avc: denied { read } for pid=5174 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 183.167272][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.174914][ T29] audit: type=1400 audit(1737609539.058:887): avc: denied { search } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.197071][ T29] audit: type=1400 audit(1737609539.058:888): avc: denied { append } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.219208][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.225954][ T29] audit: type=1400 audit(1737609539.058:889): avc: denied { open } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.248368][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.322806][ T29] audit: type=1400 audit(1737609539.058:890): avc: denied { getattr } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.331371][T11771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2554'. [ 183.369493][ T29] audit: type=1400 audit(1737609539.058:891): avc: denied { open } for pid=5817 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.400162][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2554'. [ 183.466491][ T29] audit: type=1400 audit(1737609539.058:892): avc: denied { ioctl } for pid=5817 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.499225][ T29] audit: type=1400 audit(1737609539.188:893): avc: denied { prog_load } for pid=11767 comm="syz.2.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 183.526396][ T29] audit: type=1400 audit(1737609539.188:894): avc: denied { bpf } for pid=11767 comm="syz.2.2553" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.570710][T11784] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2558'. [ 184.094524][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2570'. [ 184.111894][T11810] batadv0: entered promiscuous mode [ 184.133287][T11810] team0: entered promiscuous mode [ 184.139171][T11810] team_slave_0: entered promiscuous mode [ 184.149165][T11810] team_slave_1: entered promiscuous mode [ 184.154074][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 184.157669][T11810] hsr1: entered promiscuous mode [ 184.168191][T11810] hsr1: entered allmulticast mode [ 184.173275][T11810] batadv0: entered allmulticast mode [ 184.180211][T11810] team0: entered allmulticast mode [ 184.189717][T11810] team_slave_0: entered allmulticast mode [ 184.198003][T11810] team_slave_1: entered allmulticast mode [ 184.317971][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.336551][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 184.354109][ T5865] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 184.377029][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.398705][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.406908][ T9] usb 1-1: Product: syz [ 184.411075][ T9] usb 1-1: Manufacturer: syz [ 184.420024][ T9] usb 1-1: SerialNumber: syz [ 184.524835][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 184.535050][ T5865] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 184.548406][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.556864][ T5865] usb 2-1: Product: syz [ 184.561180][ T5865] usb 2-1: Manufacturer: syz [ 184.570472][ T5865] usb 2-1: SerialNumber: syz [ 184.584695][ T5865] usb 2-1: config 0 descriptor?? [ 184.599044][ T5865] gspca_main: sq930x-2.14.0 probing 2770:930c [ 184.641578][T11801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.653536][T11801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.672882][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 184.692460][ T9] usb 1-1: USB disconnect, device number 27 [ 184.924052][ T5900] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 185.079742][ T5900] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 185.089181][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.097263][ T5900] usb 3-1: Product: syz [ 185.101655][ T5900] usb 3-1: Manufacturer: syz [ 185.106592][ T5900] usb 3-1: SerialNumber: syz [ 185.112486][ T5900] usb 3-1: config 0 descriptor?? [ 185.117480][ T8] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 185.274026][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 185.280478][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 185.289519][ T8] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 185.300256][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.310605][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.320718][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 185.320847][ T5900] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 185.331309][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.375324][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.385590][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.406204][ T5865] gspca_sq930x: ucbus_write failed -71 [ 185.526270][ T5900] usb 3-1: USB disconnect, device number 22 [ 185.602485][ T8] usb 1-1: usb_control_msg returned -71 [ 185.608516][ T8] usbtmc 1-1:16.0: can't read capabilities [ 185.623599][ T8] usb 1-1: USB disconnect, device number 28 [ 185.632002][ T5865] gspca_sq930x: Sensor ov9630 not yet treated [ 185.644636][ T5865] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 185.657429][ T5865] usb 2-1: USB disconnect, device number 27 [ 186.348600][T11875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.598656][T11885] netlink: 'syz.3.2602': attribute type 1 has an invalid length. [ 186.621630][T11885] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.2602'. [ 186.664064][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2605'. [ 186.700405][T11889] batadv0: entered allmulticast mode [ 187.213871][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 187.231345][T11925] trusted_key: syz.0.2620 sent an empty control message