last executing test programs: 2m13.733380374s ago: executing program 4 (id=1871): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x10000000000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 2m13.593081684s ago: executing program 4 (id=1873): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x2c020400) syncfs(r0) 2m13.550810505s ago: executing program 4 (id=1874): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m13.50346012s ago: executing program 4 (id=1876): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000040)={[0x57e]}) 2m13.396816006s ago: executing program 4 (id=1879): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 2m13.343936719s ago: executing program 4 (id=1881): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f000107000000009b00000003"], 0x18}}, 0x0) 1m58.281639607s ago: executing program 32 (id=1881): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f000107000000009b00000003"], 0x18}}, 0x0) 58.998978129s ago: executing program 5 (id=3339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70fd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x15}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044884}, 0x40000) 58.829902396s ago: executing program 5 (id=3343): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0xc) 58.686517672s ago: executing program 5 (id=3349): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') lseek(r0, 0x1, 0x1) getdents64(r0, &(0x7f0000002540)=""/4096, 0x1000) 58.564077339s ago: executing program 5 (id=3355): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r0) creat(&(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab) 58.465945406s ago: executing program 5 (id=3359): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) 58.361811116s ago: executing program 5 (id=3363): io_setup(0x58, &(0x7f00000001c0)=0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 43.262663551s ago: executing program 33 (id=3363): io_setup(0x58, &(0x7f00000001c0)=0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2.994291141s ago: executing program 2 (id=4249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xa11a}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x21, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000007f00850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.82699295s ago: executing program 2 (id=4254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.663728758s ago: executing program 2 (id=4257): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x7f, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}}]}, 0x8c}}, 0x0) 2.522800977s ago: executing program 2 (id=4261): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000408117980840000102030109022400010102a002090400"], 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2.000728512s ago: executing program 0 (id=4269): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 1.945110157s ago: executing program 0 (id=4270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) dup2(r0, r1) 1.848098203s ago: executing program 0 (id=4271): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) sendto$inet6(r0, &(0x7f00000000c0)="9d", 0x1, 0x20000854, &(0x7f0000000240)={0xa, 0x4e22, 0x65f, @dev={0xfe, 0x80, '\x00', 0x20}, 0x6}, 0x1c) 1.808092514s ago: executing program 0 (id=4272): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) 1.763574045s ago: executing program 0 (id=4273): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 1.674921645s ago: executing program 0 (id=4274): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) syz_usb_connect(0x3, 0x36, 0x0, 0x0) 1.245249269s ago: executing program 6 (id=4278): timer_create(0x3, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.124803593s ago: executing program 2 (id=4279): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f00000003c0)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2000, @fd, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x1}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 1.099299051s ago: executing program 2 (id=4280): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00#$'], 0x0}, 0x0) 857.680201ms ago: executing program 1 (id=4281): fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x5}) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f0000000200)) 823.826688ms ago: executing program 1 (id=4282): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) 736.290516ms ago: executing program 1 (id=4283): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) 734.152107ms ago: executing program 3 (id=4284): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xfff, "711cf65998d09ba01233c4601b021d06f376bcdc75d21971706498fad99a57b9"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000280)=0x8000) 692.147555ms ago: executing program 3 (id=4285): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 690.939285ms ago: executing program 1 (id=4286): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chdir(0x0) 573.766112ms ago: executing program 3 (id=4287): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xbfc, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48) 450.935283ms ago: executing program 3 (id=4288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r1, 0x1, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffa, 0x8ab, 0x2, 0x55d, 0xff01, 0x2, 0x8, 0x4]}}]}]}]}, 0x38}}, 0x0) 437.59677ms ago: executing program 3 (id=4289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10) 368.267963ms ago: executing program 6 (id=4290): r0 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) utimensat(r0, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0) 270.965924ms ago: executing program 3 (id=4291): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)="a39032", 0x3, 0x20004000, &(0x7f0000004ff0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10) listen(r0, 0xda8d) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x0, 0x800) 270.843723ms ago: executing program 6 (id=4292): connect$unix(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f00000000c0)=""/77) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f00000000c0)}, 0x20) 223.807654ms ago: executing program 1 (id=4293): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0xffffffffffffffff, 0x0) 223.554179ms ago: executing program 6 (id=4294): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 126.49847ms ago: executing program 1 (id=4295): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0x5, 0x2, "1414"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 93.441075ms ago: executing program 6 (id=4296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$phonet(0x23, 0x2, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=4297): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) sendto(r0, 0x0, 0x0, 0x4, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x20a0, 0x0) kernel console output (not intermixed with test programs): utor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d538eec9 code=0x7ffc0000 [ 221.921369][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.963547][ T30] audit: type=1326 audit(1760536926.966:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.3.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d538eec9 code=0x7ffc0000 [ 221.986917][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.002643][ T5940] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.024420][ T5940] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.049821][ T30] audit: type=1326 audit(1760536926.976:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.3.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fa4d538eec9 code=0x7ffc0000 [ 222.050896][ T5940] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 222.073149][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.089917][ T30] audit: type=1326 audit(1760536926.976:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.3.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d538eec9 code=0x7ffc0000 [ 222.124149][ T30] audit: type=1326 audit(1760536926.976:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.3.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d538eec9 code=0x7ffc0000 [ 222.127001][T12946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3188'. [ 222.181179][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 222.189275][ T5940] usb 6-1: SerialNumber: syz [ 222.436044][ T5940] usb 6-1: 0:2 : does not exist [ 222.491866][ T5940] usb 6-1: USB disconnect, device number 12 [ 222.546652][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.570121][ T30] audit: type=1400 audit(1760536927.646:676): avc: denied { write } for pid=12965 comm="syz.2.3200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 222.589155][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.752761][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 222.911203][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 222.919218][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.941483][ T10] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 222.946169][T12989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3210'. [ 222.970926][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.014503][ T10] usb 2-1: config 0 descriptor?? [ 223.250858][T13005] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.3218'. [ 223.430511][ T10] nti 0003:0757:0A00.0047: unknown main item tag 0x6 [ 223.445139][ T10] nti 0003:0757:0A00.0047: unknown main item tag 0x5 [ 223.453463][ T10] nti 0003:0757:0A00.0047: unknown main item tag 0x4 [ 223.460163][ T10] nti 0003:0757:0A00.0047: item fetching failed at offset 31/160 [ 223.492501][ T10] nti 0003:0757:0A00.0047: probe with driver nti failed with error -22 [ 223.531436][ T5889] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 223.633017][ T5940] usb 2-1: USB disconnect, device number 37 [ 223.690844][T13036] vxcan3: entered promiscuous mode [ 223.702435][ T5889] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.727368][ T5889] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.739324][ T5889] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.749579][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.764603][T13008] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 223.803708][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.025689][ T10] usb 1-1: USB disconnect, device number 43 [ 224.472227][ T5940] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 224.571419][ T5889] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 224.645793][ T5940] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 224.666363][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.695927][ T5940] usb 2-1: Product: syz [ 224.700111][ T5940] usb 2-1: Manufacturer: syz [ 224.716192][ T5940] usb 2-1: SerialNumber: syz [ 224.724212][ T5940] usb 2-1: config 0 descriptor?? [ 224.741349][ T5940] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 224.763943][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.775709][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.787313][ T5889] usb 4-1: not running at top speed; connect to a high speed hub [ 224.796641][ T5940] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 224.808017][ T5889] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 224.820049][ T5940] usb 2-1: media controller created [ 224.832625][ T5889] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 224.861114][ T5889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.865798][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.886810][ T5889] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.897164][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.921596][ T5889] usb 4-1: Product: syz [ 224.926068][ T5889] usb 4-1: Manufacturer: syz [ 224.940098][ T5889] usb 4-1: SerialNumber: syz [ 224.991322][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 224.991339][ T30] audit: type=1400 audit(1760536930.066:694): avc: denied { map } for pid=13108 comm="syz.5.3267" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 224.998611][ T5940] DVB: Unable to find symbol mt352_attach() [ 225.081893][T13116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.123877][ T5940] DVB: Unable to find symbol nxt6000_attach() [ 225.135637][ T5940] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 225.169916][ T5940] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 225.194336][T13119] netlink: 'syz.5.3273': attribute type 25 has an invalid length. [ 225.204750][ T5940] dvb-usb: schedule remote query interval to 1000 msecs. [ 225.224772][ T5940] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 225.245411][ T5940] dvb-usb: bulk message failed: -22 (7/0) [ 225.261139][ T5940] dvb-usb: bulk message failed: -22 (7/0) [ 225.277608][ T5940] usb 2-1: USB disconnect, device number 38 [ 225.343281][ T30] audit: type=1400 audit(1760536930.406:695): avc: denied { remount } for pid=13123 comm="syz.5.3275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 225.390721][ T5889] usb 4-1: 0:2 : does not exist [ 225.419184][ T30] audit: type=1400 audit(1760536930.496:696): avc: denied { unmount } for pid=10525 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 225.450191][ T5940] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 225.617400][ T5942] usb 4-1: USB disconnect, device number 41 [ 225.802310][ T30] audit: type=1400 audit(1760536930.876:697): avc: denied { read } for pid=13143 comm="syz.1.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 225.939075][T13161] netlink: 'syz.5.3292': attribute type 7 has an invalid length. [ 225.949319][T13161] netlink: 'syz.5.3292': attribute type 8 has an invalid length. [ 226.356601][T13189] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3305'. [ 226.365939][T13189] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3305'. [ 226.493899][ T30] audit: type=1400 audit(1760536931.576:698): avc: denied { bind } for pid=13198 comm="syz.0.