last executing test programs: 3.6817447s ago: executing program 4 (id=3315): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 3.464317982s ago: executing program 4 (id=3318): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 3.349727826s ago: executing program 0 (id=3322): r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000280)='#', 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0xde, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) 2.50010233s ago: executing program 3 (id=3345): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.471108598s ago: executing program 0 (id=3346): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.35142415s ago: executing program 0 (id=3351): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 1.718863374s ago: executing program 4 (id=3362): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) unshare(0x6020400) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.697801828s ago: executing program 0 (id=3363): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x4, @local, 0x3}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x83, &(0x7f00000000c0)={r1}, 0x8) 1.601711549s ago: executing program 2 (id=3365): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000026000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee6889900", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.584779456s ago: executing program 4 (id=3366): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 1.553916094s ago: executing program 0 (id=3367): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xd, 0x3, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x8, 0x4, 0x8000, 0x3, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0xf, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6252, 0x0, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0x6, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x0, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x31, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0x0, 0xfa, 0x7, 0x9f9, 0x1, 0x2, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x1, 0x5f24, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0x1, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x0, 0x349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x2, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x6, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1ff, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x2, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x6, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x4]}, 0x45c) 1.464509124s ago: executing program 4 (id=3369): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) 1.437961665s ago: executing program 2 (id=3370): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.398800621s ago: executing program 0 (id=3371): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 1.345937639s ago: executing program 4 (id=3373): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000600)={0x0, 0x15, 0x10, "4e476e4d40b24c1b9ffbfb148cca07d5"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f00000000c0)={0x40, 0x1, 0x5, "9cd6981918"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.059164445s ago: executing program 2 (id=3374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) 973.815517ms ago: executing program 3 (id=3375): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), 0x4) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 838.155782ms ago: executing program 2 (id=3376): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5e) close_range(r0, 0xffffffffffffffff, 0x0) 827.947065ms ago: executing program 3 (id=3377): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 714.60293ms ago: executing program 3 (id=3379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x10000}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x10200, 0x2c0, 0x40, 0x0}) 621.549989ms ago: executing program 2 (id=3381): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) 574.127078ms ago: executing program 3 (id=3382): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) 500.118213ms ago: executing program 2 (id=3384): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffe12, &(0x7f0000000000)=ANY=[]) 437.889565ms ago: executing program 3 (id=3385): syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 377.442771ms ago: executing program 1 (id=3387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002"], 0x104}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 285.732565ms ago: executing program 1 (id=3388): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 169.901921ms ago: executing program 1 (id=3389): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 151.910848ms ago: executing program 1 (id=3390): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(0x3) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 88.186825ms ago: executing program 1 (id=3391): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044010) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 0s ago: executing program 1 (id=3392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x41}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000014}, 0x22000000) kernel console output (not intermixed with test programs): g ep0 maxpacket: 32 [ 194.389535][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.398360][ T5954] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 194.408199][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.416561][ T5954] usb 2-1: Product: syz [ 194.423193][ T5954] usb 2-1: Manufacturer: syz [ 194.427871][ T5954] usb 2-1: SerialNumber: syz [ 194.434674][ T5954] usb 2-1: config 0 descriptor?? [ 194.593175][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2104'. [ 194.849999][ T5954] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 195.083329][ T8896] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 195.135409][ T5886] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.3-1, 00:00:00:00:00:00. [ 195.158446][ T5886] usb 4-1: USB disconnect, device number 29 [ 195.253272][ T5954] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 195.263386][ T8896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.265825][ T30] audit: type=1400 audit(1754064974.681:1346): avc: denied { read } for pid=10765 comm="syz.4.2116" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 195.280047][ T8896] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 195.313325][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 195.316659][ T5838] Bluetooth: hci5: command 0x1003 tx timeout [ 195.322260][ T5954] usb 2-1: USB disconnect, device number 23 [ 195.337179][ T8896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.405728][ T8896] usb 3-1: config 0 descriptor?? [ 195.418962][ T8896] pwc: Askey VC010 type 2 USB webcam detected. [ 195.835748][ T8896] pwc: recv_control_msg error -32 req 02 val 2b00 [ 195.930819][ T5954] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 196.011308][ T5953] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 196.045179][ T8896] pwc: recv_control_msg error -71 req 02 val 2c00 [ 196.052237][ T8896] pwc: recv_control_msg error -71 req 04 val 1000 [ 196.058901][ T8896] pwc: recv_control_msg error -71 req 04 val 1300 [ 196.065900][ T8896] pwc: recv_control_msg error -71 req 04 val 1400 [ 196.072409][ T5907] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 196.083256][ T8896] pwc: recv_control_msg error -71 req 02 val 2000 [ 196.090020][ T8896] pwc: recv_control_msg error -71 req 02 val 2100 [ 196.096465][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 196.102098][ T8896] pwc: recv_control_msg error -71 req 04 val 1500 [ 196.110151][ T8896] pwc: recv_control_msg error -71 req 02 val 2500 [ 196.116826][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.126959][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.137838][ T8896] pwc: recv_control_msg error -71 req 02 val 2400 [ 196.144822][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.154782][ T8896] pwc: recv_control_msg error -71 req 02 val 2600 [ 196.161409][ T5954] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.171272][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.184317][ T8896] pwc: recv_control_msg error -71 req 02 val 2900 [ 196.191325][ T8896] pwc: recv_control_msg error -71 req 02 val 2800 [ 196.198496][ T5953] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 196.207664][ T5954] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.216932][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.225019][ T8896] pwc: recv_control_msg error -71 req 04 val 1100 [ 196.231542][ T5954] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.239532][ T5954] usb 1-1: Manufacturer: syz [ 196.245298][ T8896] pwc: recv_control_msg error -71 req 04 val 1200 [ 196.253019][ T5953] usb 5-1: config 0 descriptor?? [ 196.259502][ T5907] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 196.268302][ T8896] pwc: Registered as video103. [ 196.274930][ T5954] usb 1-1: config 0 descriptor?? [ 196.279962][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.291990][ T8896] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 196.302866][ T5907] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 196.312820][ T5907] usb 4-1: config 1 has no interface number 1 [ 196.322846][ T8896] usb 3-1: USB disconnect, device number 22 [ 196.331974][ T5907] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 196.352634][ T5907] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.363260][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.371365][ T5907] usb 4-1: Product: syz [ 196.375552][ T5907] usb 4-1: Manufacturer: syz [ 196.380159][ T5907] usb 4-1: SerialNumber: syz [ 196.464320][ T5953] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 196.552649][ T5954] rc_core: IR keymap rc-hauppauge not found [ 196.559870][ T5954] Registered IR keymap rc-empty [ 196.564977][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 196.590611][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 196.606356][ T5907] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 196.613929][ T5907] usb 4-1: MIDIStreaming interface descriptor not found [ 196.621898][ T5954] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 196.647351][ T5954] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 196.667284][ T5907] usb 4-1: USB disconnect, device number 30 [ 196.685298][ T5953] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 196.689773][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 196.689787][ T30] audit: type=1400 audit(1754064976.101:1349): avc: denied { setopt } for pid=10803 comm="syz.2.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.703829][ T5953] [drm] Initialized udl on minor 2 [ 196.727742][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 196.760644][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 196.782561][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 196.810567][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 196.840721][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 196.860550][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 196.894796][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 196.931550][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 196.970783][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.003614][ T5954] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.032228][ T5954] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 197.041430][ T5954] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 197.057392][ T5954] usb 1-1: USB disconnect, device number 24 [ 197.069980][ T5953] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 197.085101][ T5953] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 197.103537][ T5907] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.134699][ T5907] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.151302][ T5953] usb 5-1: USB disconnect, device number 21 [ 197.158376][ T5907] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 197.335230][ T30] audit: type=1400 audit(1754064976.751:1350): avc: denied { bind } for pid=10819 comm="syz.1.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 197.580269][T10834] serio: Serial port ptm0 [ 197.661388][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 197.685285][T10840] vivid-000: disconnect [ 197.812315][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.837575][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.050489][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.059552][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.081202][ T10] usb 4-1: config 0 descriptor?? [ 198.223806][ T30] audit: type=1400 audit(1754064977.641:1351): avc: denied { setopt } for pid=10855 comm="syz.4.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.464862][T10837] vivid-000: reconnect [ 198.501071][ T10] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 198.556018][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0026/input/input31 [ 198.606539][ T30] audit: type=1400 audit(1754064978.021:1352): avc: denied { bind } for pid=10871 comm="syz.1.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.695442][ T10] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 198.752500][ T30] audit: type=1326 audit(1754064978.161:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.2.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e18eb69 code=0x7fc00000 [ 199.026808][ T5953] usb 4-1: USB disconnect, device number 31 [ 199.035111][ T30] audit: type=1400 audit(1754064978.421:1354): avc: denied { getopt } for pid=10879 comm="syz.2.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.680116][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 199.788420][T10895] hsr_slave_0 (unregistering): left promiscuous mode [ 199.985187][ T30] audit: type=1400 audit(1754064979.401:1355): avc: denied { write } for pid=10908 comm="syz.2.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 200.066412][T10911] ALSA: mixer_oss: invalid OSS volume 'w2²Â' [ 200.102026][ T9] kernel write not supported for file /sg0 (pid: 9 comm: kworker/0:0) [ 200.105903][ T30] audit: type=1400 audit(1754064979.521:1356): avc: denied { getopt } for pid=10916 comm="syz.2.