without MSG_MORE. [ 187.231984][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 187.334283][ T5900] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 187.434058][ T5865] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 187.494328][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 187.506949][ T5900] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.530365][ T5900] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.556301][ T5900] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 187.587952][ T5900] usb 5-1: config 0 interface 0 has no altsetting 0 [ 187.588367][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 187.595328][ T5900] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 187.614656][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.615827][ T5865] usb 4-1: config 0 has no interfaces? [ 187.624527][ T5900] usb 5-1: config 0 descriptor?? [ 187.641308][ T5865] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.652685][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 187.664383][ T933] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 187.666464][ T5865] usb 4-1: SerialNumber: syz [ 187.681622][ T5865] usb 4-1: config 0 descriptor?? [ 187.833675][ T933] usb 3-1: Using ep0 maxpacket: 32 [ 187.840941][ T933] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 187.863331][ T933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.882871][ T933] usb 3-1: config 0 descriptor?? [ 187.897815][ T933] gspca_main: sunplus-2.14.0 probing 041e:400b [ 187.961936][ T25] usb 4-1: USB disconnect, device number 29 [ 188.068057][ T5900] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.0030/input/input28 [ 188.109368][ T933] gspca_sunplus: reg_w_riv err -71 [ 188.116528][ T933] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 188.127062][T11969] netlink: 'syz.1.2636': attribute type 25 has an invalid length. [ 188.141852][T11969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2636'. [ 188.151317][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 188.151330][ T29] audit: type=1400 audit(1737609544.078:992): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3455 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.183911][ T933] usb 3-1: USB disconnect, device number 23 [ 188.203116][ T5900] kye 0003:0458:5010.0030: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 188.350325][ T5865] usb 5-1: USB disconnect, device number 19 [ 188.470529][T11986] netlink: 'syz.1.2640': attribute type 10 has an invalid length. [ 188.635128][T11996] netlink: 'syz.3.2642': attribute type 1 has an invalid length. [ 188.705758][ T29] audit: type=1400 audit(1737609544.628:993): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 188.741787][ T29] audit: type=1400 audit(1737609544.668:994): avc: denied { map } for pid=12000 comm="syz.2.2643" path="socket:[33815]" dev="sockfs" ino=33815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 188.868425][ T5826] Bluetooth: hci5: sending frame failed (-49) [ 188.880052][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 188.980776][ T29] audit: type=1400 audit(1737609544.908:995): avc: denied { listen } for pid=12013 comm="syz.0.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.054568][ T29] audit: type=1400 audit(1737609544.928:996): avc: denied { create } for pid=12013 comm="syz.0.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 189.075400][ T933] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 189.113350][ T29] audit: type=1400 audit(1737609544.928:997): avc: denied { write } for pid=12013 comm="syz.0.2647" path="socket:[33831]" dev="sockfs" ino=33831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 189.161453][ T29] audit: type=1400 audit(1737609544.928:998): avc: denied { nlmsg_read } for pid=12013 comm="syz.0.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 189.184274][ T5865] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 189.254269][ T933] usb 2-1: Using ep0 maxpacket: 16 [ 189.278089][ T933] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 189.290570][ T933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.302390][ T933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 189.321566][ T933] usb 2-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 189.335477][ T29] audit: type=1400 audit(1737609545.268:999): avc: denied { write } for pid=12037 comm="syz.0.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 189.354817][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 189.367452][ T5865] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 189.370492][ T933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.386767][ T5865] usb 4-1: config 0 has no interface number 0 [ 189.402045][ T5865] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 189.410757][ T933] usb 2-1: config 0 descriptor?? [ 189.428773][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.441563][ T5865] usb 4-1: Product: syz [ 189.454022][ T5865] usb 4-1: Manufacturer: syz [ 189.463189][ T5865] usb 4-1: SerialNumber: syz [ 189.483301][ T5865] usb 4-1: config 0 descriptor?? [ 189.597443][T12053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2658'. [ 189.713330][ T29] audit: type=1400 audit(1737609545.638:1000): avc: denied { create } for pid=12060 comm="syz.0.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.751168][ T5900] usb 4-1: USB disconnect, device number 30 [ 189.776881][ T29] audit: type=1400 audit(1737609545.668:1001): avc: denied { connect } for pid=12060 comm="syz.0.