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 226.668446][T13211] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 226.792346][ T5889] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 226.941418][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 226.959403][ T5889] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 227.003185][ T5889] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 227.019672][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.035496][ T5889] usb 4-1: Product: syz [ 227.050027][ T5889] usb 4-1: Manufacturer: syz [ 227.059217][ T5889] usb 4-1: SerialNumber: syz [ 227.086034][ T5889] usb 4-1: config 0 descriptor?? [ 227.108760][ T5889] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 227.128820][ T5889] usb 4-1: setting power ON [ 227.140273][ T5889] dvb-usb: bulk message failed: -22 (2/0) [ 227.173121][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.173724][ T5889] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 227.173765][ T5889] usb 4-1: media controller created [ 227.198308][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.230927][ T5889] usb 4-1: selecting invalid altsetting 6 [ 227.230951][ T5889] usb 4-1: digital interface selection failed (-22) [ 227.230965][ T5889] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 227.237465][ T5889] usb 4-1: setting power OFF [ 227.237486][ T5889] dvb-usb: bulk message failed: -22 (2/0) [ 227.237499][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 227.288772][ T5889] (NULL device *): no alternate interface [ 227.305547][T13201] dvb-usb: bulk message failed: -22 (3/0) [ 227.382228][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 227.407325][ T5889] usb 4-1: USB disconnect, device number 42 [ 227.435017][ T30] audit: type=1400 audit(1760536932.496:699): avc: denied { ioctl } for pid=13257 comm="syz.2.3337" path="socket:[36236]" dev="sockfs" ino=36236 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.865321][ T30] audit: type=1400 audit(1760536932.946:700): avc: denied { associate } for pid=13289 comm="syz.5.3355" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 228.025642][T13305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3361'. [ 228.511864][T13326] tipc: Started in network mode [ 228.524468][T13326] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 228.545419][T13326] tipc: Enabling of bearer rejected, failed to enable media [ 228.772701][T13335] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 228.851403][ T5861] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 229.022272][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 229.028957][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.061217][ T5861] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 229.081520][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.106728][ T5861] usb 4-1: config 0 descriptor?? [ 229.535403][ T5861] uclogic 0003:28BD:0042.0048: interface is invalid, ignoring [ 229.747362][ T5942] usb 4-1: USB disconnect, device number 43 [ 229.911182][ T5889] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 230.092448][ T5889] usb 1-1: config 0 has an invalid interface number: 80 but max is 1 [ 230.100554][ T5889] usb 1-1: config 0 has an invalid interface number: 67 but max is 1 [ 230.148630][ T5889] usb 1-1: config 0 has no interface number 0 [ 230.154872][ T5889] usb 1-1: config 0 has no interface number 1 [ 230.160975][ T5889] usb 1-1: config 0 interface 67 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 230.226356][ T5889] usb 1-1: config 0 interface 67 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 230.238432][ T5889] usb 1-1: config 0 interface 67 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 230.241760][ T5942] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 230.249430][ T5889] usb 1-1: config 0 interface 67 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 230.268358][ T5889] usb 1-1: config 0 interface 80 has no altsetting 0 [ 230.275327][ T5889] usb 1-1: config 0 interface 67 has no altsetting 0 [ 230.282348][ T5889] usb 1-1: New USB device found, idVendor=041e, idProduct=4003, bcdDevice=9d.8f [ 230.291793][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.310792][ T5889] usb 1-1: config 0 descriptor?? [ 230.437852][ T5942] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 230.461234][ T5942] usb 3-1: config 0 has no interface number 0 [ 230.478323][ T5942] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 230.510712][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.523349][ T5889] usb 1-1: string descriptor 0 read error: -71 [ 230.551605][ T5942] usb 3-1: Product: syz [ 230.555794][ T5942] usb 3-1: Manufacturer: syz [ 230.560381][ T5942] usb 3-1: SerialNumber: syz [ 230.576046][ T5889] usb 1-1: USB disconnect, device number 44 [ 230.576547][T13377] overlay: ./file0 is not a directory [ 230.599744][ T5942] usb 3-1: config 0 descriptor?? [ 230.616572][ T5942] hub 3-1:0.132: bad descriptor, ignoring hub [ 230.633343][ T5942] hub 3-1:0.132: probe with driver hub failed with error -5 [ 230.675059][ T5942] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input38 [ 231.022932][ T5942] usb 3-1: USB disconnect, device number 33 [ 231.680551][ T30] audit: type=1326 audit(1760536936.756:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13400 comm="syz.0.3405" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf2038eec9 code=0x0 [ 231.873231][T13383] ceph: No mds server is up or the cluster is laggy [ 231.977996][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'. [ 232.028745][T13412] bond_slave_0: entered promiscuous mode [ 232.034775][T13412] bond_slave_1: entered promiscuous mode [ 232.047494][T13412] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 232.058112][T13412] bond_slave_0: left promiscuous mode [ 232.063595][T13412] bond_slave_1: left promiscuous mode [ 232.362407][T13428] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3419'. [ 232.473140][ T30] audit: type=1400 audit(1760536937.556:702): avc: denied { connect } for pid=13431 comm="syz.3.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.559509][ T5942] hid-generic 0003:0003:0000.0049: unknown main item tag 0x0 [ 232.594989][ T5942] hid-generic 0003:0003:0000.0049: unknown main item tag 0x0 [ 232.612855][ T5942] hid-generic 0003:0003:0000.0049: unknown main item tag 0x0 [ 232.620270][ T5942] hid-generic 0003:0003:0000.0049: unknown main item tag 0x0 [ 232.638191][ T5942] hid-generic 0003:0003:0000.0049: unknown main item tag 0x0 [ 232.673409][ T5942] hid-generic 0003:0003:0000.0049: unknown main item tag 0x0 [ 232.703013][ T5942] hid-generic 0003:0003:0000.0049: unknown main item tag 0x0 [ 232.721394][ T5942] hid-generic 0003:0003:0000.0049: unknown main item tag 0x0 [ 232.736728][ T5942] hid-generic 0003:0003:0000.0049: unknown main item tag 0x0 [ 232.763195][ T5942] hid-generic 0003:0003:0000.0049: unknown main item tag 0x0 [ 232.794921][ T5942] hid-generic 0003:0003:0000.0049: hidraw0: USB HID v0.03 Device [syz0] on syz1 [ 232.945021][T13449] fido_id[13449]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.206565][ T30] audit: type=1400 audit(1760536938.286:703): avc: denied { ioctl } for pid=13470 comm="syz.1.3440" path="socket:[36632]" dev="sockfs" ino=36632 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.448707][ T30] audit: type=1400 audit(1760536938.526:704): avc: denied { load_policy } for pid=13481 comm="syz.2.3445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 233.448909][T13482] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 233.508653][T13482] SELinux: failed to load policy [ 233.537259][ T1108] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.567430][ T1108] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.611028][ T1108] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.620356][ T1108] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.251131][ T30] audit: type=1400 audit(1760536939.326:705): avc: denied { setattr } for pid=10525 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.302600][ T30] audit: type=1400 audit(1760536939.386:706): avc: denied { ioctl } for pid=13517 comm="syz.0.3462" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.361297][ T30] audit: type=1400 audit(1760536939.406:707): avc: denied { recv } for pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.216 dest=51052 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 234.421778][ T30] audit: type=1400 audit(1760536939.406:708): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.431153][ T10] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 234.475313][ T30] audit: type=1400 audit(1760536939.406:709): avc: denied { open } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.534771][ T30] audit: type=1400 audit(1760536939.406:710): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.654609][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 234.663789][ T10] usb 1-1: config 0 has no interface number 0 [ 234.683249][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 234.721224][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 234.746214][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 234.766333][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 234.771990][T13537] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 234.777786][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 234.783857][T13537] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 234.803828][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 234.804455][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'. [ 234.817778][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 234.837189][T13537] vhci_hcd vhci_hcd.0: Device attached [ 234.844598][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.860145][ T10] usb 1-1: config 0 descriptor?? [ 234.867993][T13540] vhci_hcd: connection closed [ 234.868236][ T36] vhci_hcd: stop threads [ 234.881946][ T36] vhci_hcd: release socket [ 234.886815][T13518] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.896594][T13518] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.908758][ T36] vhci_hcd: disconnect device [ 234.928816][ T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 235.256299][ T5861] usb 1-1: USB disconnect, device number 45 [ 235.273176][ T5861] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 235.848099][T13576] netlink: 'syz.2.3487': attribute type 11 has an invalid length. [ 236.709293][T13620] bond2: entered promiscuous mode [ 236.733215][T13620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.754236][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 236.754251][ T30] audit: type=1400 audit(1760536941.836:753): avc: denied { map } for pid=13624 comm="syz.3.3510" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 236.763674][T13620] bond0: (slave bond2): Enslaving as an active interface with an up link [ 236.785694][ T30] audit: type=1400 audit(1760536941.836:754): avc: denied { read write } for pid=13624 comm="syz.3.3510" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 236.821638][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 237.003310][ T5942] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 237.040225][ T30] audit: type=1400 audit(1760536942.116:755): avc: denied { execmem } for pid=13639 comm="syz.1.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 237.088566][ T30] audit: type=1400 audit(1760536942.146:756): avc: denied { module_request } for pid=13636 comm="syz.0.3516" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 237.158922][ T30] audit: type=1400 audit(1760536942.196:757): avc: denied { sys_module } for pid=13636 comm="syz.0.3516" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 237.182195][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 237.188865][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 237.212747][T13647] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.219421][T13647] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 237.232429][ T5942] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 237.241675][T13647] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.248063][T13647] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 237.254426][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.254451][ T5942] usb 4-1: Product: syz [ 237.254465][ T5942] usb 4-1: Manufacturer: syz [ 237.264667][ T30] audit: type=1400 audit(1760536942.246:758): avc: denied { create } for pid=13646 comm="syz.1.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 237.294847][T13647] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.301271][T13647] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 237.305899][ T5942] usb 4-1: SerialNumber: syz [ 237.310542][ T30] audit: type=1400 audit(1760536942.296:759): avc: denied { connect } for pid=13646 comm="syz.1.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 237.313591][T13651] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3521'. [ 237.341694][T13647] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.348126][T13647] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 237.355450][ T5942] usb 4-1: config 0 descriptor?? [ 237.357052][T13647] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.366813][T13647] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 237.374907][ T5942] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input39 [ 237.375104][ T30] audit: type=1400 audit(1760536942.296:760): avc: denied { write } for pid=13646 comm="syz.1.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 237.419273][ T30] audit: type=1400 audit(1760536942.336:761): avc: denied { getopt } for pid=13648 comm="syz.2.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 237.439193][T13651] netlink: 'syz.0.3521': attribute type 5 has an invalid length. [ 237.540671][ T30] audit: type=1400 audit(1760536942.496:762): avc: denied { read } for pid=5167 comm="acpid" name="mouse1" dev="devtmpfs" ino=3615 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.593312][ T5942] usb 4-1: USB disconnect, device number 44 [ 238.282666][ T5942] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 238.453927][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 238.467214][ T5942] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 238.482132][ T5942] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 238.499715][ T5942] usb 2-1: Product: syz [ 238.510158][ T5942] usb 2-1: Manufacturer: syz [ 238.531726][ T5942] usb 2-1: SerialNumber: syz [ 238.545231][ T5942] usb 2-1: config 0 descriptor?? [ 238.573604][ T5942] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 238.969571][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'. [ 238.983122][ T5942] gspca_zc3xx: reg_r err -71 [ 238.989798][ T5942] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 239.005287][ T5942] usb 2-1: USB disconnect, device number 39 [ 239.432402][ T5861] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 239.591394][ T5942] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 239.609527][ T5861] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 239.625764][ T5861] usb 4-1: can't read configurations, error -71 [ 239.711150][ T5940] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 239.757224][ T5942] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 239.781465][ T5942] usb 3-1: config 0 has no interface number 0 [ 239.787580][ T5942] usb 3-1: config 0 interface 244 has no altsetting 0 [ 239.800917][ T5942] usb 3-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=2d.d1 [ 239.822391][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.830404][ T5942] usb 3-1: Product: syz [ 239.851700][ T5942] usb 3-1: Manufacturer: syz [ 239.864710][ T5942] usb 3-1: SerialNumber: syz [ 239.882744][ T5942] usb 3-1: config 0 descriptor?? [ 239.904805][ T5940] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 239.914009][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.938691][ T5940] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 239.956154][ T5940] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 239.966273][ T5940] usb 1-1: Manufacturer: syz [ 239.977923][ T5940] usb 1-1: config 0 descriptor?? [ 240.043021][ T5940] rc_core: IR keymap rc-hauppauge not found [ 240.049022][ T5940] Registered IR keymap rc-empty [ 240.056404][ T5940] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 240.074324][ T5940] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input40 [ 240.097284][ T5942] asix 3-1:0.244 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 240.112210][ T5942] asix 3-1:0.244: probe with driver asix failed with error -71 [ 240.162020][ T5942] usb 3-1: USB disconnect, device number 34 [ 240.201247][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 240.385094][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 240.412366][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.431323][ T24] usb 2-1: Product: syz [ 240.435503][ T24] usb 2-1: Manufacturer: syz [ 240.440164][ T24] usb 2-1: SerialNumber: syz [ 240.454191][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 240.477383][ T5886] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 240.678726][ T5889] usb 1-1: USB disconnect, device number 46 [ 240.739853][ T5940] usb 2-1: USB disconnect, device number 40 [ 240.751308][ T5861] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 240.933502][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 240.954911][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 240.972206][ T5861] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.011118][ T5861] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 241.020179][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.053412][ T5861] usb 4-1: config 0 descriptor?? [ 241.255087][T13761] block nbd0: not configured, cannot reconfigure [ 241.310113][T13763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3574'. [ 241.382661][ T5889] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 241.483275][ T5861] uclogic 0003:5543:0781.004A: item fetching failed at offset 4/5 [ 241.502965][ T5861] uclogic 0003:5543:0781.004A: parse failed [ 241.508962][ T5861] uclogic 0003:5543:0781.004A: probe with driver uclogic failed with error -22 [ 241.548675][ T5886] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 241.557681][ T5889] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 241.571265][ T5886] ath9k_htc: Failed to initialize the device [ 241.578168][ T5940] usb 2-1: ath9k_htc: USB layer deinitialized [ 241.590000][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.591783][T13773] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 241.611196][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.632098][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 241.656220][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 241.671222][ T5889] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 241.674347][ T5941] usb 4-1: USB disconnect, device number 47 [ 241.689511][ T5889] usb 3-1: Manufacturer: syz [ 241.711322][ T5889] usb 3-1: config 0 descriptor?? [ 241.738853][ T5861] kernel write not supported for file /amidi2 (pid: 5861 comm: kworker/1:3) [ 241.902214][ T5940] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 241.955862][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 241.955876][ T30] audit: type=1400 audit(1760536947.036:841): avc: denied { create } for pid=13782 comm="syz.0.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.985580][ T30] audit: type=1400 audit(1760536947.066:842): avc: denied { setopt } for pid=13782 comm="syz.0.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.046853][ T30] audit: type=1400 audit(1760536947.126:843): avc: denied { create } for pid=13784 comm="syz.0.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.061870][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 242.092519][ T30] audit: type=1400 audit(1760536947.126:844): avc: denied { connect } for pid=13784 comm="syz.0.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.095732][ T5940] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.08 [ 242.128031][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.138037][ T5940] usb 2-1: Product: syz [ 242.139885][ T5889] appleir 0003:05AC:8243.004B: item fetching failed at offset 0/1 [ 242.143050][ T5940] usb 2-1: Manufacturer: syz [ 242.152248][ T30] audit: type=1400 audit(1760536947.126:845): avc: denied { write } for pid=13784 comm="syz.0.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.155502][ T5940] usb 2-1: SerialNumber: syz [ 242.185064][ T5889] appleir 0003:05AC:8243.004B: parse failed [ 242.191038][ T5889] appleir 0003:05AC:8243.004B: probe with driver appleir failed with error -22 [ 242.237916][ T5940] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 242.246016][ T5940] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 87 [ 242.276065][ T5940] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 242.295933][ T5940] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 242.308724][ T30] audit: type=1400 audit(1760536947.386:846): avc: denied { mounton } for pid=13788 comm="syz.0.3587" path="/710/file1" dev="tmpfs" ino=3600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 242.321676][ T5940] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 242.360619][ T5940] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 85 [ 242.374994][ T10] usb 3-1: USB disconnect, device number 35 [ 242.388590][ T5940] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 242.412168][ T30] audit: type=1400 audit(1760536947.496:847): avc: denied { append } for pid=13792 comm="syz.0.3589" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 242.457645][ T5940] usb 2-1: USB disconnect, device number 41 [ 242.533019][ T5940] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 242.564084][ T5940] keyspan 2-1:1.0: device disconnected [ 242.958090][ T30] audit: type=1326 audit(1760536948.036:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2038eec9 code=0x7ffc0000 [ 243.016085][ T30] audit: type=1326 audit(1760536948.036:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2038eec9 code=0x7ffc0000 [ 243.073015][ T30] audit: type=1326 audit(1760536948.086:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf2038eec9 code=0x7ffc0000 [ 243.148203][T13808] netlink: 'syz.3.3595': attribute type 1 has an invalid length. [ 243.544742][ T5886] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 243.651387][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.659959][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.669161][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.677806][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.685357][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.722654][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 243.773944][ T5886] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 243.810499][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3611'. [ 243.828772][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.872279][ T5886] usb 2-1: config 0 descriptor?? [ 243.883141][T13816] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 244.172183][ T1108] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.184653][ T5889] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 244.270073][ T1108] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.296594][T13828] chnl_net:caif_netlink_parms(): no params data found [ 244.329881][ T5886] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.004C/input/input41 [ 244.371293][ T5889] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 244.379540][ T5889] usb 4-1: config 14 has no interface number 0 [ 244.394493][ T5889] usb 4-1: config 14 interface 21 has no altsetting 0 [ 244.414238][ T5889] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 244.429821][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.449869][ T5889] usb 4-1: Product: syz [ 244.455941][ T1108] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.458797][ T5889] usb 4-1: Manufacturer: syz [ 244.478381][ T5886] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.004C/input/input42 [ 244.508433][ T5889] usb 4-1: SerialNumber: syz [ 244.548636][ T5886] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.004C/input/input43 [ 244.667594][ T5886] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.004C/input/input44 [ 244.732100][ T5886] hid-udraw 0003:20D6:CB17.004C: hidraw0: USB HID vff.f8 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 244.768902][ T5886] usb 2-1: USB disconnect, device number 42 [ 244.781383][ T5889] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 244.788419][ T5889] usb 4-1: MIDIStreaming interface descriptor not found [ 244.814387][ T1108] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.977674][ T5889] usb 4-1: USB disconnect, device number 48 [ 245.107414][T13828] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.122026][T13828] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.129239][T13828] bridge_slave_0: entered allmulticast mode [ 245.133059][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.137355][T13828] bridge_slave_0: entered promiscuous mode [ 245.186226][T13828] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.219668][T13828] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.247368][T13828] bridge_slave_1: entered allmulticast mode [ 245.286493][T13828] bridge_slave_1: entered promiscuous mode [ 245.338664][T13828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.362474][T13828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.510030][T13881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3627'. [ 245.513804][T13828] team0: Port device team_slave_0 added [ 245.584959][T13828] team0: Port device team_slave_1 added [ 245.691651][T13828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.705513][ T5810] Bluetooth: hci5: command tx timeout [ 245.717054][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.834309][T13828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.890437][T13828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.920617][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.964247][T13828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.035604][ T1108] bridge_slave_1: left allmulticast mode [ 246.048020][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.082425][ T5940] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 246.093013][ T1108] bridge_slave_0: left allmulticast mode [ 246.100053][ T1108] bridge_slave_0: left promiscuous mode [ 246.108793][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.255318][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 246.264460][ T5940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 246.269423][T13835] syz.2.3608 (13835): drop_caches: 1 [ 246.282050][ T5940] usb 1-1: config index 0 descriptor too short (expected 274, got 18) [ 246.291815][ T5940] usb 1-1: config 4 interface 0 has no altsetting 0 [ 246.313870][ T5940] usb 1-1: string descriptor 0 read error: -22 [ 246.324248][ T5940] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 246.335418][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.356765][ T5940] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 246.377242][ T5940] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 246.413242][ T5940] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 246.430629][ T5940] usb 1-1: media controller created [ 246.459752][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.753489][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.765179][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.775756][ T1108] bond0 (unregistering): Released all slaves [ 246.811267][ T24] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 246.887344][T13828] hsr_slave_0: entered promiscuous mode [ 246.897640][T13828] hsr_slave_1: entered promiscuous mode [ 246.907684][T13828] debugfs: 'hsr0' already exists in 'hsr' [ 246.913723][T13828] Cannot create hsr debugfs directory [ 246.964720][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.981170][ T24] usb 2-1: config 0 has no interface number 0 [ 246.993429][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 247.009766][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.032500][ T24] usb 2-1: config 0 descriptor?? [ 247.046411][ T24] usb 2-1: selecting invalid altsetting 1 [ 247.055845][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 247.063177][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 247.147472][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 247.147488][ T30] audit: type=1400 audit(1760536952.226:924): avc: denied { read } for pid=13929 comm="syz.2.3642" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 247.188092][ T30] audit: type=1400 audit(1760536952.266:925): avc: denied { open } for pid=13929 comm="syz.2.3642" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 247.214027][T13931] binder: 13929:13931 ioctl c018620c 200000000100 returned -22 [ 247.222354][ T24] DVB: Unable to find symbol cx22700_attach() [ 247.262601][ T1108] hsr_slave_0: left promiscuous mode [ 247.282504][ T30] audit: type=1400 audit(1760536952.296:926): avc: denied { ioctl } for pid=13929 comm="syz.2.3642" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 247.321164][ T1108] hsr_slave_1: left promiscuous mode [ 247.327098][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.335787][ T24] DVB: Unable to find symbol tda10046_attach() [ 247.342150][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 247.350209][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.367577][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.376624][ T30] audit: type=1400 audit(1760536952.296:927): avc: denied { set_context_mgr } for pid=13929 comm="syz.2.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 247.404992][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.412811][ T30] audit: type=1400 audit(1760536952.476:928): avc: denied { write } for pid=13937 comm="syz.2.3643" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 247.465083][ T1108] veth1_macvtap: left promiscuous mode [ 247.470628][ T1108] veth0_macvtap: left promiscuous mode [ 247.481461][ T1108] veth1_vlan: left promiscuous mode [ 247.495993][ T1108] veth0_vlan: left promiscuous mode [ 247.550640][ T5940] zl10353_read_register: readreg error (reg=127, ret==0) [ 247.550676][T13893] usb 1-1: dvb_usb_au6610: wlen=132, aborting [ 247.571219][T13918] usb 1-1: dvb_usb_au6610: wlen=34, aborting [ 247.664633][ T10] usb 2-1: USB disconnect, device number 43 [ 247.675000][ T5940] usb 1-1: USB disconnect, device number 47 [ 247.690867][ T30] audit: type=1400 audit(1760536952.766:929): avc: denied { allowed } for pid=13946 comm="syz.2.3644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 247.759781][ T30] audit: type=1400 audit(1760536952.766:930): avc: denied { sqpoll } for pid=13946 comm="syz.2.3644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 247.786893][ T5810] Bluetooth: hci5: command tx timeout [ 247.796581][ T30] audit: type=1400 audit(1760536952.766:931): avc: denied { create } for pid=13946 comm="syz.2.3644" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 248.146614][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 248.227101][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 248.400322][ T30] audit: type=1400 audit(1760536953.476:932): avc: denied { sys_module } for pid=13951 comm="syz.0.3645" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 248.568202][ T30] audit: type=1400 audit(1760536953.646:933): avc: denied { append } for pid=13960 comm="syz.2.3648" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.895527][T13828] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 248.955229][T13828] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 248.986184][T13977] team0: Cannot enslave team device to itself [ 249.034453][T13828] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 249.094073][T13828] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 249.311820][ T5889] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 249.355418][T13828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.403230][T14005] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 