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.318050][ T5954] kernel write not supported for file /media2 (pid: 5954 comm: kworker/1:7) [ 200.550750][ T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 200.618499][ T30] audit: type=1400 audit(1754064980.031:1357): avc: denied { ioctl } for pid=10947 comm="syz.3.2199" path="/217/file0" dev="tmpfs" ino=1119 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 200.652440][ T5954] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 200.690937][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 200.704513][ T9] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 200.717015][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.736643][ T9] usb 1-1: config 0 descriptor?? [ 200.746899][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 200.830761][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 200.839665][ T5954] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.850006][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 200.860727][ T5954] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.870189][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.880236][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.881582][ T10] usb 2-1: config 0 descriptor?? [ 200.905940][ T5954] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 200.922983][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.934070][ T5954] usb 3-1: config 0 descriptor?? [ 200.952409][ T9] gp8psk: usb in 128 operation failed. [ 201.099444][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 201.159798][T10936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.166088][ T9] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 201.174774][T10936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.288841][T10966] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.312654][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 201.319462][ T10] [drm] Initialized udl on minor 2 [ 201.366940][ T9] gp8psk: usb in 149 operation failed. [ 201.373000][ T9] gp8psk: failed to get FPGA version [ 201.378982][ T9] gp8psk: usb in 138 operation failed. [ 201.395262][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 201.397633][ T5954] hid (null): bogus close delimiter [ 201.413633][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 201.419818][ T5954] hid (null): global environment stack overflow [ 201.425215][ T9] usb 1-1: USB disconnect, device number 25 [ 201.431186][ T5954] hid (null): invalid report_count 18947 [ 201.442420][ T5954] hid (null): report_id 0 is invalid [ 201.490544][ T5886] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 201.646173][ T5954] usb 3-1: USB disconnect, device number 23 [ 201.650863][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 201.667895][ T5886] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 201.677471][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.688571][ T5886] usb 5-1: Product: syz [ 201.692822][ T5886] usb 5-1: Manufacturer: syz [ 201.697547][ T5886] usb 5-1: SerialNumber: syz [ 201.706061][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 201.714691][ T5886] usb 5-1: config 0 descriptor?? [ 201.720811][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 201.728453][ T5916] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 201.738593][ T10] usb 2-1: USB disconnect, device number 24 [ 201.745644][ T5916] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 201.926027][ T5886] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 201.958935][T10986] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 202.110754][ T5954] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 202.271952][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.289992][ T5954] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 202.310469][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.335253][ T5954] usb 4-1: config 0 descriptor?? [ 202.429097][ T30] audit: type=1400 audit(1754064981.841:1358): avc: denied { map } for pid=11004 comm="syz.1.2224" path="socket:[31317]" dev="sockfs" ino=31317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.483458][ T30] audit: type=1400 audit(1754064981.881:1359): avc: denied { write } for pid=11002 comm="syz.0.2225" path="socket:[31805]" dev="sockfs" ino=31805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.533178][ T5886] gspca_sunplus: reg_w_riv err -71 [ 202.538832][ T5886] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 202.558935][ T5886] usb 5-1: USB disconnect, device number 22 [ 202.782854][ T5954] lenovo 0003:17EF:6047.0028: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 202.818468][ T30] audit: type=1400 audit(1754064982.231:1360): avc: denied { read write } for pid=11027 comm="syz.1.2236" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 202.844940][ T30] audit: type=1400 audit(1754064982.231:1361): avc: denied { open } for pid=11027 comm="syz.1.2236" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 202.845669][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 202.869191][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.995416][ T5954] lenovo 0003:17EF:6047.0028: Failed to switch F7/9/11 mode: -71 [ 203.003795][ T5954] lenovo 0003:17EF:6047.0028: Failed to switch middle button: -71 [ 203.013610][ T5954] lenovo 0003:17EF:6047.0028: Fn-lock setting failed: -71 [ 203.021967][ T5954] lenovo 0003:17EF:6047.0028: Sensitivity setting failed: -71 [ 203.037311][ T5954] usb 4-1: USB disconnect, device number 32 [ 203.050780][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 203.060095][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.074378][ T10] usb 1-1: too many configurations: 247, using maximum allowed: 8 [ 203.086959][ T10] usb 1-1: config 3 has an invalid interface number: 43 but max is 0 [ 203.095448][ T10] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 203.116137][ T10] usb 1-1: config 3 has no interface number 0 [ 203.130123][ T10] usb 1-1: config 3 interface 43 has no altsetting 0 [ 203.137649][T11037] netlink: 'syz.2.2240': attribute type 6 has an invalid length. [ 203.138529][ T10] usb 1-1: config 3 has an invalid interface number: 43 but max is 0 [ 203.155054][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 203.155956][ T10] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 203.180473][ T10] usb 1-1: config 3 has no interface number 0 [ 203.201282][ T10] usb 1-1: config 3 interface 43 has no altsetting 0 [ 203.221115][ T10] usb 1-1: config 3 has an invalid interface number: 43 but max is 0 [ 203.229235][ T10] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 203.247839][ T10] usb 1-1: config 3 has no interface number 0 [ 203.256089][ T10] usb 1-1: config 3 interface 43 has no altsetting 0 [ 203.264315][ T10] usb 1-1: config 3 has an invalid interface number: 43 but max is 0 [ 203.275818][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2244'. [ 203.275915][ T10] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 203.328031][ T10] usb 1-1: config 3 has no interface number 0 [ 203.334638][ T10] usb 1-1: config 3 interface 43 has no altsetting 0 [ 203.344155][ T10] usb 1-1: config 3 has an invalid interface number: 43 but max is 0 [ 203.352796][ T10] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 203.364179][ T10] usb 1-1: config 3 has no interface number 0 [ 203.370456][ T10] usb 1-1: config 3 interface 43 has no altsetting 0 [ 203.379312][ T10] usb 1-1: config 3 has an invalid interface number: 43 but max is 0 [ 203.390482][ T10] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 203.410759][ T10] usb 1-1: config 3 has no interface number 0 [ 203.422644][ T10] usb 1-1: config 3 interface 43 has no altsetting 0 [ 203.436860][ T10] usb 1-1: config 3 has an invalid interface number: 43 but max is 0 [ 203.451561][ T10] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 203.465886][ T10] usb 1-1: config 3 has no interface number 0 [ 203.472734][ T10] usb 1-1: config 3 interface 43 has no altsetting 0 [ 203.485249][ T10] usb 1-1: config 3 has an invalid interface number: 43 but max is 0 [ 203.500771][ T10] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 203.510928][ T10] usb 1-1: config 3 has no interface number 0 [ 203.520248][ T10] usb 1-1: config 3 interface 43 has no altsetting 0 [ 203.534546][ T10] usb 1-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=9a.31 [ 203.543725][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.551742][ T10] usb 1-1: Product: syz [ 203.555899][ T10] usb 1-1: Manufacturer: syz [ 203.562529][ T10] usb 1-1: SerialNumber: syz [ 203.673036][T11062] netlink: 'syz.2.2252': attribute type 83 has an invalid length. [ 203.748914][ T30] audit: type=1400 audit(1754064983.161:1362): avc: denied { read } for pid=11063 comm="syz.4.2253" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.817129][ T10] usb 1-1: bad CDC descriptors [ 203.836687][ T10] usb 1-1: USB disconnect, device number 26 [ 203.849964][T11072] tipc: Started in network mode [ 203.858504][T11072] tipc: Node identity 1ed93bf4508f, cluster identity 4711 [ 203.868151][T11072] tipc: Enabled bearer , priority 10 [ 203.935241][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2259'. [ 203.982026][T11079] sctp: [Deprecated]: syz.1.2260 (pid 11079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.982026][T11079] Use struct sctp_sack_info instead [ 204.262137][T11087] netlink: 'syz.2.2264': attribute type 1 has an invalid length. [ 204.270235][T11087] nbd: error processing sock list [ 204.275894][T11087] block nbd0: shutting down sockets [ 204.424829][T11109] binder: 11108:11109 ioctl c00c620f 200000000140 returned -22 [ 204.503192][ T5954] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 204.599302][ T30] audit: type=1400 audit(1754064984.011:1363): avc: denied { bind } for pid=11122 comm="syz.4.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 204.685210][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 204.696030][ T5954] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 204.715563][ T5954] usb 4-1: config 0 has no interface number 0 [ 204.730487][ T5954] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 204.748711][ T5954] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 204.767128][ T5954] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 204.781521][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 204.783017][ T5954] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 204.812318][ T5954] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 204.824397][T11137] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.831508][T11137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.842159][ T5954] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.854186][ T5954] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 204.866425][ T5954] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024 [ 204.897060][ T5954] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 204.909953][ T5954] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.931903][ T5954] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 204.944599][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 204.953024][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.966369][ T5954] usb 4-1: Product: syz [ 204.970656][ T5954] usb 4-1: Manufacturer: syz [ 204.972876][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 204.979648][ T5954] usb 4-1: SerialNumber: syz [ 204.988375][ T5886] tipc: Node number set to 1314274292 [ 205.009454][ T5954] usb 4-1: config 0 descriptor?? [ 205.014990][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 205.015019][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.031689][ T10] usb 3-1: config 0 descriptor?? [ 205.044196][T11100] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.060866][T11100] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.073563][ T5954] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 205.083347][ T5954] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 205.102650][ T5954] scsi host1: microtekX6 [ 205.411500][ T5886] usb 4-1: USB disconnect, device number 33 [ 205.452528][ T10] logitech 0003:046D:C20E.0029: rdesc size test failed for formula gp [ 205.471764][ T10] hid_parser_main: 7 callbacks suppressed [ 205.471786][ T10] logitech 0003:046D:C20E.0029: unknown main item tag 0x0 [ 205.494971][ T10] logitech 0003:046D:C20E.0029: hidraw0: USB HID v0.03 Device [HID 046d:c20e] on usb-dummy_hcd.2-1/input0 [ 205.696843][ T10] usb 3-1: USB disconnect, device number 24 [ 205.727218][ T5954] IPVS: starting estimator thread 0... [ 205.831364][T11178] IPVS: using max 43 ests per chain, 103200 per kthread [ 205.891189][T11185] Process accounting resumed [ 206.053858][ T30] audit: type=1326 audit(1754064985.471:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.4.2309" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34a918eb69 code=0x0 [ 206.397419][T11212] netlink: 'syz.2.2319': attribute type 12 has an invalid length. [ 206.413115][T11212] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2319'. [ 206.480521][ T5954] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 206.632238][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.644448][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 206.653890][ T5954] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 206.663098][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.684370][ T5954] usb 1-1: config 0 descriptor?? [ 206.692529][T11226] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2326'. [ 206.704773][ T5954] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 206.713900][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 206.748352][ T5954] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 206.762483][ T5954] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 206.775707][ T5954] usb 1-1: media controller created [ 206.785833][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.830025][ T5954] dvb-usb: bulk message failed: -22 (6/0) [ 206.846035][ T5954] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 206.879504][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 206.918688][ T5954] dvb-usb: schedule remote query interval to 150 msecs. [ 206.945391][ T5954] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 206.989843][ T30] audit: type=1400 audit(1754064986.401:1365): avc: denied { create } for pid=11232 comm="syz.3.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 207.038268][ T30] audit: type=1400 audit(1754064986.441:1366): avc: denied { ioctl } for pid=11232 comm="syz.3.2329" path="socket:[32887]" dev="sockfs" ino=32887 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 207.066144][ T30] audit: type=1400 audit(1754064986.441:1367): avc: denied { bind } for pid=11232 comm="syz.3.