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.845409][ T933] usbhid 2-1:0.0: can't add hid device: -71 [ 189.851860][ T933] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 189.890989][ T933] usb 2-1: USB disconnect, device number 28 [ 190.167203][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2666'. [ 190.656691][ T933] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 190.857725][ T933] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.885379][ T933] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.895111][ T933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 190.903112][ T933] usb 5-1: SerialNumber: syz [ 191.084290][ T5900] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 191.235618][ T5900] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 191.264576][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.279578][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 191.312589][ T5900] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 191.333328][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.375889][ T5900] usb 2-1: config 0 descriptor?? [ 191.675953][T12169] ax25_connect(): syz.0.2700 uses autobind, please contact jreuter@yaina.de [ 191.737080][ T933] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 191.763810][ T933] usb 5-1: USB disconnect, device number 20 [ 191.793264][ T5900] megaworld 0003:07B5:0312.0031: item fetching failed at offset 2/5 [ 191.803250][ T5900] megaworld 0003:07B5:0312.0031: parse failed [ 191.809786][ T5900] megaworld 0003:07B5:0312.0031: probe with driver megaworld failed with error -22 [ 191.844208][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 191.996173][ T5865] usb 2-1: USB disconnect, device number 29 [ 192.014059][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 192.022639][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.034047][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.043783][ T25] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 192.055729][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.065519][ T25] usb 3-1: config 0 descriptor?? [ 192.453827][T12187] loop6: detected capacity change from 0 to 524287999 [ 192.473363][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.482727][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.496046][ T25] ft260 0003:0403:6030.0032: unknown main item tag 0x0 [ 192.497807][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.512104][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.523710][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.532900][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.541208][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.550394][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.559152][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.568374][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.598495][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.607682][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.617332][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.626486][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.638885][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.648060][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.655955][T12187] ldm_validate_partition_table(): Disk read failed. [ 192.664382][ T5900] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 192.672976][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.682165][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.695896][ T25] ft260 0003:0403:6030.0032: chip code: 5e81 abf2 [ 192.702950][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.712119][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.721094][T12187] Dev loop6: unable to read RDB block 0 [ 192.728469][T12187] loop6: unable to read partition table [ 192.734720][T12187] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 192.751479][T12189] ldm_validate_partition_table(): Disk read failed. [ 192.758765][T12189] Dev loop6: unable to read RDB block 0 [ 192.765723][T12189] loop6: unable to read partition table [ 192.771495][T12189] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 192.857383][ T5900] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 192.866747][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.875302][ T5900] usb 1-1: Product: syz [ 192.879602][ T5900] usb 1-1: Manufacturer: syz [ 192.884836][ T5900] usb 1-1: SerialNumber: syz [ 192.891317][ T5900] usb 1-1: config 0 descriptor?? [ 192.898267][ T25] ft260 0003:0403:6030.0032: failed to retrieve system status [ 192.909610][T12199] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2712'. [ 192.919569][ T25] ft260 0003:0403:6030.0032: probe with driver ft260 failed with error -71 [ 192.934227][ T25] usb 3-1: USB disconnect, device number 24 [ 193.134546][ T8] usb 1-1: USB disconnect, device number 29 [ 193.235704][ T5865] kernel write not supported for file /media0 (pid: 5865 comm: kworker/0:4) [ 193.350613][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 193.350629][ T29] audit: type=1400 audit(1737609549.278:1050): avc: denied { create } for pid=12221 comm="syz.3.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 193.377612][ T29] audit: type=1400 audit(1737609549.288:1051): avc: denied { read append } for pid=12221 comm="syz.3.2725" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 193.643289][ T29] audit: type=1400 audit(1737609549.568:1052): avc: denied { setopt } for pid=12234 comm="syz.2.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.665431][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2732'. [ 193.687078][ T29] audit: type=1400 audit(1737609549.598:1053): avc: denied { bind } for pid=12234 comm="syz.2.