last executing test programs: 8.232935723s ago: executing program 4 (id=691): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000019002b000a00020014a4ee1ee438d2fd0000000000", 0x35}], 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e2e2c0000000000010902240001000000000904000001030000000921000000012307000905"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0xc0c0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x4376ea830d55d49b, 0x0, [0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000000), 0x4) 7.634700075s ago: executing program 3 (id=695): write$binfmt_script(0xffffffffffffffff, 0x0, 0x12c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080), 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x10000, 0x100e5, 0x0, 0x80, 0xfffffffffffffffe, 0x200000000000000, 0xffffffffffffffff, 0x0, 0x4, 0x81, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xf4b}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000380), 0x4) mount(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0) open(0x0, 0x0, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001300", @ANYRES64], 0xe0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "8e44c05de5b300", "591f44ef0756020a9e48a600", "3f0f817c", "51eb071129f5da07"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x11a, 0x1b, &(0x7f0000000100)=0xbfffff7f, 0x4) io_uring_setup(0x10004c2d, &(0x7f00000006c0)={0x0, 0x23ab, 0x10, 0x400000, 0x2eb}) 6.925584831s ago: executing program 2 (id=696): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 6.752503898s ago: executing program 3 (id=697): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, 0x0, 0x20040040) 6.682366265s ago: executing program 3 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="02002302230102090500000004"]) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010000001d04"]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') readv(r4, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"]) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0xb) unshare(0x2c020400) r7 = socket(0x2, 0x2, 0x1) bind$inet6(r7, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xb) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101201) 6.42886189s ago: executing program 0 (id=699): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000200)=""/242, &(0x7f0000000100)=0xf2) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) read$hidraw(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.483815713s ago: executing program 4 (id=700): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.448572707s ago: executing program 3 (id=702): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x5451, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$evdev(0x0, 0x4, 0x42) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000005ec0)={0x9, 0x0, 0x2002, 0xb, "a2196bf0ae9048ced3900813726203ea0337b065c6b388e3cdf73cb18bfd1b04"}) 5.438696535s ago: executing program 2 (id=703): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000480)=0x1ff, 0x4) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000800)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[], 0xd40}}, 0x0) 5.215870067s ago: executing program 4 (id=705): mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) 5.01185576s ago: executing program 1 (id=706): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 4.948930219s ago: executing program 4 (id=707): r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xa000032a) 4.352904755s ago: executing program 2 (id=708): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040040) 4.059827537s ago: executing program 2 (id=709): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f000024b000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00007d5000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000000)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000200)={0x1fe}, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) 4.059646083s ago: executing program 4 (id=710): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000019002b000a00020014a4ee1ee438d2fd0000000000", 0x35}], 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e2e2c0000000000010902240001000000000904000001030000000921000000012307000905"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0xc0c0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x4376ea830d55d49b, 0x0, [0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000000), 0x4) 2.801257804s ago: executing program 2 (id=711): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000049233300003cf4435522050000000000010902240001000000000904000001030000000921000000012205000905810300000000cf02fcc827bdad9e76cd0a30031d0b6469ec88aa85a5d83927745b63930f7aa8ab45385c805620805e44731b"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 2.13112944s ago: executing program 0 (id=712): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 1.836326081s ago: executing program 1 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x20) 1.671974207s ago: executing program 0 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000240000000010800034000000000080002400000000008000640000000020900010073797a30000000000900020073797a320000"], 0x94}}, 0x0) 1.457291166s ago: executing program 3 (id=715): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 902.556084ms ago: executing program 0 (id=716): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, 0x0, 0x0) 831.22174ms ago: executing program 1 (id=717): mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 759.81435ms ago: executing program 3 (id=718): clock_nanosleep(0x8, 0x2, &(0x7f0000000080)={0x77359400}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x10) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) futex(&(0x7f0000000200)=0x2, 0x2, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)=0x1, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@loopback, 0x3ff, 0x2, 0x0, 0x0, 0x3, 0x91a}, 0x20) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 728.153727ms ago: executing program 0 (id=719): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040040) 651.722605ms ago: executing program 1 (id=720): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(0xffffffffffffffff, 0x353, 0x0, 0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000002340), 0x8) 463.740714ms ago: executing program 0 (id=721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x100000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002000)="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", 0x39d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000980)='0', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)='\n@', 0x2}], 0x1}}], 0x3, 0xc4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000680)=ANY=[], 0x18) sendto$inet6(r0, &(0x7f0000000280)="03", 0x100000, 0x0, 0x0, 0x0) 458.175125ms ago: executing program 1 (id=722): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="8400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128008000100677470"], 0x84}}, 0x0) 87.385219ms ago: executing program 4 (id=723): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 42.814344ms ago: executing program 1 (id=724): syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x101100) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_setup(0x171a, &(0x7f00000000c0)={0x0, 0x452a}) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x3b, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000002ac0)={0x0, 0x0, 0x9}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xbd941) socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x10000001, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0xc0}, {0x9, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x400000000000000}, {0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0x2, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@remote}}, 0xe8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r4, 0x0) keyctl$revoke(0x6, 0x0) socket$inet6(0xa, 0x4, 0x0) bind$netlink(r3, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000780)='.\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0xee00, @ANYBLOB, @ANYRES32=0x0], 0x5c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000d000000090000000600000010000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000001400"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00040000000400000009000000000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) semop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=725): prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000f, 0x12, r2, 0x0) kernel console output (not intermixed with test programs): 7340][ T29] audit: type=1400 audit(1729008496.018:251): avc: denied { unlink } for pid=6142 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2552 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.412603][ T2957] veth1_macvtap: left promiscuous mode [ 179.419662][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 179.440773][ T2957] veth0_macvtap: left promiscuous mode [ 179.446659][ T2957] veth1_vlan: left promiscuous mode [ 179.452317][ T2957] veth0_vlan: left promiscuous mode [ 179.517997][ T5276] appletouch 5-1:0.0: Failed to request geyser raw mode [ 179.525166][ T5230] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 179.534588][ T5276] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 179.562756][ T5276] usb 5-1: USB disconnect, device number 9 [ 179.608090][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 179.616561][ T9] usb 1-1: config 0 has no interfaces? [ 179.626954][ T9] usb 1-1: New USB device found, idVendor=0cde, idProduct=001a, bcdDevice=21.32 [ 179.637103][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.645483][ T9] usb 1-1: Product: syz [ 179.649911][ T9] usb 1-1: Manufacturer: syz [ 179.657134][ T9] usb 1-1: SerialNumber: syz [ 179.673655][ T9] usb 1-1: config 0 descriptor?? [ 179.683031][ T5242] Bluetooth: hci4: command tx timeout [ 179.703082][ T5230] usb 4-1: Using ep0 maxpacket: 16 [ 179.720610][ T5230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.753126][ T5230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.794329][ T5230] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.801364][ T29] audit: type=1400 audit(1729008496.498:252): avc: denied { write } for pid=6148 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.810209][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.848921][ T5230] usb 4-1: config 0 descriptor?? [ 179.892030][ T5307] usb 1-1: USB disconnect, device number 9 [ 180.270038][ T5230] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 180.282964][ T5230] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 180.301734][ T5230] microsoft 0003:045E:07DA.0006: no inputs found [ 180.309647][ T5230] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 180.365753][ T5307] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 180.407346][ T2957] team0 (unregistering): Port device team_slave_1 removed [ 180.423240][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 180.454551][ T2957] team0 (unregistering): Port device team_slave_0 removed [ 180.535142][ T5307] usb 1-1: config index 0 descriptor too short (expected 441, got 18) [ 180.556320][ T5307] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.567638][ T5277] usb 4-1: USB disconnect, device number 12 [ 180.574763][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.592083][ T5307] usb 1-1: config 0 descriptor?? [ 180.597367][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 180.628372][ T5307] pwc: Askey VC010 type 2 USB webcam detected. [ 180.652266][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 180.670948][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.684221][ T25] usb 5-1: Product: syz [ 180.688466][ T25] usb 5-1: Manufacturer: syz [ 180.695501][ T25] usb 5-1: SerialNumber: syz [ 180.707096][ T25] usb 5-1: config 0 descriptor?? [ 180.831998][ T5307] pwc: send_video_command error -71 [ 180.844030][ T5307] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 180.861098][ T5307] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 180.889881][ T5307] usb 1-1: USB disconnect, device number 10 [ 180.935842][ T25] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 181.018740][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.028432][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.064273][ T6070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.174034][ T6151] netlink: 148 bytes leftover after parsing attributes in process `syz.1.231'. [ 181.266355][ T6070] hsr_slave_0: entered promiscuous mode [ 181.278403][ T6070] hsr_slave_1: entered promiscuous mode [ 181.293866][ T6070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.322027][ T6070] Cannot create hsr debugfs directory [ 181.364175][ T5307] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 181.548020][ T5307] usb 1-1: config index 0 descriptor too short (expected 441, got 18) [ 181.558648][ T5307] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 181.570057][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.589205][ T5307] usb 1-1: config 0 descriptor?? [ 181.611279][ T5307] pwc: Askey VC010 type 2 USB webcam detected. [ 181.643623][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 181.722898][ T5276] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 181.763348][ T5242] Bluetooth: hci4: command tx timeout [ 181.812898][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 181.828457][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 181.846794][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 181.862962][ T5276] usb 2-1: device descriptor read/64, error -71 [ 181.870784][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 181.881598][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 181.893335][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 181.930599][ T9] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 181.941556][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.961039][ T25] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 181.981624][ T9] usb 4-1: Product: syz [ 182.001207][ T9] usb 4-1: Manufacturer: syz [ 182.022926][ T5307] pwc: recv_control_msg error -32 req 02 val 2b00 [ 182.029458][ T9] usb 4-1: SerialNumber: syz [ 182.042390][ T5307] pwc: recv_control_msg error -32 req 02 val 2700 [ 182.055952][ T9] usb 4-1: config 0 descriptor?? [ 182.064519][ T5307] pwc: recv_control_msg error -32 req 02 val 2c00 [ 182.090960][ T5307] pwc: recv_control_msg error -32 req 04 val 1000 [ 182.110526][ T5307] pwc: recv_control_msg error -32 req 04 val 1300 [ 182.124962][ T5276] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 182.134811][ T5307] pwc: recv_control_msg error -32 req 04 val 1400 [ 182.153477][ T5307] pwc: recv_control_msg error -32 req 02 val 2000 [ 182.169394][ T5307] pwc: recv_control_msg error -32 req 02 val 2100 [ 182.181113][ T5307] pwc: recv_control_msg error -32 req 04 val 1500 [ 182.189195][ T6070] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.189528][ T5307] pwc: recv_control_msg error -32 req 02 val 2500 [ 182.210162][ T5307] pwc: recv_control_msg error -32 req 02 val 2400 [ 182.219729][ T6070] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.235593][ T5307] pwc: recv_control_msg error -32 req 02 val 2600 [ 182.248235][ T5307] pwc: recv_control_msg error -32 req 02 val 2900 [ 182.257537][ T6070] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.270641][ T5307] pwc: recv_control_msg error -32 req 02 val 2800 [ 182.283246][ T5276] usb 2-1: device descriptor read/64, error -71 [ 182.292023][ T6070] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.303231][ T5307] pwc: recv_control_msg error -71 req 04 val 1100 [ 182.309316][ T9] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 182.321514][ T5307] pwc: recv_control_msg error -71 req 04 val 1200 [ 182.326606][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.344671][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.364602][ T5307] pwc: Registered as video71. [ 182.371175][ T5307] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 182.377391][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.407516][ T5276] usb usb2-port1: attempt power cycle [ 182.418452][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.420211][ T29] audit: type=1400 audit(1729008499.118:253): avc: denied { ioctl } for pid=4659 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2407 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.448227][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.462362][ T5307] usb 1-1: USB disconnect, device number 11 [ 182.479404][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.503506][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.540104][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.550533][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.560438][ T6070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.567607][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.577711][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.597976][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.619253][ T6070] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.621463][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.645495][ T1835] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.652649][ T1835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.659601][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.673289][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.680789][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.690026][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.699069][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.700465][ T1835] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.705643][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 182.712224][ T1835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.722604][ T9] input input12: Timeout waiting for response from device. [ 182.750323][ T9] usb 4-1: USB disconnect, device number 13 [ 182.773517][ T5276] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 182.802141][ T5276] usb 2-1: device descriptor read/8, error -71 [ 182.881357][ T29] audit: type=1400 audit(1729008499.568:254): avc: denied { sys_module } for pid=6070 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 183.053415][ T5276] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 183.112152][ T5276] usb 2-1: device descriptor read/8, error -71 [ 183.204872][ T6070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.226205][ T5276] usb usb2-port1: unable to enumerate USB device [ 183.242144][ T937] usb 5-1: USB disconnect, device number 10 [ 183.391754][ T6070] veth0_vlan: entered promiscuous mode [ 183.903744][ T6070] veth1_vlan: entered promiscuous mode [ 184.028508][ T6070] veth0_macvtap: entered promiscuous mode [ 184.076880][ T6070] veth1_macvtap: entered promiscuous mode [ 184.113535][ T29] audit: type=1326 audit(1729008500.808:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503217dff9 code=0x7ffc0000 [ 184.180772][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.208468][ T29] audit: type=1326 audit(1729008500.818:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503217dff9 code=0x7ffc0000 [ 184.241307][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.251957][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.275920][ T29] audit: type=1326 audit(1729008500.818:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f503217c990 code=0x7ffc0000 [ 184.323037][ T29] audit: type=1326 audit(1729008500.818:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 184.333243][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.346323][ T29] audit: type=1326 audit(1729008500.818:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 184.346376][ T29] audit: type=1326 audit(1729008500.818:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 184.346425][ T29] audit: type=1326 audit(1729008500.818:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 184.426014][ T29] audit: type=1326 audit(1729008500.938:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 184.449323][ T29] audit: type=1326 audit(1729008501.018:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 184.523746][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.353688][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.449544][ T29] audit: type=1326 audit(1729008502.078:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 185.520681][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.551007][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.585955][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.600156][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.695498][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 185.735085][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.759541][ T9] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 185.789153][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.821878][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.836242][ T9] usb 1-1: Product: syz [ 185.840448][ T9] usb 1-1: Manufacturer: syz [ 185.845002][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.872686][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.885853][ T9] usb 1-1: SerialNumber: syz [ 185.904360][ T9] usb 1-1: config 0 descriptor?? [ 185.905951][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.942240][ T9] (null): radio-mr800 - initialization failed [ 185.949395][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.952951][ T9] radio-mr800 1-1:0.0: probe with driver radio-mr800 failed with error -22 [ 185.977513][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.990656][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.017551][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.108758][ T6070] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.133699][ T6070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.162046][ T6070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.169908][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 186.202862][ T6070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.228619][ T6243] EXT4-fs warning (device sda1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 186.249912][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.409682][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.556815][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.069206][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.792891][ T5276] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 187.964999][ T5276] usb 5-1: Using ep0 maxpacket: 32 [ 187.971469][ T5276] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 188.030072][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 188.046136][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 188.068927][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 188.082517][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 188.105609][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.141776][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.280955][ T5276] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 188.327813][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.357745][ T5276] usb 5-1: Product: syz [ 188.374543][ T5276] usb 5-1: Manufacturer: syz [ 188.390319][ T5276] usb 5-1: SerialNumber: syz [ 188.404472][ T5276] usb 5-1: config 0 descriptor?? [ 189.024938][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 189.038090][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.053278][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.068363][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.110652][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.148329][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.168572][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.203353][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.223127][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.249576][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.269444][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.319757][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.356445][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.393194][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.422846][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.469648][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.490738][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 189.537325][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 190.033743][ T5307] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 190.052624][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 190.080183][ T5276] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 190.107121][ T5276] input input14: Timeout waiting for response from device. [ 190.167402][ T5276] usb 5-1: USB disconnect, device number 11 [ 190.243572][ T5307] usb 4-1: Using ep0 maxpacket: 8 [ 190.267016][ T5307] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 190.278750][ T5307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.327189][ T5307] usb 4-1: Product: syz [ 190.331417][ T5307] usb 4-1: Manufacturer: syz [ 190.387307][ T5307] usb 4-1: SerialNumber: syz [ 190.409907][ T5307] usb 4-1: config 0 descriptor?? [ 190.498896][ T937] usb 1-1: USB disconnect, device number 12 [ 190.908666][ T5307] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 190.997571][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 190.997593][ T29] audit: type=1400 audit(1729008507.698:298): avc: denied { connect } for pid=6278 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.273859][ T29] audit: type=1400 audit(1729008507.728:299): avc: denied { write } for pid=6278 comm="syz.1.251" path="socket:[11101]" dev="sockfs" ino=11101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.737756][ T5242] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 192.746483][ T5242] Bluetooth: hci4: Injecting HCI hardware error event [ 192.756030][ T5231] Bluetooth: hci4: hardware error 0x00 [ 192.909591][ T5307] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 193.604412][ T937] usb 4-1: USB disconnect, device number 14 [ 193.745431][ T29] audit: type=1400 audit(1729008510.448:300): avc: denied { relabelfrom } for pid=6326 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 193.782922][ T29] audit: type=1400 audit(1729008510.478:301): avc: denied { relabelto } for pid=6326 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 193.957536][ T5277] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 193.976073][ T29] audit: type=1326 audit(1729008510.678:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503217dff9 code=0x7ffc0000 [ 194.010459][ T29] audit: type=1326 audit(1729008510.678:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503217dff9 code=0x7ffc0000 [ 194.057993][ T29] audit: type=1326 audit(1729008510.678:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f503217c990 code=0x7ffc0000 [ 194.090205][ T29] audit: type=1326 audit(1729008510.678:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 194.119283][ T937] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 194.129833][ T29] audit: type=1326 audit(1729008510.678:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 194.159747][ T29] audit: type=1326 audit(1729008510.708:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 194.187319][ T5277] usb 3-1: Using ep0 maxpacket: 32 [ 194.373297][ T5307] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 194.418939][ T5277] usb 3-1: config 0 has no interfaces? [ 194.813690][ T5231] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 195.393582][ T937] usb 4-1: Using ep0 maxpacket: 16 [ 195.420784][ T5277] usb 3-1: New USB device found, idVendor=0cde, idProduct=001a, bcdDevice=21.32 [ 195.430775][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.439058][ T5277] usb 3-1: Product: syz [ 195.443853][ T5277] usb 3-1: Manufacturer: syz [ 195.448482][ T5277] usb 3-1: SerialNumber: syz [ 195.463016][ T5277] usb 3-1: config 0 descriptor?? [ 195.469469][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 195.499605][ T5307] usb 1-1: Using ep0 maxpacket: 8 [ 195.761869][ T47] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 195.777119][ T5307] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 195.786445][ T937] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 195.795570][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.805139][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.627156][ T937] usb 4-1: Product: syz [ 196.631448][ T937] usb 4-1: Manufacturer: syz [ 196.636220][ T5307] usb 1-1: Product: syz [ 196.640437][ T5307] usb 1-1: Manufacturer: syz [ 196.645348][ T937] usb 4-1: SerialNumber: syz [ 196.650754][ T5307] usb 1-1: SerialNumber: syz [ 196.674094][ T937] usb 4-1: config 0 descriptor?? [ 196.685739][ T5307] usb 1-1: config 0 descriptor?? [ 196.689629][ T5276] usb 3-1: USB disconnect, device number 11 [ 196.697938][ T937] hub 4-1:0.0: bad descriptor, ignoring hub [ 196.704009][ T937] hub 4-1:0.0: probe with driver hub failed with error -5 [ 196.713898][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 196.713915][ T29] audit: type=1326 audit(1729008513.418:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 196.725987][ T937] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 196.759559][ T29] audit: type=1326 audit(1729008513.418:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 196.782978][ T29] audit: type=1326 audit(1729008513.418:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503217dbfb code=0x7ffc0000 [ 196.864360][ T47] usb 2-1: device descriptor read/64, error -71 [ 196.891747][ T5307] (null): radio-mr800 - initialization failed [ 196.918463][ T937] usb 4-1: USB disconnect, device number 15 [ 196.926838][ T5307] radio-mr800 1-1:0.0: probe with driver radio-mr800 failed with error -22 [ 196.936663][ T5307] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 197.266680][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 197.934992][ T47] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 199.463602][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.470454][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.884778][ T29] audit: type=1400 audit(1729008516.548:336): avc: denied { write } for pid=6371 comm="syz.1.275" name="ppp" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 201.442546][ T5307] usb 1-1: USB disconnect, device number 13 [ 202.952960][ T29] audit: type=1326 audit(1729008519.568:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e8d7dff9 code=0x7ffc0000 [ 203.679711][ T29] audit: type=1326 audit(1729008519.568:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49e8d7dff9 code=0x7ffc0000 [ 203.822977][ T29] audit: type=1326 audit(1729008519.578:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49e8d74fa7 code=0x7ffc0000 [ 203.971169][ T29] audit: type=1326 audit(1729008519.578:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49e8d19959 code=0x7ffc0000 [ 204.216443][ T29] audit: type=1326 audit(1729008519.578:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e8d7dff9 code=0x7ffc0000 [ 204.640506][ T29] audit: type=1326 audit(1729008519.598:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49e8d74fa7 code=0x7ffc0000 [ 204.769002][ T29] audit: type=1326 audit(1729008519.598:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49e8d19959 code=0x7ffc0000 [ 204.884916][ T29] audit: type=1326 audit(1729008519.598:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49e8d7c990 code=0x7ffc0000 [ 206.042713][ T29] audit: type=1326 audit(1729008519.598:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e8d7dff9 code=0x7ffc0000 [ 206.066773][ T29] audit: type=1326 audit(1729008519.598:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49e8d74fa7 code=0x7ffc0000 [ 207.253843][ T5276] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 207.651296][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 207.877289][ T5276] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 207.887153][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.896800][ T5276] usb 1-1: Product: syz [ 207.902088][ T5276] usb 1-1: Manufacturer: syz [ 207.921922][ T5276] usb 1-1: SerialNumber: syz [ 208.628725][ T5276] usb 1-1: config 0 descriptor?? [ 212.905576][ T5276] usb 1-1: can't set config #0, error -71 [ 213.002030][ T5276] usb 1-1: USB disconnect, device number 14 [ 214.645081][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 214.645132][ T29] audit: type=1400 audit(1729008531.348:431): avc: denied { execute_no_trans } for pid=6518 comm="syz.4.322" path="/76/file0" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.914878][ T29] audit: type=1400 audit(1729008531.608:432): avc: denied { read write } for pid=6518 comm="syz.4.322" name="video7" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 214.981490][ T29] audit: type=1400 audit(1729008531.608:433): avc: denied { open } for pid=6518 comm="syz.4.322" path="/dev/video7" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 217.664113][ T5242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.674882][ T5242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.683387][ T5242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.691544][ T5242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.743094][ T5242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.750410][ T5242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.763250][ T940] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 217.925373][ T940] usb 5-1: Using ep0 maxpacket: 16 [ 217.932274][ T940] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.951204][ T940] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 217.961170][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.981741][ T940] usb 5-1: config 0 descriptor?? [ 217.996254][ T940] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 218.334225][ T5307] usb 5-1: USB disconnect, device number 12 [ 219.589368][ T6549] pim6reg1: entered promiscuous mode [ 219.603448][ T6549] pim6reg1: entered allmulticast mode [ 219.763215][ T5231] Bluetooth: hci5: command tx timeout [ 219.844656][ T6543] chnl_net:caif_netlink_parms(): no params data found [ 220.474982][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.682888][ T940] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 220.744494][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.860612][ T940] usb 2-1: Using ep0 maxpacket: 16 [ 220.891437][ T940] usb 2-1: config 0 has no interfaces? [ 220.900203][ T940] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 220.933223][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.952018][ T940] usb 2-1: Product: syz [ 221.037452][ T940] usb 2-1: Manufacturer: syz [ 221.042140][ T940] usb 2-1: SerialNumber: syz [ 221.089498][ T940] usb 2-1: config 0 descriptor?? [ 221.165677][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.483113][ T6580] syzkaller0: entered promiscuous mode [ 221.488665][ T6580] syzkaller0: entered allmulticast mode [ 221.845219][ T5231] Bluetooth: hci5: command tx timeout [ 223.126888][ T940] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 223.285349][ T940] usb 1-1: Using ep0 maxpacket: 8 [ 223.307983][ T940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.322253][ T940] usb 1-1: config 0 has no interfaces? [ 223.331225][ T940] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 223.346212][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.359832][ T940] usb 1-1: Product: syz [ 223.372584][ T940] usb 1-1: Manufacturer: syz [ 223.381305][ T940] usb 1-1: SerialNumber: syz [ 223.405728][ T940] usb 1-1: config 0 descriptor?? [ 223.580559][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.926808][ T5231] Bluetooth: hci5: command tx timeout [ 225.736824][ T6543] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.744527][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.752946][ T6543] bridge_slave_0: entered allmulticast mode [ 225.763052][ T6543] bridge_slave_0: entered promiscuous mode [ 225.773198][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.780380][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.789320][ T6543] bridge_slave_1: entered allmulticast mode [ 225.796516][ T6543] bridge_slave_1: entered promiscuous mode [ 225.809403][ T6616] veth0_vlan: entered allmulticast mode [ 225.818881][ T5276] usb 2-1: USB disconnect, device number 18 [ 225.853426][ T6617] veth0_vlan: left promiscuous mode [ 225.864569][ T6617] veth0_vlan: entered promiscuous mode [ 225.959638][ T937] usb 1-1: USB disconnect, device number 15 [ 226.003118][ T5231] Bluetooth: hci5: command tx timeout [ 226.165045][ T6543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.223865][ T6543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.618670][ T6543] team0: Port device team_slave_0 added [ 226.670924][ T11] bridge_slave_1: left allmulticast mode [ 226.699354][ T11] bridge_slave_1: left promiscuous mode [ 226.713813][ T29] audit: type=1400 audit(1729008543.418:434): avc: denied { write } for pid=6631 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 226.760751][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.773367][ T29] audit: type=1400 audit(1729008543.448:435): avc: denied { read } for pid=6631 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 226.820014][ T11] bridge_slave_0: left allmulticast mode [ 226.830589][ T11] bridge_slave_0: left promiscuous mode [ 226.832895][ T29] audit: type=1400 audit(1729008543.528:436): avc: denied { read append } for pid=6626 comm="syz.3.351" name="usbmon7" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 227.692954][ T29] audit: type=1400 audit(1729008543.528:437): avc: denied { open } for pid=6626 comm="syz.3.351" path="/dev/usbmon7" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 227.733168][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.414191][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 228.474924][ T940] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 228.533738][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.557525][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.582674][ T11] bond0 (unregistering): Released all slaves [ 228.588928][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 228.596325][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.613807][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.623890][ T9] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 228.633341][ T940] usb 4-1: Using ep0 maxpacket: 16 [ 228.643863][ T940] usb 4-1: config 0 has no interfaces? [ 228.666700][ T6543] team0: Port device team_slave_1 added [ 228.684947][ T940] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 228.699957][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.712268][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.733951][ T940] usb 4-1: Product: syz [ 228.742440][ T9] usb 1-1: config 0 descriptor?? [ 228.753080][ T940] usb 4-1: Manufacturer: syz [ 228.757753][ T940] usb 4-1: SerialNumber: syz [ 228.802152][ T940] usb 4-1: config 0 descriptor?? [ 228.876636][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.896845][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.929445][ T6543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.194562][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.324946][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.422849][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.433867][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.503114][ T6543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.585292][ T9] usb 1-1: string descriptor 0 read error: -71 [ 229.648615][ T9] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 229.658713][ T9] letsketch 0003:6161:4D15.0007: probe with driver letsketch failed with error -32 [ 229.788870][ T9] usb 1-1: USB disconnect, device number 16 [ 229.860840][ T6543] hsr_slave_0: entered promiscuous mode [ 229.878504][ T6543] hsr_slave_1: entered promiscuous mode [ 229.890525][ T6543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.910581][ T6543] Cannot create hsr debugfs directory [ 229.994892][ T11] hsr_slave_0: left promiscuous mode [ 230.001132][ T11] hsr_slave_1: left promiscuous mode [ 230.016375][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.151026][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.382963][ T29] audit: type=1400 audit(1729008546.968:438): avc: denied { ioctl } for pid=6674 comm="syz.4.362" path="/dev/video2" dev="devtmpfs" ino=849 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 230.897803][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.912492][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.981944][ T11] veth1_macvtap: left promiscuous mode [ 231.064037][ T11] veth0_macvtap: left promiscuous mode [ 231.070349][ T11] veth1_vlan: left promiscuous mode [ 231.092457][ T11] veth0_vlan: left promiscuous mode [ 231.284643][ T6683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.417052][ T47] usb 4-1: USB disconnect, device number 16 [ 232.205120][ T6692] ptrace attach of "./syz-executor exec"[5224] was attempted by "./syz-executor exec"[6692] [ 232.585605][ T29] audit: type=1400 audit(1729008549.288:439): avc: denied { bind } for pid=6693 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.585680][ T6694] Bluetooth: MGMT ver 1.23 [ 233.764003][ T11] team0 (unregistering): Port device team_slave_1 removed [ 233.952438][ T11] team0 (unregistering): Port device team_slave_0 removed [ 235.360543][ T6727] block device autoloading is deprecated and will be removed. [ 235.374584][ T6727] syz.4.373: attempt to access beyond end of device [ 235.374584][ T6727] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 235.964442][ T6729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.271721][ T6733] ptrace attach of "./syz-executor exec"[5232] was attempted by "./syz-executor exec"[6733] [ 236.887650][ T6735] fuse: Bad value for 'fd' [ 238.716917][ T47] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 238.874575][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 238.883723][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 238.894985][ T47] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 238.904786][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.934147][ T47] usb 1-1: config 0 descriptor?? [ 238.967397][ T47] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 239.415800][ T9] usb 1-1: USB disconnect, device number 17 [ 240.623814][ T6764] kAFS: unparsable volume name [ 240.655875][ T6764] afs: Unknown parameter '`' [ 241.421352][ T6768] fuse: Bad value for 'fd' [ 241.428393][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.563776][ T6774] ptrace attach of "./syz-executor exec"[5227] was attempted by "./syz-executor exec"[6774] [ 241.650135][ T29] audit: type=1400 audit(1729008558.348:440): avc: denied { create } for pid=6772 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 241.738317][ T29] audit: type=1400 audit(1729008558.438:441): avc: denied { accept } for pid=6772 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.129769][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'. [ 242.944267][ T29] audit: type=1400 audit(1729008559.608:442): avc: denied { read write } for pid=6788 comm="syz.1.393" name="vhost-vsock" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.964726][ T6543] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 243.015145][ T6543] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 243.074101][ T6543] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 243.091197][ T29] audit: type=1400 audit(1729008559.608:443): avc: denied { open } for pid=6788 comm="syz.1.393" path="/dev/vhost-vsock" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.123492][ T6543] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.196160][ T29] audit: type=1400 audit(1729008559.608:444): avc: denied { ioctl } for pid=6788 comm="syz.1.393" path="/dev/vhost-vsock" dev="devtmpfs" ino=1083 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.384214][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.429621][ T6543] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.461025][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.468244][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.536515][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.543675][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.732827][ T940] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 243.885031][ T940] usb 5-1: Using ep0 maxpacket: 8 [ 243.895970][ T940] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 243.913071][ T940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.983010][ T940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.003408][ T940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.023099][ T940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.083964][ T940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.102868][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.174381][ T29] audit: type=1400 audit(1729008560.858:445): avc: denied { connect } for pid=6814 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 244.235424][ T6543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.353013][ T29] audit: type=1400 audit(1729008561.048:446): avc: denied { write } for pid=6814 comm="syz.3.396" name="001" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 244.384960][ T940] usb 5-1: usb_control_msg returned -32 [ 244.414681][ T940] usbtmc 5-1:16.0: can't read capabilities [ 244.457972][ T6543] veth0_vlan: entered promiscuous mode [ 244.519352][ T6543] veth1_vlan: entered promiscuous mode [ 244.741752][ T6834] usbtmc 5-1:16.0: control status returned 0 [ 244.791938][ T6543] veth0_macvtap: entered promiscuous mode [ 244.822509][ T6543] veth1_macvtap: entered promiscuous mode [ 244.877855][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.914530][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.935469][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.951881][ T47] usb 5-1: USB disconnect, device number 13 [ 245.004324][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.040497][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.055551][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.078823][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.110467][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.181462][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.271806][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.332844][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.358922][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.396282][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.422975][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.445374][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.468005][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.483770][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.648683][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.669861][ T6543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.678994][ T6543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.746936][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 246.442965][ T6543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.451735][ T6543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.539994][ T6857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.896567][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.957429][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.119559][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.131825][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.338680][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 250.206720][ T6917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.556890][ T29] audit: type=1400 audit(1729008567.218:447): avc: denied { create } for pid=6922 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 251.016561][ T29] audit: type=1326 audit(1729008567.718:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21ef7dff9 code=0x7ffc0000 [ 251.083988][ T29] audit: type=1326 audit(1729008567.748:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21ef7dff9 code=0x7ffc0000 [ 251.165697][ T29] audit: type=1326 audit(1729008567.758:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb21ef7c990 code=0x7ffc0000 [ 251.189592][ T29] audit: type=1326 audit(1729008567.768:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 251.226354][ T29] audit: type=1326 audit(1729008567.778:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 251.278626][ T29] audit: type=1326 audit(1729008567.818:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 251.372707][ T937] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 251.686109][ T29] audit: type=1326 audit(1729008567.818:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 252.013021][ T29] audit: type=1326 audit(1729008567.918:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 252.073077][ T937] usb 3-1: Using ep0 maxpacket: 8 [ 252.115942][ T937] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 252.132926][ T29] audit: type=1326 audit(1729008568.018:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 252.156682][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.174193][ T937] usb 3-1: Product: syz [ 252.178362][ T937] usb 3-1: Manufacturer: syz [ 252.200966][ T937] usb 3-1: SerialNumber: syz [ 253.050479][ T937] usb 3-1: config 0 descriptor?? [ 253.157481][ T937] (null): radio-mr800 - initialization failed [ 253.179257][ T937] radio-mr800 3-1:0.0: probe with driver radio-mr800 failed with error -22 [ 253.228844][ T937] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 253.499751][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.518348][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.657297][ T6961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.375973][ T5276] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 255.640039][ T5276] usb 5-1: Using ep0 maxpacket: 16 [ 255.759696][ T5276] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 255.784818][ T5276] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 255.817572][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.046377][ T6982] syzkaller0: entered promiscuous mode [ 256.051926][ T6982] syzkaller0: entered allmulticast mode [ 256.063843][ T5276] usb 5-1: config 0 descriptor?? [ 256.095481][ T5276] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 256.403226][ T9] usb 3-1: USB disconnect, device number 13 [ 256.591403][ T5276] usb 5-1: USB disconnect, device number 14 [ 256.964733][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 257.338342][ T7004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.349275][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 257.360826][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 257.374227][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.418495][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 257.430272][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.479194][ T9] usb 3-1: Product: syz [ 257.509655][ T9] usb 3-1: Manufacturer: syz [ 257.522800][ T9] usb 3-1: SerialNumber: syz [ 257.538898][ T9] usb 3-1: config 0 descriptor?? [ 257.568981][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 257.584506][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 258.198394][ T7014] afs: Unknown parameter '`' [ 260.703043][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 260.728278][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 261.688651][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 261.695894][ T9] em28xx 3-1:0.0: No AC97 audio processor [ 261.734175][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.740521][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.445213][ T47] usb 3-1: USB disconnect, device number 14 [ 262.452278][ T47] em28xx 3-1:0.0: Disconnecting em28xx [ 262.483213][ T47] em28xx 3-1:0.0: Freeing device [ 264.467340][ T5278] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 264.653236][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.663572][ T5278] usb 3-1: config 0 has no interfaces? [ 264.669045][ T5278] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 264.721388][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.770950][ T5278] usb 3-1: config 0 descriptor?? [ 265.065241][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.201734][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.232010][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 265.232032][ T29] audit: type=1400 audit(1729008581.928:526): avc: denied { read } for pid=4659 comm="acpid" name="event4" dev="devtmpfs" ino=2453 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 265.260838][ T29] audit: type=1400 audit(1729008581.928:527): avc: denied { open } for pid=4659 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2453 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 265.413567][ T29] audit: type=1400 audit(1729008581.928:528): avc: denied { ioctl } for pid=4659 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2453 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 266.131098][ T5278] usb 3-1: USB disconnect, device number 15 [ 266.500431][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.691811][ T29] audit: type=1400 audit(1729008583.388:529): avc: denied { create } for pid=7049 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.865874][ T29] audit: type=1400 audit(1729008583.558:530): avc: denied { write } for pid=7049 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.996894][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.006193][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.014850][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.030573][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.039250][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 267.052163][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.053419][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.072914][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.081865][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.106304][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.115740][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 268.123843][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.356593][ T2957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.547554][ T2957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.746772][ T2957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.017719][ T2957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.123028][ T5231] Bluetooth: hci4: command tx timeout [ 269.151457][ T7069] netlink: 'syz.2.464': attribute type 9 has an invalid length. [ 269.166815][ T7069] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.464'. [ 269.287417][ T29] audit: type=1400 audit(1729008585.988:531): avc: denied { read } for pid=7068 comm="syz.2.464" name="sg0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 269.339544][ T29] audit: type=1400 audit(1729008585.988:532): avc: denied { open } for pid=7068 comm="syz.2.464" path="/dev/sg0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 269.366483][ T29] audit: type=1400 audit(1729008586.068:533): avc: denied { read } for pid=7077 comm="syz.1.466" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 269.389924][ T29] audit: type=1400 audit(1729008586.068:534): avc: denied { open } for pid=7077 comm="syz.1.466" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 269.429905][ T29] audit: type=1400 audit(1729008586.128:535): avc: denied { ioctl } for pid=7077 