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 207.092002][ T5916] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 207.100533][ T8896] dvb-usb: bulk message failed: -22 (1/0) [ 207.120942][ T8896] dvb-usb: error while querying for an remote control event. [ 207.170652][ T8896] usb 1-1: USB disconnect, device number 27 [ 207.185783][ T8896] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 207.201166][ T5886] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 207.247769][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2333'. [ 207.258691][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 207.277465][ T5916] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 207.294937][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 207.320908][ T5916] usb 3-1: Product: syz [ 207.325213][ T5916] usb 3-1: Manufacturer: syz [ 207.329859][ T5916] usb 3-1: SerialNumber: syz [ 207.338078][ T5916] usb 3-1: config 0 descriptor?? [ 207.350787][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 207.362353][ T5886] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.370710][ T5886] usb 5-1: config 0 has no interface number 0 [ 207.390594][ T5886] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 207.399963][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.420155][ T5886] usb 5-1: Product: syz [ 207.424470][ T5886] usb 5-1: Manufacturer: syz [ 207.429092][ T5886] usb 5-1: SerialNumber: syz [ 207.441643][ T5886] usb 5-1: config 0 descriptor?? [ 207.449380][ T5886] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 207.460498][ T5886] usb 5-1: selecting invalid altsetting 1 [ 207.466299][ T5886] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 207.474933][T11247] kvm: apic: phys broadcast and lowest prio [ 207.482248][ T5886] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 207.493178][ T5886] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 207.501928][ T5886] usb 5-1: media controller created [ 207.526959][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.678188][ T5886] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 207.700551][ T5886] zl10353_read_register: readreg error (reg=127, ret==-71) [ 207.722098][ T5886] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 207.810928][ T5886] usb 5-1: USB disconnect, device number 23 [ 207.898081][ T30] audit: type=1326 audit(1754064987.301:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0cd8eb69 code=0x7ffc0000 [ 207.955247][ T30] audit: type=1326 audit(1754064987.301:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0cd8eb69 code=0x7ffc0000 [ 208.019411][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'. [ 208.036014][ T30] audit: type=1326 audit(1754064987.311:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0b0cd8eb69 code=0x7ffc0000 [ 208.095776][ T30] audit: type=1326 audit(1754064987.311:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0cd8eb69 code=0x7ffc0000 [ 208.120964][ T30] audit: type=1326 audit(1754064987.311:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f0b0cd8eb69 code=0x7ffc0000 [ 208.170882][ T30] audit: type=1326 audit(1754064987.311:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0cd8eb69 code=0x7ffc0000 [ 208.229333][ T30] audit: type=1326 audit(1754064987.311:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0cd8eb69 code=0x7ffc0000 [ 208.232554][ T5954] usb 3-1: USB disconnect, device number 25 [ 208.538286][ T30] audit: type=1400 audit(1754064987.951:1375): avc: denied { read } for pid=11283 comm="syz.0.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.808404][T11299] bpf: Bad value for 'gid' [ 208.823786][T11297] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 208.870547][T11297] CIFS mount error: No usable UNC path provided in device string! [ 208.870547][T11297] [ 208.903332][T11297] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 208.963011][ T30] audit: type=1400 audit(1754064988.381:1376): avc: denied { read } for pid=11304 comm="syz.2.2362" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 209.021132][ T30] audit: type=1400 audit(1754064988.381:1377): avc: denied { open } for pid=11304 comm="syz.2.2362" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 209.099147][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2365'. [ 209.200589][ T5907] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 209.234025][T11321] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.361013][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 209.367623][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 209.388789][ T5907] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 209.418295][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.436283][ T5907] usb 3-1: config 0 descriptor?? [ 209.464688][ T5907] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 209.560849][ T8896] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 209.669617][ T5907] bcm5974 3-1:0.0: could not read from device [ 209.681761][ T5907] input: failed to attach handler mousedev to device input33, error: -5 [ 209.705876][ T5907] usb 3-1: USB disconnect, device number 26 [ 209.720790][ T8896] usb 5-1: Using ep0 maxpacket: 8 [ 209.728709][ T8896] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 209.738108][ T8896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.751242][ T8896] pvrusb2: Hardware description: Terratec Grabster AV400 [ 209.758550][ T8896] pvrusb2: ********** [ 209.766234][ T8896] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 209.776762][ T8896] pvrusb2: Important functionality might not be entirely working. [ 209.802540][ T8896] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 209.814143][ T8896] pvrusb2: ********** [ 209.952631][ T2339] pvrusb2: Invalid write control endpoint [ 209.977527][ T2339] pvrusb2: Invalid write control endpoint [ 209.983359][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 209.992905][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 210.000800][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 210.012140][ T2339] pvrusb2: Device being rendered inoperable [ 210.020077][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 210.027643][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 210.035777][ T2339] pvrusb2: Attached sub-driver cx25840 [ 210.041255][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 210.051344][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 210.156999][ T8896] usb 5-1: USB disconnect, device number 24 [ 210.263696][T11348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2381'. [ 210.936293][T11399] netlink: 'syz.0.2405': attribute type 4 has an invalid length. [ 210.955276][T11399] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2405'. [ 211.320569][ T8896] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 211.480522][ T8896] usb 5-1: Using ep0 maxpacket: 8 [ 211.493040][ T8896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 211.517432][ T8896] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 211.533754][ T8896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.544052][ T8896] usb 5-1: config 0 descriptor?? [ 212.025078][ T8896] logitech 0003:046D:C20E.002A: rdesc size test failed for formula gp [ 212.034461][ T8896] logitech 0003:046D:C20E.002A: unknown main item tag 0x0 [ 212.050053][ T8896] logitech 0003:046D:C20E.002A: hidraw0: USB HID v0.03 Device [HID 046d:c20e] on usb-dummy_hcd.4-1/input0 [ 212.201842][T11469] netlink: 'syz.2.2437': attribute type 8 has an invalid length. [ 212.270084][ T5916] usb 5-1: USB disconnect, device number 25 [ 212.561734][ T8896] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 212.630929][ T5953] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 212.674023][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 212.721918][ T8896] usb 4-1: Using ep0 maxpacket: 16 [ 212.728829][ T8896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.757968][ T8896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.778074][ T8896] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 212.790779][ T8896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.820527][ T5953] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 212.829601][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.839615][ T8896] usb 4-1: config 0 descriptor?? [ 212.850740][ T5953] usb 3-1: config 0 descriptor?? [ 212.903856][T11498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.958426][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 212.958443][ T30] audit: type=1400 audit(1754064992.371:1385): avc: denied { create } for pid=11499 comm="syz.1.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.991967][ T30] audit: type=1400 audit(1754064992.411:1386): avc: denied { connect } for pid=11499 comm="syz.1.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 213.043484][ T30] audit: type=1400 audit(1754064992.461:1387): avc: denied { write } for pid=11499 comm="syz.1.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 213.238848][ T30] audit: type=1400 audit(1754064992.651:1388): avc: denied { mounton } for pid=11508 comm="syz.0.2456" path="/485/file0" dev="tmpfs" ino=2496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 213.274824][ T30] audit: type=1400 audit(1754064992.691:1389): avc: denied { read } for pid=11510 comm="syz.4.2457" name="file0" dev="tmpfs" ino=2438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 213.307501][ T8896] hid (null): global environment stack underflow [ 213.314468][ T5953] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 213.327847][ T5953] [drm:udl_init] *ERROR* Selecting channel failed [ 213.347443][ T5953] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 213.354264][ T5953] [drm] Initialized udl on minor 2 [ 213.360961][ T5953] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 213.372923][ T5953] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 213.380236][ T5907] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 213.397048][ T5907] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 213.403750][ T5953] usb 3-1: USB disconnect, device number 27 [ 213.458034][ T30] audit: type=1400 audit(1754064992.871:1390): avc: denied { getopt } for pid=11518 comm="syz.4.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.509114][ T8896] usb 4-1: string descriptor 0 read error: -71 [ 213.535806][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2463'. [ 213.540868][ T8896] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 213.556782][ T8896] letsketch 0003:6161:4D15.002B: probe with driver letsketch failed with error -32 [ 213.569304][ T8896] usb 4-1: USB disconnect, device number 34 [ 213.971787][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2469'. [ 214.144342][ T5916] hid-generic 0002:0004:0009.002C: unknown main item tag 0x0 [ 214.154005][ T5916] hid-generic 0002:0004:0009.002C: unknown main item tag 0x0 [ 214.161910][ T5916] hid-generic 0002:0004:0009.002C: unknown main item tag 0x0 [ 214.181884][ T5916] hid-generic 0002:0004:0009.002C: unknown main item tag 0x0 [ 214.191207][ T5916] hid-generic 0002:0004:0009.002C: unknown main item tag 0x0 [ 214.198990][ T5916] hid-generic 0002:0004:0009.002C: unknown main item tag 0x0 [ 214.206781][ T5916] hid-generic 0002:0004:0009.002C: unknown main item tag 0x0 [ 214.214460][ T5916] hid-generic 0002:0004:0009.002C: unknown main item tag 0x0 [ 214.222338][ T5916] hid-generic 0002:0004:0009.002C: unknown main item tag 0x0 [ 214.235301][ T5916] hid-generic 0002:0004:0009.002C: hidraw0: HID v0.04 Device [syz0] on syz0 [ 214.416061][ T30] audit: type=1400 audit(1754064993.831:1391): avc: denied { setopt } for pid=11558 comm="syz.3.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.833546][T11575] smc: net device bond0 erased user defined pnetid SYZ0 [ 214.950866][ T30] audit: type=1400 audit(1754064994.361:1392): avc: denied { setopt } for pid=11576 comm="syz.2.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.122796][ T5835] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 215.617510][T11611] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2503'. [ 215.646663][T11611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2503'. [ 215.781076][ T30] audit: type=1400 audit(1754064995.191:1393): avc: denied { name_connect } for pid=11618 comm="syz.2.2508" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 215.906680][T11629] veth0_to_team: entered promiscuous mode [ 215.913876][T11629] veth0_to_team: entered allmulticast mode [ 216.039993][T11634] netlink: 'syz.1.2516': attribute type 3 has an invalid length. [ 216.073426][T11634] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2516'. [ 216.483603][ T30] audit: type=1326 audit(1754064995.901:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.2.2527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f460e18eb69 code=0x0 [ 216.601603][ T5907] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 216.713798][T11672] net_ratelimit: 4052 callbacks suppressed [ 216.713860][T11672] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 216.758146][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 216.769065][ T5907] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 216.787452][ T5907] usb 5-1: config 0 has no interface number 0 [ 216.794661][ T5907] usb 5-1: config 0 interface 12 has no altsetting 0 [ 216.822451][ T5907] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 216.835288][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.844069][ T5907] usb 5-1: Product: syz [ 216.851075][ T5907] usb 5-1: Manufacturer: syz [ 216.856818][ T5907] usb 5-1: SerialNumber: syz [ 216.864395][ T5907] usb 5-1: config 0 descriptor?? [ 217.186165][T11698] netlink: 'syz.0.2543': attribute type 1 has an invalid length. [ 217.195891][T11698] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2543'. [ 217.246738][T11702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.470674][ T5916] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 217.484940][ T5907] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 217.505795][ T5907] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 217.523607][ T5907] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 217.543426][ T5907] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 217.567085][ T5907] usb 5-1: USB disconnect, device number 26 [ 217.635190][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2553'. [ 217.644236][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 217.651366][ T5916] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.662590][ T5916] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.672554][ T5916] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 217.710786][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.731729][ T5916] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 217.747115][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.760679][ T5916] usb 4-1: config 0 descriptor?? [ 217.944650][T11737] netlink: 'syz.2.2560': attribute type 9 has an invalid length. [ 