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.750285][ T29] audit: type=1326 audit(1737609549.678:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12240 comm="syz.2.2734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc25cb8cd29 code=0x0 [ 193.858974][ T29] audit: type=1400 audit(1737609549.788:1055): avc: denied { unlink } for pid=12245 comm="syz.4.2736" name="#1" dev="tmpfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 193.917332][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.923737][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.930376][ T29] audit: type=1400 audit(1737609549.788:1056): avc: denied { mount } for pid=12245 comm="syz.4.2736" name="/" dev="overlay" ino=2903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 194.209743][T12262] netlink: 'syz.3.2743': attribute type 1 has an invalid length. [ 194.514024][ T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 194.672240][T12278] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 194.689834][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.709075][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.719673][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.729795][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.746145][ T29] audit: type=1326 audit(1737609550.678:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41998cd29 code=0x7ffc0000 [ 194.773743][ T29] audit: type=1326 audit(1737609550.678:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41998cd29 code=0x7ffc0000 [ 194.776192][ T25] usb 4-1: string descriptor 0 read error: -71 [ 194.816214][ T29] audit: type=1326 audit(1737609550.678:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe41998cd29 code=0x7ffc0000 [ 194.830290][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.858003][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.864260][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 194.888346][ T25] usb 4-1: can't set config #1, error -71 [ 194.900705][ T25] usb 4-1: USB disconnect, device number 31 [ 195.027402][ T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 195.027592][T12289] syz.1.2755 (12289) used greatest stack depth: 19792 bytes left [ 195.044406][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.044431][ T8] usb 3-1: Product: syz [ 195.044445][ T8] usb 3-1: Manufacturer: syz [ 195.044459][ T8] usb 3-1: SerialNumber: syz [ 195.045863][ T8] usb 3-1: config 0 descriptor?? [ 195.116453][T12291] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 195.312128][ T25] usb 3-1: USB disconnect, device number 25 [ 195.404811][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 195.569657][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.601517][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.621617][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 195.641778][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.683052][ T8] usb 5-1: config 0 descriptor?? [ 196.142671][ T8] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 196.164488][ T8] cp2112 0003:10C4:EA90.0033: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 196.178387][T12335] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.2777'. [ 196.342193][ T8] cp2112 0003:10C4:EA90.0033: Part Number: 0x6A Device Version: 0xAF [ 196.542849][ T8] cp2112 0003:10C4:EA90.0033: error requesting SMBus config [ 196.561952][ T8] cp2112 0003:10C4:EA90.0033: probe with driver cp2112 failed with error -71 [ 196.580701][ T8] usb 5-1: USB disconnect, device number 21 [ 196.590471][T12354] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2784'. [ 197.203732][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2805'. [ 197.374062][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 197.479563][T12413] Invalid ELF header len 8 [ 197.494061][ T25] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 197.527859][ T8] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 197.536489][ T8] usb 3-1: config 0 has no interface number 0 [ 197.544624][ T8] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 197.556469][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 197.566059][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.574763][ T8] usb 3-1: Product: syz [ 197.594271][ T8] usb 3-1: Manufacturer: syz [ 197.598958][ T8] usb 3-1: SerialNumber: syz [ 197.606995][ T8] usb 3-1: config 0 descriptor?? [ 197.617293][T12399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 197.628481][ T8] qmi_wwan 3-1:0.197: probe with driver qmi_wwan failed with error -22 [ 197.665947][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.681686][ T25] usb 5-1: config 0 has no interfaces? [ 197.693990][ T25] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 197.703205][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.730459][ T25] usb 5-1: config 0 descriptor?? [ 197.842238][ T8] usb 3-1: USB disconnect, device number 26 [ 197.948808][ T9] usb 5-1: USB disconnect, device number 22 [ 198.210903][T12436] input: syz0 as /devices/virtual/input/input30 [ 198.561024][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 198.561039][ T29] audit: type=1400 audit(1737609554.488:1098): avc: denied { read write } for pid=12448 comm="syz.4.2826" name="mouse0" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 198.695813][ T29] audit: type=1400 audit(1737609554.488:1099): avc: denied { open } for pid=12448 comm="syz.4.2826" path="/dev/input/mouse0" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 198.721458][ T29] audit: type=1400 audit(1737609554.588:1100): avc: denied { map } for pid=12448 comm="syz.4.2826" path="socket:[34698]" dev="sockfs" ino=34698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.745801][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.754685][ T29] audit: type=1400 audit(1737609554.588:1101): avc: denied { read } for pid=12448 comm="syz.4.2826" path="socket:[34698]" dev="sockfs" ino=34698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.779082][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.821056][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'. [ 198.912838][ T29] audit: type=1400 audit(1737609554.838:1102): avc: denied { write } for pid=12469 comm="syz.1.