249.467934][T13828] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.492779][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.512885][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.520028][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.537844][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.559969][ T5889] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 249.564113][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.576150][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.596322][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.622436][ T5889] usb 1-1: config 0 descriptor?? [ 249.871206][ T5810] Bluetooth: hci5: command tx timeout [ 250.053784][ T5889] hid_parser_main: 3 callbacks suppressed [ 250.053803][ T5889] dragonrise 0003:0079:0006.004D: unknown main item tag 0x0 [ 250.095081][ T5889] dragonrise 0003:0079:0006.004D: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 250.126286][ T5886] kernel read not supported for file /media6 (pid: 5886 comm: kworker/1:5) [ 250.148715][ T5889] dragonrise 0003:0079:0006.004D: no inputs found [ 250.156656][T13828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.174136][T14047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3676'. [ 250.181506][ T5889] dragonrise 0003:0079:0006.004D: force feedback init failed [ 250.317428][ T10] usb 1-1: USB disconnect, device number 48 [ 250.379412][T14048] fido_id[14048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 250.416015][T14056] can0: slcan on ttyS3. [ 250.448720][T14058] tipc: Started in network mode [ 250.455858][T14058] tipc: Node identity e0000001, cluster identity 4711 [ 250.464533][T14058] tipc: Enabling of bearer rejected, failed to enable media [ 250.474506][T14055] can0 (unregistered): slcan off ttyS3. [ 250.941726][ T5942] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 251.076103][T13828] veth0_vlan: entered promiscuous mode [ 251.090701][T13828] veth1_vlan: entered promiscuous mode [ 251.097561][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 251.105781][ T5942] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.129916][ T5942] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.163437][ T5942] usb 4-1: config 0 interface 0 has no altsetting 0 [ 251.170617][ T5942] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 251.195678][T13828] veth0_macvtap: entered promiscuous mode [ 251.209975][T13828] veth1_macvtap: entered promiscuous mode [ 251.216407][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.238088][ T5942] usb 4-1: config 0 descriptor?? [ 251.362384][T13828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.394267][T13828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.429017][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.471188][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.494250][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.513228][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.692339][ T5942] ryos 0003:1E7D:3232.004E: unknown main item tag 0x0 [ 251.692371][ T5942] ryos 0003:1E7D:3232.004E: unknown main item tag 0x0 [ 251.692392][ T5942] ryos 0003:1E7D:3232.004E: unknown main item tag 0x0 [ 251.692411][ T5942] ryos 0003:1E7D:3232.004E: unknown main item tag 0x0 [ 251.692429][ T5942] ryos 0003:1E7D:3232.004E: unknown main item tag 0x0 [ 251.707895][ T5942] ryos 0003:1E7D:3232.004E: hidraw0: USB HID vfe.01 Device [HID 1e7d:3232] on usb-dummy_hcd.3-1/input0 [ 251.732934][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.837873][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.914750][ T5889] usb 4-1: USB disconnect, device number 49 [ 251.916435][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.916452][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.948284][ T5810] Bluetooth: hci5: command tx timeout [ 252.251734][ T5941] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 252.304991][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 252.305006][ T30] audit: type=1400 audit(1760536957.386:956): avc: denied { read } for pid=14129 comm="syz.2.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 252.331954][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.391538][ T5942] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 252.411698][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 252.413131][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.413158][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.413189][ T5941] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 252.413209][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.415286][ T5941] usb 2-1: config 0 descriptor?? [ 252.542276][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 252.548990][ T5942] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 252.562174][ T30] audit: type=1400 audit(1760536957.646:957): avc: denied { read write } for pid=14133 comm="syz.0.3706" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 252.564427][ T5942] usb 7-1: config 4 has no interface number 0 [ 252.601584][ T5886] hid-generic 0200:0002:80000001.004F: item fetching failed at offset 3/4 [ 252.606987][ T5942] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.618483][ T5886] hid-generic 0200:0002:80000001.004F: probe with driver hid-generic failed with error -22 [ 252.629539][ T5942] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.635377][ T30] audit: type=1400 audit(1760536957.646:958): avc: denied { open } for pid=14133 comm="syz.0.3706" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 252.643169][ T5942] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 252.665158][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.684501][ T30] audit: type=1400 audit(1760536957.706:959): avc: denied { create } for pid=14135 comm="syz.3.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 252.705118][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.718367][ T30] audit: type=1400 audit(1760536957.726:960): avc: denied { setopt } for pid=14135 comm="syz.3.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 252.749998][ T5942] hub 7-1:4.128: USB hub found [ 252.816315][T14139] sp0: Synchronizing with TNC [ 252.835054][ T5941] hid-multitouch 0003:0EEF:72C4.0050: unknown main item tag 0x0 [ 252.850961][ T5941] hid-multitouch 0003:0EEF:72C4.0050: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 252.886066][T14138] [U] è [ 252.961690][ T5942] hub 7-1:4.128: 6 ports detected [ 252.966975][ T5942] hub 7-1:4.128: Using single TT (err -22) [ 252.992540][ T5942] hub 7-1:4.128: insufficient power available to use all downstream ports [ 253.070874][ T5941] usb 2-1: USB disconnect, device number 44 [ 253.175627][T14154] tipc: Enabling of bearer rejected, failed to enable media [ 253.249690][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'. [ 253.259804][T14160] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3718'. [ 253.274126][T14160] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3718'. [ 253.362752][ T5942] usb 7-1: USB disconnect, device number 2 [ 253.931181][ T5886] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 253.958237][ T30] audit: type=1400 audit(1760536959.036:961): avc: denied { relabelfrom } for pid=14205 comm="syz.6.3738" name="" dev="pipefs" ino=38894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 254.071929][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 254.081246][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 254.088348][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.122365][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.143183][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.164879][ T5886] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 254.174616][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.185945][ T5886] usb 2-1: config 0 descriptor?? [ 254.233715][ T24] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 254.242356][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.272093][ T24] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 254.281768][ T24] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 254.289784][ T24] usb 4-1: Manufacturer: syz [ 254.306395][ T30] audit: type=1400 audit(1760536959.376:962): avc: denied { setopt } for pid=14223 comm="syz.6.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.339837][ T24] usb 4-1: config 0 descriptor?? [ 254.387422][ T30] audit: type=1400 audit(1760536959.376:963): avc: denied { getopt } for pid=14223 comm="syz.6.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.452916][ T24] rc_core: IR keymap rc-hauppauge not found [ 254.469101][ T24] Registered IR keymap rc-empty [ 254.493878][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 254.523578][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 254.526099][T14235] EXT4-fs: Conflicting test_dummy_encryption options [ 254.561712][ T30] audit: type=1400 audit(1760536959.626:964): avc: denied { ioctl } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3724 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.586571][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.622229][ T30] audit: type=1400 audit(1760536959.686:965): avc: denied { mounton } for pid=14239 comm="syz.2.3755" path="/843/cgroup" dev="tmpfs" ino=4255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 254.667094][ T5886] microsoft 0003:045E:07DA.0051: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 254.715861][ T5886] microsoft 0003:045E:07DA.0051: no inputs found [ 254.740671][ T5886] microsoft 0003:045E:07DA.0051: could not initialize ff, continuing anyway [ 254.924617][ T5886] usb 2-1: USB disconnect, device number 45 [ 254.988261][ T24] usb 4-1: USB disconnect, device number 50 [ 255.063959][T14257] random: crng reseeded on system resumption [ 255.224793][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.232266][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.391386][ T5861] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 255.564648][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 255.583611][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.600135][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.620422][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.644152][ T5861] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 255.661637][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.681834][ T5861] usb 1-1: config 0 descriptor?? [ 255.998399][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3785'. [ 256.009257][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3785'. [ 256.023661][T14302] team_slave_0: entered promiscuous mode [ 256.029368][T14302] team_slave_1: entered promiscuous mode [ 256.069577][T14302] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.132451][ T5861] nzxt-kraken2 0003:1E71:170E.0052: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.0-1/input0 [ 256.264981][ T5941] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 256.310160][ T5861] usb 1-1: USB disconnect, device number 49 [ 256.443964][ T5941] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 256.453128][ T5941] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 256.462986][ T5941] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 256.471127][ T5889] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 256.474537][ T5941] usb 2-1: config 220 has no interface number 2 [ 256.487898][ T5941] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 256.504264][ T5941] usb 2-1: config 220 interface 0 has no altsetting 0 [ 256.511041][ T5941] usb 2-1: config 220 interface 76 has no altsetting 0 [ 256.518869][ T5941] usb 2-1: config 220 interface 1 has no altsetting 0 [ 256.529271][ T5941] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 256.543103][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.552069][ T5941] usb 2-1: Product: syz [ 256.556229][ T5941] usb 2-1: Manufacturer: syz [ 256.560811][ T5941] usb 2-1: SerialNumber: syz [ 256.641162][ T24] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 256.649678][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 256.663974][ T5889] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 256.673087][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.683534][ T5889] usb 7-1: config 0 descriptor?? [ 256.697796][ T5889] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 256.785333][ T5941] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 256.797001][ T5941] uvcvideo 2-1:220.0: No valid video chain found. [ 256.804874][ T5941] usb 2-1: selecting invalid altsetting 0 [ 256.822856][ T5941] usb 2-1: selecting invalid altsetting 0 [ 256.833560][ T24] usb 4-1: unable to get BOS descriptor set [ 256.838774][ T5941] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 256.849835][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 256.860764][ T24] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.881980][ T5941] usb 2-1: USB disconnect, device number 46 [ 256.893001][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 256.907205][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 256.921752][ T5889] usb 7-1: Detected FT232B [ 256.935005][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.954929][ T24] usb 4-1: Product: syz [ 256.961890][ T24] usb 4-1: Manufacturer: syz [ 256.967024][ T24] usb 4-1: SerialNumber: syz [ 256.984864][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 257.224291][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 257.232929][ T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 257.261324][ T24] usb 4-1: USB disconnect, device number 51 [ 257.319611][ T5889] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 257.341456][ T5889] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 257.369545][ T5889] usb 7-1: USB disconnect, device number 3 [ 257.384026][ T5889] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 257.403329][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3795'. [ 257.413114][ T5889] ftdi_sio 7-1:0.0: device disconnected [ 257.441190][T14326] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3795'. [ 257.846151][T14343] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3802'. [ 257.873942][T14343] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3802'. [ 258.382692][T14365] mkiss: ax0: crc mode is auto. [ 258.393042][T14366] netlink: 'syz.0.3812': attribute type 1 has an invalid length. [ 258.438760][T14366] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3812'. [ 258.493849][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3814'. [ 258.591728][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 258.591743][ T30] audit: type=1400 audit(1760536963.666:979): avc: denied { create } for pid=14371 comm="syz.0.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 258.656054][ T30] audit: type=1400 audit(1760536963.706:980): avc: denied { setopt } for pid=14371 comm="syz.0.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 258.722222][ T5940] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 258.778498][ T30] audit: type=1400 audit(1760536963.856:981): avc: denied { setopt } for pid=14375 comm="syz.3.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.797966][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.840805][ T30] audit: type=1400 audit(1760536963.856:982): avc: denied { connect } for pid=14375 comm="syz.3.