217.952809][T11737] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.2560'. [ 218.056876][ T5907] IPVS: starting estimator thread 0... [ 218.071750][T11744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.151321][T11745] IPVS: using max 44 ests per chain, 105600 per kthread [ 218.175943][ T5916] hid (null): report_id 53977 is invalid [ 218.196824][ T5916] hid (null): unknown global tag 0xc3 [ 218.203236][ T5916] hid (null): unknown global tag 0xd [ 218.208932][ T5916] hid (null): unknown global tag 0xc [ 218.216521][ T5916] hid (null): global environment stack underflow [ 218.223956][ T5916] hid (null): invalid report_count 14229 [ 218.230849][ T5916] hid (null): global environment stack underflow [ 218.290894][T11753] nbd0: detected capacity change from 0 to 127 [ 218.299674][ T5835] block nbd0: Receive control failed (result -32) [ 218.357166][T11765] netlink: 'syz.1.2574': attribute type 1 has an invalid length. [ 218.370498][ T8896] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 218.383030][ T5916] usb 4-1: USB disconnect, device number 35 [ 218.410232][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 218.410246][ T30] audit: type=1400 audit(1754064997.821:1397): avc: denied { mount } for pid=11766 comm="syz.2.2575" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 218.444751][ T30] audit: type=1400 audit(1754064997.821:1398): avc: denied { read } for pid=11766 comm="syz.2.2575" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 218.469758][ T30] audit: type=1400 audit(1754064997.821:1399): avc: denied { open } for pid=11766 comm="syz.2.2575" path="/563/file0" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 218.497023][ T30] audit: type=1400 audit(1754064997.831:1400): avc: denied { write } for pid=11766 comm="syz.2.2575" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 218.543689][ T8896] usb 1-1: Using ep0 maxpacket: 8 [ 218.548887][ T30] audit: type=1400 audit(1754064997.861:1401): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 218.573749][ T8896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 218.583026][ T8896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.595723][ T8896] pvrusb2: Hardware description: Terratec Grabster AV400 [ 218.608207][ T8896] pvrusb2: ********** [ 218.620487][ T8896] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 218.637596][ T8896] pvrusb2: Important functionality might not be entirely working. [ 218.647111][ T8896] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 218.659308][ T8896] pvrusb2: ********** [ 218.741805][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 218.810717][ T2339] pvrusb2: Invalid write control endpoint [ 218.869535][ T2339] pvrusb2: Invalid write control endpoint [ 218.877666][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 218.923151][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 218.931761][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 218.944943][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.960926][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.971191][ T2339] pvrusb2: Device being rendered inoperable [ 218.979146][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 218.987120][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 218.998971][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 219.006929][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.010943][ T8896] usb 1-1: USB disconnect, device number 28 [ 219.017635][ T2339] pvrusb2: Attached sub-driver cx25840 [ 219.027391][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 219.041086][ T9] usb 5-1: config 0 descriptor?? [ 219.048001][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 219.474660][ T9] hid_parser_main: 8 callbacks suppressed [ 219.474681][ T9] hid-picolcd 0003:04D8:C002.002E: unknown main item tag 0x7 [ 219.504415][ T9] hid-picolcd 0003:04D8:C002.002E: item fetching failed at offset 3/7 [ 219.535276][ T9] hid-picolcd 0003:04D8:C002.002E: device report parse failed [ 219.564652][ T9] hid-picolcd 0003:04D8:C002.002E: probe with driver hid-picolcd failed with error -22 [ 219.732791][ T5916] usb 5-1: USB disconnect, device number 27 [ 219.880524][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 219.896807][T11838] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2609'. [ 220.043436][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.063601][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 220.076987][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.095817][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.107775][T11824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 220.123221][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.220491][ T5916] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 220.229180][T11852] netlink: 'syz.1.2616': attribute type 3 has an invalid length. [ 220.315703][ T30] audit: type=1400 audit(1754065255.729:1402): avc: denied { remount } for pid=11853 comm="syz.4.2617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 220.366888][ T9] usb 1-1: USB disconnect, device number 29 [ 220.382071][ T5916] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.394866][ T5916] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 220.429158][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.445377][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 220.451705][ T30] audit: type=1400 audit(1754065255.869:1403): avc: denied { read } for pid=11857 comm="syz.1.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 220.456596][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 220.512406][ T5916] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.524572][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.540449][ T5916] usb 4-1: Product: syz [ 220.544644][ T5916] usb 4-1: Manufacturer: syz [ 220.567142][ T5916] cdc_wdm 4-1:1.0: skipping garbage [ 220.580866][ T5916] cdc_wdm 4-1:1.0: skipping garbage [ 220.587622][ T5916] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 220.600720][ T5916] cdc_wdm 4-1:1.0: Unknown control protocol [ 221.034194][ T8896] usb 4-1: USB disconnect, device number 36 [ 221.090723][ T5916] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 221.236138][ T1084] Bluetooth: hci5: Frame reassembly failed (-84) [ 221.241790][ T5916] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 221.252528][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.264058][ T5916] usb 3-1: config 0 descriptor?? [ 221.300626][ T5907] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 221.454173][ T5907] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 221.463430][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.471529][ T5907] usb 1-1: Product: syz [ 221.473524][ T5916] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 221.475681][ T5907] usb 1-1: Manufacturer: syz [ 221.475699][ T5907] usb 1-1: SerialNumber: syz [ 221.479388][ T5907] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 221.507712][ T8896] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 221.681198][ T5916] [drm:udl_init] *ERROR* Selecting channel failed [ 221.694260][ T5916] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 221.712057][ T5916] [drm] Initialized udl on minor 2 [ 221.719580][ T5916] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.728019][ T5916] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 221.744177][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.752236][ T5916] usb 3-1: USB disconnect, device number 28 [ 221.759202][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 222.051708][ T5907] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 222.134617][T11908] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 222.145608][T11908] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 222.231143][ T5907] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 222.249884][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.283291][ T5907] usb 4-1: config 0 descriptor?? [ 222.296868][ T5907] cp210x 4-1:0.0: cp210x converter detected [ 222.314582][ T5954] kernel write not supported for file /snd/pcmC0D0p (pid: 5954 comm: kworker/1:7) [ 222.456218][T11922] delete_channel: no stack [ 222.462674][ T30] audit: type=1400 audit(1754065257.879:1404): avc: denied { write } for pid=11921 comm="syz.2.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 222.482134][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.557731][T11924] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2648'. [ 222.585342][T11927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.721061][ T8896] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 222.728072][ T8896] ath9k_htc: Failed to initialize the device [ 223.280680][ T5838] Bluetooth: hci5: command 0x1003 tx timeout [ 223.300846][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 224.196334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 224.211867][ T5954] usb 1-1: USB disconnect, device number 30 [ 224.221400][ T5907] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 224.233126][ T5954] usb 1-1: ath9k_htc: USB layer deinitialized [ 224.255954][ T5907] usb 4-1: cp210x converter now attached to ttyUSB0 [ 224.301017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 224.442678][ T30] audit: type=1400 audit(1754065259.859:1405): avc: denied { accept } for pid=11944 comm="syz.4.2655" path=00001F4E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 224.482094][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.539588][ T8896] usb 4-1: USB disconnect, device number 37 [ 224.544403][T11951] netlink: 'syz.4.2657': attribute type 25 has an invalid length. [ 224.555277][T11951] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2657'. [ 224.561270][ T8896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 224.616371][ T8896] cp210x 4-1:0.0: device disconnected [ 224.694727][ T30] audit: type=1400 audit(1754065260.109:1406): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 224.714990][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.747414][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2663'. [ 224.773870][T11966] netlink: 'syz.4.2664': attribute type 10 has an invalid length. [ 224.782173][T11966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2664'. [ 224.803206][T11966] team0: Port device geneve0 added [ 225.817748][T12023] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 225.830200][ T30] audit: type=1400 audit(1754065261.249:1407): avc: denied { firmware_load } for pid=12022 comm="syz.4.2689" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 225.851445][T12023] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0/file1 [ 226.050509][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 226.202353][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.223979][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.243989][ T9] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 226.266123][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.280569][ T30] audit: type=1400 audit(1754065261.689:1408): avc: denied { checkpoint_restore } for pid=12042 comm="syz.1.2697" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.313695][ T9] usb 4-1: config 0 descriptor?? [ 226.456134][ T5916] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 226.465868][ T5916] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.681850][ T5954] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 226.728840][ T9] samsung 0003:0419:0600.0030: item fetching failed at offset 5/7 [ 226.737170][ T9] samsung 0003:0419:0600.0030: parse failed [ 226.743223][ T9] samsung 0003:0419:0600.0030: probe with driver samsung failed with error -22 [ 226.840546][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 226.846997][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.857174][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.868195][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.877950][ T5954] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.887627][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.903872][ T5954] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 226.913013][ T5954] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.921053][ T5954] usb 3-1: Manufacturer: syz [ 226.926723][ T5954] usb 3-1: config 0 descriptor?? [ 226.940865][ T5916] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 226.947347][ T8896] usb 4-1: USB disconnect, device number 38 [ 227.092045][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.103371][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.113294][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 227.133705][ T5916] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 227.142907][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 227.150950][ T5916] usb 5-1: Product: syz [ 227.161788][ T5916] usb 5-1: config 0 descriptor?? [ 227.181230][ T30] audit: type=1400 audit(1754065262.589:1409): avc: denied { setattr } for pid=12072 comm="syz.1.2709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 227.223977][ T5954] rc_core: IR keymap rc-hauppauge not found [ 227.229921][ T5954] Registered IR keymap rc-empty [ 227.236567][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.260523][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.281663][ T5954] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 227.297230][ T5954] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input34 [ 227.321191][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.340590][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.361335][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.375740][ C1] mceusb 3-1:0.0: long-range (0x1) receiver active [ 227.382501][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.400589][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.420632][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.440566][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.468610][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.481017][ T8894] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 227.481338][ T5907] kernel write not supported for file /amidi2 (pid: 5907 comm: kworker/1:5) [ 227.498252][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.520270][T12082] netlink: ct family unspecified [ 227.520597][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 227.526320][T12082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.563161][ T5954] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 227.572740][ T5954] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 227.585799][ T5916] waltop 0003:172F:0037.0031: unknown main item tag 0x0 [ 227.596623][ T5916] waltop 0003:172F:0037.0031: unknown