comm="syz.1.466" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 269.489326][ T7054] chnl_net:caif_netlink_parms(): no params data found [ 269.506197][ T7071] netlink: 'syz.2.464': attribute type 9 has an invalid length. [ 269.549221][ T7071] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.464'. [ 269.561653][ T2957] bridge_slave_1: left allmulticast mode [ 269.584876][ T2957] bridge_slave_1: left promiscuous mode [ 269.592649][ T2957] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.630967][ T2957] bridge_slave_0: left allmulticast mode [ 269.655099][ T2957] bridge_slave_0: left promiscuous mode [ 269.672137][ T2957] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.243039][ T5231] Bluetooth: hci0: command tx timeout [ 270.372124][ T2957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.389464][ T2957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.400851][ T2957] bond0 (unregistering): Released all slaves [ 270.413171][ T5276] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 270.477074][ T7062] chnl_net:caif_netlink_parms(): no params data found [ 270.578441][ T5276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.599588][ T5276] usb 1-1: config 0 has no interfaces? [ 270.636857][ T5276] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 270.694740][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.771367][ T5276] usb 1-1: config 0 descriptor?? [ 271.044289][ T5231] Bluetooth: hci5: command 0x0406 tx timeout [ 271.057335][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.080139][ T2957] hsr_slave_0: left promiscuous mode [ 271.081381][ T7112] syz.1.473 uses obsolete (PF_INET,SOCK_PACKET) [ 271.108900][ T2957] hsr_slave_1: left promiscuous mode [ 271.123913][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.137134][ T47] usb 1-1: USB disconnect, device number 18 [ 271.202869][ T5242] Bluetooth: hci4: command tx timeout [ 271.314863][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.332676][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.342661][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.374490][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.513146][ T5307] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 271.530141][ T2957] veth1_macvtap: left promiscuous mode [ 271.577013][ T2957] veth0_macvtap: left promiscuous mode [ 271.596652][ T2957] veth1_vlan: left promiscuous mode [ 271.616066][ T2957] veth0_vlan: left promiscuous mode [ 271.696347][ T5307] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.723671][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 271.749807][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 271.784123][ T5307] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.812878][ T5307] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.839579][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.866105][ T5307] usb 3-1: config 0 descriptor?? [ 272.324188][ T5242] Bluetooth: hci0: command tx timeout [ 272.842536][ T5307] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 272.941343][ T5242] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 272.951019][ T5242] Bluetooth: hci5: Injecting HCI hardware error event [ 272.960328][ T5242] Bluetooth: hci5: hardware error 0x00 [ 273.007833][ T5307] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 273.195761][ T5307] usb 3-1: USB disconnect, device number 16 [ 273.283951][ T5231] Bluetooth: hci4: command tx timeout [ 274.236617][ T29] audit: type=1400 audit(1729008590.628:536): avc: denied { read } for pid=7133 comm="syz.0.478" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 274.269090][ T29] audit: type=1400 audit(1729008590.628:537): avc: denied { open } for pid=7133 comm="syz.0.478" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 274.386424][ T29] audit: type=1400 audit(1729008590.678:538): avc: denied { ioctl } for pid=7133 comm="syz.0.478" path="/newroot/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 274.413223][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.431063][ T5231] Bluetooth: hci0: command tx timeout [ 274.945436][ T2957] team0 (unregistering): Port device team_slave_1 removed [ 275.014256][ T2957] team0 (unregistering): Port device team_slave_0 removed [ 275.125398][ T5242] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 275.362881][ T5242] Bluetooth: hci4: command tx timeout [ 275.682940][ T7054] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.690087][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.712502][ T7054] bridge_slave_0: entered allmulticast mode [ 275.773833][ T29] audit: type=1400 audit(1729008592.468:539): avc: denied { mount } for pid=7144 comm="syz.2.482" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 275.801456][ T7054] bridge_slave_0: entered promiscuous mode [ 275.896128][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.904076][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.912236][ T7062] bridge_slave_0: entered allmulticast mode [ 275.920585][ T7062] bridge_slave_0: entered promiscuous mode [ 275.930346][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.938024][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.945661][ T7062] bridge_slave_1: entered allmulticast mode [ 275.953574][ T7062] bridge_slave_1: entered promiscuous mode [ 275.964963][ T7054] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.974896][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.983535][ T7054] bridge_slave_1: entered allmulticast mode [ 276.007835][ T7054] bridge_slave_1: entered promiscuous mode [ 276.151964][ T7062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.182379][ T7062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.206853][ T7054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.283861][ T940] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 276.312959][ T7154] 9pnet_fd: Insufficient options for proto=fd [ 276.348998][ T7054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.435372][ T7062] team0: Port device team_slave_0 added [ 276.455460][ T940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.462461][ T7062] team0: Port device team_slave_1 added [ 276.485427][ T5242] Bluetooth: hci0: command tx timeout [ 276.493223][ T940] usb 3-1: config 0 has no interfaces? [ 276.510449][ T940] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 276.519818][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.540260][ T940] usb 3-1: config 0 descriptor?? [ 276.574610][ T7054] team0: Port device team_slave_0 added [ 276.642457][ T7054] team0: Port device team_slave_1 added [ 276.701885][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.719320][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.746111][ T7062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.765554][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.808037][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.835383][ T47] usb 3-1: USB disconnect, device number 17 [ 276.876947][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.908629][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.942284][ T7054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.966204][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.979655][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.016713][ T7062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.058584][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.079205][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.114818][ T7054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.171777][ T29] audit: type=1400 audit(1729008593.868:540): avc: denied { write } for pid=7177 comm="syz.0.492" path="socket:[15975]" dev="sockfs" ino=15975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.195101][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.246321][ T7054] hsr_slave_0: entered promiscuous mode [ 277.258017][ T7054] hsr_slave_1: entered promiscuous mode [ 277.336696][ T7062] hsr_slave_0: entered promiscuous mode [ 277.349552][ T7062] hsr_slave_1: entered promiscuous mode [ 277.357453][ T7062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.391341][ T7062] Cannot create hsr debugfs directory [ 277.558984][ T2957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.689305][ T2957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.700174][ T29] audit: type=1400 audit(1729008594.398:541): avc: denied { create } for pid=7188 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 277.739203][ T29] audit: type=1400 audit(1729008594.398:542): avc: denied { read } for pid=7188 comm="syz.2.494" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 277.796332][ T29] audit: type=1400 audit(1729008594.398:543): avc: denied { open } for pid=7188 comm="syz.2.494" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 277.868321][ T2957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.017115][ T2957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.219073][ T7203] 9pnet_fd: Insufficient options for proto=fd [ 278.241222][ T29] audit: type=1400 audit(1729008594.928:544): avc: denied { unlink } for pid=7194 comm="syz.2.495" name="#1" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 278.312943][ T29] audit: type=1400 audit(1729008594.938:545): avc: denied { mount } for pid=7194 comm="syz.2.495" name="/" dev="overlay" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 278.438019][ T2957] bridge_slave_1: left allmulticast mode [ 278.458084][ T2957] bridge_slave_1: left promiscuous mode [ 278.478570][ T2957] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.539219][ T2957] bridge_slave_0: left allmulticast mode [ 278.548403][ T2957] bridge_slave_0: left promiscuous mode [ 278.565932][ T2957] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.559378][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 279.559399][ T29] audit: type=1400 audit(1729008596.258:548): avc: denied { unmount } for pid=6543 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 280.842909][ T47] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 280.879322][ T29] audit: type=1400 audit(1729008597.578:549): avc: denied { mounton } for pid=7228 comm="syz.0.502" path="mnt:[4026532950]" dev="nsfs" ino=4026532950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 281.039285][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.072947][ T47] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 281.875193][ T47] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 281.893284][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.429133][ T47] usb 3-1: config 0 descriptor?? [ 282.576840][ T2957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.598210][ T2957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.616586][ T2957] bond0 (unregistering): Released all slaves [ 282.687964][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.709651][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.759403][ T47] usb 3-1: USB disconnect, device number 18 [ 283.303014][ T2957] hsr_slave_0: left promiscuous mode [ 283.323277][ T2957] hsr_slave_1: left promiscuous mode [ 283.353769][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.385094][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.406633][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.424934][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.472292][ T2957] veth1_macvtap: left promiscuous mode [ 283.496176][ T2957] veth0_macvtap: left promiscuous mode [ 283.501864][ T2957] veth1_vlan: left promiscuous mode [ 283.523227][ T2957] veth0_vlan: left promiscuous mode [ 283.859213][ T47] hid-generic 0000:0000:0000.0009: unknown main item tag 0x4 [ 283.895996][ T47] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 284.000650][ T47] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 284.134825][ T47] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2 [ 284.143542][ T47] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 284.152133][ T47] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 284.223382][ T47] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 284.270280][ T47] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 284.295949][ T47] hid-generic 0000:0000:0000.0009: item fetching failed at offset 8/43 [ 284.411115][ T47] hid-generic 0000:0000:0000.0009: probe with driver hid-generic failed with error -22 [ 286.004626][ T940] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 286.381345][ T940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.425493][ T29] audit: type=1400 audit(1729008603.128:550): avc: denied { name_bind } for pid=7284 comm="syz.1.517" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 286.432857][ T940] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 286.446240][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.553500][ T940] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 286.566283][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.587850][ T940] usb 1-1: config 0 descriptor?? [ 286.689101][ T2957] team0 (unregistering): Port device team_slave_1 removed [ 286.867451][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.886575][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.895781][ T2957] team0 (unregistering): Port device team_slave_0 removed [ 286.927097][ T940] usb 1-1: USB disconnect, device number 19 [ 288.124472][ T5276] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 288.303552][ T5276] usb 1-1: Using ep0 maxpacket: 16 [ 288.311041][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.334675][ T5276] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.359465][ T5276] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 288.747645][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.931148][ T5276] usb 1-1: config 0 descriptor?? [ 289.066664][ T7062] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.097245][ T7062] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.124125][ T7062] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.220062][ T7062] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.335337][ T7062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.354699][ T5276] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 289.354873][ T7062] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.374284][ T7054] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.422337][ T5276] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 289.436865][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.444035][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.470726][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.477927][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.492094][ T5276] microsoft 0003:045E:07DA.000A: no inputs found [ 289.499954][ T5276] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 289.517391][ T7054] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.559484][ T7054] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.572428][ T7054] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.612945][ T25] usb 1-1: USB disconnect, device number 20 [ 289.750550][ T7054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.799186][ T7054] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.831027][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.838177][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.874494][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.881644][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.982188][ T7062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.370307][ T7054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.403318][ T25] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 290.453849][ T7054] veth0_vlan: entered promiscuous mode [ 290.475944][ T7054] veth1_vlan: entered promiscuous mode [ 290.548327][ T7062] veth0_vlan: entered promiscuous mode [ 290.568863][ T7054] veth0_macvtap: entered promiscuous mode [ 290.575151][ T5278] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 290.586642][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.600724][ T7062] veth1_vlan: entered promiscuous mode [ 290.601468][ T25] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 290.617390][ T25] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 290.626629][ T7054] veth1_macvtap: entered promiscuous mode [ 290.646193][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.667742][ T25] usb 3-1: config 0 descriptor?? [ 290.680992][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.700612][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.711210][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.721877][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.732467][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.743645][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.759708][ T7054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.772350][ T7062] veth0_macvtap: entered promiscuous mode [ 290.773140][ T5278] usb 1-1: Using ep0 maxpacket: 16 [ 290.796124][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 290.811622][ T5278] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 290.815415][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.835066][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.841667][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.852787][ T5278] usb 1-1: Product: syz [ 290.854892][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.862902][ T5278] usb 1-1: Manufacturer: syz [ 290.868778][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.872513][ T5278] usb 1-1: SerialNumber: syz [ 290.893644][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.904538][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.916568][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.928962][ T7054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.936927][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.946811][ T5278] usb 1-1: config 0 descriptor?? [ 290.958711][ T9] usb 3-1: USB disconnect, device number 19 [ 290.975204][ T7054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.011159][ T7054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.024548][ T7054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.037745][ T7054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.068415][ T7062] veth1_macvtap: entered promiscuous mode [ 291.109224][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.121522][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.132498][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.146676][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.157054][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.167994][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.210493][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.240542][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.261958][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.285641][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.307591][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.323093][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.340290][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.351241][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.362329][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.374923][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.388387][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.404134][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.421844][ T7062] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.438907][ T7062] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.468207][ T7062] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.493489][ T7062] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.871409][ T6554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.584929][ T6554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.026456][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.035720][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.047256][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.055208][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.136115][ T6554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.147872][ T6554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.349838][ T5307] usb 1-1: USB disconnect, device number 21 [ 294.072973][ T47] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 294.289292][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 294.699576][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.709851][ T47] usb 4-1: config 0 has no interfaces? [ 294.715491][ T47] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 294.725253][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.929127][ T29] audit: type=1326 audit(1729008611.598:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21ef7dff9 code=0x7ffc0000 [ 294.994864][ T29] audit: type=1326 audit(1729008611.598:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21ef7dff9 code=0x7ffc0000 [ 295.043754][ T47] usb 4-1: config 0 descriptor?? [ 295.100113][ T29] audit: type=1326 audit(1729008611.598:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb21ef7c990 code=0x7ffc0000 [ 295.192344][ T29] audit: type=1326 audit(1729008611.608:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 295.299371][ T29] audit: type=1326 audit(1729008611.608:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 295.361545][ T29] audit: type=1326 audit(1729008611.728:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 295.387691][ T29] audit: type=1326 audit(1729008611.728:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 295.410870][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.412945][ T5307] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 295.417121][ T29] audit: type=1326 audit(1729008611.978:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 295.447685][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.462850][ T29] audit: type=1326 audit(1729008612.038:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 295.533509][ T29] audit: type=1326 audit(1729008612.228:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb21ef7dbfb code=0x7ffc0000 [ 295.612638][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'. [ 295.746985][ T5307] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.787603][ T5307] usb 3-1: config 0 has no interfaces? [ 295.816950][ T5307] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 295.857045][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.890795][ T5307] usb 3-1: config 0 descriptor?? [ 297.336075][ T47] usb 4-1: USB disconnect, device number 17 [ 297.483817][ T7425] ALSA: seq fatal error: cannot create timer (-22) [ 297.690910][ T7470] ptrace attach of "./syz-executor exec"[5232] was attempted by "./syz-executor exec"[7470] [ 301.347887][ T7513] ptrace attach of "./syz-executor exec"[5227] was attempted by "./syz-executor exec"[7513] [ 301.813314][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 301.991962][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.045861][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 302.074666][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 302.112858][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.454614][ T9] usb 4-1: config 0 descriptor?? [ 302.630806][ T9] usb 3-1: USB disconnect, device number 20 [ 302.713638][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.735677][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.750265][ T937] usb 4-1: USB disconnect, device number 18 [ 303.055245][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 303.055268][ T29] audit: type=1400 audit(1729008619.758:603): avc: denied { sqpoll } for pid=7547 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 303.401086][ T7556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.423513][ T7578] ptrace attach of "./syz-executor exec"[7054] was attempted by "./syz-executor exec"[7578] [ 306.433522][ T7604] input: syz1 as /devices/virtual/input/input17 [ 306.451118][ T29] audit: type=1326 audit(1729008623.148:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9ef7dff9 code=0x7ffc0000 [ 306.474370][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.526360][ T7587] vivid-007: ================= START STATUS ================= [ 306.548142][ T29] audit: type=1326 audit(1729008623.188:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9ef7dff9 code=0x7ffc0000 [ 306.571437][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.579711][ T7587] vivid-007: Enable Output Cropping: true [ 306.592833][ T7587] vivid-007: Enable Output Composing: true [ 306.602993][ T7587] vivid-007: Enable Output Scaler: true [ 306.610810][ T7587] vivid-007: Tx RGB Quantization Range: Automatic [ 306.622029][ T7587] vivid-007: Transmit Mode: HDMI [ 306.633723][ T7587] vivid-007: Hotplug Present: 0x00000000 [ 306.645268][ T7587] vivid-007: RxSense Present: 0x00000000 [ 306.655619][ T7587] vivid-007: EDID Present: 0x00000000 [ 306.668056][ T7587] vivid-007: ================== END STATUS ================== [ 306.714024][ T29] audit: type=1326 audit(1729008623.248:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b9ef7c990 code=0x7ffc0000 [ 306.873561][ T29] audit: type=1326 audit(1729008623.278:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b9ef7dbfb code=0x7ffc0000 [ 306.901722][ T29] audit: type=1326 audit(1729008623.288:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b9ef7dbfb code=0x7ffc0000 [ 306.924905][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.931413][ T29] audit: type=1326 audit(1729008623.498:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b9ef7dbfb code=0x7ffc0000 [ 306.954581][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.966754][ T29] audit: type=1326 audit(1729008623.498:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b9ef7dbfb code=0x7ffc0000 [ 306.989876][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.229701][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.575'. [ 307.373028][ T47] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 307.587538][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.603661][ T47] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 307.653499][ T47] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 307.663019][ T29] audit: type=1400 audit(1729008624.348:611): avc: denied { create } for pid=7614 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 307.689589][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.718865][ T47] usb 4-1: config 0 descriptor?? [ 307.941370][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.996886][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.015291][ T9] usb 4-1: USB disconnect, device number 19 [ 308.944608][ T7622] ptrace attach of "./syz-executor exec"[5227] was attempted by "./syz-executor exec"[7622] [ 309.626895][ T7637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.732836][ T29] audit: type=1400 audit(1729008627.428:612): avc: denied { create } for pid=7655 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 310.813666][ T7656] Cannot find add_set index 0 as target [ 310.860904][ T7656] Bluetooth: MGMT ver 1.23 [ 310.866704][ T29] audit: type=1400 audit(1729008627.508:613): avc: denied { write } for pid=7655 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.230797][ T29] audit: type=1400 audit(1729008627.558:614): avc: denied { create } for pid=7655 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 312.735235][ T7673] ptrace attach of "./syz-executor exec"[7054] was attempted by "./syz-executor exec"[7673] [ 313.732803][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 313.894750][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.934953][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 313.968507][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 314.011246][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.062613][ T29] audit: type=1400 audit(1729008630.758:615): avc: denied { bind } for pid=7681 comm="syz.4.