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.864819][ T30] audit: type=1400 audit(1760536963.856:983): avc: denied { name_connect } for pid=14375 comm="syz.3.3817" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 258.898016][ T30] audit: type=1400 audit(1760536963.916:984): avc: denied { bind } for pid=14375 comm="syz.3.3817" lport=55086 faddr=::ffff:10.1.0.255 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.934344][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.947388][ T5940] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 258.960912][ T30] audit: type=1400 audit(1760536963.916:985): avc: denied { name_bind } for pid=14375 comm="syz.3.3817" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 258.991651][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.022901][ T5940] usb 7-1: config 0 descriptor?? [ 259.042400][ T30] audit: type=1400 audit(1760536963.916:986): avc: denied { node_bind } for pid=14375 comm="syz.3.3817" saddr=::ffff:224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 259.189063][ T30] audit: type=1400 audit(1760536964.266:987): avc: denied { create } for pid=14388 comm="syz.1.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 259.293239][ T30] audit: type=1400 audit(1760536964.296:988): avc: denied { bind } for pid=14388 comm="syz.1.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 259.512351][ T5940] sony 0003:054C:0268.0053: hiddev0,hidraw0: USB HID v88.07 Device [HID 054c:0268] on usb-dummy_hcd.6-1/input0 [ 259.555417][ T5940] sony 0003:054C:0268.0053: failed to claim input [ 259.716564][ T24] usb 7-1: USB disconnect, device number 4 [ 259.863992][T14418] usb usb8: usbfs: process 14418 (syz.2.3835) did not claim interface 0 before use [ 259.941213][ T5889] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 259.991884][ T5941] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 260.102718][ T5889] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 260.110839][ T5889] usb 1-1: config 0 has no interface number 0 [ 260.121161][ T5889] usb 1-1: config 0 interface 29 has no altsetting 0 [ 260.140188][ T5889] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 260.142921][ T5941] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 260.151096][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.178326][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.181101][ T5889] usb 1-1: Product: syz [ 260.201127][ T5889] usb 1-1: Manufacturer: syz [ 260.211297][ T5889] usb 1-1: SerialNumber: syz [ 260.217427][ T5941] usb 2-1: config 0 has no interface number 0 [ 260.221759][ T5889] usb 1-1: config 0 descriptor?? [ 260.235546][ T5941] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 260.263409][ T5941] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.330191][ T5941] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 260.373281][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.402293][ T5941] usb 2-1: Product: syz [ 260.416722][ T5941] usb 2-1: Manufacturer: syz [ 260.420834][T14429] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3840'. [ 260.426835][ T5941] usb 2-1: SerialNumber: syz [ 260.470544][ T5889] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 260.482349][ T5941] usb 2-1: config 0 descriptor?? [ 260.672396][ T5889] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 260.691590][ T5889] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 260.698476][ T5889] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 260.793119][T14353] syz.1.3806 (14353) used greatest stack depth: 20104 bytes left [ 260.874098][ T5889] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22 [ 260.904738][ T5889] usb 1-1: USB disconnect, device number 50 [ 261.149110][ T5941] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 261.182396][ T5941] usb 2-1: USB disconnect, device number 47 [ 261.742071][T14488] program syz.6.3869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.821462][ T5889] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 262.002492][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.015647][ T5889] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.024864][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.061904][ T5889] usb 4-1: config 0 descriptor?? [ 262.085938][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 262.161938][ T5942] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 262.172164][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 262.322398][ T5942] usb 7-1: Using ep0 maxpacket: 16 [ 262.329656][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.346792][ T5942] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 262.365140][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.367965][ T24] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 262.385562][ T5942] usb 7-1: config 0 descriptor?? [ 262.405897][ T24] usb 1-1: config 0 has no interface number 0 [ 262.416631][ T24] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.425342][ T5940] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 262.428359][ T24] usb 1-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.450030][ T24] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 262.471101][ T24] usb 1-1: New USB device strings: Mfr=51, Product=0, SerialNumber=0 [ 262.479246][ T24] usb 1-1: Manufacturer: syz [ 262.493409][ T24] usb 1-1: config 0 descriptor?? [ 262.592403][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 262.599113][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.615206][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.633117][ T5940] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 262.672769][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.698339][ T5889] pwc: recv_control_msg error -71 req 02 val 2700 [ 262.710633][ T5940] usb 3-1: config 0 descriptor?? [ 262.722779][ T5889] pwc: recv_control_msg error -71 req 02 val 2c00 [ 262.729595][ T5889] pwc: recv_control_msg error -71 req 04 val 1000 [ 262.747849][ T5889] pwc: recv_control_msg error -71 req 04 val 1300 [ 262.766188][ T5889] pwc: recv_control_msg error -71 req 04 val 1400 [ 262.774197][ T5889] pwc: recv_control_msg error -71 req 02 val 2000 [ 262.786944][ T5889] pwc: recv_control_msg error -71 req 02 val 2100 [ 262.801172][ T5889] pwc: recv_control_msg error -71 req 04 val 1500 [ 262.811199][ T5889] pwc: recv_control_msg error -71 req 02 val 2500 [ 262.818331][ T5942] hkems 0003:2006:0118.0054: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.6-1/input0 [ 262.822697][ T5889] pwc: recv_control_msg error -71 req 02 val 2400 [ 262.843757][ T5942] hkems 0003:2006:0118.0054: no inputs found [ 262.849929][ T5942] hkems 0003:2006:0118.0054: force feedback init failed [ 262.861503][ T5889] pwc: recv_control_msg error -71 req 02 val 2600 [ 262.881454][ T5889] pwc: recv_control_msg error -71 req 02 val 2900 [ 262.898667][ T5889] pwc: recv_control_msg error -71 req 02 val 2800 [ 262.921435][ T5889] pwc: recv_control_msg error -71 req 04 val 1100 [ 262.934741][ T24] uclogic 0003:28BD:0935.0055: interface is invalid, ignoring [ 262.951511][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 262.965259][ T5889] pwc: Registered as video103. [ 262.974692][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 262.992012][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 263.032060][ T5889] usb 4-1: USB disconnect, device number 52 [ 263.074251][ T5942] usb 7-1: USB disconnect, device number 5 [ 263.145164][ T5940] uclogic 0003:5543:0003.0056: item fetching failed at offset 0/3 [ 263.164542][ T10] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 263.182498][ T5940] uclogic 0003:5543:0003.0056: parse failed [ 263.188556][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.191885][ T24] usb 1-1: USB disconnect, device number 51 [ 263.201653][ T5940] uclogic 0003:5543:0003.0056: probe with driver uclogic failed with error -22 [ 263.213299][ T10] usb 2-1: Product: syz [ 263.217468][ T10] usb 2-1: Manufacturer: syz [ 263.248712][ T10] usb 2-1: SerialNumber: syz [ 263.275976][ T10] usb 2-1: config 0 descriptor?? [ 263.307124][ T10] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 048 [ 263.334671][ T5889] usb 3-1: USB disconnect, device number 36 [ 263.773450][T14580] can0: slcan on ttyS3. [ 263.833790][T14578] can0 (unregistered): slcan off ttyS3. [ 263.930705][ T10] i2c i2c-1: failure reading functionality [ 263.940740][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 263.942928][ T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 263.956347][ T10] usb 2-1: USB disconnect, device number 48 [ 264.059876][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 264.059891][ T30] audit: type=1400 audit(1760536969.136:1007): avc: denied { map } for pid=14597 comm="syz.2.3906" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 264.151444][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 264.155042][ T30] audit: type=1400 audit(1760536969.176:1008): avc: denied { read write } for pid=14597 comm="syz.2.3906" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 264.181389][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.190313][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.190343][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.190373][ T24] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 264.190395][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.195827][ T24] usb 4-1: config 0 descriptor?? [ 264.400647][ T30] audit: type=1400 audit(1760536969.476:1009): avc: denied { execute_no_trans } for pid=14609 comm="syz.6.3900" path=2F6D656D66643AC9F01D050BAFA9B8C65B0BDB58AE5B1AA9FD16AED16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 264.431882][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.689987][ T30] audit: type=1400 audit(1760536969.766:1010): avc: denied { create } for pid=14620 comm="syz.2.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 264.709745][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.725417][ T30] audit: type=1400 audit(1760536969.806:1011): avc: denied { write } for pid=14620 comm="syz.2.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 264.728354][ T24] aquacomputer_d5next 0003:0C70:F014.0057: unknown main item tag 0x7 [ 264.765642][ T24] aquacomputer_d5next 0003:0C70:F014.0057: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 264.810863][ T30] audit: type=1400 audit(1760536969.886:1012): avc: denied { write } for pid=14627 comm="syz.2.3908" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 264.878914][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.928127][ T24] usb 4-1: USB disconnect, device number 53 [ 265.085698][T14601] syz.0.3897 (14601): drop_caches: 1 [ 265.178883][T14638] qrtr: Invalid version 255 [ 265.286938][ T30] audit: type=1400 audit(1760536970.366:1013): avc: denied { bind } for pid=14642 comm="syz.0.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.342610][ T30] audit: type=1400 audit(1760536970.426:1014): avc: denied { create } for pid=14647 comm="syz.0.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 265.386255][ T30] audit: type=1400 audit(1760536970.466:1015): avc: denied { ioctl } for pid=14647 comm="syz.0.3917" path="socket:[40618]" dev="sockfs" ino=40618 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 265.422536][ T30] audit: type=1400 audit(1760536970.476:1016): avc: denied { accept } for pid=14647 comm="syz.0.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 265.633540][T14663] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3925'. [ 265.771787][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 265.782497][ T5940] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 265.923464][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.943098][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.944801][ T24] usb 1-1: config 0 has no interface number 0 [ 265.955572][ T5940] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 265.966110][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 265.992558][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.002847][ T24] usb 1-1: Product: syz [ 266.007021][ T24] usb 1-1: Manufacturer: syz [ 266.012180][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.023428][ T24] usb 1-1: SerialNumber: syz [ 266.024105][ T5940] usb 3-1: config 0 descriptor?? [ 266.042441][ T24] usb 1-1: config 0 descriptor?? [ 266.272186][ T24] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 266.300512][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 266.333608][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 266.344754][ T24] usb 1-1: media controller created [ 266.399185][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.490343][ T5940] gembird 0003:11FF:3331.0058: unknown main item tag 0x0 [ 266.508295][ T5940] gembird 0003:11FF:3331.0058: unknown main item tag 0x0 [ 266.524832][ T5940] gembird 0003:11FF:3331.0058: unknown main item tag 0x0 [ 266.542474][ T5940] gembird 0003:11FF:3331.0058: unknown main item tag 0x0 [ 266.568849][ T5940] gembird 0003:11FF:3331.0058: unknown main item tag 0x0 [ 266.615074][ T5940] gembird 0003:11FF:3331.0058: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.2-1/input0 [ 266.703368][ T5861] usb 1-1: USB disconnect, device number 52 [ 266.761639][ T24] usb 3-1: USB disconnect, device number 37 [ 266.841993][T14717] fido_id[14717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 266.923160][T14727] SELinux: Context Ü is not valid (left unmapped). [ 266.986452][T14732] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 267.003501][T14732] overlayfs: missing 'lowerdir' [ 267.298005][T14753] program syz.6.3955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.371140][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 267.478778][T14764] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 267.487134][T14764] net_ratelimit: 66 callbacks suppressed [ 267.487149][T14764] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 267.542611][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 267.553396][ T24] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 267.565263][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.594108][ T24] usb 2-1: config 0 descriptor?? [ 267.631289][ T5861] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 267.797309][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.821297][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.863232][ T5861] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 267.880510][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.902425][ T5861] usb 3-1: config 0 descriptor?? [ 267.917112][T14778] netlink: 564 bytes leftover after parsing attributes in process `syz.6.3966'. [ 268.028155][ T24] smartjoyplus 0003:0B43:0003.0059: item fetching failed at offset 0/3 [ 268.041674][ T24] smartjoyplus 0003:0B43:0003.0059: parse failed [ 268.048846][ T24] smartjoyplus 0003:0B43:0003.0059: probe with driver smartjoyplus failed with error -22 [ 268.104970][T14789] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3981'. [ 268.106735][T14787] syz.6.3971 (14787): drop_caches: 1 [ 268.232042][ T5940] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 268.240732][ T24] usb 2-1: USB disconnect, device number 49 [ 268.336389][ T5861] cm6533_jd 0003:0D8C:0022.005A: item fetching failed at offset 1/5 [ 268.356512][ T5861] cm6533_jd 0003:0D8C:0022.005A: parse failed [ 268.367107][ T5861] cm6533_jd 0003:0D8C:0022.005A: probe with driver cm6533_jd failed with error -22 [ 