main item tag 0x0 [ 227.604140][ T5916] waltop 0003:172F:0037.0031: unknown main item tag 0x0 [ 227.619567][ T5916] waltop 0003:172F:0037.0031: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 227.652855][ T8894] usb 2-1: Using ep0 maxpacket: 16 [ 227.663409][ T8894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.690857][ T8894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.710844][ T8894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.723799][ T8894] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 227.736698][ T5954] usb 3-1: USB disconnect, device number 29 [ 227.737799][ T8894] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.760581][ T8894] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 227.779865][ T8894] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 227.811729][ T8894] usb 2-1: Manufacturer: syz [ 227.820966][ T8894] usb 2-1: config 0 descriptor?? [ 227.838951][ T8896] usb 5-1: USB disconnect, device number 28 [ 228.090538][ T8894] rc_core: IR keymap rc-hauppauge not found [ 228.097229][ T8894] Registered IR keymap rc-empty [ 228.102859][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.141916][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.161666][ T8894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 228.178054][ T8894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35 [ 228.192191][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.220685][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.241069][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.272890][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.300902][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.321528][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.344877][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.370692][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.401469][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.433859][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.470674][ T8894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.503887][ T8894] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 228.518796][ T8894] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 228.532307][ T8894] usb 2-1: USB disconnect, device number 25 [ 228.730523][ T5954] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 228.890511][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 228.908307][ T5954] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.926706][ T5954] usb 5-1: config 0 has no interface number 0 [ 228.947494][ T5954] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 228.964087][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.986055][ T5954] usb 5-1: Product: syz [ 228.990251][ T5954] usb 5-1: Manufacturer: syz [ 229.007462][ T5954] usb 5-1: SerialNumber: syz [ 229.022540][ T5954] usb 5-1: config 0 descriptor?? [ 229.036009][ T5954] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 229.306777][ T1097] Bluetooth: hci5: Frame reassembly failed (-84) [ 229.718132][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2760'. [ 229.818790][T12189] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 229.840567][ T5954] gspca_spca1528: reg_w err -71 [ 229.880566][ T5954] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 229.897936][ T5954] usb 5-1: USB disconnect, device number 29 [ 230.224231][ T30] audit: type=1326 audit(1754065265.639:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.3.2771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b0cd8eb69 code=0x0 [ 230.247192][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.419638][ T30] audit: type=1400 audit(1754065265.829:1411): avc: denied { nlmsg_read } for pid=12218 comm="syz.4.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.709749][T12241] netlink: 'syz.0.2788': attribute type 2 has an invalid length. [ 231.351453][ T5916] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 231.360605][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 231.363081][ T5838] Bluetooth: hci5: command 0xfc11 tx timeout [ 231.481000][ T5886] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 231.502487][ T5916] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 231.511389][ T5916] usb 5-1: config 150 has no interface number 0 [ 231.517712][ T5916] usb 5-1: config 150 interface 204 has no altsetting 0 [ 231.526715][ T5916] usb 5-1: config 150 interface 1 has no altsetting 0 [ 231.537879][ T5916] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 231.547517][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.556241][ T5916] usb 5-1: Product: syz [ 231.560637][ T5916] usb 5-1: Manufacturer: syz [ 231.565240][ T5916] usb 5-1: SerialNumber: syz [ 231.630794][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 231.637463][ T5886] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 231.646054][ T5886] usb 4-1: config 0 has no interface number 0 [ 231.655126][ T5886] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.667109][ T5886] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 231.694864][ T5886] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 231.755473][ T5886] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.793212][ T5916] xr_serial 5-1:150.204: xr_serial converter detected [ 231.801909][ T5886] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 231.811155][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.819421][ T5886] usb 4-1: Product: syz [ 231.837097][ T5886] usb 4-1: Manufacturer: syz [ 231.872246][ T5886] usb 4-1: SerialNumber: syz [ 231.904169][ T5886] usb 4-1: config 0 descriptor?? [ 232.101932][ T5954] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 232.135859][ T5886] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 232.263398][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 232.275983][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.285886][ T5954] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 232.295103][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.304557][ T5954] usb 1-1: config 0 descriptor?? [ 232.330488][ T8896] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 232.343628][ T5886] usb 4-1: USB disconnect, device number 39 [ 232.394718][ T5916] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 232.403527][ T5916] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 232.414291][ T5916] usb 5-1: USB disconnect, device number 30 [ 232.422168][ T5916] xr_serial 5-1:150.204: device disconnected [ 232.491892][ T8896] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.503060][ T8896] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.517814][ T8896] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.531442][ T8896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 232.538047][ T8896] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 232.547256][ T8896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.556500][ T8896] usb 2-1: config 0 descriptor?? [ 232.722786][ T5954] logitech 0003:046D:C29C.0032: unexpected long global item [ 232.730832][ T5954] logitech 0003:046D:C29C.0032: parse failed [ 232.736895][ T5954] logitech 0003:046D:C29C.0032: probe with driver logitech failed with error -22 [ 232.945095][ T5916] usb 1-1: USB disconnect, device number 31 [ 232.971034][ T30] audit: type=1400 audit(1754065268.379:1412): avc: denied { mounton } for pid=12317 comm="syz.2.2832" path="/626/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 232.976062][T12318] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 233.007729][ T8896] uclogic 0003:28BD:0042.0033: interface is invalid, ignoring [ 233.107565][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2824'. [ 233.199275][ T8896] usb 2-1: USB disconnect, device number 26 [ 233.315421][ T30] audit: type=1400 audit(1754065268.729:1413): avc: denied { map } for pid=12334 comm="syz.2.2830" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 233.348110][ T30] audit: type=1400 audit(1754065268.749:1414): avc: denied { execute } for pid=12334 comm="syz.2.2830" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 233.442378][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2833'. [ 233.777613][T12366] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 233.880905][ T5916] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 234.040643][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 234.052508][ T5916] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.063869][ T5916] usb 3-1: config 0 has no interface number 0 [ 234.090920][ T5916] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.123416][ T5916] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.147091][ T5916] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 234.147123][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.158527][ T5916] usb 3-1: config 0 descriptor?? [ 234.250381][T12400] netlink: 'syz.3.2859': attribute type 1 has an invalid length. [ 234.498327][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2868'. [ 234.672397][ T5954] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 234.756665][ T30] audit: type=1400 audit(1754065270.169:1415): avc: denied { ioctl } for pid=12432 comm="syz.4.2875" path="socket:[37737]" dev="sockfs" ino=37737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.757209][T12433] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2875'. [ 234.782229][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.800803][ T5916] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0034/input/input36 [ 234.816861][ T5916] uclogic 0003:28BD:0094.0034: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 234.842381][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 234.849343][ T5954] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 234.859450][ T5954] usb 4-1: config 0 has no interface number 0 [ 234.868137][ T5954] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.880329][ T5954] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.893342][ T5954] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 234.902468][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 234.910549][ T5954] usb 4-1: Product: syz [ 234.915214][ T5954] usb 4-1: SerialNumber: syz [ 234.933296][ T5954] usb 4-1: config 0 descriptor?? [ 234.941055][ T5954] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 234.949184][ T5954] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input37 [ 235.017817][ T5954] usb 3-1: USB disconnect, device number 30 [ 235.288758][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.297079][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.304317][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.311427][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.318538][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.325731][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.332862][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.339951][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.346951][ T8896] usb 4-1: USB disconnect, device number 40 [ 235.352871][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.352893][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 235.370218][ T8896] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 235.400630][ T5916] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 235.550905][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 235.557643][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.569087][ T5916] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 235.579336][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.589683][ T5916] usb 1-1: config 0 descriptor?? [ 235.631976][ T30] audit: type=1326 audit(1754065271.049:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e18eb69 code=0x7ffc0000 [ 235.655744][ T30] audit: type=1326 audit(1754065271.049:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e18eb69 code=0x7ffc0000 [ 235.679484][ T30] audit: type=1326 audit(1754065271.049:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f460e18eb69 code=0x7ffc0000 [ 235.703859][ T30] audit: type=1326 audit(1754065271.049:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e18eb69 code=0x7ffc0000 [ 235.737632][ T30] audit: type=1326 audit(1754065271.069:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e18eb69 code=0x7ffc0000 [ 235.934686][ T30] audit: type=1400 audit(1754065271.349:1421): avc: denied { ioctl } for pid=12461 comm="syz.4.2889" path="socket:[38940]" dev="sockfs" ino=38940 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 236.003299][ T5916] mcp2221 0003:04D8:00DD.0035: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 236.092364][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 236.250501][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 236.257095][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.268296][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.278075][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.285261][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 236.290588][ T8896] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 236.299222][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.311607][ T9] usb 3-1: config 0 descriptor?? [ 236.407861][ T5916] usb 1-1: USB disconnect, device number 32 [ 236.452018][ T8896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.463094][ T8896] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 236.472240][ T8896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.481968][ T8896] usb 5-1: config 0 descriptor?? [ 236.720581][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 236.726997][ T5838] Bluetooth: hci5: command 0x1003 tx timeout [ 236.737477][ T9] apple 0003:05AC:0247.0036: unexpected long global item [ 236.760977][ T9] apple 0003:05AC:0247.0036: parse failed [ 236.769227][ T9] apple 0003:05AC:0247.0036: probe with driver apple failed with error -22 [ 236.895705][ T8896] keytouch 0003:0926:3333.0037: fixing up Keytouch IEC report descriptor [ 236.923242][ T8896] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0037/input/input38 [ 236.998185][ T9] usb 3-1: USB disconnect, device number 31 [ 237.045894][ T8896] keytouch 0003:0926:3333.0037: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 237.070279][T12485] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 237.081181][T12485] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0/file1 [ 237.280936][ T5916] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 237.331959][ T5886] usb 5-1: USB disconnect, device number 31 [ 237.430742][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 237.437374][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.448364][ T5916] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 237.457496][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.467966][ T5916] usb 4-1: config 0 descriptor?? [ 237.500558][ T8896] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 237.552613][ T30] audit: type=1400 audit(1754065272.969:1422): avc: denied { connect } for pid=12493 comm="syz.2.