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.091034][ T29] audit: type=1400 audit(1729008630.758:616): avc: denied { append } for pid=7681 comm="syz.4.600" name="001" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 314.092611][ T9] usb 1-1: config 0 descriptor?? [ 314.152545][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 314.166824][ T29] audit: type=1400 audit(1729008630.868:617): avc: denied { write } for pid=7684 comm="syz.3.601" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 314.168900][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 314.210686][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 314.225842][ T7685] netlink: 'syz.3.601': attribute type 2 has an invalid length. [ 314.226334][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 314.241514][ T9] usb 1-1: media controller created [ 314.250099][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.273446][ T29] audit: type=1400 audit(1729008630.918:618): avc: denied { ioctl } for pid=7684 comm="syz.3.601" path="/dev/sg0" dev="devtmpfs" ino=693 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 314.278887][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 314.308250][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 314.341914][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 314.394245][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 314.412779][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 314.440231][ T9] usb 1-1: USB disconnect, device number 22 [ 314.498167][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 315.220872][ T937] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 315.466939][ T47] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 315.492297][ T937] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 315.705248][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 315.751120][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 315.810731][ T937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.087643][ T937] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.098466][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.101748][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 316.110053][ T47] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 316.126552][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.140151][ T937] usb 4-1: config 0 descriptor?? [ 316.146511][ T47] usb 1-1: config 0 descriptor?? [ 316.249395][ T7716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.301349][ T29] audit: type=1400 audit(1729008632.998:619): avc: denied { map } for pid=7713 comm="syz.2.612" path="socket:[17252]" dev="sockfs" ino=17252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 316.352323][ T29] audit: type=1400 audit(1729008632.998:620): avc: denied { read } for pid=7713 comm="syz.2.612" path="socket:[17252]" dev="sockfs" ino=17252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 316.646458][ T937] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 316.696527][ T937] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 316.830295][ T940] usb 4-1: USB disconnect, device number 20 [ 317.223175][ T47] usb 1-1: Cannot set autoneg [ 317.228056][ T47] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 317.475349][ T7730] input: syz1 as /devices/virtual/input/input19 [ 317.944275][ T47] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 317.990809][ T7737] fuse: Bad value for 'group_id' [ 317.996308][ T7737] fuse: Bad value for 'group_id' [ 318.064316][ T29] audit: type=1400 audit(1729008634.768:621): avc: denied { mount } for pid=7739 comm="syz.1.622" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 318.085748][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.102039][ T29] audit: type=1400 audit(1729008634.798:622): avc: denied { unmount } for pid=5232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 318.120825][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.139097][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 318.150935][ T47] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 318.167838][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.187119][ T47] usb 4-1: config 0 descriptor?? [ 318.198695][ T47] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 318.205543][ T47] dvb-usb: bulk message failed: -22 (3/0) [ 318.218817][ T47] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 318.228480][ T47] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 318.236101][ T47] usb 4-1: media controller created [ 318.253973][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.268548][ T47] dvb-usb: bulk message failed: -22 (6/0) [ 318.275681][ T47] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 318.283897][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 318.285166][ T47] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 318.325586][ T47] dvb-usb: schedule remote query interval to 150 msecs. [ 318.332607][ T47] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 318.436823][ T937] usb 4-1: USB disconnect, device number 21 [ 318.452949][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 318.466476][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.497246][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.505619][ T47] usb 1-1: USB disconnect, device number 23 [ 318.531342][ T937] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 318.546879][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 318.566319][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.633285][ T9] usb 3-1: config 0 descriptor?? [ 319.075572][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.203170][ T7764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.214734][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.230431][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 319.236746][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 319.252991][ T9] usb 3-1: USB disconnect, device number 21 [ 319.490586][ T7766] fuse: Bad value for 'group_id' [ 319.501291][ T7766] fuse: Bad value for 'group_id' [ 320.100421][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 320.292375][ T29] audit: type=1326 audit(1729008636.988:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.3.633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe996b7dff9 code=0x0 [ 320.315046][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.757670][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.770575][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 320.782090][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 321.346880][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.419636][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.439329][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.515731][ T25] usb 5-1: config 0 descriptor?? [ 321.547216][ T7787] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=7787 comm=syz.2.639 [ 321.863056][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 322.304069][ T25] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 322.332737][ T940] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 322.345877][ T25] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 322.351364][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.434691][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.472625][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 322.482101][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.492617][ T9] usb 1-1: config 0 descriptor?? [ 322.512630][ T25] usb 5-1: USB disconnect, device number 15 [ 322.615870][ T940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.626304][ T940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 322.635317][ T940] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 322.644735][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.656267][ T940] usb 3-1: config 0 descriptor?? [ 322.670676][ T940] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 322.685739][ T940] dvb-usb: bulk message failed: -22 (3/0) [ 322.697733][ T940] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 322.727081][ T940] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 322.735101][ T940] usb 3-1: media controller created [ 322.756030][ T940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.770413][ T940] dvb-usb: bulk message failed: -22 (6/0) [ 322.785498][ T940] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 322.810626][ T940] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 322.826345][ T940] dvb-usb: schedule remote query interval to 150 msecs. [ 322.833431][ T940] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 322.877466][ T25] usb 3-1: USB disconnect, device number 22 [ 322.911419][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 323.047523][ T5276] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 323.219517][ T5276] usb 4-1: Using ep0 maxpacket: 16 [ 323.237477][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.250344][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.260542][ T5276] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 323.270324][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.289473][ T5276] usb 4-1: config 0 descriptor?? [ 323.703680][ T9] usb 1-1: Cannot set autoneg [ 323.815352][ T9] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 323.894887][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.972599][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.117323][ T29] audit: type=1400 audit(1729008640.818:624): avc: denied { mount } for pid=7810 comm="syz.2.650" name="/" dev="ramfs" ino=18689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 324.182670][ T29] audit: type=1400 audit(1729008640.878:625): avc: denied { unmount } for pid=6543 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 324.764510][ T5276] usbhid 4-1:0.0: can't add hid device: -71 [ 324.802885][ T5276] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 325.005106][ T5276] usb 4-1: USB disconnect, device number 22 [ 325.048019][ T25] usb 1-1: USB disconnect, device number 24 [ 326.982946][ T29] audit: type=1400 audit(1729008643.248:626): avc: denied { map } for pid=7834 comm="syz.2.657" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 327.010208][ T7837] netlink: 168 bytes leftover after parsing attributes in process `syz.2.657'. [ 327.581099][ T29] audit: type=1400 audit(1729008644.278:627): avc: denied { name_connect } for pid=7857 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 327.712896][ T5276] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 327.722037][ T29] audit: type=1400 audit(1729008644.418:628): avc: denied { getopt } for pid=7857 comm="syz.0.665" lport=40546 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.743876][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 327.780827][ T29] audit: type=1400 audit(1729008644.478:629): avc: denied { shutdown } for pid=7857 comm="syz.0.665" laddr=fe80::12 lport=40546 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.894751][ T5276] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.905562][ T5276] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 327.920282][ T5276] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 327.923582][ T25] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 327.929637][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.955024][ T5276] usb 5-1: config 0 descriptor?? [ 327.965192][ T5276] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 327.969854][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 327.977239][ T5276] dvb-usb: bulk message failed: -22 (3/0) [ 327.990428][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.000331][ T5276] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 328.009475][ T25] usb 3-1: Product: syz [ 328.017281][ T5276] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 328.022789][ T25] usb 3-1: Manufacturer: syz [ 328.026362][ T5276] usb 5-1: media controller created [ 328.028924][ T25] usb 3-1: SerialNumber: syz [ 328.047499][ T5276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.051584][ T25] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 328.075649][ T5276] dvb-usb: bulk message failed: -22 (6/0) [ 328.091843][ T5276] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 328.095700][ T937] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 328.157178][ T5276] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 328.180549][ T7849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.199802][ T7849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.209735][ T5276] dvb-usb: schedule remote query interval to 150 msecs. [ 328.226649][ T5276] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 328.275991][ T5276] usb 5-1: USB disconnect, device number 16 [ 328.333757][ T5276] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 328.581631][ T940] usb 3-1: USB disconnect, device number 23 [ 329.123153][ T937] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 329.132452][ T937] ath9k_htc: Failed to initialize the device [ 329.141189][ T940] usb 3-1: ath9k_htc: USB layer deinitialized [ 331.168637][ T7892] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 334.000413][ T29] audit: type=1400 audit(1729008649.258:630): avc: denied { bind } for pid=7907 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.292827][ T940] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 334.300588][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 334.463574][ T940] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 334.477524][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.494594][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 334.516981][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 334.539054][ T940] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 