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 198.988947][ T29] audit: type=1400 audit(1737609554.918:1103): avc: denied { setopt } for pid=12471 comm="syz.3.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.027007][ T29] audit: type=1400 audit(1737609554.918:1104): avc: denied { read } for pid=12471 comm="syz.3.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.083718][ T29] audit: type=1400 audit(1737609554.978:1105): avc: denied { write } for pid=12471 comm="syz.3.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.107382][T12477] use of bytesused == 0 is deprecated and will be removed in the future, [ 199.189385][T12477] use the actual size instead. [ 199.280232][ T29] audit: type=1400 audit(1737609555.208:1106): avc: denied { bind } for pid=12487 comm="syz.1.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.327422][ T29] audit: type=1400 audit(1737609555.238:1107): avc: denied { listen } for pid=12487 comm="syz.1.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.060149][T12537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2864'. [ 200.205393][T12542] openvswitch: netlink: Actions may not be safe on all matching packets [ 200.643370][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'. [ 200.664745][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'. [ 200.666582][T12571] batadv0: entered promiscuous mode [ 200.673646][T12569] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2878'. [ 200.700200][T12571] team0: entered promiscuous mode [ 200.710481][T12571] team_slave_0: entered promiscuous mode [ 200.716315][T12571] team_slave_1: entered promiscuous mode [ 200.733053][T12571] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 200.744271][T12571] Cannot create hsr debugfs directory [ 200.761620][T12571] hsr1: entered promiscuous mode [ 200.773626][T12571] hsr1: entered allmulticast mode [ 200.781278][T12571] batadv0: entered allmulticast mode [ 200.786861][T12571] team0: entered allmulticast mode [ 200.792058][T12571] team_slave_0: entered allmulticast mode [ 200.802758][T12571] team_slave_1: entered allmulticast mode [ 200.942205][T12591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.217768][T12612] 9p: Unknown access argument 18446744073709551615: -34 [ 201.671623][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2910'. [ 203.053074][T12714] binder: 12713:12714 ioctl 541b 0 returned -22 [ 203.081633][ T8] kernel read not supported for file /usbmon0 (pid: 8 comm: kworker/0:0) [ 203.324437][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 203.373071][T12740] team0: Device gtp0 is of different type [ 203.486544][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.495720][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.524314][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.543496][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.566098][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.584352][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.593971][ T9] usb 5-1: Product: syz [ 203.598375][ T9] usb 5-1: Manufacturer: syz [ 203.624141][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 203.629408][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 203.858708][ T5865] usb 5-1: USB disconnect, device number 23 [ 204.216550][T12775] netlink: 'syz.0.2971': attribute type 8 has an invalid length. [ 204.378992][T12767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.664718][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 204.684026][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 204.767716][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 204.767730][ T29] audit: type=1400 audit(1737609560.698:1142): avc: denied { read } for pid=12806 comm="syz.1.2986" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.794066][ T5865] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 204.815480][ T8] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 204.823578][ T8] usb 5-1: config 0 has no interface number 0 [ 204.824235][ T29] audit: type=1400 audit(1737609560.748:1143): avc: denied { setopt } for pid=12806 comm="syz.1.2986" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.833294][ T8] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.849940][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.872487][ T8] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.883105][ T8] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 204.892485][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.900643][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.907647][ T9] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 204.917471][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.928529][ T9] usb 1-1: config 0 descriptor?? [ 204.935745][ T8] usb 5-1: config 0 descriptor?? [ 204.944068][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 204.954344][ T5865] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.973046][ T5865] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 204.984427][ T5865] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 205.001462][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0 [ 205.008421][ T5865] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 205.017618][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.029504][ T5865] usb 4-1: config 0 descriptor?? [ 205.168987][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'. [ 205.333666][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2999'. [ 