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 237.572753][ T30] audit: type=1400 audit(1754065272.969:1423): avc: denied { ioctl } for pid=12493 comm="syz.2.2904" path="socket:[38753]" dev="sockfs" ino=38753 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 237.597625][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.652687][ T8896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.666820][ T8896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.677033][ T8896] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.690803][ T8896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.698864][ T8896] usb 2-1: SerialNumber: syz [ 237.813983][ T30] audit: type=1400 audit(1754065273.229:1424): avc: denied { execstack } for pid=12504 comm="syz.2.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 237.912742][ T5916] gt683r_led 0003:1770:FF00.0038: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 237.967245][ T8896] usb 2-1: 0:2 : does not exist [ 238.000678][ T8896] usb 2-1: USB disconnect, device number 27 [ 238.075481][T12516] netlink: 'syz.2.2914': attribute type 1 has an invalid length. [ 238.137727][ T5916] usb 4-1: USB disconnect, device number 41 [ 238.150257][ T5886] gt683r_led 0003:1770:FF00.0038: failed to send set report request: -19 [ 238.898048][ T30] audit: type=1326 audit(1754065274.309:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e18eb69 code=0x7ffc0000 [ 238.964297][T12575] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 239.060770][ T8896] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 239.131467][T12591] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2948'. [ 239.147029][T12594] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2949'. [ 239.223586][ T8896] usb 4-1: Using ep0 maxpacket: 8 [ 239.230274][ T8896] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.250608][ T8896] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.270516][ T8896] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.280875][ T8896] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.294609][ T8896] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.317157][ T8896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.440199][T12611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2957'. [ 239.554871][ T8896] usb 4-1: usb_control_msg returned -32 [ 239.568169][ T8896] usbtmc 4-1:16.0: can't read capabilities [ 239.586764][ T8896] usb 4-1: USB disconnect, device number 42 [ 239.694697][T12612] delete_channel: no stack [ 239.911152][ T5916] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 240.081618][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 240.102112][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.123662][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 240.139516][ T5916] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 240.153613][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.166584][ T5916] usb 1-1: config 0 descriptor?? [ 240.310492][ T5886] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 240.490724][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.510894][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.531244][ T5886] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.543774][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.552628][ T5886] usb 3-1: SerialNumber: syz [ 240.596182][ T5916] nintendo 0003:057E:2019.0039: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 240.630854][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 240.671179][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 240.671194][ T30] audit: type=1400 audit(1754065276.089:1435): avc: denied { read write } for pid=12666 comm="syz.1.2982" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 240.708595][ T30] audit: type=1400 audit(1754065276.119:1436): avc: denied { open } for pid=12666 comm="syz.1.2982" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 240.771987][ T5886] usb 3-1: 0:2 : does not exist [ 240.790581][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 240.803149][ T5886] usb 3-1: USB disconnect, device number 32 [ 240.814332][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.832258][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.854213][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.864512][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.893843][ T9] usb 4-1: config 0 descriptor?? [ 240.926664][ T30] audit: type=1400 audit(1754065276.339:1437): avc: denied { map } for pid=12672 comm="syz.4.2985" path="socket:[40225]" dev="sockfs" ino=40225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.953638][ T30] audit: type=1400 audit(1754065276.339:1438): avc: denied { read } for pid=12672 comm="syz.4.2985" path="socket:[40225]" dev="sockfs" ino=40225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.977104][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.993227][ T5916] nintendo 0003:057E:2019.0039: Failed to get joycon info; ret=-71 [ 241.005196][ T5916] nintendo 0003:057E:2019.0039: Failed to retrieve controller info; ret=-71 [ 241.014365][ T5916] nintendo 0003:057E:2019.0039: Failed to initialize controller; ret=-71 [ 241.038824][ T5916] nintendo 0003:057E:2019.0039: probe - fail = -71 [ 241.045811][ T5916] nintendo 0003:057E:2019.0039: probe with driver nintendo failed with error -71 [ 241.057514][ T5916] usb 1-1: USB disconnect, device number 33 [ 241.338052][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 241.377576][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003A/input/input39 [ 241.873572][ T30] audit: type=1400 audit(1754065277.279:1439): avc: denied { bind } for pid=12721 comm="syz.0.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 241.890949][ T9] microsoft 0003:045E:07DA.003A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 241.914719][ T30] audit: type=1400 audit(1754065277.279:1440): avc: denied { write } for pid=12721 comm="syz.0.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 241.929703][ T9] usb 4-1: USB disconnect, device number 43 [ 242.131791][ T30] audit: type=1326 audit(1754065277.539:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12735 comm="syz.4.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a918eb69 code=0x7ffc0000 [ 242.155817][ T30] audit: type=1326 audit(1754065277.569:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12735 comm="syz.4.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a918eb69 code=0x7ffc0000 [ 242.184160][ T30] audit: type=1326 audit(1754065277.589:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12735 comm="syz.4.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f34a918eb69 code=0x7ffc0000 [ 242.214287][ T30] audit: type=1326 audit(1754065277.589:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12735 comm="syz.4.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a918eb69 code=0x7ffc0000 [ 242.420582][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 242.571578][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 242.588307][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 242.601655][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 242.633253][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 242.644840][T12766] hugetlbfs: syz.3.3029 (12766): Using mlock ulimits for SHM_HUGETLB is obsolete [ 242.662734][ T9] usb 1-1: config 1 has no interface number 0 [ 242.674629][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.686113][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 242.717795][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 242.728493][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.749544][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 242.774510][T12775] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3035'. [ 242.952456][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 243.301088][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 243.389457][ T5886] usb 1-1: USB disconnect, device number 34 [ 243.396942][ T5886] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 243.450545][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 243.463971][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 243.477308][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.495891][ T9] usb 5-1: Product: syz [ 243.500108][ T9] usb 5-1: Manufacturer: syz [ 243.504816][ T9] usb 5-1: SerialNumber: syz [ 243.513459][ T9] usb 5-1: config 0 descriptor?? [ 243.521598][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 243.618948][T12817] sp0: Synchronizing with TNC [ 243.661850][T12816] [U] è [ 243.727390][ T9] gspca_sn9c2028: read1 error -32 [ 243.743923][ T9] gspca_sn9c2028: read1 error -32 [ 243.845310][T12835] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 243.965542][ T5916] usb 5-1: USB disconnect, device number 32 [ 244.031057][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 244.117638][T12854] overlayfs: failed to clone lowerpath [ 244.150924][ T5886] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 244.190667][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 244.211027][ T9] usb 3-1: config index 0 descriptor too short (expected 530, got 18) [ 244.226007][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.236308][ T9] usb 3-1: config 0 has no interface number 0 [ 244.245602][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 244.255489][ T9] usb 3-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 244.255739][T12862] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12862 comm=syz.3.3077 [ 244.263643][ T9] usb 3-1: Product: syz [ 244.263662][ T9] usb 3-1: Manufacturer: syz [ 244.263675][ T9] usb 3-1: SerialNumber: syz [ 244.265454][ T9] usb 3-1: config 0 descriptor?? [ 244.298117][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 244.307310][ T9] usb 3-1: selecting invalid altsetting 1 [ 244.313115][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 244.318414][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 244.327030][ T5886] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 244.335789][ T5886] usb 2-1: config 0 has no interface number 0 [ 244.345266][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 244.357674][ T5886] usb 2-1: config 0 interface 184 has no altsetting 0 [ 244.366715][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 244.378116][ T9] usb 3-1: media controller created [ 244.383591][ T5886] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 244.395556][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.433951][ T5886] usb 2-1: Product: syz [ 244.438139][ T5886] usb 2-1: Manufacturer: syz [ 244.446134][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.458411][ T5886] usb 2-1: SerialNumber: syz [ 244.465056][ T5886] usb 2-1: config 0 descriptor?? [ 244.486343][ T5886] smsc75xx v1.0.0 [ 244.530738][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 244.537783][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 244.549386][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 244.618636][ T9] usb 3-1: USB disconnect, device number 33 [ 244.845987][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3084'. [ 244.855974][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3085'. [ 244.863391][T12878] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 244.878325][T12878] macsec2: entered allmulticast mode [ 244.885269][T12878] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 244.905775][T12878] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 244.916852][T12878] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 245.100872][T12881] CIFS mount error: No usable UNC path provided in device string! [ 245.100872][T12881] [ 245.126189][T12881] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 245.225024][T12888] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3090'. [ 245.250915][T12888] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 245.269399][T12888] openvswitch: netlink: Duplicate key (type 0). [ 245.319077][ T5886] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 245.335455][ T5886] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 245.349003][ T5886] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 245.361819][ T5886] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 245.371608][ T5886] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 245.382512][ T5886] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 245.392950][ T5886] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 245.401958][T12893] nbd1: detected capacity change from 0 to 127 [ 245.411270][ T5835] block nbd1: Receive control failed (result -32) [ 245.441238][ T5886] usb 2-1: USB disconnect, device number 28 [ 245.443653][T12899] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.490686][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 245.517949][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'. [ 245.652478][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 245.668764][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.688397][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.720502][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.739610][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.763906][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.783706][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.844721][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 245.844736][ T30] audit: type=1400 audit(1754065281.259:1462): avc: denied { bind } for pid=12922 comm="syz.3.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.016777][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 246.026580][ T9] usbtmc 1-1:16.0: can't read capabilities [ 246.210049][ T30] audit: type=1400 audit(1754065281.619:1463): avc: denied { getopt } for pid=12951 comm="syz.2.