334.552944][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.561831][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.582783][ T940] usb 4-1: Product: syz [ 334.603321][ T9] usb 3-1: config 0 descriptor?? [ 334.618685][ T940] usb 4-1: Manufacturer: syz [ 334.643062][ T940] usb 4-1: SerialNumber: syz [ 334.652244][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 334.674232][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 334.698484][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 334.718349][ T940] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 334.739038][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 334.762969][ T5276] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 334.780669][ T9] usb 3-1: media controller created [ 334.804769][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.863138][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.864848][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 334.879431][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.902966][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 334.925583][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 334.951232][ T7931] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 334.988756][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 335.012861][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 335.052987][ T9] usb 3-1: USB disconnect, device number 24 [ 335.165656][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 335.337872][ T940] usb 4-1: USB disconnect, device number 23 [ 335.518184][ T29] audit: type=1400 audit(1729008652.218:631): avc: denied { append } for pid=7937 comm="syz.0.693" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 335.518804][ T7938] random: crng reseeded on system resumption [ 335.543028][ T5307] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 335.569153][ T29] audit: type=1400 audit(1729008652.218:632): avc: denied { open } for pid=7937 comm="syz.0.693" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 335.722810][ T5307] usb 5-1: Using ep0 maxpacket: 16 [ 335.730941][ T5307] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 335.742979][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 335.763701][ T5307] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 335.773299][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.788275][ T5307] usb 5-1: config 0 descriptor?? [ 335.804932][ T5307] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 335.843099][ T5276] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 335.864991][ T5276] ath9k_htc: Failed to initialize the device [ 335.881358][ T940] usb 4-1: ath9k_htc: USB layer deinitialized [ 336.373083][ T29] audit: type=1400 audit(1729074417.932:633): avc: denied { create } for pid=7945 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 336.539862][ T29] audit: type=1400 audit(1729074417.952:634): avc: denied { write } for pid=7945 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 336.560765][ T29] audit: type=1400 audit(1729074418.212:635): avc: denied { ioctl } for pid=7937 comm="syz.0.693" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 336.664991][ T937] usb 5-1: USB disconnect, device number 17 [ 337.196807][ T7966] program syz.3.698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.509736][ T29] audit: type=1400 audit(1729074419.112:636): avc: denied { bind } for pid=7961 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 337.889211][ T6004] udevd[6004]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 338.012805][ T940] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 338.095581][ T7972] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 338.402886][ T940] usb 1-1: Using ep0 maxpacket: 16 [ 338.403336][ T25] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 338.409982][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.427614][ T940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 338.617301][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.751135][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 338.909967][ T25] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 339.135632][ T940] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.144840][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.148617][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.179951][ T940] usb 1-1: config 0 descriptor?? [ 339.218524][ T25] usb 4-1: config 0 descriptor?? [ 339.249392][ T25] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 339.262581][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 339.284079][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 339.300035][ T25] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 339.315134][ T25] usb 4-1: media controller created [ 339.322666][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.360486][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 339.366799][ T25] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 339.399008][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 339.440059][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 339.447390][ T25] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 339.530864][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.542624][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.632801][ T5276] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 340.677378][ T940] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 340.754925][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 340.761017][ T25] dvb-usb: error while querying for an remote control event. [ 341.193327][ T940] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 341.197441][ T937] dvb-usb: bulk message failed: -22 (1/0) [ 341.206892][ T940] microsoft 0003:045E:07DA.000D: no inputs found [ 341.212850][ T937] dvb-usb: error while querying for an remote control event. [ 341.222841][ T940] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 341.243521][ T25] usb 4-1: USB disconnect, device number 24 [ 341.253392][ T5276] usb 5-1: Using ep0 maxpacket: 16 [ 341.332291][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 341.472877][ T5307] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 341.598426][ T5276] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 341.610037][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 341.622985][ T940] usb 1-1: USB disconnect, device number 25 [ 341.632068][ T5276] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 341.655835][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.676577][ T5276] usb 5-1: config 0 descriptor?? [ 341.698387][ T5276] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 341.795977][ T5307] usb 3-1: Using ep0 maxpacket: 16 [ 341.933793][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.945693][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.959892][ T5307] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 341.973610][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.023461][ T5307] usb 3-1: config 0 descriptor?? [ 342.278304][ T25] usb 5-1: USB disconnect, device number 18 [ 342.608632][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.635400][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.889371][ T5307] usbhid 3-1:0.0: can't add hid device: -71 [ 342.957741][ T5307] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 342.985229][ T5307] usb 3-1: USB disconnect, device number 25 [ 343.504053][ T29] audit: type=1400 audit(1729074425.192:637): avc: denied { ioctl } for pid=8031 comm="syz.1.724" path="/dev/usbmon9" dev="devtmpfs" ino=733 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 343.529113][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.650509][ T29] audit: type=1400 audit(1729074425.342:638): avc: denied { map } for pid=8034 comm="syz.2.725" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 343.678240][ T8035] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN PTI [ 343.690903][ T8035] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 343.699338][ T8035] CPU: 0 UID: 0 PID: 8035 Comm: syz.2.725 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 343.709953][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.720022][ T8035] RIP: 0010:follow_pfnmap_start+0x115/0xdc0 [ 343.725959][ T8035] Code: 48 c1 ea 03 80 3c 02 00 0f 85 10 0b 00 00 4c 8b bd 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d3 0a 00 00 48 c7 c0 18 72 5f 90 49 8b 57 58 48 [ 343.745586][ T8035] RSP: 0000:ffffc90003d67468 EFLAGS: 00010202 [ 343.751683][ T8035] RAX: dffffc0000000000 RBX: ffffc90003d67548 RCX: ffffc90018a85000 [ 343.759674][ T8035] RDX: 000000000000000b RSI: ffffffff81d50caa RDI: 0000000000000058 [ 343.767659][ T8035] RBP: ffff88802ff60ba0 R08: 0000000000000007 R09: 0000000000000000 [ 343.775657][ T8035] R10: 0000000001000000 R11: 0000000000000000 R12: 0000000020ff9000 [ 343.783650][ T8035] R13: 1ffff920007ace91 R14: ffff88802ebeb900 R15: 0000000000000000 [ 343.791640][ T8035] FS: 00007fb21fe396c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 343.800590][ T8035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.807198][ T8035] CR2: 000000110c358712 CR3: 000000007c65e000 CR4: 00000000003526f0 [ 343.815187][ T8035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.823164][ T8035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.831141][ T8035] Call Trace: [ 343.834427][ T8035] [ 343.837454][ T8035] ? die_addr+0x3b/0xa0 [ 343.841644][ T8035] ? exc_general_protection+0x155/0x230 [ 343.847231][ T8035] ? asm_exc_general_protection+0x26/0x30 [ 343.852969][ T8035] ? follow_pfnmap_start+0x6a/0xdc0 [ 343.858197][ T8035] ? follow_pfnmap_start+0x115/0xdc0 [ 343.863509][ T8035] ? follow_pfnmap_start+0x6a/0xdc0 [ 343.868732][ T8035] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 343.874903][ T8035] ? __pfx_follow_pfnmap_start+0x10/0x10 [ 343.880559][ T8035] ? hlock_class+0x4e/0x130 [ 343.885088][ T8035] ? __lock_acquire+0x163e/0x3ce0 [ 343.890137][ T8035] get_pat_info+0x118/0x320 [ 343.894664][ T8035] ? __pfx_get_pat_info+0x10/0x10 [ 343.899707][ T8035] ? __pfx_stack_trace_save+0x10/0x10 [ 343.905097][ T8035] untrack_pfn+0xf7/0x4d0 [ 343.909451][ T8035] ? __pfx_untrack_pfn+0x10/0x10 [ 343.914403][ T8035] ? unmap_vmas+0x1d1/0x490 [ 343.918930][ T8035] ? __pfx_lock_release+0x10/0x10 [ 343.923968][ T8035] ? trace_lock_acquire+0x14a/0x1d0 [ 343.929190][ T8035] unmap_single_vma+0x1bd/0x2b0 [ 343.934060][ T8035] unmap_vmas+0x22f/0x490 [ 343.938407][ T8035] ? __pfx_unmap_vmas+0x10/0x10 [ 343.943271][ T8035] ? __pfx_lock_release+0x10/0x10 [ 343.948319][ T8035] ? lock_acquire+0x2f/0xb0 [ 343.952846][ T8035] ? mlock_drain_local+0x6f/0x4f0 [ 343.957898][ T8035] unmap_region+0x201/0x480 [ 343.962424][ T8035] ? __pfx_unmap_region+0x10/0x10 [ 343.967482][ T8035] mmap_region+0x1c0a/0x2a60 [ 343.972115][ T8035] ? __pfx_mmap_region+0x10/0x10 [ 343.977091][ T8035] ? mark_held_locks+0x9f/0xe0 [ 343.981881][ T8035] ? bpf_lsm_mmap_addr+0x9/0x10 [ 343.986750][ T8035] ? security_mmap_addr+0x6c/0x1e0 [ 343.991891][ T8035] ? __get_unmapped_area+0x26b/0x3a0 [ 343.997203][ T8035] do_mmap+0xc00/0xfc0 [ 344.001292][ T8035] vm_mmap_pgoff+0x1ba/0x360 [ 344.005927][ T8035] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 344.011059][ T8035] ? __fget_files+0x244/0x3f0 [ 344.015762][ T8035] ksys_mmap_pgoff+0x32c/0x5c0 [ 344.020538][ T8035] ? rcu_is_watching+0x12/0xc0 [ 344.025322][ T8035] __x64_sys_mmap+0x125/0x190 [ 344.030011][ T8035] do_syscall_64+0xcd/0x250 [ 344.034536][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.040447][ T8035] RIP: 0033:0x7fb21ef7dff9 [ 344.044881][ T8035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.064504][ T8035] RSP: 002b:00007fb21fe39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 344.072931][ T8035] RAX: ffffffffffffffda RBX: 00007fb21f135f80 RCX: 00007fb21ef7dff9 [ 344.080921][ T8035] RDX: 000000000200000f RSI: 0000000000004000 RDI: 0000000020ff9000 [ 344.088919][ T8035] RBP: 00007fb21eff0296 R08: 0000000000000005 R09: 0000000000000000 [ 344.096909][ T8035] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 344.104895][ T8035] R13: 0000000000000000 R14: 00007fb21f135f80 R15: 00007ffc3df48e98 [ 344.112884][ T8035] [ 344.115906][ T8035] Modules linked in: [ 344.120934][ T8035] ---[ end trace 0000000000000000 ]--- [ 344.126986][ T29] audit: type=1400 audit(1729074425.382:639): avc: denied { execute } for pid=8034 comm="syz.2.725" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 344.148095][ T8035] RIP: 0010:follow_pfnmap_start+0x115/0xdc0 [ 344.157356][ T8035] Code: 48 c1 ea 03 80 3c 02 00 0f 85 10 0b 00 00 4c 8b bd 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d3 0a 00 00 48 c7 c0 18 72 5f 90 49 8b 57 58 48 [ 344.177038][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.184454][ T8035] RSP: 0000:ffffc90003d67468 EFLAGS: 00010202 [ 344.190717][ T8035] RAX: dffffc0000000000 RBX: ffffc90003d67548 RCX: ffffc90018a85000 [ 344.199963][ T8035] RDX: 000000000000000b RSI: ffffffff81d50caa RDI: 0000000000000058 [ 344.208090][ T8035] RBP: ffff88802ff60ba0 R08: 0000000000000007 R09: 0000000000000000 [ 344.221673][ T8035] R10: 0000000001000000 R11: 0000000000000000 R12: 0000000020ff9000 [ 344.388027][ T29] audit: type=1400 audit(1729074426.082:640): avc: denied { bind } for pid=8031 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 344.532822][ T8035] R13: 1ffff920007ace91 R14: ffff88802ebeb900 R15: 0000000000000000 [ 344.540874][ T8035] FS: 00007fb21fe396c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 344.557552][ T8035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.642812][ T8035] CR2: 000000110c3a9e45 CR3: 000000007c65e000 CR4: 00000000003526f0 [ 344.650857][ T8035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.677448][ T8035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.685566][ T8035] Kernel panic - not syncing: Fatal exception [ 344.691803][ T8035] Kernel Offset: disabled [ 344.696137][ T8035] Rebooting in 86400 seconds..