268.391840][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 268.409568][ T5940] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 268.429077][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.438528][ T5940] usb 4-1: Product: syz [ 268.446635][ T5940] usb 4-1: Manufacturer: syz [ 268.453352][ T5940] usb 4-1: SerialNumber: syz [ 268.482975][ T5940] usb 4-1: config 0 descriptor?? [ 268.500753][ T5940] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 268.529946][ T5940] pctv452e: pctv452e_power_ctrl: 1 [ 268.529946][ T5940] [ 268.561783][ T5940] usb 4-1: selecting invalid altsetting 3 [ 268.567532][ T5940] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 268.567532][ T5940] [ 268.585926][ T5817] usb 3-1: USB disconnect, device number 38 [ 268.594975][ T5940] dvb-usb: bulk message failed: -22 (5/0) [ 268.605003][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 268.619086][ T5940] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 268.625883][T14811] sp0: Synchronizing with TNC [ 268.640398][ T5940] usb 4-1: media controller created [ 268.646769][ T5940] dvb-usb: bulk message failed: -22 (8/0) [ 268.653438][ T5940] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 268.675192][ T5940] dvb-usb: MAC address reading failed. [ 268.700789][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.716310][T14785] dvb-usb: bulk message failed: -22 (7/0) [ 268.735022][T14785] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 268.846580][ T5940] DVB: Unable to find symbol stb0899_attach() [ 268.865687][ T5940] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 268.971697][ T5940] rc_core: IR keymap rc-tt-1500 not found [ 268.987626][ T5940] Registered IR keymap rc-empty [ 269.004596][ T5940] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 269.024366][ T5940] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input49 [ 269.037051][ T5940] dvb-usb: schedule remote query interval to 100 msecs. [ 269.037072][ T5940] pctv452e: pctv452e_power_ctrl: 0 [ 269.037072][ T5940] [ 269.037082][ T5940] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 269.040637][ T5940] usb 4-1: USB disconnect, device number 54 [ 269.053579][T14832] No buffer was provided with the request [ 269.170156][ T5940] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 269.180364][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 269.180377][ T30] audit: type=1400 audit(1760536974.256:1029): avc: denied { write } for pid=14833 comm="syz.6.3993" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 269.184989][ T30] audit: type=1400 audit(1760536974.266:1030): avc: denied { open } for pid=14833 comm="syz.6.3993" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 269.194322][ T30] audit: type=1400 audit(1760536974.276:1031): avc: denied { ioctl } for pid=14833 comm="syz.6.3993" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 269.211145][ T5861] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 269.245423][T14836] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 269.304326][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.320715][T14835] [U] J"—e:ÀÆ" [ 269.478615][T14844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3998'. [ 269.492025][ T5861] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 269.513275][ T5861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.542807][ T5861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.560100][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.578010][T14849] ptrace attach of "./syz-executor exec"[5815] was attempted by " [ 269.588340][ T5861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.735950][ T30] audit: type=1400 audit(1760536974.806:1032): avc: denied { read write } for pid=14853 comm="syz.3.4004" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 269.809902][ T30] audit: type=1400 audit(1760536974.806:1033): avc: denied { open } for pid=14853 comm="syz.3.4004" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 269.833959][ T5889] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 269.844957][ T5861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.856806][ T30] audit: type=1400 audit(1760536974.816:1034): avc: denied { ioctl } for pid=14853 comm="syz.3.4004" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 269.886171][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.897662][ T5861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.907605][ T5861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.920960][ T30] audit: type=1400 audit(1760536974.996:1035): avc: denied { read write } for pid=14864 comm="syz.2.4008" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 269.923413][T14862] ALSA: seq fatal error: cannot create timer (-19) [ 269.945302][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.945751][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.946601][ T5861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.946641][ T5861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.946665][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.956605][ T30] audit: type=1400 audit(1760536975.036:1036): avc: denied { open } for pid=14864 comm="syz.2.4008" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 270.032372][ T5861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.041309][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 270.046969][ T5861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.059404][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.081379][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.106159][ T5889] usb 1-1: config 0 has no interfaces? [ 270.112060][ T5861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.135267][ T5861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.151463][ T5889] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 270.191525][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.199601][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.220747][ T5861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.236760][ T5889] usb 1-1: config 0 descriptor?? [ 270.253415][ T30] audit: type=1400 audit(1760536975.326:1037): avc: denied { create } for pid=14873 comm="syz.3.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.278754][ T5861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.294532][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.301569][ T30] audit: type=1400 audit(1760536975.346:1038): avc: denied { getopt } for pid=14873 comm="syz.3.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.322956][ T5861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.332484][ T5861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.351630][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.363176][ T5861] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 270.381689][ T5861] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 270.393177][T14881] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4014'. [ 270.405141][ T5861] usb 2-1: Product: syz [ 270.409311][ T5861] usb 2-1: Manufacturer: syz [ 270.413064][ T5940] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 270.419189][ T5861] usb 2-1: SerialNumber: syz [ 270.433462][ T5861] usb 2-1: config 0 descriptor?? [ 270.454587][ T5861] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 270.516600][ T5817] usb 1-1: USB disconnect, device number 53 [ 270.607264][ T5940] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 270.616710][ T5940] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 270.636556][ T5940] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 270.667890][ T5940] usb 3-1: config 220 has no interface number 2 [ 270.688157][ T5940] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 270.700175][ T5861] usb 2-1: USB disconnect, device number 50 [ 270.708144][ T5940] usb 3-1: config 220 interface 0 has no altsetting 0 [ 270.733971][ T5861] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 270.757308][ T5940] usb 3-1: config 220 interface 76 has no altsetting 0 [ 270.766794][ T5940] usb 3-1: config 220 interface 1 has no altsetting 0 [ 270.790355][ T5940] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 270.819084][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.839490][ T5940] usb 3-1: Product: syz [ 270.849415][ T5940] usb 3-1: Manufacturer: syz [ 270.865409][ T5940] usb 3-1: SerialNumber: syz [ 271.075745][T14912] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.4024'. [ 271.107527][ T5940] usb 3-1: selecting invalid altsetting 0 [ 271.129456][ T5940] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 271.152698][ T5940] uvcvideo 3-1:220.0: No valid video chain found. [ 271.191690][ T5940] usb 3-1: selecting invalid altsetting 0 [ 271.198781][ T5940] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 271.220905][ T5940] usb 3-1: USB disconnect, device number 39 [ 271.520125][T14935] sp0: Synchronizing with TNC [ 271.536683][T14935] sp0: Found TNC [ 272.121483][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 272.251817][ T5940] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 272.284091][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 272.293246][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.304473][ T24] usb 3-1: config 0 descriptor?? [ 272.363070][ T10] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 272.403476][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 272.417440][ T5940] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 272.429902][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.443894][ T5940] usb 4-1: config 0 descriptor?? [ 272.455080][T14961] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 272.524588][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 272.536992][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 30 [ 272.553024][ T10] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 272.564433][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.583561][ T10] usb 7-1: config 0 descriptor?? [ 272.718630][ T24] ath6kl: Unsupported hardware version: 0x0 [ 272.740540][ T24] ath6kl: Failed to init ath6kl core: -22 [ 272.753164][ T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 272.875395][ T5940] elan 0003:04F3:0755.005B: unknown main item tag 0x0 [ 272.888574][ T5940] elan 0003:04F3:0755.005B: item fetching failed at offset 3/5 [ 272.898732][ T5940] elan 0003:04F3:0755.005B: Hid Parse failed [ 272.905502][ T5940] elan 0003:04F3:0755.005B: probe with driver elan failed with error -22 [ 272.952377][ T5940] usb 3-1: USB disconnect, device number 40 [ 273.008128][ T10] dragonrise 0003:0079:0011.005C: unknown main item tag 0x0 [ 273.025017][ T10] dragonrise 0003:0079:0011.005C: unknown main item tag 0x0 [ 273.033634][ T10] dragonrise 0003:0079:0011.005C: unknown main item tag 0x0 [ 273.042319][ T10] dragonrise 0003:0079:0011.005C: unknown main item tag 0x0 [ 273.049637][ T10] dragonrise 0003:0079:0011.005C: unknown main item tag 0x0 [ 273.057592][ T10] dragonrise 0003:0079:0011.005C: unknown main item tag 0x0 [ 273.066156][ T10] dragonrise 0003:0079:0011.005C: unknown main item tag 0x0 [ 273.077461][ T24] usb 4-1: USB disconnect, device number 55 [ 273.082010][ T10] dragonrise 0003:0079:0011.005C: hidraw0: USB HID v0.80 Device [HID 0079:0011] on usb-dummy_hcd.6-1/input0 [ 273.180687][T15006] Cannot find del_set index 4 as target [ 273.258892][ T24] usb 7-1: USB disconnect, device number 6 [ 273.532670][ T5889] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 273.691612][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 273.700429][ T5889] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.730049][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 273.747186][ T5889] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 273.757863][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 273.765685][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.767637][ T5889] usb 2-1: config 0 descriptor?? [ 273.961752][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 273.968642][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.982681][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.993396][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 274.003675][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.014500][ T10] usb 1-1: config 0 descriptor?? [ 274.121169][ T24] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 274.207467][ T5889] corsair-cpro 0003:1B1C:0C10.005D: unknown main item tag 0x0 [ 274.217838][ T5889] corsair-cpro 0003:1B1C:0C10.005D: unknown main item tag 0x0 [ 274.227759][ T5889] corsair-cpro 0003:1B1C:0C10.005D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 274.282788][ T24] usb 7-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 274.294460][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.304691][ T5889] corsair-cpro 0003:1B1C:0C10.005D: probe with driver corsair-cpro failed with error -38 [ 274.316275][ T24] usb 7-1: config 0 descriptor?? [ 274.331729][ T24] usb 7-1: selecting invalid altsetting 3 [ 274.337613][ T24] comedi comedi5: could not set alternate setting 3 in high speed [ 274.346010][ T24] usbduxsigma 7-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 274.356843][ T24] usbduxsigma 7-1:0.0: probe with driver usbduxsigma failed with error -22 [ 274.403498][ T24] usb 2-1: USB disconnect, device number 51 [ 274.430432][ T10] savu 0003:1E7D:2D5A.005E: unbalanced collection at end of report description [ 274.440240][ T10] savu 0003:1E7D:2D5A.005E: parse failed [ 274.447576][ T10] savu 0003:1E7D:2D5A.005E: probe with driver savu failed with error -22 [ 274.535457][ T10] usb 7-1: USB disconnect, device number 7 [ 274.644696][ T5817] usb 1-1: USB disconnect, device number 54 [ 275.151916][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 275.265704][T15077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4100'. [ 275.334402][T15079] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 275.341614][ T5817] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 275.354512][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 275.361784][ T24] usb 3-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.375457][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.382380][ T24] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 275.394464][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.412635][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 275.412649][ T30] audit: type=1400 audit(1760536980.496:1043): avc: denied { mount } for pid=15078 comm="syz.6.4101" name="/" dev="rpc_pipefs" ino=42632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 275.454601][ T24] usb 3-1: config 0 descriptor?? [ 275.562357][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 275.575048][ T5817] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.601450][ T5817] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.631947][ T5817] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.664426][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 275.683395][T15089] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 275.692749][ T5817] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 275.707007][ T30] audit: type=1400 audit(1760536980.776:1044): avc: denied { create } for pid=15087 comm="syz.6.4105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 275.726553][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.744989][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.772671][ T5817] usb 2-1: config 0 descriptor?? [ 275.783234][ T30] audit: type=1400 audit(1760536980.816:1045): avc: denied { ioctl } for pid=15087 comm="syz.6.4105" path="socket:[43378]" dev="sockfs" ino=43378 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 275.846653][ T30] audit: type=1400 audit(1760536980.916:1046): avc: denied { bind } for pid=15094 comm="syz.0.4109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 275.921901][ T30] audit: type=1400 audit(1760536980.956:1047): avc: denied { connect } for pid=15094 comm="syz.0.4109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 275.925140][ T24] cherry 0003:046A:0023.005F: hidraw0: USB HID v0.02 Device [HID 046a:0023] on usb-dummy_hcd.2-1/input0 [ 276.156022][ T30] audit: type=1400 audit(1760536981.236:1048): avc: denied { setopt } for pid=15109 comm="syz.3.