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.246350][ T9] usb 1-1: USB disconnect, device number 35 [ 246.353891][T12963] kvm_intel: kvm [12962]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x6 [ 246.790475][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 246.866825][ T30] audit: type=1400 audit(1754065282.279:1464): avc: denied { setcheckreqprot } for pid=12998 comm="syz.1.3143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 246.870541][T12997] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 246.887879][T12999] SELinux: syz.1.3143 (12999) set checkreqprot to 1. This is no longer supported. [ 246.994153][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.003660][ T30] audit: type=1400 audit(1754065282.409:1465): avc: denied { watch watch_reads } for pid=13002 comm="syz.1.3145" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 247.028515][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.069726][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 247.094348][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.114571][ T9] usb 3-1: SerialNumber: syz [ 247.321764][T13014] serio: Serial port ptm0 [ 247.341813][ T9] usb 3-1: 0:2 : does not exist [ 247.364441][ T9] usb 3-1: USB disconnect, device number 34 [ 247.384809][ T30] audit: type=1400 audit(1754065282.799:1466): avc: denied { write } for pid=13018 comm="syz.4.3152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 247.710551][ T5954] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 247.840560][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 247.871869][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 247.883052][ T5954] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 247.893824][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 247.905201][ T5954] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 247.915077][ T5954] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 247.925766][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.939363][ T5954] usb 1-1: config 0 descriptor?? [ 247.990487][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 248.002235][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 248.022617][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 248.034061][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 248.049099][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.058388][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 248.067064][ T9] usb 4-1: SerialNumber: syz [ 248.075138][T13017] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 248.154432][ T5954] hdpvr 1-1:0.0: firmware version 0x0 dated [ 248.173803][ T5954] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 248.291975][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 248.310813][ T9] usb 4-1: USB disconnect, device number 44 [ 248.399789][ T30] audit: type=1400 audit(1754065283.799:1467): avc: denied { bind } for pid=13048 comm="syz.2.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 248.497952][T13056] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 248.511718][T13058] netlink: 'syz.2.3170': attribute type 4 has an invalid length. [ 248.564900][T13060] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 248.580635][ T30] audit: type=1400 audit(1754065283.989:1468): avc: denied { mount } for pid=13059 comm="syz.2.3171" name="/" dev="rpc_pipefs" ino=42271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 248.623828][ T5954] hdpvr 1-1:0.0: Could not setup controls [ 248.640323][ T5954] hdpvr 1-1:0.0: registering videodev failed [ 248.654760][ T5954] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 248.674244][ T30] audit: type=1400 audit(1754065284.089:1469): avc: denied { bind } for pid=13065 comm="syz.2.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 248.675122][ T5954] usb 1-1: USB disconnect, device number 36 [ 248.937264][ T30] audit: type=1400 audit(1754065284.349:1470): avc: denied { write } for pid=13080 comm="syz.2.3182" name="mouse0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 249.454078][ T5954] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 249.488647][T13123] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 249.563083][T13127] lo: entered promiscuous mode [ 249.575035][T13127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.620559][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 249.628600][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.642411][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.662733][ T5954] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 249.675296][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.688745][ T5954] usb 1-1: config 0 descriptor?? [ 249.837473][ T30] audit: type=1400 audit(1754065285.249:1471): avc: denied { map } for pid=13139 comm="syz.1.3209" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 250.118744][ T5954] savu 0003:1E7D:2D5A.003B: unknown main item tag 0x5 [ 250.140473][ T5954] savu 0003:1E7D:2D5A.003B: bogus close delimiter [ 250.146939][ T5954] savu 0003:1E7D:2D5A.003B: item 0 0 2 10 parsing failed [ 250.165328][ T5954] savu 0003:1E7D:2D5A.003B: parse failed [ 250.172928][ T5954] savu 0003:1E7D:2D5A.003B: probe with driver savu failed with error -22 [ 250.227996][T13169] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3223'. [ 250.272901][T13171] netlink: 'syz.2.3224': attribute type 1 has an invalid length. [ 250.280896][T13171] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3224'. [ 250.290022][T13171] netlink: 'syz.2.3224': attribute type 1 has an invalid length. [ 250.297872][T13171] netlink: 'syz.2.3224': attribute type 2 has an invalid length. [ 250.324634][ T5886] usb 1-1: USB disconnect, device number 37 [ 250.410750][ T5907] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 250.453391][T13132] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.460357][T13132] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 250.471680][T13132] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 250.477572][T13132] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 250.487614][T13132] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.493890][T13132] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 250.505561][T13132] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 250.511986][T13132] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 250.570472][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 250.585679][ T5907] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 250.604014][ T5907] usb 5-1: config 0 has no interface number 0 [ 250.613854][ T5954] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 250.630037][ T5907] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 250.649382][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.672948][ T5907] usb 5-1: Product: syz [ 250.677143][ T5907] usb 5-1: Manufacturer: syz [ 250.692247][ T5907] usb 5-1: SerialNumber: syz [ 250.705981][ T5907] usb 5-1: config 0 descriptor?? [ 250.716953][ T5907] smsc95xx v2.0.0 [ 250.770725][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 250.777273][ T5954] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 250.785744][ T5954] usb 2-1: config 0 has no interface number 0 [ 250.792051][ T5954] usb 2-1: config 0 interface 196 has no altsetting 0 [ 250.801070][ T5954] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 250.810134][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.830520][ T5954] usb 2-1: Product: syz [ 250.834729][ T5954] usb 2-1: Manufacturer: syz [ 250.839403][ T5954] usb 2-1: SerialNumber: syz [ 250.849469][ T5954] usb 2-1: config 0 descriptor?? [ 251.012853][T13197] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.059489][T13177] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3227'. [ 251.083813][ T5954] ipheth 2-1:0.196: Unable to find endpoints [ 251.107050][ T5954] usb 2-1: USB disconnect, device number 29 [ 251.211816][T13208] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 251.526041][ T5907] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 251.539532][ T5907] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 251.549844][ T5907] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 251.561134][ T5907] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 251.571182][ T5907] usb 5-1: USB disconnect, device number 33 [ 251.590489][ T5954] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 251.665127][T13220] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 251.665127][T13220] The task syz.1.3244 (13220) triggered the difference, watch for misbehavior. [ 251.760555][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 251.768094][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 251.793356][ T5954] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 251.803257][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.811342][ T5954] usb 1-1: Product: syz [ 251.815509][ T5954] usb 1-1: Manufacturer: syz [ 251.820085][ T5954] usb 1-1: SerialNumber: syz [ 251.825933][ T5954] usb 1-1: config 0 descriptor?? [ 251.834794][ T5954] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 251.844212][ T5954] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 252.036869][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'. [ 252.104242][ T5954] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 252.177845][ T5954] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 252.186871][ T5954] em28xx 1-1:0.0: board has no eeprom [ 252.212956][T13234] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3251'. [ 252.240589][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 252.250855][ T5954] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 252.258714][ T5954] em28xx 1-1:0.0: dvb set to bulk mode. [ 252.264401][ T5907] em28xx 1-1:0.0: Binding DVB extension [ 252.275867][ T5954] usb 1-1: USB disconnect, device number 38 [ 252.291486][ T5954] em28xx 1-1:0.0: Disconnecting em28xx [ 252.321188][ T5907] em28xx 1-1:0.0: Registering input extension [ 252.328480][ T5954] em28xx 1-1:0.0: Closing input extension [ 252.346144][ T5954] em28xx 1-1:0.0: Freeing device [ 252.394316][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 252.403211][ T9] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 252.412681][ T9] usb 4-1: config 0 has no interface number 0 [ 252.419261][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 252.431960][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 252.450476][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.468426][ T9] usb 4-1: Product: syz [ 252.477324][ T9] usb 4-1: Manufacturer: syz [ 252.490523][ T9] usb 4-1: SerialNumber: syz [ 252.502876][ T9] usb 4-1: config 0 descriptor?? [ 252.511285][T13224] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 252.526293][ T9] asix 4-1:0.251: probe with driver asix failed with error -22 [ 252.621628][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 252.621642][ T30] audit: type=1400 audit(1754065288.039:1476): avc: denied { remount } for pid=13249 comm="syz.0.3258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 252.670927][ T5907] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 252.695414][ T30] audit: type=1400 audit(1754065288.109:1477): avc: denied { write } for pid=13252 comm="syz.0.3259" path="socket:[42849]" dev="sockfs" ino=42849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 252.758715][ T9] usb 4-1: USB disconnect, device number 45 [ 252.843359][ T5907] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.856301][ T5907] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.867335][ T5907] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 252.878686][ T5907] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 252.887841][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.900791][T13244] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 253.446604][T13272] SELinux: failed to load policy [ 253.674310][ T30] audit: type=1400 audit(1754065289.089:1478): avc: denied { write } for pid=13290 comm="syz.1.3277" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 253.704499][ T30] audit: type=1400 audit(1754065289.119:1479): avc: denied { listen } for pid=13293 comm="syz.3.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 253.771576][ T5907] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 253.779720][ T5907] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input42 [ 253.794831][ T5907] usb 5-1: USB disconnect, device number 34 [ 253.800810][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 254.509582][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3286'. [ 254.521962][T13313] netlink: 'syz.2.3286': attribute type 1 has an invalid length. [ 254.529840][T13313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3286'. [ 254.666942][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 254.688388][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3290'. [ 254.703866][ T30] audit: type=1400 audit(1754065290.109:1480): avc: denied { name_bind } for pid=13323 comm="syz.0.3291" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 254.752813][T13328] Bluetooth: MGMT ver 1.23 [ 254.867189][T13337] netlink: 'syz.1.3298': attribute type 6 has an invalid length. [ 255.080799][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 255.202580][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.209122][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.230789][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 255.237441][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 255.249775][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.263093][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.272320][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.280317][ T9] usb 3-1: Product: syz [ 255.286509][ T9] usb 3-1: Manufacturer: syz [ 255.291439][ T9] usb 3-1: SerialNumber: syz [ 255.298650][ T9] usb 3-1: config 0 descriptor?? [ 255.307357][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 255.316749][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 255.354024][T13363] netlink: 87 bytes leftover after parsing attributes in process `syz.3.3309'. [ 255.598794][ T30] audit: type=1400 audit(1754065290.999:1481): avc: denied { read } for pid=13376 comm="syz.3.3314" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 255.637637][ T30] audit: type=1400 audit(1754065290.999:1482): avc: denied { open } for pid=13376 comm="syz.3.3314" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 255.665180][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3316'. [ 255.674399][T13381] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3316'. [ 255.892782][T13397] netlink: 'syz.3.3324': attribute type 10 has an invalid length. [ 255.926844][ T9] em28xx 3-1:0.0: chip ID is em28174 [ 255.980764][ T5886] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 256.140487][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 256.153477][ T5886] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 256.164374][ T5907] usb 3-1: USB disconnect, device number 35 [ 256.169405][ T5886] usb 5-1: config 0 has no interface number 0 [ 256.177434][ T5907] em28xx 3-1:0.0: Disconnecting em28xx [ 256.188544][ T5907] em28xx 3-1:0.0: Freeing device [ 256.198507][ T5886] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 256.208749][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.213478][T13416] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.221152][T13414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3331'. [ 256.237494][ T5886] usb 5-1: Product: syz [ 256.241892][ T5886] usb 5-1: Manufacturer: syz [ 256.246536][ T5886] usb 5-1: SerialNumber: syz [ 256.254946][ T5886] usb 5-1: config 0 descriptor?? [ 256.264221][ T5886] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 256.282042][ T30] audit: type=1400 audit(1754065291.695:1483): avc: denied { ioctl } for pid=13417 comm="syz.3.3333" path="socket:[43260]" dev="sockfs" ino=43260 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 256.436553][ T30] audit: type=1400 audit(1754065291.845:1484): avc: denied { connect } for pid=13425 comm="syz.3.