205.371722][ T9] cherry 0003:046A:0023.0034: unknown main item tag 0x0 [ 205.381138][ T8] hid-retrode 0003:0403:97C1.0035: unknown main item tag 0x0 [ 205.390496][ T9] cherry 0003:046A:0023.0034: hidraw0: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.0-1/input0 [ 205.407704][ T8] hid-retrode 0003:0403:97C1.0035: unknown main item tag 0x2 [ 205.415839][ T8] hid-retrode 0003:0403:97C1.0035: item fetching failed at offset 2/5 [ 205.432107][ T8] hid-retrode 0003:0403:97C1.0035: probe with driver hid-retrode failed with error -22 [ 205.466032][ T5865] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 205.473903][ T5865] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 205.487211][ T5865] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 205.496650][ T5865] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 205.504979][ T5865] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 205.514360][ T5865] hid-thrustmaster 0003:044F:B65D.0036: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 205.526572][ T5865] ================================================================== [ 205.534634][ T5865] BUG: KASAN: stack-out-of-bounds in usb_check_int_endpoints+0x247/0x270 [ 205.543067][ T5865] Read of size 1 at addr ffffc900041aebb1 by task kworker/0:4/5865 [ 205.550961][ T5865] [ 205.553294][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: kworker/0:4 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 205.553317][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 205.553330][ T5865] Workqueue: usb_hub_wq hub_event [ 205.553353][ T5865] Call Trace: [ 205.553359][ T5865] [ 205.553365][ T5865] dump_stack_lvl+0x116/0x1f0 [ 205.553388][ T5865] print_report+0xc3/0x620 [ 205.553412][ T5865] ? __virt_addr_valid+0x5e/0x590 [ 205.553440][ T5865] kasan_report+0xd9/0x110 [ 205.553463][ T5865] ? usb_check_int_endpoints+0x247/0x270 [ 205.553486][ T5865] ? usb_check_int_endpoints+0x247/0x270 [ 205.553508][ T5865] usb_check_int_endpoints+0x247/0x270 [ 205.553529][ T5865] thrustmaster_probe+0x499/0xe10 [ 205.553554][ T5865] ? __pfx_thrustmaster_probe+0x10/0x10 [ 205.553577][ T5865] ? hid_match_id+0x202/0x2e0 [ 205.553602][ T5865] ? __pfx_thrustmaster_probe+0x10/0x10 [ 205.553622][ T5865] hid_device_probe+0x349/0x700 [ 205.553645][ T5865] ? __pfx_hid_device_probe+0x10/0x10 [ 205.553669][ T5865] really_probe+0x23e/0xa90 [ 205.553689][ T5865] __driver_probe_device+0x1de/0x440 [ 205.553708][ T5865] driver_probe_device+0x4c/0x1b0 [ 205.553727][ T5865] __device_attach_driver+0x1df/0x310 [ 205.553746][ T5865] ? __pfx___device_attach_driver+0x10/0x10 [ 205.553765][ T5865] bus_for_each_drv+0x157/0x1e0 [ 205.553780][ T5865] ? __pfx_bus_for_each_drv+0x10/0x10 [ 205.553795][ T5865] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.553812][ T5865] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 205.553830][ T5865] __device_attach+0x1e8/0x4b0 [ 205.553850][ T5865] ? __pfx___device_attach+0x10/0x10 [ 205.553868][ T5865] ? do_raw_spin_unlock+0x172/0x230 [ 205.553892][ T5865] bus_probe_device+0x17f/0x1c0 [ 205.553908][ T5865] device_add+0x114b/0x1a70 [ 205.553929][ T5865] ? __pfx_device_add+0x10/0x10 [ 205.553951][ T5865] ? debugfs_create_file_full+0x75/0xa0 [ 205.553974][ T5865] hid_add_device+0x374/0xa60 [ 205.553994][ T5865] ? lockdep_init_map_type+0x16d/0x7d0 [ 205.554013][ T5865] ? __pfx_hid_add_device+0x10/0x10 [ 205.554048][ T5865] ? lockdep_init_map_type+0x16d/0x7d0 [ 205.554069][ T5865] ? __raw_spin_lock_init+0x3a/0x110 [ 205.554093][ T5865] usbhid_probe+0xd32/0x1400 [ 205.554115][ T5865] usb_probe_interface+0x300/0x9c0 [ 205.554139][ T5865] ? __pfx_usb_probe_interface+0x10/0x10 [ 205.554162][ T5865] really_probe+0x23e/0xa90 [ 205.554182][ T5865] __driver_probe_device+0x1de/0x440 [ 205.554202][ T5865] driver_probe_device+0x4c/0x1b0 [ 205.554221][ T5865] __device_attach_driver+0x1df/0x310 [ 205.554240][ T5865] ? __pfx___device_attach_driver+0x10/0x10 [ 205.554259][ T5865] bus_for_each_drv+0x157/0x1e0 [ 205.554274][ T5865] ? __pfx_bus_for_each_drv+0x10/0x10 [ 205.554295][ T5865] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.554312][ T5865] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 205.554329][ T5865] __device_attach+0x1e8/0x4b0 [ 205.554349][ T5865] ? __pfx___device_attach+0x10/0x10 [ 205.554370][ T5865] ? do_raw_spin_unlock+0x172/0x230 [ 205.554395][ T5865] bus_probe_device+0x17f/0x1c0 [ 205.554414][ T5865] device_add+0x114b/0x1a70 [ 205.554439][ T5865] ? __pfx_device_add+0x10/0x10 [ 205.554464][ T5865] ? wakeup_sysfs_add+0x51/0x60 [ 205.554490][ T5865] usb_set_configuration+0x10cb/0x1c50 [ 205.554515][ T5865] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 205.554532][ T5865] usb_generic_driver_probe+0xb1/0x110 [ 205.554548][ T5865] usb_probe_device+0xec/0x3e0 [ 205.554567][ T5865] ? __pfx_usb_probe_device+0x10/0x10 [ 205.554587][ T5865] really_probe+0x23e/0xa90 [ 205.554606][ T5865] __driver_probe_device+0x1de/0x440 [ 205.554625][ T5865] ? usb_driver_applicable+0x1c7/0x220 [ 205.554645][ T5865] driver_probe_device+0x4c/0x1b0 [ 205.554664][ T5865] __device_attach_driver+0x1df/0x310 [ 205.554683][ T5865] ? __pfx___device_attach_driver+0x10/0x10 [ 205.554703][ T5865] bus_for_each_drv+0x157/0x1e0 [ 205.554719][ T5865] ? __pfx_bus_for_each_drv+0x10/0x10 [ 205.554735][ T5865] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.554753][ T5865] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 205.554770][ T5865] __device_attach+0x1e8/0x4b0 [ 205.554788][ T5865] ? __pfx___device_attach+0x10/0x10 [ 205.554807][ T5865] ? do_raw_spin_unlock+0x172/0x230 [ 205.554834][ T5865] bus_probe_device+0x17f/0x1c0 [ 205.554853][ T5865] device_add+0x114b/0x1a70 [ 