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 276.175502][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.180490][ T5861] usb 3-1: USB disconnect, device number 41 [ 276.229404][ T5817] asus 0003:048D:CE50.0060: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input0 [ 276.252354][ T5817] asus 0003:048D:CE50.0060: Asus input not registered [ 276.261150][ T5889] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 276.305272][ T5817] asus 0003:048D:CE50.0060: probe with driver asus failed with error -12 [ 276.422863][ T5889] usb 7-1: Using ep0 maxpacket: 32 [ 276.448312][ T5889] usb 7-1: config 0 has no interfaces? [ 276.464048][ T5889] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 276.470131][ T5817] usb 2-1: USB disconnect, device number 52 [ 276.481146][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.509506][ T5889] usb 7-1: Product: syz [ 276.519606][ T5889] usb 7-1: Manufacturer: syz [ 276.528568][ T5889] usb 7-1: SerialNumber: syz [ 276.553060][ T5889] usb 7-1: config 0 descriptor?? [ 276.797085][ T5889] usb 7-1: USB disconnect, device number 8 [ 277.219588][ T30] audit: type=1400 audit(1760536982.296:1049): avc: denied { create } for pid=15167 comm="syz.0.4134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 277.242012][ T5889] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 277.275276][ T30] audit: type=1400 audit(1760536982.346:1050): avc: denied { write } for pid=15167 comm="syz.0.4134" path="socket:[42775]" dev="sockfs" ino=42775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 277.382865][ T5940] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 277.402349][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 277.423298][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.442502][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.471103][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 277.494663][ T5889] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 277.520609][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.543309][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 277.547052][ T5889] usb 3-1: config 0 descriptor?? [ 277.549937][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.580581][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.601818][ T5940] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 277.610889][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.650604][ T5940] usb 2-1: config 0 descriptor?? [ 277.763708][ T5817] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 277.788546][ T30] audit: type=1400 audit(1760536982.866:1051): avc: denied { ioctl } for pid=15193 comm="syz.0.4143" path="socket:[42804]" dev="sockfs" ino=42804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.813513][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.843917][ T30] audit: type=1400 audit(1760536982.926:1052): avc: denied { read } for pid=15196 comm="syz.6.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 277.921693][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 277.928408][ T5817] usb 4-1: config 2 has an invalid interface number: 138 but max is 0 [ 277.937831][ T5817] usb 4-1: config 2 has no interface number 0 [ 277.944886][ T5817] usb 4-1: config 2 interface 138 has no altsetting 0 [ 277.966320][ T5817] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010e, bcdDevice=e8.14 [ 277.977784][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.989795][ T5817] usb 4-1: Product: syz [ 277.997017][ T5817] usb 4-1: Manufacturer: syz [ 277.999244][ T5889] microsoft 0003:045E:07DA.0061: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 278.014509][ T5817] usb 4-1: SerialNumber: syz [ 278.041820][ T5889] microsoft 0003:045E:07DA.0061: no inputs found [ 278.058428][ T5889] microsoft 0003:045E:07DA.0061: could not initialize ff, continuing anyway [ 278.104859][ T5940] lenovo 0003:17EF:6009.0062: hidraw1: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 278.188635][ T5940] IPVS: starting estimator thread 0... [ 278.238664][ T5889] usb 3-1: USB disconnect, device number 42 [ 278.255402][ T5817] kvaser_usb 4-1:2.138: error -ENODEV: Cannot get usb endpoint(s) [ 278.285368][ T5940] usb 2-1: USB disconnect, device number 53 [ 278.292602][T15211] IPVS: using max 41 ests per chain, 98400 per kthread [ 278.327421][ T5817] usb 4-1: USB disconnect, device number 56 [ 278.899756][T15234] sp0: Synchronizing with TNC [ 278.928412][T15233] [U] è` [ 278.991725][ T5940] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 279.156695][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 279.174871][ T5940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.197854][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.209982][ T5940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.225843][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.244014][ T5940] usb 1-1: Product: syz [ 279.254449][ T5940] usb 1-1: Manufacturer: syz [ 279.264146][ T5940] usb 1-1: SerialNumber: syz [ 279.635992][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4176'. [ 279.690681][ T5940] usb 1-1: cannot find UAC_HEADER [ 279.742114][ T5940] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 279.824908][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.946899][ T5861] usb 1-1: USB disconnect, device number 55 [ 279.964345][T15282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.251742][ T5940] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 280.403188][ T5940] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 280.413226][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.433216][ T5940] usb 3-1: config 0 descriptor?? [ 280.450151][ T5940] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 280.501210][ T5889] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 280.515425][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 280.515440][ T30] audit: type=1326 audit(1760536985.596:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.0.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2038eec9 code=0x7ffc0000 [ 280.572978][ T30] audit: type=1326 audit(1760536985.636:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.0.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2038eec9 code=0x7ffc0000 [ 280.643847][ T30] audit: type=1326 audit(1760536985.636:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.0.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fdf2038eec9 code=0x7ffc0000 [ 280.670649][ T30] audit: type=1326 audit(1760536985.636:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.0.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2038eec9 code=0x7ffc0000 [ 280.696641][ T30] audit: type=1326 audit(1760536985.636:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.0.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2038eec9 code=0x7ffc0000 [ 280.743822][ T5889] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 280.753250][ T5889] usb 7-1: config 1 has no interface number 0 [ 280.759358][ T5889] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 280.774551][ T30] audit: type=1400 audit(1760536985.856:1061): avc: denied { ioctl } for pid=15319 comm="syz.1.4200" path="socket:[44068]" dev="sockfs" ino=44068 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.806093][ T5889] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 280.828924][ T5889] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.864076][ T5889] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 280.874215][ T5940] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 280.882803][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.885819][ T5940] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 280.900204][ T5889] usb 7-1: Product: syz [ 280.906540][ T30] audit: type=1400 audit(1760536985.986:1062): avc: denied { ioctl } for pid=15321 comm="syz.1.4201" path="socket:[44073]" dev="sockfs" ino=44073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 280.907876][ T5889] usb 7-1: Manufacturer: syz [ 280.932277][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.971129][ T5889] usb 7-1: SerialNumber: syz [ 280.998796][T15298] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 281.152416][ T5861] usb 3-1: USB disconnect, device number 43 [ 281.214405][T15298] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 281.394582][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'. [ 281.476375][ T5889] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:03:07 [ 281.502307][T15345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4212'. [ 281.590701][ T30] audit: type=1400 audit(1760536986.666:1063): avc: denied { create } for pid=15350 comm="syz.3.4215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 281.618607][ T30] audit: type=1400 audit(1760536986.666:1064): avc: denied { listen } for pid=15350 comm="syz.3.4215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 281.640752][ T5889] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 281.667227][ T5889] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 281.685165][ T5889] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 281.729357][ T5889] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 281.772031][ T5889] usb 7-1: USB disconnect, device number 9 [ 281.800234][ T5889] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem [ 281.862054][ T30] audit: type=1400 audit(1760536986.936:1065): avc: denied { read write } for pid=15363 comm="syz.3.4220" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 281.933974][ T5889] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 282.273388][ T5940] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 282.433471][ T5940] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 282.442502][ T5940] usb 3-1: config 0 has no interface number 1 [ 282.449986][ T5940] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 282.474098][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.510153][ T5940] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 282.530474][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 282.539125][ T5940] usb 3-1: SerialNumber: syz [ 282.563315][ T5940] usb 3-1: config 0 descriptor?? [ 282.584832][ T5940] uvcvideo 3-1:0.199: Found UVC 0.00 device (0002:0000) [ 282.601511][ T5861] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 282.603682][ T5940] uvcvideo 3-1:0.199: No valid video chain found. [ 282.730932][T15396] input: syz1 as /devices/virtual/input/input53 [ 282.751825][ T5861] usb 7-1: Using ep0 maxpacket: 16 [ 282.759033][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.772378][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.782906][ T5861] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 282.792274][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.802336][ T5861] usb 7-1: config 0 descriptor?? [ 282.808824][ T5940] usb 3-1: USB disconnect, device number 44 [ 283.063034][ T5810] block nbd0: Receive control failed (result -32) [ 283.217922][ T5861] hid (null): report_id 11016 is invalid [ 283.234047][ T5861] mcp2221 0003:04D8:00DD.0063: report_id 11016 is invalid [ 283.246572][ T5861] mcp2221 0003:04D8:00DD.0063: item 0 2 1 8 parsing failed [ 283.256821][ T5861] mcp2221 0003:04D8:00DD.0063: can't parse reports [ 283.264815][ T5861] mcp2221 0003:04D8:00DD.0063: probe with driver mcp2221 failed with error -22 [ 283.423129][ T5861] usb 7-1: USB disconnect, device number 10 [ 283.474936][T15426] dummy0: entered allmulticast mode [ 284.051741][ T5817] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 284.091117][ T5861] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 284.140464][ T5940] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 284.261132][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 284.269824][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.292342][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.305892][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.305954][ T5940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.319492][ T5861] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 284.319518][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.322036][ T5861] usb 2-1: config 0 descriptor?? [ 284.330941][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.367405][ T5817] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 284.378282][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.387127][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 284.387159][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4269'. [ 284.408732][ T5940] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 284.418471][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.427894][ T5940] usb 3-1: Product: syz [ 284.433751][ T5940] usb 3-1: Manufacturer: syz [ 284.439808][ T5940] usb 3-1: SerialNumber: syz [ 284.445790][ T5817] usb 4-1: config 0 descriptor?? [ 284.675534][ T5940] pxrc 3-1:1.0: Could not find endpoint [ 284.696149][ T5940] usb 3-1: USB disconnect, device number 45 [ 284.760551][ T5861] itetech 0003:258A:6A88.0064: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 284.876778][ T5817] hid_parser_main: 1284 callbacks suppressed [ 284.876799][ T5817] hid_mf 0003:0079:1846.0065: unknown main item tag 0x0 [ 284.891994][ T5817] hid_mf 0003:0079:1846.0065: unknown main item tag 0x0 [ 284.901031][ T5817] hid_mf 0003:0079:1846.0065: hidraw1: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 284.914771][ T5817] hid_mf 0003:0079:1846.0065: Invalid report, this should never happen! [ 284.935050][ T5817] hid_mf 0003:0079:1846.0065: Force feedback init failed. [ 284.995380][ T5861] usb 2-1: USB disconnect, device number 54 [ 285.111302][ T5889] usb 4-1: USB disconnect, device number 57 [ 285.531753][ T5817] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 285.570317][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 285.570332][ T30] audit: type=1400 audit(1760536990.646:1076): avc: denied { bind } for pid=15493 comm="syz.1.4282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 285.599547][ T30] audit: type=1400 audit(1760536990.646:1077): avc: denied { listen } for pid=15493 comm="syz.1.4282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 285.703829][ T5817] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.712552][ T5817] usb 3-1: config 0 has no interface number 0 [ 285.718646][ T5817] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.736894][ T5817] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.747034][ T5817] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 285.756281][ T30] audit: type=1400 audit(1760536990.836:1078): avc: denied { ioctl } for pid=15501 comm="syz.3.4285" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 285.783471][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.794938][ T5817] usb 3-1: config 0 descriptor?? [ 286.127009][ T30] audit: type=1400 audit(1760536991.206:1079): avc: denied { write } for pid=15513 comm="syz.3.4291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 286.146483][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.155773][ T30] audit: type=1400 audit(1760536991.236:1080): avc: denied { name_connect } for pid=15513 comm="syz.3.4291" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 286.180606][ T30] audit: type=1400 audit(1760536991.256:1081): avc: denied { listen } for pid=15513 comm="syz.3.4291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 286.203070][ T30] audit: type=1400 audit(1760536991.256:1082): avc: denied { accept } for pid=15513 comm="syz.3.4291" lport=44531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 286.227556][T15518] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4294'. [ 286.228388][ T5817] prodikeys 0003:041E:2801.0066: unknown main item tag 0x0 [ 286.253792][ T5817] prodikeys 0003:041E:2801.0066: unknown main item tag 0x0 [ 286.264656][ T5817] prodikeys 0003:041E:2801.0066: unknown main item tag 0x0 [ 286.274314][ T5817] prodikeys 0003:041E:2801.0066: unknown main item tag 0x0 [ 286.302572][ T5817] prodikeys 0003:041E:2801.0066: unknown main item tag 0x0 [ 286.316493][ T5817] prodikeys 0003:041E:2801.0066: unknown main item tag 0x0 [ 286.325971][ T5817] prodikeys 0003:041E:2801.0066: unknown main item tag 0x0 [ 286.336295][ T5817] prodikeys 0003:041E:2801.0066: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 286.367881][ T5817] hid_prodikeys: hid-prodikeys: failed to find output report [ 286.367881][ T5817] [ 286.390053][T15525] ================================================================== [ 286.398136][T15525] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xbb/0x100 [ 286.406383][T15525] Read of size 7 at addr ffff888066ddb520 by task fido_id/15525 [ 286.414001][T15525] [ 286.416309][T15525] CPU: 1 UID: 0 PID: 15525 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 286.416327][T15525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.416336][T15525] Call Trace: [ 286.416341][T15525] [ 286.416347][T15525] dump_stack_lvl+0x116/0x1f0 [ 286.416368][T15525] print_report+0xcd/0x630 [ 286.416388][T15525] ? __virt_addr_valid+0x81/0x610 [ 286.416403][T15525] ? __phys_addr+0xe8/0x180 [ 286.416417][T15525] ? report_descriptor_read+0xbb/0x100 [ 286.416438][T15525] kasan_report+0xe0/0x110 [ 286.416458][T15525] ? report_descriptor_read+0xbb/0x100 [ 286.416480][T15525] kasan_check_range+0x100/0x1b0 [ 286.416493][T15525] __asan_memcpy+0x23/0x60 [ 286.416509][T15525] report_descriptor_read+0xbb/0x100 [ 286.416529][T15525] ? __pfx_report_descriptor_read+0x10/0x10 [ 286.416549][T15525] sysfs_kf_bin_read+0x156/0x210 [ 286.416572][T15525] kernfs_fop_read_iter+0x32b/0x610 [ 286.416591][T15525] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 286.416613][T15525] vfs_read+0x8bf/0xcf0 [ 286.416633][T15525] ? __pfx_vfs_read+0x10/0x10 [ 286.416648][T15525] ? __might_fault+0x13b/0x190 [ 286.416667][T15525] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 286.416686][T15525] ksys_read+0x12a/0x250 [ 286.416702][T15525] ? __pfx_ksys_read+0x10/0x10 [ 286.416721][T15525] do_syscall_64+0xcd/0xfa0 [ 286.416738][T15525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.416753][T15525] RIP: 0033:0x7f63296a7407 [ 286.416765][T15525] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 286.416778][T15525] RSP: 002b:00007ffddedfe860 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 286.416792][T15525] RAX: ffffffffffffffda RBX: 00007f6329d6f880 RCX: 00007f63296a7407 [ 286.416801][T15525] RDX: 0000000000001000 RSI: 00007ffddedfe8b0 RDI: 0000000000000004 [ 286.416810][T15525] RBP: 00005608ceae12c0 R08: 0000000000000000 R09: 0000000000000000 [ 286.416819][T15525] R10: 0000000000000000 R11: 0000000000000202 R12: 00005608ceae04c0 [ 286.416827][T15525] R13: 00007ffddedfe8b0 R14: 0000000000000004 R15: 00005608c40b94d8 [ 286.416842][T15525] [ 286.416846][T15525] [ 286.627734][T15525] Allocated by task 5817: [ 286.632037][T15525] kasan_save_stack+0x33/0x60 [ 286.636701][T15525] kasan_save_track+0x14/0x30 [ 286.641361][T15525] __kasan_kmalloc+0xaa/0xb0 [ 286.645937][T15525] __kmalloc_node_track_caller_noprof+0x345/0x8a0 [ 286.652335][T15525] kmemdup_noprof+0x29/0x60 [ 286.656818][T15525] hid_open_report+0x223/0x830 [ 286.661565][T15525] pk_probe+0x1f5/0x1130 [ 286.665789][T15525] hid_device_probe+0x5ba/0x8d0 [ 286.670614][T15525] really_probe+0x241/0xa90 [ 286.675091][T15525] __driver_probe_device+0x1de/0x440 [ 286.680353][T15525] driver_probe_device+0x4c/0x1b0 [ 286.685351][T15525] __device_attach_driver+0x1df/0x310 [ 286.690698][T15525] bus_for_each_drv+0x159/0x1e0 [ 286.695528][T15525] __device_attach+0x1e4/0x4b0 [ 286.700269][T15525] bus_probe_device+0x17f/0x1c0 [ 286.705105][T15525] device_add+0x1148/0x1aa0 [ 286.709585][T15525] hid_add_device+0x31b/0x5c0 [ 286.714245][T15525] usbhid_probe+0xd38/0x13f0 [ 286.718815][T15525] usb_probe_interface+0x303/0xa40 [ 286.723910][T15525] really_probe+0x241/0xa90 [ 286.728391][T15525] __driver_probe_device+0x1de/0x440 [ 286.733650][T15525] driver_probe_device+0x4c/0x1b0 [ 286.738648][T15525] __device_attach_driver+0x1df/0x310 [ 286.743998][T15525] bus_for_each_drv+0x159/0x1e0 [ 286.748832][T15525] __device_attach+0x1e4/0x4b0 [ 286.753571][T15525] bus_probe_device+0x17f/0x1c0 [ 286.758405][T15525] device_add+0x1148/0x1aa0 [ 286.762888][T15525] usb_set_configuration+0x1187/0x1e20 [ 286.768327][T15525] usb_generic_driver_probe+0xb1/0x110 [ 286.773763][T15525] usb_probe_device+0xef/0x3e0 [ 286.778507][T15525] really_probe+0x241/0xa90 [ 286.782986][T15525] __driver_probe_device+0x1de/0x440 [ 286.788246][T15525] driver_probe_device+0x4c/0x1b0 [ 286.793256][T15525] __device_attach_driver+0x1df/0x310 [ 286.798606][T15525] bus_for_each_drv+0x159/0x1e0 [ 286.803437][T15525] __device_attach+0x1e4/0x4b0 [ 286.808179][T15525] bus_probe_device+0x17f/0x1c0 [ 286.813017][T15525] device_add+0x1148/0x1aa0 [ 286.817499][T15525] usb_new_device+0xd07/0x1a60 [ 286.822243][T15525] hub_event+0x2f34/0x4fe0 [ 286.826638][T15525] process_one_work+0x9cf/0x1b70 [ 286.831561][T15525] worker_thread+0x6c8/0xf10 [ 286.836149][T15525] kthread+0x3c5/0x780 [ 286.840199][T15525] ret_from_fork+0x675/0x7d0 [ 286.844768][T15525] ret_from_fork_asm+0x1a/0x30 [ 286.849510][T15525] [ 286.851812][T15525] Freed by task 5817: [ 286.855766][T15525] kasan_save_stack+0x33/0x60 [ 286.860422][T15525] kasan_save_track+0x14/0x30 [ 286.865079][T15525] __kasan_save_free_info+0x3b/0x60 [ 286.870255][T15525] __kasan_slab_free+0x5f/0x80 [ 286.875005][T15525] kfree+0x2b8/0x6d0 [ 286.878874][T15525] hid_close_report+0x2af/0x560 [ 286.883703][T15525] hid_device_probe+0x60f/0x8d0 [ 286.888528][T15525] really_probe+0x241/0xa90 [ 286.893005][T15525] __driver_probe_device+0x1de/0x440 [ 286.898266][T15525] driver_probe_device+0x4c/0x1b0 [ 286.903266][T15525] __device_attach_driver+0x1df/0x310 [ 286.908615][T15525] bus_for_each_drv+0x159/0x1e0 [ 286.913446][T15525] __device_attach+0x1e4/0x4b0 [ 286.918186][T15525] bus_probe_device+0x17f/0x1c0 [ 286.923017][T15525] device_add+0x1148/0x1aa0 [ 286.927498][T15525] hid_add_device+0x31b/0x5c0 [ 286.932157][T15525] usbhid_probe+0xd38/0x13f0 [ 286.936725][T15525] usb_probe_interface+0x303/0xa40 [ 286.941817][T15525] really_probe+0x241/0xa90 [ 286.946296][T15525] __driver_probe_device+0x1de/0x440 [ 286.951555][T15525] driver_probe_device+0x4c/0x1b0 [ 286.956562][T15525] __device_attach_driver+0x1df/0x310 [ 286.961908][T15525] bus_for_each_drv+0x159/0x1e0 [ 286.966738][T15525] __device_attach+0x1e4/0x4b0 [ 286.971477][T15525] bus_probe_device+0x17f/0x1c0 [ 286.976316][T15525] device_add+0x1148/0x1aa0 [ 286.980798][T15525] usb_set_configuration+0x1187/0x1e20 [ 286.986237][T15525] usb_generic_driver_probe+0xb1/0x110 [ 286.991675][T15525] usb_probe_device+0xef/0x3e0 [ 286.996416][T15525] really_probe+0x241/0xa90 [ 287.000894][T15525] __driver_probe_device+0x1de/0x440 [ 287.006156][T15525] driver_probe_device+0x4c/0x1b0 [ 287.011156][T15525] __device_attach_driver+0x1df/0x310 [ 287.016510][T15525] bus_for_each_drv+0x159/0x1e0 [ 287.021341][T15525] __device_attach+0x1e4/0x4b0 [ 287.026084][T15525] bus_probe_device+0x17f/0x1c0 [ 287.030915][T15525] device_add+0x1148/0x1aa0 [ 287.035395][T15525] usb_new_device+0xd07/0x1a60 [ 287.040136][T15525] hub_event+0x2f34/0x4fe0 [ 287.044531][T15525] process_one_work+0x9cf/0x1b70 [ 287.049450][T15525] worker_thread+0x6c8/0xf10 [ 287.054021][T15525] kthread+0x3c5/0x780 [ 287.058070][T15525] ret_from_fork+0x675/0x7d0 [ 287.062639][T15525] ret_from_fork_asm+0x1a/0x30 [ 287.067381][T15525] [ 287.069687][T15525] The buggy address belongs to the object at ffff888066ddb520 [ 287.069687][T15525] which belongs to the cache kmalloc-8 of size 8 [ 287.083369][T15525] The buggy address is located 0 bytes inside of [ 287.083369][T15525] freed 8-byte region [ffff888066ddb520, ffff888066ddb528) [ 287.096791][T15525] [ 287.099092][T15525] The buggy address belongs to the physical page: [ 287.105475][T15525] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x66ddb [ 287.114211][T15525] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 287.121727][T15525] page_type: f5(slab) [ 287.125688][T15525] raw: 00fff00000000000 ffff88813ff26500 0000000000000000 dead000000000001 [ 287.134250][T15525] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 287.142804][T15525] page dumped because: kasan: bad access detected [ 287.149186][T15525] page_owner tracks the page as allocated [ 287.154878][T15525] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5886, tgid 5886 (kworker/1:5), ts 188173427745, free_ts 188142765749 [ 287.174051][T15525] post_alloc_hook+0x1c0/0x230 [ 287.178806][T15525] get_page_from_freelist+0x10a3/0x3a30 [ 287.184335][T15525] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 287.190212][T15525] alloc_pages_mpol+0x1fb/0x550 [ 287.195053][T15525] new_slab+0x24a/0x360 [ 287.199189][T15525] ___slab_alloc+0xdc4/0x1ae0 [ 287.203840][T15525] __slab_alloc.constprop.0+0x63/0x110 [ 287.209274][T15525] __kmalloc_noprof+0x501/0x880 [ 287.214099][T15525] usb_cache_string+0xab/0x150 [ 287.218841][T15525] usb_new_device+0x238/0x1a60 [ 287.223586][T15525] hub_event+0x2f34/0x4fe0 [ 287.228008][T15525] process_one_work+0x9cf/0x1b70 [ 287.232940][T15525] worker_thread+0x6c8/0xf10 [ 287.237517][T15525] kthread+0x3c5/0x780 [ 287.241568][T15525] ret_from_fork+0x675/0x7d0 [ 287.246148][T15525] ret_from_fork_asm+0x1a/0x30 [ 287.250895][T15525] page last free pid 23 tgid 23 stack trace: [ 287.256851][T15525] __free_frozen_pages+0x7df/0x1160 [ 287.262029][T15525] tlb_remove_table_rcu+0x121/0x320 [ 287.267204][T15525] rcu_core+0x79c/0x1530 [ 287.271433][T15525] handle_softirqs+0x219/0x8e0 [ 287.276189][T15525] run_ksoftirqd+0x3a/0x60 [ 287.280583][T15525] smpboot_thread_fn+0x3f7/0xae0 [ 287.285496][T15525] kthread+0x3c5/0x780 [ 287.289547][T15525] ret_from_fork+0x675/0x7d0 [ 287.294115][T15525] ret_from_fork_asm+0x1a/0x30 [ 287.298855][T15525] [ 287.301154][T15525] Memory state around the buggy address: [ 287.306757][T15525] ffff888066ddb400: 06 fc fc fc 06 fc fc fc 05 fc fc fc fa fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 287.314792][T15525] ffff888066ddb480: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 287.322827][T15525] >ffff888066ddb500: 03 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 287.330858][T15525] ^ [ 287.335940][T15525] ffff888066ddb580: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 287.343978][T15525] ffff888066ddb600: fa fc fc fc fa fc fc fc fa fc fc fc 07 fc fc fc [ 287.352012][T15525] ================================================================== [ 287.360133][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.395755][ T30] audit: type=1400 audit(1760536992.446:1083): avc: denied { write } for pid=5794 comm="syz-executor" path="pipe:[4860]" dev="pipefs" ino=4860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 287.452212][ T30] audit: type=1400 audit(1760536992.456:1084): avc: denied { recv } for pid=49 comm="kworker/u8:3" saddr=10.128.0.169 src=49972 daddr=10.128.1.216 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 287.477502][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.492276][ T5942] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 287.551099][ T30] audit: type=1400 audit(1760536992.596:1085): avc: denied { read } for pid=5164 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 287.661731][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 287.696956][ T5889] usb 3-1: USB disconnect, device number 46 [ 287.714958][T15525] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.722169][T15525] CPU: 1 UID: 0 PID: 15525 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 287.731273][T15525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.741314][T15525] Call Trace: [ 287.744578][T15525] [ 287.747493][T15525] dump_stack_lvl+0x3d/0x1f0 [ 287.752159][T15525] vpanic+0x640/0x6f0 [ 287.756128][T15525] panic+0xca/0xd0 [ 287.759831][T15525] ? __pfx_panic+0x10/0x10 [ 287.764229][T15525] ? report_descriptor_read+0xbb/0x100 [ 287.769673][T15525] ? preempt_schedule_common+0x44/0xc0 [ 287.775113][T15525] ? preempt_schedule_thunk+0x16/0x30 [ 287.780467][T15525] ? check_panic_on_warn+0x1f/0xb0 [ 287.785559][T15525] check_panic_on_warn+0xab/0xb0 [ 287.790478][T15525] end_report+0x107/0x170 [ 287.794792][T15525] kasan_report+0xee/0x110 [ 287.799195][T15525] ? report_descriptor_read+0xbb/0x100 [ 287.804641][T15525] kasan_check_range+0x100/0x1b0 [ 287.809560][T15525] __asan_memcpy+0x23/0x60 [ 287.813962][T15525] report_descriptor_read+0xbb/0x100 [ 287.819232][T15525] ? __pfx_report_descriptor_read+0x10/0x10 [ 287.825108][T15525] sysfs_kf_bin_read+0x156/0x210 [ 287.830033][T15525] kernfs_fop_read_iter+0x32b/0x610 [ 287.835218][T15525] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 287.840677][T15525] vfs_read+0x8bf/0xcf0 [ 287.844817][T15525] ? __pfx_vfs_read+0x10/0x10 [ 287.849476][T15525] ? __might_fault+0x13b/0x190 [ 287.854222][T15525] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 287.860276][T15525] ksys_read+0x12a/0x250 [ 287.864503][T15525] ? __pfx_ksys_read+0x10/0x10 [ 287.869253][T15525] do_syscall_64+0xcd/0xfa0 [ 287.873739][T15525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.879609][T15525] RIP: 0033:0x7f63296a7407 [ 287.884001][T15525] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 287.903592][T15525] RSP: 002b:00007ffddedfe860 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 287.911986][T15525] RAX: ffffffffffffffda RBX: 00007f6329d6f880 RCX: 00007f63296a7407 [ 287.919937][T15525] RDX: 0000000000001000 RSI: 00007ffddedfe8b0 RDI: 0000000000000004 [ 287.927887][T15525] RBP: 00005608ceae12c0 R08: 0000000000000000 R09: 0000000000000000 [ 287.936191][T15525] R10: 0000000000000000 R11: 0000000000000202 R12: 00005608ceae04c0 [ 287.944183][T15525] R13: 00007ffddedfe8b0 R14: 0000000000000004 R15: 00005608c40b94d8 [ 287.952139][T15525] [ 287.955347][T15525] Kernel Offset: disabled [ 287.959646][T15525] Rebooting in 86400 seconds..