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.478026][ T5886] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 256.493611][T13428] debugfs: 'ttyS3' already exists in 'caif_serial' [ 256.508418][ T5886] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 256.764088][ T30] audit: type=1400 audit(1754065292.165:1485): avc: denied { write } for pid=13445 comm="syz.1.3347" path="socket:[43310]" dev="sockfs" ino=43310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 256.863992][T13454] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3350'. [ 256.913050][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 256.921174][ T9] usb 5-1: USB disconnect, device number 35 [ 256.950164][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 256.973260][ T5907] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 256.987166][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 257.016253][ T9] quatech2 5-1:0.51: device disconnected [ 257.135225][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 257.153033][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 257.167467][ T5907] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 257.180088][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.196597][ T5907] usb 4-1: config 0 descriptor?? [ 257.202547][T13444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.211235][ T5907] hub 4-1:0.0: USB hub found [ 257.443687][ T5907] hub 4-1:0.0: 2 ports detected [ 257.643599][ T5907] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 257.660868][ T5907] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 257.674832][ T1084] tipc: Subscription rejected, illegal request [ 257.690936][ T30] audit: type=1400 audit(1754065293.095:1486): avc: denied { getopt } for pid=13485 comm="syz.4.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.714603][ T5907] usbhid 4-1:0.0: can't add hid device: -71 [ 257.725033][ T5907] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 257.745695][ T30] audit: type=1400 audit(1754065293.145:1487): avc: denied { append } for pid=13490 comm="syz.1.3368" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.783694][ T5907] usb 4-1: USB disconnect, device number 46 [ 257.824200][T13497] netlink: 'syz.2.3370': attribute type 1 has an invalid length. [ 257.850486][T13497] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3370'. [ 258.100476][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 258.110735][ T5886] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 258.229289][T13507] sctp: [Deprecated]: syz.3.3375 (pid 13507) Use of int in max_burst socket option deprecated. [ 258.229289][T13507] Use struct sctp_assoc_value instead [ 258.270499][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 258.275771][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 258.283531][ T5886] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 258.292205][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.304715][ T5886] usb 5-1: config 0 has no interface number 0 [ 258.311183][ T5886] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 258.322623][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.335665][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 258.377344][ T5886] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 258.387556][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.395894][ T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 258.405338][ T5886] usb 5-1: Product: syz [ 258.409503][ T5886] usb 5-1: Manufacturer: syz [ 258.416206][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.425024][ T5886] usb 5-1: SerialNumber: syz [ 258.432805][ T9] usb 1-1: config 0 descriptor?? [ 258.438451][ T5886] usb 5-1: config 0 descriptor?? [ 258.842860][T13531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3387'. [ 258.855238][T13531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3387'. [ 258.878176][ T9] shield 0003:0955:7214.003C: unknown main item tag 0x0 [ 258.886589][ T9] shield 0003:0955:7214.003C: unknown main item tag 0x0 [ 258.894327][ T9] shield 0003:0955:7214.003C: unknown main item tag 0x0 [ 258.901652][ T9] shield 0003:0955:7214.003C: unknown main item tag 0x0 [ 258.909338][ T9] shield 0003:0955:7214.003C: unknown main item tag 0x0 [ 258.919030][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input45 [ 258.975795][ T9] shield 0003:0955:7214.003C: Registered Thunderstrike controller [ 258.984388][ T8894] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 258.995076][ T9] shield 0003:0955:7214.003C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 259.087938][ T5886] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.214/input/input44 [ 259.126309][ T30] audit: type=1400 audit(1754065294.535:1488): avc: denied { write } for pid=13499 comm="syz.0.3371" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 259.150360][T13500] random: crng reseeded on system resumption [ 259.160826][ T8894] usb 3-1: Using ep0 maxpacket: 32 [ 259.180816][ T5916] usb 1-1: USB disconnect, device number 39 [ 259.187133][ T9] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 259.210734][ T5916] ------------[ cut here ]------------ [ 259.216211][ T5916] workqueue: work disable count underflowed [ 259.222156][ T5916] WARNING: CPU: 0 PID: 5916 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 259.231103][ T5916] Modules linked in: [ 259.235220][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: kworker/0:6 Not tainted 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(full) [ 259.246921][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.256965][ T5916] Workqueue: usb_hub_wq hub_event [ 259.261987][ T5916] RIP: 0010:enable_work+0x2f8/0x340 [ 259.267170][ T5916] Code: 89 ee e8 2b 37 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 3c 38 00 c6 05 59 34 0e 0f 01 90 48 c7 c7 20 01 ac 8b e8 29 f9 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 f7 6f 9e 00 e9 aa fe ff ff [ 259.286767][ T5916] RSP: 0018:ffffc900042df3c8 EFLAGS: 00010086 [ 259.292819][ T5916] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900198af000 [ 259.300770][ T5916] RDX: 0000000000100000 RSI: ffffffff817a2815 RDI: 0000000000000001 [ 259.308723][ T5916] RBP: ffff888035b28738 R08: 0000000000000001 R09: 0000000000000000 [ 259.316673][ T5916] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200085be7a [ 259.324631][ T5916] R13: 0000000000000000 R14: ffff888035b28730 R15: ffffffff8fe7b920 [ 259.332607][ T5916] FS: 0000000000000000(0000) GS:ffff8881246fb000(0000) knlGS:0000000000000000 [ 259.341524][ T5916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.348089][ T5916] CR2: 0000001b2f9f2ff8 CR3: 00000000772a8000 CR4: 00000000003526f0 [ 259.356044][ T5916] Call Trace: [ 259.359303][ T5916] [ 259.362223][ T5916] ? __pfx_enable_work+0x10/0x10 [ 259.367151][ T5916] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 259.372964][ T5916] __cancel_work_sync+0xe7/0x130 [ 259.377892][ T5916] thermal_zone_device_unregister+0x239/0x450 [ 259.383949][ T5916] ? __pfx_shield_remove+0x10/0x10 [ 259.389047][ T5916] power_supply_unregister+0x10a/0x150 [ 259.394498][ T5916] shield_remove+0x75/0x130 [ 259.398991][ T5916] ? __pfx_shield_remove+0x10/0x10 [ 259.404086][ T5916] hid_device_remove+0xd1/0x260 [ 259.408922][ T5916] ? __pfx_hid_device_remove+0x10/0x10 [ 259.414367][ T5916] device_remove+0xc8/0x170 [ 259.418861][ T5916] device_release_driver_internal+0x44b/0x620 [ 259.424924][ T5916] bus_remove_device+0x22f/0x420 [ 259.429852][ T5916] device_del+0x396/0x9f0 [ 259.434169][ T5916] ? __pfx_device_del+0x10/0x10 [ 259.439021][ T5916] ? do_raw_spin_lock+0x12c/0x2b0 [ 259.444035][ T5916] hid_destroy_device+0x19c/0x240 [ 259.449045][ T5916] usbhid_disconnect+0xa0/0xe0 [ 259.453797][ T5916] usb_unbind_interface+0x1da/0x9e0 [ 259.458981][ T5916] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 259.464621][ T5916] ? __pfx_usb_unbind_interface+0x10/0x10 [ 259.470323][ T5916] device_remove+0x125/0x170 [ 259.474906][ T5916] device_release_driver_internal+0x44b/0x620 [ 259.480965][ T5916] bus_remove_device+0x22f/0x420 [ 259.485890][ T5916] device_del+0x396/0x9f0 [ 259.490208][ T5916] ? __pfx_device_del+0x10/0x10 [ 259.495043][ T5916] ? kobject_put+0x210/0x5a0 [ 259.499629][ T5916] usb_disable_device+0x355/0x7d0 [ 259.504649][ T5916] usb_disconnect+0x2e1/0x9c0 [ 259.509320][ T5916] hub_event+0x1c81/0x4fe0 [ 259.513745][ T5916] ? __lock_acquire+0xb8a/0x1c90 [ 259.518676][ T5916] ? __pfx_hub_event+0x10/0x10 [ 259.523426][ T5916] ? interval_tree_span_iter_first+0x230/0x3c0 [ 259.529574][ T5916] ? rcu_is_watching+0x12/0xc0 [ 259.534331][ T5916] process_one_work+0x9cf/0x1b70 [ 259.539266][ T5916] ? __pfx_process_one_work+0x10/0x10 [ 259.544644][ T5916] ? assign_work+0x1a0/0x250 [ 259.549218][ T5916] worker_thread+0x6c8/0xf10 [ 259.553796][ T5916] ? __kthread_parkme+0x19e/0x250 [ 259.558808][ T5916] ? __pfx_worker_thread+0x10/0x10 [ 259.563903][ T5916] kthread+0x3c5/0x780 [ 259.567955][ T5916] ? __pfx_kthread+0x10/0x10 [ 259.572527][ T5916] ? rcu_is_watching+0x12/0xc0 [ 259.577275][ T5916] ? __pfx_kthread+0x10/0x10 [ 259.581845][ T5916] ret_from_fork+0x5d4/0x6f0 [ 259.586412][ T5916] ? __pfx_kthread+0x10/0x10 [ 259.590983][ T5916] ret_from_fork_asm+0x1a/0x30 [ 259.595739][ T5916] [ 259.598742][ T5916] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 259.606000][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: kworker/0:6 Not tainted 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(full) [ 259.617706][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.627749][ T5916] Workqueue: usb_hub_wq hub_event [ 259.632770][ T5916] Call Trace: [ 259.636030][ T5916] [ 259.638940][ T5916] dump_stack_lvl+0x3d/0x1f0 [ 259.643526][ T5916] vpanic+0x6a3/0x780 [ 259.647499][ T5916] ? __pfx_vpanic+0x10/0x10 [ 259.651993][ T5916] ? enable_work+0x2f8/0x340 [ 259.656566][ T5916] panic+0xca/0xd0 [ 259.660286][ T5916] ? __pfx_panic+0x10/0x10 [ 259.664703][ T5916] check_panic_on_warn+0xab/0xb0 [ 259.669633][ T5916] __warn+0xf6/0x3c0 [ 259.673510][ T5916] ? enable_work+0x2f8/0x340 [ 259.678087][ T5916] report_bug+0x3c3/0x580 [ 259.682414][ T5916] ? enable_work+0x2f8/0x340 [ 259.686987][ T5916] handle_bug+0x184/0x210 [ 259.691309][ T5916] exc_invalid_op+0x17/0x50 [ 259.695824][ T5916] asm_exc_invalid_op+0x1a/0x20 [ 259.700656][ T5916] RIP: 0010:enable_work+0x2f8/0x340 [ 259.705836][ T5916] Code: 89 ee e8 2b 37 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 3c 38 00 c6 05 59 34 0e 0f 01 90 48 c7 c7 20 01 ac 8b e8 29 f9 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 f7 6f 9e 00 e9 aa fe ff ff [ 259.725425][ T5916] RSP: 0018:ffffc900042df3c8 EFLAGS: 00010086 [ 259.731472][ T5916] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900198af000 [ 259.739421][ T5916] RDX: 0000000000100000 RSI: ffffffff817a2815 RDI: 0000000000000001 [ 259.747374][ T5916] RBP: ffff888035b28738 R08: 0000000000000001 R09: 0000000000000000 [ 259.755331][ T5916] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200085be7a [ 259.763283][ T5916] R13: 0000000000000000 R14: ffff888035b28730 R15: ffffffff8fe7b920 [ 259.771242][ T5916] ? __warn_printk+0x1a5/0x350 [ 259.776002][ T5916] ? enable_work+0x2f7/0x340 [ 259.780575][ T5916] ? __pfx_enable_work+0x10/0x10 [ 259.785496][ T5916] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 259.791302][ T5916] __cancel_work_sync+0xe7/0x130 [ 259.796314][ T5916] thermal_zone_device_unregister+0x239/0x450 [ 259.802373][ T5916] ? __pfx_shield_remove+0x10/0x10 [ 259.807473][ T5916] power_supply_unregister+0x10a/0x150 [ 259.812920][ T5916] shield_remove+0x75/0x130 [ 259.817411][ T5916] ? __pfx_shield_remove+0x10/0x10 [ 259.822510][ T5916] hid_device_remove+0xd1/0x260 [ 259.827343][ T5916] ? __pfx_hid_device_remove+0x10/0x10 [ 259.832785][ T5916] device_remove+0xc8/0x170 [ 259.837276][ T5916] device_release_driver_internal+0x44b/0x620 [ 259.843342][ T5916] bus_remove_device+0x22f/0x420 [ 259.848267][ T5916] device_del+0x396/0x9f0 [ 259.852598][ T5916] ? __pfx_device_del+0x10/0x10 [ 259.857437][ T5916] ? do_raw_spin_lock+0x12c/0x2b0 [ 259.862447][ T5916] hid_destroy_device+0x19c/0x240 [ 259.867455][ T5916] usbhid_disconnect+0xa0/0xe0 [ 259.872210][ T5916] usb_unbind_interface+0x1da/0x9e0 [ 259.877395][ T5916] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 259.883016][ T5916] ? __pfx_usb_unbind_interface+0x10/0x10 [ 259.888716][ T5916] device_remove+0x125/0x170 [ 259.893303][ T5916] device_release_driver_internal+0x44b/0x620 [ 259.899367][ T5916] bus_remove_device+0x22f/0x420 [ 259.904308][ T5916] device_del+0x396/0x9f0 [ 259.908631][ T5916] ? __pfx_device_del+0x10/0x10 [ 259.913473][ T5916] ? kobject_put+0x210/0x5a0 [ 259.918056][ T5916] usb_disable_device+0x355/0x7d0 [ 259.923077][ T5916] usb_disconnect+0x2e1/0x9c0 [ 259.927747][ T5916] hub_event+0x1c81/0x4fe0 [ 259.932170][ T5916] ? __lock_acquire+0xb8a/0x1c90 [ 259.937098][ T5916] ? __pfx_hub_event+0x10/0x10 [ 259.941851][ T5916] ? interval_tree_span_iter_first+0x230/0x3c0 [ 259.947997][ T5916] ? rcu_is_watching+0x12/0xc0 [ 259.952752][ T5916] process_one_work+0x9cf/0x1b70 [ 259.957685][ T5916] ? __pfx_process_one_work+0x10/0x10 [ 259.963046][ T5916] ? assign_work+0x1a0/0x250 [ 259.967630][ T5916] worker_thread+0x6c8/0xf10 [ 259.972210][ T5916] ? __kthread_parkme+0x19e/0x250 [ 259.977229][ T5916] ? __pfx_worker_thread+0x10/0x10 [ 259.982327][ T5916] kthread+0x3c5/0x780 [ 259.986397][ T5916] ? __pfx_kthread+0x10/0x10 [ 259.990989][ T5916] ? rcu_is_watching+0x12/0xc0 [ 259.995756][ T5916] ? __pfx_kthread+0x10/0x10 [ 260.000334][ T5916] ret_from_fork+0x5d4/0x6f0 [ 260.004918][ T5916] ? __pfx_kthread+0x10/0x10 [ 260.009514][ T5916] ret_from_fork_asm+0x1a/0x30 [ 260.014292][ T5916] [ 260.017491][ T5916] Kernel Offset: disabled [ 260.021798][ T5916] Rebooting in 86400 seconds..