205.554875][ T5865] ? __pfx_device_add+0x10/0x10 [ 205.554896][ T5865] ? usb_detect_static_quirks+0x335/0x3e0 [ 205.554917][ T5865] usb_new_device+0xd09/0x1a20 [ 205.554938][ T5865] ? __pfx_usb_new_device+0x10/0x10 [ 205.554960][ T5865] hub_event+0x2d9a/0x4e10 [ 205.554990][ T5865] ? __pfx_hub_event+0x10/0x10 [ 205.555009][ T5865] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 205.555030][ T5865] ? rcu_is_watching+0x12/0xc0 [ 205.555043][ T5865] ? trace_lock_acquire+0x14e/0x1f0 [ 205.555059][ T5865] ? process_one_work+0x921/0x1ba0 [ 205.555077][ T5865] ? lock_acquire+0x2f/0xb0 [ 205.555094][ T5865] ? process_one_work+0x921/0x1ba0 [ 205.555112][ T5865] process_one_work+0x9c5/0x1ba0 [ 205.555135][ T5865] ? __pfx_hcd_resume_work+0x10/0x10 [ 205.555156][ T5865] ? __pfx_process_one_work+0x10/0x10 [ 205.555174][ T5865] ? rcu_is_watching+0x12/0xc0 [ 205.555190][ T5865] ? assign_work+0x1a0/0x250 [ 205.555207][ T5865] worker_thread+0x6c8/0xf00 [ 205.555229][ T5865] ? __kthread_parkme+0x148/0x220 [ 205.555252][ T5865] ? __pfx_worker_thread+0x10/0x10 [ 205.555272][ T5865] kthread+0x3af/0x750 [ 205.555299][ T5865] ? __pfx_kthread+0x10/0x10 [ 205.555317][ T5865] ? lock_acquire+0x2f/0xb0 [ 205.555338][ T5865] ? __pfx_kthread+0x10/0x10 [ 205.555354][ T5865] ret_from_fork+0x45/0x80 [ 205.555371][ T5865] ? __pfx_kthread+0x10/0x10 [ 205.555387][ T5865] ret_from_fork_asm+0x1a/0x30 [ 205.555417][ T5865] [ 205.555422][ T5865] [ 205.609243][ T5900] usb 1-1: USB disconnect, device number 30 [ 205.611096][ T5865] The buggy address belongs to stack of task kworker/0:4/5865 [ 205.611108][ T5865] and is located at offset 65 in frame: [ 205.611115][ T5865] thrustmaster_probe+0x0/0xe10 [ 205.618978][ T5868] usb 5-1: USB disconnect, device number 24 [ 205.622159][ T5865] [ 205.622166][ T5865] This frame has 2 objects: [ 206.001285][T12852] team0: No ports can be present during mode change [ 206.005617][ T5865] [48, 52) 'trans' [ 206.005629][ T5865] [64, 65) 'ep_addr' [ 206.005637][ T5865] [ 206.005646][ T5865] The buggy address belongs to the virtual mapping at [ 206.005646][ T5865] [ffffc900041a8000, ffffc900041b1000) created by: [ 206.005646][ T5865] kernel_clone+0xfd/0x960 [ 206.005680][ T5865] [ 206.005684][ T5865] The buggy address belongs to the physical page: [ 206.005689][ T5865] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x7c6f1 [ 206.005701][ T5865] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 206.005718][ T5865] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 206.005729][ T5865] raw: 0000000000000008 0000000000000000 00000001ffffffff 0000000000000000 [ 206.208643][ T5865] page dumped because: kasan: bad access detected [ 206.215050][ T5865] page_owner tracks the page as allocated [ 206.220758][ T5865] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 52057448649, free_ts 52011779512 [ 206.239090][ T5865] post_alloc_hook+0x2d1/0x350 [ 206.243871][ T5865] get_page_from_freelist+0xfce/0x2f80 [ 206.249341][ T5865] __alloc_pages_noprof+0x221/0x2470 [ 206.254637][ T5865] __vmalloc_node_range_noprof+0x640/0x1530 [ 206.260543][ T5865] copy_process+0x2f07/0x8d10 [ 206.265230][ T5865] kernel_clone+0xfd/0x960 [ 206.269653][ T5865] kernel_thread+0xc0/0x100 [ 206.274163][ T5865] kthreadd+0x4ef/0x7d0 [ 206.276777][ T29] audit: type=1400 audit(1737609562.168:1144): avc: denied { execute } for pid=12862 comm="syz.4.3009" path="/dev/dsp" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 206.278308][ T5865] ret_from_fork+0x45/0x80 [ 206.278329][ T5865] ret_from_fork_asm+0x1a/0x30 [ 206.278353][ T5865] page last free pid 5821 tgid 5821 stack trace: [ 206.302032][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.306406][ T5865] free_unref_page+0x661/0x1080 [ 206.328254][ T5865] __put_partials+0x14c/0x170 [ 206.332935][ T5865] qlist_free_all+0x4e/0x120 [ 206.337528][ T5865] kasan_quarantine_reduce+0x195/0x1e0 [ 206.342990][ T5865] __kasan_slab_alloc+0x69/0x90 [ 206.347845][ T5865] __kmalloc_cache_noprof+0x243/0x410 [ 206.353194][ T5865] ref_tracker_alloc+0x17c/0x5b0 [ 206.358115][ T5865] register_netdevice+0x166d/0x1eb0 [ 206.363307][ T5865] geneve_configure+0x788/0xb00 [ 206.368133][ T5865] geneve_newlink+0x12f/0x2c0 [ 206.372802][ T5865] rtnl_newlink+0xb95/0x1d60 [ 206.377367][ T5865] rtnetlink_rcv_msg+0x95b/0xea0 [ 206.382277][ T5865] netlink_rcv_skb+0x16b/0x440 [ 206.387012][ T5865] netlink_unicast+0x53c/0x7f0 [ 206.391756][ T5865] netlink_sendmsg+0x8b8/0xd70 [ 206.396491][ T5865] __sys_sendto+0x488/0x4f0 [ 206.400965][ T5865] [ 206.403262][ T5865] Memory state around the buggy address: [ 206.408864][ T5865] ffffc900041aea80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 206.416908][ T5865] ffffc900041aeb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 [ 206.424941][ T5865] >ffffc900041aeb80: f1 f1 f1 f1 04 f2 01 f3 f3 f3 00 00 00 00 00 00 [ 206.432974][ T5865] ^ [ 206.438585][ T5865] ffffc900041aec00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 206.446624][ T5865] ffffc900041aec80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 206.454673][ T5865] ================================================================== [ 206.466266][T12859] wireguard0: entered promiscuous mode [ 206.477423][ T5865] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 206.484642][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: kworker/0:4 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 206.495056][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 206.505114][ T5865] Workqueue: usb_hub_wq hub_event [ 206.510154][ T5865] Call Trace: [ 206.513433][ T5865] [ 206.516364][ T5865] dump_stack_lvl+0x3d/0x1f0 [ 206.520962][ T5865] panic+0x71d/0x800 [ 206.524861][ T5865] ? __pfx_panic+0x10/0x10 [ 206.529267][ T5865] ? irqentry_exit+0x3b/0x90 [ 206.533839][ T5865] ? lockdep_hardirqs_on+0x7c/0x110 [ 206.539019][ T5865] ? preempt_schedule_thunk+0x1a/0x30 [ 206.544378][ T5865] ? preempt_schedule_common+0x44/0xc0 [ 206.549818][ T5865] check_panic_on_warn+0xab/0xb0 [ 206.554737][ T5865] end_report+0x117/0x180 [ 206.559052][ T5865] kasan_report+0xe9/0x110 [ 206.563450][ T5865] ? usb_check_int_endpoints+0x247/0x270 [ 206.569073][ T5865] ? usb_check_int_endpoints+0x247/0x270 [ 206.574690][ T5865] usb_check_int_endpoints+0x247/0x270 [ 206.580134][ T5865] thrustmaster_probe+0x499/0xe10 [ 206.585148][ T5865] ? __pfx_thrustmaster_probe+0x10/0x10 [ 206.590701][ T5865] ? hid_match_id+0x202/0x2e0 [ 206.595384][ T5865] ? __pfx_thrustmaster_probe+0x10/0x10 [ 206.600914][ T5865] hid_device_probe+0x349/0x700 [ 206.605765][ T5865] ? __pfx_hid_device_probe+0x10/0x10 [ 206.611147][ T5865] really_probe+0x23e/0xa90 [ 206.615646][ T5865] __driver_probe_device+0x1de/0x440 [ 206.620922][ T5865] driver_probe_device+0x4c/0x1b0 [ 206.625949][ T5865] __device_attach_driver+0x1df/0x310 [ 206.631327][ T5865] ? __pfx___device_attach_driver+0x10/0x10 [ 206.637215][ T5865] bus_for_each_drv+0x157/0x1e0 [ 206.642054][ T5865] ? __pfx_bus_for_each_drv+0x10/0x10 [ 206.647411][ T5865] ? lockdep_hardirqs_on+0x7c/0x110 [ 206.652601][ T5865] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 206.658411][ T5865] __device_attach+0x1e8/0x4b0 [ 206.663159][ T5865] ? __pfx___device_attach+0x10/0x10 [ 206.668428][ T5865] ? do_raw_spin_unlock+0x172/0x230 [ 206.673618][ T5865] bus_probe_device+0x17f/0x1c0 [ 206.678448][ T5865] device_add+0x114b/0x1a70 [ 206.682937][ T5865] ? __pfx_device_add+0x10/0x10 [ 206.687777][ T5865] ? debugfs_create_file_full+0x75/0xa0 [ 206.693310][ T5865] hid_add_device+0x374/0xa60 [ 206.697971][ T5865] ? lockdep_init_map_type+0x16d/0x7d0 [ 206.703414][ T5865] ? __pfx_hid_add_device+0x10/0x10 [ 206.708601][ T5865] ? lockdep_init_map_type+0x16d/0x7d0 [ 206.714055][ T5865] ? __raw_spin_lock_init+0x3a/0x110 [ 206.719325][ T5865] usbhid_probe+0xd32/0x1400 [ 206.723901][ T5865] usb_probe_interface+0x300/0x9c0 [ 206.729003][ T5865] ? __pfx_usb_probe_interface+0x10/0x10 [ 206.734618][ T5865] really_probe+0x23e/0xa90 [ 206.739105][ T5865] __driver_probe_device+0x1de/0x440 [ 206.744371][ T5865] driver_probe_device+0x4c/0x1b0 [ 206.749378][ T5865] __device_attach_driver+0x1df/0x310 [ 206.754736][ T5865] ? __pfx___device_attach_driver+0x10/0x10 [ 206.760610][ T5865] bus_for_each_drv+0x157/0x1e0 [ 206.765440][ T5865] ? __pfx_bus_for_each_drv+0x10/0x10 [ 206.770788][ T5865] ? lockdep_hardirqs_on+0x7c/0x110 [ 206.775967][ T5865] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 206.781751][ T5865] __device_attach+0x1e8/0x4b0 [ 206.786504][ T5865] ? __pfx___device_attach+0x10/0x10 [ 206.791770][ T5865] ? do_raw_spin_unlock+0x172/0x230 [ 206.796959][ T5865] bus_probe_device+0x17f/0x1c0 [ 206.801788][ T5865] device_add+0x114b/0x1a70 [ 206.806283][ T5865] ? __pfx_device_add+0x10/0x10 [ 206.811118][ T5865] ? wakeup_sysfs_add+0x51/0x60 [ 206.815953][ T5865] usb_set_configuration+0x10cb/0x1c50 [ 206.821398][ T5865] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 206.827442][ T5865] usb_generic_driver_probe+0xb1/0x110 [ 206.832878][ T5865] usb_probe_device+0xec/0x3e0 [ 206.837624][ T5865] ? __pfx_usb_probe_device+0x10/0x10 [ 206.842977][ T5865] really_probe+0x23e/0xa90 [ 206.847462][ T5865] __driver_probe_device+0x1de/0x440 [ 206.852727][ T5865] ? usb_driver_applicable+0x1c7/0x220 [ 206.858169][ T5865] driver_probe_device+0x4c/0x1b0 [ 206.863176][ T5865] __device_attach_driver+0x1df/0x310 [ 206.868529][ T5865] ? __pfx___device_attach_driver+0x10/0x10 [ 206.874405][ T5865] bus_for_each_drv+0x157/0x1e0 [ 206.879237][ T5865] ? __pfx_bus_for_each_drv+0x10/0x10 [ 206.884586][ T5865] ? lockdep_hardirqs_on+0x7c/0x110 [ 206.889764][ T5865] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 206.895551][ T5865] __device_attach+0x1e8/0x4b0 [ 206.900299][ T5865] ? __pfx___device_attach+0x10/0x10 [ 206.905566][ T5865] ? do_raw_spin_unlock+0x172/0x230 [ 206.910751][ T5865] bus_probe_device+0x17f/0x1c0 [ 206.915581][ T5865] device_add+0x114b/0x1a70 [ 206.920068][ T5865] ? __pfx_device_add+0x10/0x10 [ 206.924987][ T5865] ? usb_detect_static_quirks+0x335/0x3e0 [ 206.930686][ T5865] usb_new_device+0xd09/0x1a20 [ 206.935435][ T5865] ? __pfx_usb_new_device+0x10/0x10 [ 206.940617][ T5865] hub_event+0x2d9a/0x4e10 [ 206.945026][ T5865] ? __pfx_hub_event+0x10/0x10 [ 206.949769][ T5865] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 206.955384][ T5865] ? rcu_is_watching+0x12/0xc0 [ 206.960123][ T5865] ? trace_lock_acquire+0x14e/0x1f0 [ 206.965306][ T5865] ? process_one_work+0x921/0x1ba0 [ 206.970401][ T5865] ? lock_acquire+0x2f/0xb0 [ 206.974883][ T5865] ? process_one_work+0x921/0x1ba0 [ 206.979998][ T5865] process_one_work+0x9c5/0x1ba0 [ 206.984921][ T5865] ? __pfx_hcd_resume_work+0x10/0x10 [ 206.990187][ T5865] ? __pfx_process_one_work+0x10/0x10 [ 206.995538][ T5865] ? rcu_is_watching+0x12/0xc0 [ 207.000284][ T5865] ? assign_work+0x1a0/0x250 [ 207.004853][ T5865] worker_thread+0x6c8/0xf00 [ 207.009425][ T5865] ? __kthread_parkme+0x148/0x220 [ 207.014433][ T5865] ? __pfx_worker_thread+0x10/0x10 [ 207.019527][ T5865] kthread+0x3af/0x750 [ 207.023577][ T5865] ? __pfx_kthread+0x10/0x10 [ 207.028145][ T5865] ? lock_acquire+0x2f/0xb0 [ 207.032647][ T5865] ? __pfx_kthread+0x10/0x10 [ 207.037239][ T5865] ret_from_fork+0x45/0x80 [ 207.041653][ T5865] ? __pfx_kthread+0x10/0x10 [ 207.046232][ T5865] ret_from_fork_asm+0x1a/0x30 [ 207.051000][ T5865] [ 207.054205][ T5865] Kernel Offset: disabled [ 207.058513][ T5865] Rebooting in 86400 seconds..